6394 matches found
PT-2019-13869 · Mitsubishi · Me-Rtu
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description: An unauthenticated remote configuration download issue allows an attacker to download the smartRTU's...
PT-2019-13872 · Mitsubishi · Me-Rtu
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 INEA ME-RTU devices through 3.0 Description: An issue was discovered that allows an attacker to gain unauthorized access to the RTU due to undocumented hard-coded user passwords for...
PT-2019-13873
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description An unauthenticated remote OS Command Injection issue allows an attacker to execute arbitrary commands on the RTU...
Hardcoded credentials
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...
Authentication flaw
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on an...
CVE-2019-13553
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...
CVE-2019-13549
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on an...
eQ-3 Homematic CCU3 Session Fixation Vulnerability
The eQ-3 Homematic CCU3 is a central control unit for smart home systems from eQ-3 Germany. A session fixation vulnerability exists in the eQ-3 Homematic CCU3 using firmware version 3.41.11, which can be exploited by an attacker to log in and control the system by creating a session ID and sendin...
eQ-3 Homematic CCU3 Remote Code Execution Vulnerability (CNVD-2020-14281)
The eQ-3 Homematic CCU3 is a central control unit for smart home systems from eQ-3 Germany. A remote code execution vulnerability exists in the ReGa.runScript method in the eQ-3 Homematic CCU3 using firmware version 3.41.11, which can be exploited by an attacker to execute code and compromise the...
CVE-2019-15265
A vulnerability in the bridge protocol data unit BPDU forwarding functionality of Cisco Aironet Access Points APs could allow an unauthenticated, adjacent attacker to cause an AP port to go into an error disabled state. The vulnerability occurs because BPDUs received from specific wireless client...
CVE-2019-15265 Cisco Aironet Access Points Bridge Protocol Data Unit Port Disable Denial of Service Vulnerability
A vulnerability in the bridge protocol data unit BPDU forwarding functionality of Cisco Aironet Access Points APs could allow an unauthenticated, adjacent attacker to cause an AP port to go into an error disabled state. The vulnerability occurs because BPDUs received from specific wireless client...
Docker Containers Riddled with Graboid Crypto-Worm
The Docker cloud containerization technology is the target for a just-discovered cryptojacking worm dubbed Graboid. According to researchers at Palo Alto’s Unit 42, the worm, which looks to mine the Monero cryptocurrency, has infected more than 2,000 unsecured Docker Engine Community Edition host...
Race condition
A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...
UBUNTU-CVE-2019-17345
An issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a denial of service because mishandling of failed IOMMU operations causes a bug check during the cleanup of a crashed guest...
CVE-2008-5704
src/unittest.c in gpsdrive aka gpsdrive-scripts 2.10pre4 might allow local users to overwrite arbitrary files via a symlink attack on the /tmp/gpsdrive-unit-test/proc temporary file, a different vector than CVE-2008-4959 and CVE-2008-5380...
Mitsubishi Q62P Power Supply Unit Detection
Binary data 765129.prm...
Mitsubishi Q61SP Power Supply Unit Detection
Binary data 765128.prm...
Mitsubishi Q64RP Power Supply Unit Detection
Binary data 765132.prm...