EUVD-2020-8198

Malware in sbrugna...

CVE-2020-16232

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file...

CVE-2020-16232

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file...

CVE-2020-16232

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file...

Buffer overflow

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file...

CVE-2020-16232 Yokogawa WideField3 Buffer Copy Without Checking Size of Input

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file...

CVE-2020-16232 Yokogawa WideField3 Buffer Copy Without Checking Size of Input

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file...

CVE-2020-16232

CVE-2020-16232 affects Yokogawa WideField3 (R1.01–R4.03). The root cause is a buffer copy/overflow when loading a maliciously crafted project file, leading to potential abnormal termination or reliability impact. Yokogawa has released revision R4.04 to address the vulnerability. CISA/ICS advisori...

The vulnerability of the programming tool WideField3 for the programmable logical controller FA-M3 allows a intruder to trigger a service failure.

The vulnerability of the programming tool WideField3 for the programmable logical controller FA-M3 lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an intruder to cause a malfunction in the system’s operation...

Yokogawa WideField3

1. EXECUTIVE SUMMARY CVSS v3 2.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Yokogawa Equipment: Main equipment Vulnerability: Buffer Copy Without Checking Size of Input 2. RISK EVALUATION Successful exploitation of this vulnerability could terminate the program abnormally...

Command Execution Vulnerability in WideField3

WideField3 is a PLC programming software developed by Yokogawa Electric Group. A command execution vulnerability exists in WideField3, which can be exploited by an attacker to execute malicious code...

Logic Flaw Vulnerability in Widefield3

Widefield3, also known as Yokogawa PLC Programming Software, is a versatile PLC programming tool. Widefield3 suffers from a logic flaw vulnerability that can be exploited by an attacker to reconstruct the protection password of a program block or macro program...