Advisories

SCADA APDAR содержит компонент CodeMeter Runtime Network Server (порт 22350/TCP по умолчанию), уязвимый для атак типов «Отказ в обслуживании» или «Утечки информации». Злоумышленник, действующий удаленно, путем отправки специально подготовленных TCP/IP-пакетов на сервер CodeMeter Runtime может как получить произвольные данные из памяти кучи (heap) сервера, так и вызвать его отказ в обслуживании.

Filter

20 January 2022

CVE-2021-23843

KLCERT-20-038

KLCERT-20-038: Bosch AMC2. Missing authentication for critical function

20 January 2022

CVE-2021-23842

KLCERT-20-037

KLCERT-20-037: Bosch AMC2. Information Disclosure due to Hard-coded Cryptographic Key

13 July 2021

CVE-2020-25184

KLCERT-20-026

KLCERT-20-026: Rockwell Automation ISaGRAF Runtime: Information Disclosure due to cleartext storage of passwords in a file and memory

13 July 2021

CVE-2020-25180

KLCERT-20-025

KLCERT-20-025: Rockwell Automation ISaGRAF Runtime: Information Disclosure due to Hard-coded Cryptographic Key

13 July 2021

CVE-2020-25182

KLCERT-20-024

KLCERT-20-024: Rockwell Automation ISaGRAF Runtime: Code Execution due to Uncontrolled Search Path Element

13 July 2021

CVE-2020-25178

KLCERT-20-023

KLCERT-20-023: Rockwell Automation ISaGRAF Runtime: Information Disclosure due to Cleartext Transmission of Information over IXL protocol

13 July 2021

CVE-2020-25176

KLCERT-20-022

KLCERT-20-022: Rockwell Automation ISaGRAF Runtime: Code Execution due to Relative Path Traversal

02 July 2021

CVE-2021-23852

KLCERT-21-032

KLCERT-21-032: Robert Bosch GmbH CPP HD/MP cameras. Denial of Service via GET HTTP request

02 July 2021

CVE-2021-23853

KLCERT-21-030

KLCERT-21-030: Robert Bosch GmbH CPP HD/MP cameras. Improper Input Validation in Web service application

02 July 2021

CVE-2021-23854

KLCERT-21-019

KLCERT-21-019: Robert Bosch GmbH CPP HD/MP cameras. Reflected XSS in a page parameter

2

...

Select a date

Search by vendor

Materials

Advisories RSS feed

Back to top

Select a date

Search by vendor

Filter