Bulletins | CERT@VDE

1
2
3 (current)

Donnerstag, 05.12.2024

13:00

US CERT (ICS)

AutomationDirect C-More EA9 Programming Software

Titel

AutomationDirect C-More EA9 Programming Software

Veröffentlicht

5. Dezember 2024 13:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-340-01

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: AutomationDirect Equipment: C-More EA9 Programming Software Vulnerabilities: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in memory corruption; a buffer overflow condition may allow remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED ...

13:00

US CERT (ICS)

Planet Technology Planet WGS-804HPT

Titel

Planet Technology Planet WGS-804HPT

Veröffentlicht

5. Dezember 2024 13:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-340-02

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Planet Technology Equipment: Planet WGS-804HPT Vulnerabilities: Stack-based Buffer Overflow, Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Integer Underflow (Wrap or Wraparound) 2. RISK EVALUATION Successful exploitation of these vulnerabilities could ...

Dienstag, 03.12.2024

13:00

US CERT (ICS)

ICONICS and Mitsubishi Electric GENESIS64 Products

Titel

ICONICS and Mitsubishi Electric GENESIS64 Products

Veröffentlicht

3. Dezember 2024 13:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-04

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Low attack complexity Vendor: ICONICS, Mitsubishi Electric Equipment: ICONICS GENESIS64 Product Suite and Mitsubishi Electric MC Works64 Vulnerabilities: Uncontrolled Search Path Element, Dead Code 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in remote code execution. 3. TECHNICAL DETAILS ...

13:00

US CERT (ICS)

Open Automation Software

Titel

Open Automation Software

Veröffentlicht

3. Dezember 2024 13:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-03

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Low attack complexity Vendor: Open Automation Software Equipment: Open Automation Software Vulnerability: Incorrect Execution-Assigned Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker executing code with escalated privileges. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following ...

13:00

US CERT (ICS)

Ruijie Reyee OS

Titel

Ruijie Reyee OS

Veröffentlicht

3. Dezember 2024 13:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Ruijie Equipment: Reyee OS Vulnerabilities: Weak Password Recovery Mechanism for Forgotten Password, Exposure of Private Personal Information to an Unauthorized Actor, Premature Release of Resource During Expected Lifetime, Insecure Storage of Sensitive Information, Use of Weak ...

13:00

US CERT (ICS)

Ruijie Reyee OS (Update A)

Titel

Ruijie Reyee OS (Update A)

Veröffentlicht

3. Dezember 2024 13:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01

Text