• 1
  • 2
  • 3 (current)
Donnerstag, 08.08.2024
14:00
US CERT (ICS)
Dorsett Controls InfoScan
Titel
Dorsett Controls InfoScan
Veröffentlicht
8. August 2024 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Dorsett Controls Equipment: InfoScan Vulnerabilities: Exposure of Sensitive Information To An Unauthorized Actor, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to expose sensitive information, resulting in data theft and ...
Mittwoch, 07.08.2024
02:00
BOSCH PSIRT
Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices
Titel
Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices
Veröffentlicht
7. August 2024 02:00
URL
https://psirt.bosch.com/security-advisories/bosch-sa-587194-bt.html
Text

BOSCH-SA-587194-BT: DIVAR IP System Manager is a central user interface that provides an easy system setup, configuration and application software upgrades through an easily accessible web-based application. Multiple Curl vulnerabilities in the Git for Windows component have been discovered in DIVAR IP System Manager versions prior to 2.3.2, affecting several ...

Freitag, 02.08.2024
19:17
US CERT
Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization
Titel
Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization
Veröffentlicht
2. August 2024 19:17
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-326a
Text
EXECUTIVE SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team assessment (RTA) at the request of a critical infrastructure organization. During RTAs, CISA’s red team simulates real-world malicious cyber operations to assess an organization’s cybersecurity detection and response capabilities. In coordination with the assessed organization, CISA is ...
02:00
SIEMENS CERT
SSA-857368 V1.0: Multiple Vulnerabilities in Omnivise T3000
Titel
SSA-857368 V1.0: Multiple Vulnerabilities in Omnivise T3000
Veröffentlicht
2. August 2024 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-857368.html
Text
Omnivise T3000 contains multiple vulnerabilities that could allow an attacker to escalate privileges. Siemens Energy has released patches for several affected products and recommends to apply the patches. Siemens Energy is preparing further fixes for versions still under maintenance and recommends countermeasures for products where fixes are not, or not ...
Donnerstag, 01.08.2024
14:00
US CERT (ICS)
Vonets WiFi Bridges
Titel
Vonets WiFi Bridges
Veröffentlicht
1. August 2024 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-08
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Vonets Equipment: VAR1200-H, VAR1200-L, VAR600-H, VAP11AC, VAP11G-500S, VBG1200, VAP11S-5G, VAP11S, VAR11N-300, VAP11G-300, VAP11N-300, VAP11G, VAP11G-500, VBG1200, VAP11AC, VGA-1000 Vulnerabilities: Use of Hard-coded Credentials, Improper Access Control, Path Traversal, Command Injection, Improper Check or Handling of Exceptional ...
14:00
US CERT (ICS)
Johnson Controls exacqVision Server Web Service
Titel
Johnson Controls exacqVision Server Web Service
Veröffentlicht
1. August 2024 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-02
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.6 ATTENTION: Exploitable remotely Vendor: Johnson Controls Inc. Equipment: exacqVision Web Service Vulnerability: Permissive Cross-domain Policy with Untrusted Domains 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send an unauthorized request or access data from an untrusted domain. ...
14:00
US CERT (ICS)
AVTECH IP Camera
Titel
AVTECH IP Camera
Veröffentlicht
1. August 2024 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor: AVTECH SECURITY Corporation Equipment: IP camera Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to inject and execute commands as the owner of the ...
14:00
US CERT (ICS)
Johnson Controls exacqVision Web Service
Titel
Johnson Controls exacqVision Web Service
Veröffentlicht
1. August 2024 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-04
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable remotely Vendor: Johnson Controls, Inc. Equipment: exacqVision Web Service Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform a man-in-the-middle attack and gain access to sensitive information. 3. TECHNICAL ...
14:00
US CERT (ICS)
Johnson Controls exacqVision Client and exacqVision Server
Titel
Johnson Controls exacqVision Client and exacqVision Server
Veröffentlicht
1. August 2024 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-01
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.0 ATTENTION: Exploitable remotely Vendor: Johnson Controls Inc. Equipment: exacqVision Client, exacqVision Server key Vulnerability: Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to be able to decrypt communications between exacqVision Server and exacqVision Client due ...
  • 1
  • 2
  • 3 (current)

Letzte Updates

BOSCH PSIRT
31.10.2024
SIEMENS CERT
22.11.2024
US CERT
08.11.2024
US CERT (ICS)
21.11.2024

Nach Quelle

Archiv

2024
2023
2022
2021
2020
2019
2018
2017

Feeds