Ilya Karpov

The issue concerns the storage of sensitive information in cleartext, potentially allowing access to attackers or low-privileged users.

The issue is related to five buffer overflows in the built-in web server of the Moxa NPort IAW5000A-I/O series. This may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code.

The issue is related to two buffer overflows in the built-in web server, which may allow a remote attacker to cause a denial-of-service condition.

The issue allows data to be copied without validation in the built-in web server, potentially enabling a remote attacker to cause denial-of-service conditions.

The issue is related to improper input validation in the built-in web server, which may allow a remote attacker to execute commands.

The issue could expose cleartext credentials if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.

The issue concerns the storage and transmission of credentials for third-party services in cleartext by the built-in WEB server. This affects the confidentiality of the credentials, as they can be easily intercepted or accessed.

The issue concerns the built-in WEB server, which has incorrectly implemented protections from session fixation. This may allow an attacker to gain access to a session and hijack it by stealing the user's cookies.

The issue concerns improper privilege management in the built-in WEB server, potentially allowing an attacker with user privileges to perform requests with administrative privileges.

A Missing Encryption of Sensitive Data issue exists, allowing an attacker to read network traffic over the HTTP protocol.

The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to perform arbitrary actions. This is due to improper restriction of rendered UI layers or frames, allowing an attacker to trick a user into initiating an unintended action.

The issue is related to the implementation of SSH/Telnet protocols in the MOXA NPort IAW5000A-I/O Series web server software, which lacks sufficient restrictions on authentication attempts. This may allow a remote attacker to bypass security restrictions through brute force attacks.

The issue is related to the use of a hard-coded cryptographic key in the RSLogix 500 binary file, which could allow an attacker to identify the key and use it for further cryptographic attacks. This could ultimately lead to a remote attacker gaining unauthorized access to the controller. The vulnerability may allow a remote attacker to elevate their privileges.

The WebUI of the affected device is susceptible to a denial-of-service attack. This can be achieved by establishing more than 120 connections.

The WebUI of the affected devices allows for plaintext transmission of user credentials by default, which can be done over HTTP.

The WebUI of the affected devices leaks private information in firmware images.

The WebUI of the affected device is susceptible to brute-force attacks due to improper restriction of excessive authentication attempts. This allows attackers to attempt numerous login combinations without significant impediment.

A weakness in the password hashing algorithm of Schneider Electric Ampla MES could be exploited to reverse a user's password when Simple Security is used.

The issue is related to hard-coded accounts in the communication modules of the affected controllers. This concern is also associated with the FTP server vulnerability in the programmable logic controllers' firmware, which involves the use of pre-set credentials. Exploitation of this issue could allow a remote attacker to gain access to the device.

An authorization bypass issue exists in the integrated web server of the affected devices, allowing a remote attacker to gain full access to the device by bypassing the authorization system. The vulnerability is related to insufficient access control in the web server, which could enable a remote attacker to bypass authentication and obtain full control over the device.