Kirill Nesterov

A memory corruption issue was discovered, related to a null pointer dereference in the web interface of industrial LTE IP modems. This issue can be exploited by a remote attacker to cause a denial of service or execute arbitrary code.

A Reliance on Cookies without Validation and Integrity Checking issue allows an attacker to bypass authentication by performing a brute force attack on a cookie parameter that can consist of only digits, gaining access to device functions.

A NULL Pointer Dereference issue was discovered, allowing an attacker to perform a denial of service attack by exploiting the application's failure to check for a NULL value.

An issue with improper restriction of operations within the bounds of a memory buffer was found. The SSH functions are vulnerable to buffer overflow conditions, potentially allowing a remote attacker to execute arbitrary code on the device.

An Improper Input Validation issue affects a service within the software, potentially allowing a remote attacker to arbitrarily read or access system resources and impact the system's availability. The vulnerability exists due to insufficient input validation, which can be exploited by a remote attacker to gain read access to arbitrary system resources and affect system availability.

The issue allows an attacker to send a malicious packet to the Common Gateway Interface (CGI) of a target device, causing it to fail while setting the port attribute. This results in a Denial of Service (DoS) attack.

The issue arises from the mishandling of URL encoding, allowing remote attackers to write to or delete files by using a crafted string.

The issue is caused by multiple stack-based buffer overflows in the IniNet embeddedWebServer. Exploitation of these issues may allow a remote attacker to execute arbitrary code via a long field in an HTTP request.

The issue allows local users to obtain sensitive information by discovering a hardcoded cleartext password used to control read access to Project files and Project Configuration files.

The issue is related to errors that occur when changing access control rules through the Telnet protocol, allowing an attacker to gain access to applications via Telnet to run commands or change settings. It also involves the use of hardcoded credentials for diagnostic services, which can be exploited by remote attackers to bypass access restrictions via a TCP session, such as a session using the telnet program.

The issue is related to the integrated web server in Siemens SIMATIC WinCC OA, which allows remote attackers to execute arbitrary code via crafted packets sent to TCP port 4999. This is due to errors that occur when processing specially formed TCP packets, enabling an attacker to exploit the issue and execute arbitrary code by sending crafted packets to the specified port.

The issue allows remote attackers to bypass the file system of the server in the context of the current user without authentication by sending specially crafted TCP packets. This is a directory traversal vulnerability that can be exploited to read arbitrary files via crafted packets to TCP port 4999.