Nozomi Networks

A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources, which may lead to a Denial of Service (DoS) limited to BACNet communication. This issue may potentially lead to system compromise.

A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability, which could lead to full system access and/or Denial of Service (DoS). The vulnerability is related to a critical function in the CODESYS V3 service that lacks proper authentication.

A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denial-of-service attack.

A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited Denial of Service (DoS).

A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.

A low privileged remote attacker can overwrite an arbitrary file on the filesystem, leading to a Denial of Service (DoS) and data loss.

A low privileged remote attacker can overwrite an arbitrary file on the filesystem, which may lead to an arbitrary file read with root privileges.

A low privileged remote attacker can specify an arbitrary file on the filesystem, which may lead to arbitrary file writes with root privileges. This issue allows a remote attacker with low privileges to choose any file on the filesystem, potentially enabling them to write any file with root privileges.

The issue is related to a buffer overflow in the MPD package of TwinCAT/BSD, which can be exploited by an authenticated, low-privileged local attacker. This can lead to a Denial-of-Service (DoS) condition on the daemon and allow the execution of code in the context of the "root" user via a crafted HTTP request. The exploitation can potentially result in system compromise.

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker.

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker.