David Formby

A vulnerabilidade permite que um invasor provoque um estouro de buffer baseado na pilha ao gravar nos campos de nome ou descrição dados com tamanho superior ao do buffer correspondente. Isso pode levar à falha do dispositivo afetado ou à sua falta de resposta.

The issue is related to the use of insufficiently random values, which could allow a remote attacker to hijack TCP connections when using Ethernet communication.

A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs. The affected products generate insufficiently random TCP initial sequence numbers, which may allow an attacker to predict the numbers from previous values. This could enable an attacker to spoof or disrupt TCP connections.

An issue with improper restriction of excessive authentication attempts was found, allowing for repeated entry of incorrect passwords without penalties.

A "Reusing a Nonce, Key Pair in Encryption" issue was discovered, where the affected product reuses nonces. This may allow an attacker to capture and replay a valid request until the nonce is changed.

An issue was discovered where log-in credentials are sent over the network with Base64 encoding, leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application. This issue is related to insufficient protection of credentials, which could allow a remote attacker to intercept credentials and gain access to the web application.

The issue allows remote attackers to obtain sensitive information from device memory by reading a padding field of an Ethernet packet.

The issue is related to the improper initialization of padding fields in Ethernet packets, which can be exploited by remote attackers to obtain sensitive information by reading packet data.

The issue allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame.

The issue is related to the improper generation of TCP initial sequence number (ISN) values, making it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

The issue concerns the generation of random values for TCP Initial Sequence Numbers (ISNs) in the Ethernet card. Specifically, it does not properly generate these values, making it easier for remote attackers to spoof packets by predicting the ISNs.