Cyberdanube

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** The PROFINET service is affected by a buffer overflow, which occurs when a program writes more data to a block of memory than it can hold. This issue exists in the default configuration and allows an unauthenticated remote attacker to reboot the device or execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PLCnext Engineer (affected versions not specified) **Description** An unauthenticated denial-of-service issue exists in the PLCnext Engineer communication interface. A remote attacker can interrupt access via the client application, which prevents communication until the PLCnext service is manually restarted. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** An authenticated attacker with low privileges can access an endpoint in the controller web interface that is vulnerable to SQL injection. This issue affects a SQLite database used exclusively for storing notification messages, limiting the impact to the system notification functionality. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements used in an OS command. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.