Federico Maggi

**Name of the Vulnerable Software and Affected Versions** eProsima Fast DDS versions prior to 2.4.0 **Description** The issue allows an attacker to send a specially crafted packet to flood a target device with unwanted traffic. This may result in a denial-of-service condition and information exposure. **Recommendations** For versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** OCI OpenDDS versions prior to 3.18.1 **Description** The issue arises when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, potentially resulting in a denial-of-service condition. **Recommendations** For versions prior to 3.18.1, update to version 3.18.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** OCI OpenDDS versions prior to 3.18.1 **Description** The issue arises from inconsistent handling of a length parameter in relation to the actual length of associated data. This inconsistency may allow an attacker to remotely execute arbitrary code. **Recommendations** For OCI OpenDDS versions prior to 3.18.1, update to version 3.18.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Eclipse CycloneDDS versions prior to 0.8.0 **Description** The issue is related to a write-what-where condition that may allow an attacker to write arbitrary values in the XML parser. This could potentially be exploited by an attacker. **Recommendations** For Eclipse CycloneDDS versions prior to 0.8.0, update to version 0.8.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the XML parser to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OCI OpenDDS versions prior to 3.18.1 **Description** The issue arises when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure. **Recommendations** For versions prior to 3.18.1, update to version 3.18.1 or later to resolve the issue. As a temporary workaround, consider implementing traffic filtering measures to restrict unwanted packets until a patch is applied. Restrict access to the network to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** KUKA.Sim Pro version 3.1 **Description** The issue concerns the transmission of simulation models in plaintext from a KUKA-maintained server to devices requesting these models. **Recommendations** For KUKA.Sim Pro version 3.1, consider implementing encryption for model transmissions to prevent unauthorized access to the models. As a temporary workaround, restrict access to the server hosting the simulation models to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: JUUKO K-808 versions prior to numbers ending ...9A, ...9B, ...9C, etc. Description: The issue allows remote attackers to execute commands on vulnerable installations of the equipment. No authentication is required to exploit this issue. The flaw lies in the handling of data between the transmitter and receiver. By using a fixed control code used for encoding data transmitted over radio frequency, an attacker can spoof unauthorized commands to the receiver. This can be used to send commands to physical equipment controlled by the device. Recommendations: For versions prior to numbers ending ...9A, ...9B, ...9C, etc., consider restricting access to the device until a patch is available. As a temporary workaround, avoid using the fixed control code for encoding data transmitted over radio frequency until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: JUUKO K-800 versions prior to numbers ending ...9A Description: The issue allows attackers to perform a replay attack and command forgery, potentially enabling them to replay commands, control the device, view commands, or cause the device to stop running. Recommendations: For JUUKO K-800 versions prior to numbers ending ...9A, update the firmware to a version with numbers ending ...9A or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Hetronic Nova-M versions prior to r161 **Description** The issue allows for unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state due to the use of fixed codes that can be reproducible by sniffing and re-transmission. **Recommendations** For versions prior to r161, update to version r161 or later to resolve the issue. As a temporary workaround, consider implementing additional authentication or encryption mechanisms to prevent sniffing and re-transmission of commands. Restrict access to the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Losant Arduino MQTT Client versions prior to V2.7 **Description** This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is not required to exploit this issue. The specific flaw exists within the parsing of MQTT PUBLISH packets, resulting from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this issue to execute code in the context of the current process. **Recommendations** For versions prior to V2.7, update to version V2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the MQTT PUBLISH packet parsing functionality until a patch is available. Avoid using the Losant Arduino MQTT Client with untrusted MQTT connections until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Telecrane F25 Series Radio Controls versions prior to 00.0A **Description** The issue concerns the use of fixed codes in the Telecrane F25 Series Radio Controls, which can be reproduced by sniffing and re-transmission. This allows for unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state. **Recommendations** For versions prior to 00.0A, update to version 00.0A or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SAGA1-L8B versions prior to A0.10 **Description** The issue allows an attacker with physical access to the product to potentially reprogram it. **Recommendations** For versions prior to A0.10, update the firmware to version A0.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SAGA1-L8B versions prior to A0.10 **Description** The issue allows an attacker to force-pair the device without human interaction, potentially leading to remote code execution. **Recommendations** For versions prior to A0.10, update the firmware to version A0.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SAGA1-L8B versions prior to A0.10 **Description** The issue allows for a replay attack and command forgery. **Recommendations** For versions prior to A0.10, update the firmware to version A0.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 **Description** The issue concerns the use of hard-coded credentials in the software, which could allow an attacker to reset passwords for the controller. **Recommendations** For Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, consider changing the hard-coded credentials to unique, secure passwords to prevent unauthorized access.

**Name of the Vulnerable Software and Affected Versions** npm mosca version 2.8.1 **Description** This issue allows remote attackers to deny service on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists within the processing of topics. A crafted regular expression can cause the broker to crash, allowing an attacker to deny access to the target system. **Recommendations** For npm mosca version 2.8.1, update to a version that fixes the regular expression parsing issue to prevent denial-of-service attacks. As a temporary workaround, consider restricting access to the topic processing functionality until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) versions 5.21 and earlier **Description** The issue allows remote attackers to obtain sensitive information, including intranet IP addresses and enumerations of valid parameter values, by making a direct request to `hc`. This sensitive information is revealed in an error message or a cookie. **Recommendations** For Hummingbird Collaboration versions 5.21 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.