Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Rei Henigman

Researcher fromClaroty
#8860of 60,399
36.1Total CVSS
Vulnerabilities · 4
High
2
Critical
2
PT-2021-4326
2021-10-06
10
CVE-2021-38395
Honeywell
Honeywell Experion Pks
The issue exists due to improper neutralization of special elements. This may allow a remote attacker to execute arbitrary code and cause a denial-of-service condition, potentially through cross-site scripting attacks.
PT-2021-4327
2021-10-06
10
CVE-2021-38397
Honeywell
Honeywell Experion Pks
The issue is related to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition. This could potentially enable an attacker to disrupt the system's operation.
PT-2020-6349
2020-11-10
8.3
CVE-2020-7566
Schneider Electric
Modicon M100
A vulnerability exists due to a small space of random values, which could allow an attacker to break encryption keys by capturing traffic between EcoStruxure Machine - Basic software and the Modicon controller. This can be exploited using a brute force attack, potentially allowing a remote attacker to bypass existing security restrictions.
PT-2020-6350
2020-11-10
7.8
CVE-2020-7567
Schneider Electric
Ecostruxure Machine - Basic
A Missing Encryption of Sensitive Data issue exists that could allow an attacker to find the password hash when they have captured the traffic between EcoStruxure Machine - Basic software and the Modicon controller and broke the encryption keys. This could be exploited by a remote attacker to obtain the encryption key.