Reid Wightman

A security issue exists in GE Vernova Enervista UR Setup on Windows. The issue affects versions prior to 8.6.

A flaw exists in GE Vernova Enervista UR Setup on Windows that permits file manipulation.

Exploitation of this issue could allow an attacker to modify firmware and gain full access to the device. Successful exploitation could lead to complete system compromise.

An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to improper sanitizing of user input in the Main Web Interface (endpoint `tls iotgen setting`).

An unauthenticated remote attacker may exploit a stack-based buffer overflow in the u-link Management `API` to gain full access to affected devices.

A buffer over-read issue exists in ABB AC500 V2. This can potentially lead to unexpected system behavior.

An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to improper sanitizing of user input in the Main Web Interface. The vulnerable endpoint is `/event mail test`. The lack of input sanitization allows for arbitrary command execution.

A memory leak flaw in the iSTAR Config Utility could lead to data leaks, potentially exposing sensitive information. The issue affects versions prior to 6.9.5. Updating to version 6.9.5 or later is essential to mitigate this issue.

The issue is related to a buffer overflow that could occur under certain circumstances in the iSTAR Configuration Utility (ICU) tool.

The issue is related to insufficient key length and exchange in the communication between exacqVision Client and exacqVision Server, which may allow a remote attacker to gain unauthorized access to protected information. The communication may use inadequate encryption, potentially compromising the security of the data.

The issue arises when the Software House C•CURE 9000 installer utilizes unnecessarily wide permissions under certain circumstances.

The issue arises when the Software House C●CURE 9000 installer uses weak credentials under certain circumstances.

Name of the Vulnerable Software and Affected Versions: Johnson Controls Software House iStar Pro Door Controller (affected versions not specified) Description: The issue is related to the lack of authentication for a critical function in the ICU tool and iSTAR Pro door controller, which can be exploited by a remote attacker to perform a Machine-in-the-Middle attack. This could impact door control and configuration. The attack exploits the communication between the ICU tool and the iSTAR Pro door controller. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the storage of passwords in a recoverable format in the Unitronics Vision programmable logic controllers. This allows an attacker to retrieve the Information Mode password in plain text without authentication.

The issue is related to an Incorrect Privilege Assignment vulnerability that allows a remote authenticated attacker, logged in as a non-administrator user, to disclose the credentials (user ID and password) of a user with a lower access level than the attacker. This can be achieved by sending a specially crafted packet. The vulnerability may allow an attacker to gain unauthorized access to protected information.

The issue is related to a lack of authentication for a critical function, allowing a remote attacker to gain unauthorized access to confidential information by sending specially crafted packets. This can enable the attacker to bypass authentication and connect to the products illegally.

The issue is related to the use of externally-controlled input to select classes or code, also known as 'Unsafe Reflection'. This allows a remote unauthenticated attacker to execute malicious code by RPC with a path to a malicious library while connected to the products. The exploitation of this issue may enable a remote attacker to execute arbitrary code by injecting a reference to a malicious library into the loading process.

A download of code without integrity check issue in PLCnext products allows a remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.

A vulnerability due to incorrect permission assignment for critical resources in PLCnext products allows a remote attacker with low privileges to gain full access to the affected devices.

The issue allows an unauthenticated remote attacker to modify some or all applications on a PLC due to a lack of code integrity check during download. This can potentially lead to unauthorized access, modification, or deletion of data.