The user must be logged into the web interface in order for the exploitation to succeed.

User interaction is required for a successful exploitation. The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. At the stage of publishing this security advisory no public exploitation is known.Д¬VSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HДЄ vulnerability has been identified in SIMATIC TDC CP51M1 (All versions = V3.0), SCALANCE S612 (All versions >= V3.0), SCALANCE S623 (All versions >= V3.0), SCALANCE S627-2M (All versions >= V3.0). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.ДЄ vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). A remote attacker could use this to cause a denial of service. Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. A CVSS v3 base score of 2.5 has been calculated the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).Д¬VSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N The attacker must have local access to the system. Processing a specially crafted project file in LAquis SCADA 4.3.1.71 may trigger an out-of-bounds read, which may allow an attacker to obtain sensitive information. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password.Д¬VSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Prima Systems FlexAir, Versions 2.3.38 and prior.

This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.Д¬VSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4).

There is a lack of user input validation before copying data from project files onto the heap.Д¬VSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HДЄ Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.Д¬VSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior.

Sinvr bypass client checks