January 2013

6 results · Clear filters · Feed

• Critical 9.8
  CVE-2012-6437 EPSS 11%

  Rockwell Automation ControlLogix PLC Improper Authentication

  The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause los…

  Rockwell Automation CompactLogix and SoftLogix controllers MicroLogix 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules ICS / OT
  Jan 24, 2013
• Critical 10.0
  CVE-2012-6069

  3S CoDeSys Relative Path Traversal

  The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This co…

  Festo 3S-Smart Software Solutions CECX-X-C1 Modular Master Controller with CoDeSys CECX-X-M1 Modular Controller with CoDeSys and SoftMotion
  Jan 21, 2013
• Critical 9.8
  CVE-2012-6068

  3S CoDeSys Improper Access Control

  The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener serv…

  Festo 3S-Smart Software Solutions CECX-X-M1 Modular Controller with CoDeSys and SoftMotion CECX-X-C1 Modular Master Controller with CoDeSys
  Jan 21, 2013
• Critical 9.8
  CVE-2013-0632 Exploited Public exploit EPSS 93%

  administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and po…

  Jan 17, 2013

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2013-0422 Exploited · Ransomware Public exploit EPSS 97%

  Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) usin…

  Jan 10, 2013

  KEV May 25, 2022
• Critical 9.8
  CVE-2013-0625 Exploited Public exploit EPSS 94%

  Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentica…

  Jan 9, 2013

  KEV Mar 7, 2022