Skip to content
OpenAdvisories

Archive

13 February 2017

Vulnerabilities first published on this day (UTC), newest first.

124 results · Feed

  • Unscored —

    An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via pat…

  • Unscored —

    An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Crit…

  • Unscored —

    An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to con…

  • Unscored —

    An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy …

  • Unscored —

    An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly saniti…

  • Unscored —
    CVE-2016-9343 EPSS 10%

    An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (ex…

  • High 7.3

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —

    An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card…

  • High 7.5

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —

    An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to …

  • Unscored —

    An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Ve…

  • Unscored —

    An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Ve…

  • Critical 9.8

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Critical 9.8

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —

    An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to …

  • Unscored —

    An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search pat…

  • Unscored —

    An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web…

  • Unscored —

    An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the syste…

  • Unscored —

    An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life (EoL) and no longer…

  • Unscored —
    CVE-2016-9332 Public exploit

    An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validat…

  • Unscored —

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Critical 9.8
    CVE-2016-9361 Public exploit EPSS 20%

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —
    CVE-2016-9349 Public exploit

    An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file syste…

  • Unscored —
    CVE-2016-9351 Public exploit

    An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error…

  • Unscored —

    An issue was discovered in Sauter NovaWeb web HMI. The application uses a protection mechanism that relies on the exist…

  • Unscored —

    An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX serie…

  • Unscored —

    An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Ma…

  • Unscored —

    An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. When a specific URL…

  • Unscored —

    An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320.…

  • Unscored —

    An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with th…

  • Unscored —

    An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0.…

  • Unscored —

    An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, a…

  • Unscored —
    CVE-2016-5809 Public exploit

    An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX serie…

  • Unscored —

    An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, a…

  • Unscored —

    An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0.…

  • Unscored —

    An issue was discovered in OmniMetrix OmniView, Version 1.2. Insufficient password requirements for the OmniView web ap…

  • Unscored —

    An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credent…

  • Unscored —

    An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. User controlled inp…

  • Unscored —

    An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGu…