Skip to content
OpenAdvisories

Archive

February 2017

Vulnerabilities first published in this month (UTC), newest first.

1,041 results · Feed

  • Unscored —

    An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can sen…

  • Unscored —

    An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 an…

  • Unscored —

    An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructi…

  • Unscored —

    An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator (URL…

  • Unscored —

    An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all v…

  • Unscored —

    An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an auth…

  • Unscored —

    An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application's database lacks suf…

  • Unscored —

    An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program…

  • High 8.8

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —

    An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (relea…

  • Unscored —

    An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via pat…

  • Unscored —

    An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Crit…

  • Unscored —

    An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to con…

  • Unscored —

    An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy …

  • Unscored —

    An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly saniti…

  • Unscored —
    CVE-2016-9343 EPSS 10%

    An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (ex…

  • High 7.3

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —

    An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card…

  • High 7.5

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —

    An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to …

  • Unscored —

    An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Ve…

  • Unscored —

    An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Ve…

  • Critical 9.8

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Critical 9.8

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —

    An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to …

  • Unscored —

    An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search pat…

  • Unscored —

    An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web…

  • Unscored —

    An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the syste…

  • Unscored —

    An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life (EoL) and no longer…

  • Unscored —
    CVE-2016-9332 Public exploit

    An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validat…

  • Unscored —

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Critical 9.8
    CVE-2016-9361 Public exploit EPSS 20%

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Unscored —
    CVE-2016-9349 Public exploit

    An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file syste…

  • Unscored —
    CVE-2016-9351 Public exploit

    An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error…

  • Unscored —

    An issue was discovered in Sauter NovaWeb web HMI. The application uses a protection mechanism that relies on the exist…

  • Unscored —

    An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX serie…

  • Unscored —

    An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Ma…

  • Unscored —

    An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. When a specific URL…

  • Unscored —

    An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320.…