AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service conditio ...
Continue Reading
August 31, 2022
AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a val ...
Continue Reading
August 31, 2022
AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA ...
Continue Reading
August 31, 2022
MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive.Read More ...
Continue Reading
August 31, 2022
MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a denial-of-service condition or potentially bricking ...
Continue Reading
August 31, 2022
OpenShift doesn't properly verify subdomain ownership, which allows route takeover. Once a custom route is created, the user must update the DNS provider by creating a canonical name (CNAME) record (i ...
Continue Reading
August 31, 2022
It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.Read More ...
Continue Reading
August 31, 2022
Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.Read More ...
Continue Reading
August 31, 2022
Back to Main
