Vulnerabilidades

*** Pendiente de traducción *** Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8.

*** Pendiente de traducción *** A vulnerability has been identified in JT Open (All versions

Se ha identificado una vulnerabilidad en <br /> SIPROTEC 5 6MD85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 6MD86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 6MD89 ( CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.60), <br /> SIPROTEC 5 6MU85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7KE85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SA82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SA82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SA86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40 ), <br /> SIPROTEC 5 7SA87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SD82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SD82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SD86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SD87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SJ81 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SJ81 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SJ82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SJ82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SJ85 (CP300) (Todas las versiones &amp;gt; = V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SJ86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SK82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SK82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SK85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SL82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SL82 (CP150) (Todas las versiones &amp;lt; V9.40 ), <br /> SIPROTEC 5 7SL86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SL87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SS85 (CP300) (Todas versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7ST85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.60), <br /> SIPROTEC 5 7ST86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40 ), <br /> SIPROTEC 5 7SX82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SX85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7UM85 (CP300) (Todas las versiones &amp;gt;= V7. 80 &amp;lt; V9.40), <br /> SIPROTEC 5 7UT82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7UT82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7UT85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9. 40), <br /> SIPROTEC 5 7UT86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7UT87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7VE85 (CP300) ( Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7VK87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7VU85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9. 40), <br /> SIPROTEC 5 Communication Module ETH-BA-2EL (todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 Communication Module ETH-BB-2FO (todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 Communication Module ETH-BD-2FO (todas versiones &amp;lt; V9.40), <br /> SIPROTEC 5 Compact 7SX800 (CP050) (Todas las versiones &amp;lt; V9.40). <br /> <br /> Los dispositivos afectados carecen de una validación adecuada de los parámetros de solicitud http del servicio web alojado. Un atacante remoto no autenticado podría enviar paquetes especialmente manipulados que podrían provocar una condición de denegación de servicio del dispositivo objetivo.

*** Pendiente de traducción *** A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions

*** Pendiente de traducción *** A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions

*** Pendiente de traducción *** A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions

*** Pendiente de traducción *** Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

*** Pendiente de traducción *** Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.

*** Pendiente de traducción *** CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access the computer where the affected product is installed tampers the password file stored in the computer, the user privilege which CENTUM managed may be escalated. As a result, the control system may be operated with the escalated user privilege. To exploit this vulnerability, the following prerequisites must be met: (1)An attacker has obtained user credentials where the affected product is installed, (2)CENTUM Authentication Mode is used for user authentication when CENTUM VP is used. The affected products and versions are as follows: CENTUM CS 1000, CENTUM CS 3000 (Including CENTUM CS 3000 Entry Class) R2.01.00 to R3.09.50, CENTUM VP (Including CENTUM VP Entry Class) R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, and R6.01.00 and later, B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R7.04.51 and R8.01.01 and later

*** Pendiente de traducción *** TP-Link L2 switch T2600G-28SQ firmware versions prior to &amp;#39;T2600G-28SQ(UN)_V1_1.0.6 Build 20230227&amp;#39; uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained.

*** Pendiente de traducción *** Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier

*** Pendiente de traducción *** Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted Firmware update file, alter the information, cause a denial-of-service (DoS) condition, and/or execute arbitrary code. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131).