Vulnerabilidades

*** Pendiente de traducción *** A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager

*** Pendiente de traducción *** A vulnerability has been identified in CP-8031 MASTER MODULE (All versions

*** Pendiente de traducción *** Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8.

*** Pendiente de traducción *** A vulnerability has been identified in JT Open (All versions

Se ha identificado una vulnerabilidad en <br /> SIPROTEC 5 6MD85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 6MD86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 6MD89 ( CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.60), <br /> SIPROTEC 5 6MU85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7KE85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SA82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SA82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SA86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40 ), <br /> SIPROTEC 5 7SA87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SD82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SD82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SD86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SD87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SJ81 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SJ81 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SJ82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SJ82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SJ85 (CP300) (Todas las versiones &amp;gt; = V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SJ86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SK82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SK82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SK85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SL82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7SL82 (CP150) (Todas las versiones &amp;lt; V9.40 ), <br /> SIPROTEC 5 7SL86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SL87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7SS85 (CP300) (Todas versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7ST85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.60), <br /> SIPROTEC 5 7ST86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40 ), <br /> SIPROTEC 5 7SX82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7SX85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7UM85 (CP300) (Todas las versiones &amp;gt;= V7. 80 &amp;lt; V9.40), <br /> SIPROTEC 5 7UT82 (CP100) (Todas las versiones), <br /> SIPROTEC 5 7UT82 (CP150) (Todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 7UT85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9. 40), <br /> SIPROTEC 5 7UT86 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7UT87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7VE85 (CP300) ( Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7VK87 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9.40), <br /> SIPROTEC 5 7VU85 (CP300) (Todas las versiones &amp;gt;= V7.80 &amp;lt; V9. 40), <br /> SIPROTEC 5 Communication Module ETH-BA-2EL (todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 Communication Module ETH-BB-2FO (todas las versiones &amp;lt; V9.40), <br /> SIPROTEC 5 Communication Module ETH-BD-2FO (todas versiones &amp;lt; V9.40), <br /> SIPROTEC 5 Compact 7SX800 (CP050) (Todas las versiones &amp;lt; V9.40). <br /> <br /> Los dispositivos afectados carecen de una validación adecuada de los parámetros de solicitud http del servicio web alojado. Un atacante remoto no autenticado podría enviar paquetes especialmente manipulados que podrían provocar una condición de denegación de servicio del dispositivo objetivo.

*** Pendiente de traducción *** A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions

*** Pendiente de traducción *** A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions

*** Pendiente de traducción *** A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions

*** Pendiente de traducción *** Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

*** Pendiente de traducción *** Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.

*** Pendiente de traducción *** CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access the computer where the affected product is installed tampers the password file stored in the computer, the user privilege which CENTUM managed may be escalated. As a result, the control system may be operated with the escalated user privilege. To exploit this vulnerability, the following prerequisites must be met: (1)An attacker has obtained user credentials where the affected product is installed, (2)CENTUM Authentication Mode is used for user authentication when CENTUM VP is used. The affected products and versions are as follows: CENTUM CS 1000, CENTUM CS 3000 (Including CENTUM CS 3000 Entry Class) R2.01.00 to R3.09.50, CENTUM VP (Including CENTUM VP Entry Class) R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, and R6.01.00 and later, B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R7.04.51 and R8.01.01 and later

*** Pendiente de traducción *** TP-Link L2 switch T2600G-28SQ firmware versions prior to &amp;#39;T2600G-28SQ(UN)_V1_1.0.6 Build 20230227&amp;#39; uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained.