|
210101
|
6.7 |
MEDIUM
Local
|
sprecher-automation
|
sprecon-e
|
Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitrary code. This firmware lacks the validation of the input values on the device s…
|
CWE-20 CWE-77
Improper Input Validation Command Injection
|
CVE-2020-11496
|
2024-11-21 13:58 |
2020-10-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210102
|
7.5 |
HIGH
Network
|
br-automation
|
automation_runtime
|
A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a de…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2020-11637
|
2024-11-21 13:58 |
2020-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210103
|
4.3 |
MEDIUM
Network
|
br-automation
|
gatemanager_9250_firmware gatemanager_4260_firmware gatemanager_8250_firmware
|
A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view log information reserve…
|
NVD-CWE-Other
|
CVE-2020-11646
|
2024-11-21 13:58 |
2020-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210104
|
6.5 |
MEDIUM
Network
|
br-automation
|
gatemanager_9250_firmware gatemanager_4260_firmware gatemanager_8250_firmware
|
A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to limit availability of GateManager ins…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-11645
|
2024-11-21 13:58 |
2020-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210105
|
6.5 |
MEDIUM
Network
|
br-automation
|
gatemanager_9250_firmware gatemanager_4260_firmware gatemanager_8250_firmware
|
The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to generate fake audit lo…
|
NVD-CWE-Other
|
CVE-2020-11644
|
2024-11-21 13:58 |
2020-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210106
|
6.5 |
MEDIUM
Network
|
br-automation
|
gatemanager_9250_firmware gatemanager_4260_firmware gatemanager_8250_firmware
|
An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view information of devices bel…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2020-11643
|
2024-11-21 13:58 |
2020-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210107
|
6.5 |
MEDIUM
Network
|
br-automation
|
sitemanager
|
The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability of SiteManager instances.
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2020-11642
|
2024-11-21 13:58 |
2020-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210108
|
6.5 |
MEDIUM
Network
|
br-automation
|
sitemanager
|
A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances.
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2020-11641
|
2024-11-21 13:58 |
2020-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210109
|
9.8 |
CRITICAL
Network
|
zabbix opensuse debian
|
zabbix leap backports_sle debian_linux
|
Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.
|
NVD-CWE-noinfo
|
CVE-2020-11800
|
2024-11-21 13:58 |
2020-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210110
|
9.8 |
CRITICAL
Network
|
pexip
|
reverse_proxy_and_turn_server pexip_infinity
|
Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN.
|
CWE-20
Improper Input Validation
|
CVE-2020-11805
|
2024-11-21 13:58 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|