3sjay / vulns

Info about identified vulnerabilities

Information about Published Vulnerabilities

SSD

• SSD-KERIOCONTROL - KerioControl Authenticated RCE

CVEs

• CVE-2022-41758 - Moxa Router Pre-Auth RCE (TN-5916 Series)
• CVE-2022-41759 - Moxa Router Post-Auth RCE (EDR-810 Series,EDR-G902 Series, EDR-G903 Series, TN-4900 Series)
• CVE-2023-33237 - To Be Disclosed
• CVE-2023-33238 - To Be Disclosed
• CVE-2023-33239 - To Be Disclosed
• CVE-2023-34213 - To Be Disclosed
• CVE-2023-34214 - To Be Disclosed
• CVE-2023-34215 - To Be Disclosed
• CVE-2023-34216 - To Be Disclosed
• CVE-2023-34217 - To Be Disclosed

No Identifier

• PandoraFMS - PandoraFMS Pre-Auth RCEs Blog Post
• WR01 Aukey Router - WR01 Aukey Router Authenticated RCE
• Plague Botnet - Plague Botnet Pre-Auth RCE
• Anubis Botnet - Anubis Botnet Takeover
• Device42 - Device42 Pre-Auth RCE
• Open Automation Software - OAS Plattform Authentication Bypass due to Hardcoded Secrets - Silently Patched
• Open Automation Software - OAS Plattform RCE/LCE through .Net Deserialization (parsing of local file is needed) - No Information

ZDI

• ZDI-21-1234 - (0Day) Vinchin Backup and Recovery Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability
• ZDI-21-1235 - (0Day) Vinchin Backup and Recovery Use of Hard-coded Credentials Authentication Bypass Vulnerability
• ZDI-22-959 - (0Day) Vinchin Backup and Recovery MySQL Server Use of Hard-coded Credentials Authentication Bypass Vulnerability
• ZDI-23-721 - Moxa MXsecurity Series Restricted Shell Command Injection Remote Code Execution Vulnerability
• ZDI-23-720 - Moxa MXsecurity Series Hardcoded JWT Key Authentication Bypass Vulnerability
• ZDI-23-610 - Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-612 - Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability
• ZDI-23-611 - Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-445 - Schneider Electric APC Easy UPS Online getMacAddressByIP Command Injection Remote Code Execution Vulnerability
• ZDI-23-444 - Schneider Electric APC Easy UPS Online updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability
• ZDI-23-443 - Schneider Electric APC Easy UPS Online SocketService Missing Authentication Denial-of-Service Vulnerability
• ZDI-23-333 - Siemens Tecnomatix Plant Simulation SPP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
• ZDI-23-329 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-323 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-326 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• ZDI-23-324 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-325 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-201 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-199 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-198 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-196 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-195 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-194 - Siemens Tecnomatix Plant Simulation SPP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
• ZDI-23-193 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-191 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-190 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-200 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-189 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-188 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-185 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-186 - Siemens Tecnomatix Plant Simulation SPP File Parsing Uninitialized Pointer Remote Code Execution Vulnerability
• ZDI-23-184 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-183 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-192 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-187 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• ZDI-23-197 - Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability*
• ZDI-CAN-15469 - CheckMK Authenticated RCE
• ZDI-CAN-21162: Voltronic Power - More information upcoming - CVSS 3.0 7.5
• ZDI-CAN-21203: Voltronic Power - More information upcoming - CVSS 3.0 9.8
• ZDI-CAN-21163: Voltronic Power - More information upcoming - CVSS 3.0 9.8
• ZDI-CAN-19094: SEW-EURODRIVE - More information upcoming - CVSS 3.0 5.5
• ZDI-CAN-21012: Voltronic Power - More information upcoming - CVSS 3.0 9.8
• ZDI-CAN-21060: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-21106: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-21132: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-19748: Rockwell Automation - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-19750: Rockwell Automation - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20447: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20356: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20305: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20296: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20307: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20297: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20302: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20298: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20306: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-20301: Siemens - More information upcoming - CVSS 3.0 7.8
• ZDI-CAN-19580: Advantech - More information upcoming - CVSS 3.0 9.8
• ZDI-CAN-19579: Advantech - More information upcoming - CVSS 3.0 8.8