CVE-2021-42704

Inkscape Out-of-bounds Write

Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed

Vendors

Inkscape

Products

Inkscape

CVE-2020-16209

Fieldcomm Group HART-IP and hipserver - Stack-based Buffer Overflow

A malicious attacker could exploit the interface of the Fieldcomm Group HART-IP (release 1.0.0.0) by constructing messages with sufficiently large payloads to overflow the internal buffer and crash the device, or obtain control of the device.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed

Vendors

Fieldcommgroup

Products

Hart-ip Developer Kit Hart-ip Developer Kit Firmware Hipserver

CVE-2021-32934

ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information

The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module) do not sufficiently protect data transferred between the local device and ThroughTek servers. This can allow an attacker to access sensitive information, such as camera feeds.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Throughtek

Products

Kalay P2p Software Development Kit

CVE-2020-16235

Emerson OpenEnterprise - Inadequate Encryption Strength

Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Emerson

Products

Openenterprise Scada Server

CVE-2021-32941

Annke Network Video Recorder - Stack-based Buffer Overflow

Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).

CVSS 3.1 · 9.4 Critical EPSS 15.2% KEV · Not listed

Vendors

Annke

Products

N48pbb N48pbb Firmware

CVE-2022-1467

AVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Aveva

Products

Intouch Access Anywhere Plant Scada Access Anywhere

CVE-2021-32958

Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Claroty

Products

Secure Remote Access

CVE-2022-1669

Circutor COMPACT DC-S BASIC

A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary (index.cgi) to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Address" value and it would be copied to a second variable with a "strcpy" vulnerable function without checking its length. Because of this, it is possible to send a long address value to overflow the process stack, controlling the function return address.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Circutor

Products

Compact Dc-s Basic Compact Dc-s Basic Firmware

CVE-2021-32964

Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Aggsoft

Products

Webserver

CVE-2021-32962

Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Aggsoft

Products

Webserver

CVE-2021-32966

Philips Interoperability Solution XDS - Clear Text Transmission of Sensitive Information

Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDAP system credentials.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed

Vendors

Philips

Products

Interoperability Solution Xds

CVE-2021-32989

LCDS LAquis SCADA - Cross-site Scripting

When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.

CVSS 3.1 · 9.3 Critical EPSS 2.5% KEV · Not listed

Vendors

Lcds

Products

Laquis Scada

CVE-2021-32997

Baker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort

The affected Baker Hughes Bentley Nevada products (3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01 versions 5.05 and prior) utilize a weak encryption algorithm for storage and transmission of sensitive data, which may allow an attacker to more easily obtain credentials used for access.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Bakerhughes

Products

Bentley Nevada 3500\/22m \(288055-01\) Bentley Nevada 3500\/22m \(288055-01\) Firmware Bentley Nevada 3500 Rack Configuration \(129133-01\) and 7 more

CVE-2021-33016

KUKA KR C4 - Use of Hard-Coded Credentials

An attacker can gain full access (read/write/delete) to sensitive folders due to hard-coded credentials on KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed

Vendors

Kuka

Products

Kr C4 Kr C4 Firmware Kss

CVE-2022-1261

Matrikon OPC Server Improper Access Control

Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Honeywell

Products

Matrikon Opc Server

CVE-2022-1797

Rockwell Automation Logix Controllers Uncontrolled Resource Consumption

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.

CVSS 3.1 · 6.8 Medium EPSS 2.2% KEV · Not listed

Vendors

Rockwellautomation

Products

Compact Guardlogix 5370 Compact Guardlogix 5370 Firmware Compact Guardlogix 5380 and 15 more

CVE-2022-1660

Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1 · 9.8 Critical EPSS 16.8% KEV · Not listed

Vendors

Keysight

Products

N6841a Rf N6841a Rf Firmware N6854a and 1 more

CVE-2022-1661

Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files.

CVSS 3.1 · 7.5 High EPSS 15.9% KEV · Not listed

Vendors

Keysight

Products

N6841a Rf N6841a Rf Firmware N6854a and 1 more

CVE-2020-36547

GE Voluson S8 Service Browser hard-coded credentials

A vulnerability was found in GE Voluson S8. It has been rated as critical. This issue affects the Service Browser which itroduces hard-coded credentials. Attacking locally is a requirement. It is recommended to change the configuration settings.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Ge

Products

Voluson S8 Voluson S8 Firmware

CVE-2020-36548

GE Voluson S8 Service Browser users.cgi improper authentication

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Ge

Products

Voluson S8 Voluson S8 Firmware