Rockwell Automation FactoryTalk View Site

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform unauthenticated remote code execution. 3.…

Delta Electronics InfraSuite Device Master

itsecuritynews.info - 29/Oct 15:36

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: InfraSuite...

Solar-Log Base 15

itsecuritynews.info - 29/Oct 15:36

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.1 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Solar-Log...

Cisco Flaw Let Attackers Run Command as Root User

itsecuritynews.info - 07/Nov 06:07

A critical vulnerability has been discovered in Cisco Unified Industrial Wireless Software, which affects Cisco Ultra-Reliable Wireless Backhaul...

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

Synology fixed critical flaw impacting millions of DiskStation and BeePhotos NAS devices

securityaffairs.co - 06/Nov 09:09

Synology addressed a critical vulnerability in DiskStation and BeePhotos NAS devices that could lead to remote code execution. Taiwanese vendor...

Cisco Desk Phone Series Vulnerability Lets Remote Attacker Access Sensitive Information

itsecuritynews.info - 07/Nov 12:32

A significant vulnerability (CVE-2024-20445) has been discovered in Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875...

D-Link NAS Devices affected by a Critical flaw CVE-2024-10914

thecyberthrone.in - 09/Nov 03:50

D-Link NAS devices have been affected by a critical vulnerability, impacts several D-Link NAS models, including DNS-320, DNS-320LW, DNS-325, and...

CISA adds PTZOptics flaws to its KEV Catalog

thecyberthrone.in - 05/Nov 07:32

The US CISA has added PTZOptics flaws to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation. CVE-2024-8956 ...

Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

itsecuritynews.info - 30/Oct 18:09

Fortinet has updated their security advisory addressing a critical FortiManager vulnerability (CVE-2024-47575) to include additional workarounds and...

Cisco Patches Critical Vulnerability in Industrial Networking Solution