controledge_rtu_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/controledge_rtu_firmware/ Sun, 26 Feb 2023 06:35:53 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png controledge_rtu_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/controledge_rtu_firmware/ 32 32 CVE-2020-10624 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-10624/ Sun, 26 Feb 2023 06:35:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-10624/ ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network.

The post CVE-2020-10624 appeared first on CVE Vulnerability.

]]> ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network.

The post CVE-2020-10624 appeared first on CVE Vulnerability.

]]> CVE-2020-10628 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-10628/ Sun, 26 Feb 2023 06:35:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-10628/ ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network.

The post CVE-2020-10628 appeared first on CVE Vulnerability.

]]> ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network.

The post CVE-2020-10628 appeared first on CVE Vulnerability.

]]> CVE-2022-30318 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-30318/ Thu, 23 Feb 2023 05:18:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-30318/ Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials issue. The affected components are characterized as: SSH. The potential impact is: Remote code execution, manipulate configuration, denial of service. The Honeywell ControlEdge PLC and RTU product line exposes an SSH service on port 22/TCP. Login as root […]

The post CVE-2022-30318 appeared first on CVE Vulnerability.

]]> Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials issue. The affected components are characterized as: SSH. The potential impact is: Remote code execution, manipulate configuration, denial of service. The Honeywell ControlEdge PLC and RTU product line exposes an SSH service on port 22/TCP. Login as root to this service is permitted and credentials for the root user are hardcoded without automatically changing them upon first commissioning. The credentials for the SSH service are hardcoded in the firmware. The credentials grant an attacker access to a root shell on the PLC/RTU, allowing for remote code execution, configuration manipulation and denial of service.

The post CVE-2022-30318 appeared first on CVE Vulnerability.

]]>