https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:17:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04700 bdu:2022-04700 https://cve.radiocsirt.org/vuln/bdu:2022-04700 https://cve.radiocsirt.org/vuln/certfr-2019-avi-312 certfr-2019-avi-312 https://cve.radiocsirt.org/vuln/certfr-2019-avi-312 https://cve.radiocsirt.org/vuln/cnvd-2017-09898 cnvd-2017-09898 https://cve.radiocsirt.org/vuln/cnvd-2017-09898 https://cve.radiocsirt.org/vuln/euvd-2026-73674 EUVD-2026-73674 https://cve.radiocsirt.org/vuln/euvd-2026-73674 https://cve.radiocsirt.org/vuln/fkie_cve-2017-6028 <p>An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.</p> <p>An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-6028 https://cve.radiocsirt.org/vuln/ghsa-55h6-p6m7-f4h7 <p>An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.</p> <p>An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.</p> https://cve.radiocsirt.org/vuln/ghsa-55h6-p6m7-f4h7 https://cve.radiocsirt.org/vuln/gsd-2017-6028 gsd-2017-6028 https://cve.radiocsirt.org/vuln/gsd-2017-6028 https://cve.radiocsirt.org/vuln/icsa-17-089-02 <p>The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.CVE-2017-6030 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). The session numbers generated by the web application are lacking randomization and are shared between several users. This may allow a current session to be compromised.CVE-2017-6026 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.CVE-2017-6028 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).</p> <p>The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.CVE-2017-6030 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). The session numbers generated by the web application are lacking randomization and are shared between several users. This may allow a current session to be compromised.CVE-2017-6026 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.CVE-2017-6028 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).</p> https://cve.radiocsirt.org/vuln/icsa-17-089-02