Vulnerabilities

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash.

An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device.

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request.

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request.

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

An attacker could decrypt sensitive data, impersonate legitimate users or devices, and potentially gain access to network resources for lateral attacks.

An attacker with access to the project file could use the exposed credentials to impersonate users, escalate privileges, or gain unauthorized access to systems and services.

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19.

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19.

An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19.

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19.

A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version 4.4.1.19.

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60.

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60.

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60.

A predictable seed in pseudo-random number generator vulnerability has been discovered in firmware version 3.60 of the Click Plus PLC.

The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC.

The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC.

Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60.

The embedded web server lacks authentication and access controls, allowing unrestricted remote access.