CVEs published February 13, 2017
124 CVEs were published on February 13, 2017: 3 critical, 3 high.
- Published
- 124
- Critical
- 3
- High
- 3
- Medium
- 1
- Low
- 0
- Unrated
- 117
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Moxa NPort
- 8
- BINOM3 Electric Power Quality Meter
- 5
- Honeywell XL Web II Controller
- 5
- Lynxspring JENEsys BAS Bridge 1.1.8 and older
- 4
- Moxa ioLogik E1200 Series before
- 4
- Advantech SUSIAccess Server 3.0 and prior
- 3
- Carlo Gavazzi VMU-C EM and VMU-C PV
- 3
- Moxa SoftCMS prior to
- 3
- Advantech WebAccess
- 2
- Delta Electronics WPLSoft, ISPSoft, and PMSoft
- 2
Critical 3
- CVE-2016-9361An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pMoxa NPort
- CVE-2016-9366An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pMoxa NPort
- CVE-2016-9369An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pMoxa NPort
High 3
- CVE-2016-9363An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pMoxa NPort
- CVE-2016-9365An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pMoxa NPort
- CVE-2016-9367An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pMoxa NPort
Medium, low and unrated 118
- CVE-2016-8355An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1.Smiths-Medical CADD-Solis Medication Safety Software through
- CVE-2016-8358An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1.Smiths-Medical CADD-Solis Medication Safety Software through
- CVE-2016-8375An issue was discovered in Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit, Version 9.5 and prior versions, and VersiBD Alaris 8015 through 9.7 and
- CVE-2016-9355An issue was discovered in Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit, Version 9.5 and prior versions, and VersiBD Alaris 8015 Insufficiently Protected Credentials Vulnera…
- CVE-2017-1121IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Application Server
- CVE-2017-5149An issue was discovered in St.St. Jude Merlin@home Transmitter before
- CVE-2016-10224An issue was discovered in Sauter NovaWeb web HMI.Sauter NovaWeb Web HMI
- CVE-2016-2274An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station.Adcon Telemetry A850 Telemetry Gateway Base Station
- CVE-2016-5782An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320.Locus Energy LGate through
- CVE-2016-5786An issue was discovered in OmniMetrix OmniView, Version 1.2.OmniMetrix OmniView
- CVE-2016-5796An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0.Fatek Automation Designer
- CVE-2016-5798An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0.Fatek Automation Designer
- CVE-2016-5801An issue was discovered in OmniMetrix OmniView, Version 1.2.OmniMetrix OmniView
- CVE-2016-5802An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions pDelta Electronics WPLSoft, ISPSoft, and PMSoft
- CVE-2016-5803An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier.CA Unified Infrastructure Management 8.47 and earlier
- CVE-2016-5805An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions pDelta Electronics WPLSoft, ISPSoft, and PMSoft
- CVE-2016-5809An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, IOSchneider Electric IONXXXX Series
- CVE-2016-5811An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release.Visonic PowerLink2
- CVE-2016-5813An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release.Visonic PowerLink2
- CVE-2016-5815An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, IOSchneider Electric IONXXXX Series Power Meter Vulnerabiliti…
- CVE-2016-5818An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older.Schneider Electric PowerLogic 2.651 and older
- CVE-2016-7987An issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM-2558 extension module for: SICAM AK, SICAM TMSiemens SICAM RTU Devices before
- CVE-2016-8341An issue was discovered in Ecava IntegraXor Version 5.0.413.0.Ecava IntegraXor
- CVE-2016-8344An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, ReHoneywell Experion PKS through
- CVE-2016-8346An issue was discovered in Moxa EDR-810 Industrial Secure Router.Moxa EDR-810 Industrial Secure Router
- CVE-2016-8347An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0.Kabona AB WDC prior to
- CVE-2016-8348An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior.Emerson Liebert SiteScan 6.5, and prior
- CVE-2016-8350An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E121Moxa ioLogik E1200 Series before
- CVE-2016-8352An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all versions, TCSEFEC23F3F21 all versions, TCSEFEC23FCF20 aSchneider Electric ConneXium TCSEFEC2*
- CVE-2016-8353An issue was discovered in OSIsoft PI Web API 2015 R2 (Version 1.5.1).OSIsoft PI Web API 2015 R2
- CVE-2016-8354An issue was discovered in Schneider Electric Unity PRO prior to V11.1.Schneider Electric Unity PRO Control prior to
- CVE-2016-8356An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0.Kabona AB WDC prior to
- CVE-2016-8357An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older.Lynxspring JENEsys BAS Bridge 1.1.8 and older
- CVE-2016-8359An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E121Moxa ioLogik E1200 Series before
- CVE-2016-8360An issue was discovered in Moxa SoftCMS versions prior to Version 1.6.Moxa SoftCMS prior to
- CVE-2016-8361An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older.Lynxspring JENEsys BAS Bridge 1.1.8 and older
- CVE-2016-8362An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Moxa OnCell
- CVE-2016-8363An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Moxa OnCell
- CVE-2016-8364An issue was discovered in IBHsoftec S7-SoftPLC prior to 4.12b.IBHsoftec S7-SoftPLC CPX43 prior to
- CVE-2016-8367An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, alSchneider Electric Magelis HMI
- CVE-2016-8368An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, Mitsubishi Electric MELSEC-Q Series Ethernet Interface Modu…
- CVE-2016-8369An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older.Lynxspring JENEsys BAS Bridge 1.1.8 and older
- CVE-2016-8370An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, Mitsubishi Electric MELSEC-Q Series Ethernet Interface Modu…
- CVE-2016-8372An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E121Moxa ioLogik E1200 Series before
- CVE-2016-8374An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, alSchneider Electric Magelis HMI
- CVE-2016-8376An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0.Kabona AB WDC Vulnerabilities prior to
- CVE-2016-8377An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701.Fatek Automation PLC WinProladder 3.11 Build
- CVE-2016-8378An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older.Lynxspring JENEsys BAS Bridge 1.1.8 and older
- CVE-2016-8379An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E121Moxa ioLogik E1200 Series before
- CVE-2016-8566An issue was discovered in Siemens SICAM PAS before 8.00.Siemens SICAM PAS before
- CVE-2016-8567An issue was discovered in Siemens SICAM PAS before 8.00.Siemens SICAM PAS before
- CVE-2016-9332An issue was discovered in Moxa SoftCMS versions prior to Version 1.6.Moxa SoftCMS prior to
- CVE-2016-9333An issue was discovered in Moxa SoftCMS versions prior to Version 1.6.Moxa SoftCMS prior to
- CVE-2016-9334An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prioRockwell Automation MicroLogix 1100 and
- CVE-2016-9337An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web browser functionalitTesla Gateway ECU on Model S automobile
- CVE-2016-9338An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prioRockwell Automation MicroLogix 1100 and
- CVE-2016-9339An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior.INTERSCHALT VDR G4e 5.220 and prior
- CVE-2016-9343An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware Rockwell Automation Logix5000 Programmable Automation Contr…
- CVE-2016-9344An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1.Moxa MiiNePort
- CVE-2016-9345An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3.Emerson DeltaV Easy Security Management through
- CVE-2016-9346An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1.Moxa MiiNePort
- CVE-2016-9347An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3.Emerson DeltaV Wireless I/O Card
- CVE-2016-9348An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pMoxa NPort
- CVE-2016-9349An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior.Advantech SUSIAccess Server 3.0 and prior
- CVE-2016-9351An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior.Advantech SUSIAccess Server 3.0 and prior
- CVE-2016-9353An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior.Advantech SUSIAccess Server 3.0 and prior
- CVE-2016-9354An issue was discovered in Moxa DACenter Versions 1.4 and older.Moxa DACenter 1.4 and older
- CVE-2016-9356An issue was discovered in Moxa DACenter Versions 1.4 and older.Moxa DACenter 1.4 and older
- CVE-2016-9357An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life (EoL) and no longer supported: EAMxxx prEaton ePDU EoL devices
- CVE-2016-9360An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, an…
- CVE-2016-9362An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), andWAGO Ethernet cards
- CVE-2016-9364An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19.Fidelix FX-20 Series Controllers prior to
- CVE-2016-9371An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pMoxa NPort
- CVE-2017-5139An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior.Honeywell XL Web II Controller
- CVE-2017-5140An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior.Honeywell XL Web II Controller
- CVE-2017-5141An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior.Honeywell XL Web II Controller
- CVE-2017-5142An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior.Honeywell XL Web II Controller
- CVE-2017-5143An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior.Honeywell XL Web II Controller
- CVE-2017-5144An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17.Carlo Gavazzi VMU-C EM and VMU-C PV
- CVE-2017-5145An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17.Carlo Gavazzi VMU-C EM and VMU-C PV
- CVE-2017-5146An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17.Carlo Gavazzi VMU-C EM and VMU-C PV
- CVE-2017-5151An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions.VideoInsight Web Client 6.3.5.11 and previous
- CVE-2017-5152An issue was discovered in Advantech WebAccess Version 8.1.Advantech WebAccess
- CVE-2017-5153An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services OSIsoft PI Coresight and PI Web API
- CVE-2017-5154An issue was discovered in Advantech WebAccess Version 8.1.Advantech WebAccess
- CVE-2017-5155An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier.Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and…
- CVE-2017-5157An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0.Schneider Electric homeLYnk Controller prior to
- CVE-2017-5159An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0.Phoenix Contact mGuard
- CVE-2017-5161An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versSielco Sistemi Winlog SCADA Software prior to
- CVE-2017-5162An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.BINOM3 Electric Power Quality Meter
- CVE-2017-5163An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions.Belden Hirschmann GECKO 2.0.00 and prior
- CVE-2017-5164An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.BINOM3 Electric Power Quality Meter
- CVE-2017-5165An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.BINOM3 Electric Power Quality Meter
- CVE-2017-5166An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.BINOM3 Electric Power Quality Meter
- CVE-2017-5167An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.BINOM3 Electric Power Quality Meter
- CVE-2017-5168An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior.Hanwha Techwin Smart Security Manager Versions 1.5 and prior
- CVE-2017-5169An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior.Hanwha Techwin Smart Security Manager 1.5 and prior
- CVE-2014-9760Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary
- CVE-2015-8750libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev s
- CVE-2015-8768click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allows remote attackers
- CVE-2015-8771The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted passw
- CVE-2016-10026ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges p
- CVE-2016-2568pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes cha
- CVE-2016-2787The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node
- CVE-2016-2788MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors relate
- CVE-2016-3616The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execut
- CVE-2016-3995The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.
- CVE-2016-4546Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted da
- CVE-2016-4547Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system
- CVE-2016-5100Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the passwfroxlor/froxlor
- CVE-2016-6129The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message leng
- CVE-2016-7565install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array param
- CVE-2016-8659Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demo
- CVE-2016-8859Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (
- CVE-2017-3896Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 alIntel McAfee Agent
- CVE-2017-3902Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authentiIntel ePO
- CVE-2016-8495An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attackerFortinet FortiManager
- CVE-2016-6210sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the us