triplc vulnerabilities

Products

• nano-10 plc 2
• nano-10 plc firmware 2
• trilogi server 1

Latest triplc CVEs

Newest publication first

1. CVE-2013-6927 Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account.

   Published 2020-02-13

   Medium·CVSS 5.5 EPSS 0.34%

   Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account.

2. CVE-2013-5741 Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial o...

   Published 2013-10-29

   High·CVSS 7.8 EPSS 2.2%

   Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial of service (transition to the interrupt state) via a crafted packet to TCP port 5...

3. CVE-2013-2784 Triangle Research International (aka Tri) Nano-10 PLC devices with firmware before r81 use an incorrect algorithm for bounds checking of data in Modbus/TCP packets, which allows remote attackers to ca...

   Published 2013-07-10

   High·CVSS 7.8 EPSS 4.0%

   Triangle Research International (aka Tri) Nano-10 PLC devices with firmware before r81 use an incorrect algorithm for bounds checking of data in Modbus/TCP packets, which allows remote attackers to cause a denial of service (networking outage) via a crafted packet to TCP port 502...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.