Product: B&R Automation Net/PVI
Vendor URL: https://www.br-automation.com/en-us/products/software/automation-netpvi/
Vulnerability #1: CVE-2020-24681 Automation Studio incorrect permission assignments for services. CVSS v3 Base Score: 8.2 (High)
Vulnerability #2: CVE-2020-24681 Net/PVI incorrect permission assignments for services. CVSS v3 Base Score …
Product: B&R Automation Net/PVI
Vendor URL: https://www.br-automation.com/en-us/products/software/automation-netpvi/
Vulnerability #1: CVE-2021-22280 DLL Hijacking Vulnerability in Automation Studio. CVSS v3 Base Score: 7.2 (High)
Vulnerability #2: Improper Input Validation CWE-20
Date found: 2020-10-09
This vulnerability was discovered …
read moreAfter adding some new SSD storage to my home server I had purged a lot of the older VMs that I didn't use frequently in my previous 'Spring Cleaning' effort to make space. One of the VMs that I had purged but now wanted to get back online and running …
read moreI recently ran accross the situation where I wanted to push changes to a repo that was stored on my personal Gitlab server. The issue was that I had recently restructured my homelab and the only way to get to the gitlab server via SSH was through a jumpbox. These …
read moreStart off with a freshly updated system and install the requirements:
apt update
apt upgrade
apt install -y xrdp xfce4 xfce4-terminal gnome-icon-theme-full tango-icon-theme
Make xfce4 our default xsession:
echo xfce4-session >~/.xsession
Make xfce4 the default for by editting the following file: :::bash nano /etc/xrdp/startwm.sh
Replace what is …
read moreThis is was the workaround that I had to do to get gpg keys to be generated on a kvm debian machine. After doing it several times and having to hunt to figure out how I got it working the first time I decided I should write it down.....
sudo …This is a dead simple way to get an OpenVPN server up and going with individual client certificates.
wget https://git.io/vpn -O openvpn-install.sh && bash openvpn-install.sh
#!/bin/bash
#
# https://github.com/Nyr/openvpn-install
#
# Copyright (c) 2013 Nyr. Released under the MIT License.
# Detect Debian users running the …To start off this tutorial it is assumed that you have Weewx completely set up on another server with the weather station properly connected and reporting. This tutorial will be using a Master / Slave MYSQL database that is configured like my previous blog entry.
The purpose adding Mesowx into the …
read moreThe purpose of running having a master / slave relationship between your databases is that the slave database will be an exact replica of the specified master database. The purpose of running the connection through a SSH tunnel is to ensure:
One of the interesting parts of living on a boat is probably something that most people never think of dealing with. Power Management! Since we only have 30 amps of power available to draw at any one time we have to be quite careful on what is running. On those …
read moreWhile exploring my network I discovered that there was a securty vulnerability with my Lorex Technology ECO DVR. After doing more research and reaching out to the vendor and US-CERT I have finally documented and disclosed my first vulnerability report. It was a great learning experience working through the process …
read moreAfter surviving a windstorm that produced 40-60 mph winds on the boat I decided that I wanted a weather station to capture that data! The closest anemometer was very far away and definitely was not subjected to the same winds that I had in my marina. The following post is …
read moreThese posts will be various lessons and lessons learned as I start learning how to program in C++. My first experiences programming started in Windows batch files and then in high school I was introduced to Perl. While it could be argued that neither batch or Perl are "real programming …
read moreWhile living in Washington, my wife and I decided to buy a boat and live on the water. Here is our 1985 President 41 that we and our cat lived on for 3 years in Kenmore, WA.
I have some of my favorite resources listed below …
read more