Category
ICS / OT
4,112 known vulnerabilities.
1,749 results · Clear filters · Feed
-
High 8.4
Heap-based Buffer Overflow in CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to exec…
-
High 7.8
Out-of-bounds Read vulnerability in CX-Programmer
Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.
-
High 7.8
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data an…
-
High 8.1
CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable w…
-
High 7.5
CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data…
-
High 7.5
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to s…
-
High 8.1
CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when mal…
-
High 7.5
A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 12…
-
High 7.2
A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-…
-
High 7.0
A vulnerability has been identified in SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions). The…
-
High 7.4
A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14…
-
High 7.5
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All …
-
High 7.5
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All v…
-
High 8.8
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 U…
-
High 7.3
Camera passwords stored in clear text
A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used. An attacker who successfully exploited the vulnerability could, in the worst case scenario, stop or manipulate the video feed. This issue aff…
-
High 7.8
Heap-based Buffer Overflow in CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to exec…
-
High 7.3
Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanU…
-
High 7.0
Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token …
-
High 7.5
Out-of-bounds Write Vulnerability
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability co…
-
High 7.0
FactoryTalk® View Site Edition - Local Code Injection
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.
-
High 7.0
FactoryTalk® View Site Edition - Incorrect Permission Assignment
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.
-
High 8.6
FactoryTalk® View Machine Edition - Local Code Injection
A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user.
-
High 7.1
5380/5580 Denial-of-Service Vulnerability
A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service.
-
High 8.7
PowerFlex® 755 Credential Exposure Vulnerability
A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in credentials being sent in clear text.
-
High 7.0
Path Traversal and Rockwell Automation Third-party Vulnerability in DataMosaix™ Private Cloud
A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A th…
-
High 8.8
CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker …
-
High 7.8
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity a…
-
High 8.6
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information d…
-
High 7.8
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclo…
-
High 7.1
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists …
-
High 7.5
CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product wh…
-
High 7.5
WAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumption
An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption.
-
High 8.8
Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation
An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access.
-
High 7.4
A vulnerability has been identified in Mendix LDAP (All versions < V1.1.2). Affected versions of the module are vulnera…
-
High 7.1
A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 12…
-
High 7.0
An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exis…
-
High 7.2
Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances
Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-leve…
-
High 7.8
Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability
Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to e…
-
High 7.8
Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required…
-
High 7.8
Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability
Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to e…