Category
ICS / OT
4,112 known vulnerabilities.
1,749 results · Clear filters · Feed
-
High 7.5
Uncontrolled Memory Allocation in CODESYS Gateway Client
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory cons…
-
High 8.1
Improper Synchronization in Monitoring in CODESYS Control Runtime
Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacke…
-
High 8.5
Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration fil…
-
High 8.8
Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface
An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F10.19.010040, allows an authenticated user with access to…
-
High 7.5
Mint Workbench I Path traversal Vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876.
-
High 7.5
Missing Length Check
Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: through 2013, 2…
-
High 8.8
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the user…
-
High 7.2
Command Injection via PUT in /api/datastorage/data
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device.
-
High 7.2
Command Injection via GET in /api/datastorage/data
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device.
-
High 7.2
Command Injection via PUT in /api/iodd/config
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device.
-
High 7.2
Command Injection via GET in /api/iodd/config
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device.
-
High 7.2
Command Injection via DELETE in /api/status/data
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials allowing execution of commands with root privileges on the device.
-
High 8.8
Command Injection via GET in /api/status/data
A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user credentials allowing execution of commands with root privileges on the device.
-
High 8.8
Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint using operator credentials allowing execution of commands with root privileges on the device.
-
High 7.5
Path Traversal in /index.php/view_uploaded_iodd_file
An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read.
-
High 8.8
Local File Inclusion in /index.php/ajax/save_iodd_parameters
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device.
-
High 8.8
Local File Inclusion in /index.php/ajax/get_iodd_port_info
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device.
-
High 8.8
Command Injection in /index.php/ajax/save_iodd_parameters
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using operator credentials allowing execution of commands with root privileges on the device.
-
High 8.1
Unauthorized IODD File Upload due to Improper Authorization
A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes.
-
High 8.8
Command Injection in /index.php/ajax/parameterManage
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user credentials allowing execution of commands with root privileges on the device.
-
High 8.8
Command Injection in Field_Shadow_Password Class
A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class using operator credentials allowing execution of commands with root privileges on the device.
-
High 8.8
Command Injection in /index.php/attached_devices_tab/do_upload
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint using operator credentials allowing execution of commands with root privileges on the device.
-
High 8.8
Command Injection in /index.php/ajax/get_iodd_port_info
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using user or operator credentials allowing execution of commands with root privileges on the device.
-
High 8.8
Command Injection in /index.php/ajax/get_iodd_menu_info
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_menu_info endpoint using valid user or operator credentials allowing execution of commands with root privileges on the device.
-
High 8.7
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
High 8.6
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and di…
-
High 8.6
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that co…
-
High 8.6
A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All…
-
High 8.8
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the we…
-
High 7.5
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or …
-
High 7.5
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained …
-
High 7.4
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to gener…
-
High 7.4
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an…
-
High 8.2
A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All…
-
High 7.5
Code Execution Vulnerability in Arena®
A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerabi…
-
High 8.7
A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix …
-
High 8.5
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their …
-
High 8.5
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the …
-
High 7.6
Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud
A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project.
-
High 8.7
DataEdgePlatform DataMosaix™ Private Cloud
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project.