Category
ICS / OT
4,112 known vulnerabilities.
1,749 results · Clear filters · Feed
-
High 7.1
OnCell G3470A-LTE Series: Authenticated Command Injection via webDelIPSec
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious use…
-
High 7.1
OnCell G3470A-LTE Series: Authenticated Command Injection via webUploadKey
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malic…
-
High 7.5
Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit a…
-
High 8.5
DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an a…
-
High 8.5
Rockwell Automation FactoryTalk® View SE Local Privilege Escalation Vulnerability via Local File Permissions
A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edit scripts, bypassing Access Control Lists, and potentially gaining further access within the system.
-
High 8.3
Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If explo…
-
High 8.2
Rockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. Due to the lack of proper authentica…
-
High 8.2
Rockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. This action is allowed without p…
-
High 7.8
CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in …
-
High 7.8
CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation…
-
High 7.5
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the d…
-
High 8.1
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could …
-
High 8.0
A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a mali…
-
High 7.4
A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validatio…
-
High 8.6
A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a deni…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0012), Tecnomatix Plant …
-
High 8.2
A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-20…
-
High 7.8
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web inter…
-
High 7.7
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …
-
High 7.8
CODESYS: Development system prone to DoS through exposure of resource to wrong sphere
A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.
-
High 7.5
CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.
-
High 7.8
Incorrect default permissions issue exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary c…
-
High 7.0CVE-2024-3640 Public exploit
Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables
An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threa…
-
High 8.8
Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploit…
-
High 7.6
An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller i…
-
High 7.8
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected applications contain a…
-
High 7.8
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 4). The affected applications contain a…
-
High 7.8
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected application is vulnera…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions …
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions …
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stac…
-
High 7.8
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain a…
-
High 7.8
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain a…
-
High 7.8
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain a…
-
High 7.8
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain a…
-
High 7.8
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected application is vulnera…
-
High 7.6
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestric…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0011). The affected appl…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions …
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions …