Category
ICS / OT
4,112 known vulnerabilities.
1,749 results · Clear filters · Feed
-
High 8.1
Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability…
-
High 8.1
Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability …
-
High 8.1
Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execut…
-
High 7.4
Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in pos…
-
High 8.1
Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting i…
-
High 7.5
Rockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable Fault
An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted,…
-
High 8.6
Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 53…
-
High 7.4
Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overf…
-
High 7.4
Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in p…
-
High 7.5
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by …
-
High 7.6
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users …
-
High 8.4
A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), P…
-
High 7.5
Malformed Packet Handling
ABB has internally identified a vulnerability in the ABB VPNI feature of the S+ Control API component which may be used by several Symphony Plus products (e.g., S+ Operations, S+ Engineering and S+ Analyst) This issue affects Symphony Plus S+ Operations: from…
-
High 8.8
Delta Electronics DIAEnergie SQL Injection
SQL injection vulnerability exists in GetDIAE_usListParameters.
-
High 7.0
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM ser…
-
High 7.5
SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the S…
-
High 8.2
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. …
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation. Once inside, the threat actor can …
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Uninitialized Pointer
An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly. Once inside, the threat actor can run harmful code o…
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation. Once inside, the threat actor can …
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers an access violation…
-
High 7.8
Rockwell Automation Arena Simulation vulnerable to out of bounds write
An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, …
-
High 7.5
Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover.
-
High 7.5
Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it.
-
High 7.5
Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it.
-
High 8.1
Delta Electronics DIAEnergie Path traversal
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.
-
High 8.1
Delta Electronics DIAEnergie Path traversal
It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in GetDIAE_unListParameters.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in GetDIAE_slogListParameters.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in GetDIAE_astListParameters.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in the script Handler_CFG.ashx.
-
High 8.8
Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie
Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.
-
High 7.8
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious…
-
High 7.5
CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated file…
-
High 8.2
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when …
-
High 8.8
Wago: Buffer Copy without Checking Size of Input in wbm of multiple products
An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device.
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains a…
-
High 7.6
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensi…