Category
ICS / OT
4,112 known vulnerabilities.
1,749 results · Clear filters · Feed
-
High 7.5
A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affec…
-
High 7.5
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72…
-
High 7.5
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72…
-
High 8.7
PHOENIX CONTACT: Lack of SSL support in CHARX Series
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected.
-
High 7.5
PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series
An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality.
-
High 7.5
PHOENIX CONTACT: DoS of the control agent in CHARX Series
An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality.
-
High 7.8
PHOENIX CONTACT: File ownership manipulation in CHARX Series
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.
-
High 7.4
PHOENIX CONTACT: Out of bounds write only memory access
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
-
High 8.4
PHOENIX CONTACT: Privilege escalation in the OCPP agent service
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.
-
High 7.3
PHOENIX CONTACT: Command injection in the OCPP Service
An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.
-
High 7.2
Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Ser…
-
High 8.2
NPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow Vulnerability
A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker to exploit the vulnerability by sending crafted payload to the web service. Successful exploitation of the vuln…
-
High 7.8
Delta Electronics CNCSoft-B Stack-based Buffer Overflow
Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
-
High 7.8
Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element
Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.
-
High 8.1
Honeywell MPA2 Web Application XSS vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Honeywell MPA2 Access Panel (Web server modules) allows XSS Using Invalid Characters.This issue affects MPA2 Access Panel all version prior to R1.00.08.05. …
-
High 8.8
CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration o…
-
High 7.1
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project …
-
High 8.1
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists …
-
High 7.7
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file prot…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnera…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains a…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V23…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains a…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnera…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains a…
-
High 7.3
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector …
-
High 8.0
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutra…
-
High 8.8
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to up…
-
High 8.8
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to S…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
High 7.8
A vulnerability has been identified in Unicam FX (All versions). The windows installer agent used in affected product c…
-
High 7.5
A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK…
-
High 7.8
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The affected product is vulnerable due to…
-
High 7.8
A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.263), Parasolid V35.1 (All versions < V35.…