Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1,749 results · Clear filters · Feed

High 7.8

CVE-2022-46346

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.…

Siemens Solid Edge SE2023 Parasolid V35.0 Parasolid V34.1 Browsers ICS / OT

Dec 13, 2022
High 7.5

CVE-2022-46355

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022
High 8.1

CVE-2022-45936

A vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected versions of the module …

Siemens Mendix Email Connector ICS / OT

Dec 13, 2022
High 8.8

CVE-2022-45937

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

Siemens APOGEE PXC Modular (BACnet) TALON TC Compact (BACnet) APOGEE PXC Compact (P2 Ethernet) ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41281

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41285

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41286

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41283

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41282

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-41284

A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-43517

A vulnerability has been identified in Simcenter STAR-CCM+ (All versions < V2306). The affected application improperly …

Siemens Simcenter STAR-CCM+ ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-43722

A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure …

Siemens SICAM PAS/PQS ICS / OT

Dec 13, 2022
High 7.5

CVE-2022-43723

A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06)…

Siemens SICAM PAS/PQS ICS / OT

Dec 13, 2022
High 7.5

CVE-2021-40365

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…

Siemens SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC S7-1500 CPU 1511F-1 PN SIMATIC S7-1500 CPU 1515TF-2 PN ICS / OT

Dec 13, 2022
High 7.8

CVE-2022-43509

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure …

Omron CX-Programmer ICS / OT

Dec 7, 2022
High 7.8

CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/o…

Omron CX-Programmer ICS / OT

Dec 7, 2022
High 7.8

CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information dis…

Omron CX-Programmer ICS / OT

Dec 7, 2022
High 8.6

CVE-2022-40265

Denial of Service (DoS) Vulnerability in MELSEC iQ-R Series Ethernet Interface Module

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior al…

Mitsubishi Electric MELSEC iQ-R Series R04/08/16/32/120ENCPU MELSEC iQ-R Series RJ71EN71 ICS / OT

Nov 30, 2022
High 7.5

CVE-2022-29831

Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z al…

Mitsubishi Electric GX Works3 ICS / OT

Nov 24, 2022
High 8.6

CVE-2022-25164

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095…

Mitsubishi Electric GX Works3 MX OPC UA Module Configurator-R ICS / OT

Nov 24, 2022
High 7.1

CVE-2022-2513

Cleartext Credentials Vulnerability on Hitachi Energy’s Multiple IED Connectivity Packages (IED ConnPacks) and PCM600 Products

A vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack) credential storage function in Hitachi Energy’s PCM600 product included in the versions listed below, where IEDs credentials are stored in a cleartext format in …

Hitachi Energy PCM600 650 Connectivity Package GMS600 Connectivity Package ICS / OT

Nov 22, 2022
High 7.5

CVE-2022-0222

A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet comm…

Schneider Electric Modicon M340 CPUs Modicon M340 X80 Ethernet Communication modules: BMXNOE0100 (H) BMXNOE0110 (H) BMXNOR0200H RTU ICS / OT

Nov 22, 2022
High 7.8

CVE-2022-3088

UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image…

Moxa UC-8200 System Image UC-8100A-ME-T System Imaage UC-8410A with Debian 9 System Image ICS / OT

Nov 22, 2022
High 7.5

CVE-2022-37301

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the cont…

Schneider Electric Modicon M340 CPU (part numbers BMXP34*) Modicon M580 CPU (part numbers BMEP* and BMEH*) Modicon MC80 (BMKC80) ICS / OT

Nov 22, 2022
High 8.8

CVE-2022-3388

Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products

An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.

Hitachi Energy MicroSCADA X SYS600 MicroSCADA Pro SYS600 ICS / OT

Nov 21, 2022
High 8.8

CVE-2022-41775

Delta Electronics DIAEnergie SQL Injection

SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

Delta Electronics DIAEnergie ICS / OT

Nov 17, 2022
High 8.8

CVE-2022-43506

Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

Delta Electronics DIAEnergie ICS / OT

Nov 17, 2022
High 8.8

CVE-2022-43452

Delta Electronics DIAEnergie SQL Injection

SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

Delta Electronics DIAEnergie ICS / OT

Nov 17, 2022
High 8.8

CVE-2022-43447

Delta Electronics DIAEnergie SQL Injection

SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

Delta Electronics DIAEnergie ICS / OT

Nov 17, 2022
High 8.8

CVE-2022-43457

Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

Delta Electronics DIAEnergie ICS / OT

Nov 17, 2022
High 7.5

CVE-2022-42732

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

Siemens syngo Dynamics ICS / OT

Nov 17, 2022
High 7.5

CVE-2022-42733

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

Siemens syngo Dynamics ICS / OT

Nov 17, 2022
High 7.5

CVE-2022-42891

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

Siemens syngo Dynamics ICS / OT

Nov 17, 2022
High 7.5

CVE-2022-42894

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Reque…

Siemens syngo Dynamics ICS / OT

Nov 17, 2022
High 7.5

CVE-2022-42734

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

Siemens syngo Dynamics ICS / OT

Nov 17, 2022
High 7.5

CVE-2022-42893

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…

Siemens syngo Dynamics ICS / OT

Nov 17, 2022
High 7.8

CVE-2022-3461

Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation mi…

Phoenix Contact PC Worx Config+ PC Worx Express ICS / OT

Nov 15, 2022
High 7.8

CVE-2022-3737

Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compr…

Phoenix Contact PC Worx PC Worx Express Config+ ICS / OT

Nov 15, 2022
High 7.5

CVE-2022-3480

Denial-of-Service vulnerability in PHOENIX CONTACT mGuard product family

A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firew…

Phoenix Contact FL MGUARD CORE TX FL MGUARD RS4000 TX/TX VPN FL MGUARD PCIE4000 VPN ICS / OT

Nov 15, 2022
High 7.5

CVE-2021-34579

PHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management

In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access…

Phoenix Contact FL MGUARD DM (2981974) ICS / OT

Nov 9, 2022