Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

100 results · Clear filters · Feed

Low 3.3

CVE-2024-26276

A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), P…

Siemens JT2Go Teamcenter Visualization V14.3 Teamcenter Visualization V14.2 ICS / OT

Apr 9, 2024
Low 3.3

CVE-2024-23801

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2…

Siemens Tecnomatix Plant Simulation V2302 Tecnomatix Plant Simulation V2201 ICS / OT

Feb 13, 2024
Low 3.3

CVE-2024-23800

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2…

Siemens Tecnomatix Plant Simulation V2302 Tecnomatix Plant Simulation V2201 ICS / OT

Feb 13, 2024
Low 3.3

CVE-2024-23799

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2…

Siemens Tecnomatix Plant Simulation V2302 Tecnomatix Plant Simulation V2201 ICS / OT

Feb 13, 2024
Low 3.3

CVE-2024-22043

A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.251), Parasolid V35.1 (All versions < V35.…

Siemens Parasolid V35.0 Parasolid V35.1 ICS / OT

Feb 13, 2024
Low 3.3

CVE-2023-51744

A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.3 Teamcenter Visualization V14.2 ICS / OT

Jan 9, 2024
Low 2.7

CVE-2023-48430

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices d…

Siemens SINEC INS ICS / OT

Dec 12, 2023
Low 2.7

CVE-2023-48429

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices doe…

Siemens SINEC INS ICS / OT

Dec 12, 2023
Low 2.5

CVE-2023-5275

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-ser…

Mitsubishi Electric GX Works2 ICS / OT

Nov 21, 2023
Low 2.5

CVE-2023-5274

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-ser…

Mitsubishi Electric GX Works2 ICS / OT

Nov 21, 2023
Low 3.7

CVE-2023-44322

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…

Siemens SCALANCE M876-4 (EU) SCALANCE S615 LAN-Router SCALANCE M826-2 SHDSL-Router ICS / OT

Nov 14, 2023
Low 2.7

CVE-2023-44321

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web…

Siemens SCALANCE M874-3 SCALANCE M876-3 (ROK) SCALANCE M876-4 (NAM) ICS / OT

Nov 14, 2023
Low 3.5

CVE-2023-43503

A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks…

Siemens COMOS ICS / OT

Nov 14, 2023
Low 3.1

CVE-2023-5035

Cookie Without Secure Flag

A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnera…

Moxa PT-G503 Series ICS / OT

Nov 2, 2023
Low 3.1

CVE-2023-4217

Session cookies attribute not set properly

A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthor…

Moxa PT-G503 Series ICS / OT

Nov 2, 2023
Low 2.7

CVE-2023-2622

Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the…

Hitachi Energy MACH System Software ICS / OT

Nov 1, 2023
Low 2.7

CVE-2023-4089

WAGO: Multiple products vulnerable to local file inclusion

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.

WAGO Compact Controller CC100 PFC100 Touch Panel 600 Advanced Line Browsers ICS / OT

Oct 17, 2023
Low 3.7

CVE-2023-5461

Delta Electronics WPLSoft Modbus cleartext transmission

A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component Modbus Handler. The manipulation leads to cleartext transmission of sensitive information. It is possible to l…

Delta Electronics WPLSoft ICS / OT

Oct 9, 2023
Low 3.5

CVE-2023-5460

Delta Electronics WPLSoft Modbus Data Packet heap-based overflow

A vulnerability was found in Delta Electronics WPLSoft up to 2.51 and classified as problematic. This issue affects some unknown processing of the component Modbus Data Packet Handler. The manipulation leads to heap-based buffer overflow. The exploit has been…

Delta Electronics WPLSoft ICS / OT

Oct 9, 2023
Low 3.9

CVE-2023-40732

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected ap…

Siemens QMS Automotive ICS / OT

Sep 12, 2023
Low 3.1

CVE-2023-4228

ioLogik 4000 Series: Session Cookies Attribute Not Set Properly

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposin…

Moxa ioLogik 4000 Series ICS / OT

Aug 24, 2023
Low 3.8

CVE-2023-37857

PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing the attacker to create valid session cookies. These session-cookies created…

Phoenix Contact WP 6101-WXPS WP 6156-WHPS WP 6215-WHPS ICS / OT

Aug 9, 2023
Low 3.3

CVE-2023-38532

A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.…

Siemens Teamcenter Visualization V14.3 Teamcenter Visualization V14.2 Teamcenter Visualization V14.1 ICS / OT

Aug 8, 2023
Low 3.3

CVE-2023-38524

A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.…

Siemens Teamcenter Visualization V14.3 Teamcenter Visualization V14.2 Teamcenter Visualization V14.1 ICS / OT

Aug 8, 2023
Low 3.3

CVE-2023-3669

CODESYS: Missing Brute-Force protection in CODESYS Development System

A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialog.

CODESYS CODESYS Development System ICS / OT

Aug 3, 2023
Low 3.7

CVE-2022-29562

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1511 RUGGEDCOM ROX RX1524 RUGGEDCOM ROX RX5000 ICS / OT

Jul 11, 2023
Low 3.3

CVE-2023-33122

A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.2 Teamcenter Visualization V14.1 ICS / OT

Jun 13, 2023
Low 3.3

CVE-2023-33121

A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.2 Teamcenter Visualization V14.1 ICS / OT

Jun 13, 2023
Low 3.9

CVE-2023-28829

A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All ver…

Siemens SIMATIC PCS 7 V9.0 SIMATIC PCS 7 V9.1 SIMATIC PCS 7 V8.2 ICS / OT

Jun 13, 2023
Low 3.1

CVE-2023-2876

Session cookie exposure for client side script

Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX…

ABB REX640 PCL1 REX640 PCL3 REX640 PCL2 ICS / OT

Jun 13, 2023
Low 3.3

CVE-2023-30985

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versi…

Siemens Solid Edge SE2023 Browsers ICS / OT

May 9, 2023
Low 3.8

CVE-2023-29128

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Conne…

Siemens SIMATIC Cloud Connect 7 CC716 SIMATIC Cloud Connect 7 CC712 ICS / OT

May 9, 2023
Low 2.7

CVE-2023-27410

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerabili…

Siemens SCALANCE LPE9403 ICS / OT

May 9, 2023
Low 2.5

CVE-2023-27409

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found…

Siemens SCALANCE LPE9403 ICS / OT

May 9, 2023
Low 3.3

CVE-2023-27408

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the…

Siemens SCALANCE LPE9403 ICS / OT

May 9, 2023
Low 3.1

CVE-2023-27462

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affect…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Mar 14, 2023
Low 3.3

CVE-2023-24566

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions),…

Siemens Solid Edge SE2023 Solid Edge SE2022 Browsers ICS / OT

Feb 14, 2023
Low 3.3

CVE-2023-24565

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions),…

Siemens Solid Edge SE2023 Solid Edge SE2022 Browsers ICS / OT

Feb 14, 2023
Low 3.9

CVE-2022-22732

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the …

Schneider Electric EcoStruxure Power Commission ICS / OT

Jan 30, 2023
Low 3.3

CVE-2022-2966

Delta Electronics DOPSoft Out-of-bounds Read

Out-of-bounds Read vulnerability in Delta Electronics DOPSoft.This issue affects DOPSoft: All Versions.

Delta Electronics DOPSoft ICS / OT

Dec 16, 2022