Category
ICS / OT
4,102 known vulnerabilities.
871 results · Clear filters · Feed
-
Medium 6.2
Missing GSDX SignatureValue verification
PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` over canonicalized `SignedInfo`. An unauthenticated local attacker can modify signed GSDML content, update its manifest digest, retain the p…
-
Medium 5.3
Missing brute-force protection for web interface
HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible.
-
Medium 5.3
A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device ser…
-
Medium 6.8
A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix …
-
Medium 6.9
Missing Authorization on Secret Endpoints
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive info…
-
Medium 6.7
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application load…
KEV Oct 20, 2026 -
Medium 5.2
My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion
Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5.
-
Medium 5.3
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …
-
Medium 6.3
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…
-
Medium 6.3
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…
-
Medium 5.4
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…
-
Medium 4.3
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…
-
Medium 6.5
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…
-
Medium 6.7
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…
-
Medium 5.5
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affec…
-
Medium 6.1
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before r…
-
Medium 6.1
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before includin…
-
Medium 6.1
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in s…
-
Medium 6.1
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering…
-
Medium 6.1
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CS…
-
Medium 6.8
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, I…
-
Medium 5.1
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServle…
-
Medium 6.5
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated…
-
Medium 5.0
Path Traversal During Project Archive Import
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14.
-
Medium 6.4
Improper Permission Assignment in Scheduler Service
Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14.
-
Medium 6.5
A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface …
-
Medium 6.5
Information Disclosure via Schema Path Manipulation
A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint using a valid user cookie allowing disclosure of all user password hashes.
-
Medium 5.9CVE-2026-81861 Public exploit
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information…
-
Medium 6.8
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activate…
-
Medium 6.8
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary comm…
-
Medium 5.3
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from…
-
Medium 6.1
A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V…
-
Medium 5.9
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL…
-
Medium 4.6
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, …
-
Medium 4.8
FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability
A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to c…
-
Medium 6.9
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to…
-
Medium 5.1
CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the N…
-
Medium 6.9
Rockwell Automation ArmorStart® LT Stored Cross-site scripting
Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when other users …
-
Medium 6.9
OTTO® Fleet Manager – Weak Password Hashing Configuration
A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-…
-
Medium 4.3
SQL injection
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limit…