Category
ICS / OT
4,112 known vulnerabilities.
873 results · Clear filters · Feed
-
Medium 6.1
WAGO: Reflective Cross-Site Scripting
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.
-
Medium 4.6
Cross Site Scripting vulnerability in NE843 Pulsar Plus Controller
Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request Forgery.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: …
-
Medium 5.3
A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log f…
-
Medium 5.9
IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to st…
-
Medium 5.9
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Application…
-
Medium 6.7
A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions …
-
Medium 5.9
A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial E…
-
Medium 5.3CVE-2022-40224 EPSS 65%
A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Sw…
-
Medium 4.3
A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industr…
-
Medium 4.3
A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industr…
-
Medium 4.3
A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industr…
-
Medium 5.3
An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial …
-
Medium 6.8
Authentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 0…
-
Medium 6.1
Improper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT…
-
Medium 5.5
Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and e…
-
Medium 6.5
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…
-
Medium 5.3
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…
-
Medium 6.5
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to …
-
Medium 4.3
A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a mal…
-
Medium 6.5
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a func…
-
Medium 5.9
Authentication Bypass Vulnerability in Web Server Function on MELSEC Series
Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later, and versions 1.280 and prior, Mitsubishi Electri…
-
Medium 5.9
WAGO: Missing authentication for config export functionality in multiple products
The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot fo…
-
Medium 5.7
A vulnerability exists in the Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role.
A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role, granting it access to the embedded Power BI reports feature. An attacker that man…
-
Medium 4.6
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on…
-
Medium 5.5
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…
-
Medium 6.1
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…
-
Medium 6.5
A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C …
-
Medium 5.3
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…
-
Medium 5.4
A vulnerability has been identified in Polarion ALM (All versions < V2304.0). The affected application contains a Host …
-
Medium 6.5
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker…
-
Medium 5.7
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device c…
-
Medium 5.3
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All v…
-
Medium 5.4
A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions < V3.15 P038), SIMATIC WinCC OA V3.16 (All …
-
Medium 6.1
A vulnerability has been identified in PLM Help Server V4.2 (All versions). A reflected cross-site scripting (XSS) vuln…
-
Medium 4.9
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 5.5
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 4.9
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 6.8
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and lat…
-
Medium 6.8
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT D…
-
Medium 6.8
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allow…