Category
ICS / OT
4,112 known vulnerabilities.
873 results · Clear filters · Feed
-
Medium 6.5
WAGO: Year 2038 problem
A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.
-
Medium 6.8
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to una…
-
Medium 4.6
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confide…
-
Medium 4.2
CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized acc…
-
Medium 5.3
A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.21.0), Mendix Runtime V10.12 (All version…
-
Medium 6.7
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application doe…
-
Medium 6.7
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application sea…
-
Medium 6.5
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
Medium 6.5
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
Medium 6.5
The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code i…
-
Medium 6.1
The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-si…
-
Medium 6.1
A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header valu…
-
Medium 6.5
A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that all…
-
Medium 4.9
A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and aut…
-
Medium 4.4
A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU applicat…
-
Medium 5.3
CODESYS (Edge) Gateway for Windows insecure default
An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.
-
Medium 6.6
CODESYS Control V3 removable media path traversal
Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access.
-
Medium 6.8
CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized us…
-
Medium 6.0
CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP …
-
Medium 6.2
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant …
-
Medium 6.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant …
-
Medium 5.3
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC…
-
Medium 6.1
Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticate…
-
Medium 6.1
A CWE-15 "External Control of System or Configuration Setting" in GE Vernova UR IED family devices from version 7.0 up …
-
Medium 5.4
Wago: Vulnerability in libwagosnmp
An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.
-
Medium 5.3
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services runni…
-
Medium 6.5
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious…
-
Medium 6.5
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious…
-
Medium 5.5
CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation wh…
-
Medium 6.2
A vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing feature is missing a le…
-
Medium 6.5
A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) (All versions < V4.7), …
-
Medium 4.3
A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-…
-
Medium 5.9
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All …
-
Medium 6.7
A vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions < V2025.1). An example s…
-
Medium 4.6
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions)…
-
Medium 6.8
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP200) (All v…
-
Medium 5.3
The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory reso…
-
Medium 5.3
The login functionality of the web server in affected devices does not normalize the response times of login attempts. …
-
Medium 5.4
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when …
-
Medium 6.5
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow …