Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Unscored —

CVE-2018-7758

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet …

Schneider Electric MiCOM P540D Range with Legacy Ethernet Board ICS / OT

Apr 18, 2018
Unscored —

CVE-2017-9636

Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap.…

Mitsubishi Electric Europe E-Designer ICS / OT

Apr 17, 2018
Unscored —

CVE-2017-9634

Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to…

Mitsubishi Electric Europe E-Designer ICS / OT

Apr 17, 2018
Unscored —

CVE-2017-9638

Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack.…

Mitsubishi Electric Europe E-Designer ICS / OT

Apr 17, 2018
Unscored —

CVE-2016-8371 Public exploit EPSS 11%

The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism …

Phoenix Contact Phoenix Contact ILC PLCs ICS / OT

Apr 5, 2018
Unscored —

CVE-2016-8380 Public exploit EPSS 11%

The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

Phoenix Contact Phoenix Contact ILC PLCs ICS / OT

Apr 5, 2018
Unscored —

CVE-2016-8366 Public exploit

Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincide…

Phoenix Contact Phoenix Contact ILC PLCs ICS / OT

Apr 5, 2018
Unscored —

CVE-2018-8836

Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper imple…

WAGO WAGO 750 Series ICS / OT

Apr 3, 2018
Unscored —

CVE-2018-4841

A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to por…

Siemens TIM 1531 IRC ICS / OT

Mar 29, 2018
Unscored —

CVE-2018-4844

A vulnerability has been identified in SIMATIC WinCC OA UI for Android (All versions < V3.15.10), SIMATIC WinCC OA UI f…

Siemens SIMATIC WinCC OA UI for Android, SIMATIC WinCC OA UI for iOS Android iOS ICS / OT

Mar 20, 2018
Medium 6.5

CVE-2018-4843

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 41…

Siemens SIMATIC S7-1500 Software Controller SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) SIMATIC S7-400 CPU 414F-3 PN/DP V7 Windows ICS / OT

Mar 20, 2018
Unscored —

CVE-2018-7229

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7231

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7232

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7230

A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Elec…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7235

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7234

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7233

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7227

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7238

A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firm…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7228

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7237

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7236

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which…

Schneider Electric Pelco Sarix Professional ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-7239

A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in …

Schneider Electric SoMove ICS / OT

Mar 9, 2018
Unscored —

CVE-2018-4839

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions…

Siemens EN100 Ethernet module PROFINET IO variant EN100 Ethernet module Modbus TCP variant EN100 Ethernet module IEC 61850 variant ICS / OT

Mar 8, 2018
Unscored —

CVE-2018-4838

A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet m…

Siemens EN100 Ethernet module Modbus TCP variant EN100 Ethernet module IEC 61850 variant EN100 Ethernet module PROFINET IO variant ICS / OT

Mar 8, 2018
Unscored —

CVE-2018-4840

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions…

Siemens EN100 Ethernet module Modbus TCP variant EN100 Ethernet module IEC 61850 variant EN100 Ethernet module PROFINET IO variant ICS / OT

Mar 8, 2018
Unscored —

CVE-2018-1168

This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with…

ABB ABB MicroSCADA ICS / OT

Feb 21, 2018
Unscored —

CVE-2018-4835

A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network access to the TeleCont…

Siemens TeleControl Server Basic ICS / OT

Jan 25, 2018
Unscored —

CVE-2018-4837

A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Serv…

Siemens TeleControl Server Basic ICS / OT

Jan 25, 2018
Unscored —

CVE-2018-4836

A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged…

Siemens TeleControl Server Basic ICS / OT

Jan 25, 2018
Critical 9.8

CVE-2018-4834

A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All v…

Siemens Desigo PXM20-E V6.00 Desigo PXC001-E.D V6.00 Desigo PXC22-E.D V6.00 ICS / OT

Jan 24, 2018
Unscored —

CVE-2017-9965 Scanner template

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions …

Schneider Electric Pelco VideoXpert Enterprise ICS / OT

Jan 2, 2018
Unscored —

CVE-2017-9964

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By s…

Schneider Electric Pelco VideoXpert Enterprise ICS / OT

Jan 2, 2018
Unscored —

CVE-2017-9966

A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior.…

Schneider Electric Pelco VideoXpert Enterprise ICS / OT

Jan 2, 2018
High 8.8

CVE-2017-12736

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain…

Siemens RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RMC8388 V5.X ICS / OT

Dec 26, 2017
High 7.5

CVE-2017-12741

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be …

Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) ICS / OT

Dec 26, 2017
Unscored —

CVE-2017-7974

A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions…

Schneider Electric U.Motion ICS / OT

Sep 25, 2017
Unscored —

CVE-2017-7970

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and P…

Schneider Electric PowerSCADA Anywhere Citect Anywhere ICS / OT

Sep 25, 2017
Unscored —

CVE-2017-7972

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and P…

Schneider Electric Citect Anywhere PowerSCADA Anywhere ICS / OT

Sep 25, 2017