Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
Unscored —
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and P…
-
Unscored —
A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA An…
-
Unscored —
A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in whic…
-
Unscored —
A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute a…
-
Unscored —
An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and pri…
-
Unscored —
Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerabi…
-
Unscored —
An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and pr…
-
Unscored —
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web serv…
-
Unscored —
An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prio…
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who perfor…
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V1.81.2). An attacker with ne…
-
Critical 9.8
Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay
An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run,…
-
Medium 6.5
Schneider Electric Modicon PLCs Predictable Value Range from Previous Values
A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions pri…
-
Unscored —
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote…
-
Unscored —
A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoM…
-
Unscored —
A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All…
-
Medium 6.5
Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a …
-
Medium 6.5
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a lo…
-
Unscored —
All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corrupt…
-
Critical 9.1
An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A …
-
Medium 5.3
An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless…
-
Medium 5.3
An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Serie…
-
High 7.5
An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access P…
-
Unscored —
An exploitable information disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wirel…
-
Low 3.1
An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wi…
-
High 7.5
An exploitable null pointer dereference vulnerability exists in the Web Application /forms/web_runScript iw_filename fu…
-
Medium 5.3
An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A w…
-
Medium 5.9
An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP runn…
-
High 7.5
An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A W…
-
High 7.5
An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK…
-
High 7.5
An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-313…
-
Medium 5.9
A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. relat…
-
High 7.5
A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. relat…
-
Critical 9.1
Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service.
-
Critical 9.1
Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
-
Unscored —
Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execu…
-
High 7.5
Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Commu…
-
Critical 10.0
Schneider Electric ETG3000 FactoryCast HMI Gateway Use of Hard-coded Credentials
The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.
-
Critical 10.0
Schneider Electric ETG3000 FactoryCast HMI Gateway Missing Authentication for Critical Function
The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct reque…
-
Critical 10.0
Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function
Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.