Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
Medium 5.5
Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
An high privileged remote attacker can inject arbitrary content into the custom CSS field on the affected devices due to improper neutralization of input during web page generation ('Cross-site Scripting').
-
High 8.1
ABB Ability OPTIMAX Authentication Bypass in Single-Sign On
Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Ability OPTIMAX: 6.1, 6.2, from 6.3.0 before 6.3.1-251120, from 6.4.0 before 6.4.1-251120.
-
High 7.8
DIAView - Command Injection Vulnerability
Delta Electronics DIAView has Command Injection vulnerability.
-
Critical 9.8
DIAView - Authentication Bypass Vulnerability
Delta Electronics DIAView has multiple vulnerabilities.
-
High 8.1
DIAView - Authentication Bypass Vulnerability
Delta Electronics DIAView has multiple vulnerabilities.
-
High 8.4
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious pr…
-
High 8.4
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious…
-
Critical 9.8
WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation
WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipulate user session cookies. Attackers can modify the cookie's 'name' and 'roles' parameters to elevate from ordinary user to administrative pr…
-
High 7.5
A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versions), SIMATIC ET 200…
-
High 8.8
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected application contain…
-
Critical 10.0
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauth…
-
High 8.8
Config-Upload Code Injection
An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improp…
-
Medium 6.5
Idle session timeout is not configured for multiple open ports
Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.
-
High 8.8
Authentication bypass by brute forcing Authentication Headers
Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.
-
Medium 6.5
Improper implementation of Modbus protocol leading to DOS attack
Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.
-
High 7.0
A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attac…
-
High 7.1CVE-2025-2026 Public exploit
The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attack…
-
High 7.7
The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) …
-
Critical 9.1
DVP-12SE11T - Out-of-bound memory write Vulnerability
DVP-12SE11T - Out-of-bound memory write Vulnerability
-
High 7.5
DVP-12SE11T - Denial of Service Vulnerability
DVP-12SE11T - Denial of Service Vulnerability
-
High 8.1
DVP-12SE11T - Authentication Bypass via Partial Password Disclosure
DVP-12SE11T - Authentication Bypass via Partial Password Disclosure
-
Critical 9.1
DVP-12SE11T - Password Protection Bypass
DVP-12SE11T - Password Protection Bypass
-
High 7.2
DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information
DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information
-
High 7.5
Mitsubishi Electric Europe smartRTU Missing Authentication for Critical Function
A remote unauthenticated attacker may be able to bypass authentication by utilizing a specific API route to execute arbitrary OS commands.
-
Medium 4.0
Modbus/TCP Dos Vulnerability in DVP15MC11T
Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service.
-
High 8.2
Malicious Code Execution Vulnerability in the Software Keyboard Function of GENESIS64, ICONICS Suite, Mobile HMI, and MC Works64
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubi…
-
Medium 5.1
Information Disclosure Vulnerability in GT Designer3
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer3 Version1 (GOT1000) all versions allows a local unauthenticated attacker to obtain plaintext crede…
-
High 8.7
Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and …
-
High 7.1
Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, cl…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affected applications contains an un…
-
Critical 9.8
Stack-based buffer overflow via unsafe sscanf in check_cookie()
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.
-
Critical 9.8
Stack-based buffer overflow via unsafe sscanf in check_account()
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.
-
Medium 6.3
Unauthenticated Device Registration Vulnerability in MXsecurity Series
An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determined Object Attributes, has been identified in the MXsecurity Series. An unauthenticated remote attacker can exploit this vulnerability by …
-
High 8.7
432ES-IG3 Series A Denial-of-Service Vulnerability
A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service. A manual power cycle is required to recover the device.
-
High 8.7
FactoryTalk® DataMosaix™ Private Cloud SQL Injection
A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints.
-
Medium 4.3
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server inf…
-
Medium 4.9
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits incon…
-
Medium 4.6
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port…
-
High 8.1
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive in…
-
High 8.3
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properl…