Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

High 7.2

CVE-2024-48850

Authenticated Absolute Path Traversal

Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT

May 22, 2025
Critical 9.0

CVE-2024-48853

Authenticated Escalation to guest to root

An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT user. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.…

ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT

May 22, 2025
Medium 5.9

CVE-2025-3223

WorkstationST EGD Configuration Server Path Traversal Vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST on Windows (EGD Configuration Server modules) allows Path Traversal.This issue affects WorkstationST: WorkstationST V07.10.10C and earlier.

GE Vernova WorkstationST ICS / OT

May 19, 2025
Medium 6.5

CVE-2025-0921

Information Tampering Vulnerability in Multiple Services of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, GENESIS, GENESIS32, and BizViz

Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsu…

Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 GENESIS64 ICS / OT

May 15, 2025
High 7.5

CVE-2025-2875

CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss o…

Schneider Electric Modicon Controllers M241 / M251 Modicon Controllers M258 / LMC058 ICS / OT

May 14, 2025
Medium 4.4

CVE-2025-40583

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remot…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
High 7.8

CVE-2025-40582

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remot…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
High 7.1

CVE-2025-40581

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remot…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
Medium 6.7

CVE-2025-40580

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
Medium 6.7

CVE-2025-40579

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
Medium 4.3

CVE-2025-40578

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not pr…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
Medium 4.3

CVE-2025-40577

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
Medium 4.3

CVE-2025-40576

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
Medium 4.3

CVE-2025-40575

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
High 7.8

CVE-2025-40574

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
Medium 4.4

CVE-2025-40573

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
Medium 5.5

CVE-2025-40572

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

Siemens SCALANCE LPE9403 ICS / OT

May 13, 2025
Low 2.2

CVE-2025-40571

A vulnerability has been identified in Mendix OIDC SSO (Mendix 10.12 compatible) (All versions < V4.0.1), Mendix OIDC S…

Siemens Mendix OIDC SSO V4.3 (Mendix 10 compatible) Mendix OIDC SSO (Mendix 10.12 compatible) Mendix OIDC SSO V4.2 (Mendix 10 compatible) ICS / OT

May 13, 2025
High 8.8

CVE-2025-40566

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All v…

Siemens SIMATIC PCS neo V5.0 SIMATIC PCS neo V4.1 ICS / OT

May 13, 2025
Medium 6.5

CVE-2025-40556

A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet A…

Siemens BACnet ATEC 550-445 BACnet ATEC 550-441 BACnet ATEC 550-446 ICS / OT

May 13, 2025
Medium 4.7

CVE-2025-40555

A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions). Affected devices start sendi…

Siemens APOGEE PXC+TALON TC Series (BACnet) ICS / OT

May 13, 2025
Critical 9.9

CVE-2025-33025

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1524 RUGGEDCOM ROX RX5000 RUGGEDCOM ROX RX1500 ICS / OT

May 13, 2025
Critical 9.9

CVE-2025-33024

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1510 RUGGEDCOM ROX RX1512 RUGGEDCOM ROX MX5000 ICS / OT

May 13, 2025
Critical 9.9

CVE-2025-32469

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX MX5000 RUGGEDCOM ROX RX1536 RUGGEDCOM ROX RX1400 ICS / OT

May 13, 2025
High 7.8

CVE-2025-32454

A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualiza…

Siemens Teamcenter Visualization V14.3 Teamcenter Visualization V2312 Tecnomatix Plant Simulation V2404 ICS / OT

May 13, 2025
High 8.8

CVE-2025-31930

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph…

Siemens IEC 1Ph 7.4kW Parent cable 7m IEC ERK 3Ph 22 kW Child socket IEC 3Ph 22kW Parent cable 7m ICS / OT

May 13, 2025
Medium 4.2

CVE-2025-31929

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Ch…

Siemens UL Commercial Child 40A w/ 15118 HW IEC 1Ph 7.4kW Parent socket/ shutter IEC 3Ph 22kW Parent socket/ shutter ICS / OT

May 13, 2025
High 7.5

CVE-2025-30176

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC …

Siemens SINEC NMS Totally Integrated Automation Portal (TIA Portal) V18 Totally Integrated Automation Portal (TIA Portal) V17 ICS / OT

May 13, 2025
High 7.5

CVE-2025-30175

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC …

Siemens SINEC NMS Totally Integrated Automation Portal (TIA Portal) V18 Totally Integrated Automation Portal (TIA Portal) V17 ICS / OT

May 13, 2025
High 7.5

CVE-2025-30174

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC …

Siemens SINEC NMS Totally Integrated Automation Portal (TIA Portal) V18 Totally Integrated Automation Portal (TIA Portal) V17 ICS / OT

May 13, 2025
Critical 9.8

CVE-2025-26390

A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of a…

Siemens OZW772 OZW672 ICS / OT

May 13, 2025
Critical 10.0

CVE-2025-26389

A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in a…

Siemens OZW672 OZW772 ICS / OT

May 13, 2025
Medium 6.5

CVE-2025-24510

A vulnerability has been identified in MS/TP Point Pickup Module (All versions). Affected devices improperly handle spe…

Siemens MS/TP Point Pickup Module ICS / OT

May 13, 2025
Medium 5.9

CVE-2025-24009

A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK…

Siemens SIRIUS 3RK3 Modular Safety System (MSS) SIRIUS Safety Relays 3SK2 ICS / OT

May 13, 2025
Medium 6.5

CVE-2025-24008

A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK…

Siemens SIRIUS 3RK3 Modular Safety System (MSS) SIRIUS Safety Relays 3SK2 ICS / OT

May 13, 2025
High 7.5

CVE-2025-24007

A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK…

Siemens SIRIUS 3RK3 Modular Safety System (MSS) SIRIUS Safety Relays 3SK2 ICS / OT

May 13, 2025
Medium 5.3

CVE-2024-51447

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The logi…

Siemens Polarion V2404 Polarion V2310 ICS / OT

May 13, 2025
Medium 6.5

CVE-2024-51446

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The file…

Siemens Polarion V2404 Polarion V2310 ICS / OT

May 13, 2025
Medium 6.5

CVE-2024-51445

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affe…

Siemens Polarion V2404 Polarion V2310 ICS / OT

May 13, 2025
Medium 6.5

CVE-2024-51444

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The appl…

Siemens Polarion V2404 Polarion V2310 ICS / OT

May 13, 2025