Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
High 8.8
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is …
-
Critical 9.8
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is …
-
Critical 9.8
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is …
-
Critical 9.8
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is …
-
Medium 6.5
WAGO: Year 2038 problem
A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.
-
Critical 9.8
COMMGR - Insufficient Randomization Authentication Bypass
Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs (CWE-338). An attacker could easily brute force a session ID and load and execute arbitrary code.
-
High 8.5
Local Privilege Escalation Vulnerability
A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the ta…
-
High 8.5
Local Privilege Escalation in ThinManager®
A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary folder causing the Access Control Entry of the directory to inherit permissions from the parent directory. If e…
-
Medium 6.8
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to una…
-
Medium 4.6
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confide…
-
Medium 4.2
CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized acc…
-
High 7.8
CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availa…
-
High 7.8
CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak informatio…
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitr…
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can …
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitr…
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can …
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can …
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can…
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can…
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can…
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on…
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on…
-
High 8.5
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on…
-
Medium 5.3
A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.21.0), Mendix Runtime V10.12 (All version…
-
Medium 6.7
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application doe…
-
Medium 6.7
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application sea…
-
Critical 9.8
A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device …
-
Medium 6.5
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
Medium 6.5
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
Critical 10.0
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardco…
-
High 8.6
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
High 8.6
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
High 7.3
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
Critical 9.1
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
Critical 9.1
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
Critical 9.1
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…
-
High 8.6
Commend Injection Leading to Privilege Escalation
This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privileg…
-
Critical 9.2
Command Injection in NTP Setting
A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or …
-
High 7.5
Admin Shell Access Vulnerability in Rockwell Automation Verve Asset Manager
A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing. A portion of the administrative web interface for Verve's Legacy Agentless Device Inventory (ADI) capability (deprecated since the 1.36 release) all…