Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
High 7.5
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the d…
-
High 8.1
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could …
-
Critical 9.8
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malforme…
-
Medium 5.3
CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when …
-
Medium 4.5
CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP creden…
-
Medium 6.4
CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause escalation of privileg…
-
Medium 6.5
CWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH interface over the product netwo…
-
Medium 6.5
CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may prevent user to update the …
-
High 8.0
A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a mali…
-
Medium 4.1
A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource th…
-
Medium 6.5
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrar…
-
Medium 6.5
A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (…
-
Medium 5.7
A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or fun…
-
High 7.4
A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validatio…
-
High 8.6
A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a deni…
-
Critical 9.1
vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow uninte…
-
Critical 10.0
An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited al…
-
Medium 6.9
If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccess…
-
Medium 6.8
Allow attackers to intercept or falsify data exchanges between the client and the server
-
Critical 9.3
A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protect…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0012), Tecnomatix Plant …
-
High 8.2
A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-20…
-
Medium 6.2
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …
-
Medium 5.5
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …
-
Medium 5.1
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …
-
Medium 6.2
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …
-
Medium 6.3
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …
-
High 7.8
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web inter…
-
High 7.7
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected …
-
Medium 5.9
A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.11.0), Mendix Applicatio…
-
Medium 4.9
A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542S…
-
Low 3.3
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates tempor…
-
Critical 9.2
Replay Attack in KNX Secure Devices
Replay Attack in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to capture/replay KNX telegram to local KNX Bus-System
-
Critical 9.6
FDSK Leak in KNX Secure Devices
FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System
-
High 7.8
CODESYS: Development system prone to DoS through exposure of resource to wrong sphere
A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.
-
High 7.5
CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.
-
Critical 9.8
Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary c…
-
High 7.8
Incorrect default permissions issue exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary c…
-
High 7.0CVE-2024-3640 Public exploit
Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables
An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threa…
-
High 8.8
Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploit…