Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
High 7.8
Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2 DOPSoft
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
-
High 8.0
A vulnerability exists in the web-authentication component of the SDM600. If exploited an attacker could escalate privi…
-
High 7.2
A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if sec…
-
High 7.6
A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can ta…
-
Medium 5.9
Controller denial of service due to improper handling of a specially crafted message received by the controller. See Ho…
-
Medium 5.9
Server communication with a controller can lead to remote code execution using a specially crafted message from the con…
-
Medium 5.9
Server information leak for the CDA Server process memory can occur when an error is generated in response to a special…
-
High 8.1
Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution …
-
High 8.1
Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution…
-
High 8.1
Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability…
-
High 8.1
Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability …
-
Medium 5.9
Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. S…
-
High 8.1
Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execut…
-
High 7.4
Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in pos…
-
High 8.1
Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting i…
-
High 7.5
Rockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable Fault
An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted,…
-
High 8.6
Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 53…
-
High 7.4
Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overf…
-
High 7.4
Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in p…
-
High 7.5
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by …
-
High 7.6
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users …
-
High 8.4
A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0…
-
Medium 6.1
A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0…
-
Medium 6.1
A vulnerability has been identified in SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) (All versions), SCALANCE W721-1 RJ45 (…
-
Low 3.3
A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), P…
-
Low 3.3
A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), P…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), P…
-
Medium 6.2
A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Profess…
-
High 7.5
Malformed Packet Handling
ABB has internally identified a vulnerability in the ABB VPNI feature of the S+ Control API component which may be used by several Symphony Plus products (e.g., S+ Operations, S+ Engineering and S+ Analyst) This issue affects Symphony Plus S+ Operations: from…
-
High 8.8
Delta Electronics DIAEnergie SQL Injection
SQL injection vulnerability exists in GetDIAE_usListParameters.
-
High 7.0
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM ser…
-
High 7.5
SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the S…
-
Medium 6.8
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. …
-
High 8.2
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. …
-
Medium 5.3
REST service authentication anomaly with “valid username/no password” credential combination for batch job processing r…
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation. Once inside, the threat actor can …
-
Medium 4.4
Rockwell Automation Arena Simulation Vulnerable To Buffer Overflow
A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-se…
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Uninitialized Pointer
An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly. Once inside, the threat actor can run harmful code o…
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation. Once inside, the threat actor can …
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers an access violation…