Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
High 7.8
Rockwell Automation Arena Simulation vulnerable to out of bounds write
An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, …
-
Medium 5.3
Rockwell Automation - FactoryTalk® View ME on PanelView™ Plus 7 Boot Terminal lack Security Protections
A vulnerability exists in the affected product that allows a malicious user to restart the Rockwell Automation PanelView™ Plus 7 terminal remotely without security protections. If the vulnerability is exploited, it could lead to the loss of view or control of…
-
High 7.5
Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover.
-
High 7.5
Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it.
-
High 7.5
Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it.
-
Medium 4.6
Delta Electronics DIAEnergie Cross-site scripting
Improper neutralization of input within the affected product could lead to cross-site scripting.
-
High 8.1
Delta Electronics DIAEnergie Path traversal
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.
-
High 8.1
Delta Electronics DIAEnergie Path traversal
It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in GetDIAE_unListParameters.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in GetDIAE_slogListParameters.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in GetDIAE_astListParameters.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.
-
High 8.8
Delta Electronics DIAEnergie SQL injection
SQL injection vulnerability exists in the script Handler_CFG.ashx.
-
High 8.8
Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie
Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.
-
High 7.8
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious…
-
High 7.5
CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated file…
-
High 8.2
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when …
-
Critical 9.8
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeov…
-
Critical 9.8
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU…
-
Critical 9.8
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU…
-
Critical 9.8
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modu…
-
Critical 9.8
Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU…
-
Critical 9.8
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modu…
-
Medium 5.4
Wago: Improper Neutralization of Input During Web Page Generation in multiple devices
An unauthenticated remote attacker can use an XSS attack due to improper neutralization of input during web page generation. User interaction is required. This leads to a limited impact of confidentiality and integrity but no impact of availability.
-
High 8.8
Wago: Buffer Copy without Checking Size of Input in wbm of multiple products
An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device.
-
Critical 9.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application con…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains a…
-
High 7.6
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensi…
-
High 7.5
A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affec…
-
High 7.5
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72…
-
High 7.5
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72…
-
Critical 10.0
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Pane…
-
Medium 4.6
A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 …
-
Medium 5.5
A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does n…
-
High 8.7
PHOENIX CONTACT: Lack of SSL support in CHARX Series
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected.
-
Medium 4.8
PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS.
-
High 7.5
PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series
An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality.
-
High 7.5
PHOENIX CONTACT: DoS of the control agent in CHARX Series
An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality.
-
High 7.8
PHOENIX CONTACT: File ownership manipulation in CHARX Series
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.
-
High 7.4
PHOENIX CONTACT: Out of bounds write only memory access
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.