Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
Medium 5.9
PHOENIX CONTACT: Out of bounds read only memory access
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
-
High 8.4
PHOENIX CONTACT: Privilege escalation in the OCPP agent service
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.
-
High 7.3
PHOENIX CONTACT: Command injection in the OCPP Service
An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.
-
Medium 5.3
PHOENIX CONTACT: Log injection in CHARX Series
An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected.
-
Medium 5.3
PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series
An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.
-
Critical 9.8
PHOENIX CONTACT: Remote code execution in CHARX Series
An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation.
-
Medium 5.3
PHOENIX CONTACT: Unintended script file upload in CHARX Series
An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.
-
High 7.2
Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Ser…
-
High 8.2
NPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow Vulnerability
A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker to exploit the vulnerability by sending crafted payload to the web service. Successful exploitation of the vuln…
-
High 7.8
Delta Electronics CNCSoft-B Stack-based Buffer Overflow
Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
-
High 7.8
Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element
Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.
-
High 8.1
Honeywell MPA2 Web Application XSS vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Honeywell MPA2 Access Panel (Web server modules) allows XSS Using Invalid Characters.This issue affects MPA2 Access Panel all version prior to R1.00.08.05. …
-
Medium 5.3
Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU…
-
Medium 6.5
EDS-4000/G4000 Series IP Forwarding Vulnerability
The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the so…
-
Critical 9.0
Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality
A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. …
-
High 8.8
CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration o…
-
High 7.1
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project …
-
High 8.1
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists …
-
High 7.7
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file prot…
-
Medium 6.5
Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5
Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framework: before Niagara AX 3.8.1, before Niagara 4.1.
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnera…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains a…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V23…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains a…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnera…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains a…
-
Critical 9.8
A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3)…
-
High 7.3
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector …
-
High 8.0
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutra…
-
High 8.8
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to up…
-
High 8.8
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to S…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
Low 3.3
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2…
-
Low 3.3
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2…
-
Low 3.3
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant …