Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
High 7.5
A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products…
-
Medium 5.4
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). There is a stored cross-site scripting vu…
-
High 8.0
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server fro…
-
Medium 6.3
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does…
-
Medium 6.5
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does…
-
Medium 6.8
A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4.0), Mendix Application…
-
Medium 6.5
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…
-
Critical 9.1
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with admini…
-
Low 3.7
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…
-
Low 2.7
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web…
-
Medium 4.3
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGED…
-
Medium 4.9
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…
-
Medium 4.9
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the de…
-
High 7.2
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGED…
-
Critical 9.6
A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in S…
-
Critical 9.6
A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache valida…
-
Low 3.5
A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks…
-
Critical 10.0CVE-2023-4699 Public exploit
Arbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA products
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU modules, MELSEC iQ-F Series, MELSEC iQ-R series CPU modules, MELSEC iQ-R series, MELSEC iQ-L series, MELSEC Q series, MELSEC-L series, Mitsubishi…
-
Medium 5.3
Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web s…
-
Low 3.1
Cookie Without Secure Flag
A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnera…
-
Low 3.1
Session cookies attribute not set properly
A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthor…
-
High 7.5
Incorrect Implementation of Authentication Algorithm Vulnerability
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorize…
-
Medium 6.5
Web Server Buffer Overflow Vulnerability
A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to t…
-
Medium 5.3
Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, d…
-
Medium 5.3
The responses for web queries with certain parameters disclose internal path of resources. This information can be used…
-
Medium 5.3
The response messages received from the eSOMS report generation using certain parameter queries with full file path can…
-
Low 2.7
Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the…
-
Medium 6.5
The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on th…
-
High 7.8
Rockwell Automation Arena® Simulation Uninitialized Pointer Vulnerability
Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application. The threat-actor could the…
-
High 7.8
Rockwell Automation Arena® Simulation Out of Bounds Read Vulnerability
An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow. The threat-actor could th…
-
High 7.5
Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to…
-
High 8.1
Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability
Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This v…
-
Unscored —
CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML externa…
-
Low 2.7
WAGO: Multiple products vulnerable to local file inclusion
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
-
High 8.2CVE-2023-29464 EPSS 15%
Rockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information Disclosure
FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious packets. Sending a size larger than the buffer size results in leakage of data from memory resulting in an infor…
-
Critical 9.1
Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module
Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product wi…
-
High 7.8
A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.…
-
High 7.8
A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20). The affected application is insta…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant …
-
Medium 4.7
A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application improperly sanitizes c…