Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Critical 9.1

CVE-2023-36752

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX MX5000 RUGGEDCOM ROX RX1536 RUGGEDCOM ROX RX1400 ICS / OT

Jul 11, 2023
Critical 9.1

CVE-2023-36751

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1511 RUGGEDCOM ROX RX1524 RUGGEDCOM ROX RX5000 ICS / OT

Jul 11, 2023
Critical 9.1

CVE-2023-36750

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1500 RUGGEDCOM ROX RX1510 RUGGEDCOM ROX RX1512 ICS / OT

Jul 11, 2023
High 7.4

CVE-2023-36749

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1512 RUGGEDCOM ROX MX5000 RUGGEDCOM ROX RX1536 ICS / OT

Jul 11, 2023
Medium 5.9

CVE-2023-36748

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1512 RUGGEDCOM ROX MX5000 RUGGEDCOM ROX RX1536 ICS / OT

Jul 11, 2023
High 8.6

CVE-2023-36521

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4)…

Siemens SIMATIC MV540 S SIMATIC MV550 S SIMATIC MV560 X ICS / OT

Jul 11, 2023
High 8.8

CVE-2023-36390

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX5000 RUGGEDCOM ROX RX1500 RUGGEDCOM ROX RX1510 ICS / OT

Jul 11, 2023
High 8.8

CVE-2023-36389

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1501 RUGGEDCOM ROX RX1511 RUGGEDCOM ROX RX1524 ICS / OT

Jul 11, 2023
High 8.8

CVE-2023-36386

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX5000 RUGGEDCOM ROX RX1500 RUGGEDCOM ROX RX1510 ICS / OT

Jul 11, 2023
High 7.5

CVE-2023-35921

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4)…

Siemens SIMATIC MV560 X SIMATIC MV540 H SIMATIC MV550 H ICS / OT

Jul 11, 2023
High 7.5

CVE-2023-35920

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4)…

Siemens SIMATIC MV540 S SIMATIC MV550 S SIMATIC MV560 X ICS / OT

Jul 11, 2023
High 7.4

CVE-2023-29131

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect …

Siemens SIMATIC CN 4100 ICS / OT

Jul 11, 2023
Critical 9.9

CVE-2023-29130

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper acce…

Siemens SIMATIC CN 4100 ICS / OT

Jul 11, 2023
High 7.5

CVE-2022-31810

A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications impro…

Siemens SiPass integrated ICS / OT

Jul 11, 2023
Low 3.7

CVE-2022-29562

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1510 RUGGEDCOM ROX RX1512 RUGGEDCOM ROX MX5000 ICS / OT

Jul 11, 2023
High 7.5

CVE-2022-29561

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1536 RUGGEDCOM ROX RX1400 RUGGEDCOM ROX RX1501 ICS / OT

Jul 11, 2023
High 8.8

CVE-2023-30765 Public exploit

Delta Electronics InfraSuite Device Master Improper Access Control

Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.

Delta Electronics InfraSuite Device Master ICS / OT

Jul 10, 2023
Medium 6.5

CVE-2023-34316

Delta Electronics InfraSuite Device Master Improper Access Control

An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.

Delta Electronics InfraSuite Device Master ICS / OT

Jul 10, 2023
Critical 9.8

CVE-2023-34347

Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.

Delta Electronics InfraSuite Device Master ICS / OT

Jul 10, 2023
Medium 5.3

CVE-2023-3336

TN-5900 Series User Enumeration Vulnerability

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force atta…

Moxa TN-5900 Series ICS / OT

Jul 5, 2023
High 7.5

CVE-2023-2846

Authentication Bypass Vulnerability in MELSEC-F Series main module

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially cr…

Mitsubishi Electric MELSEC-F Series FX3U-48MT/DS MELSEC-F Series FX3U-48MR/ES-A MELSEC-F Series FX3U-64MR/ES ICS / OT

Jun 30, 2023
Critical 9.0

CVE-2023-2625

A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment a…

Hitachi Energy TXpert Hub CoreTec 4 ICS / OT

Jun 28, 2023
High 7.5

CVE-2023-1150

WAGO: Series 750-3x/-8x prone to MODBUS server DoS

Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.

WAGO 750-862 750-891 750-823 ICS / OT

Jun 26, 2023
Medium 4.9

CVE-2023-1620

WAGO: DoS in multiple products in multiple versions using Codesys

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.

WAGO 750-852 750-862 750-881 ICS / OT

Jun 26, 2023
Medium 4.9

CVE-2023-1619

WAGO: DoS in multiple versions of multiple products

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.

WAGO 750-823 750-831/xxx-xxx 750-832/xxx-xxx ICS / OT

Jun 26, 2023
Critical 9.8

CVE-2023-27396

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA…

Omron Multiple OMRON products which implement FINS protocol ICS / OT

Jun 19, 2023
High 7.0

CVE-2023-2570

A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potent…

Schneider Electric EcoStruxure Foxboro DCS Control Core Services ICS / OT

Jun 14, 2023
High 7.8

CVE-2023-2569

A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, a…

Schneider Electric EcoStruxure Foxboro DCS Control Core Services ICS / OT

Jun 14, 2023
High 7.8

CVE-2023-3001 EPSS 32%

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpret…

Schneider Electric IGSS Dashboard (DashBoard.exe) ICS / OT

Jun 14, 2023
High 7.8

CVE-2023-1049

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of …

Schneider Electric Pro-face BLUE EcoStruxure Operator Terminal Expert ICS / OT

Jun 14, 2023
High 7.5

CVE-2023-2778

Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-Service

A denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can be exploited by sending a modified packet to port 400. If exploited, the application could potentially crash or experience a high CPU or me…

Rockwell Automation FactoryTalk Transaction Manager ICS / OT

Jun 13, 2023
Medium 4.1

CVE-2023-2639

Rockwell Automation FactoryTalk System Services Vulnerable to Sensitive Information Disclosure

The underlying feedback mechanism of Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk Policy Manager rules to relevant devices on the network does not verify that the origin of the communication is from a legitimate local clien…

Rockwell Automation FactoryTalk System Services ICS / OT

Jun 13, 2023
Medium 5.9

CVE-2023-2638

Rockwell Automation FactoryTalk System Services Vulnerable to a Denial-of-Service Attack

Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected. Improper authorization in FTSSBackupRestore.exe may lead to the loading of malicious configuration archives. This vulnerability may…

Rockwell Automation FactoryTalk System Services ICS / OT

Jun 13, 2023
High 7.3

CVE-2023-2637

Rockwell Automation FactoryTalk System Services Vulnerable To Use Of Hard-Coded Cryptographic Key

Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies. Hard-coded cryptographic key may lead to privilege escalation. This vulnerability may allow a local, authenticated non-admin user to gen…

Rockwell Automation FactoryTalk System Services ICS / OT

Jun 13, 2023
Medium 6.8

CVE-2023-33921

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…

Siemens CP-8050 MASTER MODULE CP-8031 MASTER MODULE ICS / OT

Jun 13, 2023
Medium 6.8

CVE-2023-33920

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…

Siemens CP-8031 MASTER MODULE CP-8050 MASTER MODULE ICS / OT

Jun 13, 2023
High 7.2

CVE-2023-33919 EPSS 48%

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…

Siemens CP-8050 MASTER MODULE CP-8031 MASTER MODULE ICS / OT

Jun 13, 2023
High 7.8

CVE-2023-33124

A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.2 Teamcenter Visualization V14.1 ICS / OT

Jun 13, 2023
High 7.8

CVE-2023-33123

A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.2 Teamcenter Visualization V14.1 ICS / OT

Jun 13, 2023
Low 3.3

CVE-2023-33122

A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.2 Teamcenter Visualization V14.1 ICS / OT

Jun 13, 2023