Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
Low 2.7
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerabili…
-
Low 2.5
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found…
-
Low 3.3
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the…
-
Critical 9.9
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected dev…
-
Critical 9.8
Moxa MiiNePort E1 - Broken Access Control
Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service.
-
Medium 6.5
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service…
-
High 7.5
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service…
-
Critical 9.8
A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request could …
-
High 7.2
A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same pr…
-
High 7.5
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when ac…
-
Critical 9.8
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
Critical 9.8
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative…
-
Medium 6.7
A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized a…
-
Medium 5.6
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exis…
-
Medium 6.1
A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on …
-
Medium 6.1
A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on …
-
High 7.2
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execut…
-
High 7.2
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code ex…
-
High 7.8
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exis…
-
High 8.1
A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or dele…
-
High 8.8
A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE e…
-
High 8.8
A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install pa…
-
Medium 6.5
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be t…
-
High 7.5
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account take…
-
High 7.6
A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists tha…
-
Medium 6.3
A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged …
-
High 8.3
A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less …
-
Medium 5.5
A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of serv…
-
High 8.8
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a vali…
-
High 8.8
PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service
In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. T…
-
High 7.5
Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit s…
-
Medium 6.7
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions…
-
High 7.8
A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The…
-
Medium 5.9
A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Ent…
-
High 7.5
A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP30…
-
Critical 9.8
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…
-
Medium 5.3
A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix For…
-
High 7.3
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally In…
-
Medium 6.2
A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Stor…
-
High 7.5
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1…