Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
Critical 9.1
Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an…
-
Medium 6.3
Easily guessable session ID's in NE843 Pulsar Plus Controller
Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 …
-
High 8.8
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applica…
-
Low 3.1
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affect…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
Medium 6.6
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affect…
-
Medium 5.0
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affect…
-
Critical 9.1
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SA…
-
High 7.6
CVE-2023-1257
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker c…
-
High 7.5
Information Disclosure Vulnerability in MELSEC Series
Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and…
-
High 8.8
Improper authentication vulnerability in S+ Operations
Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2.
-
Medium 6.2
MMS File Transfer Vulnerability impact on Distribution Automation products
Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion prot…
-
Critical 9.8
WAGO: Missing Authentication for Critical Function
The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.
-
Medium 5.3
WAGO: Origin validation error through CORS misconfiguration
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. A…
-
Critical 9.8
WAGO: Missing Authentication for Critical Function
The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that ca…
-
Medium 6.1
WAGO: Reflective Cross-Site Scripting
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.
-
Medium 4.6
Cross Site Scripting vulnerability in NE843 Pulsar Plus Controller
Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request Forgery.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: …
-
Medium 5.3
A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log f…
-
Critical 9.8
The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the …
-
Critical 9.8CVE-2023-0755 EPSS 12%
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash t…
-
Medium 5.9
IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products
A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products. An attacker could exploit the vulnerability by using a specially crafted message sequence, to force the IEC 61850 MMS-server communication stack, to st…
-
High 8.8
Improper Authorization
The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.
-
Critical 9.1
WAGO: Exposure of configuration interface in unmanaged switches
In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters.
-
High 7.8
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…
-
High 7.8
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applicatio…