Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Medium 6.1

CVE-2022-33322

Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interf…

Mitsubishi Electric Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9021(S) Refrigerator MR-MXD50/57G Air Conditioning MSZ-FD40/56/63/71/8022S ICS / OT

Nov 8, 2022
Critical 9.8

CVE-2022-33321

Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connectio…

Mitsubishi Electric Air Conditioning MSZ-ZW22/25/28/36/40/56/63/71/80/9020(S) Air Conditioning MSZ-ZD25/28/40/56/63/71/8022(S) Air Conditioning MSZ-ZXV22/25/28/36/40/56/63/71/80/9020(S) ICS / OT

Nov 8, 2022
High 7.8

CVE-2022-39157

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34…

Siemens Simcenter Femap Parasolid V35.0 Parasolid V34.1 ICS / OT

Nov 8, 2022
High 7.8

CVE-2022-39136

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Nov 8, 2022
Medium 6.5

CVE-2022-30694

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenti…

Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP SIMATIC S7-1500 CPU 1513-1 PN SIMATIC Drive Controller CPU 1507D TF ICS / OT

Nov 8, 2022
Critical 9.8

CVE-2022-44457

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix …

Siemens Mendix SAML (Mendix 8 compatible) Mendix SAML (Mendix 7 compatible) Mendix SAML (Mendix 9 compatible, Upgrade Track) ICS / OT

Nov 8, 2022
High 7.8

CVE-2022-41660

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Nov 8, 2022
High 7.8

CVE-2022-41664

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Nov 8, 2022
High 7.8

CVE-2022-41661

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Nov 8, 2022
High 7.8

CVE-2022-41663

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Nov 8, 2022
High 7.8

CVE-2022-41662

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…

Siemens JT2Go Teamcenter Visualization V14.1 Teamcenter Visualization V13.3 ICS / OT

Nov 8, 2022
High 7.5

CVE-2022-43398

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…

Siemens POWER METER SICAM Q100 ICS / OT

Nov 8, 2022
Critical 9.9

CVE-2022-43546

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…

Siemens SICAM P850 SICAM P855 POWER METER SICAM Q100 ICS / OT

Nov 8, 2022
Critical 9.9

CVE-2022-43545

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…

Siemens SICAM P850 SICAM P855 POWER METER SICAM Q100 ICS / OT

Nov 8, 2022
Critical 9.9

CVE-2022-43439

A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER …

Siemens SICAM T SICAM P855 SICAM P850 ICS / OT

Nov 8, 2022
High 7.6

CVE-2022-43958

A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). …

Siemens QMS Automotive ICS / OT

Nov 8, 2022
High 7.8

CVE-2022-43397

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.…

Siemens Simcenter Femap Parasolid V35.0 Parasolid V34.1 ICS / OT

Nov 8, 2022
High 7.0

CVE-2022-41668

A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load…

Schneider Electric Pro-face BLUE EcoStruxure Operator Terminal Expert ICS / OT

Nov 4, 2022
High 7.0

CVE-2022-41670

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SG…

Schneider Electric EcoStruxure Operator Terminal Expert Pro-face BLUE ICS / OT

Nov 4, 2022
High 7.0

CVE-2022-41667

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allo…

Schneider Electric Pro-face BLUE EcoStruxure Operator Terminal Expert ICS / OT

Nov 4, 2022
High 7.0

CVE-2022-41669

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allow…

Schneider Electric EcoStruxure Operator Terminal Expert Pro-face BLUE ICS / OT

Nov 4, 2022
High 7.0

CVE-2022-41671

A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that a…

Schneider Electric Pro-face BLUE EcoStruxure Operator Terminal Expert ICS / OT

Nov 4, 2022
High 7.0

CVE-2022-41666

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local use…

Schneider Electric Pro-face BLUE EcoStruxure Operator Terminal Expert ICS / OT

Nov 4, 2022
High 7.5

CVE-2022-41629

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprun…

Delta Electronics InfraSuite Device Master ICS / OT

Oct 31, 2022
High 7.5

CVE-2022-41776

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the Writ…

Delta Electronics InfraSuite Device Master ICS / OT

Oct 31, 2022
High 8.8

CVE-2022-41644

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that change…

Delta Electronics InfraSuite Device Master ICS / OT

Oct 31, 2022
Critical 9.8

CVE-2022-41688

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that c…

Delta Electronics InfraSuite Device Master ICS / OT

Oct 31, 2022
Critical 9.8

CVE-2022-40202

The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper au…

Delta Electronics InfraSuite Device Master ICS / OT

Oct 31, 2022
Critical 9.8

CVE-2022-41772 EPSS 25%

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters u…

Delta Electronics InfraSuite Device Master ICS / OT

Oct 31, 2022
Critical 9.8

CVE-2022-41657 EPSS 21%

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized…

Delta Electronics InfraSuite Device Master ICS / OT

Oct 31, 2022
High 8.8

CVE-2022-41779

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper veri…

Delta Electronics InfraSuite Device Master ICS / OT

Oct 31, 2022
Critical 9.8

CVE-2022-38142 EPSS 19%

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through…

Delta Electronics InfraSuite Device Master ICS / OT

Oct 31, 2022
Critical 10.0

CVE-2021-38397

Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

Honeywell Experion PKS ICS / OT

Oct 28, 2022
Critical 9.1

CVE-2021-38395

Honeywell Experion PKS and ACE Controllers Injection

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

Honeywell Experion PKS ICS / OT

Oct 28, 2022
High 7.5

CVE-2021-38399

Honeywell Experion PKS and ACE Controllers Relative Path Traversal

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories.

Honeywell Experion PKS ICS / OT

Oct 28, 2022
High 8.7

CVE-2022-41651 EPSS 11%

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the SetPF API.

Delta Electronics DIAEnergie ICS / OT

Oct 27, 2022
High 8.7

CVE-2022-41702 EPSS 11%

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.

Delta Electronics DIAEnergie ICS / OT

Oct 27, 2022
High 8.8

CVE-2022-40967

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

Delta Electronics DIAEnergie ICS / OT

Oct 27, 2022
High 8.7

CVE-2022-41701 EPSS 11%

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.

Delta Electronics DIAEnergie ICS / OT

Oct 27, 2022
High 8.8

CVE-2022-41133 EPSS 27%

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

Delta Electronics DIAEnergie ICS / OT

Oct 27, 2022