Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Unscored —

CVE-2022-33939

CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication …

Yokogawa Electric CENTUM VP / CS 3000 controller FCS ICS / OT

Aug 16, 2022
Medium 6.8

CVE-2022-36325

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow…

Siemens SCALANCE M874-2 SCALANCE M876-4 (EU) SCALANCE S615 LAN-Router ICS / OT

Aug 10, 2022
High 7.5

CVE-2022-36324

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated re…

Siemens SCALANCE M874-3 SCALANCE M876-3 (ROK) SCALANCE M804PB ICS / OT

Aug 10, 2022
Critical 9.1

CVE-2022-36323

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with admini…

Siemens SCALANCE M876-4 (EU) SCALANCE S615 LAN-Router SCALANCE M826-2 SHDSL-Router ICS / OT

Aug 10, 2022
Medium 6.5

CVE-2022-34661

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V…

Siemens Teamcenter V12.4 Teamcenter V13.0 Teamcenter V13.2 ICS / OT

Aug 10, 2022
Medium 6.8

CVE-2022-34660

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V…

Siemens Teamcenter V12.4 Teamcenter V13.0 Teamcenter V13.2 ICS / OT

Aug 10, 2022
Medium 5.3

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license ser…

Siemens Simcenter STAR-CCM+ ICS / OT

Aug 10, 2022
Medium 5.3

CVE-2021-46304

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE W…

Siemens CP-8000 MASTER MODULE WITH I/O -40/+70°C CP-8022 MASTER MODULE WITH GPRS CP-8000 MASTER MODULE WITH I/O -25/+70°C ICS / OT

Aug 10, 2022
Medium 5.8

CVE-2020-6998

Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation

The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send spe…

Rockwell Automation Compact GuardLogix 5370 controllers CompactLogix 5370 L1 controllers CompactLogix 5370 L3 controllers ICS / OT

Jul 27, 2022
Medium 5.0

CVE-2021-40336

HTTP Response Splitting in Hitachi Energy’s MSM Product

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web brows…

Hitachi Energy MSM ICS / OT

Jul 25, 2022
Medium 5.0

CVE-2021-40335

Cross Site Request Forgery (CSRF) in Hitachi Energy’s MSM Product

A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery (CSRF),…

Hitachi Energy MSM ICS / OT

Jul 25, 2022
High 8.1

CVE-2022-0902 EPSS 17%

ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in flow computer and remote controller products of ABB ( RMC-100 (Standard), RMC-…

ABB RMC-100 LITE XIO XRCG5 ICS / OT

Jul 21, 2022
High 8.2

CVE-2022-33319

Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconic…

Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 ICONICS Suite ICS / OT

Jul 20, 2022
Critical 9.8

CVE-2022-33318 EPSS 50%

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi …

Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 GENESIS64 ICS / OT

Jul 20, 2022
High 7.8

CVE-2022-33320

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi …

Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 ICONICS Suite ICS / OT

Jul 20, 2022
High 7.8

CVE-2022-33315

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi …

Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 ICONICS Suite ICS / OT

Jul 20, 2022
High 7.8

CVE-2022-33317

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 …

Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 GENESIS64 ICS / OT

Jul 20, 2022
High 7.8

CVE-2022-33316

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi …

Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 GENESIS64 ICS / OT

Jul 20, 2022
High 7.5

CVE-2022-29834

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GEN…

Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions GENESIS64 ICONICS Suite ICS / OT

Jul 20, 2022
Medium 6.5

CVE-2022-2179

ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

Rockwell Automation MicroLogix 1100 MicroLogix 1400 ICS / OT

Jul 20, 2022
Unscored —

CVE-2022-34866

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verific…

Yokogawa Rental & Lease Passage Drive ICS / OT

Jul 20, 2022
Medium 5.5

CVE-2022-34765

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware …

Schneider Electric X80 advanced RTU Communication Module OPC UA Modicon Communication Module ICS / OT

Jul 13, 2022
Medium 5.9

CVE-2022-34764

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…

Schneider Electric X80 advanced RTU Communication Module OPC UA Modicon Communication Module ICS / OT

Jul 13, 2022
Medium 5.9

CVE-2022-34763

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized…

Schneider Electric X80 advanced RTU Communication Module OPC UA Modicon Communication Module ICS / OT

Jul 13, 2022
Medium 5.9

CVE-2022-34762

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…

Schneider Electric X80 advanced RTU Communication Module OPC UA Modicon Communication Module ICS / OT

Jul 13, 2022
High 7.5

CVE-2022-34761

A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when par…

Schneider Electric OPC UA Modicon Communication Module X80 advanced RTU Communication Module ICS / OT

Jul 13, 2022
High 7.5

CVE-2022-34760

A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of ser…

Schneider Electric OPC UA Modicon Communication Module X80 advanced RTU Communication Module ICS / OT

Jul 13, 2022
High 7.5

CVE-2022-34759

A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improp…

Schneider Electric OPC UA Modicon Communication Module X80 advanced RTU Communication Module ICS / OT

Jul 13, 2022
Medium 5.1

CVE-2022-34758

A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled i…

Schneider Electric Easergy P5 ICS / OT

Jul 13, 2022
Medium 6.7

CVE-2022-34757

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used f…

Schneider Electric Easergy P5 ICS / OT

Jul 13, 2022
High 8.8

CVE-2022-34756

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution o…

Schneider Electric Easergy P5 ICS / OT

Jul 13, 2022
Medium 6.8

CVE-2022-34754

A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing cre…

Schneider Electric Acti9 PowerTag Link C ICS / OT

Jul 13, 2022
High 8.8

CVE-2022-34753 Scanner template EPSS 71%

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exis…

Schneider Electric SpaceLogic C-Bus Home Controller ICS / OT

Jul 13, 2022
High 8.4

CVE-2022-34820

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions <…

Siemens SIMATIC CP 1243-8 IRC SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL SIMATIC CP 1543SP-1 ICS / OT

Jul 12, 2022
Critical 10.0

CVE-2022-34819

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions <…

Siemens SIMATIC CP 1243-8 IRC SIMATIC CP 1543SP-1 SIMATIC CP 1542SP-1 IRC ICS / OT

Jul 12, 2022
Unscored —

CVE-2022-34748

A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an o…

Siemens Simcenter Femap ICS / OT

Jul 12, 2022
High 8.0

CVE-2022-34663

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i8…

Siemens RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RMC8388 V5.X ICS / OT

Jul 12, 2022
Unscored —

CVE-2022-34467

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mend…

Siemens Mendix Excel Importer Module (Mendix 9 compatible) Mendix Excel Importer Module (Mendix 8 compatible) ICS / OT

Jul 12, 2022
Unscored —

CVE-2022-34466

A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Appli…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 9 (V9.12) ICS / OT

Jul 12, 2022
Unscored —

CVE-2022-34465

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.…

Siemens Parasolid V34.1 Parasolid V34.0 Parasolid V33.1 ICS / OT

Jul 12, 2022