Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

High 7.8

CVE-2022-1403

Delta Electronics ASDA-Soft Out-of-bounds Write

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition.

Delta Electronics ASDA-Soft ICS / OT

Apr 29, 2022
High 7.8

CVE-2022-1402

Delta Electronics ASDA-Soft Out-of-bounds Read

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.

Delta Electronics ASDA-Soft ICS / OT

Apr 29, 2022
Unscored —

CVE-2022-27188

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENT…

Yokogawa Electric CENTUM VP series with VP6E5150(Graphic Builder) installed and B/M9000 VP ICS / OT

Apr 15, 2022
Unscored —

CVE-2022-26034

Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM…

Yokogawa Electric CENTUM VP series with VP6E5000(AD Suite Engineering ServerFunction) installed and B/M9000 VP ICS / OT

Apr 15, 2022
Medium 5.3

CVE-2021-40392

An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Networ…

Moxa MXView Series ICS / OT

Apr 14, 2022
Critical 10.0

CVE-2021-40390

An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A speci…

Moxa MXView Series ICS / OT

Apr 14, 2022
Unscored —

CVE-2022-28663

A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an…

Siemens Simcenter Femap ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-28662

A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an…

Siemens Simcenter Femap ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-28661

A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an…

Siemens Simcenter Femap ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-28329

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All vers…

Siemens SCALANCE W1788-2 EEC M12 SCALANCE W1788-2IA M12 SCALANCE W1788-1 M12 ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-28328

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All vers…

Siemens SCALANCE W1788-1 M12 SCALANCE W1788-2 M12 SCALANCE W1788-2 EEC M12 ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-27481

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All vers…

Siemens SCALANCE W1788-1 M12 SCALANCE W1788-2 M12 SCALANCE W1788-2 EEC M12 ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-27480

A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < …

Siemens SICAM A8000 CP-8050 SICAM A8000 CP-8031 ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-27241

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 Mendix Applications using Mendix 7 ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-27194

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (A…

Siemens TIA Portal SINETPLAN SIMATIC PCS neo (Administration Console) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-26380

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (24V, coated) SCALANCE X307-2 EEC (230V) SCALANCE X302-7 EEC (2x 230V, coated) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-26335

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (2x 230V) SCALANCE X302-7 EEC (2x 24V) SCALANCE X302-7 EEC (230V, coated) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-26334

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X304-2FE SCALANCE X302-7 EEC (230V) SCALANCE X307-2 EEC (230V, coated) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25756

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (2x 24V, coated) SCALANCE X304-2FE SCALANCE X302-7 EEC (230V) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25755

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (230V, coated) SCALANCE X306-1LD FE SCALANCE X302-7 EEC (24V, coated) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25754

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X307-2 EEC (230V) SCALANCE X302-7 EEC (2x 230V, coated) SCALANCE X302-7 EEC (2x 24V, coated) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25753

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X307-2 EEC (230V, coated) SCALANCE X302-7 EEC (24V) SCALANCE X302-7 EEC (2x 230V) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25752

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (2x 24V) SCALANCE X302-7 EEC (230V, coated) SCALANCE X306-1LD FE ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25751

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (2x 24V) SCALANCE X302-7 EEC (230V, coated) SCALANCE X306-1LD FE ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25650

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 Mendix Applications using Mendix 7 ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-23450 EPSS 36%

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Mana…

Siemens SIMATIC Energy Manager PRO SIMATIC Energy Manager Basic ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-23449

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Mana…

Siemens SIMATIC Energy Manager Basic SIMATIC Energy Manager PRO ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-23448

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Mana…

Siemens SIMATIC Energy Manager Basic SIMATIC Energy Manager PRO ICS / OT

Apr 12, 2022
Unscored —

CVE-2021-42029

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 …

Siemens SIMATIC STEP 7 (TIA Portal) V15 SIMATIC STEP 7 (TIA Portal) V16 SIMATIC STEP 7 (TIA Portal) V17 ICS / OT

Apr 12, 2022
High 7.5

CVE-2021-40368

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (A…

Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7 SIMATIC S7-400 CPU 416-3 PN/DP V7 SIMATIC S7-400 CPU 414F-3 PN/DP V7 ICS / OT

Apr 12, 2022
Medium 5.3

CVE-2022-25622

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP …

Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) SIMATIC ET 200MP IM 155-5 PN HF SIMATIC ET 200SP IM 155-6 PN HF ICS / OT

Apr 12, 2022
Critical 10.0

CVE-2022-1161

ICSA-22-090-05 Rockwell Automation Logix Controllers

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compil…

Rockwell Automation Compact GuardLogix 5370 controllers ControlLogix 5570 controllers CompactLogix 5480 controllers ICS / OT

Apr 11, 2022
High 7.5

CVE-2022-22519

Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.

CODESYS CODESYS Control for Raspberry Pi SL CODESYS Control for BeagleBone SL CODESYS Control for IOT2000 SL Linux ICS / OT

Apr 7, 2022
Medium 6.5

CVE-2022-22518

A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.

A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.

CODESYS CODESYS Control for emPC-A/iMX6 SL CODESYS Control for Linux SL CODESYS Control for PFC200 SL Linux ICS / OT

Apr 7, 2022
High 7.5

CVE-2022-22517

Communication Components in multiple CODESYS products vulnerable to communication channel disruption

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.

CODESYS CODESYS Control for PFC100 SL CODESYS Control for WAGO Touch Panels 600 SL CODESYS Control for emPC-A/iMX6 SL Linux Windows Browsers ICS / OT

Apr 7, 2022
High 7.8

CVE-2022-22516

CODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in restricted memory space.

The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space.

CODESYS CODESYS Control Win (SL) CODESYS Control RTE (for Beckhoff CX) SL CODESYS Control RTE (SL) ICS / OT

Apr 7, 2022
High 8.1

CVE-2022-22515

A component of the CODESYS Control runtime system allows read and write access to configuration files

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.

CODESYS CODESYS Control for IOT2000 SL CODESYS Control for PFC100 SL CODESYS Control for WAGO Touch Panels 600 SL Linux ICS / OT

Apr 7, 2022
High 7.1

CVE-2022-22514

Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor cont…

CODESYS CODESYS Control for emPC-A/iMX6 SL CODESYS Control for Linux SL CODESYS Control for PFC200 SL Linux Windows Browsers ICS / OT

Apr 7, 2022
Medium 6.5

CVE-2022-22513

Null Pointer Dereference in multiple CODESYS products can lead to a DoS.

An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.

CODESYS CODESYS Control for PFC200 SL CODESYS Control for Raspberry Pi SL CODESYS Control for BeagleBone SL Linux Windows Browsers ICS / OT

Apr 7, 2022
High 7.8

CVE-2022-26419

Rockwell Automation Studio 5000 Logix Designer Code Injection

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code.

Omron CX-Position ICS / OT

Apr 1, 2022