Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Unscored —

CVE-2021-44000

A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), …

Siemens JT2Go Teamcenter Visualization V13.3 Solid Edge SE2021 Browsers ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-40363

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PC…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-40360

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PC…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Feb 9, 2022
High 7.5

CVE-2021-37205

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 20…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller ICS / OT

Feb 9, 2022
High 7.5

CVE-2021-37204

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controlle…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-37194

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Feb 9, 2022
High 7.5

CVE-2021-37185

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 20…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller ICS / OT

Feb 9, 2022
Unscored —

CVE-2022-22722

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attack…

Schneider Electric Easergy P5 ICS / OT

Feb 4, 2022
High 8.4

CVE-2021-22284

SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability

Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.

ABB 800xA, Control Software for AC 800M OPC Server for AC 800M Control Builder Safe, version 2.0 OPC Server for AC 800M Control Builder Safe, version 1.x OPC Server for AC 800M ICS / OT

Feb 4, 2022
High 7.5

CVE-2021-22285

SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module

Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive.

ABB SPIET800 PNI800 ICS / OT

Feb 4, 2022
High 7.5

CVE-2021-22288

SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module

Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.

ABB PNI800 SPIET800 ICS / OT

Feb 4, 2022
High 7.5

CVE-2021-22286

SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module

Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.

ABB PNI800 SPIET800 ICS / OT

Feb 4, 2022
Medium 4.2

CVE-2021-40337

OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product

Cross-site Scripting (XSS) vulnerability in Hitachi Energy LinkOne allows an attacker that manages to exploit the vulnerability can take advantage to exploit multiple web attacks and stole sensitive information. This issue affects: Hitachi Energy LinkOne 3.20…

Hitachi Energy LinkOne ICS / OT

Jan 25, 2022
Medium 5.9

CVE-2022-23130

Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64…

Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 GENESIS64 ICS / OT

Jan 21, 2022
High 7.8

CVE-2022-21137

Omron CX-One

Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project files, which may allow an attacker to execute arbitrary code.

Omron CX-One ICS / OT

Jan 14, 2022
Unscored —

CVE-2021-45460

A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted re…

Siemens SICAM PQ Analyzer ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-45033

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER…

Siemens CP-8000 MASTER MODULE WITH I/O -40/+70°C CP-8022 MASTER MODULE WITH GPRS CP-8000 MASTER MODULE WITH I/O -25/+70°C ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-45034

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER…

Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C CP-8021 MASTER MODULE CP-8000 MASTER MODULE WITH I/O -40/+70°C ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-41769

A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 …

Siemens SIPROTEC 5 6MD86 devices (CPU variant CP300) SIPROTEC 5 7SL82 devices (CPU variant CP100) SIPROTEC 5 7UT86 devices (CPU variant CP300) ICS / OT

Jan 11, 2022
High 8.8

CVE-2021-37198

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-37197

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-37196

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-37195

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Jan 11, 2022
Critical 9.8

CVE-2021-4161

ICSA-21-357-01 Moxa MGate Protocol Gateways

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

Moxa MGate MB3180 Series MGate MB3480 Series MGate MB3280 Series ICS / OT

Dec 27, 2021
High 7.5

CVE-2021-23228

Delta Electronics DIAEnergie (Update A)

DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.

Delta Electronics DIAEnergie ICS / OT

Dec 22, 2021
Medium 6.5

CVE-2021-31558 EPSS 11%

Delta Electronics DIAEnergie (Update A)

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.ashx”.

Delta Electronics DIAEnergie ICS / OT

Dec 22, 2021
High 7.5

CVE-2021-44544

Delta Electronics DIAEnergie (Update A)

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.

Delta Electronics DIAEnergie ICS / OT

Dec 22, 2021
High 7.5

CVE-2021-44471

Delta Electronics DIAEnergie (Update A)

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.ashx”.

Delta Electronics DIAEnergie ICS / OT

Dec 22, 2021
Unscored —

CVE-2021-44524

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), …

Siemens SiPass integrated V2.76 SiPass integrated V2.85 Siveillance Identity V1.6 ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44523

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), …

Siemens SiPass integrated V2.85 Siveillance Identity V1.6 SiPass integrated V2.80 ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44522

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), …

Siemens SiPass integrated V2.76 SiPass integrated V2.85 Siveillance Identity V1.6 ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44450

A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44449

A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44448

A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44447

A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44445

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44446

A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44444

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44443

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021
Unscored —

CVE-2021-44442

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK l…

Siemens JT Utilities JTTK ICS / OT

Dec 14, 2021