Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

High 7.5

CVE-2021-20609

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Ser…

Mitsubishi Electric MELSEC-Q Series Q26UDPVCPU MELSEC-Q Series Q04UDVCPU MELSEC-Q Series Q13UDVCPU ICS / OT

Dec 1, 2021
High 7.4

CVE-2021-34599

Improper Certificate Validation in CODESYS Git

Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS certific…

CODESYS CODESYS Git ICS / OT

Dec 1, 2021
High 7.5

CVE-2021-35533

Specially Crafted IEC 60870-5-104 Packet Vulnerability in RTU500 series

Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface (BCI) IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot w…

Hitachi Energy RTU500 series ICS / OT

Nov 26, 2021
High 7.2

CVE-2021-35534

Insufficient Security Control Vulnerability

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently …

Hitachi Energy Relion 650 PWC600 Relion 670 Series ICS / OT

Nov 18, 2021
High 8.1

CVE-2021-35535

Insufficient Security Control Vulnerability

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tin…

Hitachi Energy Relion 670/650 Series Relion 670 Series Relion 670/650/SAM600-IO ICS / OT

Nov 18, 2021
High 7.2

CVE-2021-35528

Authentication Bypass Vulnerability Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)

Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploit…

Hitachi Energy Counterparty Settlement and Billing (CSB) Retail Operations ICS / OT

Nov 17, 2021
High 7.5

CVE-2021-34598

Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active

Phoenix Contact FL MGUARD ICS / OT

Nov 10, 2021
Medium 4.8

CVE-2021-34582

Phoenix Contact: FL MGUARD XSS through web-based management and REST API

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.

Phoenix Contact FL MGUARD ICS / OT

Nov 10, 2021
Unscored —

CVE-2021-42026

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-42025

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-42021

A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2)…

Siemens Siveillance Video DLNA Server ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-42015

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 Mendix Applications using Mendix 7 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-40366

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM modul…

Siemens Climatix POL909 (AWM module) Climatix POL909 (AWB module) ICS / OT

Nov 9, 2021
Medium 5.5

CVE-2021-40364

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 U…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Nov 9, 2021
High 7.7

CVE-2021-40359

A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPC…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Nov 9, 2021
Critical 9.9

CVE-2021-40358

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 U…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-37207

A vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected application assigns imprope…

Siemens SENTRON powermanager V3 ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-31890

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-31889

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31888

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Compact (P2 Ethernet) APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31887

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Compact (P2 Ethernet) APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31886

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31885

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) TALON TC Compact (BACnet) ICS / OT

Nov 9, 2021
Unscored —

CVE-2021-31884

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) TALON TC Compact (BACnet) ICS / OT

Nov 9, 2021
High 7.1

CVE-2021-31883

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 ICS / OT

Nov 9, 2021
Medium 6.5

CVE-2021-31882

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 ICS / OT

Nov 9, 2021
High 7.1

CVE-2021-31881

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 ICS / OT

Nov 9, 2021
High 8.2

CVE-2021-31346

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
High 7.5

CVE-2021-31345

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 PLUSCONTROL 1st Gen ICS / OT

Nov 9, 2021
Medium 5.3

CVE-2021-31344

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 SIMOTICS CONNECT 400 ICS / OT

Nov 9, 2021
Unscored —

CVE-2020-10054

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application d…

Siemens SIMATIC RTLS Locating Manager ICS / OT

Nov 9, 2021
Unscored —

CVE-2020-10053

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application w…

Siemens SIMATIC RTLS Locating Manager ICS / OT

Nov 9, 2021
Unscored —

CVE-2020-10052

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application w…

Siemens SIMATIC RTLS Locating Manager ICS / OT

Nov 9, 2021
High 7.8

CVE-2021-34597

Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.

Phoenix Contact PC Worx ICS / OT

Nov 4, 2021
Medium 6.5

CVE-2021-34594

Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system.

Beckhoff TwinCAT OPC UA Server ICS / OT

Nov 4, 2021
Medium 5.5

CVE-2021-38488 EPSS 12%

Delta Electronics DIALink

Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter comment of the API events, which may allow an attacker to remotely execute cod…

Delta Electronics DIALink ICS / OT

Nov 3, 2021
High 7.8

CVE-2021-38416

Delta Electronics DIALink

Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL hijacking and takeover the system where the software is installed.

Delta Electronics DIALink ICS / OT

Nov 3, 2021
Medium 5.5

CVE-2021-38428 EPSS 11%

Delta Electronics DIALink

Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter name of the API schedule, which may allow an attacker to remotely execute code.

Delta Electronics DIALink ICS / OT

Nov 3, 2021
High 7.8

CVE-2021-38420

Delta Electronics DIALink

Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-privileged user accounts, which may allow an attacker to modify the installation directory and upload malicious files.

Delta Electronics DIALink ICS / OT

Nov 3, 2021
Medium 5.5

CVE-2021-38407

Delta Electronics DIALink

Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter name of the API devices, which may allow an attacker to remotely execute code.

Delta Electronics DIALink ICS / OT

Nov 3, 2021