Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Unscored —

CVE-2021-41538

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988…

Siemens Solid Edge SE2021 NX 1980 Series NX 1953 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41537

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41536

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41535

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988…

Siemens Solid Edge SE2021 NX 1980 Series NX 1953 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41534

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41533

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 28, 2021
Medium 6.5

CVE-2021-22272

ControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase.

The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can…

ABB Busch-Jaeger my.busch-jaeger.de mybuildings.abb.com ICS / OT

Sep 27, 2021
High 7.5

CVE-2021-34570

Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.

Phoenix Contact RFC AXC F PLCnext ICS / OT

Sep 27, 2021
Medium 6.1

CVE-2021-22276

free@home System Access Point FW integrity check can be bypassed.

The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.

ABB Busch-Jaeger System Access Point System Access Point ICS / OT

Sep 23, 2021
High 7.8

CVE-2021-38404

Delta Electronics DOPSoft 2 Heap-based Buffer Overflow

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the c…

Delta Electronics DOPSoft 2 ICS / OT

Sep 17, 2021
High 7.8

CVE-2021-38402

Delta Electronics DOPSoft 2 Stack-Based Buffer Overflow

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could lead to a stack-based buffer overflow while trying to copy to a buffer during font string handling. An attacke…

Delta Electronics DOPSoft 2 ICS / OT

Sep 17, 2021
High 7.8

CVE-2021-38406 Exploited EPSS 76%

Delta Electronics DOPSoft 2 Out-of-Bounds Write

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute cod…

Delta Electronics DOPSoft 2 ICS / OT

Sep 17, 2021
KEV Aug 25, 2022
Unscored —

CVE-2021-40357

A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Wor…

Siemens Teamcenter Active Workspace V5.0 Teamcenter Active Workspace V5.1 Teamcenter Active Workspace V5.2 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-40356

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…

Siemens Teamcenter V13.0 Teamcenter V12.4 Teamcenter V13.2 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-40355

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…

Siemens Teamcenter V13.0 Teamcenter V12.4 Teamcenter V13.1 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-40354

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…

Siemens Teamcenter V12.4 Teamcenter V13.0 Teamcenter V13.1 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37206

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 rel…

Siemens SIPROTEC 5 relays with CPU variants CP050 SIPROTEC 5 relays with CPU variants CP300 SIPROTEC 5 relays with CPU variants CP100 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37203

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37202

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37201

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vu…

Siemens SINEC NMS ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37200 EPSS 37%

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of…

Siemens SINEC NMS ICS / OT

Sep 14, 2021
Medium 4.3

CVE-2021-37193

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attac…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 14, 2021
Medium 4.3

CVE-2021-37192

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software ha…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 14, 2021
Medium 4.3

CVE-2021-37190

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software ha…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 14, 2021
Medium 4.3

CVE-2021-37191

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attac…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37186

A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATI…

Siemens LOGO! CMR2020 SIMATIC RTU3010C SIMATIC RTU3031C ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37184

A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker co…

Siemens Industrial Edge Management Browsers ICS / OT

Sep 14, 2021
Medium 6.5

CVE-2021-37183

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software al…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37181

A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS…

Siemens Cerberus DMS V4.2 Desigo CC V5.0 Desigo CC Compact V4.0 ICS / OT

Sep 14, 2021
Medium 6.5

CVE-2021-37177

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by t…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37176

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2020.2 Simcenter Femap V2021.1 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37175

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All version…

Siemens RUGGEDCOM ROX RX1536 RUGGEDCOM ROX RX1400 RUGGEDCOM ROX RX1501 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37174

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All version…

Siemens RUGGEDCOM ROX RX1511 RUGGEDCOM ROX RX1524 RUGGEDCOM ROX MX5000 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37173

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All version…

Siemens RUGGEDCOM ROX RX5000 RUGGEDCOM ROX RX1500 RUGGEDCOM ROX RX1510 ICS / OT

Sep 14, 2021
High 7.5

CVE-2021-33737

A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanc…

Siemens SIMATIC CP 443-1 Advanced SIMATIC CP 443-1 SIPLUS NET CP 443-1 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 rel…

Siemens SIPROTEC 5 relays with CPU variants CP050 SIPROTEC 5 relays with CPU variants CP300 SIPROTEC 5 relays with CPU variants CP100 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-33719

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 rel…

Siemens SIPROTEC 5 relays with CPU variants CP050 SIPROTEC 5 relays with CPU variants CP300 SIPROTEC 5 relays with CPU variants CP100 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-33716

A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions < V3.0), SIMATIC CP 1545…

Siemens SIMATIC CP 1543-1 (incl. SIPLUS variants) SIMATIC CP 1545-1 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-31891

A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions wi…

Siemens Desigo CC Siveillance Control Operation Scheduler ICS / OT

Sep 14, 2021
Critical 9.8

CVE-2021-27391

A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Et…

Siemens APOGEE PXC Compact (P2 Ethernet) APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) ICS / OT

Sep 14, 2021