Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

High 7.5

CVE-2021-33541

Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially cra…

Phoenix Contact ILC1x ICS / OT

Jun 25, 2021
High 7.3

CVE-2021-33540

Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.

Phoenix Contact IL AXL F BK ICS / OT

Jun 25, 2021
High 7.5

CVE-2021-21005

Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards.

Phoenix Contact FL NAT FL SWITCH ICS / OT

Jun 25, 2021
High 7.4

CVE-2021-21004

Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.

Phoenix Contact FL SWITCH FL NAT ICS / OT

Jun 25, 2021
Medium 5.3

CVE-2021-21003

Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.

Phoenix Contact FL NAT FL SWITCH ICS / OT

Jun 25, 2021
High 7.5

CVE-2021-21002

Denial of Service in Phoenix Contact FL COMSERVER UNI products

In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can lead to a temporary denial of service.

Phoenix Contact FL COMSERVER ICS / OT

Jun 25, 2021
Unscored —

CVE-2021-33712

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module…

Siemens Mendix SAML Module ICS / OT

Jun 8, 2021
Unscored —

CVE-2021-31340

A vulnerability has been identified in SIMATIC RF166C (All versions > V1.1 and < V1.3.2), SIMATIC RF185C (All versions …

Siemens SIMATIC RF188C SIMATIC RF186C SIMATIC RF185C ICS / OT

Jun 8, 2021
Unscored —

CVE-2021-27390

A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1…

Siemens JT2Go Teamcenter Visualization ICS / OT

Jun 8, 2021
Unscored —

CVE-2021-27399

A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All…

Siemens Simcenter Femap 2021.1 Simcenter Femap 2020.2 ICS / OT

Jun 8, 2021
Unscored —

CVE-2021-27387

A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All…

Siemens Simcenter Femap 2021.1 Simcenter Femap 2020.2 ICS / OT

Jun 8, 2021
Critical 9.8

CVE-2020-15782

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open C…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) ICS / OT

May 28, 2021
Critical 9.1

CVE-2021-21001

WAGO: PFC200 Access to files outside the home directory

On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.

WAGO Series Ethernet Controller Series PFC200 Controller ICS / OT

May 24, 2021
Medium 5.3

CVE-2021-21000

WAGO: PFC200 Denial of Service due to the number of connections to the runtime

On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.

WAGO Series PFC200 Controller Series Ethernet Controller ICS / OT

May 24, 2021
Critical 10.0

CVE-2021-20998

WAGO: Managed Switches: Unauthorized creation of user accounts

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

WAGO 0852-1305/000-001 0852-0303 0852-1505 ICS / OT

May 13, 2021
High 7.5

CVE-2021-20997

WAGO: Managed Switches: Unauthorized access to password hashes

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.

WAGO 0852-1305 0852-1305/000-001 0852-0303 ICS / OT

May 13, 2021
Medium 5.3

CVE-2020-12526

BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to th…

Beckhoff TwinCAT OPC UA Server TF6100 IPC Diagnostics UA Server ICS / OT

May 13, 2021
Medium 5.3

CVE-2021-20996

WAGO: Managed Switches: Unsecure Cookie settings

In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.

WAGO 0852-0303 0852-1505 0852-1505/000-001 ICS / OT

May 13, 2021
Medium 5.3

CVE-2021-20995

WAGO: Managed Switches: Storage of user credentials in a cookie

In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.

WAGO 0852-0303 0852-1505 0852-1505/000-001 ICS / OT

May 13, 2021
High 8.8

CVE-2021-20994

WAGO: Managed Switches: Reflected Cross-site Scripting

In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.

WAGO 0852-1305/000-001 0852-0303 0852-1505 ICS / OT

May 13, 2021
Medium 5.3

CVE-2021-20993

WAGO: Managed Switches: Exposure of sensitive information through directory listing

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.

WAGO 0852-1305 0852-1305/000-001 0852-0303 ICS / OT

May 13, 2021
Unscored —

CVE-2021-31339

A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XM…

Siemens Mendix Excel Importer Module ICS / OT

May 12, 2021
High 7.5

CVE-2021-27386

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC WinCC Runtime Advanced V16 SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) ICS / OT

May 12, 2021
High 7.5

CVE-2021-27385

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC WinCC Runtime Advanced V15 SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) ICS / OT

May 12, 2021
Unscored —

CVE-2021-27398

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…

Siemens Tecnomatix Plant Simulation ICS / OT

May 12, 2021
Unscored —

CVE-2021-27396

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…

Siemens Tecnomatix Plant Simulation ICS / OT

May 12, 2021
Unscored —

CVE-2021-27397

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…

Siemens Tecnomatix Plant Simulation ICS / OT

May 12, 2021
Unscored —

CVE-2020-25242

A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NE…

Siemens SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) ICS / OT

May 12, 2021
High 7.5

CVE-2021-27383

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F ICS / OT

May 12, 2021
Critical 9.8

CVE-2021-27384

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC WinCC Runtime Advanced V15 SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) ICS / OT

May 12, 2021
High 7.5

CVE-2021-25662

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC WinCC Runtime Advanced V15 ICS / OT

May 12, 2021
High 7.5

CVE-2021-25661

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC WinCC Runtime Advanced V16 SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) ICS / OT

May 12, 2021
High 7.5

CVE-2021-25660

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC WinCC Runtime Advanced V16 SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) ICS / OT

May 12, 2021
Unscored —

CVE-2019-19276

A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions …

Siemens SIMATIC HMI KTP Mobile Panels SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) ICS / OT

May 12, 2021
Unscored —

CVE-2021-27389

A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30).…

Siemens QMS Automotive Opcenter Quality ICS / OT

Apr 22, 2021
Unscored —

CVE-2021-27382

A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions <…

Siemens Solid Edge SE2021 Solid Edge SE2020 Browsers ICS / OT

Apr 22, 2021
Unscored —

CVE-2021-27392

A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network …

Siemens Siveillance Video Open Network Bridge ICS / OT

Apr 22, 2021
Unscored —

CVE-2021-27393

A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nuc…

Siemens Nucleus Source Code Nucleus NET Nucleus ReadyStart V3 ICS / OT

Apr 22, 2021
Unscored —

CVE-2021-25678

A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions <…

Siemens Solid Edge SE2021 Solid Edge SE2020 Browsers ICS / OT

Apr 22, 2021
Unscored —

CVE-2021-25670

A vulnerability has been identified in Tecnomatix RobotExpert (All versions < V16.1). Affected applications lack proper…

Siemens Tecnomatix RobotExpert ICS / OT

Apr 22, 2021