Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Unscored —

CVE-2019-19284

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XS…

Siemens XHQ ICS / OT

Dec 14, 2020
Unscored —

CVE-2019-19287

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse th…

Siemens XHQ ICS / OT

Dec 14, 2020
Unscored —

CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and …

Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU unit ICS / OT

Dec 14, 2020
High 7.5

CVE-2020-12516

WAGO: PLC families 750-88x and 750-352 prone to DoS attack

Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.

WAGO 750-882 750-852 750-881 ICS / OT

Dec 10, 2020
Unscored —

CVE-2020-5675

Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.3…

Mitsubishi Electric GT21 model of GOT2000 series, GS21 model of GOT SIMPLE series, and Tension Controller LE7-40GU-L series ICS / OT

Dec 4, 2020
High 7.5

CVE-2020-12524

Phoenix Contact BTP Touch Panels uncontrolled resource consumption

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).

Phoenix Contact BTP Touch Panel ICS / OT

Dec 2, 2020
Unscored —

CVE-2020-5668

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and e…

Mitsubishi Electric MELSEC iQ-R ICS / OT

Nov 20, 2020
High 7.3

CVE-2020-12510

Beckhoff: Privilege Escalation through TwinCat System

The default installation path of the TwinCAT XAR 3.1 software in all versions is underneath C:\TwinCAT. If the directory does not exist it and further subdirectories are created with permissions which allow every local user to modify the content. The default …

Beckhoff TwinCat XAR 3.1 ICS / OT

Nov 19, 2020
Unscored —

CVE-2020-5666

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from …

Mitsubishi Electric MELSEC iQ-R Series CPU Modules ICS / OT

Nov 16, 2020
High 7.5

CVE-2020-15783

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All ve…

Siemens SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) SIMATIC TDC CPU555 SINUMERIK 840D sl ICS / OT

Nov 12, 2020
Unscored —

CVE-2020-5649

Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (G…

Mitsubishi Electric GT14 Model of GOT 1000 series ICS / OT

Nov 6, 2020
Unscored —

CVE-2020-5648

Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function inc…

Mitsubishi Electric GT14 Model of GOT 1000 series ICS / OT

Nov 6, 2020
Unscored —

CVE-2020-5647

Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1…

Mitsubishi Electric GT14 Model of GOT 1000 series ICS / OT

Nov 6, 2020
Unscored —

CVE-2020-5646

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (G…

Mitsubishi Electric GT14 Model of GOT 1000 series ICS / OT

Nov 6, 2020
Unscored —

CVE-2020-5645

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTB…

Mitsubishi Electric GT14 Model of GOT 1000 series ICS / OT

Nov 6, 2020
Unscored —

CVE-2020-5644

Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBD…

Mitsubishi Electric GT14 Model of GOT 1000 series ICS / OT

Nov 6, 2020
Unscored —

CVE-2020-5658

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 E…

Mitsubishi Electric MELSEC iQ-R series ICS / OT

Oct 30, 2020
Unscored —

CVE-2020-5657

Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function inc…

Mitsubishi Electric MELSEC iQ-R series ICS / OT

Oct 30, 2020
Unscored —

CVE-2020-5655

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 Et…

Mitsubishi Electric MELSEC iQ-R series ICS / OT

Oct 30, 2020
Unscored —

CVE-2020-5656

Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 Ethe…

Mitsubishi Electric MELSEC iQ-R series ICS / OT

Oct 30, 2020
Unscored —

CVE-2020-5653

Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP …

Mitsubishi Electric MELSEC iQ-R series ICS / OT

Oct 30, 2020
Unscored —

CVE-2020-5654

Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP…

Mitsubishi Electric MELSEC iQ-R series ICS / OT

Oct 30, 2020
Unscored —

CVE-2020-5652

Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02…

Mitsubishi Electric MELSEC iQ-R, Q and L series ICS / OT

Oct 30, 2020
Unscored —

CVE-2020-7591

A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow …

Siemens SIPORT MP ICS / OT

Oct 15, 2020
Unscored —

CVE-2020-15794

A vulnerability has been identified in Desigo Insight (All versions). Some error messages in the web application show t…

Siemens Desigo Insight ICS / OT

Oct 15, 2020
Unscored —

CVE-2020-15793

A vulnerability has been identified in Desigo Insight (All versions). The device does not properly set the X-Frame-Opti…

Siemens Desigo Insight ICS / OT

Oct 15, 2020
Unscored —

CVE-2020-15792

A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input val…

Siemens Desigo Insight ICS / OT

Oct 15, 2020
Unscored —

CVE-2020-7590

A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addi…

Siemens DCA Vantage Analyzer ICS / OT

Oct 13, 2020
Unscored —

CVE-2020-15797

A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addi…

Siemens DCA Vantage Analyzer ICS / OT

Oct 13, 2020
Unscored —

CVE-2020-16226

Mitsubishi Electric Multiple Products

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

Mitsubishi Electric GOT2000 Series GT21 model FX3U-ENET-P502 RJ71EN71 ICS / OT

Oct 5, 2020
High 8.2

CVE-2020-12505

WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO …

WAGO 750-831/xxx-xxx 750-880/xxx-xxx 750-882 ICS / OT

Sep 30, 2020
Critical 9.1

CVE-2020-12506

WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Versions <= FW03

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, W…

WAGO 750-823 750-862 750-891 ICS / OT

Sep 30, 2020
Medium 6.5

CVE-2020-15791

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All ve…

Siemens SIMATIC WinAC RTX F 2010 SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) SINUMERIK 840D sl ICS / OT

Sep 9, 2020
Unscored —

CVE-2020-15790

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). If configured in an insecure manner…

Siemens Spectrum Power™ 4 ICS / OT

Sep 9, 2020
Unscored —

CVE-2020-15789

A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cr…

Siemens Polarion Subversion Webclient ICS / OT

Sep 9, 2020
Unscored —

CVE-2020-15788

A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web applic…

Siemens Polarion Subversion Webclient ICS / OT

Sep 9, 2020
Unscored —

CVE-2020-15787

A vulnerability has been identified in SIMATIC HMI Unified Comfort Panels (All versions <= V16). Affected devices insuf…

Siemens SIMATIC HMI Unified Comfort Panels ICS / OT

Sep 9, 2020
Critical 9.8

CVE-2020-15786

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions < …

Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants) SIMATIC HMI Unified Comfort Panels SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) ICS / OT

Sep 9, 2020
Unscored —

CVE-2020-15785

A vulnerability has been identified in Siveillance Video Client (All versions). In environments where Windows NTLM auth…

Siemens Siveillance Video Client ICS / OT

Sep 9, 2020
Unscored —

CVE-2020-15784

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). Insecure storage of sensitive infor…

Siemens Spectrum Power™ 4 ICS / OT

Sep 9, 2020