Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Unscored —

CVE-2019-13932

A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web application requests could be manipulated…

Siemens XHQ ICS / OT

Dec 12, 2019
Unscored —

CVE-2019-13942

A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 618…

Siemens EN100 Ethernet module PROFINET IO variant EN100 Ethernet module IEC 61850 variant EN100 Ethernet module Modbus TCP variant ICS / OT

Dec 12, 2019
Unscored —

CVE-2019-13944

A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 618…

Siemens EN100 Ethernet module PROFINET IO variant EN100 Ethernet module IEC 61850 variant EN100 Ethernet module Modbus TCP variant ICS / OT

Dec 12, 2019
Unscored —

CVE-2019-13927

A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D wi…

Siemens Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U with Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 Desigo PX automation controllers PXC22.1-E.D, PXC36-E.D, PXC36.1-E.D with activated web server ICS / OT

Dec 12, 2019
Unscored —

CVE-2019-13945

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-12…

Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-200 SMART CPU family SIMATIC S7-200 SMART CPU SR20 (6ES7 288-1SR20-0AA0) ICS / OT

Dec 12, 2019
Low 3.5

CVE-2019-13936

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Siem…

Siemens Polarion ICS / OT

Nov 27, 2019
Low 3.5

CVE-2019-13934

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Siem…

Siemens Polarion ICS / OT

Nov 27, 2019
Low 3.5

CVE-2019-13935

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Siem…

Siemens Polarion ICS / OT

Nov 27, 2019
High 7.5

CVE-2019-5637

Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and p…

Beckhoff TwinCAT 2 TwinCAT 3.1 ICS / OT

Nov 21, 2019
Medium 5.3

CVE-2019-5636

Beckhoff TwinCAT Discovery Service Denial of Service

When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down. Note that the TwinCAT devices are still performing as normal. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prio…

Beckhoff TwinCAT 3.1 TwinCAT 2 ICS / OT

Nov 21, 2019
High 7.5

CVE-2019-6852

A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Pre…

Schneider Electric Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific ICS / OT

Nov 20, 2019
Unscored —

CVE-2019-6853

A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720,…

Schneider Electric Andover Continuum models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702 ICS / OT

Nov 20, 2019
Unscored —

CVE-2019-13921

A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of t…

Siemens SIMATIC WinAC RTX F 2010 ICS / OT

Oct 10, 2019
Unscored —

CVE-2019-13929

A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3). An authenticated remote attacker with net…

Siemens SIMATIC IT UADM ICS / OT

Oct 10, 2019
High 7.5

CVE-2019-10923

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-tim…

Siemens SIMATIC ET 200MP IM 155-5 PN HF SIMATIC ET 200SP IM 155-6 PN HF Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 ICS / OT

Oct 10, 2019
High 7.5

CVE-2019-10936

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated …

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller ICS / OT

Oct 10, 2019
Unscored —

CVE-2019-13523

In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow…

Honeywell Performance IP Cameras Performance NVRs ICS / OT

Sep 26, 2019
Unscored —

CVE-2019-6828

A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmwa…

Schneider Electric Modicon M580 Modicon M340 Modicon Quantum ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6826

A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause …

Schneider Electric SoMachine HVAC ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6811

An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 …

Schneider Electric Modicon Quantum 140 NOE771x1 ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6810

CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware version…

Schneider Electric BMXNOR0200H: Ethernet / Serial RTU Module ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6809

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (fi…

Schneider Electric Modicon M340 Modicon M580 Modicon Quantum ICS / OT

Sep 17, 2019
Unscored —

CVE-2018-7820

A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could …

Schneider Electric APC UPS Network Management Card 2 AOS ICS / OT

Sep 17, 2019
High 7.5

CVE-2019-6829

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (…

Schneider Electric Modicon M580 Modicon M340 ICS / OT

Sep 17, 2019
Medium 6.5

CVE-2019-6833

A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versio…

Schneider Electric Magelis HMI Panels ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions…

Schneider Electric Wiser for KNX spaceLYnk ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6831

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial R…

Schneider Electric BMXNOR0200H: Ethernet / Serial RTU Module ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6830

A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a pos…

Schneider Electric Modicon M580 ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6840

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.…

Schneider Electric U.motion Server ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-6835

A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG650…

Schneider Electric U.motion Server ICS / OT

Sep 17, 2019
Unscored —

CVE-2019-13922

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with adminis…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 13, 2019
Unscored —

CVE-2019-13923

A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration…

Siemens IE/WSN-PA Link WirelessHART Gateway ICS / OT

Sep 13, 2019
Unscored —

CVE-2019-13918

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 13, 2019
Unscored —

CVE-2019-13919

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should o…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 13, 2019
Unscored —

CVE-2019-13920

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web ap…

Siemens SINEMA Remote Connect Server ICS / OT

Sep 13, 2019
Unscored —

CVE-2019-10937

A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to t…

Siemens SIMATIC TDC CP51M1 ICS / OT

Sep 13, 2019
Unscored —

CVE-2019-13540

Delta Electronics TPEditor, Versions 1.94 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploi…

Delta Electronics TPEditor ICS / OT

Sep 11, 2019
Unscored —

CVE-2019-13536

Delta Electronics TPEditor, Versions 1.94 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploit…

Delta Electronics TPEditor ICS / OT

Sep 11, 2019
Unscored —

CVE-2019-13544

Delta Electronics TPEditor, Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities may be exploited by p…

Delta Electronics TPEditor ICS / OT

Sep 11, 2019
Unscored —

CVE-2019-10943

A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) ICS / OT

Aug 13, 2019