Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
High 7.5
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researcher…
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking…
-
High 7.5
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attac…
-
Unscored —
A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to th…
-
High 7.5
A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 151…
-
High 7.5
A vulnerability has been identified in SIMATIC S7-300 CPUs (All versions < V3.X.16). The affected CPUs improperly valid…
-
Unscored —
A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All …
-
Unscored —
A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All …
-
Unscored —
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated configuration web…
-
Unscored —
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An attacker with network access …
-
Unscored —
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated web server of the…
-
Unscored —
Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and p…
-
Unscored —
When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 …
-
Unscored —
An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.…
-
Unscored —
A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x b…
-
Unscored —
A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before…
-
Unscored —CVE-2019-6553 EPSS 66%
A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue i…
-
Unscored —
Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and Compa…
-
Unscored —
PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to bypass access restrict…
-
Unscored —
The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into …
-
Unscored —
Rockwell PLC5/SLC5/0x/RSLogix Credentials management
The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to…
-
Unscored —
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5…
-
Unscored —
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5…
-
Unscored —
Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5…
-
Unscored —
Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all v…
-
Unscored —
Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6,…
-
Unscored —
A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system director…
-
Unscored —
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution.…
-
Unscored —
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution.…
-
Unscored —
A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V1…
-
Unscored —
A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Fir…
-
Unscored —
Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Versio…
-
Unscored —
License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.…
-
Unscored —
A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on c3…
-
Unscored —
A Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code e…
-
Unscored —
A Cryptographic Issue (CWE-310) vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure.
-
Unscored —
A Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build…
-
Unscored —
A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on pc…
-
High 7.5
Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5…
-
Unscored —
The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration …