Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Unscored —

CVE-2018-17926

The product M2M ETHERNET (FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior) is vulnerable in that an attacker…

ABB M2M ETHERNET ICS / OT

Jan 31, 2019
Unscored —

CVE-2018-19027

Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior whe…

Omron CX-Protocol within CX-One ICS / OT

Jan 30, 2019
Unscored —

CVE-2018-18981

In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send num…

Rockwell Automation Rockwell Automation FactoryTalk Services Platform v2.90 and earlier ICS / OT

Jan 24, 2019
Unscored —

CVE-2018-0651

Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, ST…

Yokogawa Electric The license management function of YOKOGAWA products ICS / OT

Jan 9, 2019
Unscored —

CVE-2018-16196

Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM …

Yokogawa Electric Multiple Yokogawa products that contain Vnet/IP Open Communication Driver ICS / OT

Jan 9, 2019
Unscored —

CVE-2018-7832

An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause t…

Schneider Electric Pro-Face GP-Pro EX v4.08 and previous versions ICS / OT

Dec 24, 2018
Unscored —

CVE-2018-7796

A Buffer Error vulnerability exists in PowerSuite 2, all released versions (VW3A8104 & Patches), which could cause an o…

Schneider Electric PowerSuite 2, All released versions (VW3A8104 & Patches) ICS / OT

Dec 24, 2018
Unscored —

CVE-2018-7835

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor …

Schneider Electric IIoT Monitor 3.1.38 ICS / OT

Dec 24, 2018
Unscored —

CVE-2018-7836 EPSS 32%

An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 …

Schneider Electric IIoT Monitor 3.1.38 ICS / OT

Dec 24, 2018
Unscored —

CVE-2018-7800

A Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable an attack…

Schneider Electric EVLink Parking v3.2.0-12_v1 and earlier ICS / OT

Dec 24, 2018
Unscored —

CVE-2018-7801

A Code Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable access with maxim…

Schneider Electric EVLink Parking v3.2.0-12_v1 and earlier ICS / OT

Dec 24, 2018
Unscored —

CVE-2018-7837

An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT M…

Schneider Electric IIoT Monitor 3.1.38 ICS / OT

Dec 24, 2018
Unscored —

CVE-2018-7793

A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions…

Schneider Electric FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) ICS / OT

Dec 24, 2018
Unscored —

CVE-2018-7802

A SQL Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could give access to the web in…

Schneider Electric EVLink Parking v3.2.0-12_v1 and earlier ICS / OT

Dec 24, 2018
Unscored —

CVE-2018-7812

An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premi…

Schneider Electric Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 ICS / OT

Dec 17, 2018
Unscored —

CVE-2018-7804

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quan…

Schneider Electric Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 ICS / OT

Dec 17, 2018
Unscored —

CVE-2018-7833

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon…

Schneider Electric Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 ICS / OT

Dec 17, 2018
Unscored —

CVE-2018-7797

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure…

Schneider Electric Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxureª Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxureª Energy Expert 1.3 (formerly Power Man ICS / OT

Dec 17, 2018
High 7.5

CVE-2018-16556

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (A…

Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7 SIMATIC S7-400 CPU 416F-3 PN/DP V7 SIMATIC S7-400 CPU 414-3 PN/DP V7 ICS / OT

Dec 13, 2018
Unscored —

CVE-2018-16555

A vulnerability has been identified in SCALANCE S602 (All versions < V4.0.1.1), SCALANCE S612 (All versions < V4.0.1.1)…

Siemens SCALANCE S602, SCALANCE S612, SCALANCE S623, SCALANCE S627-2M ICS / OT

Dec 13, 2018
High 8.2

CVE-2018-16557

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (A…

Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7 SIMATIC S7-400 CPU 416-3 PN/DP V7 SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) ICS / OT

Dec 13, 2018
Unscored —

CVE-2018-13815

A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attack…

Siemens SIMATIC S7-1200, SIMATIC S7-1500 ICS / OT

Dec 13, 2018
Unscored —

CVE-2018-13814

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14), SIMATIC HMI Comfort Ou…

Siemens SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, ICS / OT

Dec 13, 2018
Unscored —

CVE-2018-13804

A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 < V7.1…

Siemens SIMATIC IT LMS, SIMATIC IT Production Suite, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufact ICS / OT

Dec 13, 2018
Unscored —

CVE-2018-13811

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insuffi…

Siemens SIMATIC STEP 7 (TIA Portal) ICS / OT

Dec 13, 2018
Unscored —

CVE-2018-13813

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI C…

Siemens SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, ICS / OT

Dec 13, 2018
Unscored —

CVE-2018-13812

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI C…

Siemens SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, ICS / OT

Dec 13, 2018
Unscored —

CVE-2018-11465

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERI…

Siemens SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-11461

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERI…

Siemens SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-11460

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERI…

Siemens SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-11466

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERI…

Siemens SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-11457

A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All v…

Siemens SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-11459

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERI…

Siemens SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-11464

A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All v…

Siemens SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-11462

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERI…

Siemens SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-11463

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERI…

Siemens SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-11458

A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All v…

Siemens SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-13816

A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication…

Siemens TIM 1531 IRC ICS / OT

Dec 12, 2018
Unscored —

CVE-2018-7830

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embed…

Schneider Electric Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 ICS / OT

Nov 30, 2018
Unscored —

CVE-2018-7807

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the serv…

Schneider Electric Data Center Expert versions 7.5.0 and earlier ICS / OT

Nov 30, 2018