Category
ICS / OT
4,112 known vulnerabilities.
4,112 results · Feed
-
Unscored —
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PL…
-
Unscored —
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the emb…
-
Unscored —
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PL…
-
Unscored —
An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded w…
-
Unscored —
Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, m…
-
Unscored —
A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, …
-
Unscored —
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, mem…
-
Unscored —
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offs…
-
Unscored —
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it i…
-
High 8.2
A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, whic…
-
Unscored —
A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which …
-
Unscored —
User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
-
Unscored —
User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
-
Unscored —
Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions vers…
-
Unscored —
Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
-
Unscored —
Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions …
-
Unscored —
Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
-
Unscored —
Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
-
Unscored —
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes mul…
-
Unscored —
Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fa…
-
Unscored —
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers uti…
-
Unscored —
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improper…
-
Unscored —
In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple out-of-bounds write vulnerabilities…
-
Unscored —
In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnera…
-
Unscored —
A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7…
-
Unscored —
A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privilege…
-
Unscored —
A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp …
-
Unscored —
A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 (All versions < V4.2.3). The web interface …
-
Unscored —
Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the applicatio…
-
Unscored —
Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be…
-
Unscored —
On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, C…
-
Unscored —
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated t…
-
Unscored —CVE-2018-14829 EPSS 16%
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to in…
-
Unscored —
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally…
-
Unscored —
A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access co…
-
Unscored —
A vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). A DLL hijacking vulnerability exists …
-
Unscored —
A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SC…
-
Critical 9.8
An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all …
-
Critical 9.8
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all re…
-
High 7.5
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all re…