Category

ICS / OT

4,112 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4,112 results · Feed

Medium 5.4

CVE-2018-7795

A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) p…

Schneider Electric PowerLogic - PM5560 prior to FW version 2.5.4 ICS / OT

Aug 29, 2018
Medium 4.8

CVE-2018-7789

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 produ…

Schneider Electric Modicon M221, all references, all versions prior to firmware V1.6.2.0 ICS / OT

Aug 29, 2018
Unscored —

CVE-2018-11456

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network …

Siemens Automation License Manager 5 ICS / OT

Aug 7, 2018
Unscored —

CVE-2018-11454

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions),…

Siemens SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14, SIMATIC STEP ICS / OT

Aug 7, 2018
Unscored —

CVE-2018-11455

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manage…

Siemens Automation License Manager 5, Automation License Manager 6 ICS / OT

Aug 7, 2018
Unscored —

CVE-2018-11453

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions),…

Siemens SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14, SIMATIC STEP ICS / OT

Aug 7, 2018
Unscored —

CVE-2018-10592

Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and pr…

Yokogawa STARDOM FCJ Controllers STARDOM FCN-RTU Controllers STARDOM FCN-100 Controllers ICS / OT

Jul 31, 2018
Unscored —

CVE-2018-10632

In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malici…

Moxa NPort 5210, 5230, and 5232 ICS / OT

Jul 24, 2018
Unscored —

CVE-2018-11452

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Fir…

Siemens Firmware variant IEC 61850 for EN100 Ethernet module Firmware variant Modbus TCP for EN100 Ethernet module Firmware variant IEC104 for EN100 Ethernet module ICS / OT

Jul 23, 2018
Unscored —

CVE-2018-11451

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Fir…

Siemens Firmware variant DNP3 TCP for EN100 Ethernet module Firmware variant IEC 61850 for EN100 Ethernet module Firmware variant Modbus TCP for EN100 Ethernet module ICS / OT

Jul 23, 2018
Unscored —

CVE-2018-10616

ABB Panel Builder 800 all versions has an improper input validation vulnerability which may allow an attacker to insert…

ABB ABB Panel Builder 800 ICS / OT

Jul 18, 2018
Unscored —

CVE-2018-11450

A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5).…

Siemens Siemens PLM Software TEAMCENTER ICS / OT

Jul 9, 2018
Unscored —

CVE-2018-4858

A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 6…

Siemens IEC 61850 system configurator, DIGSI 5 (affected as IEC 61850 system configurator is incorporated), DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, SICAM SCC ICS / OT

Jul 9, 2018
Unscored —

CVE-2018-7769

The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions pr…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7785

In Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authenticat…

Schneider Electric U.motion Builder ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7770

The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions pri…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7773

The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions pr…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7774

The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions pri…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7766

The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software version…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7787

In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validat…

Schneider Electric U.motion Builder ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7782

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenti…

Schneider Electric Pelco Sarix Professional V1 ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7778

In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12_v1, the Web Interface has an issue that may a…

Schneider Electric Evlink Charging Station ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7786

In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability ex…

Schneider Electric U.motion Builder ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7768

The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7763

The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. T…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7779

In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak a…

Schneider Electric Wiser for KNX ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7776

The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. Sys…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7780

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer…

Schneider Electric Pelco Sarix Professional V1 ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7783

Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the …

Schneider Electric SoMachine Basic ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7765 Scanner template

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software v…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7771

The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions p…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7781

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sendi…

Schneider Electric Pelco Sarix Professional V1 ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7767

The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions p…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7777 Public exploit EPSS 32%

The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider El…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7764

The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to …

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7772

The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.moti…

Schneider Electric U.Motion ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-7784

In Schneider Electric U.motion Builder software versions prior to v1.3.4, this exploit occurs when the submitted data o…

Schneider Electric U.motion Builder ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-4855

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted stora…

Siemens SICLOCK TC100, SICLOCK TC400 ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-4853

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with …

Siemens SICLOCK TC100, SICLOCK TC400 ICS / OT

Jul 3, 2018
Unscored —

CVE-2018-4852

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with …

Siemens SICLOCK TC100, SICLOCK TC400 ICS / OT

Jul 3, 2018