74 results · Clear filters · Feed
-
Critical max 9.9
Siemens SINEC INS
SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.
-
Critical max 9.8
Treck TCP/IP (Update I)
Successful exploitation of these vulnerabilities may allow remote code execution or exposure of sensitive information.
first Jun 16, 2020 -
Critical max 9.1
Siemens SINEC NMS
SINEC NMS before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
-
Critical max 10.0
Siemens RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW
Palo Alto Networks has published [1] information on CVE-2024-3400 in PAN-OS. This advisory addresses Siemens Industrial products affected by this vulnerability. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM APE1808 and re…
first Apr 19, 2024 -
Critical max 10.0
Delta Electronics InfraSuite Device Master
Successful exploitation of this vulnerability could allow remote code execution.
-
Critical max 9.8
Siemens SIMATIC S7-1500 TM MFP BIOS
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - BIOS and recommends to update to the latest version.
first Jun 13, 2023 -
Critical max 9.8
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. This ad…
first Jun 13, 2023 -
Critical max 9.8
Siemens SIMATIC
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code within the context of a privileged process.
-
Critical max 9.8
Nice Linear eMerge E3-Series
Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.
-
Critical max 9.8
Siemens SCALANCE XCM-/XRM-300
SCALANCE XCM-/XRM-300 before V2.4 is affected by multiple vulnerabilities. Siemens has released an update for SCALANCE X-300 and recommends to update to the latest version.
-
Critical max 9.8
Unitronics Vision and Samba Series (Update A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to take administrative control of Unitronics Vision and Samba series systems and use a default administrative password.
first Dec 14, 2023 -
Critical max 10.0
Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to take control of the affected system.
first Oct 24, 2023 -
Critical max 9.6
Rockwell Automation Connected Components Workbench
Successful exploitation of these vulnerabilities could allow an attacker to exploit heap corruption via a crafted HTML.
-
Critical max 9.8
Siemens SCALANCE, RUGGEDCOM Third-Party
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special…
-
Critical max 9.0
Siemens Apache HTTP Server
Multiple vulnerabilities were identified in the Apache HTTP Server software. These include NULL Pointer Dereferencing, Out-of-bounds Write and Server-Side Request Forgery related vulnerabilities. Siemens has released updates for several affected products and …
first Jun 14, 2022 -
Critical max 7.8
Siemens SCALANCE LPE9403 Third-Party Vulnerabilities
Multiple vulnerabilities in the third-party components CivetWeb, Docker, Linux Kernel and systemd could allow an attacker to impact SCALANCE LPE9403 confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recom…
-
Critical max 9.8
Pepperl+Fuchs WirelessHART-Gateway
Successful exploitation of these vulnerabilities may result in a denial-of-service condition, code execution, and code exposure.
-
Critical max 9.8
Philips Vue PACS (Update B)
Successful exploitation of these vulnerabilities could allow an unauthorized person or process to eavesdrop, view or modify data, gain system access, perform code execution, install unauthorized software, or affect system data integrity in such a way as to ne…
first Jul 6, 2021 -
Critical max 9.8
General Electric Renewable Energy MDS Radios
Successful exploitation of these vulnerabilities could allow an attacker to control the configuration of the radio, join the network without proper authorization, or keep valid users from using the system correctly.
-
Critical max 10.0
Sensormatic PowerManage (Update A)
Successful exploitation of this vulnerability could allow an attacker to gain remote code execution.
first Feb 3, 2022 -
Critical max 10.0
Johnson Controls exacq Enterprise Manager
Successful exploitation of this vulnerability could allow an attacker to enter malicious input resulting in remote code execution.
-
Critical max 9.8
Rockwell Automation Logix Controllers (Update A)
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to bypass the verification mechanism and connect with Logix controllers. Additionally, this vulnerability could enable an unauthorized third-party tool to alter the co…
first Feb 25, 2021 -
Critical max 9.8
Hitachi ABB Power Grids eSOMS Telerik
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files to the server, discover sensitive information, or execute arbitrary code.
-
Critical max 8.8
Sierra Wireless AirLink ALEOS (Update B)
Successful exploitation of these vulnerabilities could allow attackers to remotely execute code, discover user credentials, upload files, or discover file paths.
first May 2, 2019 -
Critical max 9.8
Spacelabs Xhibit Telemetry Receiver (XTR)
A remote code execution vulnerability called BlueKeep (CVE-2019-0708) exists within the Remote Desktop Protocol (RDP) used by the Microsoft Windows operating systems listed below. An attacker can exploit this vulnerability to perform remote code execution on …
-
Critical max 9.8
Schneider Electric U.motion Builder (Update A)
A successful exploit of these vulnerabilities could allow an attacker to execute arbitrary commands or compromise the confidentiality, integrity, and availability of the system.
first Jun 29, 2017 -
Critical max 9.8
ICSA-18-107-03_Rockwell Automation Stratix Services Router
Rockwell Automation reported these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
-
Critical max 8.8
Rockwell Automation Stratix and ArmorStratix Switches
Successful exploitation of these vulnerabilities could result in loss of availability, confidentiality, and/or integrity caused by memory exhaustion, module restart, information corruption, and/or information exposure.
-
Critical max 9.8
Philips Intellispace Portal ISP Vulnerabilities
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to sensitive information, perform man-in-the-middle attacks, create denial of service conditions, or execute arbitrary code.
-
Critical max 9.8
ICSMA-17-215-01_Siemens Molecular Imaging Vulnerabilities
-
Critical max 9.8
ICSMA-17-215-02_Siemens Molecular Imaging Vulnerabilities
-
Critical max 9.8
ICSA-17-180-01A_Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320 (Update A)
Maksim Malyutin from Embedi reported this issue to Intel.
first Jun 29, 2017 -
Critical max 9.8
Hikvision Cameras
ATTENTION: Remotely exploitable/low skill level to exploit.
-
Critical max 9.8
Rockwell Automation Allen-Bradley Stratix and Allen-Bradley ArmorStratix
ATTENTION: Remotely exploitable/low skill level to exploit.