1,185 results · Clear filters · Feed
-
Critical max 9.1ICSMA-26-176-01 1 CVE
pydicom pynetdicom Library
Successful exploitation of this vulnerability could allow an unauthenticated attacker to write to arbitrary file paths.
-
Critical max 9.4ICSA-26-176-02 4 CVEs
EVoke Systems Charging Station Management System
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.8VA-26-169-01 4 CVEs
U.S. GAO EPDS and CBCA EDS multiple vulnerabilities
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) contained multiple vulnerabilities. In the worst case, a remote, unauthenticated attacke…
-
Critical max 9.8ICSA-26-169-01 1 CVE
AVer PTC cameras
Successful exploitation of this vulnerability could allow arbitrary code execution.
-
Critical max 8.8ICSA-26-167-05 2 CVEs
Rockwell Automation FLEX I/O EtherNet/IP Adapters
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access, account takeover, and cause loss of availability.
-
Critical max 9.8ICSA-26-162-01 2 CVEs
Yarbo Android/iOS Mobile Application and Cloud Infrastructure
Successful exploitation of these vulnerabilities could allow an attacker to obtain hard-coded credentials, gain access to telemetry data, and potentially send operational commands to the robot fleet.
-
Critical max 9.8ICSA-26-162-02 7 CVEs
Naxclow IoT Platform
Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, intercept or manipulate communications, harvest sensitive credentials at scale, or gain unauthorized access.
-
Critical max 9.0
Schneider Electric Modicon Network Managed Switches
Schneider Electric is aware of a RADIUS protocol vulnerability affecting its Modicon Network Managed Switch product. The Modicon Network Managed Switch product provides connectivity for multiple Ethernet devices, network management, enhanced cyber security an…
first Apr 14, 2026 -
Critical max 9.8ICSA-26-148-02 1 CVE
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
Successful exploitation of this vulnerability could result in an attacker gaining administrator access to the device.
-
Critical max 9.1ICSA-26-148-06 1 CVE
KMW CCTV Security Cameras
Successful exploitation of this vulnerability may grant full unauthorized access to camera feeds and settings.
-
Critical max 9.3ICSA-26-148-08 3 CVEs
XCharge C6
Successful exploitation of these vulnerabilities could allow an attacker to gain administrator rights or execute code on the affected device.
-
Critical max 10.0
ABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)
An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the product to stop.
first Oct 7, 2025 -
Critical max 8.0
ABB Ability Camera Connect
ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 and below. An update is available that resolves a privately…
first Nov 27, 2025 -
Critical max 9.8ICSMA-26-146-01 1 CVE
Eppendorf BioFlo 320
Successful exploitation of this vulnerability could allow an attacker to gain full access to functionality and data with the bioreactor.
-
Critical max 7.5
ABB B&R Automation Studio
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products,…
first Feb 18, 2026 -
Critical max 9.8VA-26-138-01 1 CVE
Tyler Technologies Tyler Identity Default Administrative Credentials
Tyler Identity provider (TID-L) uses a documented, default administrative IDP credential. Users are not required to change the credentials before deployment.
-
Critical max 8.8ICSA-26-139-03 4 CVEs
ScadaBR
Successful exploitation of these vulnerabilities could allow an attacker to perform unauthenticated remote code execution.
-
Critical max 9.1ICSA-26-139-04 1 CVE
ZKTeco CCTV Cameras
Successful exploitation of this vulnerability could result in information disclosure, including capture of camera account credentials.
-
Critical max 10.0
Siemens SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
first Apr 9, 2024 -
Critical max 9.8
Siemens SIMATIC S7-1500 CPU family
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends countermeasures for pro…
first Jun 10, 2025 -
Critical max 10.0
Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain an authorization bypass vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for the affected products …
first Jan 13, 2026 -
Critical max 9.4
Siemens RUGGEDCOM APE1808 Devices
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
first Mar 10, 2026 -
Critical max 9.6
Siemens SIMATIC
SIMATIC S7-1500 devices contain a vulnerability that could allow an attacker to inject code by tricking a legitimate user into importing a specially crafted trace file in the web interface. Siemens has released new versions for several affected products and r…
first Mar 10, 2026 -
Critical max 9.1
Siemens Siemens ROS#
ROS# contains a ROS service file_server, that before version 2.2.2 contains a path traversal vulnerability which could allow an attacker to access, i.e. read and write, arbitrary files, which are accessible with the user rights of the user that runs the servi…
first May 12, 2026 -
Critical max 9.8
Siemens SIMATIC
SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
first May 12, 2026 -
Critical max 9.1
Siemens Ruggedcom Rox
Ruggedcom Rox contains an input validation vulnerability in the Scheduler functionality that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new versions …
first May 12, 2026 -
Critical max 9.1
Siemens SENTRON 7KT PAC1261 Data Manager
The web server in SENTRON 7KT PAC1261 Data Manager Before V2.1.0 contains a request smuggling vulnerability in the Go Project's net/http package that could allow an attacker to retrieve authorization tokens that can be used to gain administrative control over…
first May 12, 2026 -
Critical max 9.1
Siemens SIMATIC S7 PLC Web Server
SIMATIC S7 PLCs contain multiple vulnerabilities in the web server that could allow an attacker to perform cross-site scripting attacks. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens i…
first May 12, 2026 -
Critical max 9.1
Siemens Ruggedcom Rox
Ruggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first May 12, 2026 -
Critical max 9.8ICSA-26-134-17 1 CVE
Universal Robots Polyscope 5
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code.
-
Critical max 9.4
SWTCH EV swtchenergy.com (Update A)
Successful exploitation of these vulnerabilities could allow attackers to impersonate charging stations, hijack sessions, suppress or misroute legitimate traffic to cause large-scale denial-of-service, and manipulate data sent to the backend.
first Feb 26, 2026 -
Critical max 8.8
ABB AC500 V3 Stack Buffer Overflow in Cryptographic Message Syntax
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves publicly reported vulnerability. An attacker who successfully exploited these vulnerabilities could cause a crash, denial-of-se…
first Mar 12, 2026 -
Critical max 9.6
ABB Edgenius Management Portal
ABB identified a critical vulnerability present in ABB Ability Edgenius starting from version 3.2.0.0. We have not received any reports of this vulnerability being exploited. An unauthenticated attacker could exploit this vulnerability to: → install and run a…
first Nov 20, 2025 -
Critical max 7.5
Schneider Electric Modicon Controllers (Update A)
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controller products. The [Modicon Programmable Automation controllers](https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/) are used for complex netw…
first May 14, 2019 -
Critical max 9.4ICSA-26-113-02 1 CVE
Carlson Software VASCO-B GNSS Receiver
Successful exploitation of this vulnerability could enable a remote attacker to alter critical system functions or disrupt device operation.
-
Critical max 9.8ICSA-26-113-03 5 CVEs
Milesight Cameras
Successful exploitation of these vulnerabilities could crash the device being accessed or allow remote code execution.
-
Critical max 9.8ICSA-26-113-05 1 CVE
Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera
Successful exploitation of this vulnerability could allow an attacker to bypass authentication and have remote access to sensitive information on the device.
-
Critical max 9.8ICSA-26-113-06 1 CVE
Intrado 911 Emergency Gateway (EGW)
Successful exploitation of this vulnerability could allow an attacker to read, modify, or delete files.
-
Critical max 9.1
Siemens SCALANCE
SCALANCE W-700 IEEE 802.11n family before V6.6.0 are affected by multiple vulnerabilities. Siemens has released a new version for SCALANCE W-700 IEEE 802.11n family and recommends to update to the latest version.
first Apr 14, 2026 -
Critical max 9.8ICSA-26-111-10 13 CVEs
Silex Technology SD-330AC and AMC Manager
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, cause a denial-of-service, or configuration information may be altered without authentication.