1,185 results · Clear filters · Feed
-
Critical max 9.8ICSA-26-111-12 11 CVEs
SenseLive X3050
Successful exploitation of these vulnerabilities could allow an attacker to take complete control of the device.
-
Critical max 9.8
GE UR Family (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain privileged access, or cause a denial-of-service condition.
first Mar 16, 2021 -
Critical max 9.1
Siemens SCALANCE
SCALANCE devices contain multiple vulnerabilities in MSPS based product lines that could allow authenticated remote attackers to execute custom code or create a XSS situation, as well as unauthenticated remote attackers to create a denial of service condition…
first Aug 9, 2022 -
Critical max 9.1ICSA-26-106-02 1 CVE
Horner Automation Cscape and XL4, XL7 PLC
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to systems and services.
-
Critical max 9.8ICSA-26-106-03 12 CVEs
Anviz Multiple Products
Successful exploitation of these vulnerabilities could allow attackers to conduct reconnaissance, capture or decrypt sensitive data, alter device configurations, gain unauthorized administrative or root‑level access, execute arbitrary code, compromise credent…
-
Critical max 9.3ICSA-26-106-04 1 CVE
AVEVA Pipeline Simulation
Successful exploitation of this vulnerability could allow an unauthenticated attacker to modify simulation parameters, training configuration and training records.
-
Critical max 9.8ICSA-26-099-01 1 CVE
Contemporary Controls BASC 20T
Successful exploitation of this vulnerability could allow an attacker to enumerate the functionality of each component associated with the PLC, reconfigure, rename, delete, perform file transfers, and make remote procedure calls.
-
Critical max 8.7
Hitachi Energy Ellipse
Hitachi Energy is aware of a Jasper Report vulnerability that affects the Ellipse product versions mentioned in this document below. This vulnerability can be exploited to carry out remote code execution (RCE) attack on the product. Please refer to the Recomm…
first Feb 24, 2026 -
Critical max 9.3ICSA-26-090-01 1 CVE
Anritsu Remote Spectrum Monitor
Successful exploitation of this vulnerability could allow attackers with network access to alter operational settings, obtain sensitive signal data, or disrupt device availability.
-
Critical max 9.8ICSA-26-090-02 1 CVE
PX4 Autopilot
Successful exploitation of this vulnerability could allow an attacker with access to the MAVLink interface to execute arbitrary shell commands without cryptographic authentication.
-
Critical max 10.0
Honeywell IQ4 Series BMS Controller (Update A)
Successful exploitation of this vulnerability could allow an unauthorized attacker to access controller management settings, control components, disclose information, or cause a denial-of-service condition.
first Mar 10, 2026 -
Critical max 10.0
WAGO GmbH & Co. KG Industrial Managed Switches
A vulnerability has been found affecting the Managed Switches of WAGO. An unauthenticated attacker can fully compromise the device via an undocumented function.
first Mar 23, 2026 -
Critical max 9.3ICSA-26-085-03 1 CVE
PTC Windchill Product Lifecycle Management
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.
-
Critical max 9.1
Multiple IP-KVM Vulnerabilities
Multiple KVM products (GL-iNet GL-RM1, Angeet ES3 KVM, Sipeed NanoKVM, and JetKVM) are affected by multiple vulnerabilities. The most severe of these vulnerabilities could allow a remote, unauthenticated attacker to take complete control of a vulnerable produ…
first Mar 17, 2026 -
Critical max 9.3ICSA-26-083-01 1 CVE
Pharos Controls Mosaic Show Controller
Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary commands with root privileges.
-
Critical max 10.0
"Schneider Electric Plant iT/Brewmaxx"
Schneider Electric is aware of multiple vulnerabilities in Redis open-source database, affecting its Plant iT product. The [Plant iT/Brewmaxx](https://www.proleit.com/plant-it/) product is an object-oriented and PLC-based process control system with integrate…
first Jan 13, 2026 -
Critical max 9.8VA-26-077-01 5 CVEs
OPEXUS eComplaint and eCase multiple vulnerabilities
OPEXUS eComplaint and eCase contain multiple vulnerabilities. In the worst case, an unauthenticated attacker could take over any account with a known username.
-
Critical max 9.1ICSA-26-078-08 3 CVEs
Automated Logic WebCTRL Premium Server
Successful exploitation of these vulnerabilities could allow an attacker to read, intercept, or modify communications.
-
Critical max 9.4ICSA-26-078-06 4 CVEs
CTEK Chargeportal
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-078-07 4 CVEs
IGL-Technologies eParking.fi
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.3
Schneider Electric SCADAPack and RemoteConnect
Schneider Electric is aware of a vulnerability in its SCADAPack™ x70 RTU products. The SCADAPack™ 47xi, SCADAPack™ 47x and SCADAPack™ 57x product are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to a…
first Feb 10, 2026 -
Critical max 9.8
CODESYS in Festo Automation Suite
Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwar…
first Feb 26, 2026 -
Critical max 9.9
Siemens SINEC Security Monitor
SINEC Security Monitor before V4.9.0 contains multiple vulnerabilities. Siemens has released a new version for SINEC Security Monitor and recommends to update to the latest version.
first Oct 8, 2024 -
Critical max 9.6
Siemens RUGGEDCOM APE1808
Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
first Feb 11, 2025 -
Critical max 10.0
Siemens COMOS
COMOS is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code or cause denial of service condition, data infiltration or perform access control violations. Siemens has released new versions for the affected products and …
first Dec 9, 2025 -
Critical max 9.8
Honeywell HIB2PI CCTV Camera (Update B)
Successful exploitation of this vulnerability could lead to account takeover and unauthorized access to camera feeds.
first Feb 17, 2026 -
Critical max 9.8ICSA-26-069-01 3 CVEs
Apeman Cameras
Successful exploitation of these vulnerabilities could allow an attacker to take control of the device or view camera feeds.
-
Critical max 5.9
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA (Update B)
Successful exploitation of these vulnerabilities could result in unauthorized access to information or to GENESIS64 and MC Works64 functionality, or the disabling of SQL Server in GENESIS64, ICONICS Suite, MC Works64, or GENESIS32.
first Jan 20, 2022 -
Critical max 8.8ICSA-26-062-05 1 CVE
Labkotec LID-3300IP
Successful exploitation of this vulnerability could allow attackers to gain unauthorized control over system operations, leading to disruption of normal functionality and potential safety hazards.
-
Critical max 9.4ICSA-26-062-06 4 CVEs
Mobiliti e-mobi.hu
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-062-07 4 CVEs
ePower epower.ie
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-062-08 4 CVEs
Everon OCPP Backends
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 8.8ICSA-26-057-01 6 CVEs
Johnson Controls, Inc. Frick Controls Quantum HD
Successful exploitation of these vulnerabilities can lead to pre-authentication remote code execution, information leak or denial of service.
-
Critical max 9.4ICSA-26-057-03 4 CVEs
CloudCharge cloudcharge.se
Successful exploitation of these vulnerabilities could allow attackers to impersonate charging stations, hijack sessions, suppress or misroute legitimate traffic to cause large-scale denial of service, and manipulate data sent to the backend.
-
Critical max 9.4ICSA-26-057-04 4 CVEs
EV2GO ev2go.io
Successful exploitation of these vulnerabilities could allow attackers to impersonate charging stations, hijack sessions, suppress or misroute legitimate traffic to cause large-scale denial of service, and manipulate data sent to the backend.
-
Critical max 9.4ICSA-26-057-05 4 CVEs
Chargemap chargemap.com
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-057-07 4 CVEs
EV Energy ev.energy
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-057-08 4 CVEs
Mobility46 mobility46.se
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 10.0ICSA-26-057-10 23 CVEs
Copeland XWEB and XWEB Pro
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, cause a denial-of-service condition, cause memory corruption, and execute arbitrary code.
-
Critical max 9.8
Siemens Third-Party Components in SINEC OS
SINEC OS before V3.2 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Aug 12, 2025