1,185 results · Clear filters · Feed
-
Critical max 10.0
Siemens SINEC OS
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Aug 12, 2025 -
Critical max 10.0
iba Systems ibaPDA
Successful exploitation of this vulnerability could allow an attacker to perform unauthorized actions on the file system.
first Jan 27, 2026 -
Critical max 10.0
Siemens SINEC OS
SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Jan 28, 2026 -
Critical max 9.8
ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update C)
first Jul 26, 2022 -
Critical max 9.8ICSA-26-055-01 2 CVEs
InSAT MasterSCADA BUK-TS
Successful exploitation of these vulnerabilities may allow remote code execution.
-
Critical max 9.1VA-26-082-01 4 CVEs
Census CSWeb multiple vulnerabilities
Census CSWeb allows a remote, authenticated attacker to perform actions such as path traversal, arbitrary file upload and stored XSS. An unauthenticated attacker could also send requests to configuration files in some deployments.
-
Critical max 9.8ICSA-26-050-03 4 CVEs
Jinan USR IOT Technology Limited (PUSR) USR-W610
Successful exploitation of these vulnerabilities could result in authentication being disabled, a denial-of-service condition, or an attacker stealing valid user credentials, including administrator credentials.
-
Critical max 9.8ICSA-26-043-10 1 CVE
Airleader Master
Successful exploitation of this vulnerability could allow an attacker to obtain remote code execution.
-
Critical max 9.8ICSA-26-041-02 2 CVEs
ZLAN Information Technology Co. ZLAN5143D
Successful exploitation of these vulnerabilities could result in an attacker bypassing authentication, or resetting the device password.
-
Critical max 9.0
Hitachi Energy XMC20
Hitachi Energy is aware of a vulnerability that affects XMC20 product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for the…
first Jan 27, 2026 -
Critical max 9.0
Hitachi Energy FOX61x
Hitachi Energy is aware of a vulnerability that affects FOX61x product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for th…
first Jan 27, 2026 -
Critical max 9.8
KiloView Encoder Series (Update A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to create or delete administrator accounts, granting full administrative control.
first Jan 29, 2026 -
Critical max 8.8ICSA-26-036-02 1 CVE
Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability may allow an attacker to read device data or part of a control program from the affected product, write device data in the affected product, or cause a denial-of-service condition on the affected product.
-
Critical max 9.3ICSA-26-036-04 9 CVEs
Ilevia EVE X1 Server
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary shell commands and the disclosure of sensitive system information.
-
Critical max 9.4
Multiple India-based CCTV Cameras (Update A)**
Successful exploitation of this vulnerability could result in information disclosure, including capture of camera account credentials.
first Dec 9, 2025 -
Critical max 9.3ICSA-26-034-02 1 CVE
*Avation Light Engine Pro *
Successful exploitation of this vulnerability could allow an attacker to take full control of the device.
-
Critical max 9.1ICSA-26-034-03 1 CVE
RISS SRL MOMA Seismic Station
Successful exploitation of this vulnerability could result in an unauthenticated attacker creating a denial-of-service condition.
-
Critical max 10.0ICSA-26-034-04 1 CVE
Synectix LAN 232 TRIO
Successful exploitation of this vulnerability could result in an unauthenticated attacker modifying critical device settings or factory resetting the device.
-
Critical max 9.8
Schneider Electric Wiser Home Controller WHC-5918A
Schneider Electric is aware of a vulnerability in its Wiser Home Controller WHC-5918A product. The Wiser Home Controller WHC-5918A, a C-Bus based home automation controller, was discontinued on December 31, 2015. Failure to apply the mitigations provided belo…
first Jul 9, 2024 -
Critical max 9.8
Festo Didactic SE MES PC
MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. …
first Feb 27, 2024 -
Critical max 9.5ICSA-26-027-04 1 CVE
Johnson Controls Metasys Products
Successful exploitation of this vulnerability could result in remote SQL execution, leading to alteration or loss of data.
-
Critical max 9.0
Axis Communications Camera Station Pro, Camera Station, and Device Manager (Update B)
Successful exploitation of these vulnerabilities could result in an attacker executing arbitrary code, executing a man-in-middle style attack, or bypass authentication.
first Dec 18, 2025 -
Critical max 9.4ICSA-26-022-06 1 CVE
Hubitat Elevation Hubs
Successful exploitation of this vulnerability could allow an authenticated attacker to escalate their privileges and control devices outside of their authorized scope.
-
Critical max 9.4ICSA-26-022-08 3 CVEs
EVMAPA
Successful exploitation of these vulnerabilities could lead to degraded service, a denial-of-service, or unauthorized remote command execution, which could lead to spoofing or a manipulation of charging station statuses.
-
Critical max 9.8VA-26-015-01 1 CVE
NOAA PMEL Live Access Server (LAS) command injection
Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands.
-
Critical max 10.0ICSA-26-015-01 7 CVEs
AVEVA Process Optimization
Successful exploitation of these vulnerabilities could enable an attacker to execute remote code, perform SQL injection, escalate privileges, or access sensitive information.
-
Critical max 9.8
Festo Firmware
Incomplete Festo product documentation of remote accessible functions and their required IP ports. Depending on the product a description of the supported features can be found in the product documentation to some extent. Update A, 2022-12-13 Added affected d…
first Nov 29, 2022 -
Critical max 8.6
Siemens OPC UA
The products listed below contain two authentication bypass vulnerabilities that could allow an attacker to gain access to the data managed by the server. Siemens has released new versions for several affected products and recommends to update to the latest v…
first Mar 11, 2025 -
Critical max 9.8
Siemens User Management Component
Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to …
first Dec 16, 2024 -
Critical max 9.8
Siemens RUGGEDCOM APE1808
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing furthe…
first Mar 12, 2024 -
Critical max 9.8
Siemens RUGGEDCOM APE1808 with Fortigate NGFW Devices
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing furthe…
first Mar 12, 2024 -
Critical max 9.0
Siemens RUGGEDCOM APE 1808
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products whe…
first Jul 9, 2024 -
Critical max 10.0
Siemens Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains an authorization bypass vulnerability that could…
first Jan 13, 2026 -
Critical max 9.3
Güralp Systems FMUS Series and MIN Series Devices (Update B)
Successful exploitation of this vulnerability could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.
first Jul 31, 2025 -
Critical max 8.7
Hitachi Energy Asset Suite
Hitachi Energy is aware of a Jasper Report vulnerability that affects the Asset Suite product versions mentioned in this document below. This vulnerability can be exploited to carry out remote code execution (RCE) attack on the product. Please refer to the Re…
first Dec 9, 2025 -
Critical max 9.8VA-26-008-02 2 CVEs
OPEXUS eComplaint and eCasePortal IDOR
OPEXUS eCasePortal and eComplaint before version 9.0.45.0 allow an unauthenticated attacker to iterate through predictable URL parameters and download all available files. The eCasePortal vulnerability allows attackers to upload and delete files as well.
-
Critical max 9.8
Mitsubishi Electric Air Conditioning Systems (Update B)
Successful exploitation of this vulnerability could allow an attacker to bypass authentication to gain unauthorized control of the air conditioning system or access sensitive information stored in the system. The attacker may also use the disclosed sensitive …
first Jun 26, 2025 -
Critical max 9.8
Schneider Electric EcoStruxure Foxboro DCS Advisor
Schneider Electric is aware of a vulnerability disclosed by Microsoft in the Microsoft Windows Server Update Services (WSUS) used in the EcoStruxure™ Foxboro DCS Advisor services. The EcoStruxure™ Foxboro DCS Advisor, an optional component of the [EcoStruxure…
first Dec 9, 2025 -
Critical max 9.0ICSA-25-350-03 1 CVE
Hitachi Energy AFS, AFR and AFF Series
Successful exploitation of this vulnerability could compromise the integrity of the product data and disrupt its availability.
-
Critical max 6.5ICSA-25-338-03 1 CVE
Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.