1,185 results · Clear filters · Feed
-
Critical max 9.3ICSA-25-336-01 1 CVE
Industrial Video & Control Longwatch
Successful exploitation of this vulnerability could allow an unauthenticated attacker to gain remote code execution with elevated privileges.
-
Critical max 9.3ICSA-25-336-02 1 CVE
Iskra iHUB and iHUB Lite
Successful exploitation of this vulnerability could allow a remote attacker to reconfigure devices, update firmware, and manipulate connected systems without any credentials.
-
Critical max 9.1
Mitsubishi Electric FA Engineering Software (Update C)
Successful exploitation of these vulnerabilities could allow unauthorized users to gain access to the MELSEC iQ-R/F/L series CPU modules and the MELSEC iQ-R series OPC UA server module or to view and execute programs or view project files without permissions.
first Dec 5, 2022 -
Critical max 10.0ICSA-25-329-03 5 CVEs
Zenitel TCIV-3+
Successful exploitation of these vulnerabilities could result in arbitrary code execution or cause a denial-of-service condition.
-
Critical max 9.8ICSA-25-329-05 2 CVEs
Festo Compact Vision System, Control Block, Controller, and Operator Unit products
Successful exploitation of these vulnerabilities could result in an attacker accessing devices without authentication or modifying configuration files.
-
Critical max 8.8ICSA-25-329-06 1 CVE
SiRcom SMART Alert (SiSA)
Successful exploitation of this vulnerability could enable an attacker to remotely activate or manipulate emergency sirens.
-
Critical max 8.6ICSA-25-324-01 2 CVEs
Automated Logic WebCTRL Premium Server
Successful exploitation of these vulnerabilities could allow a remote attacker to deceive a legitimate user into running malicious scripts or redirecting them to malicious websites.
-
Critical max 9.8ICSA-25-324-06 1 CVE
Emerson Appleton UPSMON-PRO
Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on affected installations of Appleton UPSMON-PRO.
-
Critical max 9.8ICSA-25-322-05 5 CVEs
METZ CONNECT EWIO2
A critical authentication bypass in EWIO-2 allows unauthenticated attackers with network access to gain administrative control over the device. Once compromised, an attacker can change configurations, manipulate data, disrupt services, and potentially render …
-
Critical max 9.8
Festo Controller CECC-S,-LK,-D Family Firmware (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to crash services, escalate privileges, bypass authentication, or gain unauthorized access to sensitive systems and data.
first Sep 30, 2025 -
Critical max 8.4ICSA-25-317-05 1 CVE
Rockwell Automation Verve Asset Manager
Successful exploitation of this vulnerability could result in an attacker accessing or altering user data.
-
Critical max 10.0ICSA-25-317-08 4 CVEs
General Industrial Controls Lynx+ Gateway
Successful exploitation of these vulnerabilities could result in obtaining sensitive device information, unauthorized access, or create a denial-of-service condition.
-
Critical max 9.8
Siemens SICAM GridEdge
Multiple vulnerabilities were identified in the web server of the SICAM GridEdge application which includes missing authentication for critical API functions, absent cross-origin resource sharing restrictions and access to credentials. Siemens has released a …
first Jun 14, 2022 -
Critical max 9.9
Siemens RUGGEDCOM ROX II
The web interface of RUGGEDCOM ROX II devices contain multiple Client-Side Enforcement of Server-Side Security vulnerabilities that could allow an attacker with a legitimate, highly privileged account on the web interface to get privileged code execution in t…
first May 13, 2025 -
Critical max 9.4ICSA-25-317-15 2 CVEs
Siemens COMOS
COMOS is affected by two vulnerabilities that could allow an attacker to execute arbitrary code or lead to data infiltration. Siemens has released a new version for COMOS and recommends to update to the latest version.
-
Critical max 9.3ICSA-25-308-02 1 CVE
Survision License Plate Recognition Camera
Successful exploitation of this vulnerability could allow an attacker to fully access the system without requiring authentication.
-
Critical max 10.0ICSA-25-308-04 3 CVEs
Radiometrics VizAir
Successful exploitation of these vulnerabilities could allow attackers to manipulate critical weather parameters and runway settings, mislead air traffic control and pilots, extract sensitive meteorological data, and cause significant disruption to airport op…
-
Critical max 9.9VA-25-304-02 10 CVEs
Restaurant Brands International assistant platform multiple vulnerabilities
Restaurant Brands International assistant platform is used to manage restaurants owned by RBI. Multiple vulnerabilities were found in the assistant platform. The most severe vulnerabilities chained together could allow a remote, unauthenticated attacker to cr…
-
Critical max 9.9
Rockwell Automation 1783-NATR
Successful exploitation of these vulnerabilities could result in a denial-of-service, data modification, or in an attacker obtaining sensitive information.
first Oct 21, 2025 -
Critical max 10.0ICSA-25-296-01 9 CVEs
AutomationDirect Productivity Suite
Successful exploitation of these vulnerabilities could enable an attacker to execute arbitrary code, disclose information, gain full-control access to projects, or obtain read and write access to files.
-
Critical max 10.0ICSA-25-296-02 1 CVE
ASKI Energy ALS-Mini-S8 and ALS-Mini-S4
Successful exploitation of this vulnerability could allow an attacker to gain full control over the device.
-
Critical max 9.9ICSA-25-296-03 2 CVEs
Veeder-Root TLS4B Automatic Tank Gauge System
Successful exploitation of these vulnerabilities could allow attackers to execute system-level commands, gain full shell access, achieve remote command execution, move laterally within the network, trigger a denial of service condition, cause administrative l…
-
Critical max 9.3ICSA-25-294-06 1 CVE
Raisecomm RAX701-GC Series
Successful exploitation of this vulnerability could allow a remote attacker to bypass authentication and gain unauthenticated root shell access to the affected devices.
-
Critical max 9.8VA-25-289-01 1 CVE
OPEXUS FOIAXpress unauthenticated administrator password reset
OPEXUS FOIAXpress allows a remote, unauthenticated attacker to reset the administrator password and gain full administrative access to a vulnerable system.
-
Critical max 9.8
Schneider Electric Modicon
Schneider Electric is aware of a vulnerability in its Modicon M241 / M251 / M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https://www.se.com/ww/en/product-range/7744-modicon-lmc058/ products. The Mod…
first Dec 10, 2024 -
Critical max 9.8
Siemens User Management Component (UMC)
Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to …
first Sep 10, 2024 -
Critical max 9.8ICSA-25-289-07 1 CVE
Siemens SIMATIC ET 200SP Communication Processors
SIMATIC ET 200SP communication processors (CP 1542SP-1, CP 1542SP-1 IRC and CP 1543SP-1, incl. SIPLUS variants) contain an authentication vulnerability that could allow an unauthenticated remote attacker to access the configuration data. Siemens has released …
-
Critical max 9.8ICSA-25-289-09 1 CVE
Siemens TeleControl Server Basic
TeleControl Server Basic V3.1 contains an information disclosure vulnerability that could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service. Siemens has rel…
-
Critical max 9.8VA-25-282-01 13 CVEs
Newforma Project Center multiple vulnerabilities
Newforma Project Center contains multiple vulnerabilities. In the worst case, successful exploitation could allow unauthenticated, remote code execution.
-
Critical max 9.8ICSA-25-273-01 1 CVE
MegaSys Enterprises Telenium Online Web Application
Successful exploitation of this vulnerability could allow an unauthenticated attacker to inject arbitrary operating system commands through a crafted HTTP request, leading to remote code execution on the server in the security context of the web application s…
-
Critical max 10.0
Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL (Update A)
Schneider Electric is aware of a vulnerability disclosed on the Erlang/OTP's SSH Server component used Schneider Electric Galaxy VS, VL, and VXL.Many vendors, including Schneider Electric, embed the Erlang/OTP's SSH Server in their offers.The Galaxy VS, Galax…
first May 13, 2025 -
Critical max 9.8VA-25-265-01 2 CVEs
Airship AI MFA bypass and default credentials vulnerabilities
Airship AI Acropolis is used for video and data management. In versions before 11.1.9, 11.0.21, and 10.2.35, a remote unauthenticated attacker with valid credentials can brute force the MFA code and authenticate without an additional authentication method. Im…
-
Critical max 9.8
Mitsubishi Electric FA Engineering Software Products (Update D)
Successful exploitation of these vulnerabilities could allow an attacker to disclose, tamper with, destroy or delete information in the products, or cause a denial-of-service (DoS) condition on the products.
first Jan 30, 2024 -
Critical max 9.8
Daikin Europe N.V Security Gateway
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to the system.
first Sep 11, 2025 -
Critical max 9.8ICSA-25-261-07 3 CVEs
Dover Fueling Solutions ProGauge MagLink LX4 Devices
Successful exploitation of these vulnerabilities could result in a remote attacker causing a denial-of-service condition or gaining administrative access to the device.
-
Critical max 10.0ICSA-25-259-07 2 CVEs
Delta Electronics DIALink
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication.
-
Critical max 9.8VA-25-252-01 1 CVE
OPEXUS FOIAXpress Public Access Link (PAL) SQL injection
Successful exploitation could allow a remote, unauthenticated attacker to read, write, or delete any content in the underlying database.
-
Critical
Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B)
Successful exploitation of this vulnerability could allow a stack overflow attack, which could result in loss of confidentiality, integrity, and denial of service of the device.
first Feb 27, 2025 -
Critical max 8.6ICSA-25-252-03 1 CVE
Rockwell Automation Stratix IOS
Successful exploitation of this vulnerability could allow an attacker to run malicious configurations without authentication.
-
Critical max 9.8ICSA-25-252-02 3 CVEs
ABB Cylon Aspect BMS/BAS
Successful exploitation of these vulnerabilities could allow an attacker to assume control of the target device or perform a denial-of-service (DoS) attack.