1,185 results · Clear filters · Feed
-
Critical max 9.1ICSA-25-254-02 1 CVE
Siemens SIMATIC Virtualization as a Service (SIVaaS)
SIMATIC Virtualization as a Service (SIVaaS) is affected by a vulnerability which exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization. Siemens recommends to contact te…
-
Critical max 9.8
Delta Electronics COMMGR (Update A)
Successful exploitation of this vulnerability could allow for an attacker to remotely access the AS3000Simulator family in the COMMGR software and execute arbitrary code.
first Apr 15, 2025 -
Critical max 9.4ICSA-25-245-03 1 CVE
SunPower PVS6
Successful exploitation of this vulnerability could allow attackers to gain full access to the device, enabling them to replace firmware, modify settings, disable the device, create SSH tunnels, and manipulate attached devices.
-
Critical max 9.8
Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product
Hitachi Energy is aware of a remote code execution vulnerability that affects the Oracle WebLogic component in the Service Suite product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, int…
-
Critical max 9.3
Tigo Energy Cloud Connect Advanced (Update A)
Successful exploitation of these vulnerabilities could allow attackers to gain unauthorized administrative access using hard-coded credentials, escalate privileges to take full control of the device, modify system settings, disrupt solar energy production, in…
first Aug 5, 2025 -
Critical max 8.4ICSA-25-226-24 1 CVE
Rockwell FactoryTalk Linx
Successful exploitation of this vulnerability could allow an attacker to to create, update, and delete FTLinx drivers.
-
Critical max 9.3ICSA-25-226-25 4 CVEs
Rockwell Automation Micro800
Successful exploitation of these vulnerabilities could result in remote code execution or may lead to privilege escalation.
-
Critical max 9.3ICSA-25-226-28 1 CVE
Rockwell Automation ControlLogix Ethernet Modules
Successful exploitation of this vulnerability could allow remote attackers to perform memory dumps, modify memory, and control execution flow.
-
Critical max 9.8
MegaSys Computer Technologies Telenium Online Web Application (Update A)
Successful exploitation of this vulnerability could allow an attacker to inject arbitrary Perl code through a crafted HTTP request, leading to remote code execution on the server.
first Sep 19, 2024 -
Critical max 9.6
Siemens RUGGEDCOM ROS
Multiple vulnerabilities affect various third-party components of the RUGGEDCOM Operating System (ROS). If exploited, an attacker could cause a denial-of-service, act as a man-in-the-middle or retrieval of sensitive information or gain privileged functions. S…
first Mar 8, 2022 -
Critical max 9.1
Siemens RUGGEDCOM ROS
A vulnerability was identified in RUGGEDCOM ROS devices with mirror port enabled, that could allow an attacker to inject information into the network via the mirror port. Siemens has released new versions for several affected products and recommends to update…
first Aug 8, 2023 -
Critical max 9.8
Siemens SIMATIC S7-1500
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally ide…
first Dec 12, 2023 -
Critical max 10.0
Siemens SIMATIC IPC RS-828A
SIMATIC IPC RS-828A is affected by an authentication bypass vulnerability in the Redfish interface of its Baseboard Management Controller (BMC) that could allow an attacker to gain unauthorized access and compromise confidentiality, integrity and availability…
first May 13, 2025 -
Critical max 9.1ICSA-25-226-13 1 CVE
Siemens SIMATIC RTLS Locating Manager
SIMATIC RTLS Locating Manager Before V3.2 contains an improper input validation vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges. Siemens has released a new version for SIMATIC RTLS Locating Manage…
-
Critical max 9.8ICSA-25-226-21 5 CVEs
Siemens BFCClient
Siemens BFCClient contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, to change the application behaviour or to create a denial of service condition. Siemens has released a new version fo…
-
Critical max 9.8
Gessler GmbH WEB-MASTER
Successful exploitation of these vulnerabilities could allow a user to take control of the web management of the device. An attacker with access to the device could also extract and break the password hashes for all users stored on the device.
first Feb 1, 2024 -
Critical max 9.8
CyberPower PowerPanel Business
Successful exploitation of these vulnerabilities could result in an attacker bypassing authentication and gaining administrator privileges, forging JWT tokens to bypass authentication, writing arbitrary files to the server and acheiving code execution, gainin…
first May 2, 2024 -
Critical max 9.8
Instantel Micromate (Update A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to access the device's configuration port and execute commands.
first May 29, 2025 -
Critical max 9.3ICSA-25-219-01 1 CVE
Delta Electronics DIAView
Successful exploitation of this vulnerability may allow a remote attacker to read or write files on the affected device.
-
Critical max 9.8ICSA-25-219-03 1 CVE
Burk Technology ARC Solo
Successful exploitation of this vulnerability could result in an attacker gaining access to the device, locking out authorized users, or disrupting operations.
-
Critical max 9.8ICSA-25-219-05 1 CVE
Packet Power EMX and EG
Successful exploitation of this vulnerability could allow an attacker to gain full access to the device without authentication.
-
Critical max 9.4
Honeywell Experion PKS (Update A)
Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.
first Jul 24, 2025 -
Critical max 9.4ICSA-25-247-01 4 CVEs
Honeywell OneWireless Wireless Device Manager (WDM)
Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.
-
Critical max 9.3ICSA-25-212-02 4 CVEs
Rockwell Automation Lifecycle Services with VMware
Successful exploitation of these vulnerabilities could lead to code execution on the host or leakage of memory from processes communicating with vSockets.
-
Critical max 8.8
Johnson Controls Software House iStar Door Controller (Update A)
Successful exploitation of this vulnerability may allow an attacker to gain unauthorized access to the iSTAR Pro door controller.
first Jun 6, 2024 -
Critical max 9.8ICSA-25-205-02 1 CVE
Network Thermostat X-Series WiFi Thermostats
Successful exploitation of this vulnerability could allow an attacker to gain full administrative access to the device.
-
Critical max 9.3ICSA-25-198-01 1 CVE
Leviton AcquiSuite and Energy Monitoring Hub
Successful exploitation of this vulnerability could allow an attacker to craft a malicious payload in URL parameters that would get executed in a client browser when accessed by a user, steal session tokens and control the service.
-
Critical max 10.0
KUNBUS GmbH Revolution Pi (Update A)
Successful exploitation of these vulnerabilities could allow attackers to bypass authentication, gain unauthorized access to critical functions, and execute malicious server-side includes (SSI) within a web page.
first May 1, 2025 -
Critical max 9.8ICSA-25-191-09 1 CVE
KUNBUS RevPi Webstatus
Successful exploitation of this vulnerability could allow attackers to bypass authentication and gain unauthorized access to the application.
-
Critical max 9.4ICSA-25-189-01 5 CVEs
Emerson ValveLink Products
Successful exploitation of these vulnerabilities could allow an attacker with access to the system to read sensitive information stored in cleartext, tamper with parameters, and run un-authorized code.
-
Critical max 9.5ICSA-25-203-06 6 CVEs
Schneider Electric EcoStruxture IT Data Center Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ IT Data Center Expert (DCE) product. The EcoStruxure™ IT Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device informa…
-
Critical
Siemens SIMATIC Communication Processor Vulnerability (Update C)
SIMATIC CP and TIM devices contain an authentication bypass vulnerability that could allow unauthenticated users to perform administrative operations under certain conditions. Siemens has released new versions for several affected products and recommends to u…
first Nov 27, 2015 -
Critical max 9.8ICSA-25-191-01 4 CVEs
Siemens SINEC NMS
Siemens SINEC NMS before V4.0 is affected by multiple vulnerabilities which could allow an attacker to elevate privilege and exceute arbitrary code. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. Siemens is pr…
-
Critical max 9.8VA-25-169-01 9 CVEs
Versa Networks Versa Director multiple vulnerabilities
Versa Networks Versa Director contains a variety of vulnerabilities. In the most severe cases, a remote, unauthenticated attacker could execute arbitrary code with administrative privileges.
-
Critical max 10.0ICSA-25-182-05 2 CVEs
Voltronic Power and PowerShield UPS monitoring software
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker remotely to make configuration changes, resulting in shutting down UPS connected devices or execution of arbitrary code.
-
Critical
IBHsoftec S7-SoftPLC CPX43 Heap-based Buffer Overflow Vulnerability
first Aug 5, 2016 -
Criticalfirst Jul 17, 2016
-
Critical
Schneider Electric Serial Modbus Driver Buffer Overflow (Update A)
first Dec 28, 2014 -
Critical
Mitsubishi Electric Automation MX Component V3 ActiveX Vulnerability
first Feb 21, 2013 -
Criticalfirst Jun 16, 2012