120 results · Clear filters · Feed
-
Critical max 9.8
Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product
Hitachi Energy is aware of a remote code execution vulnerability that affects the Oracle WebLogic component in the Service Suite product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, int…
-
Critical max 10.0
Siemens SIMATIC IPC RS-828A
SIMATIC IPC RS-828A is affected by an authentication bypass vulnerability in the Redfish interface of its Baseboard Management Controller (BMC) that could allow an attacker to gain unauthorized access and compromise confidentiality, integrity and availability…
first May 13, 2025 -
Medium max 6.9
Schneider Electric System Monitor Application
Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC and Pro-face PS5000 trusted Legacy industrial PC series products. The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iP…
-
Critical max 9.8
PTZOptics and Other Pan-Tilt-Zoom Cameras
Successful exploitation of these vulnerabilities could allow an attacker to leak sensitive data, execute arbitrary commands, and access the admin web interface using hard-coded credentials.
-
Critical max 8.7
Siemens RUGGEDCOM APE1808
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where f…
first Nov 22, 2024 -
Medium max 7.5first Feb 15, 2014
-
Medium max 7.5
Unified Automation OPC SDK OpenSSL Vulnerability
first Feb 15, 2014 -
Medium max 7.5
Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability
first Feb 15, 2014 -
Medium max 7.5first Feb 8, 2014
-
Medium max 7.5first Feb 6, 2014
-
Medium max 7.5
Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)
first Jan 16, 2014 -
Critical max 9.8first Sep 12, 2015
-
Medium max 7.5
Innominate mGuard OpenSSL HeartBleed Vulnerability
first Jan 16, 2014 -
Critical max 9.8
Bash Command Injection Vulnerability
first Jun 29, 2014 -
Medium max 7.5first Jan 25, 2014
-
High max 9.8
InduSoft Web Studio Directory Traversal Vulnerability
first Jan 18, 2014 -
Critical max 7.5
Trihedral Engineering Limited VTScada Vulnerabilities
first Mar 11, 2016 -
Medium max 5.3
Craft CMS stores user-provided content session files
Craft CMS stores user-provided content in session files. A remote, unauthenticated attacker can introduce arbitrary content, including PHP code, into session files with known names and locations. If an attacker can access these files, possibly through another…
-
Critical max 10.0
Siemens Opcenter Intelligence
The Tableau Server component in Opcenter Intelligence contains multiple vulnerabilities as described below. Siemens has released a new version for Opcenter Intelligence and recommends to update to the latest version and to install the latest available version…
first Feb 11, 2025 -
High max 8.8
Commvault Web Server unspecified vulnerability
According to Commvault: "The Web Server is a component in CommCell environments that provides a RESTful interface to the software where users can perform various tasks using available APIs". A remote, authenticated attacker can exploit an unspecified vulnerab…
-
Critical max 9.3
Rockwell Automation Lifecycle Services with VMware
Successful exploitation of these vulnerabilities could allow an attacker with local administrative privileges to execute code.
-
Critical max 9.8
Edimax IC-7100 IP Camera
Successful exploitation of this vulnerability could allow an attacker to send specially crafted requests to achieve remote code execution on the device.
-
High max 8.6
Trimble Cityworks (Update A)
Successful exploitation of this vulnerability could allow an authenticated user to perform a remote code execution.
first Feb 6, 2025 -
High max 8.8
Siemens RUGGEDCOM APE1808
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products whe…
first Apr 9, 2024 -
Critical max 9.9
Siemens SINEC INS
SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.
-
Critical max 9.8
Treck TCP/IP (Update I)
Successful exploitation of these vulnerabilities may allow remote code execution or exposure of sensitive information.
first Jun 16, 2020 -
Critical max 9.1
Siemens SINEC NMS
SINEC NMS before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
-
Critical max 10.0
Siemens RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW
Palo Alto Networks has published [1] information on CVE-2024-3400 in PAN-OS. This advisory addresses Siemens Industrial products affected by this vulnerability. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM APE1808 and re…
first Apr 19, 2024 -
High max 8.2
Siemens ST7 ScadaConnect
Siemens has released a new version for ST7 ScadaConnect and recommends to update to the latest version.
-
Critical max 10.0
Delta Electronics InfraSuite Device Master
Successful exploitation of this vulnerability could allow remote code execution.
-
Critical max 9.8
Siemens SIMATIC S7-1500 TM MFP BIOS
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - BIOS and recommends to update to the latest version.
first Jun 13, 2023 -
Critical max 9.8
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. This ad…
first Jun 13, 2023 -
Critical max 9.8
Siemens SIMATIC
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code within the context of a privileged process.
-
Critical max 9.8
Nice Linear eMerge E3-Series
Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.
-
Critical max 9.8
Siemens SCALANCE XCM-/XRM-300
SCALANCE XCM-/XRM-300 before V2.4 is affected by multiple vulnerabilities. Siemens has released an update for SCALANCE X-300 and recommends to update to the latest version.
-
Critical max 9.8
Unitronics Vision and Samba Series (Update A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to take administrative control of Unitronics Vision and Samba series systems and use a default administrative password.
first Dec 14, 2023 -
High max 8.8
FXC AE1021/AE1021PE
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution on the device via NTP server settings.
-
High max 8.0
QNAP VioStor NVR
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution by exploiting NTP settings.
-
Critical max 10.0
Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to take control of the affected system.
first Oct 24, 2023 -
High max 8.8
Siemens Mendix Studio Pro
Mendix Studio Pro is vulnerable to an out of bounds write vulnerability in the integrated libwebp library (CVE-2023-4863), that could allow an attacker to execute code in the context of a victim user's system. Siemens has released updates for the affected pro…