125 results · Clear filters · Feed
-
Critical max 9.8
Unitronics Vision and Samba Series (Update A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to take administrative control of Unitronics Vision and Samba series systems and use a default administrative password.
first Dec 14, 2023 -
High max 8.8
FXC AE1021/AE1021PE
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution on the device via NTP server settings.
-
High max 8.0
QNAP VioStor NVR
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution by exploiting NTP settings.
-
Critical max 10.0
Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to take control of the affected system.
first Oct 24, 2023 -
High max 8.8
Siemens Mendix Studio Pro
Mendix Studio Pro is vulnerable to an out of bounds write vulnerability in the integrated libwebp library (CVE-2023-4863), that could allow an attacker to execute code in the context of a victim user's system. Siemens has released updates for the affected pro…
-
Critical max 9.6
Rockwell Automation Connected Components Workbench
Successful exploitation of these vulnerabilities could allow an attacker to exploit heap corruption via a crafted HTML.
-
High max 7.5
KNX Protocol
Successful exploitation of this vulnerability could cause users to lose access to their device, potentially with no way to reset the device.
-
Critical max 9.8
Siemens SCALANCE, RUGGEDCOM Third-Party
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special…
-
High max 9.8
Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service
Successful exploitation of these vulnerabilities could crash the Prognostic Model Executor and could allow remote code execution.
-
Critical max 9.0
Siemens Apache HTTP Server
Multiple vulnerabilities were identified in the Apache HTTP Server software. These include NULL Pointer Dereferencing, Out-of-bounds Write and Server-Side Request Forgery related vulnerabilities. Siemens has released updates for several affected products and …
first Jun 14, 2022 -
High max 7.8
Hitachi Energy APM Edge
Successful exploitation of this vulnerability could allow users to escalate privileges from a user account to root.
-
High max 7.8
Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability
Successful exploitation of this vulnerability could allow an attacker to take control of the system node and its information.
-
Medium max 8.8
Rockwell Products Impacted by Chromium Type Confusion
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
Critical max 7.8
Siemens SCALANCE LPE9403 Third-Party Vulnerabilities
Multiple vulnerabilities in the third-party components CivetWeb, Docker, Linux Kernel and systemd could allow an attacker to impact SCALANCE LPE9403 confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recom…
-
High max 7.8
Siemens SCALANCE LPE 4903 and SINUMERIK Edge
The products listed below contain a local privilege escalation vulnerability (CVE-2021-4034) found on polkit's pkexec utility, that could allow an unprivileged user to gain administrative rights. Siemens has released updates for the affected products and reco…
-
Critical max 9.8
Pepperl+Fuchs WirelessHART-Gateway
Successful exploitation of these vulnerabilities may result in a denial-of-service condition, code execution, and code exposure.
-
Critical max 9.8
Philips Vue PACS (Update B)
Successful exploitation of these vulnerabilities could allow an unauthorized person or process to eavesdrop, view or modify data, gain system access, perform code execution, install unauthorized software, or affect system data integrity in such a way as to ne…
first Jul 6, 2021 -
Critical max 9.8
General Electric Renewable Energy MDS Radios
Successful exploitation of these vulnerabilities could allow an attacker to control the configuration of the radio, join the network without proper authorization, or keep valid users from using the system correctly.
-
Critical max 10.0
Sensormatic PowerManage (Update A)
Successful exploitation of this vulnerability could allow an attacker to gain remote code execution.
first Feb 3, 2022 -
Critical max 10.0
Johnson Controls exacq Enterprise Manager
Successful exploitation of this vulnerability could allow an attacker to enter malicious input resulting in remote code execution.
-
High max 7.8
Johnson Controls CEM Systems AC2000
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access on the underlying Linux operating system.
-
High max 7.4
VISAM VBASE Editor
Successful exploitation of these vulnerabilities may allow un-neutralized user-controllable data input, disclosure of local files, access to NTLM (Windows New Technology LAN Manager) hashes, and access to sensitive files.
-
Medium max 6.9
Sensormatic Electronics VideoEdge
Successful exploitation of this vulnerability could allow the execution of untrusted code when viewing the VideoEdge admin graphical user interface.
-
High max 7.8
Delta Electronics DOPSoft 2 (Update A)
Successful exploitation of these vulnerabilities may allow arbitrary code execution.
-
High max 7.8
Johnson Controls Sensormatic Electronics Illustra
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access to the underlying Linux operating system.
-
High max 7.8
Johnson Controls Sensormatic Electronics VideoEdge
Under specific circumstances, a local authenticated user may be able to exploit this vulnerability to gain administrative access.
-
High max 7.8
Johnson Controls Sensormatic Tyco AI
Under specific circumstances, a local attacker could use this vulnerability to obtain super-user access to the underlying openSUSE Linux operating system.
-
High max 7.8
Johnson Controls Exacq Technologies exacqVision
A local attacker could exploit this vulnerability to obtain Super User access to the underlying Ubuntu Linux operating system.
-
Critical max 9.8
Rockwell Automation Logix Controllers (Update A)
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to bypass the verification mechanism and connect with Logix controllers. Additionally, this vulnerability could enable an unauthorized third-party tool to alter the co…
first Feb 25, 2021 -
Critical max 9.8
Hitachi ABB Power Grids eSOMS Telerik
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files to the server, discover sensitive information, or execute arbitrary code.
-
High max 8.8
Baxter ExactaMix (Update A)
Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive data, alteration of system configuration, alteration of system resources, and impact to system availability.
first Jun 18, 2020 -
Critical max 8.8
Sierra Wireless AirLink ALEOS (Update B)
Successful exploitation of these vulnerabilities could allow attackers to remotely execute code, discover user credentials, upload files, or discover file paths.
first May 2, 2019 -
Critical max 9.8
Spacelabs Xhibit Telemetry Receiver (XTR)
A remote code execution vulnerability called BlueKeep (CVE-2019-0708) exists within the Remote Desktop Protocol (RDP) used by the Microsoft Windows operating systems listed below. An attacker can exploit this vulnerability to perform remote code execution on …
-
Critical max 9.8
Schneider Electric U.motion Builder (Update A)
A successful exploit of these vulnerabilities could allow an attacker to execute arbitrary commands or compromise the confidentiality, integrity, and availability of the system.
first Jun 29, 2017 -
High max 7.5
Rockwell Automation Allen-Bradley Stratix 5950
Successful exploitation of these vulnerabilities could allow an attacker to bypass client certification to create connections to the affected device or cause the device to crash.
-
Critical max 9.8
ICSA-18-107-03_Rockwell Automation Stratix Services Router
Rockwell Automation reported these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
-
Critical max 8.8
Rockwell Automation Stratix and ArmorStratix Switches
Successful exploitation of these vulnerabilities could result in loss of availability, confidentiality, and/or integrity caused by memory exhaustion, module restart, information corruption, and/or information exposure.
-
High max 8.8
ICSA-18-107-05_Rockwell Automation Stratix Industrial Managed Ethernet Switch
Rockwell Automation reported these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
-
Critical max 9.8
Philips Intellispace Portal ISP Vulnerabilities
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to sensitive information, perform man-in-the-middle attacks, create denial of service conditions, or execute arbitrary code.
-
High max 8.8
Rockwell Automation Allen-Bradley Stratix and ArmorStratix
ATTENTION: Remotely exploitable/low skill level to exploit
first Jul 27, 2017