1,944 results · Clear filters · Feed
-
High max 8.7ICSA-25-289-01 2 CVEs
Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to access to the device's file system.
-
High max 8.7ICSA-25-289-03 1 CVE
Rockwell Automation FactoryTalk ViewPoint
Successful exploitation of this vulnerability could allow unauthenticated attackers to achieve XML external entity injection, resulting in a temporary denial-of-service condition.
-
High max 8.7ICSA-25-289-04 1 CVE
Rockwell Automation ArmorStart AOP
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the affected product.
-
High max 7.5
Schneider Electric Modicon Controllers (Update B)
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251 / M258 / LMC058 products. The Modicon Controllers M241/M251/M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https:/…
first May 13, 2025 -
High max 8.2ICSA-25-301-01 1 CVE
Schneider Electric EcoStruxure
Schneider Electric is aware of a vulnerability in its EcoStruxure OPC UA Server Expert product(s). The [EcoStruxure OPC UA Server Expert product(s)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=66388#overview) is a state-…
-
High max 7.7ICSA-25-287-01 2 CVEs
Rockwell Automation 1715 EtherNet/IP Comms Module
Successful exploitation of these vulnerabilities could allow an attacker to cause the web server to crash, requiring a restart to recover.
-
High max 7.5
Siemens SIMATIC S7-1200 CPU V1/V2 Devices
SIMATIC S7-1200 CPU V1/V2 controllers contain two vulnerabilities that could allow an unauthenticated remote attacker - to trigger functions by record and playback of legitimate network communication, or - to place the controller in stop/defect state by causi…
first Jun 10, 2011 -
High max 7.5
Siemens User Management Component (UMC)
Siemens User Management Component (UMC) is affected by three vulnerabilities which could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update …
first May 13, 2025 -
High max 8.8
Siemens RUGGEDCOM ROS Devices
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for…
first Jul 8, 2025 -
High max 7.8ICSA-25-289-05 4 CVEs
Siemens Solid Edge
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted PRT files format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new ve…
-
High max 8.8ICSA-25-289-08 1 CVE
Siemens SINEC NMS
SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation. Siemens has released a new version for SINEC NMS and recommends to update t…
-
High max 8.7
Rockwell Automation Analytics LogixAI
Successful exploitation of this vulnerability could allow an attacker to access sensitive information.
first Sep 9, 2025 -
High max 7.7
Rockwell Automation Lifecycle Services with Cisco
Successful exploitation of this vulnerability could result in arbitrary code execution.
-
High max 7.7
Rockwell Automation Stratix
Successful exploitation of this vulnerability could result in arbitrary code execution.
-
High max 8.6ICSA-25-275-01 1 CVE
Raise3D Pro2 Series 3D Printers**
Successful exploitation of this vulnerability could result in data exfiltration and compromise of the target device.
-
High max 8.8
Festo MSE6-C2M/D2M/E2M
Incomplete user documentation of undocumented, authenticated test mode and further remote accessible functions. The supported features may be covered only partly by the corresponding user documentation. Festo developed the products according to the respective…
first Sep 5, 2023 -
High max 7.3
Festo Didactic products
A vulnerability was reported in Siemens TIA Portal. TIA Portal is part of the installation packages of several Festo Didactic products. TP 260 before June 2023 and MES PC based on DELL XE3 contain a vulnerable versions of TIA Portal V15 to V18. Affected produ…
first Oct 17, 2023 -
High max 7.5
Hitachi Energy MACH SCM (Update A)
Hitachi Energy is aware of LINQ query related vulnerabilities that affect MACH SCM product versions listed below. Authenticated malicious clients successfully exploiting these vulnerabilities could execute arbitrary code that an attacker otherwise does not ha…
first Mar 26, 2024 -
High max 9.2
HEIDENHAIN Controller TNC (Update A)
Successful exploitation of this vulnerability could cause a loss of sensitive data, manipulation of information, and a denial-of-service.
first Oct 25, 2022 -
High max 7.5
Keysight Ixia Vision Product Family (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to obtain or change data from the device, or remotely execute arbitrary code.
first Mar 4, 2025 -
High max 8.7
Rockwell Automation FLEX 5000 I/O (Update A)
Successful exploitation of these vulnerabilities could create a denial-of-service condition.
first Aug 14, 2025 -
High max 7.1ICSA-25-273-05 1 CVE
OpenPLC_V3
Successful exploitation of this vulnerability could cause a denial of service, making the PLC runtime process crash.
-
High max 7.8ICSA-25-273-06 2 CVEs
National Instruments Circuit Design Suite
Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption, potentially leading to information disclosure and execution of arbitrary code.
-
High max 8.8ICSA-25-273-07 1 CVE
LG Innotek Camera Multiple Models
Successful exploitation of this vulnerability could allow an attacker to gain administrative access to the device.
-
High max 8.1VA-25-272-01 6 CVEs
Medical Informatics Engineering Enterprise Health multiple vulnerabilities
Medical Informatics Engineering Enterprise Health is an OEHR (Occupational Electronic Health Record) platform. Enterprise Health contains multiple vulnerabilities that could allow an attacker to inject executable content, obtain session tokens, and upload arb…
-
High max 8.7ICSA-25-268-01 2 CVEs
Dingtian DT-R002
Successful exploitation of these vulnerabilities could allow an attacker to retrieve credentials without authentication.
-
High max 8.3ICSA-25-266-01 7 CVEs
AutomationDirect CLICK PLUS
Successful exploitation of these vulnerabilities disclose sensitive information, modify device settings, escalate privileges, or cause a denial-of-service condition on the affected device.
-
High max 8.7ICSA-25-266-04 2 CVEs
Viessmann Vitogate 300
Successful exploitation of this vulnerability could allow an attacker to modify an intended OS command when it is sent to a downstream component, or allow an attacker to cause unexpected interactions between the client and server.
-
High max 8.1
End-of-Train and Head-of-Train Remote Linking Protocol (Update C)
Successful exploitation of this vulnerability could allow an attacker to send their own brake control commands to the end-of-train device, causing a sudden stoppage of the train which may lead to a disruption of operations, or induce brake failure.
first Jul 10, 2025 -
High max 7.6ICSA-25-261-01 1 CVE
Westermo Network Technologies WeOS 5
Successful exploitation of this vulnerability could allow an attacker with administrative permissions to execute commands that would typically be inaccessible. This could allow the execution of commands with privileges beyond those normally granted to the att…
-
High max 8.8ICSA-25-261-06 9 CVEs
Cognex In-Sight Explorer and In-Sight Camera Firmware
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, steal credentials, modify files, or cause a denial-of-service condition.
-
HighICSA-25-259-03 2 CVEs
Siemens SIMATIC NET CP, SINEMA and SCALANCE
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service (DoS) condition in the affected devices by exploiting integer overflow bugs.
-
High max 7.5
Hitachi Energy RTU500 Series (Update B)
Hitachi Energy is aware of the vulnerabilities, CVE-2024-10037, CVE-2024-11499, CVE-2024-12169, and CVE-2025-1445 in the RTU500 Web server component, the IEC 60870-5-104 controlled station implementation and IEC 61850 implementation, that affects the RTU500 v…
first Mar 25, 2025 -
High max 8.8
EG4 Electronics EG4 Inverters (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to intercept and manipulate critical data, install malicious firmware, hijack device access, and gain unauthorized control over the system.
first Aug 7, 2025 -
High max 8.6ICSA-25-252-01 1 CVE
Rockwell Automation ThinManager
Successful exploitation of this vulnerability could expose the ThinServer service account NTLM hash.
-
High max 7.3ICSA-25-252-04 1 CVE
Rockwell Automation FactoryTalk Optix
Successful exploitation of this vulnerability could result in an attacker achieving remote code execution.
-
High max 8.7ICSA-25-252-05 1 CVE
Rockwell Automation FactoryTalk Activation Manager
Successful exploitation of this vulnerability could result in in data exposure, session hijacking, or full communication compromise.
-
High max 8.2ICSA-25-252-07 1 CVE
Rockwell Automation ControlLogix 5580
Successful exploitation of this vulnerability could result in a major nonrecoverable fault on the controller.
-
High max 7.3ICSA-25-252-09 1 CVE
Rockwell Automation 1783-NATR
Successful exploitation of this vulnerability could allow an attacker to cause a memory corruption on the product.
-
High max 7.1
Schneider Electric Pro-face GP-Pro EX and Remote HMI (Update A)
Schneider Electric is aware of multiple vulnerabilities in its Pro-face GP-Pro EX and Remote HMI products. The Pro-face [GP-Pro EX](https://www.proface.com/en/product/soft/gpproex/top) product is HMI Screen Editor & Logic Programming Software. The Pro-face [R…
first Jan 14, 2025