1,944 results · Clear filters · Feed
-
High max 7.3
Schneider Electric SESU
Schneider Electric is aware of a vulnerability in the Schneider Electric Software Update product (also referred to as “SESU”). The main purpose of the SESU software is to notify customers on the availability of hotfixes or new versions to download and install…
first Aug 12, 2025 -
High max 7.8
Siemens OPC Foundation Local Discovery Server Affecting Siemens Products
A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released new versions for several affected products and re…
first Apr 11, 2023 -
High max 8.8
Siemens SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
first Mar 11, 2025 -
High max 8.1ICSA-25-254-01 1 CVE
Siemens SIMOTION Tools
Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup compone…
-
High max 7.5ICSA-25-254-06 1 CVE
Siemens Industrial Edge Management
Industrial Edge Management is affected by a vulnerability that could allow a remote attacker to cause a denial of service condition. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
-
High max 7.8ICSA-25-245-02 1 CVE
Fuji Electric FRENIC-Loader 4
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 7.3ICSA-25-240-01 1 CVE
Mitsubishi Electric MELSEC iQ-F Series CPU Module
Successful exploitation of this vulnerability could allow an attacker to read or write the device values of the product. In addition, the attacker may be able to stop the operation of the programs.
-
High max 7.5ICSA-25-240-02 1 CVE
Mitsubishi Electric MELSEC iQ-F Series CPU Module
Successful exploitation of this vulnerability could allow an attacker the ability to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product by using the obtained credential information. In…
-
High max 7.3ICSA-25-240-04 1 CVE
Delta Electronics CNCSoft-G2
Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on affected installations of the device.
-
High max 8.6ICSA-25-240-05 2 CVEs
Delta Electronics COMMGR
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
-
High max 5.3ICSA-25-240-06 1 CVE
GE Vernova CIMPLICITY
Successful exploitation of this vulnerability could allow a low-privileged local attacker to escalate privileges.
-
High max 8.2
Festo SBRD-Q/SBOC-Q/SBOI-Q
The affected product families are cameras SBOC/SBOI and the Controller SBRD. The vulnerabilities are located within the Ethernet IP Stack from EIPStackGroup OpENer Ethernet/IP.
first Sep 22, 2021 -
High max 7.5
Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A)
Hitachi Energy is aware of a vulnerability that affects the Relion 670/650 and SAM600-IO series IED device versions that are listed in this document. An authenticated attacker successfully exploiting this vulnerability via FTP access can cause the device to r…
first Jun 24, 2025 -
High max 8.8ICSA-25-261-04 6 CVEs
Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product
Hitachi Energy is aware of multiple reported vulnerabilities that affect the Asset Suite product versions mentioned in this document below. If exploited these vulnerabilities can potentially impact on confidentiality, integrity and availability of the product…
-
High max 8.7
Danfoss AK-SM 8xxA Series (Update A)
Successful exploitation of these vulnerabilities could enable a remote attacker to bypass authentication and remotely execute arbitrary code.
first May 20, 2025 -
High max 7.8ICSA-25-238-01 9 CVEs
INVT VT-Designer and HMITool
Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary code in the context of the current process.
-
High max 8.1VA-25-239-01 4 CVEs
Agiloft multiple vulnerabilities
Agiloft is a web-based contract management platform. Multiple vulnerabilities were found in Agiloft that could allow an attacker to gain administrative access to Agiloft, execute operating system commands, or modify update packages.
-
High max 8.5
Rockwell Automation FactoryTalk Action Manager
Successful exploitation of this vulnerability could allow a local unauthenticated attacker to listen to communications and manipulate the device.
first Aug 14, 2025 -
High max 8.5ICSA-25-226-23 1 CVE
Rockwell Automation FactoryTalk Viewpoint
Successful exploitation of this vulnerability could result in full privilege escalation.
-
High max 8.8ICSA-25-226-27 2 CVEs
Rockwell Automation ArmorBlock 5000 I/O - Webserver
Successful exploitation of these vulnerabilities could allow an attacker to predict session numbers or perform privileged actions.
-
High max 7.3ICSA-25-226-29 1 CVE
Rockwell Automation Studio 5000 Logix Designer
Successful exploitation of this vulnerability could allow an attacker to crash the device or execute malicious code.
-
High max 8.2ICSA-25-231-01 1 CVE
Siemens Desigo CC Product Family and SENTRON Powermanager
Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems…
-
High max 7.8ICSA-25-224-01 4 CVEs
Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.
-
High max 7.1ICSA-25-224-04 2 CVEs
AVEVA PI Integrator
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, or upload and execute files.
-
High max 7.5ICSMA-25-224-01 5 CVEs
Santesoft Sante PACS Server
Successful exploitation of these vulnerabilities could allow an attacker to create arbitrary files, cause a denial-of-service condition, obtain sensitive information, and steal a user's cookie information.
-
High max 8.8
Siemens Ruggedcom ROS, SCALANCE
The RUGGEDCOM RCDP protocol is not properly configured after commissioning of RUGGEDCOM ROS based devices and some SCALANCE X switch models and could allow unauthenticated remote users to perform administrative operations. An attacker must be in the same adja…
first Sep 28, 2017 -
High max 8.0
Siemens RUGGEDCOM ROS Code Injection
RUGGEDCOM ROS-based devices are vulnerable to a web-based code injection attack. To execute this attack, it is necessary to access the system via the Command Line Interface (CLI). Siemens has released new versions for several affected products and recommends …
first Jul 12, 2022 -
High max 7.5
Siemens RUGGEDCOM ROS Devices
A denial of service vulnerability could allow an unauthorized attacker to cause total loss of availability in the web server of the affected devices. Siemens has released new versions for several affected products and recommends to update to the latest versio…
first Aug 8, 2023 -
High max 8.8
Siemens RUGGEDCOM
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). The common denominator to all vulnerabilities is the leak of confidential information. Siemens has released new versions for several affected products and recommends to update to the latest…
first Jul 9, 2024 -
High max 7.8
Siemens Siemens Engineering Platforms
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected pr…
first Dec 10, 2024 -
High max 7.5
Siemens SIPROTEC 5 Devices
An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for the affected products and recommends to update to the latest v…
first Feb 11, 2025 -
High max 8.1ICSA-25-226-02 1 CVE
Siemens COMOS
COMOS before V10.6 is affected by a local arbitrary code execution vulnerability in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version.
-
High max 7.8ICSA-25-226-04 2 CVEs
Siemens Simcenter Femap
Simcenter Femap contains a file parsing vulnerability that could be triggered when the application reads files in STP or BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or …
-
High max 7.1ICSA-25-226-06 7 CVEs
Siemens Opcenter Quality
The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 6.9ICSA-25-226-08 3 CVEs
Siemens RUGGEDCOM CROSSBOW Station Access Controller
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for R…
-
High max 7.5ICSA-25-226-12 1 CVE
Siemens SIPROTEC 4 and SIPROTEC 4 Compact
SIPROTEC 4 and SIPROTEC 4 Compact devices contain a vulnerability that could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the lates…
-
High max 7.8ICSA-25-226-17 7 CVEs
Siemens SINEC Traffic Analyzer
SINEC Traffic Analyzer before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures …
-
High max 8.3ICSA-25-226-19 1 CVE
Siemens SINUMERIK
Siemens SINUMERIK Controllers are affected by an improper VNC password check vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 7.6ICSA-25-226-20 1 CVE
Siemens RUGGEDCOM ROX II
RUGGEDCOM ROX II devices do not properly limit access through their Built-In-Self-Test (BIST) mode. This could allow a local attacker to bypass authentication and access a root shell on the device. Siemens is preparing fix versions and recommends specific cou…
-
High max 8.4ICSA-25-219-04 3 CVEs
Rockwell Automation Arena
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.