1,944 results · Clear filters · Feed
-
High max 7.5
Siemens SINUMERIK
A vulnerability has been identified in the integrated S7-1500 CPU of SINUMERIK ONE and SINUMERIK MC products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affect…
first Dec 12, 2023 -
High max 7.8
Siemens SINEC Traffic Analyzer
SINEC Traffic Analyzer before V1.2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.
first Jun 11, 2024 -
High max 8.8
Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
SINUMERIK ONE, SINUMERIK 840D sl and SINUMERIK 828D are affected by a privilege escalation vulnerability that could allow an authenticated local attacker to escalate their privileges in the underlying system. Siemens has released new versions for several affe…
first Sep 10, 2024 -
High max 7.3
Siemens Industrial Products
A Socket.IO vulnerability affects multiple Siemens industrial products. This vulnerability consists of a specially crafted Socket.IO packet that triggers an uncaught exception on the Socket.IO server killing the Node.js process allowing a remote attacker to c…
first Sep 10, 2024 -
High max 7.8
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in SPP file format. If a user is tricked to open a malicious file with any of the affected products, this c…
first Sep 10, 2024 -
High max 7.8
Siemens Simcenter Nastran
Simcenter Nastran contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the applicatio…
first Oct 8, 2024 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by stack buffer overflow and null pointer dereference vulnerabilities that could be triggered while parsing XML file. If a user is tricked to open a malicious XML file with any of the affected products, …
first Oct 8, 2024 -
High max 7.8
Siemens JT2Go
Siemens JT2Go is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in PDF format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application t…
first Oct 8, 2024 -
High max 8.5
Siemens HiMed Cockpit
HiMed Cockpit devices before V11.6.2 contain a Kiosk Mode Escape vulnerability that could allow an attacker to escape the restricted environment and gain access to the underlying operating system. Siemens has released a new version for the HiMed Cockpit devic…
first Oct 8, 2024 -
High max 7.8
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the app…
first Oct 8, 2024 -
High max 7.8
Siemens SIPORT
SIPORT before V3.4.0 contains a privilege escalation vulnerability which could allow a local attacker with an unprivileged account to override or modify the service executable and subsequently gain elevated privileges. Siemens has released a new version for S…
first Nov 12, 2024 -
High max 9.8
Siemens SCALANCE M-800 Family
SCALANCE M-800 family before V8.2 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Nov 12, 2024 -
High max 7.3
Siemens Engineering Platforms
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected pr…
first Nov 12, 2024 -
High max 7.5
Siemens SIMATIC CP
SIMATIC CP 1543-1 devices contain an Incorrect Authorization vulnerability that could allow an unauthenticated attacker to gain access to the filesystem. Siemens has released a new version for SIMATIC CP 1543-1 V4.0 and recommends to update to the latest vers…
first Nov 12, 2024 -
High max 7.8
Fuji Electric Monitouch V-SFT (Update A)
Successful exploitation of these vulnerabilities could crash the device being accessed.
first Dec 3, 2024 -
High max 8.8
Siemens RUGGEDCOM ROX II
The CLI feature in the web interface of RUGGEDCOM ROX II devices is vulnerable to cross-site request forgery (CSRF), which could allow an attacker to perform administrative actions if an authenticated user is tricked into accessing a malicious link. Siemens h…
first Dec 10, 2024 -
High max 7.8
Siemens Parasolid
Parasolid is affected by out of bounds write vulnerability that could be triggered when the application reads files in PAR format. If a user is tricked to open a malicious file with the affected applications, an attacker could perform remote code execution in…
first Dec 10, 2024 -
High max 7.8
Siemens Teamcenter Visualization
Siemens Teamcenter Visualization contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the applic…
first Dec 10, 2024 -
High max 7.4
Siemens Mendix LDAP
The Mendix LDAP module is affected by an LDAP injection vulnerability that could allow an unauthenticated remote attacker to bypass username verification. Siemens has released a new version for Mendix LDAP and recommends to update to the latest version.
first Jan 14, 2025 -
High max 7.8
Siemens Siveillance Video Camera
Several camera device drivers in the Siveillance Video Device Pack store camera credentials in their log file when authentication fails. This could allow a local attacker to read camera credentials stored in the Recording Server under specific conditions. Sie…
first Jan 14, 2025 -
High max 7.1
Siemens SIMATIC S7-1200 CPUs
The web interface of SIMATIC S7-1200 CPUs before V4.7 is affected by a cross-site request forgery (CSRF) vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Jan 14, 2025 -
High max 7.5
Siemens SIMATIC S7-1200 CPU Family
SIMATIC S7-1200 CPU family before V4.7 is affected by two denial of service vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Feb 11, 2025 -
High max 8.8
Siemens SIMATIC PCS neo, TIA Administrator, and TIA Portal
Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released …
first Feb 11, 2025 -
High max 7.8
Siemens Teamcenter Visualization and Tecnomatix
Siemens Teamcenter Visualization and Tecnomatrix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected pro…
first Mar 11, 2025 -
High max 8.8
Siemens SCALANCE LPE9403
SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version.
first Mar 11, 2025 -
High max 7.8
Siemens Simcenter Femap
Siemens Simcenter Femap is affected by memory corruption vulnerability that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnera…
first Mar 13, 2025 -
High max 9.1
Siemens SIDIS Prime
SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the l…
first Apr 8, 2025 -
High max 7.8
Siemens Solid Edge
Solid Edge is affected by an out of bounds write vulnerability that could be triggered when the application is parsing X_T data or a specially crafted file in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacke…
first Apr 8, 2025 -
High max 8.5
Rockwell Automation Arena
Successful exploitation of these vulnerabilities could disclose information to an attacker or allow execution of arbitrary code on the system.
first Apr 10, 2025 -
High max 7.5
INFINITT Healthcare INFINITT PACS
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files and access unauthorized system resources, resulting in arbitrary code execution or information disclosure.
first Apr 10, 2025 -
High max 7.8
National Instruments LabVIEW
Successful exploitation of these vulnerabilities lead to the execution of arbitrary code on affected installations of LabVIEW, which could result in invalid memory writes.
first Apr 15, 2025 -
High max 8.5
Rockwell Automation ThinManager
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges and cause a denial-of-service condition.
first Apr 29, 2025 -
High max 7.8
Delta Electronics ISPSoft
Successful exploitation of these vulnerabilities could result in an attacker executing arbitrary code.
first Apr 29, 2025 -
High max 8.8
MicroDicom DICOM Viewer
Successful exploitation of these vulnerabilities could allow an attacker to disclose information, cause memory corruption, and execute arbitrary code.
first May 1, 2025 -
High max 8.8
Commvault Web Server unspecified vulnerability
According to Commvault: "The Web Server is a component in CommCell environments that provides a RESTful interface to the software where users can perform various tasks using available APIs". A remote, authenticated attacker can exploit an unspecified vulnerab…
-
High max 7.4ICSA-25-196-01 6 CVEs
Hitachi Energy Asset Suite
Hitachi Energy is aware multiple vulnerabilities that affects the Asset Suite product versions listed below. If these vulnerabilities are successfully exploited by an attacker, it could have an impact on the confidentiality, integrity, or availability of the …
-
High max 8.0ICSA-25-114-02 1 CVE
ALBEDO Telecom Net.Time - PTP/NTP clock
Successful exploitation of this vulnerability could allow an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception.
-
High max 7.5ICSA-25-114-03 1 CVE
Vestel AC Charger
Successful exploitation of this vulnerability could allow an attacker access to sensitive information, such as credentials which could subsequently enable them to cause a denial of service or partial loss of integrity of the charger.
-
High max 8.8ICSA-25-112-04 15 CVEs
ABB MV Drives
Multiple vulnerabilities regarding the CODESYS Runtime System from CODESYS Group have been publicly reported. CODESYS Runtime System v.3.5.15.0 is utilized in the firmware of ABB MV ACS6080 and ACS5000 drives to provide IEC 61131 programming capabilities. The…
-
High max 7.5
Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A)
Schneider Electric is aware of a vulnerability in its Modicon M580 PLCs (Programmable Logic Controllers) https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/?parent-subcategory-id=3950&filter=business-1-industrial-automation-and-control#products , …
first Jan 14, 2025