1,944 results · Clear filters · Feed
-
High max 7.8ICSA-25-107-03 2 CVEs
Schneider Electric ConneXium Network Manager Software
Schneider Electric is aware of vulnerabilities in its ConneXium Network Manager software. The ConneXium Network Manager software provides a solution for configuring and monitoring the administrable Schneider Electric devices, including switches, routers, fire…
-
High max 7.0
Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor
SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures. Siemens recommends specific countermeasures for products …
first Feb 11, 2025 -
High max 8.1ICSA-25-100-09 8 CVEs
ABB Arctic Wireless Gateways
ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This c…
-
High max 9.8ICSA-25-105-08 42 CVEs
ABB M2M Gateway
ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of t…
-
High max 8.8ICSA-25-093-03 15 CVEs
ABB ACS880 Drives Containing CODESYS RTS
Multiple vulnerabilities regarding the CODESYS Runtime System from CODESYS Group have been publicly reported. CODESYS Runtime System is utilized in the firmware of ABB ACS880 drives to provide IEC 61131-3 programming capabilities. These vulnerabilities could …
-
High max 8.8ICSA-25-093-04 15 CVEs
ABB Low Voltage DC Drives and Power Controllers CODESYS RTS
CODESYS group published several vulnerabilities regarding the CODESYS Runtime System, which is included in the firmware of ABB LV DC drives and power controllers. It is used to implement a selection of features and to provide IEC 611131-3 programming capabili…
-
HighICSA-25-084-03 1 CVE
Rockwell Automation 440G TLS-Z
Successful exploitation of this vulnerability could allow an attacker to take over the device.
-
High max 9.2ICSA-25-093-05 13 CVEs
B&R APROL
Updates are available that resolve privately reported vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploits these vulnerabilities could elevate privileges or gather sensitive information.
-
High max 7.8ICSMA-25-079-01 1 CVE
Santesoft Sante DICOM Viewer Pro
Successful exploitation of this vulnerability could allow an attacker to cause memory corruption that would result in execution of arbitrary code.
-
High max 9.8ICSA-25-072-12 15 CVEs
Sungrow iSolarCloud Android App, WiNet Firmware
Successful exploitation of these vulnerabilities could result in attackers being able to access and could modify sensitive information.
-
High max 7.7ICSMA-25-072-01 2 CVEs
Philips Intellispace Cardiovascular (ISCV)
Successful exploitation of these vulnerabilities could allow an attacker to replay the session of the logged in ISCV user and gain access to patient records.
-
High max 7.5ICSA-25-084-01 1 CVE
ABB RMC-100
An update is available that resolves a vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the web UI to stop.
-
High max 7.1
Siemens Mentor Nucleus Networking Module
The DHCP implementation of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability that could allow an attacker to change the IP address of an affected device to an invalid value. Siemens has released new v…
first Nov 12, 2019 -
High max 7.5
Siemens Nucleus Products IPv6 Stack
The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition. Siemens has released new vers…
first Apr 13, 2021 -
High max 7.1ICSA-25-063-01 1 CVE
Carrier Block Load
Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges .
-
High max 8.4ICSA-25-063-06 1 CVE
Delta Electronics CNCSoft-G2
Successful exploitation of this vulnerability could allow an attacker to execute code remotely.
-
High max 8.8
Planet Fitness Workouts mobile apps do not properly validate TLS certificates
The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information. Planet Fitness first addressed this vulnerability in v…
first Sep 23, 2024 -
High max 7.5ICSMA-25-058-01 7 CVEs
Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application
Successful exploitation of these vulnerabilities could allow an attacker to expose information, inject code, manipulate data, or achieve cross-site scripting (XSS), resulting in full session compromise.
-
High max 7.2
Hitachi Energy Relion 670/650/SAM600-IO
Hitachi Energy is aware of a vulnerability report from U.S. Department of Energy CyTRICS researcher of a vulnerability in the Relion® 670/650/SAM600-IO series versions listed below. Remediation is available for some versions. Recommended actions for each affe…
first Nov 4, 2021 -
High max 7.5ICSA-25-065-01 8 CVEs
Hitachi Energy PCU400
Hitachi Energy is aware of the multiple vulnerabilities related to various versions of OpenSSL library components used in PCU400 versions listed in this document below for IEC62351-3 secure for IEC104/DNP3 or PCULogger tool. These vulnerabilities if exploited…
-
High max 8.7ICSA-25-056-01 1 CVE
Rockwell Automation PowerFlex 755
Successful exploitation of this vulnerability could result in exposure of sensitive data.
-
High max 7.1ICSA-25-051-03 1 CVE
Carrier Block Load
Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges.
-
High max 7.5ICSA-25-051-05 1 CVE
Rapid Response Monitoring My Security Account App
Successful exploitation of this vulnerability could allow attacker to access sensitive information of other users.
-
High max 8.4
Delta Electronics CNCSoft-G2 (Update A)
Successful exploitation of these vulnerabilities could cause a buffer overflow condition and allow remote code execution.
first Jul 9, 2024 -
High max 7.5ICSA-25-044-17 3 CVEs
Outback Power Mojave Inverter
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive data or inject commands.
-
High max 7.1ICSMA-25-044-01 3 CVEs
Qardio Heart Health IOS and Android Application and QardioARM A100
Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information, cause a denial-of-service condition, and obtain firmware files.
-
High max 7.2
2N Access Commander (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to escalate their privileges, execute arbitrary code, or gain root access to the system.
first Nov 14, 2024 -
High max 8.6
Trimble Cityworks (Update A)
Successful exploitation of this vulnerability could allow an authenticated user to perform a remote code execution.
first Feb 6, 2025 -
High max 8.1ICSA-25-077-05 4 CVEs
Schneider Electric ASCO 5310/5350 Remote Annunciator
Schneider Electric is aware of multiple vulnerabilities in its ASCO 5310 Remote Annunciator and ASCO 5350 Remote Annunciator products. The ASCO 5310 Remote Annunciator and ASCO 5350 Remote Annunciator products are stand-alone, industrial grade interface devic…
-
High max 7.5ICSA-25-044-11 2 CVEs
Siemens Apogee PXC100 Devices
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to perform a denial of service using a out-of-bounds read forcing the device to enter a cold state and a vulnerability that would allow an attacker to decrypt the passwords of the de…
-
High max 7.8
Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
first Oct 24, 2023 -
High max 7.8ICSA-25-035-05 1 CVE
Schneider Electric Web Designer for Modicon
Successful exploitation of this vulnerability could result in information disclosure, workstation integrity and potential remote code execution on the compromised computer.
-
High max 7.5
Contec Health CMS8000 Patient Monitor (Update A)
Successful exploitation of these vulnerabilities could allow a threat actor to cause a denial-of-service condition, modify firmware with physical access to the device, access a root shell, or employ hard-coded credentials to make configuration changes.
first Sep 1, 2022 -
High max 7.5ICSA-25-030-04 1 CVE
Rockwell Automation KEPServer
Successful exploitation of this vulnerability could cause the device to crash.
-
High max 8.0
BD Diagnostic Solutions Products (Update A)
Successful exploitation of this vulnerability could allow an attacker to use default credentials to access, modify, or delete sensitive data, which could impact the availability of the system or cause a system shutdown.
first Dec 17, 2024 -
High max 8.8ICSA-25-028-02 2 CVEs
Schneider Electric Power Logic
Successful exploitation of these vulnerabilities could allow an attacker to modify data or cause a denial-of-service condition on web interface functionality.
-
High max 7.0ICSA-25-028-04 2 CVEs
Rockwell Automation FactoryTalk View Site Edition
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthenticated access to system configuration files and execute DLLs with elevated privileges.
-
High max 8.8VA-25-021-01 2 CVEs
Fedora Repository fedoraIntCallUser default credentials and insecure archive extraction
Fedora Repository 3.8 includes default user credentials and allows path traversal when extracting uploaded archive files. An attacker can exploit these vulnerabilities to read sensitive data and execute arbitrary commands with the privileges of the Java web a…
-
High max 7.8
Delta Electronics DRASimuCAD (Update A)
Successful exploitation of these vulnerabilities could crash the device or potentially allow remote code execution.
first Jan 9, 2025 -
High max 7.8ICSA-25-016-05 1 CVE
Fuji Electric Alpha5 SMART
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.