1,944 results · Clear filters · Feed
-
High max 7.5ICSA-25-028-01 1 CVE
B&R Automation Runtime
An update is available that resolves a privately reported vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability may masquerade as services on affected devices.
-
High max 7.5ICSA-25-014-04 1 CVE
Belledonne Communications Linphone-Desktop
Successful exploitation of this vulnerability could could result in a remote attacker causing a denial-of-service condition on the affected devices.
-
High max 7.5
Siemens User Management Component (UMC)
Siemens User Management Component (UMC) before V2.11.2 is affected by multiple vulnerabilities where the most severe could lead to a restart of the UMC server. Siemens has released new versions for several affected products and recommends to update to the lat…
first Dec 12, 2023 -
High max 7.2
Siemens SCALANCE W700
SCALANCE W-700 IEEE 802.11ax family devices are affected by multiple vulnerabilities. Siemens has released a new version for SCALANCE W-700 IEEE 802.11ax family and recommends to update to the latest version. Siemens recommends countermeasures for vulnerabili…
first Jun 11, 2024 -
High max 8.6ICSA-25-007-02 1 CVE
Nedap Librix Ecoreader
Successful exploitation of this vulnerability could result in remote code execution.
-
High max 7.8ICSA-24-354-03 1 CVE
Delta Electronics DTM Soft
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 8.8ICSA-24-354-05 1 CVE
Tibbo AggreGate Network Manager
Successful exploitation of this vulnerability could allow an attacker to achieve code execution on the affected device.
-
High max 8.8ICSA-24-352-01 1 CVE
ThreatQuotient ThreatQ Platform
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution.
-
High max 7.8ICSA-24-345-04 3 CVEs
National Instruments LabVIEW
Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.
-
High max 7.8ICSA-24-345-05 2 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.
-
High max 8.8
Siemens RUGGEDCOM APE1808
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products whe…
first Apr 9, 2024 -
High max 7.8ICSA-24-347-06 2 CVEs
Siemens Simcenter Femap
Simcenter Femap contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application …
-
High max 7.8ICSA-24-347-07 3 CVEs
Siemens Solid Edge SE2024
Siemens Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious PAR or ASM files. If a user is tricked to open a malicious file with the affected products, this could lead the application to…
-
High max 8.8ICSA-25-010-02 1 CVE
Schneider Electric Harmony HMI and Pro-Face HMI Products
Schneider Electric is aware of a vulnerability in its Harmony HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 products used with EcoStruxure™ Operator Terminal Expert Software and PFXST6000, PFXSTM6000, PFXSP5000, PFXGP4100 products used with Pro-face BLUE Software.…
-
High max 7.8ICSA-24-340-01 3 CVEs
AutomationDirect C-More EA9 Programming Software
Successful exploitation of these vulnerabilities could result in memory corruption; a buffer overflow condition may allow remote code execution.
-
High max 7.6
ETIC Telecom Remote Access Server (RAS) (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information and compromise the vulnerable device and other connected machines.
first Nov 3, 2022 -
High max 7.8ICSA-24-338-03 1 CVE
Open Automation Software
Successful exploitation of this vulnerability could result in an attacker executing code with escalated privileges.
-
High max 9.1
Rockwell Automation Verve Reporting (Update A)
Successful exploitation of this vulnerability could lead to arbitrary code execution.
first Nov 14, 2024 -
High max 7.3ICSA-24-319-15 1 CVE
Rockwell Automation Arena Input Analyzer
Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code on the program.
-
High max 7.2ICSA-24-317-02 2 CVEs
Hitachi Energy TRO600
Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges…
-
High max 7.3ICSA-24-317-03 1 CVE
Rockwell Automation FactoryTalk View ME
Successful exploitation of this vulnerability could allow a local low-privileged user to escalate their privileges by changing the macro to execute arbitrary code.
-
High max 9.8
Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC
Overview Schneider Electric is aware of a vulnerability in its PowerLogic PM55xx and PowerLogic PM8ECC products. The PowerLogic PM55xx products are power metering devices. The PowerLogic PM8ECC product is an ethernet communication module. Failure to apply the…
first Jun 8, 2021 -
High max 8.6ICSA-24-319-04 17 CVEs
Siemens SINEC NMS
SINEC NMS before V3.0 SP1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
-
High max 7.8ICSA-24-319-05 3 CVEs
Siemens Solid Edge
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or PSM format, and by a DLL hijacking vulnerability. This could allow an attacker to cras…
-
High max 7.8ICSA-24-319-09 1 CVE
Siemens Spectrum Power 7
Spectrum Power 7 before V24Q3 contains several root-owned SUID binaries that could allow an authenticated local attacker to escalate privileges. Siemens has released a new version for Spectrum Power 7 and recommends to update to the latest version.
-
High max 7.5ICSA-24-326-06 1 CVE
Schneider Electric PowerLogic PM5300 Series
Note - PM5310 and PM5330 are not impacted because they use serial communication infrastructure and donot have an Ethernet stack.
-
High max 7.8ICSA-24-312-02 3 CVEs
Delta Electronics DIAScreen
Successful exploitation of this these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution.
-
High max 7.5ICSA-24-312-03 1 CVE
Bosch Rexroth IndraDrive
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service, rendering the device unresponsive by sending arbitrary UDP messages.
-
High max 8.0ICSA-24-298-02 1 CVE
iniNet Solutions SpiderControl SCADA PC HMI Editor
Successful exploitation of this vulnerability could allow an attacker to gain remote control of the device.
-
High max 7.0ICSA-24-291-02 1 CVE
LCDS LAquis SCADA
Successful exploitation of this vulnerability could allow an attacker to steal cookies, inject arbitrary code, or perform unauthorized actions.
-
High max 8.2ICSA-24-291-04 1 CVE
HMS Networks EWON FLEXY 202
Successful exploitation of this vulnerability could allow an attacker to sniff and decode credentials that are transmitted using weak encoding techniques.
-
High max 7.8ICSA-24-284-14 2 CVEs
Schneider Electric Zelio Soft 2
Successful exploitation of these vulnerabilities could allow an attacker to achieve arbitrary code execution, cause a denial-of-service condition, or loss of confidentiality and integrity.
-
High max 8.7ICSA-24-284-15 3 CVEs
Rockwell Automation DataMosaix Private Cloud
Successful exploitation of these vulnerabilities could allow an attacker to view customer data or create, modify, or delete their own project.
-
High max 8.7ICSA-24-284-18 1 CVE
Rockwell Automation Logix Controllers
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service on the affected products.
-
High max 8.2ICSA-24-284-19 1 CVE
Rockwell Automation PowerFlex 6000T
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
High max 7.5ICSA-24-284-20 1 CVE
Rockwell Automation ControlLogix
Successful exploitation of this vulnerability could allow an attacker to send a specially crafted CIP message and cause a denial-of-service condition on the affected device.
-
High max 8.4ICSA-24-284-21 5 CVEs
Delta Electronics CNCSoft-G2
Successful exploitation of these vulnerabilities could allow an attacker to execute code remotely.
-
High max 8.8ICSA-24-284-09 2 CVEs
Siemens PSS SINCAL
Several Siemens products (optionally) offer the use of WibuKey Dongles [1] for licensing. According to a recent publication by WIBU Systems (WIBU-94453 at [2]), the Windows device driver for these Dongles contains vulnerabilities as listed below. - [1] https:…
-
High max 7.2ICSA-24-289-02 2 CVEs
Schneider Electric Data Center Expert
Schneider Electric is aware of a vulnerability in its Data Center Expert product. The Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a comprehensive view of equipmen…
-
High max 7.2ICSA-25-016-08 2 CVEs
Schneider Electric Data Center Expert
Schneider Electric is aware of a vulnerability in its Data Center Expert product. The Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a comprehensive view of equipmen…