1,944 results · Clear filters · Feed
-
High max 8.5ICSA-25-023-03 1 CVE
Schneider Electric EVlink Home Smart and Schneider Charge
Schneider Electric is aware of a vulnerability with the potential disclosure of confidential information in its EVlink Home Smart and Schneider Charge charging stations. This is not related to any of the customer personal data and potential disclosure cannot …
-
High max 7.8ICSA-25-023-04 1 CVE
Schneider Electric Easergy Studio
Schneider Electric is aware of a vulnerability in its Easergy Studio product. The Easergy Studio product is a software solution for configuring, monitoring, and managing control devices. Failure to apply the remediation provided below may risk unauthorized ac…
-
High max 5.5ICSA-24-275-02 1 CVE
Mitsubishi Electric MELSEC iQ-F FX5-OPC
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of service condition on the product by getting a legitimate user to import a specially crafted PKCS#12 format certificate.
-
High max 7.5ICSA-24-277-02 3 CVEs
Subnet Solutions Inc. PowerSYSTEM Center
Successful exploitation of these vulnerabilities could result in an attacker bypassing a proxy, creating a denial-of-service condition, or viewing sensitive information.
-
High max 8.8ICSA-24-270-01 2 CVEs
Advantech ADAM-5550
Successful exploitation of these vulnerabilities could allow a remote attacker to intercept the easily decodable credentials of a legitimate user to gain full access to the device and could plant malicious code on the web page of the device.
-
High max 8.0ICSA-24-270-02 4 CVEs
Advantech ADAM 5630
Successful exploitation of this vulnerability could allow an attacker to hijack a legitimate user's session, perform cross-site request forgery, or cause a denial-of-service condition.
-
High max 7.5ICSA-24-268-03 1 CVE
Franklin Fueling Systems TS-550 EVO
Successful exploitation of this vulnerability allow an attacker to gain administrative access over the affected device.
-
High max 7.7ICSA-24-263-01 1 CVE
Rockwell Automation RSLogix 5 and RSLogix 500
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution.
-
High max 9.2ICSA-24-263-05 2 CVEs
Kastle Systems Access Control System
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information on the affected product.
-
High max 8.8ICSA-24-261-02 2 CVEs
Millbeck Communications Proroute H685t-w
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary commands on the device's operating system.
-
High max 7.5ICSA-24-261-03 1 CVE
Yokogawa Dual-redundant Platform for Computer (PC2CKM)
Successful exploitation of this vulnerability could allow an attacker to perform a denial-of-service.
-
High max 8.8ICSA-24-256-17 2 CVEs
AutomationDirect DirectLogic H2-DM1E
Successful exploitation of these vulnerabilities could allow an attacker to inject traffic into an ongoing authenticated session or authenticate as a valid user.
-
High max 8.7ICSA-24-256-18 1 CVE
Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380
Successful exploitation of this vulnerability may cause the device to become unavailable and require a factory reset to recover.
-
High max 7.7ICSA-24-256-19 1 CVE
Rockwell Automation OptixPanel
Successful exploitation of this vulnerability may allow users to exfiltrate credentials and escalate privileges.
-
High max 7.8ICSA-24-256-20 2 CVEs
Rockwell Automation AADvance Trusted SIS Workstation
Successful exploitation of these vulnerabilities could result in an attacker executing code within the context of a current process.
-
High max 7.5ICSA-24-256-21 1 CVE
Rockwell Automation 5015-U8IHFT
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
High max 8.1ICSA-24-256-22 1 CVE
Rockwell Automation FactoryTalk Batch View
Successful exploitation of this vulnerability could result in an attacker bypassing authentication.
-
High max 8.8ICSA-24-256-24 2 CVEs
Rockwell Automation Pavilion8
Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information or upload arbitrary files that could result in remote code execution.
-
High max 7.5ICSA-24-254-02 1 CVE
iniNet Solutions SpiderControl SCADA Web Server
Successful exploitation of this vulnerability could allow an attacker to log in or execute arbitrary code.
-
High max 8.7ICSA-24-254-03 1 CVE
Rockwell Automation SequenceManager
Successful exploitation of these vulnerabilities could cause a denial-of-service condition.
-
High max 7.5ICSA-24-261-01 1 CVE
Siemens SIMATIC S7-200 SMART Devices
A vulnerability in SIMATIC S7-200 SMART devices could allow an attacker to cause a denial of service condition if a specially crafted TCP packet is sent to the device. Siemens recommends specific countermeasures for products where fixes are not, or not yet av…
-
High
Mitsubishi Electric MELSEC iQ-R, Q, and L Series (Update E)
Successful exploitation of this vulnerability could cause a denial-of-servicecondition in the Ethernet port on the CPU module.
first Oct 29, 2020 -
High max 7.5
Mitsubishi Electric MELSEC iQ-R, iQ-L Series and MELIPC Series (Update E)
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition in the module's ethernet communication.
first Dec 22, 2022 -
High max 7.5ICSA-24-247-01 10 CVEs
LOYTEC Electronics LINX Series
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or make modifications to an affected device.
-
High max 8.5
Rockwell Automation FactoryTalk View Site Edition (Update A)
Successful exploitation of this vulnerability could allow any user to edit or replace files, which are executed by account with elevated permissions.
first Aug 13, 2024 -
High max 8.4ICSA-24-242-02 1 CVE
Delta Electronics DTN Soft
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.
-
High max 8.7ICSA-24-235-03 1 CVE
Authenticated Remote Code Execution affects Mobotix P3 and Mx6 cameras
A vulnerability was found in the P3 and Mx6 cameras that allows a logged-in attacker to execute arbitrary commands with system rights.
-
High
Mitsubishi Electric MELSEC iQ-R Series (Update D)
Successful exploitation of this vulnerability could cause a denial-of-service condition.
first Nov 19, 2020 -
High max 8.7ICSA-24-235-02 1 CVE
Rockwell Automation 5015 - AENFTXT
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
High max 7.5ICSA-24-235-04 2 CVEs
Avtec Outpost 0810
Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges on the affected devices.
-
High max 8.5ICSA-24-228-10 1 CVE
AVEVA Historian Web Server
Successful exploitation of this vulnerability could allow an authenticated user to get read and write access to the database.
-
High max 8.7ICSA-24-226-01 1 CVE
AVEVA SuiteLink Server
Successful exploitation of this vulnerability could allow an attacker to cause the server to consume excessive system resources, preventing processing of SuiteLink messages on the targeted host.
-
High max 8.7ICSA-24-226-03 1 CVE
Rockwell Automation GuardLogix/ControlLogix 5580 Controller
Successful exploitation of this vulnerability could allow an attacker to perform a denial-of-service on the device.
-
High max 5.3ICSA-24-226-04 1 CVE
Rockwell Automation Pavilion8
Successful exploitation of this vulnerability could allow an attacker to view sensitive data due to a lack of encryption.
-
High max 8.5ICSA-24-226-08 2 CVEs
Ocean Data Systems Dream Report
Successful exploitation of these vulnerabilities could allow an attacker to perform remote code execution or escalate their privileges and cause a denial-of-service condition.
-
High max 8.7ICSA-24-226-09 1 CVE
Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, Compact GuardLogix 5380
Successful exploitation of this vulnerability could allow and attacker to cause a denial-of-service condition.
-
High max 8.7ICSA-24-226-10 1 CVE
Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, and Compact GuardLogix 5380
Successful exploitation of this vulnerability could crash the device being accessed.
-
High max 7.3
Siemens TIA Portal
TIA Portal contains a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability t…
first Apr 11, 2023 -
High max 7.3
Siemens SCALANCE Switch Families
Siemens has released a new firmware version for SCALANCE X-200 and X-200 IRT switches that address Bad Alloc vulnerabilities in the underlying operating system and recommends to update to the latest versions. Siemens recommends countermeasures for products wh…
first Apr 11, 2023 -
High max 7.8
Siemens Parasolid and Teamcenter Visualization
Parasolid and Teamcenter Visualization are affected by memory corruption vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could le…
first Aug 8, 2023