1,944 results · Clear filters · Feed
-
High max 7.2
Siemens SCALANCE and RUGGEDCOM M-800/S615 Family
SCALANCE M-800 family before V7.2.2 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Dec 12, 2023 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Teamcenter Visualization and JT2Go are affected by out of bounds read, stack exhaustion and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the…
first Jun 11, 2024 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by an out of bounds read vulnerability in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or pote…
first Jul 9, 2024 -
High max 7.2ICSA-24-228-01 4 CVEs
Siemens SCALANCE M-800, RUGGEDCOM RM1224
SCALANCE M-800 family before V8.1 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 8.7ICSA-24-228-02 2 CVEs
Siemens INTRALOG WMS
INTRALOG WMS before V4 is affected by vulnerabilities in the SQL Client-Server communication and in the .NET framework. Successful exploitation could allow an unauthenticated attacker located in the INTRALOG WMS network to decrypt and modify client-server com…
-
High max 7.8ICSA-24-228-03 3 CVEs
Siemens Teamcenter Visualization and JT2Go
Teamcenter Visualization and JT2Go are affected by out of bounds read and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applicat…
-
High max 7.5ICSA-24-228-04 5 CVEs
Siemens SINEC Traffic Analyzer
SINEC Traffic Analyzer before V2.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.
-
High max 7.8ICSA-24-228-08 2 CVEs
Siemens COMOS
COMOS before V10.5 is affected by two local code execution vulnerabilities in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version.
-
High max 7.8ICSA-24-228-09 1 CVE
Siemens NX
NX (incl. NX student versions) before V2406.3000 contains an out-of-bounds read vulnerability that could be triggered when the application reads PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a cras…
-
High max 7.5ICSA-24-354-06 1 CVE
Schneider Electric Accutech Manager
Schneider Electric is aware of a vulnerability in its Accutech Manager software. The Accutech Manager software is the configuration and monitoring application for Accutech Wireless sensor devices. Failure to apply the remediations provided below may risk in r…
-
High max 7.8ICSA-24-219-01 1 CVE
Delta Electronics DIAScreen
Successful exploitation of this vulnerability could allow an attacker to cause a stack-based buffer overflow, resulting in execution of arbitrary code.
-
High max 9.0ICSA-24-214-01 1 CVE
Johnson Controls exacqVision client and exacqVision server
Successful exploitation of this vulnerability could allow an attacker to be able to decrypt communications between exacqVision Server and exacqVision Client due to insufficient key length and exchange.
-
High max 8.8ICSA-24-214-07 1 CVE
AVTECH IP camera
Successful exploitation of this vulnerability could allow an attacker to inject and execute commands as the owner of the running process.
-
High max 7.3ICSA-24-214-09 1 CVE
Rockwell Automation Logix Controllers
Successful exploitation of this vulnerability could allow an attacker to execute CIP programming and configuration commands.
-
High max 8.7ICSA-24-207-02 1 CVE
Positron Broadcast Signal Processor
Successful exploitation of this vulnerability could allow an attacker to bypass authentication and access unauthorized protected areas of the application.
-
High max 7.1
Hitachi Energy IED Connectivity Packages and PCM600 Products (Update A)
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive credentials and gain access to the affected products, perform unauthorized modifications, or provoke a denial-of-service condition.
first Nov 29, 2022 -
High max 7.8ICSA-24-205-01 1 CVE
National Instruments IO Trace
Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code.
-
High max 7.5ICSA-24-205-02 4 CVEs
Hitachi Energy AFS/AFR Series Products
Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition.
-
High max 7.8ICSA-24-205-03 3 CVEs
National Instruments LabVIEW
Successful exploitation of these vulnerabilities could allow a local attacker to disclose information and execute arbitrary code.
-
High max 8.7ICSA-24-198-01 1 CVE
Rockwell Automation Pavilion 8
Successful exploitation of this vulnerability could allow an attacker to create new users and view sensitive data.
-
High max 8.8ICSA-24-191-02 1 CVE
Mitsubishi Electric MELIPC Series MI5122-VW
Successful exploitation of this vulnerability could allow an attacker to tamper with, destroy, disclose, or delete information in the product, or cause a denial-of-service (DoS) condition on the product.
-
High max 7.7ICSA-24-191-04 1 CVE
Johnson Controls Inc. Software House C●CURE 9000
Successful exploitations of this vulnerability could allow an attacker to gain administrative access
-
High max 7.5
Siemens Industrial Products (Update S)
Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a denial of service attack by sending specially crafted packets to port 161/udp (SNMP). Siemens has released new versions for several affected products an…
first Nov 23, 2017 -
High max 7.5
Siemens PROFINET Devices (Update K)
A vulnerability in affected devices could allow an attacker to perform a denial of service attack if a large amount of specially crafted UDP packets are sent to the device. Siemens has released new versions for several affected products and recommends to upda…
first Oct 8, 2019 -
High max 7.5
Siemens PROFINET-IO Stack (Update H)
Products that include the Siemens PROFINET-IO (PNIO) stack in versions prior V06.00 are potentially affected by a denial of service vulnerability when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. Siemens has released new …
first Feb 11, 2020 -
High max 7.8
Siemens SINEC NMS
SINEC NMS before V2.0 is affected by a code injection and a stored cross-site scripting vulnerability. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
first Oct 10, 2023 -
High max 7.8ICSA-24-193-04 15 CVEs
Siemens Simcenter Femap
Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in IGS, BDF or BMP file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the appli…
-
High max 7.5ICSA-24-193-08 1 CVE
Siemens Mendix Encryption Module
The Mendix Encryption module versions V10.0.0 and V10.0.1 define a specific hard-coded default value for the EncryptionKey constant, which is used in projects where no individual EncryptionKey was specified. This could allow to an attacker to decrypt any encr…
-
High max 8.8ICSA-24-193-09 2 CVEs
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server before V3.2 HF1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
-
High max 7.8ICSA-24-193-10 2 CVEs
Siemens JT Open and PLM XML SDK
JT Open Toolkit and PLM XML SDK are affected by stack buffer overflow and null pointer dereference vulnerabilities that could be triggered while parsing XML file. If a user is tricked to open a malicious XML file with any of the affected products, this could …
-
High max 7.8ICSA-24-193-15 3 CVEs
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server before V3.2 HF1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.
-
High max 7.8ICSA-24-193-17 1 CVE
Siemens SIMATIC STEP 7 (TIA Portal)
Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released a new v…
-
High max 7.8ICSA-24-345-02 3 CVEs
Schneider Electric EcoStruxure Foxboro DCS Core Control Services
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxureTM Foxboro DCS product. The EcoStruxureTM Foxboro DCS product is an innovative family of fault-tolerant, highly available control components, which consolidates critical information and…
-
High max 7.3ICSA-24-345-03 1 CVE
Schneider Electric FoxRTU Station
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro SCADA FoxRTU Station product. FoxRTU Station software facilitates configuration, diagnostics, logic development and device management for the SCD2200. The EcoStruxure™ Foxboro SCADA SC…
-
High max 8.5ICSA-24-172-01 1 CVE
Yokogawa CENTUM
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary programs.
-
High max 7.5ICSA-24-172-03 3 CVEs
Westermo L210-F2G
Successful exploitation of these vulnerabilities could crash the device being accessed or may allow remote code execution.
-
High max 7.5ICSA-24-170-01 1 CVE
RAD Data Communications SecFlow-2
Successful exploitation of this vulnerability could allow an attacker to obtain files from the operating system by crafting a special request.
-
High
Mitsubishi Electric Multiple Products (Update G)
Successful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.
first Sep 1, 2020 -
High max 7.8ICSA-24-165-14 2 CVEs
Fuji Electric Tellus Lite V-Simulator
Successful exploitation of these vulnerabilities could allow a local attacker to perform code execution.
-
High max 8.2ICSA-24-165-16 1 CVE
Rockwell Automation FactoryTalk View SE
Successful exploitation of this vulnerability could allow an outside attacker to view an HMI project.