1,944 results · Clear filters · Feed
-
High max 8.5ICSA-24-165-17 1 CVE
Rockwell Automation FactoryTalk View SE
Successful exploitation of this vulnerability could allow low-privilege users to edit scripts, bypassing access control lists, and potentially gain further access within the system.
-
High max 8.2ICSA-24-165-18 1 CVE
Rockwell Automation FactoryTalk View SE
Successful exploitation of this vulnerability could allow a user from a remote system with FTView to view an HMI project.
-
High max 8.7ICSA-24-165-19 7 CVEs
Motorola Solutions Vigilant License Plate Readers
Successful exploitation of these vulnerabilities could allow an attacker to tamper with the device, access sensitive information and credentials, or perform a replay attack.
-
High max 8.3ICSA-24-163-01 1 CVE
Rockwell Automation ControlLogix, GuardLogix, and CompactLogix
Successful exploitation of this vulnerability could compromise the availability of the device.
-
High max 8.4ICSA-24-163-02 1 CVE
AVEVA PI Web API
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution.
-
High max 7.0ICSA-24-163-03 1 CVE
AVEVA PI Asset Framework Client
Successful exploitation of this vulnerability could allow malicious code execution.
-
High max 8.8ICSMA-24-163-01 2 CVEs
MicroDicom DICOM Viewer
Successful exploitation of these vulnerabilities could allow an attacker to both retrieve and plant medical image files on a victim's system and cause a stack-based buffer overflow, which could result in sensitive information disclosure and arbitrary code exe…
-
High max 7.8
Siemens SICAM PAS/PQS
SICAM PAS/PQS is affected by insecure permission assignments in application folders that could allow an authenticated local attacker to read and modify configuration data or to escalate privileges. Siemens has released a new version for SICAM PAS/PQS and reco…
first Oct 10, 2023 -
High max 7.8
Siemens SICAM Products
Multiple SICAM products are affected by vulnerabilities that could lead to privilege escalation, remote code execution or information loss namely: - SICAM A8000 device firmwares - CPC80 for CP-8000/CP-8021/CP-8022 - CPCI85 and OPUPI0 for CP-8031/CP-8050 - SIC…
first May 14, 2024 -
High max 8.2ICSA-24-165-02 1 CVE
Siemens SIMATIC S7-200 SMART Devices
SIMATIC S7-200 SMART devices contain an information disclosure vulnerability which leaves the system susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack and eventually could allow an at…
-
High max 8.2
Siemens ST7 ScadaConnect
Siemens has released a new version for ST7 ScadaConnect and recommends to update to the latest version.
-
High max 7.8ICSA-24-165-09 1 CVE
Siemens SICAM AK3/BC/TM
SICAM AK3/TM/BC devices are affected by a buffer overflow vulnerability that could allow an attacker to execute code in the context of the current process or lead to a denial of service condition. - SICAM AK3 device firmware- CPCX26 for CP-2016 - PCCX26 for C…
-
High max 7.5ICSA-24-165-11 8 CVEs
Siemens SCALANCE XM-400, XR-500
Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 7.5
Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)
Successful exploitation of this vulnerability could result in a denial-of-service condition for Ethernet communication. A system restart would be required to restore functionality.
first Jun 14, 2022 -
High max 7.8ICSA-24-151-03 1 CVE
Inosoft VisiWin
Successful exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges
-
High max 9.1ICSMA-24-151-02 1 CVE
Baxter Welch Allyn Connex Spot Monitor
Successful exploitation of this vulnerability could allow an attacker to modify device configuration and firmware data. Tampering with this data could lead to device compromise, resulting in impact and/or delay in patient care.
-
High max 7.8ICSA-24-142-01 1 CVE
LCDS LAquis SCADA
Successful exploitation of these vulnerabilities could allow an attacker to read and write files outside of their own directory.
-
High max 7.4
GE Healthcare Ultrasound products (Update A)
Successful exploitation of these vulnerabilities could allow an attacker with physical access to gain access to the operating system of affected devices.
first Feb 18, 2020 -
High max 8.8ICSA-24-137-14 1 CVE
Rockwell Automation FactoryTalk View SE
Successful exploitation of this vulnerability could allow an attacker to inject a malicious SQL statement in the SQL database, resulting in expose sensitive information.
-
High max 8.4ICSA-24-135-02 1 CVE
SUBNET PowerSYSTEM Center
Successful exploitation of the vulnerabilities in components used by PowerSYSTEM Center could allow privilege escalation, denial-of-service, or arbitrary code execution.
-
High max 8.5ICSA-24-135-03 1 CVE
Johnson Controls Software House C●CURE 9000
Successful exploitation of this vulnerability may allow an attacker to access credentials used for access to the application.
-
High max 8.8
Siemens RUGGEDCOM APE180
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before V22.6.2. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeas…
first Oct 10, 2023 -
High max 8.8
Siemens RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before V22.6.3 and 23.1.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific …
first Nov 14, 2023 -
High max 7.5
Siemens Simantic S7-1500 CPU family
A vulnerability has been identified in the SIMATIC S7-1500 CPU family and related products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port…
first Dec 12, 2023 -
High max 7.8
Siemens Polarion ALM
Polarion ALM is affected by incorrect default path permissions in installation path, and improper authentication in the REST API endpoints of DOORS connector. An attacker could exploit the vulnerabilities for unauthenticated access, or privilege escalation. S…
first Feb 13, 2024 -
High max 7.8
Siemens Solid Edge
Solid Edge is affected by an out of bounds read vulnerability that could be triggered when the application reads files that contains XT parts. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnera…
first Mar 12, 2024 -
High max 7.8ICSA-24-137-01 3 CVEs
Siemens Parasolid
Parasolid is affected by out of bounds read and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could le…
-
High max 7.8ICSA-24-137-03 2 CVEs
Siemens Teamcenter Visualization and JT2Go
Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM or XML files. If a user is tricked to open a malicious file with the affected products, this could lead t…
-
High max 7.8ICSA-24-137-05 1 CVE
Siemens Simcenter Nastran
Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string as a file argument. If a user is tricked to run one of the impacted application binary with a malicious string, an attack…
-
High max 7.8ICSA-24-137-08 11 CVEs
Siemens PS/IGES Parasolid Translator Component
PS/IGES Parasolid Translator Component contains multiple file parsing vulnerabilities that could be triggered when the application reads files in IGS file formats. If a user is tricked to open a malicious file with any of the affected products, this could lea…
-
High max 7.8ICSA-24-137-09 8 CVEs
Siemens Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application is parsing PAR files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability t…
-
High max 7.5ICSA-24-137-11 2 CVEs
Siemens RUGGEDCOM APE1808
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 23.4.1. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and reco…
-
High max 8.6
Rockwell Automation ControlLogix and GuardLogix (Update A)
Successful exploitation of this vulnerability could allow an attacker to cause a major nonrecoverable fault (MNRF) resulting in the product to become unavailable.
first Apr 16, 2024 -
High max 7.5ICSA-24-130-01 2 CVEs
Rockwell Automation FactoryTalk Historian SE
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
-
High max 8.3ICSA-24-130-02 1 CVE
alpitronic Hypercharger EV charger
Successful exploitation of this vulnerability could result in an attacker disabling the device, bypassing payment, or accessing payment data.
-
High max 7.1ICSA-24-128-01 1 CVE
PTC Codebeamer
Successful exploitation of this vulnerability could allow an attacker to inject malicious code in the application.
-
High max 8.4ICSA-24-128-02 1 CVE
SUBNET Substation Server
Successful exploitation of the vulnerabilities in components used by Substation Server could allow privilege escalation, denial-of-service, or arbitrary code execution.
-
High max 8.8ICSA-24-123-02 3 CVEs
Delta Electronics DIAEnergie
Successful exploitation of these vulnerabilities could allow an authenticated attacker with limited privileges to escalate privileges, retrieve confidential information, upload arbitrary files, backdoor the application, and compromise the system on which DIAE…
-
High max 8.0ICSA-24-354-02 2 CVEs
Hitachi Energy SDM600
Hitachi Energy is aware of multiple vulnerabilities that affect the SDM600 versions listed below. An attacker who managed to be authenticated to SDM600 and successfully exploit these vulnerabilities could elevate privileges and gain unauthorized access to the…
-
High max 7.5
Unitronics Vision Legacy series (Update A)
Successful exploitation of this vulnerability could allow an attacker to log in to the Remote HMI feature, where the PLC may be factory reset, stopped, and restarted.
first Apr 18, 2024