1,944 results · Clear filters · Feed
-
High max 7.5
Rockwell Automation 5015-AENFTXT (Update A)
Successful exploitation of this vulnerability could allow an attacker to crash the device and impact availability for the affected system.
first Apr 11, 2024 -
High max 8.2ICSA-24-116-01 2 CVEs
Hitachi Energy RTU500 Series
Successful exploitation of these vulnerabilities could allow the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.
-
High
Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of these vulnerabilities could allow a remote attacker unauthorized access to legitimate usernames, CPU module access, or the ability to deny access to legitimate users.
first Sep 7, 2021 -
High max 8.8ICSA-24-107-02 7 CVEs
Electrolink FM/DAB/TV Transmitter
Successful exploitation of these vulnerabilities could allow an attacker to obtain full system access, keep the device from transmitting, escalate privileges, change credentials, and execute arbitrary code.
-
High max 8.4ICSA-24-100-01 1 CVE
SUBNET PowerSYSTEM Server and Substation Server
Successful exploitation of the vulnerabilities in components used by PowerSYSTEM Server 2021 and Substation Server 2021 could allow privilege escalation, denial of service, or arbitrary code execution.
-
High max 7.5
Siemens SCALANCE W1750D Devices
The SCALANCE W1750D device contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, decrypt RSA-encrypted messages or create a denial of service condition. Siemens has released new versions fo…
first Mar 14, 2023 -
High max 8.4
Siemens SCALANCE W700
The SCALANCE W700 devices are affected by Wi-Fi encryption bypass vulnerabilities ("Framing Frames") that could allow an attacker to disclose sensitive information, to steal the victims session or to execute denial-of-service attacks. Siemens recommends count…
first Nov 14, 2023 -
High max 7.8ICSA-24-102-06 3 CVEs
Siemens Parasolid
Parasolid is affected by out of bounds read, stack exhaustion and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an…
-
High max 7.6ICSA-24-102-07 2 CVEs
Siemens SINEC NMS
SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
-
High max 7.5ICSA-24-086-01 3 CVEs
AutomationDirect C-MORE EA9 HMI
Successful exploitation of these vulnerabilities could allow an attacker to exploit a remote device and inject malicious code on the panel.
-
High max 7.5ICSA-24-086-02 3 CVEs
Rockwell Automation PowerFlex 527
Successful exploitation of this these vulnerabilities could crash the device and require a manual restart to recover.
-
High max 7.8ICSA-24-086-03 6 CVEs
Rockwell Automation Arena Simulation
Successful exploitation of these vulnerabilities could crash the application or allow an attacker to run harmful code on the system.
-
High max 7.5ICSA-24-079-01 1 CVE
Franklin Fueling System EVO 550/5000
Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the system.
-
High max 8.8ICSA-24-074-12 10 CVEs
Delta Electronics DIAEnergie
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, disclose sensitive information, or disrupt system availability.
-
High max 8.0ICSA-24-074-13 2 CVEs
Softing edgeConnector
Successful exploitation of these vulnerabilities could create conditions that may allow remote code execution.
-
High max 7.8ICSA-24-072-01 1 CVE
Schneider Electric EcoStruxure Power Design
Successful exploitation of this vulnerability may allow for arbitrary code execution.
-
High max 7.5
Siemens Web Server of Industrial Products
A vulnerability in the affected products could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial-of-service attack. Siemens has released a new version for SINAMICS S210 (6SL5...) and recommends to up…
first Dec 12, 2023 -
High max 7.8
Siemens Simcenter Femap
Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in Catia MODEL file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the applicati…
first Feb 13, 2024 -
High max 7.6ICSA-24-074-04 1 CVE
Siemens SINEMA Remote Connect Client
SINEMA Remote Connect Client before V3.1 SP1 is affected by an information disclosure vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
High max 7.5ICSA-24-074-06 1 CVE
Siemens SENTRON
SENTRON 3KC ATC6 Expansion Module Ethernet exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet, which could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot. S…
-
High max 7.8ICSMA-24-065-01 1 CVE
Santesoft Sante FFT Imaging
Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code once a user opens a malicious DCM file on affected FFT Imaging installations.
-
High max 7.8ICSA-24-060-01 1 CVE
Delta Electronics CNCSoft-B
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 7.8ICSMA-24-060-01 2 CVEs
MicroDicom DICOM Viewer
Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption issues leading to execution of arbitrary code.
-
High max 7.8ICSMA-24-058-01 1 CVE
Santesoft Sante DICOM Viewer Pro
Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of the product.
-
High max 7.8ICSA-24-053-01 1 CVE
Delta Electronics CNCSoft-B DOPSoft
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.
-
High max 7.8
Siemens Industrial Products Intel CPUs (Update F)
Intel has published information on vulnerabilities in Intel products in June 2021. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update. In this advisory we…
first Aug 10, 2021 -
High max 7.5ICSA-24-046-02 5 CVEs
Siemens SIDIS Prime
SIDIS Prime before V4.0.400 is affected by multiple vulnerabilities in the components OPC UA and OpenSSL, that could allow an unauthenticated attacker with access to the network where SIDIS Prime is installed to reuse OPC UA client credentials, create a denia…
-
HighICSA-24-046-03 1 CVE
Siemens SIMATIC RTLS Gateways
SIMATIC RTLS Gateways are affected by vulnerabilities that were disclosed by JSOF research lab “Ripple20” for the TCP/IP stack. Siemens recommends countermeasures for products where fixes are not, or not yet available.
-
High max 7.5ICSA-24-046-04 1 CVE
Siemens CP343-1 Devices
Affected products incorrectly validate TCP sequence numbers. This could allow an unauthenticated remote attacker to create a denial of service condition by injecting spoofed TCP RST packets. Siemens recommends countermeasures for products where fixes are not,…
-
High max 7.8ICSA-24-046-06 1 CVE
Siemens Unicam FX
Unicam FX contains a local privilege escalation vulnerability that could allow an attcker to gain SYSTEM privileges. Unicam FX has reached end of software maintanence. Further information on recommendations for successor product can be found in section 'Addit…
-
High max 7.8ICSA-24-046-07 10 CVEs
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL, PSOBJ or SPP file formats. If a user is tricked to open a malicious file with any of the affected products, thi…
-
High max 7.8ICSA-24-046-13 2 CVEs
Siemens Parasolid
Parasolid is affected by out of bounds read and null pointer dereference vulnerabilities that could be triggered when the application reads files in XT format. If a user is tricked to open a malicious file with the affected applications, an attacker could lev…
-
High max 7.3ICSA-24-039-01 1 CVE
Qolsys IQ Panel 4, IQ4 HUB
Successful exploitation of this vulnerability could allow the panel software, under certain circumstances, to provide unauthorized access to settings.
-
High max 7.3ICSA-24-032-03 1 CVE
AVEVA Edge products (formerly known as InduSoft Web Studio)
Successful exploitation of this vulnerability could result in an attacker achieving arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.
-
High max 7.4ICSA-24-030-04 6 CVEs
Hitron Systems Security Camera DVR
Successful exploitation of these vulnerabilities could allow an attacker to affect the availability of the product through exploitation of an improper input validation vulnerability and default credentials.
-
High max 8.6ICSA-24-030-05 1 CVE
Rockwell Automation ControlLogix and GuardLogix
Successful exploitation of this vulnerability could allow an attacker to crash the device by exploiting a Denial-of-Service (DoS) vulnerability.
-
High max 8.8ICSA-24-030-07 15 CVEs
Rockwell Automation LP30/40/50 and BM40 Operator Interface
Successful exploitation of these vulnerabilities could allow an authenticated attacker to use specifically crafted communication requests to perform a denial-of-service condition, memory overwriting, or remote code execution.
-
High max 8.8ICSA-24-023-01 1 CVE
APsystems Energy Communication Unit (ECU-C) Power Control Software
Successful exploitation of this vulnerability could allow an attacker to access sensitive data and execute specific commands and functions with full admin rights without authenticating.
-
High max 8.4ICSA-24-023-02 1 CVE
Crestron AM-300
Successful exploitation of this vulnerability could allow an attacker to escalate their privileges to root-level access.
-
High max 8.0ICSA-24-023-04 8 CVEs
Westermo Lynx 206-F2G
Successful exploitation of these vulnerabilities could allow an attacker to access the web application, inject arbitrary code, execute malicious code, obtain sensitive information, or execute a malicious request.