1,944 results · Clear filters · Feed
-
High max 7.1ICSMA-24-023-01 1 CVE
Orthanc Osimis DICOM Web Viewer
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code inside the victim's browser.
-
High max 7.1ICSA-25-021-01 2 CVEs
Traffic Alert and Collision Avoidance System (TCAS) II
Successful exploitation of these vulnerabilities could allow an attacker to manipulate safety systems and cause a denial-of-service condition.
-
High max 7.5ICSA-24-018-01 2 CVEs
AVEVA PI Server
Successful exploitation of these vulnerabilities could allow an attacker to crash the product being accessed or throttle the memory leading to a partial denial-of-service condition.
-
High max 7.8ICSA-24-011-04 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 7.8ICSA-24-011-05 1 CVE
Schneider Electric Easergy Studio
Successful exploitation of this vulnerability could allow an attacker to gain full control of a workstation.
-
High max 7.8
Cambium ePMP 5GHz Force 300-25 Radio (Update A)
Successful exploitation of this vulnerability could allow an attacker to perform code execution on the affected product.
first Dec 14, 2023 -
High max 7.8ICSA-24-011-06 4 CVEs
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM files. If a user is tricked to open a malicious CGM file with the affected products, this could l…
-
High max 7.8ICSA-24-011-07 1 CVE
Siemens Spectrum Power 7
Spectrum Power 7 is affected by a vulnerability that could allow an authenticated local attacker to inject arbitrary code and gain root access. Siemens has released an update for Spectrum Power 7 and recommends to update to the latest version.
-
High max 7.8ICSA-24-011-11 11 CVEs
Siemens Solid Edge
Siemens Solid Edge 2023 has released Update 10, that fixes multiple vulnerabilities that could be triggered when the application reads PAR files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and pot…
-
High max 7.5ICSA-24-004-02 3 CVEs
Mitsubishi Electric Factory Automation Products
Successful exploitation of these vulnerabilities could disclose information in the product or could cause denial-of-service (DoS) condition.
-
High max 8.8
FXC AE1021/AE1021PE
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution on the device via NTP server settings.
-
High max 8.0
QNAP VioStor NVR
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution by exploiting NTP settings.
-
High max 7.4ICSA-24-331-05 1 CVE
Hitachi Energy RTU500 Scripting Interface
Hitachi Energy is aware of a reported vulnerability in the RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certi…
-
High max 7.5
Johnson Controls Metasys and Facility Explorer (Update A)
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service by sending invalid credentials.
first Dec 7, 2023 -
High max 7.8ICSA-23-353-01 1 CVE
Subnet Solutions Inc. PowerSYSTEM Center
Successful exploitation of this vulnerability could result in an attacker achieving arbitrary code execution and privilege escalation through the unquoted service path.
-
High max 7.8ICSA-23-353-04 3 CVEs
Open Design Alliance Drawing SDK
Successful exploitation of this vulnerability could allow remote attackers to disclose sensitive information on affected installations of ODA Drawing SDK.
-
High max 7.5ICSA-23-348-02 1 CVE
Johnson Controls Kantech Gen1 ioSmart
An attacker with physical access to the Kantech Gen1 ioSmart card reader in certain circumstances can recover the reader's communication memory between the card and reader.
-
High
Siemens RUGGEDCOM ROS (Update A)
The boot loader within RUGGEDCOM ROS contains two vulnerabilities in the loading process of the operating system kernel. The more severe of these vulnerabilities could allow an attacker with local access to the device to execute arbitrary code on an affected …
first Dec 10, 2019 -
High max 8.4
Siemens LOGO! Soft Comfort
Two vulnerabilities have been identified in the LOGO! Soft Comfort software. These could allow an attacker to take over a system with the affected software installed. Siemens has released an update for LOGO! Soft Comfort and recommends to update to the latest…
first Apr 13, 2021 -
High max 7.5ICSA-23-348-05 2 CVEs
Siemens SIMATIC and SIPLUS Products
Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver to perform a denial of service attack. Siemens has released a new version for SINAMICS S120 (incl. SIPLUS variants) and recommends to u…
-
High max 7.5ICSA-23-348-06 1 CVE
Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC
SINUMERIK ONE and SINUMERIK MC products are affected by a denial of service vulnerability in the OPC UA implementation of the integrated S7-1500 CPU. The vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-711309 [1]. Siemens has r…
-
High max 8.1ICSA-23-348-16 7 CVEs
Siemens SINEC INS
SINEC INS before V1.0 SP2 Update 2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC INS and recommends to update to the latest version.
-
High max 7.5ICSA-23-341-05 1 CVE
ControlbyWeb Relay
Successful exploitation of this vulnerability could allow an authenticated attacker to run malicious code during a user's session.
-
High max 8.1ICSA-23-341-06 7 CVEs
Sierra Wireless AirLink with ALEOS firmware
Successful exploitation of these vulnerabilities could allow an attacker to perform remote code execution to take full control of the device, steal credentials through a cross site scripting attack, or crash the device being accessed through a denial-of-servi…
-
High max 7.8ICSA-23-334-01 1 CVE
Delta Electronics DOPSoft
Successful exploitation of this vulnerability could lead to remote code execution.
-
High max 7.8ICSA-23-334-04 1 CVE
Mitsubishi Electric FA Engineering Software Products
Successful exploitation of this vulnerability could allow a malicious attacker to execute malicious code by tricking legitimate users to open a specially crafted project file, which could result in information disclosure, tampering and deletion, or a denial-o…
-
High max 7.8ICSA-23-325-02 3 CVEs
Fuji Electric Tellus Lite V-Simulator
Successful exploitation of these vulnerabilities could crash the device being accessed, allow remote code execution, or overwrite files.
-
High max 7.8ICSA-23-318-01 2 CVEs
AVEVA Operations Control Logger
Successful exploitation of these vulnerabilities could allow privilege escalation or denial of service.
-
HighICSA-23-318-02 1 CVE
Rockwell Automation SIS Workstation and ISaGRAF Workbench
Successful exploitation of this vulnerability could allow unprivileged local users to overwrite files replacing them with malicious programs.
-
High max 7.8
Siemens SIMATIC WinCC
A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for the affected products and recommends to update to the latest versions.
first May 10, 2022 -
High max 7.8
Siemens Solid Edge
Solid Edge is affected by a file parsing vulnerability in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with the affected application, an attacker could leverage the vulnerability to crash the application or execute…
first Jun 13, 2023 -
High max 8.0ICSA-23-320-06 4 CVEs
Siemens SIMATIC PCS neo
SIMATIC PCS neo before V4.1 is affected by multiple vulnerabilities. Siemens has released a new version for SIMATIC PCS neo and recommends to update to the latest version.
-
High max 7.5ICSA-23-320-07 1 CVE
Siemens OPC UA Modeling Editor (SiOME)
Siemens OPC UA Modeling Editor (SiOME) is affected by an XML external entity (XXE) injection vulnerability that could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system. Siemens has released a ne…
-
High max 8.8
Siemens Mendix Studio Pro
Mendix Studio Pro is vulnerable to an out of bounds write vulnerability in the integrated libwebp library (CVE-2023-4863), that could allow an attacker to execute code in the context of a victim user's system. Siemens has released updates for the affected pro…
-
High max 7.5
Mitsubishi Electric MELSEC and MELIPC Series (Update G)
Successful exploitation of these vulnerabilities could allow a remote attacker to cause a denial-of-service condition. Recovery requires a system reset.
first Nov 30, 2021 -
High max 8.8
Hitachi Energy MicroSCADA Pro/X SYS600 Products (Update A)
Successful exploitation of this vulnerability could allow an unauthorized user to execute administrator level scripts.
first Nov 29, 2022 -
High max 8.8ICSA-23-306-01 1 CVE
Red Lion Crimson
Successful exploitation of this vulnerability could allow an attacker to truncate passwords configured by the Crimson configuration tool which could create weaker than intended credentials.
-
High max 8.3ICSA-23-306-04 1 CVE
Franklin Fueling System TS-550
Successful exploitation of this vulnerability could allow an attacker to access the device and gain unauthenticated access.
-
High max 9.8
BD Alaris System with Guardrails Suite MX
Successful exploitation of these vulnerabilities could allow an attacker to compromise sensitive data, hijack a session, modify firmware, make changes to system configurations, among other system impacts.
first Jul 13, 2023 -
High max 7.5ICSA-23-299-02 1 CVE
Centralite Pearl Thermostat
Successful exploitation of this vulnerability could allow an attacker to cause a denial of service on the affected product.