1,944 results · Clear filters · Feed
-
High max 7.8ICSA-23-299-04 2 CVEs
Rockwell Automation Arena
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code by using a memory buffer overflow or using an uninitialized pointer in the application.
-
High max 7.5ICSA-23-299-05 1 CVE
Rockwell Automation FactoryTalk View Site Edition
Successful exploitation of this vulnerability could cause the product to become unavailable and require a restart to recover resulting in a denial-of-service condition.
-
High max 8.1ICSA-23-299-06 1 CVE
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability could use a token to log into the system.
-
High max 8.2ICSA-23-290-02 1 CVE
Rockwell Automation FactoryTalk Linx
Successful exploitation of this vulnerability could lead to information disclosure or a denial-of-service condition.
-
High max 7.8
Schneider Electric IGSS
Successful exploitation of these vulnerabilities could allow arbitrary code execution or loss of control of the SCADA system.
first Aug 8, 2023 -
High max 7.5ICSA-23-285-14 2 CVEs
Hikvision Access Control and Intercom Products
Successful exploitation of these vulnerabilities could result in an attacker hijacking a session and gaining device operation permissions, or result in an attacker modifying device network configuration by sending specific data packets to a vulnerable interfa…
-
High max 7.8ICSMA-23-285-01 2 CVEs
Santesoft Sante DICOM Viewer Pro
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.
-
High max 7.8ICSMA-23-285-02 1 CVE
Santesoft Sante FFT Imaging
Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.
-
High max 7.3
Siemens SINEC NMS
SINEC NMS and SINEMA Server V14 contain multiple vulnerabilities that could allow an attacker to execute arbitrary code on the system, arbitrary commands on the local database or achieve privilege escalation. Siemens has released several updates for SINEC NMS…
first Mar 8, 2022 -
High max 7.5
Siemens SCALANCE W1750D
The SCALANCE W1750D device is affected by Wi-Fi encryption bypass vulnerabilities ("Framing Frames") that could allow an attacker to disclose sensitive information or to steal the victims session. Siemens has released updates for the affected products and rec…
first May 9, 2023 -
High max 7.5ICSA-23-285-03 1 CVE
Siemens SICAM A8000 Devices
The web server in the CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a path traversal vulnerability that could allow an authenticated remote attacker to traverse directories on the system, download arbitrary files and potentially escalate p…
-
High max 7.8ICSA-23-285-04 1 CVE
Siemens Xpedition Layout Browser
Siemens Xpedition Layout Browser consists of a stack overflow vulnerability that could be triggered when the application reads a malicious file in PCB format. If a user is tricked to open a malicious file with the affected product, this could lead the applica…
-
High max 7.8ICSA-23-285-10 9 CVEs
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities that could be triggered when the application reads SPP and IGS files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potential…
-
High max 7.5ICSA-23-269-05 3 CVEs
Baker Hughes Bently Nevada 3500
Successful exploitation of these vulnerabilities could allow an attacker to steal sensitive information and gain access to the device.
-
High max 6.3ICSA-23-271-02 5 CVEs
DEXMA DexGate
Successful exploitation of these vulnerabilities could result in the attacker impersonating a user, executing arbitrary code, and accessing the connected network.
-
High max 7.8ICSA-23-264-03 1 CVE
Delta Electronics DIAScreen
Successful exploitation of this vulnerability may allow remote code execution.
-
High max 8.6ICSA-23-262-05 1 CVE
Omron CJ/CS/CP Series
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information in memory.
-
High max 8.8ICSA-23-257-07 1 CVE
Rockwell Automation Pavilion8
Successful exploitation of this vulnerability could allow an attacker to retrieve other user's sessions data.
-
High max 7.5ICSA-23-255-01 4 CVEs
Hitachi Energy Lumada APM Edge
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition or disclosure of sensitive information.
-
High max 7.0
Siemens RUGGEDCOM APE1808
Insyde has published information on vulnerabilities in Insyde BIOS on November 8th 2022. These vulnerabilities also affect the RUGGEDCOM APE1808 product family. Siemens has released updates for the affected products and recommends to update to the latest vers…
first Feb 14, 2023 -
High max 8.2ICSA-23-257-04 23 CVEs
Siemens RUGGEDCOM APE1808 Products
Insyde has published information on vulnerabilities in Insyde BIOS up to August 2023. These vulnerabilities also affect the RUGGEDCOM APE1808 product family. Siemens has released updates for the affected products and recommends to update to the latest version…
-
High max 7.8
Delta Electronics CNCSoft-B DOPSoft
Successful exploitation of these vulnerabilities could allow an attacker to exploit a buffer overflow condition and remotely execute arbitrary code.
first Jun 6, 2023 -
High max 7.8ICSA-23-243-02 1 CVE
GE Digital CIMPLICITY
Successful exploitation of this vulnerability could allow a low-privileged local attacker to escalate privileges to SYSTEM.
-
High max 8.8ICSA-23-241-01 1 CVE
PTC Codebeamer
Successful exploitation of this vulnerability could allow an attacker to inject arbitrary code into the target's browser.
-
High max 7.5
KNX Protocol
Successful exploitation of this vulnerability could cause users to lose access to their device, potentially with no way to reset the device.
-
High max 8.6ICSA-23-236-02 5 CVEs
OPTO 22 SNAP PAC S1
Successful exploitation of these vulnerabilities could allow an attacker to brute force passwords, access certain device files, or cause a denial-of-service condition.
-
High max 7.3ICSA-23-236-03 1 CVE
CODESYS Development System
Successful exploitation of this vulnerability could cause users to unknowingly launch a malicious binary placed by a local attacker.
-
High max 9.8ICSA-23-236-06 1 CVE
Rockwell Automation Select Distributed I/O Communication Modules
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service on the affected products.
-
High max 7.5
Mitsubishi Electric MELSEC WS Series
Successful exploitation of this vulnerability could allow an attacker to bypass authentication and log in by connecting to the module via telnet to reset the module or, if certain conditions are met, either disclose or tamper with the module's configuration, …
first May 18, 2023 -
High max 8.8ICSA-23-229-03 1 CVE
Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters
Successful exploitation of this vulnerability could allow an attacker to cause a disclosure of sensitive information, a denial of service, or modification of data if an attacker is able to intercept network traffic.
-
High max 8.6ICSA-23-227-02 1 CVE
Rockwell Automation Armor PowerFlex
Successful exploitation of this vulnerability could allow an attacker to send an influx of network commands, causing the product to generate an influx of event log traffic at a high rate, resulting in the stop of normal operation.
-
High max 7.5ICSA-23-220-02 2 CVEs
Hitachi Energy RTU500 series
Successful exploitation of these vulnerabilities could cause a buffer overflow and reboot of the product.
-
High max 7.8
Siemens Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DWG, IFC, OBJ or STP format. If a user is tricked to open a malicious file with the affe…
first May 9, 2023 -
HighICSA-23-222-02 1 CVE
Siemens Parasolid Installer
A vulnerability in Nullsoft Scriptable Installer System (NSIS) software (CVE-2023-37378) used in Parasolid installers before V36 creates an “uninstall directory” with insufficient access control. This could allow an attacker to misuse the vulnerability, and p…
-
High max 7.8ICSA-23-222-11 9 CVEs
Siemens Solid Edge SE2023
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DFT, PAR or PSM format. If a user is tricked to open a malicious file with the affected …
-
High max 7.5ICSA-23-215-02 1 CVE
Mitsubishi Electric GT and GOT Series Products
Successful exploitation of this vulnerability could allow an attacker to obtain plaintext passwords by sniffing packets containing encrypted passwords and decrypting the encrypted passwords.
-
High max 7.5ICSA-23-215-03 1 CVE
TEL-STER TelWin SCADA WebInterface
Successful exploitation of this vulnerability could allow an unauthenticated attacker to read files on the system.
-
High max 7.1ICSA-23-215-04 1 CVE
Sensormatic Electronics VideoEdge
Successful exploitation of this vulnerability could allow a local user to edit the VideoEdge configuration file and interfere with VideoEdge operation.
-
High max 7.1ICSA-23-208-01 1 CVE
ETIC Telecom RAS Authentication
Successful exploitation of this vulnerability could allow an attacker to reconfigure the device or cause a denial-of-service condition.
-
High max 7.5ICSA-23-208-02 1 CVE
PTC KEPServerEX
Successful exploitation of this vulnerability could result in the affected device crashing.