1,944 results · Clear filters · Feed
-
High max 7.5ICSA-23-103-15 1 CVE
Mitsubishi Electric GOC35 Series
Successful exploitation of this vulnerability could lead to a communication error and may result in a denial-of-service condition.
-
High max 7.5
Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update G)
A Denial-of-Service vulnerability was found in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC software when encrypted communication is enabled. The vulnerability could allow an attacker with network access to cause a Denial-of-Service condition under certain…
first Feb 11, 2020 -
High max 7.5
Siemens SIMATIC S7-400
SIMATIC S7-400 CPU devices contain an input validation vulnerability that could allow an attacker to create a Denial-of-Service condition. A restart is needed to restore normal operations. Siemens has released an update for SIMATIC S7-410 V10 CPU family and S…
first Apr 12, 2022 -
High max 7.8ICSA-23-096-03 3 CVEs
JTEKT ELECTRONICS Kostac PLC Programming Software
Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.
-
High max 7.8ICSA-23-096-02 7 CVEs
JTEKT ELECTRONICS Screen Creator Advance 2
Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.
-
High max 8.8ICSA-23-096-04 3 CVEs
Korenix Jetwave
Successful exploitation of these vulnerabilities could allow an attacker to gain full access to the underlying operating system of the device or cause a denial-of-service condition.
-
High max 6.5ICSA-23-082-03 5 CVEs
SAUTER EY-modulo 5 Building Automation Stations
Successful exploitation of these vulnerabilities could lead to privilege escalation, unauthorized execution of actions, a denial-of-service condition, or retrieval of sensitive information.
-
High max 8.8ICSA-23-082-04 8 CVEs
Schneider Electric IGSS
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, as well as the loss, addition, or modification of dashboards or report files in the IGSS Report folder. Successful exploitation of these vulnerabilities could also…
-
High max 8.8ICSA-23-068-03 1 CVE
ABB Ability Symphony Plus
Successful exploitation of this vulnerability could allow an unauthorized client to connect to the S+ Operations servers (human machine interface (HMI) network), to act as a legitimate S+ Operations client.
-
High max 7.8ICSA-23-082-02 1 CVE
CP Plus KVMS Pro
Successful exploitation of this vulnerability could allow an attacker to retrieve sensitive credentials and control the entire CCTV system.
-
High max 7.9ICSA-23-082-01 1 CVE
RoboDK
Successful exploitation of this vulnerability could allow an attacker to escalate privileges, which could allow attackers to write files to the RoboDK directory and achieve code execution.
-
High max 7.8ICSA-23-073-02 3 CVEs
Autodesk FBX SDK
Successful exploitation of these vulnerabilities could lead to code execution or a denial-of-service condition. Products using Autodesk FBX SDK software are affected by these vulnerabilities.
-
High max 7.8ICSA-23-073-03 1 CVE
GE iFIX
Successful exploitation of this vulnerability could allow for privilege escalation and full control of the system.
-
High max 7.8ICSA-23-080-01 1 CVE
Keysight N6845A Geolocation Server
Successful exploitation of this vulnerability could allow an attacker to escalate privileges in the affected device’s default configuration, resulting in remote code execution or deleting system files and folders.
-
High
Siemens Linux-based Products (Update J)
A vulnerability made public under the name SAD DNS affects Domain Name System resolvers due to a vulnerability in the Linux kernel when handling ICMP packets. The Siemens products which are affected are listed below. For more information please see https://ww…
first May 11, 2021 -
High max 8.2
Siemens Automation License Manager
Siemens Automation License Manager contains two vulnerabilities which, when combined, could allow an attacker to modify and rename license files, extract licenses and overwrite arbitrary files on the target system potentially leading to privilege escalation a…
first Jan 10, 2023 -
High max 7.8
Siemens Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as X_B, DWG, DXF, STL, STP, SLDPRT and PAR format. If a user is tricked to open a malicious…
first Feb 14, 2023 -
High max 8.8ICSA-23-075-02 2 CVEs
Siemens RUGGEDCOM CROSSBOW V5.3
RUGGEDCOM CROSSBOW before V5.3 contains two vulnerabilities that could allow authenticated remote attackers to access data they are not authorized for, or execute arbitrary database queries via an SQL injection attack. Siemens has released an update for RUGGE…
-
High max 7.5ICSA-23-080-07 17 CVEs
Siemens SCALANCE Third-Party
Multiple vulnerabilities affecting various third-party components of SCALANCE W-700 IEEE 802.11ax devices before V2.0 could allow an attacker to cause a denial of service condition, disclose sensitive data or violate the system integrity. Siemens has released…
-
High max 7.5ICSA-23-059-02 4 CVEs
Hitachi Energy Gateway Station
Successful exploitation of these vulnerabilities could cause part of GWS fail to start, allow unauthorized actors to run scripts, and/or cause a denial-of-service.
-
High max 7.5ICSA-23-059-01 2 CVEs
Hitachi Energy Gateway Station
Successful exploitation of these vulnerabilities could cause affected modules to stop working.
-
High max 7.3
BD Alaris Infusion Central
This updated advisory is a follow-up to the original advisory titled ICSMA-23-047-01 BD Alaris Infusion Central that was published February 16, 2023, to the ICS webpage on www.cisa.gov/uscert.
first Feb 16, 2023 -
High max 7.6
Moxa UC Series
This updated advisory is a follow-up to the original advisory titled ICSA-22-333-04 Moxa UC Series that was published November 29, 2022, on the ICS webpage on cisa.gov/ICS.
first Nov 29, 2022 -
High max 8.8
Delta Electronics DIAEnergie
This updated advisory is a follow-up to the original advisory titled ICSA-22-298-06 Delta Electronics DIAEnergie (Update A) that was published November 10, 2022, to the ICS webpage at www.cisa.gov/uscert.
first Nov 10, 2022 -
High max 7.5
Siemens Nucleus RTOS FTP Server
The FTP server of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to genera…
first Oct 11, 2022 -
HighICSA-23-047-02 1 CVE
Siemens SCALANCE X200 IRT
Products of the SCALANCE X-200IRT switch family are affected by a denial of service vulnerability in the SNMP agent that could allow remote attackers to cause a denial of service condition. Siemens has released updates for the affected products and recommends…
-
High max 7.5ICSA-23-047-04 8 CVEs
Siemens Brownfield Connectivity Gateway
Siemens has released a new version for Brownfield Connectivity - Gateway that contains fixes for multiple vulnerabilities in the underlying Golang implementation. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS). Siemens …
-
High max 7.8ICSA-23-047-05 1 CVE
Siemens SiPass integrated AC5102 / ACC-G2 and ACC-AP
SiPass integrated ACC (Advanced Central Controller) devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileg…
-
High max 7.8ICSA-23-047-06 2 CVEs
Siemens Simcenter Femap before V2023.1
Simcenter Femap is affected by out of bounds read/write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulner…
-
High max 7.8ICSA-23-047-12 3 CVEs
Siemens JT Open, JT Utilities, and Parasolid
JT Open Toolkit, JT Utilities and Parasolid are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application …
-
High max 7.5ICSA-23-040-03 2 CVEs
Johnson Controls System Configuration Tool (SCT)
Successful exploitation of these vulnerabilities could allow an attacker to access cookies and take over the user's session.
-
High max 7.8ICSA-23-040-04 3 CVEs
Horner Automation Cscape Envision RV
Successful exploitation of these vulnerabilities could lead to an attacker executing arbitrary code via malicious project files.
-
High max 7.8ICSA-23-033-01 3 CVEs
Delta Electronics DIAScreen
Successful exploitation of these vulnerabilities could allow remote code execution.
-
High max 6.8ICSA-23-033-02 2 CVEs
Mitsubishi Electric GOT2000 Series and GT SoftGOT2000
Successful exploitation of these vulnerabilities could allow attackers to perform unintended operations through clickjacking (an attack that tricks users into clicking an invisible or disguised webpage element) or allow attackers to disclose sensitive informa…
-
High max 7.8ICSA-23-031-01 2 CVEs
Delta Electronics DOPSoft
Successful exploitation of these vulnerabilities could allow for remote code execution.
-
High max 7.8ICSA-23-026-01 1 CVE
Delta Electronics CNCSoft ScreenEditor
Successful exploitation of this vulnerability could cause a buffer overflow condition, which could allow remote code execution.
-
High max 7.5ICSA-23-026-03 4 CVEs
Snap One Wattbox WB-300-IP-3
Successful exploitation of these vulnerabilities could lead to remote code execution on the device, password brute force, and bricking of the device.
-
High max 8.8ICSA-23-026-04 2 CVEs
Sierra Wireless AirLink Router with ALEOS Software
Successful exploitation of these vulnerabilities could allow a loss of sensitive information and could allow remote code execution.
-
High max 7.5ICSA-23-026-05 1 CVE
Mitsubishi Electric MELFA SD/SQ series and F-series Robot Controllers
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to a robot controller.
-
High max 7.3ICSA-23-024-01 2 CVEs
XINJE XD
Successful exploitation of these vulnerabilities could allow an attacker to write arbitrary project files to a programmable logic controller (PLC) and gain code execution privileges.