1,944 results · Clear filters · Feed
-
High max 7.5ICSA-23-019-01 2 CVEs
Hitachi Energy PCU400
Successful exploitation of these vulnerabilities could result in a denial-of-service condition on both the logging function of the device and its associated server.
-
High max 8.2ICSA-23-012-02 2 CVEs
RONDS Equipment Predictive Maintenance Solution
Successful exploitation of these vulnerabilities could allow an unauthorized user to leak login credentials and download files. In some circumstances, an unauthorized user can use login credentials to achieve remote code execution.
-
High max 7.5ICSA-23-012-04 1 CVE
Panasonic Sanyo CCTV Network Camera
Successful exploitation of this vulnerability could allow attackers to perform actions via HTTP without validity checks.
-
High max 7.8ICSA-23-012-06 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could result in exposed credentials in plain text to unauthenticated users.
-
High max 8.1
Siemens Mendix Workflow Commons
The Mendix Workflow Commons module improperly handles access control for some module entities. This could allow authenticated remote attackers to read or delete sensitive information. Mendix has released updates for several version lines of the Mendix Workflo…
first Dec 13, 2022 -
High max 7.5ICSA-23-010-01 1 CVE
Black Box KVM
Successful exploitation of this vulnerability could allow an attacker to read sensitive data on the built-in web servers of the affected devices.
-
High max 7.8ICSA-23-012-11 1 CVE
Siemens Solid Edge before V2023 MP1
Solid Edge is affected by memory corruption vulnerability that could be triggered when the application read files in different file formats such as PAR, ASM, DFT. If a user is tricked to open a malicious file with the affected applications, an attacker could …
-
High max 8.3ICSA-23-005-01 5 CVEs
Hitachi Energy UNEM
Successful exploitation of these vulnerabilities could allow an unauthorized user to obtain sensitive information and gain access to the network elements managed by the UNEM and could cause availability issue on affected UNEM products.
-
High max 8.3ICSA-23-005-02 5 CVEs
Hitachi Energy FOXMAN-UN
Successful exploitation of these vulnerabilities could allow an unauthorized user to obtain sensitive information and gain access to the network elements managed by the FOXMAN-UN, and could cause an availability issue on affected FOXMAN-UN products.
-
High max 9.8ICSA-23-005-03 3 CVEs
Hitachi Energy Lumada Asset Performance Management
Successful exploitation of these vulnerabilities could cause a denial-of-service condition or unauthorized remote arbitrary code execution.
-
High max 7.5ICSA-22-356-01 1 CVE
Priva TopControl Suite
Successful exploitation of this vulnerability could allow an attacker to obtain login credentials and access the product remotely.
-
High max 7.8ICSA-22-356-02 1 CVE
Rockwell Automation Studio 5000 Logix Emulate
Successful exploitation of this vulnerability could allow a malicious user to perform remote code execution, potentially impacting the confidentiality, integrity, and availability of the software.
-
High max 7.8ICSA-22-356-04 1 CVE
Omron CX-Programmer
Successful exploitation of this vulnerability could allow arbitrary code execution or loss of sensitive information if a user opens a specially crafted CX-P file.
-
High max 7.8ICSA-22-354-01 2 CVEs
Fuji Electric Tellus Lite V-Simulator
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
-
High max 8.6ICSA-22-354-02 1 CVE
Rockwell Automation GuardLogix and ControlLogix controllers
Successful exploitation of this vulnerability could potentially lead to degradation in availability of the controller and/or a possible major nonrecoverable fault.
-
High max 7.5ICSA-22-354-04 2 CVEs
Rockwell Automation MicroLogix 1100 and 1400
Successful exploitation of these vulnerabilities could create a denial-of-service condition or allow for remote code execution.
-
High max 7.2ICSA-22-354-05 1 CVE
Delta 4G Router DX-3021
Successful exploitation of this vulnerability could allow a remote unauthenticated user to add files, delete files, or change file permissions.
-
High
Siemens SCALANCE X Switches (Update B)
Several SCALANCE X switches are affected by an Authentication Bypass vulnerability. The vulnerability allows an unauthenticated attacker to violate access-control rules. The vulnerability can be exploited by sending a GET request to a specific uniform resourc…
first Jan 14, 2020 -
High
Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update J)
Several industrial products as listed below contain a local privilege escalation vulnerability that could allow a local attacker to execute arbitrary code with SYTEM privileges. Siemens has released updates for the affected products and recommends to update t…
first Jun 9, 2020 -
High
Siemens Industrial PCs and CNC devices
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens IPC related products, that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel…
first May 11, 2021 -
High max 9.8
Siemens Mendix SAML Module
The Mendix SAML module insufficiently protects from packet capture replay. This could allow unauthorized remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to…
first Sep 13, 2022 -
High max 9.8ICSA-22-349-02 6 CVEs
Siemens SCALANCE X-200RNA Switch Devices
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple vulnerabilities that could allow an attacker to cause a denial of service condition, to extract sensitive information or to hijack existing sessions. Siemens has released updates for the affected…
-
High max 7.8ICSA-22-349-15 3 CVEs
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple out of bounds write vulnerabilities in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to cras…
-
High max 8.1ICSA-22-349-17 1 CVE
Siemens Mendix Email Connector
The Mendix Email Connector module improperly handles access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information. Mendix has released an update for the Mendix Email Connector module and…
-
High max 7.8ICSA-22-349-18 4 CVEs
Siemens SCALANCE SC-600 Family
Multiple vulnerabilities affecting various third-party components of the SCALANCE SC-600 family could allow an attacker to cause a denial of service condition, corrupt memory or potentially execute custom code. Siemens has released updates for the affected pr…
-
High max 9.8ICSA-22-349-19 3 CVEs
Siemens SICAM PAS
SICAM PAS/PQS before V8.06 is affected by three vulnerabilities which could lead to remote code execution, privilege escalation or the creation of a denial of service condition. Siemens has released several updates for SICAM PAS/PQS and recommends to update t…
-
High max 7.5ICSA-22-342-01 1 CVE
Advantech iView
Successful exploitation of this vulnerability could allow an attacker to acquire credentials.
-
High max 8.6ICSA-22-342-03 1 CVE
Rockwell Automation Logix controllers
Successful exploitation of this vulnerability could allow an unauthorized user to cause denial-of-service condition on a targeted device.
-
High max 8.6ICSA-22-335-01 1 CVE
Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to cause a denial-of-service condition on a target product by sending specially crafted packets.
-
High max 7.8ICSA-22-326-03 2 CVEs
Phoenix Contact Automation Worx
Successful exploitation of these vulnerabilities could lead to a heap buffer overflow, release of unallocated memory, or a read access violation.
-
High max 7.8ICSA-22-326-04 5 CVEs
GE CIMPLICITY
Successful exploitation of these vulnerabilities could crash the device being accessed or allow arbitrary code execution.
-
High max 7.8ICSA-22-326-05 1 CVE
Moxa Multiple ARM-Based Computers
Successful exploitation of this vulnerability could provide an attacker with root privileges and total control of the system.
-
High max 7.5ICSA-22-321-01 1 CVE
Red Lion Crimson
Successful exploitation of this vulnerability could allow an attacker to obtain user credential hashes.
-
High max 7.1ICSA-22-321-02 1 CVE
Cradlepoint IBR600
Successful exploitation of this vulnerability could allow an attacker to execute code and native system commands.
-
High max 6.5
LS ELECTRIC PLC and XG5000 (Update A)
Successful exploitation of this vulnerability could allow an attacker to decrypt credentials and gain full access to the affected programmable logic controller (PLC).
first Aug 16, 2022 -
High max 8.3ICSA-22-314-07 1 CVE
Omron NJ/NX-series Machine Automation Controllers
Successful exploitation of this vulnerability could allow an attacker to obtain unauthorized access to the device and cause the device to be in an out of service state or execute a malicious program on the device.
-
High max 9.4ICSA-22-314-08 2 CVEs
Omron NJ/NX-series Machine Automation Controllers
Successful exploitation of these vulnerabilities may allow an attacker to bypass authentication in the communications connection process to login and operate the controller products without authorization.
-
High max 7.8ICSA-22-314-01 2 CVEs
Siemens Parasolid
Parasolid is affected by out of bounds read/write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerabilit…
-
High max 8.4ICSA-22-307-02 3 CVEs
Nokia ASIK AirScale System Module
Successful exploitation of these vulnerabilities could result in the execution of a malicious kernel, running of arbitrary malicious programs, or running of modified Nokia programs.
-
High max 8.1ICSA-22-307-03 1 CVE
Delta Industrial Automation DIALink
Successful exploitation of this vulnerability could allow an attacker to place malicious code on the target device.