1,944 results · Clear filters · Feed
-
High max 8.8ICSA-22-300-03 9 CVEs
Rockwell Automation Stratix Devices Containing Cisco IOS
Successful exploitation of these vulnerabilities could lead to a denial-of-service condition and allow remote code execution.
-
High max 7.5ICSA-22-300-01 1 CVE
Rockwell Automation FactoryTalk Alarm and Events Server
Successful exploitation of this vulnerability could result in a denial-of-service condition causing the server to be unavailable.
-
High max 8.8ICSA-22-300-02 1 CVE
SAUTER Controls moduWeb
Successful exploitation of this vulnerability could allow an attacker to trick users into clicking on malicious links and steal sensitive information.
-
High max 7.5ICSA-22-300-04 1 CVE
Trihedral VTScada
Successful exploitation of this vulnerability could cause a denial-of-service condition in the affected product.
-
HighICSA-22-298-04 2 CVEs
Hitachi Energy MicroSCADA X DMS600
Successful exploitation of this vulnerabilities could allow an attacker to gain unauthorized access to information.
-
High max 7.8ICSA-22-293-01 2 CVEs
Bentley Systems MicroStation Connect
Successful exploitation of these vulnerabilities may crash the device being accessed or allow remote arbitrary code execution.
-
HighICSA-22-286-02 1 CVE
Siemens Industrial Edge Management
Successful exploitation of this vulnerability could allow an attacker to inject malicious maintenance requests by exploiting improper certification validation. An attacker could exploit this vulnerability by sending statistics, activating remote support, exch…
-
High max 9.8
Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service
Successful exploitation of these vulnerabilities could crash the Prognostic Model Executor and could allow remote code execution.
-
High max 7.8ICSA-22-284-01 4 CVEs
Altair HyperView Player
Successful exploitation of these vulnerabilities could crash the device accessed.
-
HighICSA-22-286-03 1 CVE
Siemens Solid Edge
Solid Edge is affected by a heap overflow vulnerability that could be triggered when the application reads DWG files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote c…
-
HighICSA-22-286-06 7 CVEs
Siemens Desigo PXM Devices
Desigo PXM devices contain multiple vulnerabilities in the webserver application that could allow an attacker to potentially access sensitive information, execute arbitrary commands, cause a denial of service condition, or perform remote code execution. Sieme…
-
High max 7.8ICSA-22-286-10 1 CVE
Siemens JT Open Toolkit and Simcenter Femap
JT Open Toolkit (JTTK) and Simcenter Femap are affected by an uninitialized pointer reference vulnerability that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause th…
-
High max 7.5ICSA-22-286-14 1 CVE
Siemens SIMATIC HMI Panels
Several SIMATIC HMI Panels are affected by a vulnerability that could allow an attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets. Siemens has released updates for the affected produc…
-
High max 7.5ICSA-22-279-02 1 CVE
HIWIN Robot System Software (HRSS)
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition to the affected product.
-
High max 7.8ICSA-22-277-03 3 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities could allow local attackers to execute arbitrary code.
-
High max 8.1ICSA-22-277-01 1 CVE
Johnson Controls Metasys ADX Server
Successful exploitation of this vulnerability could allow an Active Directory user to execute validated actions without providing a valid password.
-
High max 7.8ICSA-22-277-04 3 CVEs
OMRON CX-Programmer
Successful exploitation of these vulnerabilities could crash the device or may allow arbitrary code execution.
-
High max 8.3
ICSA-20-212-02_Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A)
Younes Dragoni of Nozomi Networks, the Applied Risk research team, and Mashav Sapir of Claroty reported this vulnerability to Mitsubishi Electric.
first Jul 30, 2020 -
High
Delta Electronics DOPSoft (Update A)
Successful exploitation of these vulnerabilities could allow arbitrary code execution and disclose information.
first Jul 1, 2021 -
High max 5.5
Baxter Sigma Spectrum Infusion Pump (Update A)
Successful exploitation of these vulnerabilities could result in access to sensitive data and alteration of system configuration.
first Sep 8, 2022 -
High max 8.5ICSA-22-272-01 5 CVEs
Hitachi Energy MicroSCADA Pro X SYS600
Successful exploitation of this vulnerability could cause SYS600 fail to start or an unauthorized actor to run scripts, and could cause a denial-of-service condition.
-
High max 7.5ICSA-22-272-02 2 CVEs
Hitachi Energy MicroSCADA Pro X SYS600
Successful exploitation of these vulnerabilities could cause the affected modules in the product to stop working.
-
High max 7.8
Hitachi Energy APM Edge
Successful exploitation of this vulnerability could allow users to escalate privileges from a user account to root.
-
High max 8.1ICSA-22-270-03 1 CVE
Rockwell Automation ThinManager ThinServer
Successful exploitation of this vulnerability could lead to the software crashing; a buffer overflow condition may allow remote code execution.
-
High max 7.8ICSA-22-265-01 1 CVE
Measuresoft ScadaPro Server
Successful exploitation of this vulnerability could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.
-
High
Simcenter Femap and Parasolid
Simcenter Femap and Parasolid are affected by an out of bounds read vulnerability that could be triggered when the application reads files in NEU format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage …
first Jul 12, 2022 -
High
Open Design Alliance Drawings SDK
JT2Go and Teamcenter Visualization are affected by multiple file parsing vulnerabilities in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with any of the affected products, this could lead the application to crash o…
first Jul 12, 2022 -
High max 7.8
Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability
Successful exploitation of this vulnerability could allow an attacker to take control of the system node and its information.
-
High max 8.8ICSA-22-256-02 2 CVEs
Honeywell SoftMaster
Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the application permissions or escalate privileges.
-
HighICSA-22-258-01 1 CVE
Siemens Mobility CoreShield OWG Software
The default installation of the Windows version of the CoreShield One- Way Gateway (OWG) software sets insecure file permissions that could allow a local attacker to escalate privileges to local administrator. Siemens Mobility has released an update for the C…
-
High max 7.8ICSA-22-258-02 20 CVEs
Siemens Simcenter Femap and Parasolid
Simcenter Femap and Parasolid are affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in X_T file formats. If a user is tricked to open a malicious file with the affected applications, an attacker could l…
-
High max 8.8ICSA-22-258-05 14 CVEs
Siemens SINEC INS
Multiple vulnerabilities affecting various third-party components of SINEC INS before V1.0 SP2 could allow an attacker to cause a denial of service condition, disclose sensitive data or violate the system integrity. Siemens has released an update for the SINE…
-
High max 7.5ICSA-22-249-01 1 CVE
Triangle Microworks Libraries
Successful exploitation of this vulnerability could lead to a denial-of-service condition to any server or client using the affected libraries
-
High max 7.8ICSA-22-249-02 6 CVEs
AVEVA Edge 2020 R2 SP1 and all prior versions
Successful exploitation of these vulnerabilities could result in arbitrary code execution, information disclosure, or denial of service.
-
High max 3.7ICSA-22-242-01 1 CVE
Hitachi Energy FACTS Control Platform (FCP) Product
Successful exploitation of these vulnerabilities may allow an attacker to eavesdrop on the traffic between network source and destination, gain unauthorized access to information or cause a denial-of service.
-
High max 3.7ICSA-22-242-02 1 CVE
Hitachi Energy Gateway Station (GWS) Product
Successful exploitation of this vulnerability could allow unauthorized users to eavesdrop on the traffic between network source and destination, gain unauthorized access to information, or cause a denial-of service condition.
-
High max 7.5ICSA-22-242-04 1 CVE
Hitachi Energy RTU500 series
Successful exploitation of this vulnerability could cause an internal buffer overflow, which can reboot the product.
-
High max 8.7ICSA-22-242-05 2 CVEs
Fuji Electric D300win
Successful exploitation of these vulnerabilities could result in loss of sensitive data and manipulation of information.
-
High max 6.5ICSA-22-242-08 1 CVE
Honeywell Trend Controls Inter-Controller Protocol
Successful exploitation of this vulnerability could cause the loss of authentication information in cleartext by sniffing network traffic.
-
High max 7.8ICSA-22-242-09 1 CVE
Omron CX-Programmer
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.