1,944 results · Clear filters · Feed
-
High max 7.8ICSA-22-237-01 1 CVE
FATEK Automation FvDesigner
Successful exploitation of this vulnerability may allow remote code execution.
-
High max 7.8ICSA-22-235-05 1 CVE
Measuresoft ScadaPro Server
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
High max 7.8ICSA-22-235-06 5 CVEs
Measuresoft ScadaPro Server and Client
Successful exploitation of these vulnerabilities could allow arbitrary code execution, privilege escalation, or a denial-of-service condition.
-
High max 7.5ICSA-22-235-07 1 CVE
Hitachi Energy RTU500
Successful exploitation of this vulnerability could allow an attacker to send a specially crafted Modbus TCP packet in a high rate, causing a stack overflow, which could result in a reboot of the product.
-
High max 8.3ICSA-22-228-05 1 CVE
B&R Industrial Automation Automation Studio 4
An attacker could leverage this vulnerability to execute code within the context of the affected system, which may threaten the integrity and confidentiality of data or cause a denial-of-service condition.
-
High max 7.5
Siemens SIMATIC Panels and WinCC (TIA Portal)
A vulnerability has been identified in the OPC UA server of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to upd…
first Apr 9, 2019 -
High
Siemens SIMATIC Software Products (Update B)
Multiple SIMATIC software products are affected by a vulnerability that could allow an attacker to change the content of certain metafiles and subsequently manipulate parameters or behaviour of devices configured by the affected software products. Siemens has…
first Jul 13, 2021 -
High max 3.7
Siemens Industrial Devices using libcurl
Vulnerabilities in third-party component cURL could allow an attacker to interfere with the affected products in various ways. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends count…
first May 10, 2022 -
High
Siemens Teamcenter
Teamcenter is affected by XML External Entity Injection (XXE, CVE-2022-29801) and a stack based buffer overflow vulnerability (CVE-2022-24290). XXE impacts only Teamcenter versions before V13.1. Siemens has released updates for the affected products and recom…
first May 10, 2022 -
High max 7.8
Siemens Datalogics File Parsing Vulnerability
Siemens Teamcenter Visualization and JT2Go are affected by an out of bounds write vulnerability in APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potenti…
first Jul 12, 2022 -
High max 6.8ICSA-22-223-02 2 CVEs
Siemens Teamcenter
Teamcenter is affected by two security vulnerabilities in the File Service Cache service that could lead to command injection and denial of service issues. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
High max 7.6
Inductive Automation Ignition
Successful exploitation of this vulnerability could allow an attacker to obtain file contents.
first Jul 26, 2022 -
HighICSA-22-207-02 4 CVEs
Honeywell Safety Manager
Successful exploitation of these vulnerabilities could allow for configuration and firmware manipulation or remote code execution.
-
HighICSA-22-207-03 2 CVEs
Honeywell Saia Burgess PG5 PCD
Successful exploitation of these vulnerabilities could allow for configuration manipulation.
-
High max 8.2ICSA-22-207-04 2 CVEs
MOXA NPort 5110
Successful exploitation of these vulnerabilities could allow an attacker to change memory values and/or cause the device to become unresponsive.
-
High max 7.8ICSA-22-202-01 5 CVEs
ABB Drive Composer, Automation Builder, Mint Workbench
Successful exploitation of this vulnerability could allow remote code execution.
-
High max 8.6ICSA-22-202-03 3 CVEs
Rockwell Automation ISaGRAF Workbench
Successful exploitation of these vulnerabilities could result in directory traversal, privilege escalation, and arbitrary code execution.
-
High
Dahua ASI7213X-T1 (Update A)
Successful exploitation of these vulnerabilities could allow unauthorized access, upload malicious files, and cause a denial-of-service condition.
first Jul 12, 2022 -
High
Siemens TIA Administrator
In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affec…
first Apr 12, 2022 -
HighICSA-22-195-03 2 CVEs
Siemens SIMATIC MV500 Devices
SIMATIC MV500 devices before V3.3 are affected by multiple vulnerabilities that could allow attackers to hijack other users' web based management sessions (CVE-2022-33137) or access data on the device without prior authentication (CVE-2022-33138). Siemens has…
-
HighICSA-22-195-04 1 CVE
Siemens Simcenter Femap
Siemens Simcenter Femap versions before V2022.2 are affected by an out of bounds write vulnerability that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected application, an attack…
-
HighICSA-22-195-05 1 CVE
Siemens RUGGEDCOM ROX
RUGGEDCOM ROX devices are affected by a command injection vulnerability that could allow an attacker with administrative privileges to gain root access. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
HighICSA-22-195-08 20 CVEs
Siemens PADS Standard/Plus Viewer
Siemens PADS Standard/Plus Viewer is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads files in PCB format. If a user is tricked to open a malicious file with the affected application, an attacker could …
-
HighICSA-22-195-14 1 CVE
Siemens CPC80 Firmware of SICAM A8000
A vulnerability was identified in the CPC80 firmware of SICAM A8000 devices. It could allow an unauthenticated remote attacker to cause a permanent denial of service condition. Siemens has released updates for the affected products and recommends to update to…
-
HighICSA-22-195-16 1 CVE
Siemens EN100 Ethernet Module
EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures f…
-
HighICSA-22-181-03 6 CVEs
Emerson DeltaV Distributed Control System
Successful exploitation of these vulnerabilities can result in a denial-of-service condition, manipulation of runtime communications, or compromise of a controller.
-
High max 7.8ICSA-22-179-01 2 CVEs
ABB e-Design
Exploitation of these vulnerabilities could allow privilege escalation or a denial-of service condition.
-
HighICSA-22-179-04 1 CVE
Motorola Solutions MOSCAD IP and ACE IP Gateways
Successful exploitation of this vulnerability could result in manipulation of device configuration.
-
HighICSA-22-179-05 2 CVEs
Motorola Solutions MDLC
Successful exploitation of these vulnerabilities could result in message manipulation, exposure of the attack surface of the MDLC protocol parser, memory corruption, and exposure of sensitive information.
-
High max 8.8ICSA-22-174-05 3 CVEs
Elcomplus SmartICS
Successful exploitation of these vulnerabilities could allow an attacker to view files on the system or terminate processes on the system.
-
High max 7.5ICSMA-22-174-01 3 CVEs
OFFIS DCMTK
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, write malformed DICOM files into arbitrary directories, and gain remote code execution.
-
High max 9.1ICSA-22-172-02 2 CVEs
JTEKT TOYOPUC
Successful exploitation of this vulnerability could cause a denial-of-service condition, change control logic, or disable communication links.
-
High
Siemens TIA Portal (Update F)
Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code with SYSTEM privileges.
first Jan 16, 2020 -
High max 7.8ICSA-22-167-01 2 CVEs
AutomationDirect C-More EA9 HMI
Successful exploitation of these vulnerabilities could cause a loss of sensitive information and the ability to run code execution with elevated privileges.
-
High max 7.7ICSA-22-167-02 1 CVE
AutomationDirect DirectLOGIC with Serial Communication
Successful exploitation of this vulnerability could cause a loss of sensitive information and unauthorized changes.
-
High max 7.7ICSA-22-167-03 2 CVEs
AutomationDirect DirectLOGIC with Ethernet
Successful exploitation of these vulnerabilities could cause a loss of sensitive information, unauthorized changes, and a denial-of-service condition.
-
High max 7.7ICSMA-22-167-01 2 CVEs
Hillrom Medical Device Management
Successful exploitation of these vulnerabilities could allow an attacker to compromise software security by executing commands, gaining privileges, reading sensitive information, evading detection, etc.
-
High max 7.5
Siemens BACnet Field Panels (Update A)
Multiple vulnerabilities in the APOGEE PXC and TALON TC series of products could allow unauthenticated attackers to download sensitive information through the integrated webserver. Siemens has released updates for several affected products and recommends to u…
first Oct 12, 2017 -
High
Siemens SIMATIC CP (Update A)
SIMATIC CP 1543-1 and CP 1545-1 devices are affected by multiple vulnerabilities in ProFTPD, a third party component, that could allow a remote attacker to access sensitive information and execute arbitrary code. Siemens has released updates for the affected …
first Aug 10, 2021 -
High max 7.8
Siemens Solid Edge, JT2Go, and Teamcenter Visualization
Siemens has released updates for JT2Go, Solid Edge and Teamcenter Visualization to fix multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as PDF, DXF or PAR) with any of the affected products, this could lead the app…
first Feb 8, 2022