1,943 results · Clear filters · Feed
-
High max 7.5ICSA-26-174-07 1 CVE
Hubbell Aclara Metrum Cellular Web Interface
Successful exploitation of this vulnerability could allow attackers to manipulate critical device settings and repeatedly disrupt operations, potentially causing a loss of communications to the device.
-
High max 7.1
Schneider Electric EasyLogic T150 and Saitel DP
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-select…
first May 12, 2026 -
High max 8.7
Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition in the affected product by rapidly establishing a large number of TCP connections to it, resulting in an inconsistency in the product's in…
-
High max 8.7
Mitsubishi Electric Co.'s MELSEC iQ-F Series FX5-ENET/IP Ethernet Module
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition in the affected product by continuously sending a large number of communication packets to the Ethernet port of the product in a short per…
-
High max 9.2ICSA-26-169-03 3 CVEs
Rockwell Automation FactoryTalk Historian Site Edition
Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system.
-
High max 7.4VA-26-168-01 1 CVE
ServerCo getssl ACME shell script path injection
In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in challenge-file handling, allowing a maliciously crafted token to influence local path/filename usage du…
-
High max 8.3ICSA-26-167-01 1 CVE
Rockwell Automation FactoryTalk Analytics PavilionX
Successful exploitation of this vulnerability could result in an attacker executing privileged operations.
-
High max 7.5ICSA-26-167-02 1 CVE
RSLinx Classic Third-Party Vulnerability
Successful exploitation of this vulnerability can lead to a denial of service, where the application will become unresponsive and will not recover on its own.
-
High max 8.7ICSA-26-167-03 1 CVE
Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP
Successful exploitation of this vulnerability could cause a denial-of-service condition that may result in a major nonrecoverable fault (MNRF).
-
High max 8.7ICSA-26-167-04 2 CVEs
Rockwell Automation CompactLogix
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
-
High max 7.7ICSA-26-162-03 2 CVEs
Brickcom Cameras
Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to gain unauthorized access to live video feeds, retrieve sensitive visual information from affected premises, and obtain administrative control of the device.
-
High max 7.5
Schneider Electric Modicon M340, MC80, and Momentum Unity M1E & EcoStruxure (Update A)
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 / EcoStruxure™ Control Expert products. [Modicon PAC](https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/?filter=b…
first Nov 12, 2024 -
High max 8.6
Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)
Schneider Electric is aware of a vulnerability in its Web Server on Modicon M340 and BMXNOE0100/0110, BMXNOR0200H communication modules products. The Modicon M340 is a programmable automation controller; BMXNOE0100 and BMXNOE0110 are network communication mod…
first Jan 14, 2025 -
High max 8.3
Siemens KACO Blueplanet Inverters
KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO new energy GmbH has released new versions for several affected p…
first May 12, 2026 -
High max 8.2
Schneider Electric EcoStruxure Panel Server
Schneider Electric is aware of its vulnerability in its EcoStruxure Panel Server offer. The EcoStruxure Panel Server is a high performance, modular gateway with enhanced cybersecurity that provides easy and fast connections to multiple concurrent edge control…
first May 12, 2026 -
High max 5.9
CISA manage.get.gov incorrect portfolio administrator privileges
manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization.
first May 7, 2026 -
High max 9.8VA-26-155-01 1 CVE
SQLite sqldiff remote code execution via argument injection
An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options.
-
High max 7.8
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E)
Successful exploitation of these vulnerabilities could result in denial-of-service, improper privilege management, or potentially arbitrary code execution.
first Jun 27, 2024 -
High max 7.5
Schneider Electric Modicon M340 Controller and Communication Modules (Update A)
Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-envi…
first Aug 12, 2025 -
High max 7.5
Hitachi Energy ITT600 Explorer
Hitachi Energy is aware of vulnerabilities that affect ITT600 Explorer product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. The vulnerabilities only affect Hitachi Energy …
first May 26, 2026 -
High max 7.5
B&R PPT30 Operating System
B&R is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits this vulnerability could make the OPC-UA server of the product inaccessible.
first May 26, 2026 -
High max 7.8
Schneider Electric EcoStruxure (Update A)
Schneider Electric is aware of a vulnerability in its EcoStruxure Process Expert, EcoStruxure Process Expert for AVEVA System Platform products. The EcoStruxure Process Expert, EcoStruxure Process Expert for AVEVA System Platform products are engineering tool…
first Feb 11, 2025 -
High max 7.3
Dreame Technology iOS and Android Mobile Applications (Update A)
Successful exploitation of this vulnerability could result in unauthorized information disclosure.
first Aug 7, 2025 -
High max 8.3
Mitsubishi Electric Factory Automation Engineering Products (Update L)
Successful exploitation of this vulnerability could allow a remote attacker to disclose information, tamper with information, cause a denial-of-service (DoS) condition on the affected products, and so on by replacing certain files in the product which have im…
first Jul 30, 2020 -
High max 7.5
ABB Ability Zenon Remote Transport Vulnerability (Update A)
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. The vulnerability enables unauthorized access to the Reboot OS function within the Remote Transport Service, allowing an attacker to trigger a system reboot without th…
first Aug 12, 2025 -
High max 8.0
ABB EIBPORT
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. A firmware update is available that resolves these privately reported vulnerabilities in the product versions listed as affected in the advisory. An attacker who succe…
first Oct 7, 2025 -
High max 8.3ICSA-26-148-01 5 CVEs
MacGregor Voyage Data Recorder (VDR) G4e
Successful exploitation of these vulnerabilities could result in an attacker gaining administrator access to the device.
-
High max 8.4ICSA-26-148-05 1 CVE
CP Plus 8 Ch. Network Video Recorder
Successful exploitation of this vulnerability allows an attacker's malicious script to execute in the browser of any authenticated user or administrator who accesses the affected interface. This could lead to compromise of user sessions, execution of unauthor…
-
High max 8.8ICSMA-26-148-01 1 CVE
Fourth Frontier Frontier X Mobile Application, Frontier X2
Successful exploitation of this vulnerability could allow an attacker to read and write arbitrary handle values and change clinical readings, which could result in taking control of the device and lead to patient harm.
-
High max 7.4
ABB LVS MConfig
ABB became aware of an internally discovered vulnerability in the MConfig product versions listed as affected in the advisory. An attacker with access to local networks who successfully exploits vulnerability could have access to application’s sensitive infor…
first Oct 8, 2025 -
High max 7.8
ABB Automation Builder (Update A)
ABB is aware of vulnerabilities in the product versions listed as affected in the following section. An attacker who successfully exploited this vulnerability could overrule the Automation Builder’s user management. Workarounds to close the vulnerabilities ar…
first Apr 30, 2025 -
High max 7.0
Schneider Electric EcoStruxure Process Expert (Update A)
Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire infrastructu…
first Jan 13, 2026 -
High max 8.3
ABB B&R PCs
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS…
first Jan 29, 2026 -
High max 7.1
ABB CoreSense HM and CoreSense M10
An update is available that resolves vulnerability in the product versions listed as affected in this advisory. A path traversal vulnerability in these products can allow unauthenticated users to gain access to restricted directories. Exploiting this vulnerab…
first Apr 16, 2025 -
High max 7.5
ABB RMC-100 (Update A)
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT…
first Jul 3, 2025 -
High max 4.8
Siemens gWAP
Siemens gPROMS Web Applications Publisher (gWAP) is affected by a remote code execution vulnerability introduced through a third-party component, namely the Axios HTTP client library. The vulnerability stems from a specific "Gadget" attack chain that allows p…
first May 12, 2026 -
High max 7.8
Siemens Solid Edge
Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR format. This could allow an attacker to crash the application or execute arbitrary code. Siemen…
first May 12, 2026 -
High max 7.5
Siemens Teamcenter
Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first May 12, 2026 -
High max 7.5
Siemens Industrial Devices
Multiple industrial devices contain a vulnerability that could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing furt…
first May 12, 2026 -
High max 7.7
Siemens SIMATIC
SIMATIC HMI Unified Comfort Panels before V21.0 are affected by a vulnerability that allows an unauthenticated attacker to access the web browser via the help link. This vulnerability allows an attacker to access the web browser through the Control Panel if i…
first May 12, 2026