1,943 results · Clear filters · Feed
-
High max 9.3
Siemens Opcenter RDnL
Opcenter RDnL is affected by missing authentication in critical function in ‘ActiveMQ Artemis’. An unauthenticated attacker within the adjacent network could use the Core protocol to force a target broker to establish an outbound Core federation connection to…
first May 12, 2026 -
High max 7.5
Siemens Ruggedcom Rox
Ruggedcom Rox contains an input validation vulnerability in the feature key installation process that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new …
first May 12, 2026 -
High max 8.4
Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.
first Nov 25, 2025 -
High max 8.8
ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities
ABB became aware of multiple internally discovered vulnerabilities in the WebPro SNMP card PowerValue for the product versions listed as affected in the advisory. Depending upon the vulnerability, an attacker with access to local network who successfully expl…
first Jan 7, 2026 -
High max 7.8ICSA-26-132-01 1 CVE
Fuji Electric Tellus
Successful exploitation of this vulnerability could allow an attacker to elevate privileges from user to system, which may then enable the attacker to cause a temporary denial of service, open files, or delete files.
-
High max 8.2ICSA-26-132-02 4 CVEs
Subnet Solutions PowerSYSTEM Center
Successful exploitation of these vulnerabilities could allow an authenticated attacker to expose sensitive information or cause a CRLF injection.
-
High max 8.3
ABB AC500 V3 Multiple Vulnerabilities
ABB became aware of severe vulnerability in the products versions listed as affected in the advisory. An update is available that resolves these vulnerabilities. An attacker who successfully exploited these vulnerabilities could bypass the user management and…
first Feb 24, 2026 -
High max 8.1
Schneider Electric EcoStruxure Control Expert, EcoStruxure Process Expert, and Modicon M340, M580 and M580 Safety PLCs
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Control Expert , EcoStruxure Process Expert and Modicon M340, M580 PLCs (Programmable Logic Controllers). Modicon PLCs control and monitor industrial operations. EcoStruxure Control Ex…
first Feb 13, 2024 -
High max 8.7
Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet Module (Update A)
Successful exploitation of these vulnerabilities could allow a remote attacker to cause a denial-of-service condition on the affected products by continuously sending UDP packets to the products.
first Mar 3, 2026 -
High max 7.3ICSA-26-127-01 1 CVE
MAXHUB Pivot client application
Successful exploitation of this vulnerability may enable an attacker to access tenant email addresses and associated information in cleartext or cause a denial-of-service condition.
-
High max 8.1
Schneider Electric EcoStruxure Control Expert, Process Expert, Modicon M340, M580 and M580 CPU (Update A)
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, Modicon M340, Momentum, MC80, M580 and M580 CPU Safety. The Modicon M580 are PAC and Safety PLCs with built-in Ethernet for process, high availability & safety solutio…
first Jan 10, 2023 -
High max 8.6
Hitachi Energy MSM (Update A)
Hitachi Energy has assessed public reports of vulnerabilities initially believed to affect certain versions of the MSM product. Following further technical analysis and validation, Hitachi Energy has determined that the previously referenced product versions …
first Oct 29, 2024 -
High max 7.4
ABB B&R Automation Studio
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. Successful exploitation of this vulnerability may enable an attacker to masquerade as a trusted party when B&R …
first Jan 19, 2026 -
High max 8.4ICSA-26-125-05 1 CVE
Johnson Controls CEM AC2000
Successful exploitation of this vulnerability could allow a standard user to escalate privileges on the host machine.
-
High max 8.1
ABB Ability OPTIMAX
ABB became aware of severe vulnerability in the products versions listed as affected in the advisory, if the optional integration with Azure Active Directory for Single-Sign On is enabled. We have not received any reports of this vulnerability being exploited…
first Jan 16, 2026 -
High max 8.3
ABB AWIN Gateways
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves the reported vulnerabilities. AWIN gateways are not intended to be internet-facing. An attacker who successfully exploited this…
first Mar 13, 2026 -
High max 8.8
ABB Ability Symphony Plus Engineering
ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB S+ Engineering product versions are affected by vulnerabilities in PostgreSQL version 13.11 and earlier versions. If an attacker gains access to a site’s S+…
first Apr 13, 2026 -
High max 7.2VA-26-119-02 2 CVEs
TP-Link WR841N Router multiple vulnerabilities
Multiple TP-Link products (TP-Link Archer C20 V5, Archer C20 6.0, Archer AX53 v1.0 and TL-WR841N v13) are affected by multiple vulnerabilities. The most severe of these vulnerabilities could allow an adjacent, unauthenticated attacker to execute administrativ…
-
High max 7.5VA-26-119-01 1 CVE
CryptPad unbounded WebSocket frame flood
CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance.
-
High max 7.3ICSA-26-113-01 1 CVE
Yadea T5 Electric Bicycle
Successful exploitation of this vulnerability could result in an attacker being able to unlock and start the bicycle, leading to vehicle theft.
-
High max 8.7ICSA-26-113-04 2 CVEs
SpiceJet Online Booking System
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information.
-
High max 8.8
Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary
RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) contains a vulnerability that could allow an attacker to escalate their own privileges. Siemens has released a new version for RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) and recommends to …
first Apr 14, 2026 -
High max 7.3
Siemens SINEC NMS
Siemens SINEC NMS when used with User Management Component (UMC) contains an authentication bypass vulnerability due to insufficient validation of user identity. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorize…
first Apr 14, 2026 -
High max 7.2
Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains a vulnerability that could allow an attacker to achieve arbitrary code execution and to create a denial of service condition. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access …
first Apr 14, 2026 -
High max 8.8
Siemens SINEC NMS
SINEC NMS before V4.0 SP3 contains an Authorization Bypass vulnerability that could allow an attacker to bypass authorization checks, leading to the ability to reset the password of any arbitrary user account. Siemens has released a new version for SINEC NMS …
first Apr 14, 2026 -
High max 7.1
Siemens Industrial Edge Management
Industrial Edge Management contains an authorization bypass vulnerability that could be exploited by an unauthenticated remote attacker to circumvent authentication and to access connected Industrial Edge Devices through the remote connection feature. Siemens…
first Apr 14, 2026 -
High max 7.5
Siemens PROFINET Devices
A vulnerability in affected devices could allow an attacker to perform a denial ofservice attack if a large amount of Profinet Discovery and Configuration Protocol (DCP) reset packets is sent to the affected devices. Siemens has released new versions for seve…
first Jul 13, 2021 -
High max 7.4
Siemens OpenSSL Vulnerability in Industrial Products
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1l and 1.0.2 < 1.0.2za that allows an attacker to cause a denial of service (DoS) or to disclose private memory content. Siemens has released updates for sever…
first Feb 8, 2022 -
High max 7.5
Siemens OpenSSL Affected Industrial Products
A vulnerability in the openSSL component (CVE-2022-0778, [0]) could allow an attacker to create a denial of service condition by providing specially crafted elliptic curve certificates to products that use a vulnerable version of openSSL. Siemens has released…
first Jun 14, 2022 -
High max 8.8
Siemens SCALANCE and RUGGEDCOM Products
The products listed below do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges. Siemens has released updates for several affected products and recommends to update to t…
first Oct 11, 2022 -
High max 7.5
Siemens Products affected by OpenSSL 3.0
The openSSL component, versions 3.0.0 through 3.0.6, contains two buffer overflow vulnerabilities (CVE-2022-3602, CVE-2022-3786) in the X.509 certificate verification [0]. They could allow an attacker to create a denial of service condition or execute arbitra…
first Dec 13, 2022 -
High max 7.5
Siemens RADIUS Client of SIPROTEC 5 Devices
The RADIUS client implementation of the VxWorks platform in SIPROTEC 5 devices contains a denial of service vulnerability that could be triggered when a specially crafted packet is sent by a RADIUS server. Siemens has released new versions for the affected pr…
first Mar 14, 2023 -
High max 7.8
Siemens SINEC NMS
Multiple Siemens products are affected by two local privilege escalation vulnerabilities which could allow an low privileged attacker to load malicious DLLs, potentially leading to arbitrary code execution with elevated privileges. Siemens has released new ve…
first Feb 10, 2026 -
High max 8.1
OC Messaging and Custom Messaging Gateway
Successful exploitation of this vulnerability could allow an authenticated low-privileged user to gain access to SMS messages outside of their authorized tenant scope via a crafted company or tenant identifier parameter.
first Mar 26, 2026 -
High max 7.8ICSA-26-106-01 1 CVE
Delta Electronics ASDA-Soft
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 9.2
OpenPLC_V3 (Update A)
Successful exploitation of these vulnerabilities could result in the alteration of PLC settings, upload of malicious programs, access to credentials, or bypass authentication.
first Dec 11, 2025 -
High max 8.6ICSA-26-099-02 1 CVE
GPL Odorizers GPL750
Successful exploitation of this vulnerability could allow a low privileged remote attacker to manipulate register values, which would result in too much or too little odorant being injected into a gas line.
-
High max 6.8VA-26-097-01 1 CVE
Thales Sentinel LDK Runtime Stored XSS
Thales Sentinel LDK Runtime on Windows allows Stored Cross-site Scripting.
-
High max 7.8
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)
Successful exploitation of these vulnerabilities could allow a local attacker to execute an arbitrary code by storing a specially crafted DLL in a specific folder or tampering with a specially crafted DLL. This could lead to disclose information in the affect…
first Dec 3, 2024 -
High max 9.3
Mitsubishi Electric GENESIS64 and ICONICS Suite products
Successful exploitation of these vulnerabilities could allow a local attacker to disclose SQL Server credentials used by the affected products and use them to disclose, tamper with, or destroy data, or to cause a denial-of-service (DoS) condition on the syste…