1,943 results · Clear filters · Feed
-
High max 8.5
Schneider Electric EcoStruxure (Update D)
Schneider Electric is aware of a vulnerability disclosed on Revenera FlexNet Publisher component. Many vendors, including Schneider Electric, embed Revenera FlexNet Publisher in their offers. Failure to apply the remediation/mitigations provided below may ris…
first Jan 14, 2025 -
High max 7.5
Siemens SICAM 8 Products
Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICORE for CP-8010/CP-8012 - RTUM85 for CP-8010/CP-8012 - SICAM EGS Device firmware -…
first Mar 26, 2026 -
High max 7.5
Mitsubishi Electric MELSEC iQ-F Series (Update A)
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition in Ethernet communication on the module by sending specially crafted SLMP packets. A system reset of the module is required for recovery.
first Nov 19, 2024 -
High max 7.5ICSMA-26-083-01 1 CVE
Grassroots DICOM (GDCM)
Successful exploitation of this vulnerability could allow an attacker to send a specially crafted file, and when parsed, could result in a denial-of-service condition.
-
High max 7.2
Schneider Electric EcoStruxure Automation Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Automation Expert product. The EcoStruxure™ Automation Expert product is plant automation software designed for digital control systems in discrete, hybrid and continuous industrial processes.…
first Mar 10, 2026 -
High max 8.5
Schneider Electric EcoStruxure PME and EPO
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensi…
first Mar 10, 2026 -
High max 8.4
Schneider Electric EcoStruxure Power Build Rapsody (Update A)
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Build Rapsody software. The [EcoStruxure Power Build Rapsody](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309) is used to enter or import the singl…
first Jan 13, 2026 -
High max 7.4
Siemens SICAM SIAPP SDK
The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of service within the SIAPP, corruption of SIAPP data, or exploit the si…
first Mar 10, 2026 -
High max 7.5
Schneider Electric EcoStruxure Data Center Expert
Schneider Electric is aware of a hard-coded credentials vulnerability in its EcoStruxure IT Data Center Expert (DCE) product that requires administrator credentials and enabling a feature (SOCKS Proxy) that is off by default. The EcoStruxure IT Data Center Ex…
first Mar 10, 2026 -
High max 8.4
Siemens RUGGEDCOM APE1808
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where f…
first Jun 10, 2025 -
High max 8.2
Siemens Mendix SAML Module
Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems…
first Aug 14, 2025 -
High max 7.4
Siemens IAM Client
Multiple Siemens products are affected by improper certificate validation in IAM Client. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for the affected products and recommends to up…
first Dec 9, 2025 -
High max 8.1
Siemens Advanced Licensing (SALT) Toolkit
Multiple Siemens products are affected by improper certificate validation in Siemens Advanced Licensing (SALT) Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for several aff…
first Dec 9, 2025 -
High max 7.8
Siemens NX
Siemens NX is affected by missing data validation vulnerability that could allow an attacker with local access on a compromised system to interfere with internal data during the PDF export process that could potentially lead to arbitrary code execution. Sieme…
first Feb 10, 2026 -
High max 9.8
Siemens SIDIS Prime
SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.
first Mar 10, 2026 -
High max 9.2ICSA-26-071-01 5 CVEs
Trane Tracer SC, Tracer SC+, and Tracer Concierge
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, execute arbitrary commands, or perform a denial-of-service on the product.
-
High max 7.6
Universal Boot Loader (U-Boot) (Update A)
Successful exploitation of this vulnerability could result in arbitrary code execution.
first Dec 9, 2025 -
High max 7.2
Johnson Controls PowerG, IQPanel and IQHub (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to read or write encrypted traffic or perform a replay attack.
first Dec 16, 2025 -
High max 7.8ICSA-26-064-01 1 CVE
Delta Electronics CNCSoft-G2
Successful exploitation of this vulnerability could result in an attacker achieving remote code execution on the device.
-
High max 7.2
Hitachi Energy RTU500 Series Product (Update B)
Hitachi Energy is aware of the vulnerability CVE-2024-2617 in the RTU500 Web server component, that affects the RTU500 versions that are listed below. An attacker successfully exploiting this vulnerability could bypass secure update. Please refer to the Recom…
first Apr 30, 2024 -
High max 8.8ICSA-26-062-04 1 CVE
Portwell Engineering Toolkits
Successful exploitation of this vulnerability could allow a local attacker to escalate privileges or cause a denial-of-service condition.
-
High max 8.7ICSA-26-057-02 1 CVE
Pelco, Inc. Sarix Pro 3 Series IP Cameras
Successful exploitation of this vulnerability could allow attackers to gain unauthorized access to sensitive device data, bypass surveillance controls, and expose facilities to privacy breaches, operational risks, and regulatory compliance issues.
-
High max 8.8
Schneider Electric EcoStruxure Power Operation (Update A)
Successful exploitation of these vulnerabilities could result in the loss of system functionality or unauthorized access to system functions.
first Jul 22, 2025 -
High max 7.8
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)
Successful exploitation of this vulnerability could result in disclosure of confidential information, data tampering, or a denial-of-service condition.
first Oct 22, 2024 -
High max 7.0
Schneider Electric EcoStruxure Building Operation Workstation
Schneider Electric is aware of a vulnerability in EcoStruxure Building Operation Workstation and EcoStruxure Building Operation WebStation. [EcoStruxure Building Operation (EBO)](https://www.se.com/ww/en/product-range/62111-ecostruxure-building-operation-soft…
first Feb 10, 2026 -
High max 8.1ICSA-26-050-01 2 CVEs
EnOcean SmartServer IoT
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute arbitrary code and bypass ASLR.
-
High max 8.7ICSA-26-050-02 1 CVE
Valmet DNA Engineering Web Tools
Successful exploitation of this vulnerability could allow an unauthenticated attacker to manipulate the web maintenance services URL to achieve arbitrary file read access.
-
High max 8.2ICSA-26-050-04 1 CVE
Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller
Successful exploitation of this vulnerability could result in an over- or under-odorization event.
-
High max 7.8
Siemens Simcenter Femap and Nastran
Siemens Simcenter Femap and Nastran is affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in NDB and XDB formats. If a user is tricked to open a malicious file with any of the affected products, this cou…
first Feb 10, 2026 -
High max 7.8ICSA-26-048-02 1 CVE
Delta Electronics ASDA-Soft
Successful exploitation of this vulnerability may allow an attacker to write arbitrary data beyond the bounds of a stack-allocated buffer, leading to the corruption of a structured exception handler (SEH).
-
High max 4.6ICSA-26-048-03 2 CVEs
GE Vernova Enervista UR Setup
Successful exploitation of these vulnerabilities may allow code execution with elevated privileges.
-
High
Siemens Automation License Manager Uncontrolled Resource Consumption
A vulnerability was identified in the Automation License Manager software before V5.2 that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial of service preventing legitimate users from us…
first Dec 12, 2012 -
High max 9.8
Siemens SiPass Integrated
SiPass integrated contains multiple vulnerabilities that could allow an unauthenticated remote attacker to exploit user accounts, manipulate data, impersonate users, or achieve arbitrary code execution on the SiPass integrated server. Siemens has released a n…
first Oct 14, 2025 -
High max 8.8
Hitachi Energy SuprOS
Hitachi Energy is aware of a vulnerability that affects the SuprOS product versions listed in this document. An attacker successfully exploiting this vulnerability can cause confidentiality, integrity and availability impacts. Please refer to the Recommended …
first Jan 27, 2026 -
High max 7.6
Siemens Polarion
Polarion before V2506 contains a vulnerability that could allow authenticated remote attackers to conduct cross-site scripting attacks. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Feb 10, 2026 -
High max 8.8
Siemens Desigo CC Product Family and SENTRON Powermanager
Versions V6.0 through V8 QU1 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Sys…
first Feb 10, 2026 -
High max 7.8
Siemens Solid Edge
Solid Edge uses PS/IGES Parasolid Translator Component that contains an out of bounds read that could be triggered when the application reads files in IGS file formats. If a user is tricked to open a malicious file with any of the affected products, this coul…
first Feb 10, 2026 -
High max 8.7
TP-Link Systems Inc. VIGI Series IP Camera
Successful exploitation of this vulnerability could result in unauthorized users gaining administrative access to affected closed circuit television cameras.
first Feb 5, 2026 -
High max 8.8ICSA-26-041-01 14 CVEs
Yokogawa FAST/TOOLS
Successful exploitation of these vulnerabilities could allow an attacker to redirected users to malicious sites, decrypt communications, perform a man-in-the-middle (MITM) attack, execute malicious scripts, steal files, and perform other various attacks.
-
High max 7.5ICSA-26-041-03 1 CVE
AVEVA PI Data Archive
Successful exploitation of this vulnerability could result in a denial-of-service condition.