1,943 results · Clear filters · Feed
-
High max 7.8
Mitsubishi Electric MELSOFT Update Manager (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, disclose information, tamper with information, or cause a denial-of-service (DoS) condition.
first Jul 3, 2025 -
High max 8.8ICSA-26-034-01 1 CVE
Mitsubishi Electric FREQSHIP-mini for Windows
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to, modify, delete, or destroy information stored on the system where the affected product is installed, or cause a denial-of-service condition on the affected s…
-
High max 7.8
Schneider Electric RemoteConnect and SCADAPack x70 Utilities (Update A)
Schneider Electric is aware of a vulnerability in its RemoteConnect and SCADAPack™ x70 Utilities software product. The RemoteConnect and SCADAPack™ x70 Utilities https://www.se.com/ww/en/product-category/6000-telemetry-and-remote-scada-systems/ product is a c…
first Jan 14, 2025 -
High max 8.4
BrightSign Players (Update A)
Successful exploitation of these vulnerabilities could allow privilege escalation on the device, easily-guessable passwords, or arbitrary code to be executed on the underlying operating system.
first May 6, 2025 -
High
Mitsubishi Electric CNC Series (Update B)
Successful exploitation of this vulnerability could allow a local attacker to execute malicious code by getting setup-launcher to load a malicious DLL.
first Jul 24, 2025 -
High max 8.7ICSA-26-029-02 9 CVEs
Rockwell Automation ArmorStart LT
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
-
High max 8.7ICSA-26-029-03 1 CVE
Rockwell Automation ControlLogix
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
High max 7.1ICSA-26-022-04 1 CVE
Johnson Controls Inc. iSTAR Configuration Utility (ICU) tool
Successful exploitation of this vulnerability could allow an attacker to cause a failure within the operating system of the machine hosting the ICU tool.
-
High max 8.7ICSA-26-022-05 2 CVEs
Weintek cMT X Series HMI EasyWeb Service
Successful exploitation of these vulnerabilities could allow a low-level user to alter privileges and gain full control to the device.
-
High max 7.8ICSA-26-022-07 1 CVE
Delta Electronics DIAView
Successful exploitation of this vulnerability could enable an attacker to execute arbitrary code.
-
High max 8.1
Schneider Electric Modicon M340, MC80, and Momentum Unity M1E (Update B)
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 products.Modicon PAC control and monitor industrial operations.Failure to apply the provided remediations/mitigations below may risk unauthorized access …
first Nov 12, 2024 -
High max 8.8
Schneider Electric devices using CODESYS Runtime
Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS runtime system V3 communication server. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in a …
first Jul 11, 2023 -
High max 8.8ICSA-26-020-03 2 CVEs
Rockwell Automation Verve Asset Manager
Successful exploitation of these vulnerabilities may allow an attacker to access sensitive information stored in variables within the ADI server.
-
High max 8.8
Siemens TeleControl Server Basic
TeleControl Server Basic before V3.1.2.4 contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges. Siemens has released a new version for TeleControl Server Basic and recommends to update …
first Jan 13, 2026 -
High max 8.1
Siemens RUGGEDCOM APE1808
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to upda…
first Aug 12, 2025 -
High max 8.1
Siemens HyperLynx and Industrial Edge App Publisher
Multiple Siemens products are affected by a type confusion vulnerability in Google Chrome prior to 138.0.7204.96. This could allow a remote attacker to perform arbitrary code execution via a crafted HTML page. Siemens has released a new version for Industrial…
first Oct 14, 2025 -
High max 6.9
Siemens RUGGEDCOM APE 1808
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens r…
first Jul 9, 2024 -
High max 8.7ICSA-26-013-01 1 CVE
Rockwell Automation 432ES-IG3 Series A
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
High max 8.7ICSA-26-013-02 1 CVE
Rockwell Automation FactoryTalk DataMosaix Private Cloud
Successful exploitation of this vulnerability could allow an attacker to perform unauthorized sensitive database operations.
-
High max 8.4
AzeoTech DAQFactory (Update A)
Successful exploitation of these vulnerabilities requires an attacker to upload a malicious .ctl file. This could lead to information disclosure or arbitrary code execution.
first Dec 11, 2025 -
High max 7.6VA-26-008-01 4 CVEs
OPEXUS eCASE
OPEXUS eCASE Audit contains multiple vulnerabilities. An authenticated attacker could bypass authorization or inject JavaScript that could be executed in the context of other users.
-
High max 8.8
Columbia Weather Systems MicroServer
Successful exploitation of these vulnerabilities could allow an attacker to redirect connections to an attacker controlled device, gain admin access to the web portal, or gain limited shell access.
-
High max 7.5
Siemens Interniche IP-Stack
Multiple Industrial products are affected by a vulnerability in the Interniche IP-Stack. The affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthentic…
first Dec 9, 2025 -
High max 7.8ICSA-25-352-03 9 CVEs
National Instruments LabView
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.
-
High max 8.2ICSA-25-352-04 1 CVE
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electrics Products
Successful exploitation of this vulnerability could result in denial-of-service (DoS), information tampering, and information disclosure.
-
High max 8.8ICSA-25-352-06 5 CVEs
Advantech WebAccess/SCADA
Successful exploitation of these vulnerabilities could allow an authenticated attacker to read or modify a remote database.
-
High max 8.7ICSA-25-352-07 2 CVEs
Rockwell Automation Micro820, Micro850, Micro870
Successful exploitation of these vulnerabilities could result in a denial-of-service condition.
-
High max 8.8VA-25-352-01 5 CVEs
BullWall Ransomware Containment and Server Intrusion Protection multiple vulnerabilities
BullWall Ransomware Containment and Server Intrusion Protection are products used for ransomware containment. Multiple vulnerabilities were reported that when used individually or in conjunction could allow a remote attacker with valid credentials to log in t…
-
High max 9.4
Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to modify firmware and access the space that is protected by the device.
first Aug 12, 2025 -
High max 7.8
Fuji Electric Monitouch V-SFT-6 (Update A)
Successful exploitation of these vulnerabilities could crash the accessed device; a buffer overflow condition may allow remote code execution.
first Nov 4, 2025 -
High max 8.7ICSA-25-345-01 2 CVEs
Johnson Controls iSTAR
Successful exploitation of these vulnerabilities could result in unauthorized access to the device.
-
High max 8.7ICSA-25-345-02 1 CVE
Johnson Controls iSTAR Ultra
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.
-
High max 7.8ICSMA-25-345-02 1 CVE
Varex Imaging Panoramic Dental Imaging Software
Successful exploitation of this vulnerability could allow a standard user to obtain NT Authority/SYSTEM privileges.
-
High max 7.8VA-25-343-01 1 CVE
Windscribe for Linux 'changeMTU' local privilege escalation
A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscrib…
-
High max 8.2
Siemens Third-Party Component in SICAM and SITIPE Products
Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of service condition by sending specially crafted MMS messa…
first Sep 10, 2024 -
High max 7.3
Siemens Engineering Platforms
Affected products contain a local arbitrary code execution vulnerability that could allow an attacker to perform actions against the operation system of that environment. Siemens has released new versions for several affected products and recommends to update…
first Dec 10, 2024 -
High max 7.8
Siemens SIMATIC S7-PLCSIM
Affected products do not properly sanitize user-controllable input when parsing project files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several aff…
first Aug 12, 2025 -
High max 8.8ICSA-26-015-11 6 CVEs
Siemens RUGGEDCOM ROX II
Devices based on RUGGEDCOM ROX before V2.17 contain multiple high severity vulnerabilities. Siemens has released a new version for RUGGEDCOM ROX II family and recommends to update to the latest version.
-
High max 8.3ICSA-26-015-12 5 CVEs
Siemens SIMATIC CN 4100
SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
-
High max 9.8
Consilium Safety CS5000 Fire Panel (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain high-level access to and remotely operate the device, potentially putting it into a non-functional state.
first May 29, 2025