1,943 results · Clear filters · Feed
-
High
Johnson Controls FX Server, FX80 and FX90 (Update A)
Successful exploitation of this vulnerability could allow an attacker to compromise the device's configuration files.
first Aug 7, 2025 -
High max 7.5ICSA-25-338-02 1 CVE
MAXHUB Pivot
Successful exploitation of this vulnerability could allow an attacker to request a password reset and gain unauthorized access to the account.
-
High max 8.3ICSA-25-338-06 1 CVE
SolisCloud Monitoring Platform
Successful exploitation of this vulnerability could allow an attacker to access sensitive information by manipulating API requests.
-
High max 7.5ICSA-25-338-07 1 CVE
Advantech iView
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information, modify, or delete data.
-
High max 7.5
Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series (Update C)
Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to connect to the module via FTP and bypass authentication to log in.
first Jun 6, 2023 -
High max 8.4ICSMA-25-336-01 5 CVEs
Mirion Medical EC2 Software NMIS BioDose
Successful exploitation of these vulnerabilities could allow an attacker to modify program executables, gain access to sensitive information, gain unauthorized access to the application, and execute arbitrary code.
-
High max 7.1ICSA-25-329-02 1 CVE
Rockwell Automation Arena Simulation
Successful exploitation of this vulnerability could allow local attackers to execute arbitrary code on affected installations of Arena.
-
High max 7.6ICSA-25-329-04 1 CVE
Opto 22 groov View
Successful exploitation of this vulnerability could result in credential exposure, key exposure, and privilege escalation.
-
High max 8.3ICSA-25-322-02 1 CVE
Shelly Pro 4PM
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
High max 8.3ICSA-25-322-03 1 CVE
Shelly Pro 3EM
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
High max 8.4ICSA-25-317-03 1 CVE
AVEVA Edge
Successful exploitation of this vulnerability could allow a local attacker to reverse engineer passwords through brute force.
-
High max 8.9ICSA-25-317-06 2 CVEs
Rockwell Automation Studio 5000 Simulation Interface
Successful exploitation of these vulnerabilities could allow attackers to trigger outbound SMB requests to capture NTLM hashes and execute scripts with Administrator privileges upon system reboot.
-
High max 8.6ICSA-25-317-07 2 CVEs
Rockwell Automation FactoryTalk DataMosaix Private Cloud
Successful exploitation of these vulnerabilities could allow an attacker to take over accounts, steal credentials, redirect users to a malicious website, or bypass MFA.
-
High max 7.5ICSA-25-317-09 1 CVE
Rockwell Automation FactoryTalk Policy Manager
Successful exploitation of this vulnerability could lead to resource exhaustion and denial of service.
-
High max 9.1ICSA-25-317-10 1 CVE
*Rockwell Automation AADvance-Trusted SIS Workstation *
Successful exploitation of this vulnerability may allow remote code execution.
-
High max 8.8ICSA-25-317-12 5 CVEs
Siemens Spectrum Power 4
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute code as application administrator or locally execute code as operating system administrator.
-
High max 8.7
Schneider Electric EcoStruxure Power Monitoring Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises so…
first Aug 12, 2025 -
High max 8.4ICSA-25-322-01 1 CVE
Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio
Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio products. The EcoStruxure Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard projects…
-
High max 7.3ICSA-25-322-04 3 CVEs
Schneider Electric PowerChute Serial Shutdown
Schneider Electric is aware of a vulnerability in its PowerChute™ Serial Shutdown product. The [PowerChute™ Serial Shutdown](https://www.se.com/us/en/product-range/137943580-powerchute-serial-shutdown/#products) product is a UPS management software enabling g…
-
High max 7.5
Siemens SIPROTEC 5 Devices
SIPROTEC 5 devices contain a null pointer dereference vulnerability in the web service. This could allow an attacker to send unauthenticated maliciously crafted http request that could cause denial of service condition of the device. Siemens has released new …
first Apr 11, 2023 -
High max 7.5
Siemens SIMATIC, SIPLUS Products
The OPC UA implementations (ANSI C and C++) as used in several SIMATIC products contain a denial of service vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. S…
first Sep 12, 2023 -
High max 7.6ICSA-25-317-13 3 CVEs
Siemens LOGO! 8 BM Devices
LOGO! 8 BM (incl. SIPLUS variants) contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens is preparing fix versions and recommends…
-
High max 7.5ICSA-25-317-14 1 CVE
Siemens Solid Edge
Solid Edge is affected by improper certificate validation while connecting to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released a new version for Solid Edge SE2025 and reco…
-
High max 7.8ICSA-25-317-16 2 CVEs
Siemens Altair Grid Engine
Altair Grid Engine contain multiple vulnerabilities that could allow an attacker to escalate privileges and execute arbitrary code with superuser permissions. Siemens has released a new version for Altair Grid Engine and recommends to update to the latest ver…
-
High max 7.8ICSA-25-317-17 1 CVE
Siemens Software Center and Solid Edge
Siemens Software Center and Solid Edge is affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system. Siemens has released new versions for the affected products and recommend…
-
High max 8.8ICSA-25-310-01 4 CVEs
Advantech DeviceOn/iEdge
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, remote code execution, or an attacker reading arbitrary files.
-
High max 8.8ICSA-25-310-03 4 CVEs
ABB FLXeon Controllers
Successful exploitation of these vulnerabilities could allow an attacker to take remote control of the product, insert and run arbitrary code, and crash the device being accessed.
-
High max 7.8ICSA-25-308-03 1 CVE
Delta Electronics CNCSoft-G2
Successful exploitation of this vulnerability could allow attackers to execute arbitrary code in the context of the current process.
-
High max 8.8ICSA-25-308-05 1 CVE
IDIS ICM Viewer
Successful exploitation of this vulnerability could result in an attacker executing arbitrary code.
-
High max 8.8VA-25-304-01 3 CVEs
ELOG multiple vulnerabilities
ELOG (the Electronic Logbook package) contains multiple vulnerabilities. Regardless of configuration, low-privileged attackers can modify user profiles, escalate privileges, and deny access to ELOG. If the execute facility is specifically enabled with the "-x…
-
High max 8.7ICSA-25-303-02 3 CVEs
Hitachi Energy TropOS
Successful exploitation of these vulnerabilities could allow command injections and privilege escalation.
-
High max 7.5ICSMA-25-301-01 2 CVEs
Vertikal Systems Hospital Manager Backend Services
Successful exploitation of these vulnerabilities could allow an attacker to obtain unauthorized access to and disclose sensitive information.
-
High max 8.5
Rockwell Automation FactoryTalk Linx
Successful exploitation of these vulnerabilities may allow full access to all files, processes, and system resources.
first Oct 16, 2025 -
High max 8.7
Rockwell Automation Compact GuardLogix 5370
Successful exploitation of this vulnerability could result in a denial-of-service.
first Oct 21, 2025 -
High max 7.8ICSA-25-296-04 2 CVEs
Delta Electronics ASDA-Soft
Successful exploitation of these vulnerabilities could allow an attacker to write data outside of the allocated memory buffer.
-
High max 7.5ICSMA-25-296-01 1 CVE
NIHON KOHDEN Central Monitor CNS-6201
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
High max 8.7ICSA-25-294-05 1 CVE
CloudEdge Online Cameras and App
Successful exploitation of this vulnerability could allow an attacker to gain access to live video feed and camera control.
-
High max 8.6ICSMA-25-294-01 3 CVEs
Oxford Nanopore Technologies MinKNOW
Successful exploitation of these vulnerabilities could allow an attacker to disrupt sequencing operations and processes, exfiltrate and manipulate data, and bypass authentication controls.
-
High max 7.8
Delta Electronics CNCSoft-G2 DOPSoft (Update A)
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
first Apr 30, 2024 -
High max 8.7ICSA-25-289-01 2 CVEs
Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to access to the device's file system.