901 results · Clear filters · Feed
-
Medium max 5.7ICSMA-25-051-01 1 CVE
Medixant RadiAnt DICOM Viewer
Successful exploitation of this vulnerability could allow an attacker to perform a machine-in-the-middle attack (MITM), resulting in malicious updates being delivered to the user.
-
Medium max 6.3
TrueFiling authorization bypass via user-controlled keys
TrueFiling trusts some client-controlled identifiers passed in URL requests to retrieve information. Platform users must self-register for an account, and once authenticated, could manipulate those identifiers to gain partial access to case information and th…
first Jan 16, 2025 -
Medium max 7.1
Rockwell Automation GuardLogix 5380 and 5580 (Update A)
Successful exploitation of this vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service condition.
first Feb 4, 2025 -
Medium max 5.0
TopQuadrant TopBraid EDG Insecure External Password Storage and XXE Vulnerabilities
TopQuadrant TopBraid EDG stores credentials for external services insecurely and processes untrusted XML entities. An authenticated attacker could obtain credentials for remote services, read local files, or access URLs.
first Sep 10, 2024 -
Medium max 6.5ICSA-25-079-02 3 CVEs
Schneider Electric Enerlin’X IFE and eIFE
Schneider Electric is aware of vulnerabilities in its Enerlin'X IFE and Enerlin'X eIFE products. The Enerlin'X IFE and eIFE products https://www.se.com/ww/en/product-range/62413-enerlinx-ife-eife-ifm/#products are used to enable Masterpact, PowerPact, and Com…
-
Medium max 4.6ICSA-25-044-03 1 CVE
Siemens SIPROTEC 5
Affected SIPROTEC 5 devices do not encrypt certain data within the on-board flash storage on their PCB. This could allow an attacker with physical access to read the sensitive information from the filesystem of the device. Siemens is preparing fix versions an…
-
Medium max 5.7ICSMA-25-037-01 1 CVE
MicroDicom DICOM Viewer
Successful exploitation of this vulnerability could allow an attacker to alter network traffic and perform a machine-in-the-middle (MITM) attack.
-
Medium max 6.5ICSA-25-035-01 1 CVE
Western Telematic Inc NPS Series, DSM Series, CPM Series
Successful exploitation of this vulnerability could allow an authenticated attacker to gain privileged access to files on the device's filesystem.
-
Medium max 5.7ICSA-25-023-06 1 CVE
HMS Networks Ewon Flexy 202
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive user credentials.
-
Medium max 5.4ICSA-25-021-03 1 CVE
ZF Roll Stability Support Plus (RSSPlus)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely (proximal/adjacent with RF equipment) call diagnostic functions which could impact both the availability and integrity.
-
Medium max 5.3
Mitsubishi Electric Multiple Factory Automation Products (Update A)
Successful exploitation of this vulnerability could allow a remote attacker to cause a temporary denial-of-service (DoS) condition for a certain period of time in the product's Ethernet communication by performing a TCP SYN Flood attack.
first Feb 27, 2024 -
Medium max 5.3
Siemens PROFINET Stack Integrated on Interniche Stack
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, contains a vulnerability that could allow an attacker to cause a denial of service condition on affected industrial products. Siemens has released new versions for several affected produ…
first Apr 12, 2022 -
Medium max 4.6
Siemens S7-1500 CPU devices
Affected models of the S7-1500 CPU product family do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use…
first Jan 10, 2023 -
Medium max 6.2
Siemens SIMATIC WinCC
A vulnerability in the login dialog box of SIMATIC WinCC could allow a local attacker to cause a denial of service condition in the runtime of the SCADA system. Siemens has released new versions for the affected products and recommends to update to the latest…
first Apr 9, 2024 -
Medium max 4.7ICSA-25-016-02 1 CVE
Siemens Industrial Edge Management
Industrial Edge Management is affected by a reflected cross-site scripting (XSS) vulnerability that could allow an attacker to extract sensitive information by tricking users into accessing a malicious link. Siemens recommends countermeasures for products whe…
-
Medium max 5.9ICSA-24-354-01 1 CVE
Hitachi Energy RTU500 series CMU
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Medium max 4.4ICSMA-24-354-01 3 CVEs
Ossur Mobile Logic Application
Successful exploitation of these vulnerabilities could allow an attacker unauthorized access to sensitive information.
-
Medium max 6.0
Hitachi Energy RTU500 series
Hitachi Energy is aware of the vulnerabilities CVE-2023-5767, CVE-2023-5768 and CVE-2023-5769 in the Web server and HCI IEC 60870-5-104 component, that affects the RTU500 versions that are listed below. An at- tacker successfully exploiting these vulnerabilit…
first Nov 28, 2023 -
MediumICSA-24-352-02 1 CVE
Hitachi Energy TropOS Devices Series 1400/2400/6400
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Medium max 6.2
Siemens TIA Portal
The know-how protection feature in Totally Integrated Automation Portal (TIA Portal) does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previ…
first Jun 13, 2023 -
Medium max 5.3ICSA-25-010-01 1 CVE
Schneider Electric PowerChute Serial Shutdown
Schneider Electric is aware of a vulnerability in its PowerChute Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and worksta…
-
Medium max 7.5
Philips Vue PACS (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain access to the database, which could impact system availability and data integrity or cause a denial-of-service condition.
first Jul 18, 2024 -
Medium max 4.4ICSA-24-326-02 1 CVE
OSCAT Basic Library
Successful exploitation of this vulnerability allows an local, unprivileged attacker to access limited internal data of the PLC, which may lead to a crash of the affected service.
-
Medium max 5.9
Siemens SIMATIC WinCC
Multiple versions of SIMATIC WinCC and SIMATIC PCS 7 do not properly handle certain requests to their web application (WinCC WebNavigator, PCS 7 Web Server, and PCS 7 Web Diagnostics Server), which may lead to the leak of privileged information. This could al…
first Jul 9, 2024 -
Medium max 6.5ICSA-24-312-01 1 CVE
Beckhoff Automation TwinCAT Package Manager
Successful exploitation this vulnerability could allow a local attacker with administrative access rights to execute arbitrary OS commands on the affected system.
-
Medium max 5.4ICSA-24-303-02 1 CVE
Solar-Log Base 15
Successful exploitation of this vulnerability could result in an attacker obtaining unauthorized access.
-
Medium max 6.9ICSA-24-298-01 1 CVE
VIMESA VHF/FM Transmitter Blue Plus
Successful exploitation of this vulnerability could allow an attacker to perform a Denial-of-Service.
-
Medium max 6.5ICSA-24-298-03 1 CVE
Deep Sea Electronics DSE855
Successful exploitation of this vulnerability could allow an attacker to access stored credentials.
-
Medium max 6.5
goTenna Pro ATAK Plugin (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to compromise the confidentiality and integrity of the communications between the affected devices.
first Sep 26, 2024 -
Medium max 8.4ICSA-24-284-17 1 CVE
Rockwell Automation Verve Asset Manager
Successful exploitation of this vulnerability could allow an unauthorized user to access data they previously had but should no longer have access to.
-
Medium max 5.5
Siemens LOGO! 8 BM
A Denial-of-Service vulnerability has been identified in LOGO! 8 BM. This vulnerability could allow an attacker to crash a device, if a user is tricked into loading a malicious project file onto an affected device. The vulnerability is related to the hardware…
first Mar 9, 2021 -
Medium max 4.6
Siemens LOGO! V8.3 BM Devices
LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a plaintext storage of a password vulnerability. This could allow an attacker with phyiscal access to an affected device to extract user-set passwords from an embedded storage IC. Siemens has released new …
first Aug 13, 2024 -
Medium max 6.0ICSA-24-284-11 1 CVE
Siemens RUGGEDCOM APE1808
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 24.2.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for the affected products and r…
-
Medium max 5.4
Uniview NVR301-04S2-P4 (Update A)
An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser.
first Jun 4, 2024 -
Medium max 6.5ICSA-24-268-05 3 CVEs
Moxa MXview One
Successful exploitation of these vulnerabilities could allow an attacker to expose local credentials and write arbitrary files to the system, resulting in execution of malicious code.
-
Medium max 8.1ICSA-24-263-03 1 CVE
IDEC CORPORATION WindLDR and WindO/I-NV4
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information.
-
Medium max 6.8ICSA-24-256-25 1 CVE
Rockwell Automation ThinManager
Successful exploitation of this vulnerability could result in remote code execution.
-
Medium max 5.1ICSMA-24-254-01 1 CVE
BPL Medical Technologies PWS-01-BT and BPL Be Well Android Application
Successful exploitation of this vulnerability could allow an attacker to intercept and modify information as it being processed
-
Medium max 6.5
Siemens PROFINET DCP (Update V)
Several industrial devices are affected by two vulnerabilities that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. The precondition for this scenario is a direct layer 2 access to t…
first May 8, 2017 -
Medium max 6.5
Siemens SIMATIC WinCC, OpenPCS
Two null point dereference vulnerabilities affect multiple SIMATIC software products. These could allow an attacker to cause a persistent denial of service condition in the RPC Server of these products. Siemens has released new versions for the affected produ…
first Feb 13, 2024