901 results · Clear filters · Feed
-
Medium max 4.3
Chirp Systems Chirp Access (Update C)
Successful exploitation of this vulnerability could allow an attacker to adjust the Beacon configuration settings and/or disable the Bluetooth functionality of doors where non-networked Beacons are deployed.
first Mar 7, 2024 -
Medium max 5.5
SEW-EURODRIVE MOVITOOLS MotionStudio
Successful exploitation of this vulnerability could result in open access to file information.
first Jan 16, 2024 -
Medium max 5.5ICSA-24-107-01 1 CVE
Measuresoft ScadaPro
Successful exploitation of this vulnerability could allow an attacker to escalate their privileges from unprivileged to SYSTEM privileges.
-
Medium max 5.3ICSA-24-095-01 1 CVE
Hitachi Energy Asset Suite 9
Successful exploitation of this vulnerability could allow an attacker to use an authentication anomaly to successfully invoke the REST service.
-
Medium max 6.5ICSA-24-095-02 1 CVE
Schweitzer Engineering Laboratories SEL 700 series relays
Successful exploitation of this vulnerability could allow an attacker to make modifications or cause a denial-of-service condition.
-
Medium max 5.3ICSA-24-086-04 1 CVE
Rockwell Automation FactoryTalk View ME
Successful exploitation of this vulnerability could lead to the loss of view or control of the PanelView product.
-
Medium max 6.4ICSA-24-081-01 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could allow an authenticated attacker to read or modify a remote database.
-
Medium max 5.5ICSA-24-074-10 1 CVE
Siemens Siveillance Control
Siveillance Control does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges. Siemens has released a new ver…
-
Medium max 5.3
Integration Objects OPC UA Server Toolkit (Update A)
Successful exploitation of this vulnerability could allow a remote attacker to add content to the log file.
first Jan 16, 2024 -
Medium max 5.3
Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)
Successful exploitation of this vulnerability could allow a remote attacker to prevent legitimate users from logging into the web server function for a certain period, resulting in a denial-of-service condition. The impact of this vulnerability will persist w…
first Nov 2, 2023 -
Medium max 5.9ICSA-24-037-01 1 CVE
HID Global Encoders
Successful exploitation of this vulnerability could allow an attacker to read data from reader configuration cards and credentials. Reader configuration cards contain credential and device administration keys which could be used to create malicious configurat…
-
Medium max 5.3ICSA-24-037-02 1 CVE
HID Global Reader Configuration Cards
Successful exploitation of this vulnerability could allow an attacker to read the credential and device administration keys from a configuration card. Those keys could be used to create malicious configuration cards or credentials.
-
Medium max 5.9ICSA-24-030-03 1 CVE
Mitsubishi Electric MELSEC WS Series Ethernet Interface Module
Successful exploitation of this vulnerability could allow an unauthorized attacker to login to the modules and disclose or tamper with the programs and parameters in the modules.
-
Medium max 5.7ICSA-24-023-05 1 CVE
Lantronix XPort
Successful exploitation of this vulnerability could allow an attacker to obtain credentials.
-
Medium max 5.9
Siemens OpenSSL Vulnerabilities in Industrial Products
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent. Siemens has released new…
first Jul 13, 2021 -
Medium max 5.5
Siemens SICAM Q100 Devices
The web server of SICAM Q100 devices, versions before V2.60, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate u…
first Dec 12, 2023 -
Medium max 6.6ICSA-24-011-08 1 CVE
Siemens SICAM A8000
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a command injection vulnerability that could allow an authenticated remote attacker to inject commands that are executed on the device with root privileges during device startup. Siemens ha…
-
Medium max 6.3ICSA-23-353-03 4 CVEs
EFACEC UC 500E
Successful exploitation of these vulnerabilities could allow an attacker to retrieve sensitive information, gain unauthorized access to the product, or redirect users to malicious websites.
-
Medium
Philips Patient Monitoring Devices (Update C)
Successful exploitation of these vulnerabilities could result in unauthorized access, interrupted monitoring, and collection of access information and/or patient data. To successfully exploit these vulnerabilities, an attacker would need to gain either physic…
first Sep 10, 2020 -
Medium max 5.3ICSA-23-346-01 1 CVE
Schneider Electric Easy UPS Online Monitoring Software
Successful exploitation of this vulnerability could allow elevation of privileges which could result in arbitrary file deletion with system privileges.
-
Medium max 4.2ICSA-23-348-07 1 CVE
Siemens SIMATIC STEP 7 (TIA Portal)
Siemens has released a new version of STEP 7 (TIA Portal) that fixes an information disclosure vulnerability. A local attacker could gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the har…
-
Medium max 5.5ICSA-23-341-01 2 CVEs
Mitsubishi Electric FA Engineering Software Products
Successful exploitation of these vulnerabilities may allow a malicious attacker to disclose information in the affected products.
-
Medium max 4.3ICSA-23-341-02 1 CVE
Schweitzer Engineering Laboratories SEL-411L
Successful exploitation of this vulnerability could expose authorized users to clickjacking attacks.
-
Medium max 5.4ICSA-23-339-01 1 CVE
Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d
Successful exploitation of this vulnerability could allow an attacker to send specially crafted packets to change credentials without any prior authentication.
-
MediumICSA-23-334-02 1 CVE
Yokogawa STARDOM
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a specially crafted packet.
-
Medium max 6.5ICSA-23-331-02 1 CVE
Franklin Electric Fueling Systems Colibri
Successful exploitation of this vulnerability could allow an attacker to obtain login credentials for other users.
-
Medium max 5.4ICSMA-23-331-01 7 CVEs
BD FACSChorus
Successful exploitation of these vulnerabilities could allow an attacker with physical access to the device to modify system configurations, obtain access to sensitive information, or access components of the system.
-
Medium max 6.5ICSA-23-320-02 2 CVEs
Hitachi Energy MACH System Software
Successful exploitation of these vulnerabilities could allow an attacker to read/write arbitrary files without the proper authorization.
-
Medium max 6.8ICSA-23-320-04 1 CVE
Siemens Mendix Runtime
Mendix Runtime contains a capture-replay flaw which could have an impact to apps built with the platform, if certain preconditions are met that depend on the app's model and access control design. This could allow authenticated attackers to access or modify o…
-
Medium max 5.3ICSA-23-313-02 3 CVEs
Hitachi Energy eSOMS
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information related to eSOMS application configuration.
-
Medium max 5.3ICSA-23-311-01 1 CVE
GE MiCOM S1 Agile
Successful exploitation of this vulnerability could allow an attacker to upload malicious files and achieve code execution.
-
Medium max 5.9ICSA-23-299-01 1 CVE
Dingtian DT-R002
Successful exploitation of this vulnerability could allow an attacker to bypass authentication.
-
Medium max 7.8
PTC Kepware KepServerEX (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain elevated privileges, execute arbitrary code, and obtain server hashes and credentials.
first Aug 31, 2023 -
Medium max 6.5ICSA-23-285-15 1 CVE
Advantech WebAccess
Successful exploitation of this vulnerability could leak user credentials.
-
Medium
Siemens Industrial Products with OPC UA
A vulnerability in the underlying third party component OPC UA ANSIC Stack (also called Legacy C-Stack) affects several industrial products. The vulnerability could cause a crash of the component that includes the vulnerable part of the stack. Siemens has rel…
first May 10, 2022 -
Medium max 6.7ICSA-23-285-01 2 CVEs
Siemens SIMATIC CP products
Several SIMATIC CP devices contain direct memory access vulnerabilities that could allow an attacker to execute code, access the PROFINET network without restrictions or perform denial of service attacks. Siemens recommends specific countermeasures for produc…
-
Medium max 5.3ICSA-23-285-11 1 CVE
Siemens Mendix Forgot Password Module
The Mendix Forgot Password module contains a user enumeration vulnerability that could allow an attacker to retrieve valid users. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Medium max 5.7
SOCOMEC MODULYS GP (UPDATE A)
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information on the target system.
first Jan 24, 2023 -
Medium max 6.5ICSA-23-269-01 1 CVE
Suprema BioStar 2
Successful exploitation of this vulnerability could allow an attacker to perform a SQL injection to execute arbitrary commands.
-
Medium max 6.9ICSA-23-269-02 1 CVE
Hitachi Energy Asset Suite 9
Successful exploitation of this vulnerability could allow an authenticated user to enter an arbitrary password to execute equipment tag out actions.