901 results · Clear filters · Feed
-
Medium max 9.0ICSA-23-269-04 2 CVEs
Advantech EKI-1524-CE series
Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the session.
-
Medium max 5.5ICSA-23-262-03 1 CVE
Omron Engineering Software Zip-Slip
Successful exploitation of this vulnerability could allow an attacker to overwrite files on a system.
-
Medium max 5.5ICSA-23-262-04 1 CVE
Omron Engineering Software
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
Medium max 5.5ICSA-23-262-01 1 CVE
Siemens SIMATIC PCS neo Administration Console
The Administration Console of SIMATIC PCS neo leaks Windows admin credentials. An attacker with local Windows access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems…
-
Medium max 5.9ICSA-23-255-02 1 CVE
Fujitsu Software Infrastructure Manager
Successful exploitation of this vulnerability could result in an attacker retrieving the password for the proxy server that is configured in ISM from the maintenance data.
-
MediumICSA-23-248-01 1 CVE
Fujitsu Limited Real-time Video Transmission Gear "IP series"
Successful exploitation of this vulnerability could result in an attacker logging into the web interface using the obtained credentials. The attacker could initialize or reboot the products, terminating the video transmission.
-
Medium max 6.8ICSA-23-234-02 1 CVE
Trane Thermostats
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as root using a specially crafted filename.
-
Medium max 7.5ICSA-23-229-01 6 CVEs
ICONICS and Mitsubishi Electric Products
Successful exploitation of these vulnerabilities could result in information disclosure, denial-of-service, or remote code execution.
-
Medium max 5.9ICSA-23-215-01 1 CVE
Mitsubishi Electric GOT2000 and GOT SIMPLE
Successful exploitation of this vulnerability could allow an attacker to hijack data connections or prevent legitimate users from establishing data connections.
-
Medium max 6.6ICSA-23-199-06 1 CVE
GE Digital CIMPLICITY
Successful exploitation of this vulnerability could allow an attacker to cause memory corruption issues resulting in unwanted behavior such as code execution.
-
Medium max 6.3
Enphase Envoy
Successful exploitation of this vulnerability could allow an attacker to gain root access to the affected product.
first Jun 20, 2023 -
Medium max 4.0ICSA-23-178-01 1 CVE
Hitachi Energy FOXMAN-UN and UNEM Products
Successful exploitation of this vulnerability could permit an attacker to access sensitive information.
-
MediumICSA-23-173-03 1 CVE
SpiderControl SCADAWebServer
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
Medium max 6.5ICSA-23-166-01 2 CVEs
SUBNET PowerSYSTEM Center
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious scripts or perform a denial-of-service type attack.
-
Medium max 5.5ICSA-23-164-01 1 CVE
Datalogics Library Third-Party
Successful exploitation of this vulnerability could allow an attacker to crash the device.
-
Medium max 9.4ICSA-23-159-01 3 CVEs
Atlas Copco Power Focus 6000
Successful exploitation of these vulnerabilities could cause a loss of sensitive information and the takeover of a user's active session.
-
MediumICSA-23-138-03 1 CVE
Hitachi Energy’s MicroSCADA Pro/X SYS600 Products
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected product.
-
Medium max 6.5
Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)
Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 ac…
first Mar 20, 2018 -
MediumICSA-23-115-02 1 CVE
Scada-LTS Third Party Component
Successful exploitation of this vulnerability could allow loss of sensitive information and execution of arbitrary code.
-
Medium max 6.8ICSA-23-101-01 1 CVE
FANUC ROBOGUIDE-HandlingPRO
Successful exploitation of this vulnerability could allow an attacker to read and/or overwrite files on the system running the affected software.
-
Medium max 4.9ICSMA-23-103-01 1 CVE
B. Braun Battery Pack SP with Wi-Fi
Successful exploitation of this vulnerability could allow a sophisticated and authenticated attacker to compromise the security of the Space communication device Battery Pack SP with Wi-Fi. An attacker could escalate privileges, view sensitive information, up…
-
Medium max 6.2ICSA-23-103-01 1 CVE
Siemens Adaptec Maxview Application
The Adaptec Maxview application shipped with affected SIMATIC IPCs contains a hard coded, non-unique certificate to secure HTTPS connections between the browser and the local Maxview configuration application. A local attacker may use this key to decrypt inte…
-
Medium max 5.5ICSA-23-080-05 7 CVEs
VISAM VBASE Automation Base
Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information from the target device.
-
Medium max 6.3ICSA-23-082-05 2 CVEs
ABB Pulsar Plus Controller
Successful exploitation of these vulnerabilities could allow an attacker to take control of the product or execute arbitrary code.
-
Medium max 5.3ICSA-23-075-07 1 CVE
Rockwell Automation Modbus TCP AOI Server
Successful exploitation of this vulnerability could allow an unauthorized user to read the connected device’s Modbus TCP Server AOI information.
-
Medium max 6.1ICSA-23-068-02 1 CVE
B&R Systems Diagnostics Manager
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code to exfiltrate data and perform any action within the user's browser session.
-
Medium max 6.6ICSA-23-075-03 2 CVEs
Siemens RUGGEDCOM CROSSBOW V5.2
RUGGEDCOM CROSSBOW V5.2 fixes two vulnerabilities that could allow authenticated remote attackers to perform unauthorized actions (CVE-2023-27309) or escalate privileges (CVE-2023-27310). Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to…
-
Medium max 4.6ICSA-23-061-03 1 CVE
Rittal CMC III Access systems
Successful exploitation of this vulnerability could allow an attacker to open control cabinets secured with Rittal locks.
-
Medium max 6.4ICSMA-23-061-01 1 CVE
Medtronic Micro Clinician and InterStim Apps
Successful exploitation of this vulnerability could cause the clinician application’s custom password to be reset to default, resulting in unauthorized control of the clinician therapy application.
-
Medium max 5.3ICSA-23-047-13 1 CVE
Sub-IoT DASH 7 Alliance Protocol stack implementation
Successful exploitation of this vulnerability could allow an attacker to create an out-of-bounds write condition.
-
Medium max 5.9ICSA-23-047-11 1 CVE
Siemens Mendix
Mendix applications contain an improper access control vulnerability that could allow an attacker to bypass XPath constraints and retrieve information using XPath queries that trigger errors. Siemens has released updates for the affected products and recommen…
-
Medium max 5.5
ARC Informatique PcVue
Successful exploitation of these vulnerabilities could allow an unauthorized user to access the email account, SIM card, and other data sources associated with the affected device.
first Dec 20, 2022 -
Medium max 6.3ICSA-23-037-01 1 CVE
EnOcean SmartServer
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to the servers.
-
Medium max 5.9
Mitsubishi Electric MELSEC iQ-F, iQ-R Series
These products are available in limited regions.
first Jan 17, 2023 -
Medium max 5.7ICSA-23-012-07 1 CVE
Hitachi Energy Lumada APM
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to any Power BI reports installed or manipulate asset issue comments on assets.
-
Medium max 5.3
Siemens SIMATIC S7 (Update B)
SIMATIC S7 CPU families are affected by a vulnerability that could allow remote attackers to perform a denial of service attack by sending a specially crafted HTTP request to the web server of an affected device. Siemens has released updates for several affec…
first Feb 11, 2020 -
Medium max 5.4
Siemens SIMATIC WinCC OA Ultralight Client
SIMATIC WinCC OA contains an argument injection vulnerability that could allow an authenticated remote attacker to inject arbitrary parameters, when starting the Ultralight Client via the web interface (e.g., open attacker chosen panels with the attacker's cr…
first Dec 13, 2022 -
Medium max 6.5
Prosys OPC UA Simulation Server (Update A)
Successful exploitation of this vulnerability could allow an attacker to obtain credentials and gain access to system data.
first Dec 15, 2022 -
Medium
Siemens SCALANCE X Switches (Update A)
Two cross-site scripting (XSS) vulnerabilities were identified in the web server of several SCALANCE X switches. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Jun 12, 2018 -
Medium
Siemens SCALANCE X Switches (Update B)
Several SCALANCE X switches contain a vulnerability that could allow an attacker to perform administrative actions if the victim is tricked into clicking on a website controlled by the attacker. The attack only works if the victim has an authenticated session…
first Feb 11, 2020