901 results · Clear filters · Feed
-
Medium max 6.1ICSA-22-346-05 1 CVE
Siemens PLM Help Server
The Siemens PLM Help Server V4.2 for documentation contains a reflected cross-site scripting vulnerability. This product has reached end of life, and security vulnerabilities are no longer patched. Siemens has released a new version of Documentation Server t…
-
Medium max 6.3ICSA-22-347-01 1 CVE
ICONICS and Mitsubishi Electric Products
Successful exploitation of this vulnerability could allow an attacker to write arbitrary files.
-
Medium max 5.3ICSMA-22-335-01 1 CVE
BD BodyGuard Pumps
Successful exploitation of this vulnerability could allow an attacker to change configuration settings or disable the pump.
-
Medium max 5.3ICSA-22-333-01 1 CVE
Mitsubishi Electric GOT2000
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition by sending a specially crafted command.
-
Medium max 4.7ICSA-22-326-02 2 CVEs
Digital Alert Systems DASDEC
Successful exploitation of these vulnerabilities might result in false alerts being issued to broadcast or cable sites that are immediately connected to the compromised system.
-
Medium max 6.6ICSA-22-314-03 1 CVE
Siemens SINEC Network Management System Logback Component
SINEC NMS versions before V1.0.3 are affected by a vulnerability in the logback component (CVE-2021-42550) that could allow attackers with write access to the logback configuration file to execute arbitrary code on the system. Siemens has released an update f…
-
Medium max 5.2ICSMA-22-298-01 2 CVEs
AliveCor KardiaMobile
Successful exploitation of these vulnerabilities could lead to attackers stealing or faking personal cardiograms or enabling a denial-of-service attack. Attackers must be at close range to carry out these attacks.
-
Medium max 4.3ICSA-22-284-03 1 CVE
Sensormatic Electronics C-CURE 9000
Successful exploitation of this vulnerability could allow an unauthorized user to enumerate user accounts.
-
MediumICSA-22-286-01 1 CVE
Siemens LOGO!
LOGO! 8 BM (incl. SIPLUS variants) contains a vulnerability that could allow an attacker to install manipulated firmware packages. Siemens has released an update for the LOGO! 8 BM (incl. SIPLUS variants) and recommends to update to the latest version.
-
Medium max 5.0ICSA-22-277-02 2 CVEs
Hitachi Energy Modular Switchgear Monitoring (MSM)
Successful exploitation of these vulnerabilities could allow an attacker to perform malicious command injection, trick a valid user into downloading malicious software onto their computer. Successful exploitation may also allow an attacker to pose as a legiti…
-
Medium max 6.6ICSMA-22-277-01 1 CVE
BD Totalys MultiProcessor
Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI), and personally identifiable information (PI…
-
Medium max 5.5
ARC Informatique PcVue (Update A)
Successful exploitation of this vulnerability could allow an attacker to access the OAuth web service database.
first Aug 23, 2022 -
Medium max 6.5ICSA-22-263-04 1 CVE
Host Engineering Communications Module
Successful exploitation of this vulnerability could crash the device being accessed, leading to a denial-of-service condition.
-
Medium max 4.8ICSMA-22-263-01 1 CVE
Medtronic NGP 600 Series Insulin Pumps
Successful exploitation of this vulnerability could allow an unauthorized user to deliver too much or too little insulin through delivery of an unintended insulin bolus or because insulin delivery is slowed or stopped.
-
Medium
Siemens OpenSSL Vulnerability in Industrial Products (Update E)
Several Siemens industrial products are affected by a vulnerability in OpenSSL, that could result in data being sent out unencrypted by the SSL/TLS record layer. Siemens has released updates for the affected products and recommends to update to the latest ver…
first Aug 7, 2018 -
Medium max 6.0ICSA-22-249-04 3 CVEs
Hitachi Energy TXpert Hub CoreTec 4
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the product, modify configuration, obtain sensitive information from the device, and load malicious firmware.
-
MediumICSA-22-228-01 1 CVE
Yokogawa CENTUM Controller FCS
Successful exploitation of this vulnerability could crash the affected device, resulting in a denial-of-service condition.
-
Medium max 5.5ICSA-22-228-03 1 CVE
Delta Industrial Automation DRAS
Successful exploitation of this vulnerability could allow an attacker to read and exfiltrate sensitive information from the affected host machine.
-
Medium max 6.6ICSA-22-228-06 6 CVEs
Emerson Proficy Machine Edition
Successful exploitation of these vulnerabilities could allow for remote hidden code execution on the connected programmable logic controller (PLC) and for malicious files to be uploaded from the PLC to connected workstations.
-
MediumICSA-22-223-04 1 CVE
Emerson ROC800, ROC800L and DL8000
Successful exploitation of this vulnerability could cause file manipulation.
-
Medium
Siemens UMC Stack (Update H)
The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execut…
first Jul 14, 2020 -
Medium max 7.5
Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller (Update A)
A vulnerability in S7-300 might allow an attacker to cause a Denial- of-Service condition on port 102 of the affected devices by sending specially crafted packets. Siemens recommends specific countermeasures for products where updates are not, or not yet avai…
first Nov 10, 2020 -
Medium
Siemens SIMATIC WinCC and PCS
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow attackers to retrieve and brute force password hashes and access other systems. Siemens has released updates for several affected products and recommends to update to the latest …
first Feb 8, 2022 -
Medium max 5.3ICSA-22-223-01 1 CVE
Siemens Simcenter STAR-CCM+
Simcenter STAR-CCM+ contains an information disclosure vulnerability when using the Power-on-Demand public license server. An attacker could access a system's host, user, and display name. Siemens is preparing updates and recommends specific countermeasures f…
-
Medium max 5.3ICSA-22-223-05 1 CVE
Siemens SICAM A8000 Web Server Module
A vulnerability was identified in the web server module used in the SICAM A8000 CP-8000, CP-8021 and CP-8022 devices' protocol firmwares. - AGPMT0 (AGP Master) - DNPiT1 (DNP3 TCP/IP Server) - DNPiT2 (DNP3 TCP/IP Client) - DNPMT0 (DNP3 Master seriell) - DNPST0…
-
Medium max 8.8
Rockwell Products Impacted by Chromium Type Confusion
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
Medium max 5.3ICSA-22-202-02 1 CVE
Johnson Controls Metasys ADS, ADX, OAS
Successful exploitation of this vulnerability could allow an unauthenticated user to access Metasys web API and enumerate users.
-
Medium
Siemens SCALANCE X (Update D)
A vulnerability was identified in several SCALANCE X switches that could allow an attacker to feed information into a network via the mirror port with the monitor barrier feature enabled. Siemens has released updates for the affected products and recommends t…
first Mar 12, 2019 -
Medium
Siemens Mendix
An information disclosure vulnerability in Mendix applications was discovered. The vulnerability could allow to read sensitive data. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Apr 12, 2022 -
MediumICSA-22-195-06 1 CVE
Siemens Mendix Excel Importer
The latest update of Mendix Excel Importer module fixes an XML Entity Expansion Injection vulnerability. Mendix has released an update for the Mendix Excel Importer module and recommends to update to the latest version.
-
MediumICSA-22-195-10 1 CVE
Siemens Mendix Applications
An expression injection vulnerability was discovered in the Workflow processing of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information if the Workflow visual language of Mendix…
-
MediumICSA-22-195-13 1 CVE
Siemens Mendix
An improper access control vulnerability in Mendix applications was discovered. In case of access to an active user session, the vulnerability could allow to change that user’s password bypassing password validations within a Mendix application. Siemens has r…
-
Medium max 6.5ICSA-22-188-01 1 CVE
Rockwell Automation MicroLogix
Successful exploitation of this vulnerability could allow a malicious user to trick a legitimate user into using an untrusted website. If exploited, this vulnerability could lead to a loss of sensitive information, such as authentication credentials.
-
MediumICSA-22-181-02 1 CVE
Yokogawa Wide Area Communication Router
Successful exploitation of this vulnerability could cause the functions provided by the WAC Router to stop.
-
Medium max 9.1ICSA-22-181-04 2 CVEs
Distributed Data Systems WebHMI
Successful exploitation of these vulnerabilities could allow a user with administrative privileges in WebHMI to execute arbitrary OS commands or impact other logged in users.
-
MediumICSA-22-179-02 4 CVEs
Omron SYSMAC CS/CJ/CP Series and NJ/NX Series
Successful exploitation of these vulnerabilities could cause a denial-of-service condition and allow remote code execution.
-
Medium max 6.3ICSA-22-174-01 2 CVEs
Yokogawa STARDOM
Successful exploitation of these vulnerabilities could allow attackers to alter device configuration settings and tamper with device firmware.
-
MediumICSA-22-174-02 1 CVE
Yokogawa CAMS for HIS
If a computer using CAMS for HIS software is compromised, it can be used to compromise any number of other computers using CAMS for HIS software with the potential to crash any affected software.
-
Medium
Siemens SIMATIC CP (Update A)
A cleartext vulnerability was found in the SIMATIC communication processors CP 1543-1 and CP 1545-1 that could allow an attacker to read sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versi…
first Sep 14, 2021 -
MediumICSA-22-167-07 2 CVEs
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server is missing HTTP security headers on the web server. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors. Siemens has released an update…