900 results · Clear filters · Feed
-
Medium max 6.8
Siemens Ruggedcom Rox
Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remote attacker to read arbitrary files with root privileges from the underlying operating system's filesystem. Siemens has released new versions for the affecte…
first May 12, 2026 -
Medium max 5.3
Siemens SIPROTEC 5
The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This could facilitate a brute-force attack against a valid session identifier which could allow an unauthenticated remote attacker to hijack a valid user session. T…
first May 12, 2026 -
Medium max 5.5
ABB PCM600
An update is available that resolves vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could insert and run arbitrary code in the system.
first Nov 3, 2025 -
Medium max 5.3
ABB Automation Builder Gateway for Windows
ABB became aware of severe vulnerability in the products versions listed as affected in the advisory. The Windows gateway is accessible remotely by default. Unauthenticated attackers can therefore search for PLCs, but the user management of the PLCs prevents …
first Feb 24, 2026 -
Medium max 5.2
Medtronic MyCareLink 24950 Patient Monitor (Update A)
Successful exploitation of these vulnerabilities may allow an attacker with physical access to obtain per-product credentials that are utilized to authenticate data uploads and encrypt data at rest. Additionally, an attacker with access to a set of these cred…
first Aug 7, 2018 -
Medium max 6.8
Medtronic MyCareLink Patient Monitor (Update A)
Successful exploitation of these vulnerabilities could lead to system compromise, unauthorized access to sensitive data, and manipulation of the monitor's functionality.
first Jul 24, 2025 -
Medium max 6.8
ABB B&R Automation Runtime
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. An attacker who successfully exploited this vulnerability could cause the product to stop.
first Jan 19, 2026 -
Medium max 5.0
ABB B&R PVI
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. An attacker who successfully exploited this vulnerability could read sensitive informatio…
first Jan 29, 2026 -
Medium max 6.5
ABB System 800xA, Symphony Plus IEC 61850
This vulnerability was privately reported relating to ABB’s implementation of the IEC 61850 communication stack for MMS client applications used in some Automation control system products. Note: IEC 61850 communication typically supports MMS and GOOSE protoco…
first Apr 13, 2026 -
Medium max 5.5ICSA-26-118-01 1 CVE
NSA GRASSMARLIN
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information.
-
Medium max 5.4
Zscaler Client Connector hard-coded proxy configuration domain
Zscaler Client Connector 4.7 and 4.8 on Microsoft Windows misspell a domain that is added by default to an internal bypass list. This could lead to a limited amount of traffic from being inspected under specific circumstances.
first Apr 2, 2026 -
Medium max 6.6
Siemens TPM 2.0
The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affected products and …
first Apr 14, 2026 -
Medium max 5.3
Siemens SCALANCE FragAttacks
Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of FragAttacks, have been published. Successful exploitation of these vulnerabilities could allow an attacker within Wi-Fi range to forg…
first Jul 13, 2021 -
Medium max 5.5
Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER
SIMOTION SCOUT, SIMOTION SCOUT TIA and SINAMICS STARTER are affected by an XXE injection vulnerability that could allow an attacker to access arbitrary application files. Siemens has released new versions for several affected products and recommends to update…
first Aug 12, 2025 -
Medium max 4.3VA-26-097-02 1 CVE
IBM Maximo Application Suite Sensitive Tokens without 'Secure' Attribute
IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. An unauthenticated attacker can steal cookies by directing users to a malicious http:// link and snooping user traffic.
-
Medium max 6.5
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update F)
Successful exploitation of this vulnerability could allow a local attacker to make an unauthorized write to arbitrary files by creating a symbolic link from a file used as a write destination by the services of the affected products to a target file, enabling…
first May 20, 2025 -
Medium max 5.9
Mitsubishi Electric Iconics Digital Solutions Multiple Products (Update B)
Successful exploitation of this vulnerability could allow a local attacker to make an unauthorized write to arbitrary files, by creating a symbolic link from a file used as a write destination by the processes of the affected products to a target file. This c…
first Aug 5, 2025 -
Medium max 6.5VA-26-092-01 1 CVE
Bentley Systems iTwin Platform exposed access token
Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages. An unauthenticated attacker could use this token to enumerate or delete certain assets.
-
Medium max 2.1ICSA-26-092-02 1 CVE
Yokogawa CENTUM VP
Successful exploitation of this vulnerability could allow an attacker to login as the PROG user and modify permissions.
-
Medium max 6.5
Nanoleaf Lines unauthenticated firmware file store
Nanoleaf Lines 12.3.2 does not authenticate firmware file uploads. A remote, unauthenticated attacker can upload firmware files on the device and consume storage resources.
first Mar 25, 2026 -
Medium max 5.9
Philips MRI 1.5T and 3T (Update A)
Successful exploitation of these vulnerabilities may allow an attacker with operator level access to view system configuration, view system files, and export data (including patient data) to an untrusted environment.
first Nov 24, 2021 -
Medium max 7.0
Schneider Electric EcoStruxure Foxboro DCS
Schneider Electric is aware of a vulnerability in its EcoStruxure Foxboro DCS Control Software on Foxboro DCS workstations and servers. Control Core Services and all runtime software, like FCPs, FDCs, and FBMs, are not affected. The EcoStruxure Foxboro DCS ([…
first Mar 10, 2026 -
Medium max 6.9
Schneider Electric Modicon M241, M251, and M262
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251, and M262 products. The Modicon Controllers M241 / M251 / M262 are Programmable Logic Controllers for performancedemanding applications. Failure to apply the remediation pr…
first Mar 10, 2026 -
Medium max 5.1
Schneider Electric Modicon Controllers M241, M251, M258, and LMC058
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251, M258, and LMC058 products. The [Modicon Controllers M241 / M251 / M258](https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/) and [Modicon LMC0…
first Mar 10, 2026 -
Medium max 5.9
Hitachi Energy Relion 670, 650, SAM600-IO Series (Update A)
Hitachi Energy is aware of the vulnerability CVE-2022-4304 in the OSS component OpenSSL, that affects the Relion 670, 650, SAM600-IO versions that are listed below. An attacker successfully exploiting this vulnerability could send trial messages to the server…
first Jun 27, 2023 -
Medium max 6.3
International Standards Organization ISO 15118-2 (Update A)
Successful exploitation of this vulnerability could result in man-in-the-middle attacks.
first Oct 30, 2025 -
Medium max 6.3
Inductive Automation Ignition Software
Successful exploitation of this vulnerability could allow an attacker to execute malicious code with OS application service account permissions that the authenticated, privileged application user did not intend on running.
first Mar 12, 2026 -
Medium max 6.3
Siemens SINAMICS Drives
Siemens SINAMICS G220, SINAMICS S210, and SINAMICS S200 contains a privilege escalation vulnerability that could allow users to escalate their privileges. Siemens has released new versions for the affected products and recommends to update to the latest versi…
first Sep 9, 2025 -
Medium max 6.5ICSA-26-069-04 1 CVE
Ceragon Siklu MultiHaul and EtherHaul Series
Successful exploitation of this vulnerability could result in arbitrary file upload to the target equipment.
-
Medium max 6.5
IBM DOORS Next Generation multiple vulnerabilities
IBM Engineering Requirements Management DOORS contains multiple vulnerabilities that require authentication. These vulnerabilities include the ability to cause an application denial of service and JavaScript execution in the victim's browser through stored cr…
first Oct 22, 2025 -
Medium max 7.6
Hitachi Energy Relion REB500 Product
Hitachi Energy is aware of vulnerabilities that affect the Relion REB500 product versions listed in this document. Authenticated users with certain roles can exploit the vulnerabilities to access and modify the directory contents they are not authorized to do…
first Feb 24, 2026 -
Medium max 6.5
Hitachi Energy Relion 670/650/SAM600-IO Series (Update C)
Hitachi Energy is aware of the vulnerability CVE-2023-4518 that affects the Relion 670/650/SAM600-IO series that are listed below. An attacker successfully exploiting this vulnerability could cause operational disruptions of the devices.
first Nov 28, 2023 -
Medium max 6.0ICSA-26-057-09 6 CVEs
Yokogawa CENTUM VP R6, R7
Successful exploitation of these vulnerabilities could allow an attacker to terminate the software stack process, cause a denial-of-service condition, or execute arbitrary code.
-
Medium max 5.9
Schneider Electric EcoStruxure Foxboro DCS (Update A)
Schneider Electric is aware of a vulnerability disclosed by INTEL used in the EcoStruxure™ Foxboro DCS product formerly known as Foxboro Evo Process Automation System and I/A Series. The [EcoStruxure™ Foxboro DCS product](https://www.se.com/ww/en/product-rang…
first Dec 9, 2025 -
Medium max 5.3
IDEC Products (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to obtain user authentication information or disrupt communication.
first Sep 19, 2024 -
Medium max 6.3
Siemens Siveillance Video Management Servers
The Webhooks implementation of Siveillance Video Management Servers contains a vulnerability that could allow an authenticated remote attacker with read-only privileges to achieve full access to Webhooks API. Siemens has released new versions for the affected…
first Feb 10, 2026 -
Medium max 6.5ICSA-26-041-04 1 CVE
AVEVA PI to CONNECT Agent
Successful exploitation of this vulnerability could result in an unauthorized access to the proxy server.
-
Medium max 5.5ICSMA-26-041-01 1 CVE
ZOLL ePCR IOS Mobile Application
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to protected health information (PHI) or device telemetry.
-
Medium max 6.5
Hitachi Energy Relion 670/650 and SAM600-IO Series
Hitachi Energy is aware of a vulnerability that affects the Relion 670/650 and SAM600-IO series IED device versions that are listed in this document. An authenticated attacker successfully exploiting this vulnerability via FTP access can cause the device to r…
first Jun 24, 2025 -
Medium max 6.8ICSA-26-036-03 1 CVE
o6 Automation GmbH Open62541
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition and memory corruption.