900 results · Clear filters · Feed
-
Medium max 5.9
Hitachi Energy IEC 61850 MMS-Server (Update B)
Hitachi Energy is aware of a reported vulnerability in the IEC 61850 communication stack, that is used in the Relion® 670, 650 and SAM600-IO products versions listed in this document. A version is available that remediates the identified vulnerability. An att…
first Feb 14, 2023 -
Medium max 4.5
Hitachi Energy Relion 670, 650 and SAM600-IO Series
Hitachi Energy is aware of a report from Nozomi Networks Labs, concerning the vulnerability CVE-2022-3864 affecting the Relion 670/650/SAM600-IO series versions listed below. Recommended actions for each affected version are listed in the “Recommended Immedia…
first Feb 28, 2023 -
Medium max 6.5
Ubia Ubox (Update A)
Successful exploitation of this vulnerability could allow an attacker to remotely view camera feeds or modify settings.
first Nov 6, 2025 -
Medium max 6.5
Schneider Electric Zigbee Products
Schneider Electric is aware of multiple vulnerabilities with EmberZNet disclosed by Silicon Labs. Many vendors, including Schneider Electric, use Silicon Labs’ Zigbee processors in their offers. The following have denial of service vulnerabilities: Wiser iTRV…
first Jan 13, 2026 -
Medium max 6.1ICSA-26-022-02 2 CVEs
AutomationDirect CLICK Programmable Logic Controller
Successful exploitation of these vulnerabilities could allow an attacker to impersonate users, escalate privileges, gain unauthorized access to systems and services, and decrypt sensitive data.
-
Medium max 7.1ICSA-26-022-03 1 CVE
Rockwell Automation CompactLogix 5370
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Medium max 4.3
Siemens RUGGEDCOM ROS
Ruggedcom ROS devices contain a temporary denial of service vulnerability that could allow an attacker to crash and restart the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Dec 9, 2025 -
Medium max 6.7
Siemens SINEC Security Monitor
SINEC Security Monitor before V4.10.0 contains multiple vulnerabilities. Siemens has released a new version for SINEC Security Monitor and recommends to update to the latest version.
first Dec 9, 2025 -
Medium max 6.5
Siemens SCALANCE and RUGGEDCOM
Several Industrial Communication Devices based on SINEC OS before V3.2 contain multiple vulnerabilities that could allow an attacker to circumvent authorization checks and perform actions that exceed the permissions of the "guest" role. Siemens has released n…
first Jun 10, 2025 -
Medium max 5.8ICSA-26-013-03 4 CVEs
YoSmart YoLink Smart Hub
Successful exploitation of these vulnerabilities could allow an attacker to remotely control other users' smart home devices, intercept sensitive data, and hijack sessions.
-
Medium max 4.7VA-26-013-01 1 CVE
NSecKrnl driver terminates system processes with crafted IOCTL requests
NSecsoft 'NSecKrnl' is a Windows driver that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes by issuing crafted IOCTL requests to the driver.
-
Medium max 5.5VA-26-008-03 1 CVE
Ideagen DevonWay stored XSS
Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS.
-
Medium max 5.3ICSA-25-350-01 1 CVE
Güralp Systems Fortimus Series, Minimus Series, and Certimus Series
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Medium max 5.1ICSA-25-350-04 1 CVE
Mitsubishi Electric GT Designer3
Successful exploitation of this vulnerability could allow an attacker obtain plaintext credentials from the project file for GT Designer3, which could result in illegally operating GOT2000 and GOT1000 series devices.
-
Medium max 4.4VA-25-345-01 1 CVE
CISA Software Acquisition Guide Supplier Response Web Tool XSS
The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file…
-
Medium max 6.6ICSMA-25-345-01 1 CVE
Grassroots DICOM (GDCM)
Successful exploitation of this vulnerability could allow an attacker to craft a malicious DICOM file and, if opened, could crash the application resulting in a denial-of-service condition.
-
Medium max 4.3ICSA-25-345-06 2 CVEs
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server Before V3.2 SP4 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
-
Medium max 6.2ICSA-25-345-07 1 CVE
Siemens Building X - Security Manager Edge Controller
Building X - Security Manager Edge Controller (ACC-AP) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens is preparing fix versions and recommends sp…
-
Medium max 6.8ICSA-25-345-08 1 CVE
Siemens Energy Services
Energy Services from Siemens (previously known as Managed Applications and Services), sell solutions using Elspec G5 devices that allows a person with physical access to the device to reset the Admin password by inserting a USB drive (containing a publicly do…
-
Medium max 6.3ICSA-25-345-09 2 CVEs
Siemens Gridscale X Prepay
Gridscale X Prepay contains multiple vulnerabilities that could allow an attacker to enumerate valid user names and to bypass locked-out user sessions. Siemens has released a new version for Gridscale X Prepay and recommends to update to the latest version.
-
Medium max 5.5ICSA-25-338-01 1 CVE
Mitsubishi Electric GX Works2
Successful exploitation of this vulnerability could open project files protected by user authentication using disclosed credential information, and obtain or modify project information.
-
Medium max 7.1ICSA-25-338-04 1 CVE
Johnson Controls iSTAR
Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.
-
Medium max 7.2ICSA-25-338-05 2 CVEs
Sunbird DCIM dcTrack and Power IQ
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access or steal credentials.
-
Medium max 6.8ICSA-25-324-02 2 CVEs
ICAM365 CCTV Camera Multiple Models
Successful exploitation of these vulnerabilities could result in unauthorized exposure of camera video streams and camera configuration data.
-
Medium max 6.2ICSA-25-324-03 1 CVE
Opto 22 GRV-EPIC and groov RIO
Successful exploitation of this vulnerability could result in the execution of arbitrary shell commands with root privileges.
-
Medium max 5.3ICSA-25-317-01 1 CVE
Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the product.
-
Medium max 6.9ICSA-25-317-02 1 CVE
AVEVA Application Server IDE
Successful exploitation of this vulnerability could allow an attacker to tamper with help files and inject cross-site scripting (XSS) code.
-
Medium max 5.5ICSA-25-317-11 2 CVEs
Siemens SICAM P850 family and SICAM P855 family
Successful exploitation of these vulnerabilities could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user.
-
Medium max 6.3
Siemens SICAM GridEdge
SICAM GridEdge contains an improper access control vulnerability. This could allow persons with local access to the host system to inject an SSH key. Siemens has released a new version for SICAM GridEdge (Classic) and recommends to update to the latest versio…
first Jul 12, 2022 -
Medium max 5.3
Siemens SIPROTEC 5 Devices
Devices of the SIPROTEC 5 family contain a vulnerability related to secure client-initiated renegotiation. This could allow an unauthenticated attacker to cause a denial of service condition for the duration of the attack. Siemens has released new versions fo…
first Dec 13, 2022 -
Medium max 5.9
Siemens SIPROTEC
The SIPROTEC 5 devices are supporting weak encryption. This could allow an unauthorized attacker in a man-in-the-middle position to read any data passed over the connection between legitimate clients and the affected device. Siemens has released new versions …
first Jul 9, 2024 -
Medium max 6.5
Siemens SIPROTEC 5 Products
Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for the affec…
first Jan 14, 2025 -
Medium max 6.8
Siemens SIPROTEC 5
Affected SIPROTEC 5 devices contain a development shell which is accessible via a physical interface which is not properly restricted. This could allow an unauthenticated attacker with physical access to an affected device to execute arbitrary commands on the…
first Feb 11, 2025 -
Medium max 6.0
Hitachi Energy Asset Suite (Update A)
Hitachi Energy is aware of a vulnerability that affects the Asset Suite product versions listed in this document. An authenticated user successfully exploiting this vulnerability can manipulate or forge malicious entries into the log file causing integrity im…
first Sep 30, 2025 -
Medium max 6.8
Delta Electronics DIAScreen
Successful exploitation of these vulnerabilities could allow an attacker to write data outside of the allocated memory buffer.
first Oct 7, 2025 -
Medium max 5.3VA-25-296-01 1 CVE
Frontier Airlines website publicly available email address validation
The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks.
-
Medium max 5.4
Schneider Electric Modicon Controllers (Update A)
Successful exploitation of this vulnerability could allow an attacker to cause a victim's browser to run arbitrary JavaScript when visiting a page containing injected payload.
first Dec 19, 2024 -
Medium max 4.7
Siemens SIMATIC S7-1500 and S7-1200 CPUs
Several SIMATIC S7-1500 and S7-1200 CPU versions are affected by an open redirect vulnerability that could allow an attacker to make the web server of affected devices redirect a legitimate user to an attacker-chosen URL. For a successful attack, the legitima…
first Oct 8, 2024 -
Medium max 5.3
Siemens SIMATIC S7-1500 CPUs
Several SIMATIC S7-1500 CPU versions are affected by an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain knowledge about actual and configured maximum cycle times and communication load of the CPU. Siemens has re…
first Oct 8, 2024 -
Medium max 6.2
Siemens SiPass
SiPass integrated ACC (Advanced Central Controller) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens recommends specific countermeasures for produc…
first May 23, 2025