4,105 results · Feed
-
Critical max 9.8ICSMA-26-146-01 1 CVE
Eppendorf BioFlo 320
Successful exploitation of this vulnerability could allow an attacker to gain full access to functionality and data with the bioreactor.
-
Medium max 5.9
Hitachi Energy GMS600
Hitachi Energy is aware of the vulnerability, CVE-2022-4304 in the OSS component OpenSSL, that affects the GMS600 versions that are listed below. An attacker successfully exploiting this vulnerability could send trial messages to the server and record the tim…
first Jun 27, 2023 -
High max 7.8
ABB Automation Builder (Update A)
ABB is aware of vulnerabilities in the product versions listed as affected in the following section. An attacker who successfully exploited this vulnerability could overrule the Automation Builder’s user management. Workarounds to close the vulnerabilities ar…
first Apr 30, 2025 -
Medium max 6.1
ABB Terra AC Wallbox
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a…
first Sep 16, 2025 -
Medium max 6.1
ABB B&R Automation Runtime
An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could take over a remote session or ex…
first Oct 7, 2025 -
High max 7.0
Schneider Electric EcoStruxure Process Expert (Update A)
Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire infrastructu…
first Jan 13, 2026 -
High max 8.3
ABB B&R PCs
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS…
first Jan 29, 2026 -
Critical max 7.5
ABB B&R Automation Studio
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products,…
first Feb 18, 2026 -
Medium max 6.8
Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01)
Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 lo…
first May 12, 2026 -
Critical max 9.8VA-26-138-01 1 CVE
Tyler Technologies Tyler Identity Default Administrative Credentials
Tyler Identity provider (TID-L) uses a documented, default administrative IDP credential. Users are not required to change the credentials before deployment.
-
Medium max 5.8VA-26-138-02 1 CVE
Technitium DNS Amplification
Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic.
-
Medium max 5.7
ABB 800xA Base (Update A)
ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause services to crash and restart by sending specifically crafted messages. The vulnerability only af…
first Jun 5, 2024 -
High max 7.1
ABB CoreSense HM and CoreSense M10
An update is available that resolves vulnerability in the product versions listed as affected in this advisory. A path traversal vulnerability in these products can allow unauthenticated users to gain access to restricted directories. Exploiting this vulnerab…
first Apr 16, 2025 -
Critical max 8.8ICSA-26-139-03 4 CVEs
ScadaBR
Successful exploitation of these vulnerabilities could allow an attacker to perform unauthenticated remote code execution.
-
Medium max 5.3ICSA-26-139-05 1 CVE
Kieback & Peter DDC Building Controllers
Successful exploitation of this vulnerability could allow an attacker to take control of the victim's browser.
-
Critical max 9.1ICSA-26-139-04 1 CVE
ZKTeco CCTV Cameras
Successful exploitation of this vulnerability could result in information disclosure, including capture of camera account credentials.
-
Critical max 10.0
Siemens SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
first Apr 9, 2024 -
Low max 3.7
Siemens SCALANCE M-800 and SC-600 Families
SCALANCE M-800 and SC-600 families are affected by improper input validation in the OpenVPN authentication. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Mar 11, 2025 -
Critical max 9.8
Siemens SIMATIC S7-1500 CPU family
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends countermeasures for pro…
first Jun 10, 2025 -
High max 7.5
ABB RMC-100 (Update A)
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT…
first Jul 3, 2025 -
Medium max 5.3
Siemens SIPROTEC 5
A sensitive data exposure vulnerability in SIPROTEC 5 can allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access. Siemens is preparing fix versions and recommend…
first Jul 8, 2025 -
Critical max 10.0
Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain an authorization bypass vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for the affected products …
first Jan 13, 2026 -
Critical max 9.4
Siemens RUGGEDCOM APE1808 Devices
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
first Mar 10, 2026 -
Critical max 9.6
Siemens SIMATIC
SIMATIC S7-1500 devices contain a vulnerability that could allow an attacker to inject code by tricking a legitimate user into importing a specially crafted trace file in the web interface. Siemens has released new versions for several affected products and r…
first Mar 10, 2026 -
High max 4.8
Siemens gWAP
Siemens gPROMS Web Applications Publisher (gWAP) is affected by a remote code execution vulnerability introduced through a third-party component, namely the Axios HTTP client library. The vulnerability stems from a specific "Gadget" attack chain that allows p…
first May 12, 2026 -
Medium max 6.8
Siemens Ruggedcom Rox
Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remote attacker to read arbitrary files with root privileges from the underlying operating system's filesystem. Siemens has released new versions for the affecte…
first May 12, 2026 -
High max 7.8
Siemens Solid Edge
Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR format. This could allow an attacker to crash the application or execute arbitrary code. Siemen…
first May 12, 2026 -
High max 7.5
Siemens Teamcenter
Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first May 12, 2026 -
High max 7.5
Siemens Industrial Devices
Multiple industrial devices contain a vulnerability that could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing furt…
first May 12, 2026 -
High max 7.7
Siemens SIMATIC
SIMATIC HMI Unified Comfort Panels before V21.0 are affected by a vulnerability that allows an unauthenticated attacker to access the web browser via the help link. This vulnerability allows an attacker to access the web browser through the Control Panel if i…
first May 12, 2026 -
Critical max 9.1
Siemens Siemens ROS#
ROS# contains a ROS service file_server, that before version 2.2.2 contains a path traversal vulnerability which could allow an attacker to access, i.e. read and write, arbitrary files, which are accessible with the user rights of the user that runs the servi…
first May 12, 2026 -
High max 9.3
Siemens Opcenter RDnL
Opcenter RDnL is affected by missing authentication in critical function in ‘ActiveMQ Artemis’. An unauthenticated attacker within the adjacent network could use the Core protocol to force a target broker to establish an outbound Core federation connection to…
first May 12, 2026 -
Critical max 9.8
Siemens SIMATIC
SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
first May 12, 2026 -
High max 7.5
Siemens Ruggedcom Rox
Ruggedcom Rox contains an input validation vulnerability in the feature key installation process that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new …
first May 12, 2026 -
Critical max 9.1
Siemens Ruggedcom Rox
Ruggedcom Rox contains an input validation vulnerability in the Scheduler functionality that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new versions …
first May 12, 2026 -
Medium max 5.3
Siemens SIPROTEC 5
The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This could facilitate a brute-force attack against a valid session identifier which could allow an unauthenticated remote attacker to hijack a valid user session. T…
first May 12, 2026 -
Critical max 9.1
Siemens SENTRON 7KT PAC1261 Data Manager
The web server in SENTRON 7KT PAC1261 Data Manager Before V2.1.0 contains a request smuggling vulnerability in the Go Project's net/http package that could allow an attacker to retrieve authorization tokens that can be used to gain administrative control over…
first May 12, 2026 -
Critical max 9.1
Siemens SIMATIC S7 PLC Web Server
SIMATIC S7 PLCs contain multiple vulnerabilities in the web server that could allow an attacker to perform cross-site scripting attacks. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens i…
first May 12, 2026 -
Critical max 9.1
Siemens Ruggedcom Rox
Ruggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first May 12, 2026 -
Critical max 9.8ICSA-26-134-17 1 CVE
Universal Robots Polyscope 5
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code.