4,105 results · Feed
-
High max 7.5
Mitsubishi Electric MELSEC iQ-F Series (Update A)
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition in Ethernet communication on the module by sending specially crafted SLMP packets. A system reset of the module is required for recovery.
first Nov 19, 2024 -
Medium max 5.9
Philips MRI 1.5T and 3T (Update A)
Successful exploitation of these vulnerabilities may allow an attacker with operator level access to view system configuration, view system files, and export data (including patient data) to an untrusted environment.
first Nov 24, 2021 -
Critical max 10.0
Honeywell IQ4 Series BMS Controller (Update A)
Successful exploitation of this vulnerability could allow an unauthorized attacker to access controller management settings, control components, disclose information, or cause a denial-of-service condition.
first Mar 10, 2026 -
Critical max 10.0
WAGO GmbH & Co. KG Industrial Managed Switches
A vulnerability has been found affecting the Managed Switches of WAGO. An unauthenticated attacker can fully compromise the device via an undocumented function.
first Mar 23, 2026 -
Critical max 9.3ICSA-26-085-03 1 CVE
PTC Windchill Product Lifecycle Management
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.
-
Critical max 9.1
Multiple IP-KVM Vulnerabilities
Multiple KVM products (GL-iNet GL-RM1, Angeet ES3 KVM, Sipeed NanoKVM, and JetKVM) are affected by multiple vulnerabilities. The most severe of these vulnerabilities could allow a remote, unauthenticated attacker to take complete control of a vulnerable produ…
first Mar 17, 2026 -
Medium max 7.0
Schneider Electric EcoStruxure Foxboro DCS
Schneider Electric is aware of a vulnerability in its EcoStruxure Foxboro DCS Control Software on Foxboro DCS workstations and servers. Control Core Services and all runtime software, like FCPs, FDCs, and FBMs, are not affected. The EcoStruxure Foxboro DCS ([…
first Mar 10, 2026 -
Critical max 9.3ICSA-26-083-01 1 CVE
Pharos Controls Mosaic Show Controller
Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary commands with root privileges.
-
Critical max 10.0
"Schneider Electric Plant iT/Brewmaxx"
Schneider Electric is aware of multiple vulnerabilities in Redis open-source database, affecting its Plant iT product. The [Plant iT/Brewmaxx](https://www.proleit.com/plant-it/) product is an object-oriented and PLC-based process control system with integrate…
first Jan 13, 2026 -
High max 7.5ICSMA-26-083-01 1 CVE
Grassroots DICOM (GDCM)
Successful exploitation of this vulnerability could allow an attacker to send a specially crafted file, and when parsed, could result in a denial-of-service condition.
-
Critical max 9.8VA-26-077-01 5 CVEs
OPEXUS eComplaint and eCase multiple vulnerabilities
OPEXUS eComplaint and eCase contain multiple vulnerabilities. In the worst case, an unauthenticated attacker could take over any account with a known username.
-
Medium max 6.9
Schneider Electric Modicon M241, M251, and M262
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251, and M262 products. The Modicon Controllers M241 / M251 / M262 are Programmable Logic Controllers for performancedemanding applications. Failure to apply the remediation pr…
first Mar 10, 2026 -
Medium max 5.1
Schneider Electric Modicon Controllers M241, M251, M258, and LMC058
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251, M258, and LMC058 products. The [Modicon Controllers M241 / M251 / M258](https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/) and [Modicon LMC0…
first Mar 10, 2026 -
High max 7.2
Schneider Electric EcoStruxure Automation Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Automation Expert product. The EcoStruxure™ Automation Expert product is plant automation software designed for digital control systems in discrete, hybrid and continuous industrial processes.…
first Mar 10, 2026 -
High max 8.5
Schneider Electric EcoStruxure PME and EPO
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensi…
first Mar 10, 2026 -
Critical max 9.1ICSA-26-078-08 3 CVEs
Automated Logic WebCTRL Premium Server
Successful exploitation of these vulnerabilities could allow an attacker to read, intercept, or modify communications.
-
Critical max 9.4ICSA-26-078-06 4 CVEs
CTEK Chargeportal
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-078-07 4 CVEs
IGL-Technologies eParking.fi
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Medium max 5.9
Hitachi Energy Relion 670, 650, SAM600-IO Series (Update A)
Hitachi Energy is aware of the vulnerability CVE-2022-4304 in the OSS component OpenSSL, that affects the Relion 670, 650, SAM600-IO versions that are listed below. An attacker successfully exploiting this vulnerability could send trial messages to the server…
first Jun 27, 2023 -
High max 8.4
Schneider Electric EcoStruxure Power Build Rapsody (Update A)
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Build Rapsody software. The [EcoStruxure Power Build Rapsody](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309) is used to enter or import the singl…
first Jan 13, 2026 -
Critical max 9.3
Schneider Electric SCADAPack and RemoteConnect
Schneider Electric is aware of a vulnerability in its SCADAPack™ x70 RTU products. The SCADAPack™ 47xi, SCADAPack™ 47x and SCADAPack™ 57x product are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to a…
first Feb 10, 2026 -
Critical max 9.8
CODESYS in Festo Automation Suite
Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwar…
first Feb 26, 2026 -
High max 7.4
Siemens SICAM SIAPP SDK
The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of service within the SIAPP, corruption of SIAPP data, or exploit the si…
first Mar 10, 2026 -
High max 7.5
Schneider Electric EcoStruxure Data Center Expert
Schneider Electric is aware of a hard-coded credentials vulnerability in its EcoStruxure IT Data Center Expert (DCE) product that requires administrator credentials and enabling a feature (SOCKS Proxy) that is off by default. The EcoStruxure IT Data Center Ex…
first Mar 10, 2026 -
Medium max 6.3
International Standards Organization ISO 15118-2 (Update A)
Successful exploitation of this vulnerability could result in man-in-the-middle attacks.
first Oct 30, 2025 -
Medium max 6.3
Inductive Automation Ignition Software
Successful exploitation of this vulnerability could allow an attacker to execute malicious code with OS application service account permissions that the authenticated, privileged application user did not intend on running.
first Mar 12, 2026 -
Critical max 9.9
Siemens SINEC Security Monitor
SINEC Security Monitor before V4.9.0 contains multiple vulnerabilities. Siemens has released a new version for SINEC Security Monitor and recommends to update to the latest version.
first Oct 8, 2024 -
Critical max 9.6
Siemens RUGGEDCOM APE1808
Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
first Feb 11, 2025 -
High max 8.4
Siemens RUGGEDCOM APE1808
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where f…
first Jun 10, 2025 -
High max 8.2
Siemens Mendix SAML Module
Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems…
first Aug 14, 2025 -
Medium max 6.3
Siemens SINAMICS Drives
Siemens SINAMICS G220, SINAMICS S210, and SINAMICS S200 contains a privilege escalation vulnerability that could allow users to escalate their privileges. Siemens has released new versions for the affected products and recommends to update to the latest versi…
first Sep 9, 2025 -
High max 7.4
Siemens IAM Client
Multiple Siemens products are affected by improper certificate validation in IAM Client. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for the affected products and recommends to up…
first Dec 9, 2025 -
High max 8.1
Siemens Advanced Licensing (SALT) Toolkit
Multiple Siemens products are affected by improper certificate validation in Siemens Advanced Licensing (SALT) Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for several aff…
first Dec 9, 2025 -
Critical max 10.0
Siemens COMOS
COMOS is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code or cause denial of service condition, data infiltration or perform access control violations. Siemens has released new versions for the affected products and …
first Dec 9, 2025 -
High max 7.8
Siemens NX
Siemens NX is affected by missing data validation vulnerability that could allow an attacker with local access on a compromised system to interfere with internal data during the PDF export process that could potentially lead to arbitrary code execution. Sieme…
first Feb 10, 2026 -
Critical max 9.8
Honeywell HIB2PI CCTV Camera (Update B)
Successful exploitation of this vulnerability could lead to account takeover and unauthorized access to camera feeds.
first Feb 17, 2026 -
High max 9.8
Siemens SIDIS Prime
SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.
first Mar 10, 2026 -
Low max 2.6
Siemens Heliox EV Chargers
Heliox EV Chargers listed below contain improper access control vulnerability that could allow an attacker to reach unauthorized services via the charging cable. Siemens has released new versions for the affected products and recommends to update to the lates…
first Mar 10, 2026 -
High max 9.2ICSA-26-071-01 5 CVEs
Trane Tracer SC, Tracer SC+, and Tracer Concierge
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, execute arbitrary commands, or perform a denial-of-service on the product.
-
Critical max 9.8ICSA-26-069-01 3 CVEs
Apeman Cameras
Successful exploitation of these vulnerabilities could allow an attacker to take control of the device or view camera feeds.