4,105 results · Feed
-
Medium max 6.5ICSA-26-069-04 1 CVE
Ceragon Siklu MultiHaul and EtherHaul Series
Successful exploitation of this vulnerability could result in arbitrary file upload to the target equipment.
-
Critical max 5.9
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA (Update B)
Successful exploitation of these vulnerabilities could result in unauthorized access to information or to GENESIS64 and MC Works64 functionality, or the disabling of SQL Server in GENESIS64, ICONICS Suite, MC Works64, or GENESIS32.
first Jan 20, 2022 -
High max 7.6
Universal Boot Loader (U-Boot) (Update A)
Successful exploitation of this vulnerability could result in arbitrary code execution.
first Dec 9, 2025 -
High max 7.2
Johnson Controls PowerG, IQPanel and IQHub (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to read or write encrypted traffic or perform a replay attack.
first Dec 16, 2025 -
High max 7.8ICSA-26-064-01 1 CVE
Delta Electronics CNCSoft-G2
Successful exploitation of this vulnerability could result in an attacker achieving remote code execution on the device.
-
Medium max 6.5
IBM DOORS Next Generation multiple vulnerabilities
IBM Engineering Requirements Management DOORS contains multiple vulnerabilities that require authentication. These vulnerabilities include the ability to cause an application denial of service and JavaScript execution in the victim's browser through stored cr…
first Oct 22, 2025 -
High max 7.2
Hitachi Energy RTU500 Series Product (Update B)
Hitachi Energy is aware of the vulnerability CVE-2024-2617 in the RTU500 Web server component, that affects the RTU500 versions that are listed below. An attacker successfully exploiting this vulnerability could bypass secure update. Please refer to the Recom…
first Apr 30, 2024 -
Medium max 7.6
Hitachi Energy Relion REB500 Product
Hitachi Energy is aware of vulnerabilities that affect the Relion REB500 product versions listed in this document. Authenticated users with certain roles can exploit the vulnerabilities to access and modify the directory contents they are not authorized to do…
first Feb 24, 2026 -
High max 8.8ICSA-26-062-04 1 CVE
Portwell Engineering Toolkits
Successful exploitation of this vulnerability could allow a local attacker to escalate privileges or cause a denial-of-service condition.
-
Critical max 8.8ICSA-26-062-05 1 CVE
Labkotec LID-3300IP
Successful exploitation of this vulnerability could allow attackers to gain unauthorized control over system operations, leading to disruption of normal functionality and potential safety hazards.
-
Critical max 9.4ICSA-26-062-06 4 CVEs
Mobiliti e-mobi.hu
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-062-07 4 CVEs
ePower epower.ie
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-062-08 4 CVEs
Everon OCPP Backends
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Medium max 6.5
Hitachi Energy Relion 670/650/SAM600-IO Series (Update C)
Hitachi Energy is aware of the vulnerability CVE-2023-4518 that affects the Relion 670/650/SAM600-IO series that are listed below. An attacker successfully exploiting this vulnerability could cause operational disruptions of the devices.
first Nov 28, 2023 -
Critical max 8.8ICSA-26-057-01 6 CVEs
Johnson Controls, Inc. Frick Controls Quantum HD
Successful exploitation of these vulnerabilities can lead to pre-authentication remote code execution, information leak or denial of service.
-
High max 8.7ICSA-26-057-02 1 CVE
Pelco, Inc. Sarix Pro 3 Series IP Cameras
Successful exploitation of this vulnerability could allow attackers to gain unauthorized access to sensitive device data, bypass surveillance controls, and expose facilities to privacy breaches, operational risks, and regulatory compliance issues.
-
Critical max 9.4ICSA-26-057-03 4 CVEs
CloudCharge cloudcharge.se
Successful exploitation of these vulnerabilities could allow attackers to impersonate charging stations, hijack sessions, suppress or misroute legitimate traffic to cause large-scale denial of service, and manipulate data sent to the backend.
-
Critical max 9.4ICSA-26-057-04 4 CVEs
EV2GO ev2go.io
Successful exploitation of these vulnerabilities could allow attackers to impersonate charging stations, hijack sessions, suppress or misroute legitimate traffic to cause large-scale denial of service, and manipulate data sent to the backend.
-
Critical max 9.4ICSA-26-057-05 4 CVEs
Chargemap chargemap.com
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-057-07 4 CVEs
EV Energy ev.energy
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.4ICSA-26-057-08 4 CVEs
Mobility46 mobility46.se
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Medium max 6.0ICSA-26-057-09 6 CVEs
Yokogawa CENTUM VP R6, R7
Successful exploitation of these vulnerabilities could allow an attacker to terminate the software stack process, cause a denial-of-service condition, or execute arbitrary code.
-
Critical max 10.0ICSA-26-057-10 23 CVEs
Copeland XWEB and XWEB Pro
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, cause a denial-of-service condition, cause memory corruption, and execute arbitrary code.
-
High max 8.8
Schneider Electric EcoStruxure Power Operation (Update A)
Successful exploitation of these vulnerabilities could result in the loss of system functionality or unauthorized access to system functions.
first Jul 22, 2025 -
Critical max 9.8
Siemens Third-Party Components in SINEC OS
SINEC OS before V3.2 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Aug 12, 2025 -
Critical max 10.0
Siemens SINEC OS
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Aug 12, 2025 -
Critical max 10.0
iba Systems ibaPDA
Successful exploitation of this vulnerability could allow an attacker to perform unauthorized actions on the file system.
first Jan 27, 2026 -
Critical max 10.0
Siemens SINEC OS
SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Jan 28, 2026 -
Critical max 9.8
ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update C)
first Jul 26, 2022 -
High max 7.8
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)
Successful exploitation of this vulnerability could result in disclosure of confidential information, data tampering, or a denial-of-service condition.
first Oct 22, 2024 -
High max 7.0
Schneider Electric EcoStruxure Building Operation Workstation
Schneider Electric is aware of a vulnerability in EcoStruxure Building Operation Workstation and EcoStruxure Building Operation WebStation. [EcoStruxure Building Operation (EBO)](https://www.se.com/ww/en/product-range/62111-ecostruxure-building-operation-soft…
first Feb 10, 2026 -
Critical max 9.8ICSA-26-055-01 2 CVEs
InSAT MasterSCADA BUK-TS
Successful exploitation of these vulnerabilities may allow remote code execution.
-
Medium max 5.9
Schneider Electric EcoStruxure Foxboro DCS (Update A)
Schneider Electric is aware of a vulnerability disclosed by INTEL used in the EcoStruxure™ Foxboro DCS product formerly known as Foxboro Evo Process Automation System and I/A Series. The [EcoStruxure™ Foxboro DCS product](https://www.se.com/ww/en/product-rang…
first Dec 9, 2025 -
Critical max 9.1VA-26-082-01 4 CVEs
Census CSWeb multiple vulnerabilities
Census CSWeb allows a remote, authenticated attacker to perform actions such as path traversal, arbitrary file upload and stored XSS. An unauthenticated attacker could also send requests to configuration files in some deployments.
-
High max 8.1ICSA-26-050-01 2 CVEs
EnOcean SmartServer IoT
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute arbitrary code and bypass ASLR.
-
High max 8.7ICSA-26-050-02 1 CVE
Valmet DNA Engineering Web Tools
Successful exploitation of this vulnerability could allow an unauthenticated attacker to manipulate the web maintenance services URL to achieve arbitrary file read access.
-
Critical max 9.8ICSA-26-050-03 4 CVEs
Jinan USR IOT Technology Limited (PUSR) USR-W610
Successful exploitation of these vulnerabilities could result in authentication being disabled, a denial-of-service condition, or an attacker stealing valid user credentials, including administrator credentials.
-
High max 8.2ICSA-26-050-04 1 CVE
Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller
Successful exploitation of this vulnerability could result in an over- or under-odorization event.
-
Medium max 5.3
IDEC Products (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to obtain user authentication information or disrupt communication.
first Sep 19, 2024 -
High max 7.8
Siemens Simcenter Femap and Nastran
Siemens Simcenter Femap and Nastran is affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in NDB and XDB formats. If a user is tricked to open a malicious file with any of the affected products, this cou…
first Feb 10, 2026