4,105 results · Feed
-
High max 7.8ICSA-26-048-02 1 CVE
Delta Electronics ASDA-Soft
Successful exploitation of this vulnerability may allow an attacker to write arbitrary data beyond the bounds of a stack-allocated buffer, leading to the corruption of a structured exception handler (SEH).
-
High max 4.6ICSA-26-048-03 2 CVEs
GE Vernova Enervista UR Setup
Successful exploitation of these vulnerabilities may allow code execution with elevated privileges.
-
High
Siemens Automation License Manager Uncontrolled Resource Consumption
A vulnerability was identified in the Automation License Manager software before V5.2 that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial of service preventing legitimate users from us…
first Dec 12, 2012 -
High max 9.8
Siemens SiPass Integrated
SiPass integrated contains multiple vulnerabilities that could allow an unauthenticated remote attacker to exploit user accounts, manipulate data, impersonate users, or achieve arbitrary code execution on the SiPass integrated server. Siemens has released a n…
first Oct 14, 2025 -
High max 8.8
Hitachi Energy SuprOS
Hitachi Energy is aware of a vulnerability that affects the SuprOS product versions listed in this document. An attacker successfully exploiting this vulnerability can cause confidentiality, integrity and availability impacts. Please refer to the Recommended …
first Jan 27, 2026 -
High max 7.6
Siemens Polarion
Polarion before V2506 contains a vulnerability that could allow authenticated remote attackers to conduct cross-site scripting attacks. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Feb 10, 2026 -
High max 8.8
Siemens Desigo CC Product Family and SENTRON Powermanager
Versions V6.0 through V8 QU1 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Sys…
first Feb 10, 2026 -
High max 7.8
Siemens Solid Edge
Solid Edge uses PS/IGES Parasolid Translator Component that contains an out of bounds read that could be triggered when the application reads files in IGS file formats. If a user is tricked to open a malicious file with any of the affected products, this coul…
first Feb 10, 2026 -
Medium max 6.3
Siemens Siveillance Video Management Servers
The Webhooks implementation of Siveillance Video Management Servers contains a vulnerability that could allow an authenticated remote attacker with read-only privileges to achieve full access to Webhooks API. Siemens has released new versions for the affected…
first Feb 10, 2026 -
Critical max 9.8ICSA-26-043-10 1 CVE
Airleader Master
Successful exploitation of this vulnerability could allow an attacker to obtain remote code execution.
-
High max 8.7
TP-Link Systems Inc. VIGI Series IP Camera
Successful exploitation of this vulnerability could result in unauthorized users gaining administrative access to affected closed circuit television cameras.
first Feb 5, 2026 -
High max 8.8ICSA-26-041-01 14 CVEs
Yokogawa FAST/TOOLS
Successful exploitation of these vulnerabilities could allow an attacker to redirected users to malicious sites, decrypt communications, perform a man-in-the-middle (MITM) attack, execute malicious scripts, steal files, and perform other various attacks.
-
Critical max 9.8ICSA-26-041-02 2 CVEs
ZLAN Information Technology Co. ZLAN5143D
Successful exploitation of these vulnerabilities could result in an attacker bypassing authentication, or resetting the device password.
-
High max 7.5ICSA-26-041-03 1 CVE
AVEVA PI Data Archive
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
Medium max 6.5ICSA-26-041-04 1 CVE
AVEVA PI to CONNECT Agent
Successful exploitation of this vulnerability could result in an unauthorized access to the proxy server.
-
Medium max 5.5ICSMA-26-041-01 1 CVE
ZOLL ePCR IOS Mobile Application
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to protected health information (PHI) or device telemetry.
-
Medium max 6.5
Hitachi Energy Relion 670/650 and SAM600-IO Series
Hitachi Energy is aware of a vulnerability that affects the Relion 670/650 and SAM600-IO series IED device versions that are listed in this document. An authenticated attacker successfully exploiting this vulnerability via FTP access can cause the device to r…
first Jun 24, 2025 -
High max 7.8
Mitsubishi Electric MELSOFT Update Manager (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, disclose information, tamper with information, or cause a denial-of-service (DoS) condition.
first Jul 3, 2025 -
Critical max 9.0
Hitachi Energy XMC20
Hitachi Energy is aware of a vulnerability that affects XMC20 product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for the…
first Jan 27, 2026 -
Critical max 9.0
Hitachi Energy FOX61x
Hitachi Energy is aware of a vulnerability that affects FOX61x product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for th…
first Jan 27, 2026 -
Critical max 9.8
KiloView Encoder Series (Update A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to create or delete administrator accounts, granting full administrative control.
first Jan 29, 2026 -
Critical max 8.8ICSA-26-036-02 1 CVE
Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability may allow an attacker to read device data or part of a control program from the affected product, write device data in the affected product, or cause a denial-of-service condition on the affected product.
-
Medium max 6.8ICSA-26-036-03 1 CVE
o6 Automation GmbH Open62541
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition and memory corruption.
-
Critical max 9.3ICSA-26-036-04 9 CVEs
Ilevia EVE X1 Server
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary shell commands and the disclosure of sensitive system information.
-
Critical max 9.4
Multiple India-based CCTV Cameras (Update A)**
Successful exploitation of this vulnerability could result in information disclosure, including capture of camera account credentials.
first Dec 9, 2025 -
Medium max 5.9
Hitachi Energy IEC 61850 MMS-Server (Update B)
Hitachi Energy is aware of a reported vulnerability in the IEC 61850 communication stack, that is used in the Relion® 670, 650 and SAM600-IO products versions listed in this document. A version is available that remediates the identified vulnerability. An att…
first Feb 14, 2023 -
Medium max 4.5
Hitachi Energy Relion 670, 650 and SAM600-IO Series
Hitachi Energy is aware of a report from Nozomi Networks Labs, concerning the vulnerability CVE-2022-3864 affecting the Relion 670/650/SAM600-IO series versions listed below. Recommended actions for each affected version are listed in the “Recommended Immedia…
first Feb 28, 2023 -
Medium max 6.5
Ubia Ubox (Update A)
Successful exploitation of this vulnerability could allow an attacker to remotely view camera feeds or modify settings.
first Nov 6, 2025 -
High max 8.8ICSA-26-034-01 1 CVE
Mitsubishi Electric FREQSHIP-mini for Windows
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to, modify, delete, or destroy information stored on the system where the affected product is installed, or cause a denial-of-service condition on the affected s…
-
Critical max 9.3ICSA-26-034-02 1 CVE
*Avation Light Engine Pro *
Successful exploitation of this vulnerability could allow an attacker to take full control of the device.
-
Critical max 9.1ICSA-26-034-03 1 CVE
RISS SRL MOMA Seismic Station
Successful exploitation of this vulnerability could result in an unauthenticated attacker creating a denial-of-service condition.
-
Critical max 10.0ICSA-26-034-04 1 CVE
Synectix LAN 232 TRIO
Successful exploitation of this vulnerability could result in an unauthenticated attacker modifying critical device settings or factory resetting the device.
-
Critical max 9.8
Schneider Electric Wiser Home Controller WHC-5918A
Schneider Electric is aware of a vulnerability in its Wiser Home Controller WHC-5918A product. The Wiser Home Controller WHC-5918A, a C-Bus based home automation controller, was discontinued on December 31, 2015. Failure to apply the mitigations provided belo…
first Jul 9, 2024 -
High max 7.8
Schneider Electric RemoteConnect and SCADAPack x70 Utilities (Update A)
Schneider Electric is aware of a vulnerability in its RemoteConnect and SCADAPack™ x70 Utilities software product. The RemoteConnect and SCADAPack™ x70 Utilities https://www.se.com/ww/en/product-category/6000-telemetry-and-remote-scada-systems/ product is a c…
first Jan 14, 2025 -
High max 8.4
BrightSign Players (Update A)
Successful exploitation of these vulnerabilities could allow privilege escalation on the device, easily-guessable passwords, or arbitrary code to be executed on the underlying operating system.
first May 6, 2025 -
High
Mitsubishi Electric CNC Series (Update B)
Successful exploitation of this vulnerability could allow a local attacker to execute malicious code by getting setup-launcher to load a malicious DLL.
first Jul 24, 2025 -
High max 8.7ICSA-26-029-02 9 CVEs
Rockwell Automation ArmorStart LT
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
-
High max 8.7ICSA-26-029-03 1 CVE
Rockwell Automation ControlLogix
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Medium max 6.5
Schneider Electric Zigbee Products
Schneider Electric is aware of multiple vulnerabilities with EmberZNet disclosed by Silicon Labs. Many vendors, including Schneider Electric, use Silicon Labs’ Zigbee processors in their offers. The following have denial of service vulnerabilities: Wiser iTRV…
first Jan 13, 2026 -
Critical max 9.8
Festo Didactic SE MES PC
MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. …
first Feb 27, 2024