4,105 results · Feed
-
Critical max 9.8
Schneider Electric EcoStruxure Foxboro DCS Advisor
Schneider Electric is aware of a vulnerability disclosed by Microsoft in the Microsoft Windows Server Update Services (WSUS) used in the EcoStruxure™ Foxboro DCS Advisor services. The EcoStruxure™ Foxboro DCS Advisor, an optional component of the [EcoStruxure…
first Dec 9, 2025 -
High max 7.5
Siemens Interniche IP-Stack
Multiple Industrial products are affected by a vulnerability in the Interniche IP-Stack. The affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthentic…
first Dec 9, 2025 -
High max 7.8ICSA-25-352-03 9 CVEs
National Instruments LabView
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.
-
High max 8.2ICSA-25-352-04 1 CVE
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electrics Products
Successful exploitation of this vulnerability could result in denial-of-service (DoS), information tampering, and information disclosure.
-
High max 8.8ICSA-25-352-06 5 CVEs
Advantech WebAccess/SCADA
Successful exploitation of these vulnerabilities could allow an authenticated attacker to read or modify a remote database.
-
High max 8.7ICSA-25-352-07 2 CVEs
Rockwell Automation Micro820, Micro850, Micro870
Successful exploitation of these vulnerabilities could result in a denial-of-service condition.
-
High max 8.8VA-25-352-01 5 CVEs
BullWall Ransomware Containment and Server Intrusion Protection multiple vulnerabilities
BullWall Ransomware Containment and Server Intrusion Protection are products used for ransomware containment. Multiple vulnerabilities were reported that when used individually or in conjunction could allow a remote attacker with valid credentials to log in t…
-
High max 9.4
Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to modify firmware and access the space that is protected by the device.
first Aug 12, 2025 -
High max 7.8
Fuji Electric Monitouch V-SFT-6 (Update A)
Successful exploitation of these vulnerabilities could crash the accessed device; a buffer overflow condition may allow remote code execution.
first Nov 4, 2025 -
Medium max 5.3ICSA-25-350-01 1 CVE
Güralp Systems Fortimus Series, Minimus Series, and Certimus Series
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Critical max 9.0ICSA-25-350-03 1 CVE
Hitachi Energy AFS, AFR and AFF Series
Successful exploitation of this vulnerability could compromise the integrity of the product data and disrupt its availability.
-
Medium max 5.1ICSA-25-350-04 1 CVE
Mitsubishi Electric GT Designer3
Successful exploitation of this vulnerability could allow an attacker obtain plaintext credentials from the project file for GT Designer3, which could result in illegally operating GOT2000 and GOT1000 series devices.
-
Medium max 4.4VA-25-345-01 1 CVE
CISA Software Acquisition Guide Supplier Response Web Tool XSS
The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file…
-
High max 8.7ICSA-25-345-01 2 CVEs
Johnson Controls iSTAR
Successful exploitation of these vulnerabilities could result in unauthorized access to the device.
-
High max 8.7ICSA-25-345-02 1 CVE
Johnson Controls iSTAR Ultra
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.
-
Medium max 6.6ICSMA-25-345-01 1 CVE
Grassroots DICOM (GDCM)
Successful exploitation of this vulnerability could allow an attacker to craft a malicious DICOM file and, if opened, could crash the application resulting in a denial-of-service condition.
-
High max 7.8ICSMA-25-345-02 1 CVE
Varex Imaging Panoramic Dental Imaging Software
Successful exploitation of this vulnerability could allow a standard user to obtain NT Authority/SYSTEM privileges.
-
High max 7.8VA-25-343-01 1 CVE
Windscribe for Linux 'changeMTU' local privilege escalation
A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscrib…
-
High max 8.2
Siemens Third-Party Component in SICAM and SITIPE Products
Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of service condition by sending specially crafted MMS messa…
first Sep 10, 2024 -
High max 7.3
Siemens Engineering Platforms
Affected products contain a local arbitrary code execution vulnerability that could allow an attacker to perform actions against the operation system of that environment. Siemens has released new versions for several affected products and recommends to update…
first Dec 10, 2024 -
High max 7.8
Siemens SIMATIC S7-PLCSIM
Affected products do not properly sanitize user-controllable input when parsing project files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several aff…
first Aug 12, 2025 -
Medium max 4.3ICSA-25-345-06 2 CVEs
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server Before V3.2 SP4 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
-
Medium max 6.2ICSA-25-345-07 1 CVE
Siemens Building X - Security Manager Edge Controller
Building X - Security Manager Edge Controller (ACC-AP) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens is preparing fix versions and recommends sp…
-
Medium max 6.8ICSA-25-345-08 1 CVE
Siemens Energy Services
Energy Services from Siemens (previously known as Managed Applications and Services), sell solutions using Elspec G5 devices that allows a person with physical access to the device to reset the Admin password by inserting a USB drive (containing a publicly do…
-
Medium max 6.3ICSA-25-345-09 2 CVEs
Siemens Gridscale X Prepay
Gridscale X Prepay contains multiple vulnerabilities that could allow an attacker to enumerate valid user names and to bypass locked-out user sessions. Siemens has released a new version for Gridscale X Prepay and recommends to update to the latest version.
-
High max 8.8ICSA-26-015-11 6 CVEs
Siemens RUGGEDCOM ROX II
Devices based on RUGGEDCOM ROX before V2.17 contain multiple high severity vulnerabilities. Siemens has released a new version for RUGGEDCOM ROX II family and recommends to update to the latest version.
-
High max 8.3ICSA-26-015-12 5 CVEs
Siemens SIMATIC CN 4100
SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
-
High max 9.8
Consilium Safety CS5000 Fire Panel (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain high-level access to and remotely operate the device, potentially putting it into a non-functional state.
first May 29, 2025 -
High
Johnson Controls FX Server, FX80 and FX90 (Update A)
Successful exploitation of this vulnerability could allow an attacker to compromise the device's configuration files.
first Aug 7, 2025 -
Medium max 5.5ICSA-25-338-01 1 CVE
Mitsubishi Electric GX Works2
Successful exploitation of this vulnerability could open project files protected by user authentication using disclosed credential information, and obtain or modify project information.
-
High max 7.5ICSA-25-338-02 1 CVE
MAXHUB Pivot
Successful exploitation of this vulnerability could allow an attacker to request a password reset and gain unauthorized access to the account.
-
Critical max 6.5ICSA-25-338-03 1 CVE
Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.
-
Medium max 7.1ICSA-25-338-04 1 CVE
Johnson Controls iSTAR
Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.
-
Medium max 7.2ICSA-25-338-05 2 CVEs
Sunbird DCIM dcTrack and Power IQ
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access or steal credentials.
-
High max 8.3ICSA-25-338-06 1 CVE
SolisCloud Monitoring Platform
Successful exploitation of this vulnerability could allow an attacker to access sensitive information by manipulating API requests.
-
High max 7.5ICSA-25-338-07 1 CVE
Advantech iView
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information, modify, or delete data.
-
High max 7.5
Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series (Update C)
Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to connect to the module via FTP and bypass authentication to log in.
first Jun 6, 2023 -
Critical max 9.3ICSA-25-336-01 1 CVE
Industrial Video & Control Longwatch
Successful exploitation of this vulnerability could allow an unauthenticated attacker to gain remote code execution with elevated privileges.
-
Critical max 9.3ICSA-25-336-02 1 CVE
Iskra iHUB and iHUB Lite
Successful exploitation of this vulnerability could allow a remote attacker to reconfigure devices, update firmware, and manipulate connected systems without any credentials.
-
High max 8.4ICSMA-25-336-01 5 CVEs
Mirion Medical EC2 Software NMIS BioDose
Successful exploitation of these vulnerabilities could allow an attacker to modify program executables, gain access to sensitive information, gain unauthorized access to the application, and execute arbitrary code.