4,105 results · Feed
-
Critical max 9.1
Mitsubishi Electric FA Engineering Software (Update C)
Successful exploitation of these vulnerabilities could allow unauthorized users to gain access to the MELSEC iQ-R/F/L series CPU modules and the MELSEC iQ-R series OPC UA server module or to view and execute programs or view project files without permissions.
first Dec 5, 2022 -
High max 7.1ICSA-25-329-02 1 CVE
Rockwell Automation Arena Simulation
Successful exploitation of this vulnerability could allow local attackers to execute arbitrary code on affected installations of Arena.
-
Critical max 10.0ICSA-25-329-03 5 CVEs
Zenitel TCIV-3+
Successful exploitation of these vulnerabilities could result in arbitrary code execution or cause a denial-of-service condition.
-
Critical max 9.8ICSA-25-329-05 2 CVEs
Festo Compact Vision System, Control Block, Controller, and Operator Unit products
Successful exploitation of these vulnerabilities could result in an attacker accessing devices without authentication or modifying configuration files.
-
Critical max 8.8ICSA-25-329-06 1 CVE
SiRcom SMART Alert (SiSA)
Successful exploitation of this vulnerability could enable an attacker to remotely activate or manipulate emergency sirens.
-
High max 7.6ICSA-25-329-04 1 CVE
Opto 22 groov View
Successful exploitation of this vulnerability could result in credential exposure, key exposure, and privilege escalation.
-
Critical max 8.6ICSA-25-324-01 2 CVEs
Automated Logic WebCTRL Premium Server
Successful exploitation of these vulnerabilities could allow a remote attacker to deceive a legitimate user into running malicious scripts or redirecting them to malicious websites.
-
Critical max 9.8ICSA-25-324-06 1 CVE
Emerson Appleton UPSMON-PRO
Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on affected installations of Appleton UPSMON-PRO.
-
Medium max 6.8ICSA-25-324-02 2 CVEs
ICAM365 CCTV Camera Multiple Models
Successful exploitation of these vulnerabilities could result in unauthorized exposure of camera video streams and camera configuration data.
-
Medium max 6.2ICSA-25-324-03 1 CVE
Opto 22 GRV-EPIC and groov RIO
Successful exploitation of this vulnerability could result in the execution of arbitrary shell commands with root privileges.
-
Critical max 9.8ICSA-25-322-05 5 CVEs
METZ CONNECT EWIO2
A critical authentication bypass in EWIO-2 allows unauthenticated attackers with network access to gain administrative control over the device. Once compromised, an attacker can change configurations, manipulate data, disrupt services, and potentially render …
-
High max 8.3ICSA-25-322-02 1 CVE
Shelly Pro 4PM
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
High max 8.3ICSA-25-322-03 1 CVE
Shelly Pro 3EM
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
Critical max 9.8
Festo Controller CECC-S,-LK,-D Family Firmware (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to crash services, escalate privileges, bypass authentication, or gain unauthorized access to sensitive systems and data.
first Sep 30, 2025 -
Medium max 5.3ICSA-25-317-01 1 CVE
Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the product.
-
Medium max 6.9ICSA-25-317-02 1 CVE
AVEVA Application Server IDE
Successful exploitation of this vulnerability could allow an attacker to tamper with help files and inject cross-site scripting (XSS) code.
-
High max 8.4ICSA-25-317-03 1 CVE
AVEVA Edge
Successful exploitation of this vulnerability could allow a local attacker to reverse engineer passwords through brute force.
-
Critical max 8.4ICSA-25-317-05 1 CVE
Rockwell Automation Verve Asset Manager
Successful exploitation of this vulnerability could result in an attacker accessing or altering user data.
-
High max 8.9ICSA-25-317-06 2 CVEs
Rockwell Automation Studio 5000 Simulation Interface
Successful exploitation of these vulnerabilities could allow attackers to trigger outbound SMB requests to capture NTLM hashes and execute scripts with Administrator privileges upon system reboot.
-
High max 8.6ICSA-25-317-07 2 CVEs
Rockwell Automation FactoryTalk DataMosaix Private Cloud
Successful exploitation of these vulnerabilities could allow an attacker to take over accounts, steal credentials, redirect users to a malicious website, or bypass MFA.
-
Critical max 10.0ICSA-25-317-08 4 CVEs
General Industrial Controls Lynx+ Gateway
Successful exploitation of these vulnerabilities could result in obtaining sensitive device information, unauthorized access, or create a denial-of-service condition.
-
High max 7.5ICSA-25-317-09 1 CVE
Rockwell Automation FactoryTalk Policy Manager
Successful exploitation of this vulnerability could lead to resource exhaustion and denial of service.
-
High max 9.1ICSA-25-317-10 1 CVE
*Rockwell Automation AADvance-Trusted SIS Workstation *
Successful exploitation of this vulnerability may allow remote code execution.
-
Medium max 5.5ICSA-25-317-11 2 CVEs
Siemens SICAM P850 family and SICAM P855 family
Successful exploitation of these vulnerabilities could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate user, or impersonate that user.
-
High max 8.8ICSA-25-317-12 5 CVEs
Siemens Spectrum Power 4
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute code as application administrator or locally execute code as operating system administrator.
-
High max 8.7
Schneider Electric EcoStruxure Power Monitoring Expert
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises so…
first Aug 12, 2025 -
High max 8.4ICSA-25-322-01 1 CVE
Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio
Schneider Electric is aware of a vulnerability disclosed on AVEVA component used in EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio products. The EcoStruxure Machine SCADA Expert is software for developing HMI, SCADA, OEE and Dashboard projects…
-
High max 7.3ICSA-25-322-04 3 CVEs
Schneider Electric PowerChute Serial Shutdown
Schneider Electric is aware of a vulnerability in its PowerChute™ Serial Shutdown product. The [PowerChute™ Serial Shutdown](https://www.se.com/us/en/product-range/137943580-powerchute-serial-shutdown/#products) product is a UPS management software enabling g…
-
Critical max 9.8
Siemens SICAM GridEdge
Multiple vulnerabilities were identified in the web server of the SICAM GridEdge application which includes missing authentication for critical API functions, absent cross-origin resource sharing restrictions and access to credentials. Siemens has released a …
first Jun 14, 2022 -
Medium max 6.3
Siemens SICAM GridEdge
SICAM GridEdge contains an improper access control vulnerability. This could allow persons with local access to the host system to inject an SSH key. Siemens has released a new version for SICAM GridEdge (Classic) and recommends to update to the latest versio…
first Jul 12, 2022 -
Medium max 5.3
Siemens SIPROTEC 5 Devices
Devices of the SIPROTEC 5 family contain a vulnerability related to secure client-initiated renegotiation. This could allow an unauthenticated attacker to cause a denial of service condition for the duration of the attack. Siemens has released new versions fo…
first Dec 13, 2022 -
High max 7.5
Siemens SIPROTEC 5 Devices
SIPROTEC 5 devices contain a null pointer dereference vulnerability in the web service. This could allow an attacker to send unauthenticated maliciously crafted http request that could cause denial of service condition of the device. Siemens has released new …
first Apr 11, 2023 -
High max 7.5
Siemens SIMATIC, SIPLUS Products
The OPC UA implementations (ANSI C and C++) as used in several SIMATIC products contain a denial of service vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. S…
first Sep 12, 2023 -
Medium max 5.9
Siemens SIPROTEC
The SIPROTEC 5 devices are supporting weak encryption. This could allow an unauthorized attacker in a man-in-the-middle position to read any data passed over the connection between legitimate clients and the affected device. Siemens has released new versions …
first Jul 9, 2024 -
Medium max 6.5
Siemens SIPROTEC 5 Products
Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for the affec…
first Jan 14, 2025 -
Medium max 6.8
Siemens SIPROTEC 5
Affected SIPROTEC 5 devices contain a development shell which is accessible via a physical interface which is not properly restricted. This could allow an unauthenticated attacker with physical access to an affected device to execute arbitrary commands on the…
first Feb 11, 2025 -
Critical max 9.9
Siemens RUGGEDCOM ROX II
The web interface of RUGGEDCOM ROX II devices contain multiple Client-Side Enforcement of Server-Side Security vulnerabilities that could allow an attacker with a legitimate, highly privileged account on the web interface to get privileged code execution in t…
first May 13, 2025 -
High max 7.6ICSA-25-317-13 3 CVEs
Siemens LOGO! 8 BM Devices
LOGO! 8 BM (incl. SIPLUS variants) contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens is preparing fix versions and recommends…
-
High max 7.5ICSA-25-317-14 1 CVE
Siemens Solid Edge
Solid Edge is affected by improper certificate validation while connecting to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released a new version for Solid Edge SE2025 and reco…
-
Critical max 9.4ICSA-25-317-15 2 CVEs
Siemens COMOS
COMOS is affected by two vulnerabilities that could allow an attacker to execute arbitrary code or lead to data infiltration. Siemens has released a new version for COMOS and recommends to update to the latest version.