4,105 results · Feed
-
High max 7.5
Siemens User Management Component (UMC)
Siemens User Management Component (UMC) is affected by three vulnerabilities which could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update …
first May 13, 2025 -
Medium max 6.2
Siemens SiPass
SiPass integrated ACC (Advanced Central Controller) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens recommends specific countermeasures for produc…
first May 23, 2025 -
High max 8.8
Siemens RUGGEDCOM ROS Devices
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for…
first Jul 8, 2025 -
High max 7.8ICSA-25-289-05 4 CVEs
Siemens Solid Edge
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted PRT files format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new ve…
-
Critical max 9.8ICSA-25-289-07 1 CVE
Siemens SIMATIC ET 200SP Communication Processors
SIMATIC ET 200SP communication processors (CP 1542SP-1, CP 1542SP-1 IRC and CP 1543SP-1, incl. SIPLUS variants) contain an authentication vulnerability that could allow an unauthenticated remote attacker to access the configuration data. Siemens has released …
-
High max 8.8ICSA-25-289-08 1 CVE
Siemens SINEC NMS
SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation. Siemens has released a new version for SINEC NMS and recommends to update t…
-
Critical max 9.8ICSA-25-289-09 1 CVE
Siemens TeleControl Server Basic
TeleControl Server Basic V3.1 contains an information disclosure vulnerability that could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service. Siemens has rel…
-
High max 8.7
Rockwell Automation Analytics LogixAI
Successful exploitation of this vulnerability could allow an attacker to access sensitive information.
first Sep 9, 2025 -
Critical max 9.8VA-25-282-01 13 CVEs
Newforma Project Center multiple vulnerabilities
Newforma Project Center contains multiple vulnerabilities. In the worst case, successful exploitation could allow unauthenticated, remote code execution.
-
High max 7.7
Rockwell Automation Lifecycle Services with Cisco
Successful exploitation of this vulnerability could result in arbitrary code execution.
-
High max 7.7
Rockwell Automation Stratix
Successful exploitation of this vulnerability could result in arbitrary code execution.
-
Medium max 4.3VA-25-280-01 4 CVEs
OPEXUS FOIAXpress stored XSS
OPEXUS FOIAXpress before 11.13.3.0 contains multiple stored cross-site-scripting vulnerabilities. These vulnerabilities allow an authenticated administrative user to inject JavaScript or other content into various components of FOIAXpress. Successful exploita…
-
Medium max 7.1
Rockwell Automation 1756-EN4TR, 1756-EN4TRXT (Update B)
Successful exploitation of these vulnerabilities could result in an attacker causing a denial of service condition.
first Aug 14, 2025 -
High max 8.6ICSA-25-275-01 1 CVE
Raise3D Pro2 Series 3D Printers**
Successful exploitation of this vulnerability could result in data exfiltration and compromise of the target device.
-
Medium max 6.5
Festo LX Appliance
A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the "Teacher" role), to craft a malicious course and launch an XSS attack.
first Aug 29, 2023 -
High max 8.8
Festo MSE6-C2M/D2M/E2M
Incomplete user documentation of undocumented, authenticated test mode and further remote accessible functions. The supported features may be covered only partly by the corresponding user documentation. Festo developed the products according to the respective…
first Sep 5, 2023 -
High max 7.3
Festo Didactic products
A vulnerability was reported in Siemens TIA Portal. TIA Portal is part of the installation packages of several Festo Didactic products. TP 260 before June 2023 and MES PC based on DELL XE3 contain a vulnerable versions of TIA Portal V15 to V18. Affected produ…
first Oct 17, 2023 -
Medium max 6.5ICSA-25-289-11 3 CVEs
Hitachi Energy MACH GWS
Hitachi Energy is aware of these vulnerabilities that affect the MACH GWS product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Re…
-
High max 7.5
Hitachi Energy MACH SCM (Update A)
Hitachi Energy is aware of LINQ query related vulnerabilities that affect MACH SCM product versions listed below. Authenticated malicious clients successfully exploiting these vulnerabilities could execute arbitrary code that an attacker otherwise does not ha…
first Mar 26, 2024 -
High max 9.2
HEIDENHAIN Controller TNC (Update A)
Successful exploitation of this vulnerability could cause a loss of sensitive data, manipulation of information, and a denial-of-service.
first Oct 25, 2022 -
High max 7.5
Keysight Ixia Vision Product Family (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to obtain or change data from the device, or remotely execute arbitrary code.
first Mar 4, 2025 -
High max 8.7
Rockwell Automation FLEX 5000 I/O (Update A)
Successful exploitation of these vulnerabilities could create a denial-of-service condition.
first Aug 14, 2025 -
Critical max 9.8ICSA-25-273-01 1 CVE
MegaSys Enterprises Telenium Online Web Application
Successful exploitation of this vulnerability could allow an unauthenticated attacker to inject arbitrary operating system commands through a crafted HTTP request, leading to remote code execution on the server in the security context of the web application s…
-
High max 7.1ICSA-25-273-05 1 CVE
OpenPLC_V3
Successful exploitation of this vulnerability could cause a denial of service, making the PLC runtime process crash.
-
High max 7.8ICSA-25-273-06 2 CVEs
National Instruments Circuit Design Suite
Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption, potentially leading to information disclosure and execution of arbitrary code.
-
High max 8.8ICSA-25-273-07 1 CVE
LG Innotek Camera Multiple Models
Successful exploitation of this vulnerability could allow an attacker to gain administrative access to the device.
-
Low max 7.4VA-25-273-01 2 CVEs
Microsoft Windows inconsistent driver blocking
Microsoft Windows Defender Application Control (WDAC) and the Microsoft vulnerable driver blocklist do not adequately block known-vulnerable drivers. These unexpected behaviors can confuse users about whether or not driver blocking is working and which driver…
-
High max 8.1VA-25-272-01 6 CVEs
Medical Informatics Engineering Enterprise Health multiple vulnerabilities
Medical Informatics Engineering Enterprise Health is an OEHR (Occupational Electronic Health Record) platform. Enterprise Health contains multiple vulnerabilities that could allow an attacker to inject executable content, obtain session tokens, and upload arb…
-
High max 8.7ICSA-25-268-01 2 CVEs
Dingtian DT-R002
Successful exploitation of these vulnerabilities could allow an attacker to retrieve credentials without authentication.
-
Critical max 10.0
Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL (Update A)
Schneider Electric is aware of a vulnerability disclosed on the Erlang/OTP's SSH Server component used Schneider Electric Galaxy VS, VL, and VXL.Many vendors, including Schneider Electric, embed the Erlang/OTP's SSH Server in their offers.The Galaxy VS, Galax…
first May 13, 2025 -
High max 8.3ICSA-25-266-01 7 CVEs
AutomationDirect CLICK PLUS
Successful exploitation of these vulnerabilities disclose sensitive information, modify device settings, escalate privileges, or cause a denial-of-service condition on the affected device.
-
Medium max 6.8ICSA-25-266-02 1 CVE
Mitsubishi Electric MELSEC-Q Series CPU Module
Successful exploitation of this vulnerability could allow an attacker to cause a denial of service (DoS).
-
High max 8.7ICSA-25-266-04 2 CVEs
Viessmann Vitogate 300
Successful exploitation of this vulnerability could allow an attacker to modify an intended OS command when it is sent to a downstream component, or allow an attacker to cause unexpected interactions between the client and server.
-
Critical max 9.8VA-25-265-01 2 CVEs
Airship AI MFA bypass and default credentials vulnerabilities
Airship AI Acropolis is used for video and data management. In versions before 11.1.9, 11.0.21, and 10.2.35, a remote unauthenticated attacker with valid credentials can brute force the MFA code and authenticate without an additional authentication method. Im…
-
Critical max 9.8
Mitsubishi Electric FA Engineering Software Products (Update D)
Successful exploitation of these vulnerabilities could allow an attacker to disclose, tamper with, destroy or delete information in the products, or cause a denial-of-service (DoS) condition on the products.
first Jan 30, 2024 -
High max 8.1
End-of-Train and Head-of-Train Remote Linking Protocol (Update C)
Successful exploitation of this vulnerability could allow an attacker to send their own brake control commands to the end-of-train device, causing a sudden stoppage of the train which may lead to a disruption of operations, or induce brake failure.
first Jul 10, 2025 -
Critical max 9.8
Daikin Europe N.V Security Gateway
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to the system.
first Sep 11, 2025 -
High max 7.6ICSA-25-261-01 1 CVE
Westermo Network Technologies WeOS 5
Successful exploitation of this vulnerability could allow an attacker with administrative permissions to execute commands that would typically be inaccessible. This could allow the execution of commands with privileges beyond those normally granted to the att…
-
Medium max 5.9ICSA-25-261-02 1 CVE
Westermo Network Technologies WeOS 5
Successful exploitation of this vulnerability could cause the device to reboot.
-
Medium max 5.8ICSA-25-261-03 2 CVEs
Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit
Successful exploitation of these vulnerabilities could enable an attacker to execute arbitrary shell commands on the affected devices.