4,105 results · Feed
-
High max 8.8ICSA-25-261-06 9 CVEs
Cognex In-Sight Explorer and In-Sight Camera Firmware
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, steal credentials, modify files, or cause a denial-of-service condition.
-
Critical max 9.8ICSA-25-261-07 3 CVEs
Dover Fueling Solutions ProGauge MagLink LX4 Devices
Successful exploitation of these vulnerabilities could result in a remote attacker causing a denial-of-service condition or gaining administrative access to the device.
-
HighICSA-25-259-03 2 CVEs
Siemens SIMATIC NET CP, SINEMA and SCALANCE
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service (DoS) condition in the affected devices by exploiting integer overflow bugs.
-
Critical max 10.0ICSA-25-259-07 2 CVEs
Delta Electronics DIALink
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication.
-
Medium max 5.4VA-25-259-01 7 CVEs
CISA Thorium multiple vulnerabilities
CISA Thorium is a framework used for malware analysis. Multiple vulnerabilities were reported in Thorium. Impacts include denial of service, authenticated arbitrary file read, and failure to expire previously issued user tokens.
-
Low max 3.1VA-25-258-01 1 CVE
psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse
psPAS is a PowerShell module for the CyberArk API. psPAS does not explicitly enforce TLS 1.2 when using the 'Get-PASSAMLResponse' function. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a…
-
Medium max 5.3
OPEXUS FOIAXpress Public Access Link (PAL) multiple vulnerabilities
Multiple vulnerabilities could allow unauthenticated attackers to bypass rate-limiting measures for login attempts, or check for the existence of other users. Low-privileged users can modify certain site content without authorization.
first Jul 31, 2025 -
Critical max 9.8VA-25-252-01 1 CVE
OPEXUS FOIAXpress Public Access Link (PAL) SQL injection
Successful exploitation could allow a remote, unauthenticated attacker to read, write, or delete any content in the underlying database.
-
High max 7.5
Hitachi Energy RTU500 Series (Update B)
Hitachi Energy is aware of the vulnerabilities, CVE-2024-10037, CVE-2024-11499, CVE-2024-12169, and CVE-2025-1445 in the RTU500 Web server component, the IEC 60870-5-104 controlled station implementation and IEC 61850 implementation, that affects the RTU500 v…
first Mar 25, 2025 -
Critical
Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B)
Successful exploitation of this vulnerability could allow a stack overflow attack, which could result in loss of confidentiality, integrity, and denial of service of the device.
first Feb 27, 2025 -
High max 8.8
EG4 Electronics EG4 Inverters (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to intercept and manipulate critical data, install malicious firmware, hijack device access, and gain unauthorized control over the system.
first Aug 7, 2025 -
Medium max 5.3
Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module (Update A)
Successful exploitation of this vulnerability could result in a remote attacker being able to delay the processing of the Web server function and prevent legitimate users from utilizing the Web server function by sending a specially crafted HTTP request.
first Aug 21, 2025 -
High max 8.6ICSA-25-252-01 1 CVE
Rockwell Automation ThinManager
Successful exploitation of this vulnerability could expose the ThinServer service account NTLM hash.
-
Critical max 8.6ICSA-25-252-03 1 CVE
Rockwell Automation Stratix IOS
Successful exploitation of this vulnerability could allow an attacker to run malicious configurations without authentication.
-
High max 7.3ICSA-25-252-04 1 CVE
Rockwell Automation FactoryTalk Optix
Successful exploitation of this vulnerability could result in an attacker achieving remote code execution.
-
High max 8.7ICSA-25-252-05 1 CVE
Rockwell Automation FactoryTalk Activation Manager
Successful exploitation of this vulnerability could result in in data exposure, session hijacking, or full communication compromise.
-
Medium max 7.0ICSA-25-252-06 1 CVE
Rockwell Automation CompactLogix® 5480
Successful exploitation of this vulnerability could result in arbitrary code execution.
-
High max 8.2ICSA-25-252-07 1 CVE
Rockwell Automation ControlLogix 5580
Successful exploitation of this vulnerability could result in a major nonrecoverable fault on the controller.
-
High max 7.3ICSA-25-252-09 1 CVE
Rockwell Automation 1783-NATR
Successful exploitation of this vulnerability could allow an attacker to cause a memory corruption on the product.
-
Critical max 9.8ICSA-25-252-02 3 CVEs
ABB Cylon Aspect BMS/BAS
Successful exploitation of these vulnerabilities could allow an attacker to assume control of the target device or perform a denial-of-service (DoS) attack.
-
High max 7.1
Schneider Electric Pro-face GP-Pro EX and Remote HMI (Update A)
Schneider Electric is aware of multiple vulnerabilities in its Pro-face GP-Pro EX and Remote HMI products. The Pro-face [GP-Pro EX](https://www.proface.com/en/product/soft/gpproex/top) product is HMI Screen Editor & Logic Programming Software. The Pro-face [R…
first Jan 14, 2025 -
Medium max 4.1
Schneider Electric EcoStruxure
Schneider Electric is aware of multiple vulnerabilities in EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation. [EcoStruxure™ Building Operation (EBO)](https://www.se.com/us/en/pr…
first Aug 12, 2025 -
High max 7.3
Schneider Electric SESU
Schneider Electric is aware of a vulnerability in the Schneider Electric Software Update product (also referred to as “SESU”). The main purpose of the SESU software is to notify customers on the availability of hotfixes or new versions to download and install…
first Aug 12, 2025 -
High max 7.8
Siemens OPC Foundation Local Discovery Server Affecting Siemens Products
A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released new versions for several affected products and re…
first Apr 11, 2023 -
High max 8.8
Siemens SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
first Mar 11, 2025 -
High max 8.1ICSA-25-254-01 1 CVE
Siemens SIMOTION Tools
Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup compone…
-
Critical max 9.1ICSA-25-254-02 1 CVE
Siemens SIMATIC Virtualization as a Service (SIVaaS)
SIMATIC Virtualization as a Service (SIVaaS) is affected by a vulnerability which exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization. Siemens recommends to contact te…
-
Low max 3.1ICSA-25-254-04 2 CVEs
Siemens SINEC OS
SINEC OS is affected by multiple vulnerabilities due to open UDP ports, which could allow an attacker to access non-sensitive information without authentication or potentially cause temporary denial of service. Siemens is preparing fix versions and recommends…
-
Medium max 5.3ICSA-25-254-05 1 CVE
Siemens Apogee PXC and Talon TC Devices
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
-
High max 7.5ICSA-25-254-06 1 CVE
Siemens Industrial Edge Management
Industrial Edge Management is affected by a vulnerability that could allow a remote attacker to cause a denial of service condition. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
-
Critical max 9.8
Delta Electronics COMMGR (Update A)
Successful exploitation of this vulnerability could allow for an attacker to remotely access the AS3000Simulator family in the COMMGR software and execute arbitrary code.
first Apr 15, 2025 -
Medium max 5.5ICSA-25-245-01 1 CVE
Delta Electronics EIP Builder
Successful exploitation of this vulnerability could allow an attacker to potentially process dangerous external entities, resulting in disclosure of sensitive information.
-
High max 7.8ICSA-25-245-02 1 CVE
Fuji Electric FRENIC-Loader 4
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
Critical max 9.4ICSA-25-245-03 1 CVE
SunPower PVS6
Successful exploitation of this vulnerability could allow attackers to gain full access to the device, enabling them to replace firmware, modify settings, disable the device, create SSH tunnels, and manipulate attached devices.
-
High max 7.3ICSA-25-240-01 1 CVE
Mitsubishi Electric MELSEC iQ-F Series CPU Module
Successful exploitation of this vulnerability could allow an attacker to read or write the device values of the product. In addition, the attacker may be able to stop the operation of the programs.
-
High max 7.5ICSA-25-240-02 1 CVE
Mitsubishi Electric MELSEC iQ-F Series CPU Module
Successful exploitation of this vulnerability could allow an attacker the ability to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product by using the obtained credential information. In…
-
High max 7.3ICSA-25-240-04 1 CVE
Delta Electronics CNCSoft-G2
Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on affected installations of the device.
-
High max 8.6ICSA-25-240-05 2 CVEs
Delta Electronics COMMGR
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
-
High max 5.3ICSA-25-240-06 1 CVE
GE Vernova CIMPLICITY
Successful exploitation of this vulnerability could allow a low-privileged local attacker to escalate privileges.
-
High max 8.2
Festo SBRD-Q/SBOC-Q/SBOI-Q
The affected product families are cameras SBOC/SBOI and the Controller SBRD. The vulnerabilities are located within the Ethernet IP Stack from EIPStackGroup OpENer Ethernet/IP.
first Sep 22, 2021