4,105 results · Feed
-
High max 7.1ICSA-25-226-06 7 CVEs
Siemens Opcenter Quality
The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 6.9ICSA-25-226-08 3 CVEs
Siemens RUGGEDCOM CROSSBOW Station Access Controller
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for R…
-
Low max 2.4ICSA-25-226-10 1 CVE
Siemens SIPROTEC 5
Affected SIPROTEC 5 devices do not properly limit the bandwidth for incoming network packets over their local USB port. This could allow an attacker with physical access to send specially crafted packets with high bandwidth to the affected devices thus forcin…
-
High max 7.5ICSA-25-226-12 1 CVE
Siemens SIPROTEC 4 and SIPROTEC 4 Compact
SIPROTEC 4 and SIPROTEC 4 Compact devices contain a vulnerability that could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the lates…
-
Critical max 9.1ICSA-25-226-13 1 CVE
Siemens SIMATIC RTLS Locating Manager
SIMATIC RTLS Locating Manager Before V3.2 contains an improper input validation vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges. Siemens has released a new version for SIMATIC RTLS Locating Manage…
-
Medium max 4.1ICSA-25-226-14 1 CVE
Siemens RUGGEDCOM ROX II
RUGGEDCOM ROX II devices does not properly enforce limitations on type and size of files that can be uploaded through their web interface. This could allow an attacker with a legitimate, highly privileged account on the web interface to upload arbitrary files…
-
Medium max 6.2ICSA-25-226-16 2 CVEs
Siemens SICAM Q100/Q200
SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes. Siemens has released new v…
-
High max 7.8ICSA-25-226-17 7 CVEs
Siemens SINEC Traffic Analyzer
SINEC Traffic Analyzer before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures …
-
High max 8.3ICSA-25-226-19 1 CVE
Siemens SINUMERIK
Siemens SINUMERIK Controllers are affected by an improper VNC password check vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 7.6ICSA-25-226-20 1 CVE
Siemens RUGGEDCOM ROX II
RUGGEDCOM ROX II devices do not properly limit access through their Built-In-Self-Test (BIST) mode. This could allow a local attacker to bypass authentication and access a root shell on the device. Siemens is preparing fix versions and recommends specific cou…
-
Critical max 9.8ICSA-25-226-21 5 CVEs
Siemens BFCClient
Siemens BFCClient contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, to change the application behaviour or to create a denial of service condition. Siemens has released a new version fo…
-
Critical max 9.8
Gessler GmbH WEB-MASTER
Successful exploitation of these vulnerabilities could allow a user to take control of the web management of the device. An attacker with access to the device could also extract and break the password hashes for all users stored on the device.
first Feb 1, 2024 -
Critical max 9.8
CyberPower PowerPanel Business
Successful exploitation of these vulnerabilities could result in an attacker bypassing authentication and gaining administrator privileges, forging JWT tokens to bypass authentication, writing arbitrary files to the server and acheiving code execution, gainin…
first May 2, 2024 -
Critical max 9.8
Instantel Micromate (Update A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to access the device's configuration port and execute commands.
first May 29, 2025 -
Critical max 9.3ICSA-25-219-01 1 CVE
Delta Electronics DIAView
Successful exploitation of this vulnerability may allow a remote attacker to read or write files on the affected device.
-
Critical max 9.8ICSA-25-219-03 1 CVE
Burk Technology ARC Solo
Successful exploitation of this vulnerability could result in an attacker gaining access to the device, locking out authorized users, or disrupting operations.
-
High max 8.4ICSA-25-219-04 3 CVEs
Rockwell Automation Arena
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.
-
Critical max 9.8ICSA-25-219-05 1 CVE
Packet Power EMX and EG
Successful exploitation of this vulnerability could allow an attacker to gain full access to the device without authentication.
-
Medium max 5.0ICSA-25-219-08 4 CVEs
Yealink IP Phones and RPS (Redirect and Provisioning Service)
Successful exploitation of these vulnerabilities could result in an information disclosure.
-
High max 7.4VA-25-219-01 1 CVE
Tyler Technologies ERP Pro 9
Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands.
-
Critical max 9.4
Honeywell Experion PKS (Update A)
Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.
first Jul 24, 2025 -
Critical max 9.4ICSA-25-247-01 4 CVEs
Honeywell OneWireless Wireless Device Manager (WDM)
Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.
-
Critical max 9.3ICSA-25-212-02 4 CVEs
Rockwell Automation Lifecycle Services with VMware
Successful exploitation of these vulnerabilities could lead to code execution on the host or leakage of memory from processes communicating with vSockets.
-
Critical max 8.8
Johnson Controls Software House iStar Door Controller (Update A)
Successful exploitation of this vulnerability may allow an attacker to gain unauthorized access to the iSTAR Pro door controller.
first Jun 6, 2024 -
High max 7.8
Fuji Electric Tellus Lite V-Simulator (Update A)
Successful exploitation of these vulnerabilities could crash the device being accessed.
first Dec 3, 2024 -
High max 7.8ICSA-25-210-01 2 CVEs
National Instruments LabVIEW
Successful exploitation of these vulnerabilities could lead to the execution of arbitrary code on affected installations of LabVIEW, which could result in invalid memory reads.
-
High max 8.0ICSA-25-210-02 6 CVEs
Samsung HVAC DMS
Successful exploitation of these vulnerabilities can lead to unauthenticated remote code execution.
-
High max 7.8ICSA-25-210-03 1 CVE
Delta Electronics DTN Soft
Successful exploitation of this vulnerability could allow an attacker to use a specially crafted project file to execute arbitrary code.
-
High max 7.5
Festo CPX-CEC-C1 and CPX-CMXX
Unauthenticated access to critical webpage functions (e.g. reboot) may cause a denial of service of the device.
first Sep 20, 2022 -
High max 8.3ICSA-25-205-04 1 CVE
LG Innotek Camera Model LNV5110R
Successful exploitation of this vulnerability could allow an attacker to gain administrative access to the device.
-
Critical max 9.8ICSA-25-205-02 1 CVE
Network Thermostat X-Series WiFi Thermostats
Successful exploitation of this vulnerability could allow an attacker to gain full administrative access to the device.
-
High max 8.1ICSA-25-203-01 3 CVEs
DuraComm DP-10iN-100-MU
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or cause a denial-of-service condition.
-
High max 8.0ICSA-25-203-02 1 CVE
Lantronix Provisioning Manager
Successful exploitation of this vulnerability could allow an attacker perform a cross-site scripting attack, which could result in remote code execution.
-
High max 7.8
Fuji Electric Monitouch V-SFT (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
first May 30, 2024 -
High max 7.8
Johnson Controls Inc. Software House C●CURE 9000 (Update B)
Successful exploitation of this vulnerability may allow an attacker to access credentials used for access to the application.
first Jul 9, 2024 -
Critical max 9.3ICSA-25-198-01 1 CVE
Leviton AcquiSuite and Energy Monitoring Hub
Successful exploitation of this vulnerability could allow an attacker to craft a malicious payload in URL parameters that would get executed in a client browser when accessed by a user, steal session tokens and control the service.
-
High max 7.8ICSMA-25-198-01 1 CVE
Panoramic Corporation Digital Imaging Software
Successful exploitation of this vulnerability could allow a standard user to obtain NT Authority/SYSTEM privileges.
-
High max 8.7ICSA-25-196-03 1 CVE
LITEON IC48A and IC80A EV Chargers
Successful exploitation of this vulnerability could allow an attacker to access sensitive information when accessing the Liteon EV chargers.
-
Critical max 10.0
KUNBUS GmbH Revolution Pi (Update A)
Successful exploitation of these vulnerabilities could allow attackers to bypass authentication, gain unauthorized access to critical functions, and execute malicious server-side includes (SSI) within a web page.
first May 1, 2025 -
High max 7.2
ECOVACS DEEBOT Vacuum and Base Station (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to send malicious updates to the devices or execute code.
first May 15, 2025