4,105 results · Feed
-
Low max 3.7
Siemens TeleControl Server Basic
TeleControl Server Basic before V3.1.2.2 contains a Improper Handling of Length Parameter Inconsistency Vulnerability that could allow an attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a denial of service co…
first Apr 16, 2025 -
Critical max 9.8
Nice Linear eMerge E3
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary OS commands.
first Apr 24, 2025 -
Critical max 9.3
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code.
first Apr 24, 2025 -
Critical max 9.8
Planet Technology Network Products
Successful exploitation of these vulnerabilities could allow an attacker to read or manipulate device data, gain administrative privileges, or alter database entries.
first Apr 24, 2025 -
High max 8.5
Rockwell Automation ThinManager
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges and cause a denial-of-service condition.
first Apr 29, 2025 -
High max 7.8
Delta Electronics ISPSoft
Successful exploitation of these vulnerabilities could result in an attacker executing arbitrary code.
first Apr 29, 2025 -
High max 8.8
MicroDicom DICOM Viewer
Successful exploitation of these vulnerabilities could allow an attacker to disclose information, cause memory corruption, and execute arbitrary code.
first May 1, 2025 -
Critical max 9.3ICSA-25-126-01 1 CVE
Optigo Networks ONS NC600
Successful exploitation of this vulnerability could allow an attacker to establish an authenticated connection with the hard-coded credentials and perform OS command executions.
-
Medium max 6.8ICSA-25-126-02 1 CVE
Milesight UG65-868M-EA
Successful exploitation of this vulnerability could allow any user with admin privileges to inject arbitrary shell commands.
-
Critical max 9.8
CentralSquare eTRAKiT.Net SQL injection vulnerability
eTRAKiT is a public online portal that provides the public with easily accessible information related to permits, projects, licenses, code compliance, land, and inspections. An SQL injection vulnerability in the CRM feature of eTRAKiT.net release 3.2.1.77 all…
first Mar 20, 2025 -
High max 8.8
Commvault Web Server unspecified vulnerability
According to Commvault: "The Web Server is a component in CommCell environments that provides a RESTful interface to the software where users can perform various tasks using available APIs". A remote, authenticated attacker can exploit an unspecified vulnerab…
-
High max 7.4ICSA-25-196-01 6 CVEs
Hitachi Energy Asset Suite
Hitachi Energy is aware multiple vulnerabilities that affects the Asset Suite product versions listed below. If these vulnerabilities are successfully exploited by an attacker, it could have an impact on the confidentiality, integrity, or availability of the …
-
Critical max 9.8
Lantronix XPort (Update A)
Successful exploitation of this vulnerability could allow an attacker unauthorized access to the configuration interface and cause disruption to monitoring and operations.
first Apr 15, 2025 -
High max 8.0ICSA-25-114-02 1 CVE
ALBEDO Telecom Net.Time - PTP/NTP clock
Successful exploitation of this vulnerability could allow an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception.
-
High max 7.5ICSA-25-114-03 1 CVE
Vestel AC Charger
Successful exploitation of this vulnerability could allow an attacker access to sensitive information, such as credentials which could subsequently enable them to cause a denial of service or partial loss of integrity of the charger.
-
Critical max 9.3
SicommNet multiple vulnerabilities
SicommNet BASEC is an online eProcurement solution used by governments and other entities. Multiple vulnerabilities have been found in BASEC. These vulnerabilities allow a remote, unauthenticated attacker to gain administrative privileges, read user passwords…
first Apr 15, 2025 -
Critical max 9.8ICSA-25-107-04 1 CVE
Yokogawa Recorder Products
Successful exploitation of this vulnerability could allow an attacker to manipulate information on the affected products.
-
High max 8.8ICSA-25-112-04 15 CVEs
ABB MV Drives
Multiple vulnerabilities regarding the CODESYS Runtime System from CODESYS Group have been publicly reported. CODESYS Runtime System v.3.5.15.0 is utilized in the firmware of ABB MV ACS6080 and ACS5000 drives to provide IEC 61131 programming capabilities. The…
-
High max 7.5
Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A)
Schneider Electric is aware of a vulnerability in its Modicon M580 PLCs (Programmable Logic Controllers) https://www.se.com/ww/en/product-range/62098-modicon-m580-epac/?parent-subcategory-id=3950&filter=business-1-industrial-automation-and-control#products , …
first Jan 14, 2025 -
Medium max 6.8ICSA-25-107-01 3 CVEs
Schneider Electric Trio Q Licensed Data Radio
Schneider Electric is aware of a vulnerability in its Trio™ Q Licensed Data Radio product. The Trio Q Licensed Data Radios product is an advanced, high-speed licensed digital data radios, providing both Ethernet and serial communications for complex and deman…
-
High max 7.8ICSA-25-107-03 2 CVEs
Schneider Electric ConneXium Network Manager Software
Schneider Electric is aware of vulnerabilities in its ConneXium Network Manager software. The ConneXium Network Manager software provides a solution for configuring and monitoring the administrable Schneider Electric devices, including switches, routers, fire…
-
High max 7.0
Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor
SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures. Siemens recommends specific countermeasures for products …
first Feb 11, 2025 -
Critical max 9.8ICSA-25-100-05 5 CVEs
Siemens Insights Hub Private Cloud
Insights Hub Private Cloud is affected by multiple vulnerabilities in Ingress NGINX Controller for Kubernetes. These vulnerabilities could lead to arbitrary code execution in the context of the ingress-nginx controller, or disclosure of Secrets accessible to …
-
Critical max 10.0ICSA-25-100-06 9 CVEs
Siemens SENTRON 7KT PAC1260 Data Manager
SENTRON 7KT PAC1260 Data Manager is affected by multiple vulnerabilities as listed below. Software fixes can no longer be provided for The SENTRON 7KT PAC1260 Data Manager. This advisory documents the known open vulnerabilities. To fix the vulnerabilities, Si…
-
High max 8.1ICSA-25-100-09 8 CVEs
ABB Arctic Wireless Gateways
ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This c…
-
High max 9.8ICSA-25-105-08 42 CVEs
ABB M2M Gateway
ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of t…
-
Critical max 9.9ICSA-25-091-01 1 CVE
Rockwell Automation Lifecycle Services with Veeam Backup and Replication
Successful exploitation of this vulnerability could allow an attacker with administrative privileges to execute code on the target system.
-
High max 8.8ICSA-25-093-03 15 CVEs
ABB ACS880 Drives Containing CODESYS RTS
Multiple vulnerabilities regarding the CODESYS Runtime System from CODESYS Group have been publicly reported. CODESYS Runtime System is utilized in the firmware of ABB ACS880 drives to provide IEC 61131-3 programming capabilities. These vulnerabilities could …
-
High max 8.8ICSA-25-093-04 15 CVEs
ABB Low Voltage DC Drives and Power Controllers CODESYS RTS
CODESYS group published several vulnerabilities regarding the CODESYS Runtime System, which is included in the firmware of ABB LV DC drives and power controllers. It is used to implement a selection of features and to provide IEC 611131-3 programming capabili…
-
Critical max 8.8
Hitachi Energy MicroSCADA Pro/X SYS600 (Update A)
Hitachi Energy is aware of the multiple vulnerabilities that affect the MicroSCADA Pro/X SYS600 product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. …
first Aug 27, 2024 -
Medium max 6.5ICSA-25-093-02 3 CVEs
Hitachi Energy TRMTracker
Hitachi Energy is aware of the multiple vulnerabilities that affect the TRMTracker product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality and integrity impacts. Please refer to the Recomme…
-
Critical max 7.5ICSA-25-084-02 1 CVE
Rockwell Automation Verve Asset Manager
Successful exploitation of this vulnerability could allow an attacker with administrative access to run arbitrary commands in the context of the container running the service.
-
HighICSA-25-084-03 1 CVE
Rockwell Automation 440G TLS-Z
Successful exploitation of this vulnerability could allow an attacker to take over the device.
-
Critical max 9.8ICSA-25-084-04 4 CVEs
Inaba Denki Sangyo CHOCO TEI WATCHER mini
Successful exploitation of these vulnerabilities could allow an attacker to obtain the product's login password, gain unauthorized access, tamper with product's data, and/or modify product settings.
-
High max 9.2ICSA-25-093-05 13 CVEs
B&R APROL
Updates are available that resolve privately reported vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploits these vulnerabilities could elevate privileges or gather sensitive information.
-
Medium max 6.5ICSA-25-079-04 1 CVE
SMA Sunny Portal
Successful exploitation of this vulnerability could allow an attacker to upload and remotely execute code.
-
High max 7.8ICSMA-25-079-01 1 CVE
Santesoft Sante DICOM Viewer Pro
Successful exploitation of this vulnerability could allow an attacker to cause memory corruption that would result in execution of arbitrary code.
-
Medium max 6.8ICSA-25-077-01 1 CVE
Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI)
Successful exploitation of this vulnerability could allow an attacker to bypass device authentication, potentially gain access to sensitive information, or execute arbitrary code.
-
Critical max 9.3
Rockwell Automation Lifecycle Services with VMware
Successful exploitation of these vulnerabilities could allow an attacker with local administrative privileges to execute code.
-
High max 9.8ICSA-25-072-12 15 CVEs
Sungrow iSolarCloud Android App, WiNet Firmware
Successful exploitation of these vulnerabilities could result in attackers being able to access and could modify sensitive information.