4,105 results · Feed
-
Medium max 6.5ICSA-25-079-02 3 CVEs
Schneider Electric Enerlin’X IFE and eIFE
Schneider Electric is aware of vulnerabilities in its Enerlin'X IFE and Enerlin'X eIFE products. The Enerlin'X IFE and eIFE products https://www.se.com/ww/en/product-range/62413-enerlinx-ife-eife-ifm/#products are used to enable Masterpact, PowerPact, and Com…
-
Medium max 4.6ICSA-25-044-03 1 CVE
Siemens SIPROTEC 5
Affected SIPROTEC 5 devices do not encrypt certain data within the on-board flash storage on their PCB. This could allow an attacker with physical access to read the sensitive information from the filesystem of the device. Siemens is preparing fix versions an…
-
High max 7.5ICSA-25-044-11 2 CVEs
Siemens Apogee PXC100 Devices
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to perform a denial of service using a out-of-bounds read forcing the device to enter a cold state and a vulnerability that would allow an attacker to decrypt the passwords of the de…
-
Medium max 5.7ICSMA-25-037-01 1 CVE
MicroDicom DICOM Viewer
Successful exploitation of this vulnerability could allow an attacker to alter network traffic and perform a machine-in-the-middle (MITM) attack.
-
Critical max 9.8ICSMA-25-037-02 1 CVE
Orthanc Server
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information, modify records, or cause a denial-of-service condition.
-
Critical max 9.8ICSA-25-051-01 1 CVE
ABB ASPECT-Enterprise NEXUS and MATRIX Series
ABB became aware of vulnerabilities in the product versions listed as affected in the advisory. ASPECT devices are not intended to be internet-facing. A product advisory issued in June 2023 informed customers of this already. An attacker who successfully expl…
-
High max 7.8
Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
first Oct 24, 2023 -
Medium max 6.5ICSA-25-035-01 1 CVE
Western Telematic Inc NPS Series, DSM Series, CPM Series
Successful exploitation of this vulnerability could allow an authenticated attacker to gain privileged access to files on the device's filesystem.
-
Critical max 9.8ICSA-25-035-03 2 CVEs
Elber Communications Equipment
Successful exploitation of these vulnerabilities could allow an attacker unauthorized administrative access to the affected device.
-
High max 7.8ICSA-25-035-05 1 CVE
Schneider Electric Web Designer for Modicon
Successful exploitation of this vulnerability could result in information disclosure, workstation integrity and potential remote code execution on the compromised computer.
-
Critical max 9.8ICSA-25-035-08 1 CVE
AutomationDirect C-more EA9 HMI
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition or achieve remote code execution on the affected device.
-
High max 7.5
Contec Health CMS8000 Patient Monitor (Update A)
Successful exploitation of these vulnerabilities could allow a threat actor to cause a denial-of-service condition, modify firmware with physical access to the device, access a root shell, or employ hard-coded credentials to make configuration changes.
first Sep 1, 2022 -
Critical max 9.8ICSA-25-030-02 2 CVEs
New Rock Technologies Cloud Connected Devices
Successful exploitation of these vulnerabilities could allow an attacker full control of the device.
-
High max 7.5ICSA-25-030-04 1 CVE
Rockwell Automation KEPServer
Successful exploitation of this vulnerability could cause the device to crash.
-
Critical max 9.3ICSA-25-030-05 3 CVEs
Rockwell Automation FactoryTalk AssetCentre
Successful exploitation of these vulnerabilities could allow an attacker to extract passwords, access, credentials, or impersonate other users.
-
High max 8.0
BD Diagnostic Solutions Products (Update A)
Successful exploitation of this vulnerability could allow an attacker to use default credentials to access, modify, or delete sensitive data, which could impact the availability of the system or cause a system shutdown.
first Dec 17, 2024 -
High max 8.8ICSA-25-028-02 2 CVEs
Schneider Electric Power Logic
Successful exploitation of these vulnerabilities could allow an attacker to modify data or cause a denial-of-service condition on web interface functionality.
-
Critical max 9.3ICSA-25-028-03 2 CVEs
Rockwell Automation FactoryTalk
Successful exploitation of these vulnerabilities could allow an attacker to execute code on the device with elevated privileges.
-
High max 7.0ICSA-25-028-04 2 CVEs
Rockwell Automation FactoryTalk View Site Edition
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthenticated access to system configuration files and execute DLLs with elevated privileges.
-
Critical max 7.0ICSA-25-028-05 2 CVEs
Rockwell Automation DataMosaix Private Cloud
Successful exploitation of these vulnerabilities could overwrite reports, including user projects.
-
Critical max 9.8ICSA-25-023-01 2 CVEs
mySCADA myPRO Manager
Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary commands or disclose sensitive information.
-
Medium max 5.7ICSA-25-023-06 1 CVE
HMS Networks Ewon Flexy 202
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive user credentials.
-
Critical max 9.6VA-25-022-01 9 CVEs
ECOVACS lawnmower and vacuum vulnerabilities
ECOVACS lawnmowers, vacuums, and other robots contain multiple vulnerabilities. In some cases, using a combination of vulnerabilities, an attacker within Bluetooth range or with appropriate network access can take complete control of a robot device. Some vuln…
-
High max 8.8VA-25-021-01 2 CVEs
Fedora Repository fedoraIntCallUser default credentials and insecure archive extraction
Fedora Repository 3.8 includes default user credentials and allows path traversal when extracting uploaded archive files. An attacker can exploit these vulnerabilities to read sensitive data and execute arbitrary commands with the privileges of the Java web a…
-
Medium max 5.4ICSA-25-021-03 1 CVE
ZF Roll Stability Support Plus (RSSPlus)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely (proximal/adjacent with RF equipment) call diagnostic functions which could impact both the availability and integrity.
-
Medium max 5.3
Mitsubishi Electric Multiple Factory Automation Products (Update A)
Successful exploitation of this vulnerability could allow a remote attacker to cause a temporary denial-of-service (DoS) condition for a certain period of time in the product's Ethernet communication by performing a TCP SYN Flood attack.
first Feb 27, 2024 -
High max 7.8
Delta Electronics DRASimuCAD (Update A)
Successful exploitation of these vulnerabilities could crash the device or potentially allow remote code execution.
first Jan 9, 2025 -
High max 7.8ICSA-25-016-05 1 CVE
Fuji Electric Alpha5 SMART
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 7.5ICSA-25-028-01 1 CVE
B&R Automation Runtime
An update is available that resolves a privately reported vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability may masquerade as services on affected devices.
-
High max 7.5ICSA-25-014-04 1 CVE
Belledonne Communications Linphone-Desktop
Successful exploitation of this vulnerability could could result in a remote attacker causing a denial-of-service condition on the affected devices.
-
Medium max 5.3
Siemens PROFINET Stack Integrated on Interniche Stack
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, contains a vulnerability that could allow an attacker to cause a denial of service condition on affected industrial products. Siemens has released new versions for several affected produ…
first Apr 12, 2022 -
Medium max 4.6
Siemens S7-1500 CPU devices
Affected models of the S7-1500 CPU product family do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use…
first Jan 10, 2023 -
High max 7.5
Siemens User Management Component (UMC)
Siemens User Management Component (UMC) before V2.11.2 is affected by multiple vulnerabilities where the most severe could lead to a restart of the UMC server. Siemens has released new versions for several affected products and recommends to update to the lat…
first Dec 12, 2023 -
Medium max 6.2
Siemens SIMATIC WinCC
A vulnerability in the login dialog box of SIMATIC WinCC could allow a local attacker to cause a denial of service condition in the runtime of the SCADA system. Siemens has released new versions for the affected products and recommends to update to the latest…
first Apr 9, 2024 -
High max 7.2
Siemens SCALANCE W700
SCALANCE W-700 IEEE 802.11ax family devices are affected by multiple vulnerabilities. Siemens has released a new version for SCALANCE W-700 IEEE 802.11ax family and recommends to update to the latest version. Siemens recommends countermeasures for vulnerabili…
first Jun 11, 2024 -
Critical max 9.1
Siemens SIMATIC SCADA and PCS 7 Systems
The products listed below contain a remote code execution vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges. Siemens has released new versions for several affected products and recommends to update …
first Sep 10, 2024 -
Medium max 4.7ICSA-25-016-02 1 CVE
Siemens Industrial Edge Management
Industrial Edge Management is affected by a reflected cross-site scripting (XSS) vulnerability that could allow an attacker to extract sensitive information by tricking users into accessing a malicious link. Siemens recommends countermeasures for products whe…
-
Critical max 9.1ICSA-25-037-03 1 CVE
ABB Drive Composer
An update is available that resolves vulnerability in the product versions as affected in this advisory. An attacker who successfully exploits the vulnerability could get unauthorized access to the file system on the host machine. This can lead to the executi…
-
High max 8.6ICSA-25-007-02 1 CVE
Nedap Librix Ecoreader
Successful exploitation of this vulnerability could result in remote code execution.
-
Medium max 5.9ICSA-24-354-01 1 CVE
Hitachi Energy RTU500 series CMU
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.