4,105 results · Feed
-
High max 7.8ICSA-24-354-03 1 CVE
Delta Electronics DTM Soft
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 8.8ICSA-24-354-05 1 CVE
Tibbo AggreGate Network Manager
Successful exploitation of this vulnerability could allow an attacker to achieve code execution on the affected device.
-
Medium max 4.4ICSMA-24-354-01 3 CVEs
Ossur Mobile Logic Application
Successful exploitation of these vulnerabilities could allow an attacker unauthorized access to sensitive information.
-
Medium max 6.0
Hitachi Energy RTU500 series
Hitachi Energy is aware of the vulnerabilities CVE-2023-5767, CVE-2023-5768 and CVE-2023-5769 in the Web server and HCI IEC 60870-5-104 component, that affects the RTU500 versions that are listed below. An at- tacker successfully exploiting these vulnerabilit…
first Nov 28, 2023 -
High max 8.8ICSA-24-352-01 1 CVE
ThreatQuotient ThreatQ Platform
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution.
-
MediumICSA-24-352-02 1 CVE
Hitachi Energy TropOS Devices Series 1400/2400/6400
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Critical max 9.3ICSA-24-352-03 3 CVEs
Rockwell Automation PowerMonitor 1000 Remote
Successful exploitation of these vulnerabilities could allow an attacker to perform edit operations, create admin users, perform factory reset, execute arbitrary code, or cause a denial-of-service condition.
-
Critical max 9.8
Ruijie Reyee OS (Update A)
Successful exploitation of this vulnerabilities could allow attackers to take near full control over the device.
first Dec 3, 2024 -
Critical max 9.8ICSA-24-345-01 1 CVE
MOBATIME Network Master Clock - DTS 4801
Successful exploitation of this vulnerability could allow an attacker to take control of the operating system for this product.
-
High max 7.8ICSA-24-345-04 3 CVEs
National Instruments LabVIEW
Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.
-
High max 7.8ICSA-24-345-05 2 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.
-
Medium max 6.2
Siemens TIA Portal
The know-how protection feature in Totally Integrated Automation Portal (TIA Portal) does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previ…
first Jun 13, 2023 -
High max 8.8
Siemens RUGGEDCOM APE1808
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products whe…
first Apr 9, 2024 -
High max 7.8ICSA-24-347-06 2 CVEs
Siemens Simcenter Femap
Simcenter Femap contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application …
-
High max 7.8ICSA-24-347-07 3 CVEs
Siemens Solid Edge SE2024
Siemens Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious PAR or ASM files. If a user is tricked to open a malicious file with the affected products, this could lead the application to…
-
Medium max 5.3ICSA-25-010-01 1 CVE
Schneider Electric PowerChute Serial Shutdown
Schneider Electric is aware of a vulnerability in its PowerChute Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and worksta…
-
High max 8.8ICSA-25-010-02 1 CVE
Schneider Electric Harmony HMI and Pro-Face HMI Products
Schneider Electric is aware of a vulnerability in its Harmony HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 products used with EcoStruxure™ Operator Terminal Expert Software and PFXST6000, PFXSTM6000, PFXSP5000, PFXGP4100 products used with Pro-face BLUE Software.…
-
High max 7.8ICSA-24-340-01 3 CVEs
AutomationDirect C-More EA9 Programming Software
Successful exploitation of these vulnerabilities could result in memory corruption; a buffer overflow condition may allow remote code execution.
-
Critical max 9.8ICSA-24-340-02 3 CVEs
Planet Technology Planet WGS-804HPT
Successful exploitation of these vulnerabilities could result in remote code execution.
-
Critical max 10.0
ABB ASPECT System
ABB became aware of vulnerabilities in the product versions listed as affected in the advisory. ASPECT devices are not intended to be internet-facing. A product advisory issued in June 2023 informed cus-tomers of this parameter. An attacker can successfully e…
first Jul 3, 2024 -
Critical max 9.8
FESTO CODESYS
An unauthenticated attacker would be able to send crafted requests to cause the CODESYS Gateway Server V2 to allocate excessive memory or consume all available TCP client connections. Besides, passwords are insufficiently checked during login. All versions of…
-
High max 7.6
ETIC Telecom Remote Access Server (RAS) (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information and compromise the vulnerable device and other connected machines.
first Nov 3, 2022 -
High max 7.8ICSA-24-338-03 1 CVE
Open Automation Software
Successful exploitation of this vulnerability could result in an attacker executing code with escalated privileges.
-
Critical max 9.8VA-24-331-01 1 CVE
Valor Apps Easy Folder Listing Pro Joomla! extension deserialization vulnerability
Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows any external user can gain console access to vulnerable web servers that could potentially lead to total compromise of the web server, potential privilege escalation, and initi…
-
Medium max 7.5
Philips Vue PACS (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain access to the database, which could impact system availability and data integrity or cause a denial-of-service condition.
first Jul 18, 2024 -
Critical max 10.0ICSA-24-326-01 2 CVEs
Automated Logic WebCTRL Premium Server
Successful exploitation of these vulnerabilities could allow an unauthenticated remote attacker to execute arbitrary commands on the server hosting WebCTRL or redirect legitimate users to malicious sites.
-
Medium max 4.4ICSA-24-326-02 1 CVE
OSCAT Basic Library
Successful exploitation of this vulnerability allows an local, unprivileged attacker to access limited internal data of the PLC, which may lead to a crash of the affected service.
-
Critical max 10.0ICSA-24-326-07 5 CVEs
mySCADA myPRO Manager
Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands or disclose sensitive information.
-
Critical max 10.0
Versa Networks Versa Director insecure default PostgreSQL configuration
Versa Networks Versa Director, by default, configures PostgreSQL to listen on all network interfaces using database credentials shared by multiple installations. From [Advising Vulnerability In Versa Director](https://security-portal.versa-networks.com/emailb…
-
High max 9.1
Rockwell Automation Verve Reporting (Update A)
Successful exploitation of this vulnerability could lead to arbitrary code execution.
first Nov 14, 2024 -
Critical max 9.1
Rockwell Automation FactoryTalk Updater (Update A)
Successful exploitation of these vulnerabilities could result in an authentication bypass, remote code execution, and/or a local privilege escalation
first Nov 14, 2024 -
Critical max 9.2
Adminer and AdminerEvo Multiple Vulnerabilities
Adminer and AdminerEvo contain multiple vulnerabilities. Successful exploitation of these vulnerabilities could allow a remote, unauthenticated attacker to deny service, enumerate and access systems indirectly, upload arbitrary files, and execute arbitrary co…
first Jul 19, 2024 -
Critical max 9.2
Elvaco M-Bus Metering Gateway CMe3100 (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to perform remote code execution, impersonate and send false information, or bypass authentication.
first Oct 17, 2024 -
High max 7.3ICSA-24-319-15 1 CVE
Rockwell Automation Arena Input Analyzer
Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code on the program.
-
Critical max 10.0ICSMA-24-319-01 9 CVEs
Baxter Life2000 Ventilation System
Successful exploitation of these vulnerabilities could lead to information disclosure and/or disruption of the device's function without detection.
-
Critical max 9.1VA-24-317-01 6 CVEs
Ivanti Connect Secure and Ivanti Policy Secure Multiple Vulnerabilities
Ivanti Connect Secure and Ivanti Policy Secure contain multiple vulnerabilities that allow a remote, authenticated attacker to execute arbitrary code. All of the vulnerabilities except for CVE-2024-39709 require the attacker to be authenticated with administr…
-
Critical max 8.8
Snap One OvrC Cloud (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to impersonate and claim devices, execute arbitrary code, and disclose information about the affected device.
first May 16, 2023 -
Critical max 10.0
Mitsubishi Electric FA products (Update A)
Successful exploitation of this vulnerability may allow a remote attacker to execute arbitrary commands by sending specific packets to the affected products.
first Nov 2, 2023 -
Critical max 9.8ICSA-24-317-01 3 CVEs
Subnet Solutions PowerSYSTEM Center
Successful exploitation of these vulnerabilities could allow an attacker to cause an integer overflow on the affected device.
-
High max 7.2ICSA-24-317-02 2 CVEs
Hitachi Energy TRO600
Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges…