4,105 results · Feed
-
High max 7.3ICSA-24-317-03 1 CVE
Rockwell Automation FactoryTalk View ME
Successful exploitation of this vulnerability could allow a local low-privileged user to escalate their privileges by changing the macro to execute arbitrary code.
-
High max 9.8
Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC
Overview Schneider Electric is aware of a vulnerability in its PowerLogic PM55xx and PowerLogic PM8ECC products. The PowerLogic PM55xx products are power metering devices. The PowerLogic PM8ECC product is an ethernet communication module. Failure to apply the…
first Jun 8, 2021 -
Medium max 5.9
Siemens SIMATIC WinCC
Multiple versions of SIMATIC WinCC and SIMATIC PCS 7 do not properly handle certain requests to their web application (WinCC WebNavigator, PCS 7 Web Server, and PCS 7 Web Diagnostics Server), which may lead to the leak of privileged information. This could al…
first Jul 9, 2024 -
High max 8.6ICSA-24-319-04 17 CVEs
Siemens SINEC NMS
SINEC NMS before V3.0 SP1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
-
High max 7.8ICSA-24-319-05 3 CVEs
Siemens Solid Edge
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or PSM format, and by a DLL hijacking vulnerability. This could allow an attacker to cras…
-
Critical max 9.9
Siemens SINEC INS
SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.
-
High max 7.8ICSA-24-319-09 1 CVE
Siemens Spectrum Power 7
Spectrum Power 7 before V24Q3 contains several root-owned SUID binaries that could allow an authenticated local attacker to escalate privileges. Siemens has released a new version for Spectrum Power 7 and recommends to update to the latest version.
-
Critical max 9.8ICSA-24-326-05 1 CVE
Schneider Electric EcoStruxure IT Gateway
Customers should use appropriate methodologies when updating their systems. We strongly recommend the use of backups and evaluating the impact of the software update in a Test and Development environment or on an offline infrastructure. Contact Schneider Elec…
-
High max 7.5ICSA-24-326-06 1 CVE
Schneider Electric PowerLogic PM5300 Series
Note - PM5310 and PM5330 are not impacted because they use serial communication infrastructure and donot have an Ethernet stack.
-
Medium max 6.5ICSA-24-312-01 1 CVE
Beckhoff Automation TwinCAT Package Manager
Successful exploitation this vulnerability could allow a local attacker with administrative access rights to execute arbitrary OS commands on the affected system.
-
High max 7.8ICSA-24-312-02 3 CVEs
Delta Electronics DIAScreen
Successful exploitation of this these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution.
-
High max 7.5ICSA-24-312-03 1 CVE
Bosch Rexroth IndraDrive
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service, rendering the device unresponsive by sending arbitrary UDP messages.
-
Critical max 9.8ICSA-24-305-01 2 CVEs
Rockwell Automation FactoryTalk ThinManager
Successful exploitation of these vulnerabilities could allow an attacker to send crafted messages to the device resulting in database manipulation or a denial-of-service condition.
-
Critical max 10.0
Hitachi Energy FOXMAN-UN
Hitachi Energy is aware of multiple internal reported vulnerabilities that affects the FOXMAN-UN versions listed below. Please refer to the “Recommended Immediate Actions” for information about the remediation.
first Jun 11, 2024 -
Medium max 5.4ICSA-24-303-02 1 CVE
Solar-Log Base 15
Successful exploitation of this vulnerability could result in an attacker obtaining unauthorized access.
-
Critical max 9.8ICSA-24-303-03 1 CVE
Delta Electronics InfraSuite Device Master
Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely execute arbitrary code.
-
Critical max 9.8
OMNTEC Proteus Tank Monitoring (Update A)
Successful exploitation of this vulnerability allow an attacker to perform administrative actions without proper authentication.
first Sep 24, 2024 -
Medium max 6.9ICSA-24-298-01 1 CVE
VIMESA VHF/FM Transmitter Blue Plus
Successful exploitation of this vulnerability could allow an attacker to perform a Denial-of-Service.
-
High max 8.0ICSA-24-298-02 1 CVE
iniNet Solutions SpiderControl SCADA PC HMI Editor
Successful exploitation of this vulnerability could allow an attacker to gain remote control of the device.
-
Medium max 6.5ICSA-24-298-03 1 CVE
Deep Sea Electronics DSE855
Successful exploitation of this vulnerability could allow an attacker to access stored credentials.
-
Critical max 8.8
goTenna Pro X and Pro X2 (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to compromise the confidentiality and integrity of the communications between the affected devices.
first Sep 26, 2024 -
Medium max 6.5
goTenna Pro ATAK Plugin (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to compromise the confidentiality and integrity of the communications between the affected devices.
first Sep 26, 2024 -
High max 7.0ICSA-24-291-02 1 CVE
LCDS LAquis SCADA
Successful exploitation of this vulnerability could allow an attacker to steal cookies, inject arbitrary code, or perform unauthorized actions.
-
High max 8.2ICSA-24-291-04 1 CVE
HMS Networks EWON FLEXY 202
Successful exploitation of this vulnerability could allow an attacker to sniff and decode credentials that are transmitted using weak encoding techniques.
-
Critical max 9.8ICSA-24-291-05 3 CVEs
Kieback&Peter DDC4000 Series
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to gain full administrator rights on the system.
-
High max 7.8ICSA-24-284-14 2 CVEs
Schneider Electric Zelio Soft 2
Successful exploitation of these vulnerabilities could allow an attacker to achieve arbitrary code execution, cause a denial-of-service condition, or loss of confidentiality and integrity.
-
High max 8.7ICSA-24-284-15 3 CVEs
Rockwell Automation DataMosaix Private Cloud
Successful exploitation of these vulnerabilities could allow an attacker to view customer data or create, modify, or delete their own project.
-
Critical max 7.8ICSA-24-284-16 6 CVEs
Rockwell Automation DataMosaix Private Cloud
Successful exploitation of these vulnerabilities could cause a denial-of-service condition, view customer data, or perform remote code execution.
-
Medium max 8.4ICSA-24-284-17 1 CVE
Rockwell Automation Verve Asset Manager
Successful exploitation of this vulnerability could allow an unauthorized user to access data they previously had but should no longer have access to.
-
High max 8.7ICSA-24-284-18 1 CVE
Rockwell Automation Logix Controllers
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service on the affected products.
-
High max 8.2ICSA-24-284-19 1 CVE
Rockwell Automation PowerFlex 6000T
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
High max 7.5ICSA-24-284-20 1 CVE
Rockwell Automation ControlLogix
Successful exploitation of this vulnerability could allow an attacker to send a specially crafted CIP message and cause a denial-of-service condition on the affected device.
-
High max 8.4ICSA-24-284-21 5 CVEs
Delta Electronics CNCSoft-G2
Successful exploitation of these vulnerabilities could allow an attacker to execute code remotely.
-
Medium max 5.5
Siemens LOGO! 8 BM
A Denial-of-Service vulnerability has been identified in LOGO! 8 BM. This vulnerability could allow an attacker to crash a device, if a user is tricked into loading a malicious project file onto an affected device. The vulnerability is related to the hardware…
first Mar 9, 2021 -
Critical max 9.8
Siemens LOGO! 8 BM Devices
LOGO! 8 BM (incl. SIPLUS variants) contains multiple web-related vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state or retrieve parts of the memory. The vulnerabilities are related to the har…
first Oct 11, 2022 -
Medium max 4.6
Siemens LOGO! V8.3 BM Devices
LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a plaintext storage of a password vulnerability. This could allow an attacker with phyiscal access to an affected device to extract user-set passwords from an embedded storage IC. Siemens has released new …
first Aug 13, 2024 -
Critical max 9.8ICSA-24-284-04 1 CVE
Siemens SENTRON PAC3200 Devices
SENTRON PAC3200 only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by monitoring the Modbus cleartext commu…
-
High max 8.8ICSA-24-284-09 2 CVEs
Siemens PSS SINCAL
Several Siemens products (optionally) offer the use of WibuKey Dongles [1] for licensing. According to a recent publication by WIBU Systems (WIBU-94453 at [2]), the Windows device driver for these Dongles contains vulnerabilities as listed below. - [1] https:…
-
Medium max 6.0ICSA-24-284-11 1 CVE
Siemens RUGGEDCOM APE1808
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 24.2.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for the affected products and r…
-
High max 7.2ICSA-24-289-02 2 CVEs
Schneider Electric Data Center Expert
Schneider Electric is aware of a vulnerability in its Data Center Expert product. The Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a comprehensive view of equipmen…