4,105 results · Feed
-
High max 7.2ICSA-25-016-08 2 CVEs
Schneider Electric Data Center Expert
Schneider Electric is aware of a vulnerability in its Data Center Expert product. The Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a comprehensive view of equipmen…
-
High max 8.5ICSA-25-023-03 1 CVE
Schneider Electric EVlink Home Smart and Schneider Charge
Schneider Electric is aware of a vulnerability with the potential disclosure of confidential information in its EVlink Home Smart and Schneider Charge charging stations. This is not related to any of the customer personal data and potential disclosure cannot …
-
High max 7.8ICSA-25-023-04 1 CVE
Schneider Electric Easergy Studio
Schneider Electric is aware of a vulnerability in its Easergy Studio product. The Easergy Studio product is a software solution for configuring, monitoring, and managing control devices. Failure to apply the remediation provided below may risk unauthorized ac…
-
Critical max 9.8ICSA-25-030-03 1 CVE
Schneider Electric System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs
Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC Series and Pro-face PS5000 trusted Legacy industrial PC Series product(s). The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Seri…
-
Critical max 9.3ICSA-24-277-01 2 CVEs
TEM Opera Plus FM Family Transmitter
Successful exploitation of these vulnerabilities could allow an attacker to perform remote code execution.
-
Critical max 9.8ICSA-24-277-03 2 CVEs
Delta Electronics DIAEnergie
Successful exploitation of these vulnerabilities could allow an attacker to retrieve records or cause a denial of service.
-
Critical max 9.8ICSA-24-275-01 2 CVEs
Optigo Networks ONS-S8 - Spectra Aggregation Switch
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution, arbitrary file upload, or bypass authentication.
-
High max 5.5ICSA-24-275-02 1 CVE
Mitsubishi Electric MELSEC iQ-F FX5-OPC
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of service condition on the product by getting a legitimate user to import a specially crafted PKCS#12 format certificate.
-
High max 7.5ICSA-24-277-02 3 CVEs
Subnet Solutions Inc. PowerSYSTEM Center
Successful exploitation of these vulnerabilities could result in an attacker bypassing a proxy, creating a denial-of-service condition, or viewing sensitive information.
-
High max 8.8ICSA-24-270-01 2 CVEs
Advantech ADAM-5550
Successful exploitation of these vulnerabilities could allow a remote attacker to intercept the easily decodable credentials of a legitimate user to gain full access to the device and could plant malicious code on the web page of the device.
-
High max 8.0ICSA-24-270-02 4 CVEs
Advantech ADAM 5630
Successful exploitation of this vulnerability could allow an attacker to hijack a legitimate user's session, perform cross-site request forgery, or cause a denial-of-service condition.
-
Critical max 9.3ICSA-24-270-03 1 CVE
Atelmo Atemio AM 520 HD Full HD Satellite Receiver
Successful exploitation of this vulnerability could allow an unauthorized attacker to execute system commands with elevated privileges.
-
Critical
Interpeak IPnet TCP/IP Stack (Update E)
Successful exploitation of these vulnerabilities could allow remote code execution.
first Oct 1, 2019 -
Medium max 5.4
Uniview NVR301-04S2-P4 (Update A)
An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser.
first Jun 4, 2024 -
Critical max 9.8ICSA-24-268-01 1 CVE
OPW Fuel Management Systems SiteSentinel
Successful exploitation of this vulnerability could allow an attacker to bypass authentication and obtain full administrative privileges to the server.
-
Critical max 9.4ICSA-24-268-02 1 CVE
Alisonic Sibylla
Successful exploitation of this vulnerability could result in an attacker obtaining device information from the database, dumping credentials, or potentially gaining administrator access.
-
High max 7.5ICSA-24-268-03 1 CVE
Franklin Fueling Systems TS-550 EVO
Successful exploitation of this vulnerability allow an attacker to gain administrative access over the affected device.
-
Critical max 10.0ICSA-24-268-04 6 CVEs
Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE
Successful exploitation of these vulnerabilities could allow a remote attacker to gain full control of the system.
-
Medium max 6.5ICSA-24-268-05 3 CVEs
Moxa MXview One
Successful exploitation of these vulnerabilities could allow an attacker to expose local credentials and write arbitrary files to the system, resulting in execution of malicious code.
-
Critical max 9.8
Treck TCP/IP (Update I)
Successful exploitation of these vulnerabilities may allow remote code execution or exposure of sensitive information.
first Jun 16, 2020 -
High max 7.7ICSA-24-263-01 1 CVE
Rockwell Automation RSLogix 5 and RSLogix 500
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution.
-
Medium max 8.1ICSA-24-263-03 1 CVE
IDEC CORPORATION WindLDR and WindO/I-NV4
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information.
-
High max 9.2ICSA-24-263-05 2 CVEs
Kastle Systems Access Control System
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information on the affected product.
-
High max 8.8ICSA-24-261-02 2 CVEs
Millbeck Communications Proroute H685t-w
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary commands on the device's operating system.
-
High max 7.5ICSA-24-261-03 1 CVE
Yokogawa Dual-redundant Platform for Computer (PC2CKM)
Successful exploitation of this vulnerability could allow an attacker to perform a denial-of-service.
-
High max 8.8ICSA-24-256-17 2 CVEs
AutomationDirect DirectLogic H2-DM1E
Successful exploitation of these vulnerabilities could allow an attacker to inject traffic into an ongoing authenticated session or authenticate as a valid user.
-
High max 8.7ICSA-24-256-18 1 CVE
Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380
Successful exploitation of this vulnerability may cause the device to become unavailable and require a factory reset to recover.
-
High max 7.7ICSA-24-256-19 1 CVE
Rockwell Automation OptixPanel
Successful exploitation of this vulnerability may allow users to exfiltrate credentials and escalate privileges.
-
High max 7.8ICSA-24-256-20 2 CVEs
Rockwell Automation AADvance Trusted SIS Workstation
Successful exploitation of these vulnerabilities could result in an attacker executing code within the context of a current process.
-
High max 7.5ICSA-24-256-21 1 CVE
Rockwell Automation 5015-U8IHFT
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
High max 8.1ICSA-24-256-22 1 CVE
Rockwell Automation FactoryTalk Batch View
Successful exploitation of this vulnerability could result in an attacker bypassing authentication.
-
Critical max 9.8ICSA-24-256-23 1 CVE
Rockwell Automation FactoryTalk View Site
Successful exploitation of this vulnerability could allow an attacker to perform unauthenticated remote code execution.
-
High max 8.8ICSA-24-256-24 2 CVEs
Rockwell Automation Pavilion8
Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information or upload arbitrary files that could result in remote code execution.
-
Medium max 6.8ICSA-24-256-25 1 CVE
Rockwell Automation ThinManager
Successful exploitation of this vulnerability could result in remote code execution.
-
Critical max 9.9
IBM webMethods Integration Multiple Vulnerabilities
IBM webMethods Integration contains multiple vulnerabilities that could allow an authenticated attacker to escalate privileges within webMethods, execute arbitrary operating system commands, or read arbitrary files.
-
Critical max 6.3ICSA-24-254-01 3 CVEs
Viessmann Climate Solutions SE Vitogate 300
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution.
-
High max 7.5ICSA-24-254-02 1 CVE
iniNet Solutions SpiderControl SCADA Web Server
Successful exploitation of this vulnerability could allow an attacker to log in or execute arbitrary code.
-
High max 8.7ICSA-24-254-03 1 CVE
Rockwell Automation SequenceManager
Successful exploitation of these vulnerabilities could cause a denial-of-service condition.
-
Medium max 5.1ICSMA-24-254-01 1 CVE
BPL Medical Technologies PWS-01-BT and BPL Be Well Android Application
Successful exploitation of this vulnerability could allow an attacker to intercept and modify information as it being processed
-
Medium max 6.5
Siemens PROFINET DCP (Update V)
Several industrial devices are affected by two vulnerabilities that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. The precondition for this scenario is a direct layer 2 access to t…
first May 8, 2017