4,105 results · Feed
-
Medium max 6.5
Siemens SIMATIC WinCC, OpenPCS
Two null point dereference vulnerabilities affect multiple SIMATIC software products. These could allow an attacker to cause a persistent denial of service condition in the RPC Server of these products. Siemens has released new versions for the affected produ…
first Feb 13, 2024 -
Medium max 4.6
Siemens SENTRON 7KM PAC3x20
The read out protection of the internal flash of affected devices was not properly set at the end of the manufacturing process. An attacker with physical access to the device could read out the data. Siemens has released new versions for the affected products…
first Mar 12, 2024 -
Medium max 6.1
Schneider Electric PowerLogic P5
Schneider Electric is aware of a vulnerability in its PowerLogic P5 products. The PowerLogic P5 is a medium voltage protection relay. Failure to apply the mitigations provided below may risk denial of service, device reboot, or an attacker gaining full contro…
first Jun 11, 2024 -
Medium max 4.3ICSA-24-256-01 1 CVE
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server before V3.2 SP2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.
-
Medium max 5.5ICSA-24-256-04 1 CVE
Siemens SINUMERIK Systems
SINUMERIK systems, that have been provisioned with Create MyConfig (CMC), are affected by a Insertion of Sensitive Information into Log File vulnerability. When using a CMC package on a NCU or on an IPC the password used in the CMC package or typed in manuall…
-
Critical max 8.6ICSA-24-256-10 7 CVEs
Siemens SINEMA
SINEMA Remote Connect Client before V3.2 SP2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.
-
Critical max 10.0ICSA-24-256-11 1 CVE
Siemens Industrial Edge Management
Industrial Edge Management contains an Authorization Bypass vulnerability that could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system. Siemens has released new versions for the affected products and recommends to u…
-
High max 7.5ICSA-24-261-01 1 CVE
Siemens SIMATIC S7-200 SMART Devices
A vulnerability in SIMATIC S7-200 SMART devices could allow an attacker to cause a denial of service condition if a specially crafted TCP packet is sent to the device. Siemens recommends specific countermeasures for products where fixes are not, or not yet av…
-
Medium max 5.4ICSA-25-014-03 1 CVE
Schneider Electric EcoStruxure
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) is an on-premises software used to help power. critical and energy-int…
-
Critical max 9.8ICSA-25-182-01 1 CVE
FESTO Didactic CP, MPS 200, and MPS 400 Firmware
Siemens SIMATIC S7-1200 and S7-1500 CPUs contained in various Festo Didactic products contain a memory protection bypass vulnerability that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch fur…
-
High
Mitsubishi Electric MELSEC iQ-R, Q, and L Series (Update E)
Successful exploitation of this vulnerability could cause a denial-of-servicecondition in the Ethernet port on the CPU module.
first Oct 29, 2020 -
High max 7.5
Mitsubishi Electric MELSEC iQ-R, iQ-L Series and MELIPC Series (Update E)
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition in the module's ethernet communication.
first Dec 22, 2022 -
Medium max 6.5ICSA-24-249-01 2 CVEs
Hughes Network Systems WL3000 Fusion Software
Successful exploitation of these vulnerabilities could allow an attacker to obtain read-only access to network configuration information and terminal configuration data.
-
Critical max 10.0ICSMA-24-249-01 2 CVEs
Baxter Connex Health Portal
Successful exploitation of these vulnerabilities could lead to malicious code injection, shutdown of database service, or the ability to access, modify, or delete sensitive data from the database.
-
High max 7.5ICSA-24-247-01 10 CVEs
LOYTEC Electronics LINX Series
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or make modifications to an affected device.
-
High max 8.5
Rockwell Automation FactoryTalk View Site Edition (Update A)
Successful exploitation of this vulnerability could allow any user to edit or replace files, which are executed by account with elevated permissions.
first Aug 13, 2024 -
Critical max 9.3ICSA-24-242-01 3 CVEs
Rockwell Automation ThinManager ThinServer
Successful exploitation of these vulnerabilities could allow an attacker to read arbitrary files and execute arbitrary code with system privileges.
-
High max 8.4ICSA-24-242-02 1 CVE
Delta Electronics DTN Soft
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.
-
High max 8.7ICSA-24-235-03 1 CVE
Authenticated Remote Code Execution affects Mobotix P3 and Mx6 cameras
A vulnerability was found in the P3 and Mx6 cameras that allows a logged-in attacker to execute arbitrary commands with system rights.
-
High
Mitsubishi Electric MELSEC iQ-R Series (Update D)
Successful exploitation of this vulnerability could cause a denial-of-service condition.
first Nov 19, 2020 -
Medium max 5.4ICSA-24-235-01 1 CVE
Rockwell Automation Emulate3D
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution.
-
High max 8.7ICSA-24-235-02 1 CVE
Rockwell Automation 5015 - AENFTXT
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
High max 7.5ICSA-24-235-04 2 CVEs
Avtec Outpost 0810
Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges on the affected devices.
-
High max 8.5ICSA-24-228-10 1 CVE
AVEVA Historian Web Server
Successful exploitation of this vulnerability could allow an authenticated user to get read and write access to the database.
-
Medium max 5.3ICSA-24-228-11 1 CVE
PTC Kepware ThingWorx Kepware Server
Successful exploitation of this vulnerability could crash the target device.
-
High max 8.7ICSA-24-226-01 1 CVE
AVEVA SuiteLink Server
Successful exploitation of this vulnerability could allow an attacker to cause the server to consume excessive system resources, preventing processing of SuiteLink messages on the targeted host.
-
Critical max 9.8ICSA-24-226-02 2 CVEs
Rockwell Automation AADvance Standalone OPC-DA Server
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code in the affected product.
-
High max 8.7ICSA-24-226-03 1 CVE
Rockwell Automation GuardLogix/ControlLogix 5580 Controller
Successful exploitation of this vulnerability could allow an attacker to perform a denial-of-service on the device.
-
High max 5.3ICSA-24-226-04 1 CVE
Rockwell Automation Pavilion8
Successful exploitation of this vulnerability could allow an attacker to view sensitive data due to a lack of encryption.
-
Critical max 8.6ICSA-24-226-05 1 CVE
Rockwell Automation DataMosaix Private Cloud
Successful exploitation of this vulnerability could allow an attacker to generate cookies for a user ID without the use of a username or password, resulting in the malicious actor to take over the account.
-
Medium max 6.9ICSA-24-226-07 1 CVE
Rockwell Automation Micro850/870
Successful exploitation of this vulnerability may cause CIP/Modbus communication to be disrupted for short duration.
-
High max 8.5ICSA-24-226-08 2 CVEs
Ocean Data Systems Dream Report
Successful exploitation of these vulnerabilities could allow an attacker to perform remote code execution or escalate their privileges and cause a denial-of-service condition.
-
High max 8.7ICSA-24-226-09 1 CVE
Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, Compact GuardLogix 5380
Successful exploitation of this vulnerability could allow and attacker to cause a denial-of-service condition.
-
High max 8.7ICSA-24-226-10 1 CVE
Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, and Compact GuardLogix 5380
Successful exploitation of this vulnerability could crash the device being accessed.
-
Medium max 6.7
Siemens TIA Project-Server formerly known as TIA Multiuser Server
TIA Project-Server formerly known as TIA Multiuser Server contains an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path. Siemens has r…
first Feb 14, 2023 -
High max 7.3
Siemens TIA Portal
TIA Portal contains a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability t…
first Apr 11, 2023 -
High max 7.3
Siemens SCALANCE Switch Families
Siemens has released a new firmware version for SCALANCE X-200 and X-200 IRT switches that address Bad Alloc vulnerabilities in the underlying operating system and recommends to update to the latest versions. Siemens recommends countermeasures for products wh…
first Apr 11, 2023 -
High max 7.8
Siemens Parasolid and Teamcenter Visualization
Parasolid and Teamcenter Visualization are affected by memory corruption vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could le…
first Aug 8, 2023 -
Critical max 9.8
Siemens Desigo CC product family
Versions V5.0 through V7 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON powermanager, are affected by multiple vulnerabilities in the underlying third-party component WIB…
first Nov 14, 2023 -
High max 7.2
Siemens SCALANCE and RUGGEDCOM M-800/S615 Family
SCALANCE M-800 family before V7.2.2 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Dec 12, 2023