4,105 results · Feed
-
Critical max 9.1
Siemens RUGGEDCOM and SCALANCE M-800/S615 Family
SCALANCE M-800 family before V8.0 is affected by multiple vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or…
first Dec 12, 2023 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Teamcenter Visualization and JT2Go are affected by out of bounds read, stack exhaustion and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the…
first Jun 11, 2024 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by an out of bounds read vulnerability in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or pote…
first Jul 9, 2024 -
High max 7.2ICSA-24-228-01 4 CVEs
Siemens SCALANCE M-800, RUGGEDCOM RM1224
SCALANCE M-800 family before V8.1 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 8.7ICSA-24-228-02 2 CVEs
Siemens INTRALOG WMS
INTRALOG WMS before V4 is affected by vulnerabilities in the SQL Client-Server communication and in the .NET framework. Successful exploitation could allow an unauthenticated attacker located in the INTRALOG WMS network to decrypt and modify client-server com…
-
High max 7.8ICSA-24-228-03 3 CVEs
Siemens Teamcenter Visualization and JT2Go
Teamcenter Visualization and JT2Go are affected by out of bounds read and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applicat…
-
High max 7.5ICSA-24-228-04 5 CVEs
Siemens SINEC Traffic Analyzer
SINEC Traffic Analyzer before V2.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.
-
Critical max 9.1
Siemens SINEC NMS
SINEC NMS before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
-
Medium max 6.7ICSA-24-228-07 3 CVEs
Siemens Location Intelligence
Location Intelligence before V4.4 is affected by multiple vulnerabilities that could allow an attacker in an on-path position to read and modify data passed over the connection between legitimate clients and the affected product or brute force user passwords.…
-
High max 7.8ICSA-24-228-08 2 CVEs
Siemens COMOS
COMOS before V10.5 is affected by two local code execution vulnerabilities in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version.
-
High max 7.8ICSA-24-228-09 1 CVE
Siemens NX
NX (incl. NX student versions) before V2406.3000 contains an out-of-bounds read vulnerability that could be triggered when the application reads PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a cras…
-
High max 7.5ICSA-24-354-06 1 CVE
Schneider Electric Accutech Manager
Schneider Electric is aware of a vulnerability in its Accutech Manager software. The Accutech Manager software is the configuration and monitoring application for Accutech Wireless sensor devices. Failure to apply the remediations provided below may risk in r…
-
Medium max 5.3ICSA-24-221-01 3 CVEs
Dorsett Controls InfoScan
Successful exploitation of these vulnerabilities could allow an attacker to expose sensitive information, resulting in data theft and misuse of credentials.
-
High max 7.8ICSA-24-219-01 1 CVE
Delta Electronics DIAScreen
Successful exploitation of this vulnerability could allow an attacker to cause a stack-based buffer overflow, resulting in execution of arbitrary code.
-
High max 9.0ICSA-24-214-01 1 CVE
Johnson Controls exacqVision client and exacqVision server
Successful exploitation of this vulnerability could allow an attacker to be able to decrypt communications between exacqVision Server and exacqVision Client due to insufficient key length and exchange.
-
Medium max 6.8ICSA-24-214-02 1 CVE
Johnson Controls exacqVision Server web service
Successful exploitation of this vulnerability could allow an attacker to send an unauthorized request or access data from an untrusted domain.
-
Medium max 6.8ICSA-24-214-03 1 CVE
Johnson Controls exacqVision Web Service
Successful exploitation of this vulnerability could allow an attacker to perform state-changing operations with administrative privileges.
-
Medium max 6.4ICSA-24-214-04 1 CVE
Johnson Controls exacqVision Web Service
Successful exploitation of this vulnerability could allow an attacker to perform a man-in-the-middle attack and gain access to sensitive information.
-
Medium max 6.4ICSA-24-214-05 1 CVE
Johnson Controls exacqVision Server
Successful exploitation of this vulnerability could allow an attacker to perform a man-in-the-middle attack and intercept communications.
-
Medium max 5.7ICSA-24-214-06 1 CVE
Johnson Controls exacqVision Web Service
Successful exploitation of this vulnerability may allow an attacker to gain sensitive information.
-
High max 8.8ICSA-24-214-07 1 CVE
AVTECH IP camera
Successful exploitation of this vulnerability could allow an attacker to inject and execute commands as the owner of the running process.
-
Critical max 10.0ICSA-24-214-08 7 CVEs
Vonets WiFi Bridges
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial-of-service condition, or execute arbitrary code on the affected device.
-
High max 7.3ICSA-24-214-09 1 CVE
Rockwell Automation Logix Controllers
Successful exploitation of this vulnerability could allow an attacker to execute CIP programming and configuration commands.
-
High max 8.7ICSA-24-207-02 1 CVE
Positron Broadcast Signal Processor
Successful exploitation of this vulnerability could allow an attacker to bypass authentication and access unauthorized protected areas of the application.
-
High max 7.1
Hitachi Energy IED Connectivity Packages and PCM600 Products (Update A)
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive credentials and gain access to the affected products, perform unauthorized modifications, or provoke a denial-of-service condition.
first Nov 29, 2022 -
High max 7.8ICSA-24-205-01 1 CVE
National Instruments IO Trace
Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code.
-
High max 7.5ICSA-24-205-02 4 CVEs
Hitachi Energy AFS/AFR Series Products
Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition.
-
High max 7.8ICSA-24-205-03 3 CVEs
National Instruments LabVIEW
Successful exploitation of these vulnerabilities could allow a local attacker to disclose information and execute arbitrary code.
-
Critical max 9.8ICSA-24-207-01 2 CVEs
Siemens SICAM Products
Multiple SICAM products are affected by unauthorized password reset and firmware downgrade vulnerabilities that could lead to privilege escalation and potential leak of information, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICAM EG…
-
Medium max 6.5ICSA-24-200-02 1 CVE
Subnet Solutions PowerSYSTEM Center
Successful exploitation of this vulnerability could allow an authenticated attacker to elevate permissions.
-
High max 8.7ICSA-24-198-01 1 CVE
Rockwell Automation Pavilion 8
Successful exploitation of this vulnerability could allow an attacker to create new users and view sensitive data.
-
Critical max 9.3ICSA-24-193-18 3 CVEs
Rockwell Automation ThinManager ThinServer
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code or cause a denial-of-service condition.
-
Medium max 7.1ICSA-24-193-19 2 CVEs
Rockwell Automation FactoryTalk System Services and Policy Manager
Successful exploitation of these vulnerabilities could allow an attacker to obtain private keys, which would result in impersonating resources on the secured network.
-
Medium max 6.3ICSA-24-193-20 1 CVE
HMS Industrial Networks Anybus-CompactCom 30
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition, exfiltrate data, or obtain a high degree of control over the device and subsequent systems, including remote code execution .
-
Critical max 9.3
Mitsubishi Electric FA Engineering Software (Update A)
Successful exploitation of this vulnerability could allow a local attacker to execute code, which could result in information disclosure, tampering with and deletion of information, or a denial-of-service (DoS) condition.
first Sep 26, 2023 -
High max 8.8ICSA-24-191-02 1 CVE
Mitsubishi Electric MELIPC Series MI5122-VW
Successful exploitation of this vulnerability could allow an attacker to tamper with, destroy, disclose, or delete information in the product, or cause a denial-of-service (DoS) condition on the product.
-
Medium max 7.0ICSA-24-191-03 1 CVE
Johnson Controls Illustra Pro Gen 4
Successful exploitation of this vulnerability could impact confidentiality and integrity of the device.
-
High max 7.7ICSA-24-191-04 1 CVE
Johnson Controls Inc. Software House C●CURE 9000
Successful exploitations of this vulnerability could allow an attacker to gain administrative access
-
High max 7.5
Siemens Industrial Products (Update S)
Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a denial of service attack by sending specially crafted packets to port 161/udp (SNMP). Siemens has released new versions for several affected products an…
first Nov 23, 2017 -
High max 7.5
Siemens PROFINET Devices (Update K)
A vulnerability in affected devices could allow an attacker to perform a denial of service attack if a large amount of specially crafted UDP packets are sent to the device. Siemens has released new versions for several affected products and recommends to upda…
first Oct 8, 2019