4,105 results · Feed
-
High max 7.5
Siemens PROFINET-IO Stack (Update H)
Products that include the Siemens PROFINET-IO (PNIO) stack in versions prior V06.00 are potentially affected by a denial of service vulnerability when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. Siemens has released new …
first Feb 11, 2020 -
Critical max 9.8
Siemens OpenSSL Affecting Industrial Products
SINEMA Remote Connect Server is affected by multiple vulnerabilities, including - A cross-site scripting vulnerability in an error message pop up window (CVE-2022-29034) - Several authentication bypass, privilege escalation and integrity check vulnerabilities…
first Jun 14, 2022 -
High max 7.8
Siemens SINEC NMS
SINEC NMS before V2.0 is affected by a code injection and a stored cross-site scripting vulnerability. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
first Oct 10, 2023 -
Critical max 10.0
Siemens RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW
Palo Alto Networks has published [1] information on CVE-2024-3400 in PAN-OS. This advisory addresses Siemens Industrial products affected by this vulnerability. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM APE1808 and re…
first Apr 19, 2024 -
Critical max 7.8
Siemens TIM 1531 IRC
Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Jun 11, 2024 -
Critical max 9.8
Schneider Electric Sage Series
Schneider Electric is aware of multiple vulnerabilities in its SAGE RTU products. The SAGE RTU products are hardware devices that collect utility substation information from different devices and passes it along to a SCADA software platform. Failure to apply …
first Jun 11, 2024 -
Critical max 9.6ICSA-24-193-01 13 CVEs
Siemens Remote Connect Server
SINEMA Remote Connect Server before V3.2 SP1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
-
High max 7.8ICSA-24-193-04 15 CVEs
Siemens Simcenter Femap
Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in IGS, BDF or BMP file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the appli…
-
High max 7.5ICSA-24-193-08 1 CVE
Siemens Mendix Encryption Module
The Mendix Encryption module versions V10.0.0 and V10.0.1 define a specific hard-coded default value for the EncryptionKey constant, which is used in projects where no individual EncryptionKey was specified. This could allow to an attacker to decrypt any encr…
-
High max 8.8ICSA-24-193-09 2 CVEs
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server before V3.2 HF1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
-
High max 7.8ICSA-24-193-10 2 CVEs
Siemens JT Open and PLM XML SDK
JT Open Toolkit and PLM XML SDK are affected by stack buffer overflow and null pointer dereference vulnerabilities that could be triggered while parsing XML file. If a user is tricked to open a malicious XML file with any of the affected products, this could …
-
Medium max 6.3ICSA-24-193-12 1 CVE
Siemens TIA Portal and SIMATIC STEP 7
Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released a new v…
-
Medium max 6.5ICSA-24-193-13 1 CVE
Siemens TIA Portal, SIMATIC, and SIRIUS
Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new ver…
-
High max 7.8ICSA-24-193-15 3 CVEs
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server before V3.2 HF1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.
-
High max 7.8ICSA-24-193-17 1 CVE
Siemens SIMATIC STEP 7 (TIA Portal)
Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released a new v…
-
High max 7.8ICSA-24-345-02 3 CVEs
Schneider Electric EcoStruxure Foxboro DCS Core Control Services
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxureTM Foxboro DCS product. The EcoStruxureTM Foxboro DCS product is an innovative family of fault-tolerant, highly available control components, which consolidates critical information and…
-
High max 7.3ICSA-24-345-03 1 CVE
Schneider Electric FoxRTU Station
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro SCADA FoxRTU Station product. FoxRTU Station software facilitates configuration, diagnostics, logic development and device management for the SCD2200. The EcoStruxure™ Foxboro SCADA SC…
-
Critical max 10.0
PTC Creo Elements/Direct License Server (Update A)
Successful exploitation of this vulnerability could allow unauthenticated remote attackers to execute arbitrary OS commands.
first Jun 25, 2024 -
Critical max 9.1
Johnson Controls Illustra Essentials Gen 4 (Update A)
Successful exploitation of this vulnerability could allow an attacker to inject commands.
first Jun 27, 2024 -
Medium max 6.8
Johnson Controls Illustra Essentials Gen 4 (Update A)
Successful exploitation of this vulnerability could allow an authenticated user to recover credentials for other Linux users.
first Jun 27, 2024 -
Medium max 6.8
Johnson Controls Illustra Essentials Gen 4 (Update A)
Successful exploitation of this vulnerability may allow an attacker to gain access to Linux user credentials.
first Jun 27, 2024 -
Medium max 6.8
Johnson Controls Illustra Essentials Gen 4 (Update A)
Successful exploitation of this vulnerability may allow web interface user's credentials to be recovered by an authenticated user.
first Jun 27, 2024 -
Low max 3.1ICSA-24-184-01 1 CVE
Johnson Controls Kantech Door Controllers
Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information.
-
Critical max 9.8ICSA-24-184-02 1 CVE
mySCADA myPRO
Successful exploitation of this vulnerability could allow an attacker to remotely execute code on the affected device.
-
Critical max 9.3ICSA-24-179-01 4 CVEs
TELSAT marKoni FM Transmitter
Successful exploitation of these vulnerabilities could allow an attacker to tamper with the product to bypass authentication or perform remote code execution.
-
Critical max 9.3ICSA-24-179-02 1 CVE
SDG Technologies PnPSCADA
Successful exploitation of this vulnerability could allow an attacker to attach various entities without requiring system authentication. This breach could potentially lead to unauthorized control, data manipulation, and access to sensitive information within…
-
Medium max 5.8ICSA-24-179-03 2 CVEs
Yokogawa FAST/TOOLS and CI Server
Successful exploitation of these vulnerabilities could allow an attacker to launch a malicious script and take control of affected products.
-
High max 8.5ICSA-24-172-01 1 CVE
Yokogawa CENTUM
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary programs.
-
Critical max 7.3ICSA-24-172-02 1 CVE
CAREL Boss-Mini
Successful exploitation of this vulnerability could allow an attacker to manipulate an argument path, which would lead to information disclosure.
-
High max 7.5ICSA-24-172-03 3 CVEs
Westermo L210-F2G
Successful exploitation of these vulnerabilities could crash the device being accessed or may allow remote code execution.
-
High max 7.5ICSA-24-170-01 1 CVE
RAD Data Communications SecFlow-2
Successful exploitation of this vulnerability could allow an attacker to obtain files from the operating system by crafting a special request.
-
High
Mitsubishi Electric Multiple Products (Update G)
Successful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.
first Sep 1, 2020 -
Critical max 9.8
Mitsubishi Electric MELSEC-Q/L Series (Update B)
Successful exploitation of these vulnerabilities could allow a remote attacker to be able to read arbitrary information or execute malicious code on a target product by sending a specially crafted packet.
first Mar 14, 2024 -
High max 7.8ICSA-24-165-14 2 CVEs
Fuji Electric Tellus Lite V-Simulator
Successful exploitation of these vulnerabilities could allow a local attacker to perform code execution.
-
High max 8.2ICSA-24-165-16 1 CVE
Rockwell Automation FactoryTalk View SE
Successful exploitation of this vulnerability could allow an outside attacker to view an HMI project.
-
High max 8.5ICSA-24-165-17 1 CVE
Rockwell Automation FactoryTalk View SE
Successful exploitation of this vulnerability could allow low-privilege users to edit scripts, bypassing access control lists, and potentially gain further access within the system.
-
High max 8.2ICSA-24-165-18 1 CVE
Rockwell Automation FactoryTalk View SE
Successful exploitation of this vulnerability could allow a user from a remote system with FTView to view an HMI project.
-
High max 8.7ICSA-24-165-19 7 CVEs
Motorola Solutions Vigilant License Plate Readers
Successful exploitation of these vulnerabilities could allow an attacker to tamper with the device, access sensitive information and credentials, or perform a replay attack.
-
Medium max 6.8ICSA-25-016-06 1 CVE
Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products
Hitachi Energy is aware of a vulnerability that affects the FOXMAN-UN/FOXCST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Ac…
-
Medium max 6.9ICSA-25-016-07 1 CVE
Hitachi Energy FOX61x Products
Hitachi Energy is aware of a vulnerability that affects the XMC20 versions listed below. Please refer to the “Recommended Immediate Actions” for information about the remediation.