4,105 results · Feed
-
Critical max 10.0ICSA-25-030-01 8 CVEs
Hitachi Energy UNEM
Hitachi Energy is aware of multiple internal reported vulnerabilities that affects the UNEM versions listed below. Please refer to the “Recommended Immediate Actions” for information about the remediation.
-
Medium max 6.9ICSA-25-063-04 1 CVE
Hitachi Energy XMC20
Hitachi Energy is aware of a vulnerability that affects the XMC20 versions listed below. Please refer to the “Recommended Immediate Actions” for information about the remediation.
-
Medium max 6.8ICSA-25-063-05 1 CVE
Hitachi Energy UNEM/ECST
Hitachi Energy is aware of a vulnerability that affects the UNEM/ECST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” …
-
Critical max 9.8
Schneider Electric APC Easy UPS Online Monitoring Software (Update A)
Successful exploitation of this vulnerability could result in an attacker achieving remote code execution on the underlying operating system when manipulating internal methods through the Java RMI interface. It could also result in escalation of privileges or…
first Apr 18, 2023 -
High max 8.3ICSA-24-163-01 1 CVE
Rockwell Automation ControlLogix, GuardLogix, and CompactLogix
Successful exploitation of this vulnerability could compromise the availability of the device.
-
High max 8.4ICSA-24-163-02 1 CVE
AVEVA PI Web API
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution.
-
High max 7.0ICSA-24-163-03 1 CVE
AVEVA PI Asset Framework Client
Successful exploitation of this vulnerability could allow malicious code execution.
-
Critical max 10.0ICSA-24-163-04 1 CVE
Intrado 911 Emergency Gateway
Successful exploitation of this vulnerability could allow an attacker to execute malicious code, exfiltrate data, or manipulate the database.
-
High max 8.8ICSMA-24-163-01 2 CVEs
MicroDicom DICOM Viewer
Successful exploitation of these vulnerabilities could allow an attacker to both retrieve and plant medical image files on a victim's system and cause a stack-based buffer overflow, which could result in sensitive information disclosure and arbitrary code exe…
-
High max 7.8
Siemens SICAM PAS/PQS
SICAM PAS/PQS is affected by insecure permission assignments in application folders that could allow an authenticated local attacker to read and modify configuration data or to escalate privileges. Siemens has released a new version for SICAM PAS/PQS and reco…
first Oct 10, 2023 -
High max 7.8
Siemens SICAM Products
Multiple SICAM products are affected by vulnerabilities that could lead to privilege escalation, remote code execution or information loss namely: - SICAM A8000 device firmwares - CPC80 for CP-8000/CP-8021/CP-8022 - CPCI85 and OPUPI0 for CP-8031/CP-8050 - SIC…
first May 14, 2024 -
Critical max 10.0
Siemens SIMATIC RTLS Locating Manager
Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version.
first May 14, 2024 -
Medium max 5.9ICSA-24-165-01 1 CVE
Siemens Mendix Applications
Apps built with Mendix Runtime >= V9.3 could allow users with the capability to manage a role to elevate the access rights of users with that role. Successful exploitation requires to guess the id of a target role which contains the elevated access rights. Si…
-
High max 8.2ICSA-24-165-02 1 CVE
Siemens SIMATIC S7-200 SMART Devices
SIMATIC S7-200 SMART devices contain an information disclosure vulnerability which leaves the system susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack and eventually could allow an at…
-
Low max 3.3ICSA-24-165-03 1 CVE
Siemens TIA Administrator
TIA Administrator creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process. Siemens has released a new version for TIA Administrator and recommends to updat…
-
High max 8.2
Siemens ST7 ScadaConnect
Siemens has released a new version for ST7 ScadaConnect and recommends to update to the latest version.
-
Medium max 5.6ICSA-24-165-05 3 CVEs
Siemens SITOP UPS1600
Multiple out-of-bounds vulnerabilities in third-party components are affecting SITOP UPS1600 before V2.5.4. Attackers could exploit these vulnerabilities and cause limited impact in the affected systems. Siemens has released new versions for the affected prod…
-
Critical max 9.3ICSA-24-165-07 1 CVE
Siemens PowerSys
PowerSys before V3.11 is affected by a vulnerability that could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices. Siemens has released a new version for PowerSys and recommends to update…
-
High max 7.8ICSA-24-165-09 1 CVE
Siemens SICAM AK3/BC/TM
SICAM AK3/TM/BC devices are affected by a buffer overflow vulnerability that could allow an attacker to execute code in the context of the current process or lead to a denial of service condition. - SICAM AK3 device firmware- CPCX26 for CP-2016 - PCCX26 for C…
-
Critical max 7.8ICSA-24-165-10 23 CVEs
Siemens SIMATIC and SIPLUS
SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 are affected by multiple vulnerabilities in third-party components and the integrated web server. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 7.5ICSA-24-165-11 8 CVEs
Siemens SCALANCE XM-400, XR-500
Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
MediumICSA-24-158-01 0 CVEs
Emerson PACSystem and Fanuc
Successful exploitation of these vulnerabilities could allow remote code execution, loss of sensitive information, or a denial-of-service condition.
-
Critical max 9.8ICSA-24-158-02 2 CVEs
Emerson Ovation
Successful exploitation of these vulnerabilities could allow remote code execution, loss of sensitive information, denial-of-service, or allow an attacker to modify the controller configuration.
-
Low max 6.5ICSA-24-158-03 1 CVE
Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch
Successful exploitation of this vulnerability could allow an attacker to cause a temporary denial-of service (DoS) condition in the web service on the product.
-
Medium max 7.5
Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch (Update A)
Successful exploitation of these vulnerabilities could result in disclosure of information stored in the product by sending specially crafted packets or could cause a denial-of service (DoS) condition by getting a legitimate user to import a specially crafted…
first Oct 5, 2023 -
High max 7.5
Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)
Successful exploitation of this vulnerability could result in a denial-of-service condition for Ethernet communication. A system restart would be required to restore functionality.
first Jun 14, 2022 -
Critical max 9.3ICSA-24-151-01 3 CVEs
LenelS2 NetBox
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute malicious commands with elevated permissions
-
High max 7.8ICSA-24-151-03 1 CVE
Inosoft VisiWin
Successful exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges
-
Critical max 9.8ICSA-24-151-04 2 CVEs
Westermo EDW-100
Successful exploitation of these vulnerabilities could allow an attacker to access the device using hardcoded credentials and download cleartext username and passwords.
-
Critical max 9.4ICSMA-24-151-01 1 CVE
Baxter Welch Allyn Configuration Tool
Successful exploitation of this vulnerability could lead to the unintended exposure of credentials to unauthorized users.
-
High max 9.1ICSMA-24-151-02 1 CVE
Baxter Welch Allyn Connex Spot Monitor
Successful exploitation of this vulnerability could allow an attacker to modify device configuration and firmware data. Tampering with this data could lead to device compromise, resulting in impact and/or delay in patient care.
-
Medium max 6.9ICSA-24-149-01 2 CVEs
Campbell Scientific CSI Web Server
Successful exploitation of these vulnerabilities could allow an attacker to download files and decode stored passwords.
-
Critical max 9.8ICSA-24-144-01 15 CVEs
AutomationDirect Productivity PLCs
Successful exploitation of these vulnerabilities could lead to remote code execution and denial of service.
-
High max 7.8ICSA-24-142-01 1 CVE
LCDS LAquis SCADA
Successful exploitation of these vulnerabilities could allow an attacker to read and write files outside of their own directory.
-
High max 7.4
GE Healthcare Ultrasound products (Update A)
Successful exploitation of these vulnerabilities could allow an attacker with physical access to gain access to the operating system of affected devices.
first Feb 18, 2020 -
Medium max 6.5
Mitsubishi Electric MELSEC iQ-R Series Safety CPU and SIL2 Process CPU (Update A)
Successful exploitation of this vulnerability could allow a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than themselves.
first Feb 13, 2024 -
High max 8.8ICSA-24-137-14 1 CVE
Rockwell Automation FactoryTalk View SE
Successful exploitation of this vulnerability could allow an attacker to inject a malicious SQL statement in the SQL database, resulting in expose sensitive information.
-
Medium max 7.0ICSA-24-135-01 1 CVE
Rockwell Automation FactoryTalk Remote Access
Successful exploitation of this vulnerability could allow an attacker to enter a malicious executable and run it as a system user, resulting in remote code execution.
-
High max 8.4ICSA-24-135-02 1 CVE
SUBNET PowerSYSTEM Center
Successful exploitation of the vulnerabilities in components used by PowerSYSTEM Center could allow privilege escalation, denial-of-service, or arbitrary code execution.
-
High max 8.5ICSA-24-135-03 1 CVE
Johnson Controls Software House C●CURE 9000
Successful exploitation of this vulnerability may allow an attacker to access credentials used for access to the application.