4,105 results · Feed
-
High max 8.4ICSA-24-100-01 1 CVE
SUBNET PowerSYSTEM Server and Substation Server
Successful exploitation of the vulnerabilities in components used by PowerSYSTEM Server 2021 and Substation Server 2021 could allow privilege escalation, denial of service, or arbitrary code execution.
-
High max 7.5
Siemens SCALANCE W1750D Devices
The SCALANCE W1750D device contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, decrypt RSA-encrypted messages or create a denial of service condition. Siemens has released new versions fo…
first Mar 14, 2023 -
Critical max 9.8
Siemens SIMATIC S7-1500 TM MFP BIOS
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - BIOS and recommends to update to the latest version.
first Jun 13, 2023 -
Critical max 9.8
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. This ad…
first Jun 13, 2023 -
High max 8.4
Siemens SCALANCE W700
The SCALANCE W700 devices are affected by Wi-Fi encryption bypass vulnerabilities ("Framing Frames") that could allow an attacker to disclose sensitive information, to steal the victims session or to execute denial-of-service attacks. Siemens recommends count…
first Nov 14, 2023 -
Critical max 9.8
Siemens SCALANCE W1750D
The SCALANCE W1750D devices contain multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to sensitive information disclosure, unauthenticated denial of service or unauthenticated …
first Feb 13, 2024 -
Critical max 9.8ICSA-24-102-05 3 CVEs
Siemens Scalance W1750D
The SCALANCE W1750D devices contain multiple vulnerabilities that could allow an attacker to exploit buffer overflow and information disclosure vulnerabilities which could lead to information disclosure or unauthenticated remote code execution. Siemens has re…
-
High max 7.8ICSA-24-102-06 3 CVEs
Siemens Parasolid
Parasolid is affected by out of bounds read, stack exhaustion and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an…
-
High max 7.6ICSA-24-102-07 2 CVEs
Siemens SINEC NMS
SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
-
Medium max 5.3ICSA-24-095-01 1 CVE
Hitachi Energy Asset Suite 9
Successful exploitation of this vulnerability could allow an attacker to use an authentication anomaly to successfully invoke the REST service.
-
Medium max 6.5ICSA-24-095-02 1 CVE
Schweitzer Engineering Laboratories SEL 700 series relays
Successful exploitation of this vulnerability could allow an attacker to make modifications or cause a denial-of-service condition.
-
Critical max 9.6ICSA-24-093-01 3 CVEs
IOSIX IO-1020 Micro ELD
Successful exploitation of these vulnerabilities could allow an adjacent attacker to take control of vehicle systems by connecting to and modifying the affected device.
-
High max 7.5ICSA-24-086-01 3 CVEs
AutomationDirect C-MORE EA9 HMI
Successful exploitation of these vulnerabilities could allow an attacker to exploit a remote device and inject malicious code on the panel.
-
High max 7.5ICSA-24-086-02 3 CVEs
Rockwell Automation PowerFlex 527
Successful exploitation of this these vulnerabilities could crash the device and require a manual restart to recover.
-
High max 7.8ICSA-24-086-03 6 CVEs
Rockwell Automation Arena Simulation
Successful exploitation of these vulnerabilities could crash the application or allow an attacker to run harmful code on the system.
-
Medium max 5.3ICSA-24-086-04 1 CVE
Rockwell Automation FactoryTalk View ME
Successful exploitation of this vulnerability could lead to the loss of view or control of the PanelView product.
-
Medium max 6.4ICSA-24-081-01 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could allow an authenticated attacker to read or modify a remote database.
-
High max 7.5ICSA-24-079-01 1 CVE
Franklin Fueling System EVO 550/5000
Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the system.
-
Critical max 9.8
Siemens SIMATIC
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code within the context of a privileged process.
-
High max 8.8ICSA-24-074-12 10 CVEs
Delta Electronics DIAEnergie
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, disclose sensitive information, or disrupt system availability.
-
High max 8.0ICSA-24-074-13 2 CVEs
Softing edgeConnector
Successful exploitation of these vulnerabilities could create conditions that may allow remote code execution.
-
High max 7.8ICSA-24-072-01 1 CVE
Schneider Electric EcoStruxure Power Design
Successful exploitation of this vulnerability may allow for arbitrary code execution.
-
Critical max 9.1
Siemens SCALANCE Family Products
SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family before V4.5 is affected by multiple vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Nov 14, 2023 -
High max 7.5
Siemens Web Server of Industrial Products
A vulnerability in the affected products could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial-of-service attack. Siemens has released a new version for SINAMICS S210 (6SL5...) and recommends to up…
first Dec 12, 2023 -
High max 7.8
Siemens Simcenter Femap
Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in Catia MODEL file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the applicati…
first Feb 13, 2024 -
Critical max 9.8
Siemens SINEC NMS
SINEC NMS before V2.0 SP1 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
first Feb 13, 2024 -
Critical max 9.8ICSA-24-074-03 2 CVEs
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server before V3.2 is affected by multiple vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
High max 7.6ICSA-24-074-04 1 CVE
Siemens SINEMA Remote Connect Client
SINEMA Remote Connect Client before V3.1 SP1 is affected by an information disclosure vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
High max 7.5ICSA-24-074-06 1 CVE
Siemens SENTRON
SENTRON 3KC ATC6 Expansion Module Ethernet exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet, which could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot. S…
-
Medium max 5.5ICSA-24-074-10 1 CVE
Siemens Siveillance Control
Siveillance Control does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges. Siemens has released a new ver…
-
Medium max 5.3
Integration Objects OPC UA Server Toolkit (Update A)
Successful exploitation of this vulnerability could allow a remote attacker to add content to the log file.
first Jan 16, 2024 -
Critical max 9.8
Nice Linear eMerge E3-Series
Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.
-
High max 7.8ICSMA-24-065-01 1 CVE
Santesoft Sante FFT Imaging
Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code once a user opens a malicious DCM file on affected FFT Imaging installations.
-
High max 7.8ICSA-24-060-01 1 CVE
Delta Electronics CNCSoft-B
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 7.8ICSMA-24-060-01 2 CVEs
MicroDicom DICOM Viewer
Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption issues leading to execution of arbitrary code.
-
High max 7.8ICSMA-24-058-01 1 CVE
Santesoft Sante DICOM Viewer Pro
Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of the product.
-
High max 7.8ICSA-24-053-01 1 CVE
Delta Electronics CNCSoft-B DOPSoft
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.
-
Critical max 9.4ICSA-24-051-01 3 CVEs
Commend WS203VICM
Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information or force the system to restart.
-
Critical max 9.8ICSA-24-051-02 3 CVEs
ICSNPP - Ethercat Zeek Plugin
Successful exploitation of these vulnerabilities could allow remote code execution.
-
Medium max 5.3
Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)
Successful exploitation of this vulnerability could allow a remote attacker to prevent legitimate users from logging into the web server function for a certain period, resulting in a denial-of-service condition. The impact of this vulnerability will persist w…
first Nov 2, 2023