4,108 results · Feed
-
Critical max 9.4ICSA-24-051-01 3 CVEs
Commend WS203VICM
Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information or force the system to restart.
-
Critical max 9.8ICSA-24-051-02 3 CVEs
ICSNPP - Ethercat Zeek Plugin
Successful exploitation of these vulnerabilities could allow remote code execution.
-
Medium max 5.3
Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)
Successful exploitation of this vulnerability could allow a remote attacker to prevent legitimate users from logging into the web server function for a certain period, resulting in a denial-of-service condition. The impact of this vulnerability will persist w…
first Nov 2, 2023 -
Critical max 9.0ICSA-24-046-16 1 CVE
Rockwell Automation FactoryTalk Service Platform
Successful exploitation of this vulnerability could allow malicious users with basic user group privileges to receive administrator group privileges.
-
High max 7.8
Siemens Industrial Products Intel CPUs (Update F)
Intel has published information on vulnerabilities in Intel products in June 2021. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update. In this advisory we…
first Aug 10, 2021 -
High max 7.5ICSA-24-046-02 5 CVEs
Siemens SIDIS Prime
SIDIS Prime before V4.0.400 is affected by multiple vulnerabilities in the components OPC UA and OpenSSL, that could allow an unauthenticated attacker with access to the network where SIDIS Prime is installed to reuse OPC UA client credentials, create a denia…
-
HighICSA-24-046-03 1 CVE
Siemens SIMATIC RTLS Gateways
SIMATIC RTLS Gateways are affected by vulnerabilities that were disclosed by JSOF research lab “Ripple20” for the TCP/IP stack. Siemens recommends countermeasures for products where fixes are not, or not yet available.
-
High max 7.5ICSA-24-046-04 1 CVE
Siemens CP343-1 Devices
Affected products incorrectly validate TCP sequence numbers. This could allow an unauthenticated remote attacker to create a denial of service condition by injecting spoofed TCP RST packets. Siemens recommends countermeasures for products where fixes are not,…
-
Critical max 9.8ICSA-24-046-05 1 CVE
Siemens Location Intelligence
Location Intelligence before V4.3 is affected by a Use of Hard-coded Credentials vulnerability that could allow an attacker to obtain full administrative access to the application. Siemens has released new versions for the affected products and recommends to …
-
High max 7.8ICSA-24-046-06 1 CVE
Siemens Unicam FX
Unicam FX contains a local privilege escalation vulnerability that could allow an attcker to gain SYSTEM privileges. Unicam FX has reached end of software maintanence. Further information on recommendations for successor product can be found in section 'Addit…
-
High max 7.8ICSA-24-046-07 10 CVEs
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL, PSOBJ or SPP file formats. If a user is tricked to open a malicious file with any of the affected products, thi…
-
Critical max 9.1ICSA-24-046-09 8 CVEs
Siemens SCALANCE SC-600 Family
SCALANCE SC-600 Family before V3.1 is affected by multiple vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, o…
-
Critical max 9.8
Siemens SCALANCE XCM-/XRM-300
SCALANCE XCM-/XRM-300 before V2.4 is affected by multiple vulnerabilities. Siemens has released an update for SCALANCE X-300 and recommends to update to the latest version.
-
High max 7.8ICSA-24-046-13 2 CVEs
Siemens Parasolid
Parasolid is affected by out of bounds read and null pointer dereference vulnerabilities that could be triggered when the application reads files in XT format. If a user is tricked to open a malicious file with the affected applications, an attacker could lev…
-
Critical max 9.8
ProPump and Controls Osprey Pump Controller (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access, retrieve sensitive information, modify data, cause a denial-of-service, and/or gain administrative control.
first Mar 23, 2023 -
High max 7.3ICSA-24-039-01 1 CVE
Qolsys IQ Panel 4, IQ4 HUB
Successful exploitation of this vulnerability could allow the panel software, under certain circumstances, to provide unauthorized access to settings.
-
Medium max 5.9ICSA-24-037-01 1 CVE
HID Global Encoders
Successful exploitation of this vulnerability could allow an attacker to read data from reader configuration cards and credentials. Reader configuration cards contain credential and device administration keys which could be used to create malicious configurat…
-
Medium max 5.3ICSA-24-037-02 1 CVE
HID Global Reader Configuration Cards
Successful exploitation of this vulnerability could allow an attacker to read the credential and device administration keys from a configuration card. Those keys could be used to create malicious configuration cards or credentials.
-
High max 7.3ICSA-24-032-03 1 CVE
AVEVA Edge products (formerly known as InduSoft Web Studio)
Successful exploitation of this vulnerability could result in an attacker achieving arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.
-
Critical max 9.8
Mitsubishi Electric CNC Series (Update E)
Successful exploitation of this vulnerability could allow a malicious remote attacker to cause a denial-of-service condition and execute malicious code on the product by sending specially crafted packets. System reset is required for recovery.
first Jul 27, 2023 -
Medium max 5.9ICSA-24-030-03 1 CVE
Mitsubishi Electric MELSEC WS Series Ethernet Interface Module
Successful exploitation of this vulnerability could allow an unauthorized attacker to login to the modules and disclose or tamper with the programs and parameters in the modules.
-
High max 7.4ICSA-24-030-04 6 CVEs
Hitron Systems Security Camera DVR
Successful exploitation of these vulnerabilities could allow an attacker to affect the availability of the product through exploitation of an improper input validation vulnerability and default credentials.
-
High max 8.6ICSA-24-030-05 1 CVE
Rockwell Automation ControlLogix and GuardLogix
Successful exploitation of this vulnerability could allow an attacker to crash the device by exploiting a Denial-of-Service (DoS) vulnerability.
-
Critical max 9.8ICSA-24-030-06 1 CVE
Rockwell Automation FactoryTalk Service Platform
Successful exploitation of this vulnerability could allow an attacker to retrieve user information and modify settings without any authentication.
-
High max 8.8ICSA-24-030-07 15 CVEs
Rockwell Automation LP30/40/50 and BM40 Operator Interface
Successful exploitation of these vulnerabilities could allow an authenticated attacker to use specifically crafted communication requests to perform a denial-of-service condition, memory overwriting, or remote code execution.
-
Critical max 10.0ICSA-24-025-01 6 CVEs
MachineSense FeverWarn
Successful exploitation of these vulnerabilities could allow an attacker to obtain user data from devices, execute remote code on devices, or gain control over devices to perform malicious actions.
-
Critical max 9.8ICSA-24-025-02 1 CVE
SystemK NVR 504/508/516
Successful exploitation of this vulnerability could allow an attacker to execute commands with root privileges.
-
High max 8.8ICSA-24-023-01 1 CVE
APsystems Energy Communication Unit (ECU-C) Power Control Software
Successful exploitation of this vulnerability could allow an attacker to access sensitive data and execute specific commands and functions with full admin rights without authenticating.
-
High max 8.4ICSA-24-023-02 1 CVE
Crestron AM-300
Successful exploitation of this vulnerability could allow an attacker to escalate their privileges to root-level access.
-
Critical max 9.8ICSA-24-023-03 4 CVEs
Voltronic Power ViewPower Pro
Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition, obtain administrator credentials, or achieve remote code execution.
-
High max 8.0ICSA-24-023-04 8 CVEs
Westermo Lynx 206-F2G
Successful exploitation of these vulnerabilities could allow an attacker to access the web application, inject arbitrary code, execute malicious code, obtain sensitive information, or execute a malicious request.
-
Medium max 5.7ICSA-24-023-05 1 CVE
Lantronix XPort
Successful exploitation of this vulnerability could allow an attacker to obtain credentials.
-
High max 7.1ICSMA-24-023-01 1 CVE
Orthanc Osimis DICOM Web Viewer
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code inside the victim's browser.
-
High max 7.1ICSA-25-021-01 2 CVEs
Traffic Alert and Collision Avoidance System (TCAS) II
Successful exploitation of these vulnerabilities could allow an attacker to manipulate safety systems and cause a denial-of-service condition.
-
High max 7.5ICSA-24-018-01 2 CVEs
AVEVA PI Server
Successful exploitation of these vulnerabilities could allow an attacker to crash the product being accessed or throttle the memory leading to a partial denial-of-service condition.
-
Critical max 9.8ICSA-24-011-03 7 CVEs
Rapid Software LLC Rapid SCADA
Successful exploitation of these vulnerabilities could result in an attacker reading sensitive files from the RapidScada server, writing files to the Scada directory (thus achieving code execution,) gaining access to sensitive systems via legitimate-seeming p…
-
High max 7.8ICSA-24-011-04 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 7.8ICSA-24-011-05 1 CVE
Schneider Electric Easergy Studio
Successful exploitation of this vulnerability could allow an attacker to gain full control of a workstation.
-
High max 7.8
Cambium ePMP 5GHz Force 300-25 Radio (Update A)
Successful exploitation of this vulnerability could allow an attacker to perform code execution on the affected product.
first Dec 14, 2023 -
Critical max 9.9
ICSA-20-070-01_Siemens and PKE SiNVR/SiVMS Video Server (Update B)
The advisory informs about multiple vulnerabilities in the Central Control Server (CCS) application, as initially reported in SSA-761617 ( https://cert-portal.siemens.com/productcert/html/ssa-761617.html) on 2019-12-10 and SSA-844761 (https://cert-portal.siem…
first Apr 13, 2021