4,108 results · Feed
-
Medium max 6.5ICSA-23-331-02 1 CVE
Franklin Electric Fueling Systems Colibri
Successful exploitation of this vulnerability could allow an attacker to obtain login credentials for other users.
-
Low max 2.5ICSA-23-331-03 2 CVEs
Mitsubishi Electric GX Works2
Successful exploitation of these vulnerabilities could allow a Denial-of-service (DoS) due to improper input validation in the simulation function of GX Works2 by sending specially crafted packets.
-
Medium max 5.4ICSMA-23-331-01 7 CVEs
BD FACSChorus
Successful exploitation of these vulnerabilities could allow an attacker with physical access to the device to modify system configurations, obtain access to sensitive information, or access components of the system.
-
Critical max 9.8
Keysight N8844A Data Analytics Web Service (Update A)
Successful exploitation of this vulnerability could lead to remote code execution.
first Apr 25, 2023 -
Critical max 10.0
Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A)
Successful exploitation of this vulnerability could allow an unauthenticated attacker to take control of the affected system.
first Oct 24, 2023 -
Low max 2.7ICSA-23-325-01 1 CVE
WAGO PFC200 Series
Successful exploitation of this vulnerability could allow an attacker with administrative privileges can access sensitive files in an unintended, undocumented way.
-
High max 7.8ICSA-23-325-02 3 CVEs
Fuji Electric Tellus Lite V-Simulator
Successful exploitation of these vulnerabilities could crash the device being accessed, allow remote code execution, or overwrite files.
-
Critical max 10.0ICSA-23-320-01 2 CVEs
Red Lion Sixnet RTUs
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to execute commands with high privileges.
-
Medium max 6.5ICSA-23-320-02 2 CVEs
Hitachi Energy MACH System Software
Successful exploitation of these vulnerabilities could allow an attacker to read/write arbitrary files without the proper authorization.
-
High max 7.8ICSA-23-318-01 2 CVEs
AVEVA Operations Control Logger
Successful exploitation of these vulnerabilities could allow privilege escalation or denial of service.
-
HighICSA-23-318-02 1 CVE
Rockwell Automation SIS Workstation and ISaGRAF Workbench
Successful exploitation of this vulnerability could allow unprivileged local users to overwrite files replacing them with malicious programs.
-
High max 7.8
Siemens SIMATIC WinCC
A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for the affected products and recommends to update to the latest versions.
first May 10, 2022 -
High max 7.8
Siemens Solid Edge
Solid Edge is affected by a file parsing vulnerability in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with the affected application, an attacker could leverage the vulnerability to crash the application or execute…
first Jun 13, 2023 -
Medium max 6.8ICSA-23-320-04 1 CVE
Siemens Mendix Runtime
Mendix Runtime contains a capture-replay flaw which could have an impact to apps built with the platform, if certain preconditions are met that depend on the app's model and access control design. This could allow authenticated attackers to access or modify o…
-
High max 8.0ICSA-23-320-06 4 CVEs
Siemens SIMATIC PCS neo
SIMATIC PCS neo before V4.1 is affected by multiple vulnerabilities. Siemens has released a new version for SIMATIC PCS neo and recommends to update to the latest version.
-
High max 7.5ICSA-23-320-07 1 CVE
Siemens OPC UA Modeling Editor (SiOME)
Siemens OPC UA Modeling Editor (SiOME) is affected by an XML external entity (XXE) injection vulnerability that could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system. Siemens has released a ne…
-
Critical max 9.8ICSA-23-320-09 16 CVEs
Siemens COMOS
COMOS is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code or cause denial of service condition, data infiltration or perform access control violations. Siemens has released an update for COMOS and recommends to updat…
-
CriticalICSA-23-320-10 9 CVEs
Siemens SIPROTEC 4 7SJ66
SIPROTEC 4 7SJ66 devices are affected by multiple security vulnerabilities due to the underlying Wind River VxWorks network stack. This stack is affected by nine of the eleven vulnerabilities that are also known as "URGENT/11". The vulnerabilities could allow…
-
High max 8.8
Siemens Mendix Studio Pro
Mendix Studio Pro is vulnerable to an out of bounds write vulnerability in the integrated libwebp library (CVE-2023-4863), that could allow an attacker to execute code in the context of a victim user's system. Siemens has released updates for the affected pro…
-
Critical max 9.8ICSA-23-320-12 13 CVEs
Siemens PNI
SINEC PNI before V2.0 is affected by multiple vulnerabilities. Siemens has released an update for SINEC PNI and recommends to update to the latest version.
-
Critical max 9.8ICSA-23-320-13 8 CVEs
Siemens SIMATIC MV500
SIMATIC MV500 before V3.3.5 is affected by multiple vulnerabilities. Siemens has released an update for SIMATIC MV500 and recommends to update to the latest version.
-
High max 7.5
Mitsubishi Electric MELSEC and MELIPC Series (Update G)
Successful exploitation of these vulnerabilities could allow a remote attacker to cause a denial-of-service condition. Recovery requires a system reset.
first Nov 30, 2021 -
High max 8.8
Hitachi Energy MicroSCADA Pro/X SYS600 Products (Update A)
Successful exploitation of this vulnerability could allow an unauthorized user to execute administrator level scripts.
first Nov 29, 2022 -
Critical max 10.0ICSA-23-313-01 1 CVE
Johnson Controls Quantum HD Unity
Successful exploitation of this vulnerability could allow an unauthorized user to access debug features that were accidentally exposed.
-
Medium max 5.3ICSA-23-313-02 3 CVEs
Hitachi Energy eSOMS
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information related to eSOMS application configuration.
-
Medium max 5.3ICSA-23-311-01 1 CVE
GE MiCOM S1 Agile
Successful exploitation of this vulnerability could allow an attacker to upload malicious files and achieve code execution.
-
High max 8.8ICSA-23-306-01 1 CVE
Red Lion Crimson
Successful exploitation of this vulnerability could allow an attacker to truncate passwords configured by the Crimson configuration tool which could create weaker than intended credentials.
-
High max 8.3ICSA-23-306-04 1 CVE
Franklin Fueling System TS-550
Successful exploitation of this vulnerability could allow an attacker to access the device and gain unauthenticated access.
-
Critical max 9.8ICSA-23-306-05 1 CVE
Weintek EasyBuilder Pro
Successful exploitation of this vulnerability could allow an attacker to obtain remote control of a victim's computer as a privileged user.
-
Critical max 9.8ICSA-23-306-06 2 CVEs
Schneider Electric SpaceLogic C-Bus Toolkit
Successful exploitation of these vulnerabilities could allow an attacker to perform remote code execution, which could result in tampering of the SpaceLogic C-Bus home automation system.
-
Critical max 9.9ICSA-23-304-02 2 CVEs
INEA ME RTU
Successful exploitation of these vulnerabilities could allow remote code execution.
-
Critical max 9.8ICSA-23-304-03 5 CVEs
Zavio IP Camera
Successful exploitation of these vulnerabilities could allow remote code execution.
-
High max 9.8
BD Alaris System with Guardrails Suite MX
Successful exploitation of these vulnerabilities could allow an attacker to compromise sensitive data, hijack a session, modify firmware, make changes to system configurations, among other system impacts.
first Jul 13, 2023 -
Medium max 5.9ICSA-23-299-01 1 CVE
Dingtian DT-R002
Successful exploitation of this vulnerability could allow an attacker to bypass authentication.
-
High max 7.5ICSA-23-299-02 1 CVE
Centralite Pearl Thermostat
Successful exploitation of this vulnerability could allow an attacker to cause a denial of service on the affected product.
-
High max 7.8ICSA-23-299-04 2 CVEs
Rockwell Automation Arena
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code by using a memory buffer overflow or using an uninitialized pointer in the application.
-
High max 7.5ICSA-23-299-05 1 CVE
Rockwell Automation FactoryTalk View Site Edition
Successful exploitation of this vulnerability could cause the product to become unavailable and require a restart to recover resulting in a denial-of-service condition.
-
High max 8.1ICSA-23-299-06 1 CVE
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability could use a token to log into the system.
-
Critical max 9.8ICSA-23-299-07 7 CVEs
Sielco PolyEco FM Transmitter
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, access restricted pages, or hijack sessions.
-
Critical max 9.8ICSA-23-299-08 4 CVEs
Sielco Radio Link and Analog FM Transmitters
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, access restricted pages, or hijack sessions.