4,108 results · Feed
-
Critical max 9.8
Hitachi Energy's RTU500 Series Product (UPDATE B)
Successful exploitation of these vulnerabilities could allow an attacker to crash the device being accessed or cause a denial-of-service condition.
first May 5, 2023 -
Critical max 9.8ICSA-23-290-01 1 CVE
Schneider Electric EcoStruxure Power Monitoring Expert and Power Operation Products
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.
-
High max 8.2ICSA-23-290-02 1 CVE
Rockwell Automation FactoryTalk Linx
Successful exploitation of this vulnerability could lead to information disclosure or a denial-of-service condition.
-
High max 7.8
Schneider Electric IGSS
Successful exploitation of these vulnerabilities could allow arbitrary code execution or loss of control of the SCADA system.
first Aug 8, 2023 -
Medium max 7.8
PTC Kepware KepServerEX (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain elevated privileges, execute arbitrary code, and obtain server hashes and credentials.
first Aug 31, 2023 -
Critical max 9.8ICSA-23-285-12 3 CVEs
Weintek cMT3000 HMI Web CGI
Successful exploitation of these vulnerabilities could allow an attacker to hijack control flow and bypass login authentication or execute arbitrary commands.
-
Critical max 9.1ICSA-23-285-13 1 CVE
Mitsubishi Electric MELSEC-F Series
Successful exploitation of this vulnerability may allow a remote attacker to obtain sequence programs from the product, write malicious sequence programs, or improper data in the product without authentication.
-
High max 7.5ICSA-23-285-14 2 CVEs
Hikvision Access Control and Intercom Products
Successful exploitation of these vulnerabilities could result in an attacker hijacking a session and gaining device operation permissions, or result in an attacker modifying device network configuration by sending specific data packets to a vulnerable interfa…
-
Medium max 6.5ICSA-23-285-15 1 CVE
Advantech WebAccess
Successful exploitation of this vulnerability could leak user credentials.
-
High max 7.8ICSMA-23-285-01 2 CVEs
Santesoft Sante DICOM Viewer Pro
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.
-
High max 7.8ICSMA-23-285-02 1 CVE
Santesoft Sante FFT Imaging
Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.
-
High max 7.3
Siemens SINEC NMS
SINEC NMS and SINEMA Server V14 contain multiple vulnerabilities that could allow an attacker to execute arbitrary code on the system, arbitrary commands on the local database or achieve privilege escalation. Siemens has released several updates for SINEC NMS…
first Mar 8, 2022 -
Medium
Siemens Industrial Products with OPC UA
A vulnerability in the underlying third party component OPC UA ANSIC Stack (also called Legacy C-Stack) affects several industrial products. The vulnerability could cause a crash of the component that includes the vulnerable part of the stack. Siemens has rel…
first May 10, 2022 -
High max 7.5
Siemens SCALANCE W1750D
The SCALANCE W1750D device is affected by Wi-Fi encryption bypass vulnerabilities ("Framing Frames") that could allow an attacker to disclose sensitive information or to steal the victims session. Siemens has released updates for the affected products and rec…
first May 9, 2023 -
Medium max 6.7ICSA-23-285-01 2 CVEs
Siemens SIMATIC CP products
Several SIMATIC CP devices contain direct memory access vulnerabilities that could allow an attacker to execute code, access the PROFINET network without restrictions or perform denial of service attacks. Siemens recommends specific countermeasures for produc…
-
Critical max 9.8ICSA-23-285-02 13 CVEs
Siemens SCALANCE W1750D
The SCALANCE W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to sensitive information disclosure, unauthenticated denial of service or unauthenticated …
-
High max 7.5ICSA-23-285-03 1 CVE
Siemens SICAM A8000 Devices
The web server in the CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a path traversal vulnerability that could allow an authenticated remote attacker to traverse directories on the system, download arbitrary files and potentially escalate p…
-
High max 7.8ICSA-23-285-04 1 CVE
Siemens Xpedition Layout Browser
Siemens Xpedition Layout Browser consists of a stack overflow vulnerability that could be triggered when the application reads a malicious file in PCB format. If a user is tricked to open a malicious file with the affected product, this could lead the applica…
-
Critical max 9.8ICSA-23-285-05 1 CVE
Siemens Simcenter Amesim
Simcenter Amesim contains a vulnerable SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process. Siemens has released an update for Simcenter Amesi…
-
Critical max 9.8ICSA-23-285-09 1 CVE
Siemens CPCI85 Firmware of SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 contains a hard-coded ID in the SSH authorized_keys configuration file. An attacker with knowledge of the corresponding credential could login to the device via SSH. Only devices with activated debug supp…
-
High max 7.8ICSA-23-285-10 9 CVEs
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities that could be triggered when the application reads SPP and IGS files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potential…
-
Medium max 5.3ICSA-23-285-11 1 CVE
Siemens Mendix Forgot Password Module
The Mendix Forgot Password module contains a user enumeration vulnerability that could allow an attacker to retrieve valid users. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Critical max 9.8ICSA-23-278-01 14 CVEs
Hitachi Energy AFS65x,AFF66x, AFS67x, and AFR67x Series Products
Successful exploitation of these vulnerabilities by an attacker could have a high impact on availability, integrity, and confidentiality of the targeted devices.
-
Critical max 10.0ICSA-23-278-02 1 CVE
Qognify NiceVision
Successful exploitation of this vulnerability could allow an attacker to retrieve sensitive information about the cameras managed by the platform and its users.
-
Critical max 9.8ICSA-23-271-01 1 CVE
Rockwell Automation PanelView 800
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information, modify data, or cause a denial-of-service.
-
Medium max 5.7
SOCOMEC MODULYS GP (UPDATE A)
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information on the target system.
first Jan 24, 2023 -
Medium max 6.5ICSA-23-269-01 1 CVE
Suprema BioStar 2
Successful exploitation of this vulnerability could allow an attacker to perform a SQL injection to execute arbitrary commands.
-
Medium max 6.9ICSA-23-269-02 1 CVE
Hitachi Energy Asset Suite 9
Successful exploitation of this vulnerability could allow an authenticated user to enter an arbitrary password to execute equipment tag out actions.
-
Medium max 9.0ICSA-23-269-04 2 CVEs
Advantech EKI-1524-CE series
Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the session.
-
High max 7.5ICSA-23-269-05 3 CVEs
Baker Hughes Bently Nevada 3500
Successful exploitation of these vulnerabilities could allow an attacker to steal sensitive information and gain access to the device.
-
High max 6.3ICSA-23-271-02 5 CVEs
DEXMA DexGate
Successful exploitation of these vulnerabilities could result in the attacker impersonating a user, executing arbitrary code, and accessing the connected network.
-
Critical max 9.4ICSA-23-264-01 1 CVE
Real Time Automation 460 Series
Successful exploitation of this vulnerability could allow an attacker to run malicious JavaScript content, resulting in cross site scripting (XSS).
-
High max 7.8ICSA-23-264-03 1 CVE
Delta Electronics DIAScreen
Successful exploitation of this vulnerability may allow remote code execution.
-
Critical max 9.8ICSA-23-264-04 1 CVE
Rockwell Automation Select Logix Communication Modules
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.
-
Critical max 9.6
Rockwell Automation Connected Components Workbench
Successful exploitation of these vulnerabilities could allow an attacker to exploit heap corruption via a crafted HTML.
-
Critical max 9.8ICSA-23-264-06 1 CVE
Rockwell Automation FactoryTalk View Machine Edition
Successful exploitation of this vulnerability could allow an attacker to execute code remotely with specially crafted malicious packets or by using a self-made library to bypass security checks.
-
Medium max 5.5ICSA-23-262-03 1 CVE
Omron Engineering Software Zip-Slip
Successful exploitation of this vulnerability could allow an attacker to overwrite files on a system.
-
Medium max 5.5ICSA-23-262-04 1 CVE
Omron Engineering Software
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 8.6ICSA-23-262-05 1 CVE
Omron CJ/CS/CP Series
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information in memory.
-
High max 8.8ICSA-23-257-07 1 CVE
Rockwell Automation Pavilion8
Successful exploitation of this vulnerability could allow an attacker to retrieve other user's sessions data.