4,108 results · Feed
-
Medium max 5.5ICSA-23-262-01 1 CVE
Siemens SIMATIC PCS neo Administration Console
The Administration Console of SIMATIC PCS neo leaks Windows admin credentials. An attacker with local Windows access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems…
-
High max 7.5ICSA-23-255-01 4 CVEs
Hitachi Energy Lumada APM Edge
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition or disclosure of sensitive information.
-
Medium max 5.9ICSA-23-255-02 1 CVE
Fujitsu Software Infrastructure Manager
Successful exploitation of this vulnerability could result in an attacker retrieving the password for the proxy server that is configured in ISM from the maintenance data.
-
High max 7.0
Siemens RUGGEDCOM APE1808
Insyde has published information on vulnerabilities in Insyde BIOS on November 8th 2022. These vulnerabilities also affect the RUGGEDCOM APE1808 product family. Siemens has released updates for the affected products and recommends to update to the latest vers…
first Feb 14, 2023 -
High max 8.2ICSA-23-257-04 23 CVEs
Siemens RUGGEDCOM APE1808 Products
Insyde has published information on vulnerabilities in Insyde BIOS up to August 2023. These vulnerabilities also affect the RUGGEDCOM APE1808 product family. Siemens has released updates for the affected products and recommends to update to the latest version…
-
High max 7.8
Delta Electronics CNCSoft-B DOPSoft
Successful exploitation of these vulnerabilities could allow an attacker to exploit a buffer overflow condition and remotely execute arbitrary code.
first Jun 6, 2023 -
Critical max 9.1ICSA-23-250-01 3 CVEs
Dover Fueling Solutions MAGLINK LX Console
Successful exploitation of these vulnerabilities could allow an attacker to gain full access to the system.
-
Critical max 9.6ICSA-23-250-02 2 CVEs
Phoenix Contact TC ROUTER and TC CLOUD CLIENT
Successful exploitation of this these vulnerabilities could execute code in the context of the user's browser or cause a denial of service.
-
Critical max 10.0ICSA-23-250-03 7 CVEs
Socomec MOD3GP-SY-120K
Successful exploitation of these vulnerabilities could allow an attacker to execute malicious Javascript code, obtain sensitive information, or steal session cookies.
-
MediumICSA-23-248-01 1 CVE
Fujitsu Limited Real-time Video Transmission Gear "IP series"
Successful exploitation of this vulnerability could result in an attacker logging into the web interface using the obtained credentials. The attacker could initialize or reboot the products, terminating the video transmission.
-
Critical max 9.8ICSMA-23-248-01 2 CVEs
Softneta MedDream PACS Premium
Successful exploitation of these vulnerabilities could allow an attacker to obtain and leak plaintext credentials or remotely execute arbitrary code.
-
Critical max 9.8ICSA-23-243-01 1 CVE
ARDEREG Sistemas SCADA
Successful exploitation of this vulnerability could allow an attacker to manipulate SQL query logic to extract sensitive information and perform unauthorized actions within the database.
-
High max 7.8ICSA-23-243-02 1 CVE
GE Digital CIMPLICITY
Successful exploitation of this vulnerability could allow a low-privileged local attacker to escalate privileges to SYSTEM.
-
Critical max 9.0ICSA-23-243-04 1 CVE
Digi RealPort Protocol
Successful exploitation of this vulnerability could allow the attacker to access connected equipment.
-
High max 8.8ICSA-23-241-01 1 CVE
PTC Codebeamer
Successful exploitation of this vulnerability could allow an attacker to inject arbitrary code into the target's browser.
-
High max 7.5
KNX Protocol
Successful exploitation of this vulnerability could cause users to lose access to their device, potentially with no way to reset the device.
-
High max 8.6ICSA-23-236-02 5 CVEs
OPTO 22 SNAP PAC S1
Successful exploitation of these vulnerabilities could allow an attacker to brute force passwords, access certain device files, or cause a denial-of-service condition.
-
High max 7.3ICSA-23-236-03 1 CVE
CODESYS Development System
Successful exploitation of this vulnerability could cause users to unknowingly launch a malicious binary placed by a local attacker.
-
Low max 3.3ICSA-23-236-04 1 CVE
CODESYS Development System
Successful exploitation of this vulnerability could provide a local attacker with account information.
-
Critical max 8.8ICSA-23-236-05 1 CVE
CODESYS Development System
Successful exploitation of this vulnerability could allow an attacker to execute a-man-in-the-middle attack to execute arbitrary code.
-
High max 9.8ICSA-23-236-06 1 CVE
Rockwell Automation Select Distributed I/O Communication Modules
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service on the affected products.
-
High max 7.5
Mitsubishi Electric MELSEC WS Series
Successful exploitation of this vulnerability could allow an attacker to bypass authentication and log in by connecting to the module via telnet to reset the module or, if certain conditions are met, either disclose or tamper with the module's configuration, …
first May 18, 2023 -
Critical max 9.6ICSA-23-234-01 6 CVEs
Hitachi Energy AFF66x
Successful exploitation of these vulnerabilities could allow an attacker to compromise availability, integrity, and confidentiality of the targeted devices.
-
Medium max 6.8ICSA-23-234-02 1 CVE
Trane Thermostats
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as root using a specially crafted filename.
-
Critical max 9.8ICSA-23-234-03 3 CVEs
Rockwell Automation ThinManager ThinServer
Successful exploitation of these vulnerabilities could allow an attacker to remotely delete arbitrary files with system privileges.
-
Medium max 7.5ICSA-23-229-01 6 CVEs
ICONICS and Mitsubishi Electric Products
Successful exploitation of these vulnerabilities could result in information disclosure, denial-of-service, or remote code execution.
-
High max 8.8ICSA-23-229-03 1 CVE
Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters
Successful exploitation of this vulnerability could allow an attacker to cause a disclosure of sensitive information, a denial of service, or modification of data if an attacker is able to intercept network traffic.
-
High max 8.6ICSA-23-227-02 1 CVE
Rockwell Automation Armor PowerFlex
Successful exploitation of this vulnerability could allow an attacker to send an influx of network commands, causing the product to generate an influx of event log traffic at a high rate, resulting in the stop of normal operation.
-
High max 7.5ICSA-23-220-02 2 CVEs
Hitachi Energy RTU500 series
Successful exploitation of these vulnerabilities could cause a buffer overflow and reboot of the product.
-
High max 7.8
Siemens Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DWG, IFC, OBJ or STP format. If a user is tricked to open a malicious file with the affe…
first May 9, 2023 -
HighICSA-23-222-02 1 CVE
Siemens Parasolid Installer
A vulnerability in Nullsoft Scriptable Installer System (NSIS) software (CVE-2023-37378) used in Parasolid installers before V36 creates an “uninstall directory” with insufficient access control. This could allow an attacker to misuse the vulnerability, and p…
-
High max 7.8ICSA-23-222-11 9 CVEs
Siemens Solid Edge SE2023
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DFT, PAR or PSM format. If a user is tricked to open a malicious file with the affected …
-
Medium max 5.9ICSA-23-215-01 1 CVE
Mitsubishi Electric GOT2000 and GOT SIMPLE
Successful exploitation of this vulnerability could allow an attacker to hijack data connections or prevent legitimate users from establishing data connections.
-
High max 7.5ICSA-23-215-02 1 CVE
Mitsubishi Electric GT and GOT Series Products
Successful exploitation of this vulnerability could allow an attacker to obtain plaintext passwords by sniffing packets containing encrypted passwords and decrypting the encrypted passwords.
-
High max 7.5ICSA-23-215-03 1 CVE
TEL-STER TelWin SCADA WebInterface
Successful exploitation of this vulnerability could allow an unauthenticated attacker to read files on the system.
-
High max 7.1ICSA-23-215-04 1 CVE
Sensormatic Electronics VideoEdge
Successful exploitation of this vulnerability could allow a local user to edit the VideoEdge configuration file and interfere with VideoEdge operation.
-
CriticalICSA-23-213-01 1 CVE
APSystems Altenergy Power Control
Successful exploitation of this vulnerability may allow remote code execution.
-
High max 7.1ICSA-23-208-01 1 CVE
ETIC Telecom RAS Authentication
Successful exploitation of this vulnerability could allow an attacker to reconfigure the device or cause a denial-of-service condition.
-
High max 7.5ICSA-23-208-02 1 CVE
PTC KEPServerEX
Successful exploitation of this vulnerability could result in the affected device crashing.
-
High max 7.1ICSA-23-206-01 1 CVE
AXIS A1001
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.