4,108 results · Feed
-
Medium max 6.3ICSA-22-347-01 1 CVE
ICONICS and Mitsubishi Electric Products
Successful exploitation of this vulnerability could allow an attacker to write arbitrary files.
-
Critical max 9.8ICSA-22-347-02 4 CVEs
Schneider Electric APC Easy UPS Online
Successful exploitation of these vulnerabilities could result in unauthenticated remote code execution, unauthenticated password changes, and escalation of privileges.
-
High max 9.8ICSA-22-349-02 6 CVEs
Siemens SCALANCE X-200RNA Switch Devices
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple vulnerabilities that could allow an attacker to cause a denial of service condition, to extract sensitive information or to hijack existing sessions. Siemens has released updates for the affected…
-
High max 7.8ICSA-22-349-15 3 CVEs
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple out of bounds write vulnerabilities in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to cras…
-
High max 8.1ICSA-22-349-17 1 CVE
Siemens Mendix Email Connector
The Mendix Email Connector module improperly handles access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information. Mendix has released an update for the Mendix Email Connector module and…
-
High max 7.8ICSA-22-349-18 4 CVEs
Siemens SCALANCE SC-600 Family
Multiple vulnerabilities affecting various third-party components of the SCALANCE SC-600 family could allow an attacker to cause a denial of service condition, corrupt memory or potentially execute custom code. Siemens has released updates for the affected pr…
-
High max 9.8ICSA-22-349-19 3 CVEs
Siemens SICAM PAS
SICAM PAS/PQS before V8.06 is affected by three vulnerabilities which could lead to remote code execution, privilege escalation or the creation of a denial of service condition. Siemens has released several updates for SICAM PAS/PQS and recommends to update t…
-
Critical max 9.8ICSA-22-349-21 83 CVEs
Siemens SCALANCE X-200RNA Switch Devices
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code. Siemens has released updates …
-
High max 7.5ICSA-22-342-01 1 CVE
Advantech iView
Successful exploitation of this vulnerability could allow an attacker to acquire credentials.
-
High max 8.6ICSA-22-342-03 1 CVE
Rockwell Automation Logix controllers
Successful exploitation of this vulnerability could allow an unauthorized user to cause denial-of-service condition on a targeted device.
-
High max 8.6ICSA-22-335-01 1 CVE
Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to cause a denial-of-service condition on a target product by sending specially crafted packets.
-
Critical max 9.8ICSA-22-335-02 3 CVEs
Horner Automation Remote Compact Controller
Successful exploitation of these vulnerabilities could allow an attacker to obtain credentials to the affected device and obtain complete control.
-
Medium max 5.3ICSMA-22-335-01 1 CVE
BD BodyGuard Pumps
Successful exploitation of this vulnerability could allow an attacker to change configuration settings or disable the pump.
-
Medium max 5.3ICSA-22-333-01 1 CVE
Mitsubishi Electric GOT2000
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition by sending a specially crafted command.
-
Medium max 4.7ICSA-22-326-02 2 CVEs
Digital Alert Systems DASDEC
Successful exploitation of these vulnerabilities might result in false alerts being issued to broadcast or cable sites that are immediately connected to the compromised system.
-
Critical max 9.8ICSA-22-326-01 4 CVEs
AVEVA Edge
Successful exploitation of these vulnerabilities could allow an attacker to insert malicious DLL files and trick the application into executing code.
-
High max 7.8ICSA-22-326-03 2 CVEs
Phoenix Contact Automation Worx
Successful exploitation of these vulnerabilities could lead to a heap buffer overflow, release of unallocated memory, or a read access violation.
-
High max 7.8ICSA-22-326-04 5 CVEs
GE CIMPLICITY
Successful exploitation of these vulnerabilities could crash the device being accessed or allow arbitrary code execution.
-
High max 7.8ICSA-22-326-05 1 CVE
Moxa Multiple ARM-Based Computers
Successful exploitation of this vulnerability could provide an attacker with root privileges and total control of the system.
-
High max 7.5ICSA-22-321-01 1 CVE
Red Lion Crimson
Successful exploitation of this vulnerability could allow an attacker to obtain user credential hashes.
-
High max 7.1ICSA-22-321-02 1 CVE
Cradlepoint IBR600
Successful exploitation of this vulnerability could allow an attacker to execute code and native system commands.
-
Critical max 9.8ICSA-22-319-01 1 CVE
Mitsubishi Electric GT SoftGOT2000
Successful exploitation of this vulnerability could allow an attacker to execute malicious OS commands.
-
High max 6.5
LS ELECTRIC PLC and XG5000 (Update A)
Successful exploitation of this vulnerability could allow an attacker to decrypt credentials and gain full access to the affected programmable logic controller (PLC).
first Aug 16, 2022 -
High max 8.3ICSA-22-314-07 1 CVE
Omron NJ/NX-series Machine Automation Controllers
Successful exploitation of this vulnerability could allow an attacker to obtain unauthorized access to the device and cause the device to be in an out of service state or execute a malicious program on the device.
-
High max 9.4ICSA-22-314-08 2 CVEs
Omron NJ/NX-series Machine Automation Controllers
Successful exploitation of these vulnerabilities may allow an attacker to bypass authentication in the communications connection process to login and operate the controller products without authorization.
-
Critical
Siemens SCALANCE X-200 and X-200IRT Families (Update A)
There is a cross-site scripting vulnerability that affects the SCALANCE switches. This vulnerability if used by a threat actor could result in the stealing of session cookies and session hijacking. Siemens has released updates for the affected products and re…
first Oct 11, 2022 -
High max 7.8ICSA-22-314-01 2 CVEs
Siemens Parasolid
Parasolid is affected by out of bounds read/write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerabilit…
-
Medium max 6.6ICSA-22-314-03 1 CVE
Siemens SINEC Network Management System Logback Component
SINEC NMS versions before V1.0.3 are affected by a vulnerability in the logback component (CVE-2021-42550) that could allow attackers with write access to the logback configuration file to execute arbitrary code on the system. Siemens has released an update f…
-
High max 8.4ICSA-22-307-02 3 CVEs
Nokia ASIK AirScale System Module
Successful exploitation of these vulnerabilities could result in the execution of a malicious kernel, running of arbitrary malicious programs, or running of modified Nokia programs.
-
High max 8.1ICSA-22-307-03 1 CVE
Delta Industrial Automation DIALink
Successful exploitation of this vulnerability could allow an attacker to place malicious code on the target device.
-
High max 8.8ICSA-22-300-03 9 CVEs
Rockwell Automation Stratix Devices Containing Cisco IOS
Successful exploitation of these vulnerabilities could lead to a denial-of-service condition and allow remote code execution.
-
High max 7.5ICSA-22-300-01 1 CVE
Rockwell Automation FactoryTalk Alarm and Events Server
Successful exploitation of this vulnerability could result in a denial-of-service condition causing the server to be unavailable.
-
High max 8.8ICSA-22-300-02 1 CVE
SAUTER Controls moduWeb
Successful exploitation of this vulnerability could allow an attacker to trick users into clicking on malicious links and steal sensitive information.
-
High max 7.5ICSA-22-300-04 1 CVE
Trihedral VTScada
Successful exploitation of this vulnerability could cause a denial-of-service condition in the affected product.
-
Medium max 5.2ICSMA-22-298-01 2 CVEs
AliveCor KardiaMobile
Successful exploitation of these vulnerabilities could lead to attackers stealing or faking personal cardiograms or enabling a denial-of-service attack. Attackers must be at close range to carry out these attacks.
-
Critical max 9.8ICSA-22-298-01 3 CVEs
Haas Controller
Successful exploitation of these vulnerabilities could allow an unauthorized attacker to cause denial-of-service of the production line, damage the tools used in the production line, introduce defects in pieces of the production line, and perform remote code …
-
HighICSA-22-298-04 2 CVEs
Hitachi Energy MicroSCADA X DMS600
Successful exploitation of this vulnerabilities could allow an attacker to gain unauthorized access to information.
-
Critical max 10.0ICSA-22-298-05 1 CVE
Johnson Controls CKS CEVAS
Successful exploitation of this vulnerability could allow a user to bypass authentication and retrieve data with specially crafted SQL queries.
-
Critical max 9.8ICSA-22-298-03 1 CVE
Siemens Siveillance Video Mobile Server
The mobile server component of Siveillance Video 2022 R2 contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to access the application without a valid account. Siemens has released a hotfix for Siveillance Video…
-
High max 7.8ICSA-22-293-01 2 CVEs
Bentley Systems MicroStation Connect
Successful exploitation of these vulnerabilities may crash the device being accessed or allow remote arbitrary code execution.