4,108 results · Feed
-
Critical max 9.8ICSA-22-291-01 3 CVEs
Advantech R-SeeNet
Successful exploitation of these vulnerabilities could result in an unauthorized attacker remotely deleting files on the system or allowing remote code execution.
-
HighICSA-22-286-02 1 CVE
Siemens Industrial Edge Management
Successful exploitation of this vulnerability could allow an attacker to inject malicious maintenance requests by exploiting improper certification validation. An attacker could exploit this vulnerability by sending statistics, activating remote support, exch…
-
High max 9.8
Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service
Successful exploitation of these vulnerabilities could crash the Prognostic Model Executor and could allow remote code execution.
-
Critical
Siemens SCALANCE
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit multiple buffer overflow vulnerabilities that could lead to denial of service or unauthenticated remote code execution. Siemens has release…
first Oct 12, 2021 -
Critical
Siemens SCALANCE W1750D
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to execute code on the affected device(s), read arbitrary files, or create a denial-of-service condition. Siemens has released updates for the affected products and reco…
first Nov 9, 2021 -
Critical max 9.0
Siemens Apache HTTP Server
Multiple vulnerabilities were identified in the Apache HTTP Server software. These include NULL Pointer Dereferencing, Out-of-bounds Write and Server-Side Request Forgery related vulnerabilities. Siemens has released updates for several affected products and …
first Jun 14, 2022 -
High max 7.8ICSA-22-284-01 4 CVEs
Altair HyperView Player
Successful exploitation of these vulnerabilities could crash the device accessed.
-
Critical max 9.8ICSA-22-284-02 2 CVEs
Daikin Holdings Singapore
Successful exploitation of these vulnerabilities could disclose sensitive information to the affected devices and can give an attacker full control of the system.
-
Medium max 4.3ICSA-22-284-03 1 CVE
Sensormatic Electronics C-CURE 9000
Successful exploitation of this vulnerability could allow an unauthorized user to enumerate user accounts.
-
MediumICSA-22-286-01 1 CVE
Siemens LOGO!
LOGO! 8 BM (incl. SIPLUS variants) contains a vulnerability that could allow an attacker to install manipulated firmware packages. Siemens has released an update for the LOGO! 8 BM (incl. SIPLUS variants) and recommends to update to the latest version.
-
HighICSA-22-286-03 1 CVE
Siemens Solid Edge
Solid Edge is affected by a heap overflow vulnerability that could be triggered when the application reads DWG files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote c…
-
Critical max 9.3ICSA-22-286-04 1 CVE
Siemens SIMATIC S7-1200 and S7-1500 CPU Families
SIMATIC S7-1200, S7-1500 CPUs and related products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI comm…
-
HighICSA-22-286-06 7 CVEs
Siemens Desigo PXM Devices
Desigo PXM devices contain multiple vulnerabilities in the webserver application that could allow an attacker to potentially access sensitive information, execute arbitrary commands, cause a denial of service condition, or perform remote code execution. Sieme…
-
High max 7.8ICSA-22-286-10 1 CVE
Siemens JT Open Toolkit and Simcenter Femap
JT Open Toolkit (JTTK) and Simcenter Femap are affected by an uninitialized pointer reference vulnerability that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause th…
-
High max 7.5ICSA-22-286-14 1 CVE
Siemens SIMATIC HMI Panels
Several SIMATIC HMI Panels are affected by a vulnerability that could allow an attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets. Siemens has released updates for the affected produc…
-
CriticalICSA-22-286-16 1 CVE
Siemens Desigo CC and Cerberus DMS
Desigo CC and Cerberus DMS are based on SIMATIC WinCC OA and implement client-side only authentication for specific parts of their client-server communication. In this configuration, attackers could impersonate other users or exploit the client-server protoco…
-
Critical max 8.8ICSA-22-279-01 2 CVEs
Rockwell Automation FactoryTalk VantagePoint
Successful exploitation of these vulnerabilities could allow remote code execution.
-
High max 7.5ICSA-22-279-02 1 CVE
HIWIN Robot System Software (HRSS)
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition to the affected product.
-
High max 7.8ICSA-22-277-03 3 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities could allow local attackers to execute arbitrary code.
-
High max 8.1ICSA-22-277-01 1 CVE
Johnson Controls Metasys ADX Server
Successful exploitation of this vulnerability could allow an Active Directory user to execute validated actions without providing a valid password.
-
Medium max 5.0ICSA-22-277-02 2 CVEs
Hitachi Energy Modular Switchgear Monitoring (MSM)
Successful exploitation of these vulnerabilities could allow an attacker to perform malicious command injection, trick a valid user into downloading malicious software onto their computer. Successful exploitation may also allow an attacker to pose as a legiti…
-
High max 7.8ICSA-22-277-04 3 CVEs
OMRON CX-Programmer
Successful exploitation of these vulnerabilities could crash the device or may allow arbitrary code execution.
-
Medium max 6.6ICSMA-22-277-01 1 CVE
BD Totalys MultiProcessor
Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI), and personally identifiable information (PI…
-
High max 8.3
ICSA-20-212-02_Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A)
Younes Dragoni of Nozomi Networks, the Applied Risk research team, and Mashav Sapir of Claroty reported this vulnerability to Mitsubishi Electric.
first Jul 30, 2020 -
High
Delta Electronics DOPSoft (Update A)
Successful exploitation of these vulnerabilities could allow arbitrary code execution and disclose information.
first Jul 1, 2021 -
Medium max 5.5
ARC Informatique PcVue (Update A)
Successful exploitation of this vulnerability could allow an attacker to access the OAuth web service database.
first Aug 23, 2022 -
Low max 3.3
Delta Electronics DOPSoft (Update A)
Successful exploitation of this vulnerability could allow an attacker to gain sensitive information.
first Sep 1, 2022 -
High max 5.5
Baxter Sigma Spectrum Infusion Pump (Update A)
Successful exploitation of these vulnerabilities could result in access to sensitive data and alteration of system configuration.
first Sep 8, 2022 -
High max 8.5ICSA-22-272-01 5 CVEs
Hitachi Energy MicroSCADA Pro X SYS600
Successful exploitation of this vulnerability could cause SYS600 fail to start or an unauthorized actor to run scripts, and could cause a denial-of-service condition.
-
High max 7.5ICSA-22-272-02 2 CVEs
Hitachi Energy MicroSCADA Pro X SYS600
Successful exploitation of these vulnerabilities could cause the affected modules in the product to stop working.
-
CriticalICSA-22-270-01 1 CVE
Hitachi Energy AFS660/AFS665
Successful exploitation of this vulnerability could allow an attacker to overflow an internal buffer and fully compromise the target device.
-
High max 7.8
Hitachi Energy APM Edge
Successful exploitation of this vulnerability could allow users to escalate privileges from a user account to root.
-
High max 8.1ICSA-22-270-03 1 CVE
Rockwell Automation ThinManager ThinServer
Successful exploitation of this vulnerability could lead to the software crashing; a buffer overflow condition may allow remote code execution.
-
High max 7.8ICSA-22-265-01 1 CVE
Measuresoft ScadaPro Server
Successful exploitation of this vulnerability could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.
-
Critical max 9.8
MiCODUS MV720 GPS tracker
Successful exploitation of these vulnerabilities could allow an attacker control over any MV720 GPS tracker, granting access to location, routes, fuel cutoff commands, and the disarming of various features (e.g., alarms).
first Jul 19, 2022 -
CriticalICSA-22-263-01 1 CVE
Hitachi Energy PROMOD IV
Successful exploitation of this vulnerability could allow an attacker to delete arbitrary files once the system is compromised.
-
CriticalICSA-22-263-02 1 CVE
Hitachi Energy AFF660/665 Series
Successful exploitation of this vulnerability could overflow a buffer on the device and fully compromise it.
-
Medium max 6.5ICSA-22-263-04 1 CVE
Host Engineering Communications Module
Successful exploitation of this vulnerability could crash the device being accessed, leading to a denial-of-service condition.
-
Medium max 4.8ICSMA-22-263-01 1 CVE
Medtronic NGP 600 Series Insulin Pumps
Successful exploitation of this vulnerability could allow an unauthorized user to deliver too much or too little insulin through delivery of an unintended insulin bolus or because insulin delivery is slowed or stopped.
-
Critical
Paradox IP150 (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute arbitrary code, which may result in the termination of the physical security system.
first Nov 17, 2020