4,108 results · Feed
-
Medium
Siemens OpenSSL Vulnerability in Industrial Products (Update E)
Several Siemens industrial products are affected by a vulnerability in OpenSSL, that could result in data being sent out unencrypted by the SSL/TLS record layer. Siemens has released updates for the affected products and recommends to update to the latest ver…
first Aug 7, 2018 -
High
Simcenter Femap and Parasolid
Simcenter Femap and Parasolid are affected by an out of bounds read vulnerability that could be triggered when the application reads files in NEU format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage …
first Jul 12, 2022 -
High
Open Design Alliance Drawings SDK
JT2Go and Teamcenter Visualization are affected by multiple file parsing vulnerabilities in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with any of the affected products, this could lead the application to crash o…
first Jul 12, 2022 -
High max 7.8
Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability
Successful exploitation of this vulnerability could allow an attacker to take control of the system node and its information.
-
High max 8.8ICSA-22-256-02 2 CVEs
Honeywell SoftMaster
Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the application permissions or escalate privileges.
-
Critical max 9.8ICSA-22-256-04 1 CVE
Kingspan TMS300 CS
The TMS300 CS system does not properly restrict access to endpoints, and successful exploitation of this vulnerability could allow an attacker to view and modify application settings without authenticating.
-
HighICSA-22-258-01 1 CVE
Siemens Mobility CoreShield OWG Software
The default installation of the Windows version of the CoreShield One- Way Gateway (OWG) software sets insecure file permissions that could allow a local attacker to escalate privileges to local administrator. Siemens Mobility has released an update for the C…
-
High max 7.8ICSA-22-258-02 20 CVEs
Siemens Simcenter Femap and Parasolid
Simcenter Femap and Parasolid are affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in X_T file formats. If a user is tricked to open a malicious file with the affected applications, an attacker could l…
-
High max 8.8ICSA-22-258-05 14 CVEs
Siemens SINEC INS
Multiple vulnerabilities affecting various third-party components of SINEC INS before V1.0 SP2 could allow an attacker to cause a denial of service condition, disclose sensitive data or violate the system integrity. Siemens has released an update for the SINE…
-
Critical max 9.8
PTC Kepware KEPServerEX (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to crash the device or remotely execute arbitrary code.
first Aug 30, 2022 -
Critical max 10.0ICSA-22-251-01 3 CVEs
MZ Automation libIEC61850
Successful exploitation of these vulnerabilities could crash the device being accessed, and buffer overflow conditions could allow remote code execution.
-
High max 7.5ICSA-22-249-01 1 CVE
Triangle Microworks Libraries
Successful exploitation of this vulnerability could lead to a denial-of-service condition to any server or client using the affected libraries
-
High max 7.8ICSA-22-249-02 6 CVEs
AVEVA Edge 2020 R2 SP1 and all prior versions
Successful exploitation of these vulnerabilities could result in arbitrary code execution, information disclosure, or denial of service.
-
Critical max 9.8ICSA-22-249-03 3 CVEs
Cognex 3D-A1000 Dimensioning System
Successful exploitation of these vulnerabilities could result in unauthorized password changes, escalation of privileges, falsifying of password logs, and bypassing of web access controls.
-
Medium max 6.0ICSA-22-249-04 3 CVEs
Hitachi Energy TXpert Hub CoreTec 4
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the product, modify configuration, obtain sensitive information from the device, and load malicious firmware.
-
High max 3.7ICSA-22-242-01 1 CVE
Hitachi Energy FACTS Control Platform (FCP) Product
Successful exploitation of these vulnerabilities may allow an attacker to eavesdrop on the traffic between network source and destination, gain unauthorized access to information or cause a denial-of service.
-
High max 3.7ICSA-22-242-02 1 CVE
Hitachi Energy Gateway Station (GWS) Product
Successful exploitation of this vulnerability could allow unauthorized users to eavesdrop on the traffic between network source and destination, gain unauthorized access to information, or cause a denial-of service condition.
-
CriticalICSA-22-242-03 1 CVE
Hitachi Energy MSM Product
Successful exploitation of this vulnerability could disrupt the functionality of the MSM web interface, steal sensitive user credentials, or cause a denial-of-service condition.
-
High max 7.5ICSA-22-242-04 1 CVE
Hitachi Energy RTU500 series
Successful exploitation of this vulnerability could cause an internal buffer overflow, which can reboot the product.
-
High max 8.7ICSA-22-242-05 2 CVEs
Fuji Electric D300win
Successful exploitation of these vulnerabilities could result in loss of sensitive data and manipulation of information.
-
CriticalICSA-22-242-06 1 CVE
Honeywell ControlEdge
Successful exploitation of this vulnerability could allow full control of the device, which may include remote code execution, denial-of-service, or configuration manipulation.
-
CriticalICSA-22-242-07 1 CVE
Honeywell Experion LX
Successful exploitation of this vulnerability could allow for configuration manipulation and a denial-of-service condition.
-
High max 6.5ICSA-22-242-08 1 CVE
Honeywell Trend Controls Inter-Controller Protocol
Successful exploitation of this vulnerability could cause the loss of authentication information in cleartext by sniffing network traffic.
-
High max 7.8ICSA-22-242-09 1 CVE
Omron CX-Programmer
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
Critical max 10.0ICSA-22-242-11 1 CVE
Sensormatic Electronics iSTAR
An unauthenticated user could use a malicious request to run arbitrary commands as root user.
-
High max 7.8ICSA-22-237-01 1 CVE
FATEK Automation FvDesigner
Successful exploitation of this vulnerability may allow remote code execution.
-
Critical max 10.0
Illumina Local Run Manager
Successful exploitation of these vulnerabilities may allow an unauthenticated malicious actor to take control of the affected product remotely and take any action at the operating system level. An attacker could impact settings, configurations, software, or d…
first Jun 2, 2022 -
Critical max 9.8ICSA-22-235-02 1 CVE
Delta Industrial Automation DIALink
Successful exploitation of this vulnerability could result in the exposure of sensitive data.
-
Critical max 9.9ICSA-22-235-03 1 CVE
mySCADA myPRO
Successful exploitation of this vulnerability could allow an attacker to run commands directly in the operating system.
-
High max 7.8ICSA-22-235-05 1 CVE
Measuresoft ScadaPro Server
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
High max 7.8ICSA-22-235-06 5 CVEs
Measuresoft ScadaPro Server and Client
Successful exploitation of these vulnerabilities could allow arbitrary code execution, privilege escalation, or a denial-of-service condition.
-
High max 7.5ICSA-22-235-07 1 CVE
Hitachi Energy RTU500
Successful exploitation of this vulnerability could allow an attacker to send a specially crafted Modbus TCP packet in a high rate, causing a stack overflow, which could result in a reboot of the product.
-
MediumICSA-22-228-01 1 CVE
Yokogawa CENTUM Controller FCS
Successful exploitation of this vulnerability could crash the affected device, resulting in a denial-of-service condition.
-
Medium max 5.5ICSA-22-228-03 1 CVE
Delta Industrial Automation DRAS
Successful exploitation of this vulnerability could allow an attacker to read and exfiltrate sensitive information from the affected host machine.
-
Critical max 9.8ICSA-22-228-04 9 CVEs
Softing Secure Integration Server
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
-
High max 8.3ICSA-22-228-05 1 CVE
B&R Industrial Automation Automation Studio 4
An attacker could leverage this vulnerability to execute code within the context of the affected system, which may threaten the integrity and confidentiality of data or cause a denial-of-service condition.
-
Medium max 6.6ICSA-22-228-06 6 CVEs
Emerson Proficy Machine Edition
Successful exploitation of these vulnerabilities could allow for remote hidden code execution on the connected programmable logic controller (PLC) and for malicious files to be uploaded from the PLC to connected workstations.
-
Critical max 9.9ICSA-22-228-07 2 CVEs
Sequi PortBloque S
Successful exploitation of these vulnerabilities could result in unauthorized changes to device configuration, to include adding new users or changing existing passwords for persistent access to the device.
-
Critical max 8.1ICSA-22-223-03 13 CVEs
Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70
The successful exploitation of these vulnerabilities on the affected products could lead to the execution of malicious files, which could result in code execution with elevated privileges.
-
MediumICSA-22-223-04 1 CVE
Emerson ROC800, ROC800L and DL8000
Successful exploitation of this vulnerability could cause file manipulation.