4,108 results · Feed
-
CriticalICSA-22-195-17 1 CVE
Siemens Opcenter Quality
Siemens has released updates for Opcenter Quality to fix an authentication bypass vulnerability. This could allow unauthenticated access to the application or cause denial of service condition for existing users. The issue is based on rich client modules usin…
-
Medium max 6.5ICSA-22-188-01 1 CVE
Rockwell Automation MicroLogix
Successful exploitation of this vulnerability could allow a malicious user to trick a legitimate user into using an untrusted website. If exploited, this vulnerability could lead to a loss of sensitive information, such as authentication credentials.
-
CriticalICSA-22-188-02 2 CVEs
Bently Nevada ADAPT 3701/4X Series and 60M100
Successful exploitation of these vulnerabilities could allow file manipulation, remote code execution, or cause a denial-of-service condition.
-
Critical max 9.8ICSA-22-181-01 1 CVE
Exemys RME1
Successful exploitation of this vulnerability could allow an attacker with network access to bypass authentication and perform administrative operations.
-
MediumICSA-22-181-02 1 CVE
Yokogawa Wide Area Communication Router
Successful exploitation of this vulnerability could cause the functions provided by the WAC Router to stop.
-
HighICSA-22-181-03 6 CVEs
Emerson DeltaV Distributed Control System
Successful exploitation of these vulnerabilities can result in a denial-of-service condition, manipulation of runtime communications, or compromise of a controller.
-
Medium max 9.1ICSA-22-181-04 2 CVEs
Distributed Data Systems WebHMI
Successful exploitation of these vulnerabilities could allow a user with administrative privileges in WebHMI to execute arbitrary OS commands or impact other logged in users.
-
High max 7.8ICSA-22-179-01 2 CVEs
ABB e-Design
Exploitation of these vulnerabilities could allow privilege escalation or a denial-of service condition.
-
MediumICSA-22-179-02 4 CVEs
Omron SYSMAC CS/CJ/CP Series and NJ/NX Series
Successful exploitation of these vulnerabilities could cause a denial-of-service condition and allow remote code execution.
-
Critical max 9.8ICSA-22-179-03 7 CVEs
Advantech iView
Successful exploitation of these vulnerabilities could allow an attacker to read or modify sensitive data, disclose information, or execute arbitrary code.
-
HighICSA-22-179-04 1 CVE
Motorola Solutions MOSCAD IP and ACE IP Gateways
Successful exploitation of this vulnerability could result in manipulation of device configuration.
-
HighICSA-22-179-05 2 CVEs
Motorola Solutions MDLC
Successful exploitation of these vulnerabilities could result in message manipulation, exposure of the attack surface of the MDLC protocol parser, memory corruption, and exposure of sensitive information.
-
Critical max 9.8ICSA-22-179-06 5 CVEs
Motorola Solutions ACE1000
Successful exploitation of these vulnerabilities could allow an attacker to manipulate the RTU configuration, cause a denial-of-service condition, or achieve remote code execution.
-
Medium max 6.3ICSA-22-174-01 2 CVEs
Yokogawa STARDOM
Successful exploitation of these vulnerabilities could allow attackers to alter device configuration settings and tamper with device firmware.
-
MediumICSA-22-174-02 1 CVE
Yokogawa CAMS for HIS
If a computer using CAMS for HIS software is compromised, it can be used to compromise any number of other computers using CAMS for HIS software with the potential to crash any affected software.
-
Critical max 9.9ICSA-22-174-03 7 CVEs
Secheron SEPCOS Control and Protection Relay
Successful exploitation of these vulnerabilities could allow an attacker to obtain full, root access over the device in multiple ways. Initial footholds through S-Web interface software vulnerabilities could allow an attacker to obtain a level of control over…
-
Critical max 9.8ICSA-22-174-04 1 CVE
Pyramid Solutions EtherNet/IP Adapter Development Kit
Successful exploitation of this vulnerability could allow an attacker with access to the EtherNet/IP network to send a specially crafted packet that may result in a denial-of-service condition.
-
High max 8.8ICSA-22-174-05 3 CVEs
Elcomplus SmartICS
Successful exploitation of these vulnerabilities could allow an attacker to view files on the system or terminate processes on the system.
-
High max 7.5ICSMA-22-174-01 3 CVEs
OFFIS DCMTK
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, write malformed DICOM files into arbitrary directories, and gain remote code execution.
-
High max 9.1ICSA-22-172-02 2 CVEs
JTEKT TOYOPUC
Successful exploitation of this vulnerability could cause a denial-of-service condition, change control logic, or disable communication links.
-
Critical max 9.8ICSA-22-172-03 1 CVE
Phoenix Contact Classic Line Controllers
Successful exploitation of this vulnerability could allow an attacker to upload logic with arbitrary code.
-
Critical max 9.8ICSA-22-172-04 1 CVE
Phoenix Contact ProConOS and MULTIPROG
Successful exploitation of this vulnerability could allow an attacker to upload arbitrary malicious code after gaining access to the communication to products utilizing ProConOS/ProConOS eCLR or MULTIPROG.
-
Critical max 9.8ICSA-22-172-05 1 CVE
Phoenix Contact Classic Line Industrial Controllers
Successful exploitation of this vulnerability could allow an unauthorized attacker to change configurations, manipulate services, or cause a denial-of-service condition.
-
CriticalICSA-22-172-06 1 CVE
Siemens WinCC OA
SIMATIC WinCC OA implements client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without bei…
-
High
Siemens TIA Portal (Update F)
Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code with SYSTEM privileges.
first Jan 16, 2020 -
Critical
Siemens Desigo PXC and DXR Devices
Successful exploitation of these vulnerabilities could allow an attacker to potentially intercept unencrypted transmission of sensitive information, cause a denial-of-service condition, perform remote code execution, or disable and reset a device to factory s…
first May 12, 2022 -
High max 7.8ICSA-22-167-01 2 CVEs
AutomationDirect C-More EA9 HMI
Successful exploitation of these vulnerabilities could cause a loss of sensitive information and the ability to run code execution with elevated privileges.
-
High max 7.7ICSA-22-167-02 1 CVE
AutomationDirect DirectLOGIC with Serial Communication
Successful exploitation of this vulnerability could cause a loss of sensitive information and unauthorized changes.
-
High max 7.7ICSA-22-167-03 2 CVEs
AutomationDirect DirectLOGIC with Ethernet
Successful exploitation of these vulnerabilities could cause a loss of sensitive information, unauthorized changes, and a denial-of-service condition.
-
High max 7.7ICSMA-22-167-01 2 CVEs
Hillrom Medical Device Management
Successful exploitation of these vulnerabilities could allow an attacker to compromise software security by executing commands, gaining privileges, reading sensitive information, evading detection, etc.
-
High max 7.5
Siemens BACnet Field Panels (Update A)
Multiple vulnerabilities in the APOGEE PXC and TALON TC series of products could allow unauthenticated attackers to download sensitive information through the integrated webserver. Siemens has released updates for several affected products and recommends to u…
first Oct 12, 2017 -
High
Siemens SIMATIC CP (Update A)
SIMATIC CP 1543-1 and CP 1545-1 devices are affected by multiple vulnerabilities in ProFTPD, a third party component, that could allow a remote attacker to access sensitive information and execute arbitrary code. Siemens has released updates for the affected …
first Aug 10, 2021 -
Medium
Siemens SIMATIC CP (Update A)
A cleartext vulnerability was found in the SIMATIC communication processors CP 1543-1 and CP 1545-1 that could allow an attacker to read sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versi…
first Sep 14, 2021 -
High max 7.8
Siemens Solid Edge, JT2Go, and Teamcenter Visualization
Siemens has released updates for JT2Go, Solid Edge and Teamcenter Visualization to fix multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as PDF, DXF or PAR) with any of the affected products, this could lead the app…
first Feb 8, 2022 -
High max 8.7ICSA-22-165-01 3 CVEs
Johnson Controls Metasys ADS ADX OAS Servers
Successful exploitation of these vulnerabilities could allow unauthorized users to compromise passwords and inject malicious code into web interfaces.
-
HighICSA-22-165-02 1 CVE
Meridian Cooperative Meridian
Successful exploitation of this vulnerability could result in a disclosure of sensitive information.
-
HighICSA-22-165-03 1 CVE
Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R
Successful exploitation of this vulnerability could result in a denial-of-service condition and/or enable remote code execution.
-
HighICSA-22-167-04 2 CVEs
Siemens Mendix SAML Module
The latest updates of Mendix the SAML module fixes two vulnerabilities. One is an XML External Entity (XXE) attack that could allow an attacker to potentially disclose confidential data under certain circumstances the other is an Cross Site Scripting (XSS) at…
-
HighICSA-22-167-05 1 CVE
Siemens EN100 Ethernet Module
EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30937). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures f…
-
MediumICSA-22-167-07 2 CVEs
Siemens SINEMA Remote Connect Server
SINEMA Remote Connect Server is missing HTTP security headers on the web server. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors. Siemens has released an update…