4,105 results · Feed
-
High max 8.7ICSA-26-167-03 1 CVE
Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP
Successful exploitation of this vulnerability could cause a denial-of-service condition that may result in a major nonrecoverable fault (MNRF).
-
High max 8.7ICSA-26-167-04 2 CVEs
Rockwell Automation CompactLogix
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
-
Critical max 8.8ICSA-26-167-05 2 CVEs
Rockwell Automation FLEX I/O EtherNet/IP Adapters
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access, account takeover, and cause loss of availability.
-
Medium max 5.5
Schneider Electric Uni-Telway Driver (Update D)
Schneider Electric is aware of a vulnerability in its [Uni-Telway driver](https://www.se.com/us/en/product-range/573-unitelway/#overview) which is part of [EcoStruxure™ Control Expert](https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unit…
first Feb 11, 2025 -
Critical max 9.8ICSA-26-162-01 2 CVEs
Yarbo Android/iOS Mobile Application and Cloud Infrastructure
Successful exploitation of these vulnerabilities could allow an attacker to obtain hard-coded credentials, gain access to telemetry data, and potentially send operational commands to the robot fleet.
-
Critical max 9.8ICSA-26-162-02 7 CVEs
Naxclow IoT Platform
Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, intercept or manipulate communications, harvest sensitive credentials at scale, or gain unauthorized access.
-
High max 7.7ICSA-26-162-03 2 CVEs
Brickcom Cameras
Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to gain unauthorized access to live video feeds, retrieve sensitive visual information from affected premises, and obtain administrative control of the device.
-
Medium max 6.5
Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 (Update A)
Schneider Electric is aware of a vulnerability in its Modicon M340 and BMXNOE0100 and BMXNOE0110 products. The Modicon M340 is a programmable automation controller; BMXNOE0100 and BMXNOE0110 are network modules used with Modicon M340. Failure to apply the mit…
first Jun 11, 2024 -
High max 7.5
Schneider Electric Modicon M340, MC80, and Momentum Unity M1E & EcoStruxure (Update A)
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M340 / Momentum / MC80 / EcoStruxure™ Control Expert products. [Modicon PAC](https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/?filter=b…
first Nov 12, 2024 -
High max 8.6
Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)
Schneider Electric is aware of a vulnerability in its Web Server on Modicon M340 and BMXNOE0100/0110, BMXNOR0200H communication modules products. The Modicon M340 is a programmable automation controller; BMXNOE0100 and BMXNOE0110 are network communication mod…
first Jan 14, 2025 -
Critical max 9.0
Schneider Electric Modicon Network Managed Switches
Schneider Electric is aware of a RADIUS protocol vulnerability affecting its Modicon Network Managed Switch product. The Modicon Network Managed Switch product provides connectivity for multiple Ethernet devices, network management, enhanced cyber security an…
first Apr 14, 2026 -
High max 8.3
Siemens KACO Blueplanet Inverters
KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO new energy GmbH has released new versions for several affected p…
first May 12, 2026 -
High max 8.2
Schneider Electric EcoStruxure Panel Server
Schneider Electric is aware of its vulnerability in its EcoStruxure Panel Server offer. The EcoStruxure Panel Server is a high performance, modular gateway with enhanced cybersecurity that provides easy and fast connections to multiple concurrent edge control…
first May 12, 2026 -
High max 5.9
CISA manage.get.gov incorrect portfolio administrator privileges
manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization.
first May 7, 2026 -
High max 9.8VA-26-155-01 1 CVE
SQLite sqldiff remote code execution via argument injection
An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options.
-
High max 7.8
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E)
Successful exploitation of these vulnerabilities could result in denial-of-service, improper privilege management, or potentially arbitrary code execution.
first Jun 27, 2024 -
High max 7.5
Schneider Electric Modicon M340 Controller and Communication Modules (Update A)
Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-envi…
first Aug 12, 2025 -
High max 7.5
Hitachi Energy ITT600 Explorer
Hitachi Energy is aware of vulnerabilities that affect ITT600 Explorer product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. The vulnerabilities only affect Hitachi Energy …
first May 26, 2026 -
Medium max 4.4
Hitachi Energy MACH HiDraw
Hitachi Energy is aware of a buffer overflow vulnerability that affects MACH HiDraw product versions listed in this document. Successful exploitation of this vulnerability could lead to a buffer overflow condition, potentially resulting in application outages…
first May 26, 2026 -
High max 7.5
B&R PPT30 Operating System
B&R is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits this vulnerability could make the OPC-UA server of the product inaccessible.
first May 26, 2026 -
Medium max 6.3ICSA-26-155-01 1 CVE
NAVTOR NavBox
Successful exploitation of this vulnerability could allow a local attacker to gain unauthorized access to SOAP methods, resulting in a disruption of operations.
-
High max 7.8
Schneider Electric EcoStruxure (Update A)
Schneider Electric is aware of a vulnerability in its EcoStruxure Process Expert, EcoStruxure Process Expert for AVEVA System Platform products. The EcoStruxure Process Expert, EcoStruxure Process Expert for AVEVA System Platform products are engineering tool…
first Feb 11, 2025 -
High max 7.3
Dreame Technology iOS and Android Mobile Applications (Update A)
Successful exploitation of this vulnerability could result in unauthorized information disclosure.
first Aug 7, 2025 -
Medium max 5.0VA-26-152-01 1 CVE
DeepAI.org CSRF
The DeepAI.org endpoint `https://api.deepai.org/change_user_email` accepts POST requests without any CSRF protection. If a logged-in user is tricked into visiting a malicious HTML page, an attacker can change the user's email address to their own and take ove…
-
High max 8.3
Mitsubishi Electric Factory Automation Engineering Products (Update L)
Successful exploitation of this vulnerability could allow a remote attacker to disclose information, tamper with information, cause a denial-of-service (DoS) condition on the affected products, and so on by replacing certain files in the product which have im…
first Jul 30, 2020 -
Medium max 6.8
ABB Busch-Welcome 2 Wire Door Opener Actuator
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could gain physical, unauthorized access to a Building where the product is installed
first Jul 21, 2025 -
High max 7.5
ABB Ability Zenon Remote Transport Vulnerability (Update A)
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. The vulnerability enables unauthorized access to the Reboot OS function within the Remote Transport Service, allowing an attacker to trigger a system reboot without th…
first Aug 12, 2025 -
High max 8.0
ABB EIBPORT
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. A firmware update is available that resolves these privately reported vulnerabilities in the product versions listed as affected in the advisory. An attacker who succe…
first Oct 7, 2025 -
High max 8.3ICSA-26-148-01 5 CVEs
MacGregor Voyage Data Recorder (VDR) G4e
Successful exploitation of these vulnerabilities could result in an attacker gaining administrator access to the device.
-
Critical max 9.8ICSA-26-148-02 1 CVE
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
Successful exploitation of this vulnerability could result in an attacker gaining administrator access to the device.
-
High max 8.4ICSA-26-148-05 1 CVE
CP Plus 8 Ch. Network Video Recorder
Successful exploitation of this vulnerability allows an attacker's malicious script to execute in the browser of any authenticated user or administrator who accesses the affected interface. This could lead to compromise of user sessions, execution of unauthor…
-
Critical max 9.1ICSA-26-148-06 1 CVE
KMW CCTV Security Cameras
Successful exploitation of this vulnerability may grant full unauthorized access to camera feeds and settings.
-
Critical max 9.3ICSA-26-148-08 3 CVEs
XCharge C6
Successful exploitation of these vulnerabilities could allow an attacker to gain administrator rights or execute code on the affected device.
-
High max 8.8ICSMA-26-148-01 1 CVE
Fourth Frontier Frontier X Mobile Application, Frontier X2
Successful exploitation of this vulnerability could allow an attacker to read and write arbitrary handle values and change clinical readings, which could result in taking control of the device and lead to patient harm.
-
Medium max 5.8
ABB AC500 V2
ABB became aware of vulnerabilities in AC500 V2 listed as affected in the advisory. An attacker who successfully exploited this vulnerability could access fragments of Modbus telegrams that have been sent earlier by that PLC
first Jul 23, 2025 -
Medium max 5.3
Schneider Electric Altivar Products, ATVdPAC Module, ILC992 InterLink Converter (Update B)
Schneider Electric is aware of a vulnerability in its [ATVdPAC module](http://www.se.com/ww/en/product/VW3A3530D/atv-dpac-module/) / [ATV6000 Medium Voltage Altivar Process Drives](http://www.se.com/ww/en/product-range/65607-altivar-process-atv6000) / [ATV630…
first Sep 9, 2025 -
Critical max 10.0
ABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)
An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the product to stop.
first Oct 7, 2025 -
High max 7.4
ABB LVS MConfig
ABB became aware of an internally discovered vulnerability in the MConfig product versions listed as affected in the advisory. An attacker with access to local networks who successfully exploits vulnerability could have access to application’s sensitive infor…
first Oct 8, 2025 -
Medium max 6.8
ABB Terra AC
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a…
first Oct 20, 2025 -
Critical max 8.0
ABB Ability Camera Connect
ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 and below. An update is available that resolves a privately…
first Nov 27, 2025