Lucene search
+L

1102 matches found

Cvelist
Cvelist
•added 2025/11/11 1:47 p.m.•34 views

CVE-2025-11696 Studio 5000 ® Simulation Interface SSRF

A local server-side request forgery SSRF security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes...

8.9CVSS0.00183EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•10 views

CVE-2025-11696: Improper Limitation of a Pathname to a Restricted Directory

A local server-side request forgery SSRF security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes...

8.9CVSS5.8AI score0.00183EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•17 views

PT-2025-46344

A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot...

8.9CVSS6.2AI score0.00155EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•22 views

Rockwell Automation Studio 5000 Simulation Interface Security Vulnerabilities

Rockwell Automation Studio 5000 Simulation Interface is a simulation modeling tool from Rockwell Automation. The Rockwell Automation Studio 5000 Simulation Interface suffers from a server-side request forgery vulnerability that stems from the server not implementing sufficient authentication...

8.9CVSS5.9AI score0.00183EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•7 views

CVE-2025-11697: Exposure of Sensitive Information to an Unauthorized Actor

A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot...

8.9CVSS6.1AI score0.00155EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/11/01 7:15 p.m.•26 views

CVE-2025-12599

Multiple Devices are Sharing the Same Secrets for SDKSocket TCP/5000.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

9.8CVSS5.8AI score0.00426EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/01 6:39 p.m.•38 views

CVE-2025-12599

The CVE affects Azure Access Technology BLU-IC2 and BLU-IC4 up to version 1.19.5, where multiple devices share the same SDKSocket key over TCP/5000. The root cause is the reuse of a shared SDKSocket secret, which can lead to unauthorized access or compromise of device communications (affecting co...

10CVSS5.8AI score0.00426EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/01 6:39 p.m.•13 views

CVE-2025-12599 Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)

Multiple Devices are Sharing the Same Secrets for SDKSocket TCP/5000.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS5.8AI score0.00426EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/01 12:00 a.m.•9 views

CVE-2025-12599: Use of Hard-coded Cryptographic Key

Multiple Devices are Sharing the Same Secrets for SDKSocket TCP/5000.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS5.8AI score0.00426EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/14 12:13 p.m.•12 views

CVE-2025-9437 Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability

A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...

8.7CVSS5.8AI score0.00366EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•9 views

CVE-2025-9437: Improper Handling of Exceptional Conditions

A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...

8.7CVSS5.8AI score0.00366EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2015-4224

Malware in sbrugna...

5CVSS5.8AI score0.02938EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2017-15726

Malware in sbrugna...

7.5CVSS7.3AI score0.01833EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2017-12982

Malware in sbrugna...

5.8CVSS6.1AI score0.02197EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•28 views

EUVD-2016-10015

Malware in sbrugna...

7.5CVSS7.3AI score0.0348EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2016-2551

Malware in sbrugna...

6.5CVSS7.1AI score0.01092EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-12547

Malware in sbrugna...

5.8CVSS6.1AI score0.0076EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2017-15783

Malware in sbrugna...

7.5CVSS7.3AI score0.02297EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2016-7390

Malware in sbrugna...

7.5CVSS7.3AI score0.0348EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2016-2535

Malware in sbrugna...

7.5CVSS7.3AI score0.01765EPSS
SaveExploits0References3
Rows per page
Query Builder