CVE-2024-53651

creationtimestamp| type| source ---|---|--- 2025-02-11 10:39:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113984823007306344 2025-02-11 11:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjt3e4xj22 2025-02-11 13:10:35+00:00| seen|...

CVE-2024-45386

creationtimestamp| type| source ---|---|--- 2025-02-11 10:39:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113984822972033862 2025-02-11 11:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjsw7ega2z 2025-02-11 12:48:20+00:00| seen|...

CVE-2024-23814

creationtimestamp| type| source ---|---|--- 2025-02-11 10:29:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113984783226707078 2025-02-11 11:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjsturqv23 2025-02-13 11:00:00+00:00| seen|...

Siemens RUGGEDCOM APE1808

SUMMARY Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens is preparing fix versions and recommends to consult and implement the workarounds provided in Fortinet's upstream security notifications. 2. GENERAL...

Siemens SIMATIC

SUMMARY The webserver of several SIMATIC products is affected by a user enumeration vulnerability that could allow an unauthenticated remote attacker to identify valid usernames. Siemens has released new versions for several affected products and recommends to update to the latest versions...

CISA Warns of Active Exploits Targeting Trimble Cityworks Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management software has come under active exploitation in the wild. The vulnerability in question is CVE-2025-0994 CVSS v4 score: 8.6, a deserialization of...

Trimble Releases Security Updates to Address a Vulnerability in Cityworks Software

CISA is collaborating with private industry partners to respond to reports of exploitation of a vulnerability CVE-2025-0994 discovered by Trimble impacting its Cityworks Server AMS Asset Management System. Trimble has released security updates and an advisory addressing a recently discovered...

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2024-45195 CVSS score: 7.5/9.8 - A forced...

CVE-2025-0960

creationtimestamp| type| source ---|---|--- 2025-02-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-08 2025-02-04 20:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheuqydy3v2e 2025-02-04 20:49:00+00:00| seen|...

Schneider Electric Web Designer for Modicon

RISK EVALUATION Successful exploitation of this vulnerability could result in information disclosure, workstation integrity and potential remote code execution on the compromised computer. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment...

Rockwell Automation GuardLogix 5380 and 5580 (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...

CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors

The U.S. Cybersecurity and Infrastructure Security Agency CISA and the Food and Drug Administration FDA have issued alerts about the presence of hidden functionality in Contec CMS8000 patient monitors and Epsimed MN-120 patient monitors. The vulnerability, tracked as CVE-2025-0626 , carries a CVS...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on January 30, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-030-01 Hitachi Energy UNEM ICSA-25-030-02 New Rock Technologies Cloud Connected...

CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

CISA released a fact sheet, Contec CMS8000 Contains a Backdoor, detailing an analysis of three firmware package versions of the Contec CMS8000, a patient monitor used by the U.S. Healthcare and Public Health HPH sector. Analysts discovered that an embedded backdoor function with a hard-coded IP...

CVE-2025-0681

creationtimestamp| type| source ---|---|--- 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-02 2025-01-30 18:55:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113918826348660828 2025-01-30 22:38:33+00:00| seen| https://t.me/cvedetector/168...

CVE-2025-0680

creationtimestamp| type| source ---|---|--- 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-02 2025-01-30 18:55:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113918826332969410 2025-01-30 20:48:56+00:00| seen|...

New Rock Technologies Cloud Connected Devices

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker full control of the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all...

Rockwell Automation KEPServer

RISK EVALUATION Successful exploitation of this vulnerability could cause the device to crash. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control system devices...

Rockwell Automation FactoryTalk AssetCentre

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to extract passwords, access, credentials, or impersonate other users. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities,...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation , as confirmed by Fortinet. CVE-2025-24085link is external Apple Multiple Products Use-After-Free Vulnerability These types of vulnerabilities are frequent attack vectors...