o6 Automation open62541

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial of service, or potentially execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

CVE-2026-16581

creationtimestamp| type| source ---|---|--- 2026-07-28 16:51:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06 2026-07-28 17:04:20+00:00| seen| https://bsky.app/profile/cerberusit.bsky.social/post/3mrpve6p6qi23 2026-07-28 17:04:22+00:00| seen|...

CVE-2025-39721

creationtimestamp| type| source ---|---|--- 2026-07-28 16:19:37+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2025-37972

creationtimestamp| type| source ---|---|--- 2026-07-28 16:18:51+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2025-37917

creationtimestamp| type| source ---|---|--- 2026-07-28 16:18:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

EventON Lite < 2.1.2 - Arbitrary File Download Detection

The plugin does not validate that the eventid parameter in its eventonicsdownload ajax action is a valid Event, allowing unauthenticated visitors to access any Post including unpublished or protected posts content via the ics export functionality by providing the numeric id of the post...

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure Detection

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

Rockwell Automation FactoryTalk ViewPoint - Panel Detection

Rockwell Automation FactoryTalk ViewPoint is a web-based HMI that allows remote monitoring and control of industrial automation systems from a browser. It provides access to FactoryTalk View Machine Edition and Site Edition displays. Exposed instances may allow unauthorised access to industrial...

ScadaBR - Login Panel Detection

ScadaBR is an open-source SCADA system based on Mango Automation, widely used in Brazil and Latin America for industrial monitoring. The "powered by Mango" tagline in the title is a unique identifier. Instances are often internet-facing without authentication controls. !/usr/bin/env python3 --...

Siemens SIMATIC HMI Miniweb - Login Panel Detection

Siemens SIMATIC HMI Miniweb Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Siemens SIMATIC HMI Miniweb Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Siemens...

SEL Real-Time Automation Controller - Login Panel Detection

Schweitzer Engineering Laboratories SEL Real-Time Automation Controller RTAC is a programmable automation controller used in electric utility and industrial automation environments for protection, control, and automation. The web interface exposes a management panel for configuration and...

CPPPO Ethernet/IP CIP Honeypot Default Configuration - Detect

Detected devices responding with the default configuration signature of the CPPPO Python-based Ethernet/IP CIP parser honeypot.This indicates systems likely running the default Conpot honeypot configuration for ICS using the Common Industrial Protocol CIP over Ethernet/IP. !/usr/bin/env python3 -...

Andover Continuum BMS - Login Panel Detection

Andover Continuum Building Management System panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Andover Continuum Building Management System panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

AVEVA InTouch Access Anywhere - Panel Detection

Detected AVEVA InTouch Access Anywhere was a secure gateway that provided browser-based remote access to InTouch HMI applications over the internet. It was widely used in industrial process control, utilities, and manufacturing environments. Exposed instances may have provided access to industria...

Beckhoff TwinCAT HMI Server - Login Panel Detection

Beckhoff TwinCAT HMI Human Machine Interface Server is part of the TwinCAT industrial automation platform used in manufacturing, robotics, and process automation. It exposes a web-based HMI accessible via browser for monitoring and controlling PLC-driven systems. !/usr/bin/env python3 -- coding:...

CAREL Boss Mini - Login Panel Detected

CAREL Boss Mini login panel was detected. Boss Mini is a local supervisor solution by CAREL used for monitoring and managing HVAC/R systems in commercial facilities. Exposed panels may indicate misconfigured network segmentation. !/usr/bin/env python3 -- coding: utf-8 -- """CAREL Boss Mini login...

Jenzabar 9.2x-9.2.2 - Cross-Site Scripting Detection

Jenzabar 9.2.x through 9.2.2 contains a cross-site scripting vulnerability. It allows /ics?tool=search&query. !/usr/bin/env python3 -- coding: utf-8 -- """Jenzabar 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Unitronics PLC - Login Panel Detection

Unitronics PLC web interface panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """Unitronics PLC web interface panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Unitronics PLC ...

Zimbra - Cross-Site Scripting via ICS Files Detection

Detects Zimbra Collaboration Suite versions vulnerable to CVE-2025-27915, a stored XSS vulnerability in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an email with a malicious ICS entry, embedded JavaScript executes via an ontoggle event...

Espec Web Controller - Panel Detection

Espec Web Controller panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Espec Web Controller panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Espec Web Controller - Panel...