WAGO 授权问题漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is specifically designed for use in industrial environments as an electronic system for the operation of digital algorithms. An authorization issue exists in WAGO PLC in firmware version FW07, which can be...

The vulnerability of Schneider Electric’s Modbus Serial Driver for programmable logic controllers is related to errors in processing hypertext links, allowing an attacker to re-write files in the file system.

The vulnerability of Schneider Electric’s Modbus Serial Driver relates to errors in processing hypertext links. Exploiting this vulnerability could allow an attacker to re-record files in the file system...

The vulnerability of the Modbus protocol implementation in microprogrammed software for programmable logic controllers like Modicon Quantum arises from incorrect code generation. This allows attackers to trigger malfunctions during maintenance operations.

The vulnerability of the Modbus protocol implementation in microprogrammed software for programmable logic controllers like Modicon Quantum is related to incorrect code generation. Exploiting this vulnerability could allow an attacker, operating remotely, to cause malfunctions in the system’s...

MAC1100 PLC 安全漏洞

The MAC1100 PLC is an industrial control product PLC. A security vulnerability exists in the MAC1100 PLC that can be exploited by an attacker to gain access to the system and escalate privileges via a crafted package...

Siemens SIMATIC S7-1500 CPU和SIMATIC S7-1500 授权问题漏洞

The Siemens SIMATIC S7-1500 CPU and SIMATIC S7-1500 are both products of Siemens, Germany.The SIMATIC S7-1500 CPU is a CPU central processing unit module.The SIMATIC S7-1500 is a programmable logic controller. A security vulnerability exists in the Siemens SIMATIC S7-1500 CPU and SIMATIC S7-1500...

CLICK PLC CPU Modules 授权问题漏洞

CLICK PLC CPU Modules are Automation Direct's network devicesA single CLICK CPU Module can be connected to up to eight I/O modules to expand the number of system I/O and meet the needs of a specific application. An authorization issue vulnerability exists in Automation Direct CLICK PLC CPU Module...

CLICK PLC CPU Modules 授权问题漏洞

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to 8 I/O modules to expand the amount of system I/O and meet the needs of a specific application. A security vulnerability exists in Automation Direct CLICK PLC CPU Modules that results ...

Denial of Service Vulnerability in Schneider Electric EcoStruxure Control Expert (CNVD-2021-45385)

Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric logic controller products. A denial of service vulnerability exists in Schneider Electric EcoStruxure Control Expert, which can be exploited by an attacker to cause the program to crash...

CVE-2021-33841

SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges...

CODESYS V2 Web-Server 访问控制错误漏洞

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An access control error vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the...

WAGO Unauthorized Access Vulnerability

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in WAGO. The vulnerability arises from unauthorized acces...

WAGO Cross-Site Scripting Vulnerability

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A cross-site scripting vulnerability exists in WAGO. The vulnerability stems from a lack ...

WAGO 跨站脚本漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A cross-site scripting vulnerability exists in WAGO. The vulnerability stems from a lack ...

WAGO 安全漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed for use in industrial environments as an electronic system for the operation of digital algorithms. A security vulnerability exists in WAGO. An attacker could use a specially crafted request to cause...

WAGO 安全漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed for use in industrial environments as an electronic system for the operation of digital algorithms. A security vulnerability exists in WAGO. The vulnerability stems from a program web server cookie...

WAGO 信息泄露漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed for use in industrial environments as an electronic system for the operation of digital algorithms. A security vulnerability exists in WAGO. An attacker could use this vulnerability to gain access to...

Omron CX-One 缓冲区错误漏洞

Omron CX-One is an integrated toolkit from Omron Japan. The product includes an inverter, temperature controller, and PLC programming software. A security vulnerability exists in CX-One Versions version 4.60 and earlier. The vulnerability stems from the program's susceptibility to a stack-based...

Siemens Web Server缓冲区错误漏洞

Siemens SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. A heap buffer overflow vulnerability exists in the Siemens SCALANCE X-200 web server. An attacker could exploit the vulnerability to cause a denial o...

The vulnerability of the programmable logic controller MELSEC iQ-R, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the programmable logic controller MELSEC iQ-R is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause malfunctions in the service process using a specially crafted package...

Siemens LOGO! 8 BM

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...