155 matches found
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers across US Critical Infrastructure
The authoring agencies urgently warn U.S. organizations of ongoing Iranian-affiliated cyber targeting of internet-connected operational technology OT devices, including programmable logic controllers PLCs. These actions disrupted PLCs across several U.S. critical infrastructure sectors through...
The vulnerability of Honeywell IQ4 programmable logic controllers’ microprogramming software lies in the lack of authentication for critical functions, allowing attackers to gain full access to the device.
The vulnerability of the microprogrammed software in Honeywell IQ4 programmable logic controllers is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker operating remotely to gain full access to the device...
CVE-2026-25786
Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page. If a...
CVE-2026-6284 Horner Automation Cscape and XL4, XL7 PLC Weak password requirements
An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...
The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers, such as Modicon M241, Modicon M251, Modicon M258, and Modicon LMC058, stems from the lack of protective measures for website structures. This allows attackers to perform cross-site scripting attacks.
The vulnerability of microprogrammed software in Schneider Electric’s Modicon M241, Modicon M251, Modicon M258, and Modicon LMC058 programmable logic controllers is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the microprogrammed software in programmable logic controllers of the CompactLogix 5370 allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed software in the CompactLogix 5370 programmable logic controllers is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions in the system...
The vulnerability of Siemens Sinumerik programmable logic controllers’ software lies in the ability to bypass the authentication process by using an alternative path or channel. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Siemens Sinumerik programmable logic controllers lies in the ability to bypass the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected informati...
The vulnerability of integrated software for designing and configuring automation systems based on PLCs and ABB robots lies in the improper assignment of permissions for files, allowing a perpetrator to execute arbitrary code.
The vulnerability of the comprehensive software for designing and configuring automation systems based on PLCs and ABB robots is related to the improper assignment of permissions for files. Exploiting this vulnerability can allow attackers to execute arbitrary code...
A Multi-Layered Embedded Intrusion Detection Framework for Programmable Logic Controllers
Industrial control system ICS operations use trusted endpoints like human machine interfaces HMIs and workstations to relay commands to programmable logic controllers PLCs. Because most PLCs lack layered defenses, compromise of a trusted endpoint can drive unsafe actuator commands and risk...
EUVD-2017-16872
Malware in sbrugna...
EUVD-2017-16873
Malware in sbrugna...
ICSLure: a Very High Interaction Honeynet for PLC-Based Industrial Control Systems
The security of Industrial Control Systems ICSs is critical to ensuring the safety of industrial processes and personnel. The rapid adoption of Industrial Internet of Things IIoT technologies has expanded system functionality but also increased the attack surface, exposing ICSs to a growing range...
The vulnerability of the EPA component of the Honeywell Experion PKS programmable logic controllers allows a intruder to trigger a service failure.
The vulnerability of the Epic Platform Analyzer EPA component of Honeywell Experion PKS programmable logic controllers is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...
CVE-2024-50954
The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network LAN, sending a specific Modbus message to the controller can cau...
CVE-2021-20827
Plaintext storage of a password vulnerability in IDEC PLCs FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier allows an...
CVE-2019-10953
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets...
CISA: Key Secure by Demand Elements for Operational Technology Fact Sheet
This fact sheet addresses key elements for operational technology OT owners and operators to consider when purchasing digital products that automate physical processes, e.g. programmable logic controllers PLCs, human-machine interfaces HMIs, and remote terminal units RTUs. CISA strongly advises...
The vulnerability of the web server of the microprogramming software for programmable logic controllers SIMATIC S7-1200 allows attackers to perform spoofing attacks.
The vulnerability of the web server of microprogrammed software-controlled logical controllers SIMATIC S7-1200 is related to errors in authenticating certificates. Exploiting this vulnerability allows an attacker to perform spoofing attacks remotely...
The vulnerability of the implementation of the Factory Interface Network Service (FINS) protocol in the microcomputer-based software for programmable logic controllers SYSMAC allows a intruder to gain unauthorized access to protected information and execute arbitrary commands.
The vulnerability of the Factory Interface Network Service FINS protocol implemented in SYSMAC programmable logic controllers is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to sensitive informati...
Rockwell Automation GuardLogix 5580和Rockwell Automation GuardLogix 5380 安全漏洞
The Rockwell Automation GuardLogix 5580 and Rockwell Automation GuardLogix 5380 are both programmable logic controllers from Rockwell Automation. A security vulnerability exists in the Rockwell Automation GuardLogix 5580 and Rockwell Automation GuardLogix 5380. An attacker could exploit this...