Siemens Tecnomatix Plant Simulation Out-of-Bounds Write Vulnerability (CNVD-2023-18930)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. A security vulnerability exists in Siemens Tecnomatix...

Siemens Tecnomatix Plant Simulation Memory Corruption Vulnerability

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. A memory corruption vulnerability exists in versions...

CVE-2023-22804

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. This could allow an attacker to create and use an account with elevated privileges and take control of the device...

CVE-2022-32513

A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device when the attacker brute forces the password. Affected Products: C-Bus Network Automation Controller - LSS5500NAC Versions prior to V1.10.0, Wiser for C-Bus Automation Controller -...

PT-2022-9965

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue concerns possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration. This...

IPCOMM ipDIO Cross-site Scripting Vulnerability

IPCOMM ipDIO is a remote control communication device from IPCOMM Germany. It is used to record digital and analog inputs and control digital outputs. A cross-site scripting vulnerability exists in IPCOMM ipDIO, which allows an authenticated, remote attacker to exploit the vulnerability to...

IPCOMM ipDIO security vulnerabilities

IPCOMM ipDIO is a remote control communication device from IPCOMM Germany. It is used to record digital and analog inputs and control digital outputs. A code injection vulnerability exists in IPCOMM ipDIO that stems from the absence of a filter when loading certain sections of the Web application...

Schneider Modicon PAC Controller Has Industrial Control Device Vulnerability

The Schneider Electric M340 is mid-range PAC industrial process and infrastructure control. The Schneider Electric M340 has an industrial control device vulnerability that can be exploited by an attacker to remotely obtain a backdoor password, which can be used to connect to a password-protected...

Schneider Electric PowerLogic Input Validation Error Vulnerability

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, France. It provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices, and operators. An input validation error vulnerability exists in Schneider...

PT-2021-16615

Name of the Vulnerable Software and Affected Versions: Tizen bluetooth-frwk versions prior to Firmware update JUN-2021 Release Description: The issue is related to improper authentication, allowing a bluetooth attacker to take control of the user's bluetooth device without the user's knowledge...

Schneider Electric PowerLogic authorization issue vulnerability

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, France. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices and operators. An authorization issue vulnerability exists in PowerLogic's PM55xx,...

Siemens SmartVNC Buffer Overflow Vulnerability

Siemens SmartVNC is an industrial control device from Siemens, Germany. Provides a smartserver function to access the HMI. A buffer overflow vulnerability exists in SmartVNC. The vulnerability stems from a heap allocation leakage vulnerability in the program, which could lead to a denial of servi...

Siemens SmartVNC Out-of-Bounds Memory Access Vulnerability

Siemens SmartVNC is an industrial control device from Siemens, Germany. Provides a smartserver function to access the HMI. A security vulnerability exists in Siemens SmartVNC. The vulnerability stems from an out-of-scope memory access vulnerability in the program, which can be exploited by an...

Siemens SmartVNC Resource Management Error Vulnerability

Siemens SmartVNC is an industrial control device from Siemens, Germany. A resource management error vulnerability exists in SmartVNC. An attacker could exploit this vulnerability to cause a denial of service to the program...

Weidmuller UC20-WL2000-AC security vulnerabilities

The Weidmuller UC20-WL2000-AC is an industrial control device from Weidmuller USA. A controller. A security vulnerability exists in the Weidmuller UC20-WL2000-AC version 1.12.1. An attacker could exploit this vulnerability to manipulate the device or stop the device...

Siemens SmartVNC buffer error vulnerability

Siemens SmartVNC is an industrial control device from Siemens, Germany. Provides a smartserver function to access the HMI. A buffer overflow vulnerability exists in SmartVNC. The vulnerability stems from a heap allocation leakage vulnerability in the program, which could lead to a denial of servi...

Industrial Control Device Vulnerability in NA400 PLC at Aptar Technology Co.

NA400 PLC is a high performance programmable controller from OPTOTECHNIK Co. A vulnerability exists in the NA400PLC of Aptar Technology Corporation for industrial control devices, which can be exploited by an attacker to modify a user's password...

ABB Relion input validation vulnerability

The ABB Relion 670 Series is a transmission protection control device from ABB Switzerland. The Relion 670, 650, and SAM600-IO; REB500; RTU500; FOX615 TEGO1 contains a security vulnerability that can be exploited by an attacker to force a device reboot, rendering the device inoperable for...

Unspecified Vulnerability in Bosch IP Helper

Bosch IP Helper is an industrial control device from Bosch, Germany. Universal discovery and network configuration tool for all Bosch IP Network Video products. A security vulnerability exists in Bosch IP Helper that could allow an attacker to execute arbitrary code on a victim's system...

Bosch IP Helper code issue vulnerability

Bosch IP Helper is an industrial control device from Bosch, Germany. Universal discovery and network configuration tool for all Bosch IP Network Video products. A security vulnerability exists in Bosch IP Helper that could allow an attacker to execute arbitrary code on a victim's system...