CVE-2023-22804

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. This could allow an attacker to create and use an account with elevated privileges and take control of the device...

CVE-2022-32513

A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device when the attacker brute forces the password. Affected Products: C-Bus Network Automation Controller - LSS5500NAC Versions prior to V1.10.0, Wiser for C-Bus Automation Controller -...

IPCOMM ipDIO 跨站脚本漏洞

IPCOMM ipDIO is a remote control communication device from IPCOMM Germany. It is used to record digital and analog inputs and control digital outputs. A cross-site scripting vulnerability exists in IPCOMM ipDIO, which allows an authenticated, remote attacker to exploit the vulnerability to...

IPCOMM ipDIO 安全漏洞

IPCOMM ipDIO is a remote control communication device from IPCOMM Germany. It is used to record digital and analog inputs and control digital outputs. A code injection vulnerability exists in IPCOMM ipDIO that stems from the absence of a filter when loading certain sections of the Web application...

Schneider Modicon PAC Controller Has Industrial Control Device Vulnerability

The Schneider Electric M340 is mid-range PAC industrial process and infrastructure control. The Schneider Electric M340 has an industrial control device vulnerability that can be exploited by an attacker to remotely obtain a backdoor password, which can be used to connect to a password-protected...

Schneider Electric PowerLogic Input Validation Error Vulnerability

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, France. It provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices, and operators. An input validation error vulnerability exists in Schneider...

Schneider Electric PowerLogic 授权问题漏洞

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, France. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices and operators. An authorization issue vulnerability exists in PowerLogic's PM55xx,...

Siemens SmartVNC Buffer Overflow Vulnerability

Siemens SmartVNC is an industrial control device from Siemens, Germany. Provides a smartserver function to access the HMI. A buffer overflow vulnerability exists in SmartVNC. The vulnerability stems from a heap allocation leakage vulnerability in the program, which could lead to a denial of servi...

Siemens SmartVNC Out-of-Bounds Memory Access Vulnerability

Siemens SmartVNC is an industrial control device from Siemens, Germany. Provides a smartserver function to access the HMI. A security vulnerability exists in Siemens SmartVNC. The vulnerability stems from an out-of-scope memory access vulnerability in the program, which can be exploited by an...

Siemens SmartVNC Resource Management Error Vulnerability

Siemens SmartVNC is an industrial control device from Siemens, Germany. A resource management error vulnerability exists in SmartVNC. An attacker could exploit this vulnerability to cause a denial of service to the program...

Weidmuller UC20-WL2000-AC 安全漏洞

The Weidmuller UC20-WL2000-AC is an industrial control device from Weidmuller USA. A controller. A security vulnerability exists in the Weidmuller UC20-WL2000-AC version 1.12.1. An attacker could exploit this vulnerability to manipulate the device or stop the device...

Siemens SmartVNC 缓冲区错误漏洞

Siemens SmartVNC is an industrial control device from Siemens, Germany. Provides a smartserver function to access the HMI. A buffer overflow vulnerability exists in SmartVNC. The vulnerability stems from a heap allocation leakage vulnerability in the program, which could lead to a denial of servi...

Industrial Control Device Vulnerability in NA400 PLC at Aptar Technology Co.

NA400 PLC is a high performance programmable controller from OPTOTECHNIK Co. A vulnerability exists in the NA400PLC of Aptar Technology Corporation for industrial control devices, which can be exploited by an attacker to modify a user's password...

ABB Relion 输入验证错误漏洞

The ABB Relion 670 Series is a transmission protection control device from ABB Switzerland. The Relion 670, 650, and SAM600-IO; REB500; RTU500; FOX615 TEGO1 contains a security vulnerability that can be exploited by an attacker to force a device reboot, rendering the device inoperable for...

Unspecified Vulnerability in Bosch IP Helper

Bosch IP Helper is an industrial control device from Bosch, Germany. Universal discovery and network configuration tool for all Bosch IP Network Video products. A security vulnerability exists in Bosch IP Helper that could allow an attacker to execute arbitrary code on a victim's system...

Bosch IP Helper 代码问题漏洞

Bosch IP Helper is an industrial control device from Bosch, Germany. Universal discovery and network configuration tool for all Bosch IP Network Video products. A security vulnerability exists in Bosch IP Helper that could allow an attacker to execute arbitrary code on a victim's system...

Industrial Control Device Vulnerability in Rockwell ControlLogix 5571

Allen-Bradley ControlLogix 5571 is a programmable automation controller of Rockwell Automation's ControlLogix 5570 series. The Rockwell ControlLogix 5571 is an industrial control device vulnerability that can be exploited by an attacker to cause the device to power down and reboot...

Allen-Bradley CompactLogix L16ER Has Industrial Control Device Vulnerability

Allen-Bradley Automation provides customers with a full suite of components, products, control and information platforms, as well as support services and manufacturing solutions. An industrial control device vulnerability exists in Allen-Bradley CompactLogix L16ER. An attacker could exploit the...

CVE-2020-25187 Medtronic MyCareLink Smart Heap-based Buffer Overflow

Medtronic MyCareLink Smart 25000 is vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and cause a heap overflow event within the MCL Smart Patient Reader software stack. The heap overflow could allow an attacker to remotely execute code on the...

ALPINE-CVE-2020-14339

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...