Johnson Controls iSTAR

RISK EVALUATION Successful exploitation of these vulnerabilities could result in unauthorized access to the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all...

CVE-2021-47706 COMMAX Biometric Access Control System Authentication Bypass

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass...

CVE-2025-40940

A vulnerability has been identified in SIMATIC CN 4100 All versions V4.0.1. The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data,...

R.V.R. Elettronica TLK302T 安全漏洞

The R.V.R. Elettronica TLK302T is a telemetry control system from R.V.R. Elettronica, Italy. A security vulnerability exists in the R.V.R. Elettronica TLK302T that originates from the presence of stored cross-site scripting in the web management interface...

CVE-2025-13932

creationtimestamp| type| source ---|---|--- 2025-12-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-06 2025-12-04 22:30:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m76zjwd57t2s...

CVE-2025-13373

creationtimestamp| type| source ---|---|--- 2025-12-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-07 2025-12-05 02:46:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77hua4ufv2s...

CVE-2025-66238

creationtimestamp| type| source ---|---|--- 2025-12-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-05 2025-12-05 02:38:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77hftnjk426...

Exploit for CVE-2025-41744

Lab: CVE-2025-41744 - Use of Default Cryptographic Key in Spre...

CVE-2025-13084

creationtimestamp| type| source ---|---|--- 2025-11-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-04 2025-11-26 21:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kr7cngi32x...

CVE-2025-13483

creationtimestamp| type| source ---|---|--- 2025-11-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-06 2025-11-25 21:18:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ibcoq3yy2k...

CVE-2025-64130

creationtimestamp| type| source ---|---|--- 2025-11-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-03 2025-11-26 17:31:14+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/115617187340285538 2025-11-26 17:31:27+00:00| seen|...

CVE-2025-65085

creationtimestamp| type| source ---|---|--- 2025-11-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-01 2025-11-25 21:37:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6icf7p4my2k...

CVE-2025-62674

creationtimestamp| type| source ---|---|--- 2025-11-20 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-02...

RHSA-2025:21696 Red Hat Security Advisory: pcs security update

Bulletin has no description...

CVE-2025-10089

Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setting Application IR all versions, MILCO.S Easy Setting Application IR all versions, and MILCO.S Easy Switch Application IR all...

PT-2025-47028

Name of the Vulnerable Software and Affected Versions General Industrial Controls Lynx+ Gateway affected versions not specified Description The Lynx+ Gateway is susceptible to a cleartext transmission issue. This could allow an attacker to intercept network traffic and potentially gain access to...

CVE-2025-55034

creationtimestamp| type| source ---|---|--- 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-08...

CVE-2025-8386

creationtimestamp| type| source ---|---|--- 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-02...

CVE-2023-30901

creationtimestamp| type| source ---|---|--- 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-11...

Brightpick Mission Control / Internal Logic Control

RISK EVALUATION Successful exploitation of these vulnerabilities could result in the exposure of sensitive information and the manipulation of critical functions by an attacker. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...