3438 matches found
CVE-2011-20002
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family incl. SIPLUS variants All versions V2.0.2, SIMATIC S7-1200 CPU V2 family incl. SIPLUS variants All versions V2.0.2. Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This...
CVE-2025-40771
CVE-2025-40771 affects Siemens SIMATIC CP 1542SP-1, CP 1542SP-1 IRC, CP 1543SP-1 and SIPLUS ET 200SP variants (and related CPs) with versions older than 2.4.24. The root cause is improper authentication of configuration connections, allowing an unauthenticated remote attacker to access configurat...
CVE-2025-41699
Phoenix Contact CHARX SEC-3xxx charging controllers are affected by CVE-2025-41699. The vulnerability is a code injection (CWE-94) that an attacker with a low-privileged remote account for the Web-based management can exploit to change system configuration and perform a root command injection, co...
Schneider Electric EcoStruxure
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...
HPESBNW04957 rev.1 - HPE Aruba Networking AOS-10 and AOS-8 Mobility Conductor, Controllers, and Gateways, Multiple Vulnerabilities
Potential Security Impact: Remote: Arbitrary Command Execution, Arbitrary File Deletion, Arbitrary File Download, Creation and Deletion of Arbitrary Files, Execution of Arbitrary Commands, Unauthorized Access to Files, Unauthorized Arbitrary Command Execution, Unauthorized Data Modification,...
CVE-2025-37138: Improper Neutralization of Special Elements used in a Command
An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Controllers/Mobility Conductor operating system. Exploitation of this vulnerability requires physical access to the hardware controllers. A successful attack could allow an...
PT-2025-41982
Name of the Vulnerable Software and Affected Versions AOS-10 GW and AOS-8 Controllers/Mobility Conductor affected versions not specified Description A command injection flaw exists in the command line interface binary. Exploitation requires physical access to the hardware controllers and...
The vulnerability of integrated software for designing and configuring automation systems based on PLCs and ABB robots lies in the improper assignment of permissions for files, allowing a perpetrator to execute arbitrary code.
The vulnerability of the comprehensive software for designing and configuring automation systems based on PLCs and ABB robots is related to the improper assignment of permissions for files. Exploiting this vulnerability can allow attackers to execute arbitrary code...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can gain unauthorized access to restricted organization or application editing interfaces by manipulating URLs after authentication. Remediation Upgrade github.com/casdoor/casdoor/controllers to...
A Multi-Layered Embedded Intrusion Detection Framework for Programmable Logic Controllers
Industrial control system ICS operations use trusted endpoints like human machine interfaces HMIs and workstations to relay commands to programmable logic controllers PLCs. Because most PLCs lack layered defenses, compromise of a trusted endpoint can drive unsafe actuator commands and risk...
EUVD-2017-15736
Malware in sbrugna...
EUVD-2017-15751
Malware in sbrugna...
EUVD-2017-3851
Malware in sbrugna...
EUVD-2021-21241
Malware in sbrugna...
EUVD-2020-4608
Malware in sbrugna...
EUVD-2018-19557
Malware in sbrugna...
EUVD-2021-21238
Malware in sbrugna...
EUVD-2020-17214
Malware in sbrugna...