3788 matches found
CVE-2025-40771
CVE-2025-40771 affects Siemens SIMATIC CP 1542SP-1, CP 1542SP-1 IRC, CP 1543SP-1 and SIPLUS ET 200SP variants (and related CPs) with versions older than 2.4.24. The root cause is improper authentication of configuration connections, allowing an unauthenticated remote attacker to access configurat...
CVE-2025-41699
Phoenix Contact CHARX SEC-3xxx charging controllers are affected by CVE-2025-41699. The vulnerability is a code injection (CWE-94) that an attacker with a low-privileged remote account for the Web-based management can exploit to change system configuration and perform a root command injection, co...
Schneider Electric EcoStruxure
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...
PT-2025-41982
Name of the Vulnerable Software and Affected Versions AOS-10 GW and AOS-8 Controllers/Mobility Conductor affected versions not specified Description A command injection flaw exists in the command line interface binary. Exploitation requires physical access to the hardware controllers and...
CVE-2025-37138: Improper Neutralization of Special Elements used in a Command
An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Controllers/Mobility Conductor operating system. Exploitation of this vulnerability requires physical access to the hardware controllers. A successful attack could allow an...
HPESBNW04957 rev.1 - HPE Aruba Networking AOS-10 and AOS-8 Mobility Conductor, Controllers, and Gateways, Multiple Vulnerabilities
Potential Security Impact: Remote: Arbitrary Command Execution, Arbitrary File Deletion, Arbitrary File Download, Creation and Deletion of Arbitrary Files, Execution of Arbitrary Commands, Unauthorized Access to Files, Unauthorized Arbitrary Command Execution, Unauthorized Data Modification,...
Integrated software Design Automation Permissions Code Execution
The vulnerability of the comprehensive software for designing and configuring automation systems based on PLCs and ABB robots is related to the improper assignment of permissions for files. Exploiting this vulnerability can allow attackers to execute arbitrary code...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can gain unauthorized access to restricted organization or application editing interfaces by manipulating URLs after authentication. Remediation Upgrade github.com/casdoor/casdoor/controllers to...
A Multi-Layered Embedded Intrusion Detection Framework for Programmable Logic Controllers
Industrial control system ICS operations use trusted endpoints like human machine interfaces HMIs and workstations to relay commands to programmable logic controllers PLCs. Because most PLCs lack layered defenses, compromise of a trusted endpoint can drive unsafe actuator commands and risk...
EUVD-2014-0800
Malware in sbrugna...
EUVD-2017-3851
Malware in sbrugna...
EUVD-2017-3853
Malware in sbrugna...
EUVD-2021-2622
Malware in sbrugna...
EUVD-2018-2705
Malware in sbrugna...
EUVD-2020-17216
Malware in sbrugna...
EUVD-2007-3995
Malware in sbrugna...
EUVD-2021-21251
Malware in sbrugna...
EUVD-2021-21238
Malware in sbrugna...