CVE-2026-6284

CVE-2026-6284 affects Horner Automation PLC products (Cscape software and XL4/XL7 XL-series PLCs). Vulnerability stems from weak password requirements: limited password complexity and no input-rate limits enable network-auth brute-forcing to gain unauthorized access to systems and services. Attac...

CVE-2025-61934 AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the...

IDEC PLC多款产品 安全漏洞

IDEC PLC is a family of programmable controllers from IDEC Corporation. A security vulnerability exists in a variety of IDEC PLC products that stems from the plaintext transmission of sensitive information. When an attacker sends specific commands to the PLC's serial communication port, it may be...