WAGO 安全漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed for use in industrial environments as an electronic system for the operation of digital algorithms. A security vulnerability exists in WAGO. An attacker could use a specially crafted request to cause...

WAGO 安全漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed for use in industrial environments as an electronic system for the operation of digital algorithms. A security vulnerability exists in WAGO. The vulnerability stems from a program web server cookie...

Omron CX-One 缓冲区错误漏洞

Omron CX-One is an integrated toolkit from Omron Japan. The product includes an inverter, temperature controller, and PLC programming software. A security vulnerability exists in CX-One Versions version 4.60 and earlier. The vulnerability stems from the program's susceptibility to a stack-based...

The vulnerability of Siemens LOGO!8 BM programmable logic controller’s microprogramming software lies in the lack of authentication for a critical function, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Siemens LOGO!8 BM programmable logic controller’s microprogramming software is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

Siemens Web Server缓冲区错误漏洞

Siemens SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. A heap buffer overflow vulnerability exists in the Siemens SCALANCE X-200 web server. An attacker could exploit the vulnerability to cause a denial o...

The vulnerability of microprogrammed software in programmable logic controllers such as CompactLogix 5370 L1, CompactLogix 5370 L2, CompactLogix 5370 L3, Compact GuardLogix 5370, ControlLogix 5570, and GuardLogix 5370, related to the execution of a loop with an unavailable exit condition, allows a intruder to cause a service failure.

The vulnerability of microprogrammed software in programmable logic controllers such as CompactLogix 5370 L1, CompactLogix 5370 L2, CompactLogix 5370 L3, Compact GuardLogix 5370, ControlLogix 5570, and GuardLogix 5370, related to the execution of a loop with an unreachable exit condition...

The vulnerability of the microprogrammed logic controller Schneider Electric Modicon M340, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted TCP packet to...

The vulnerability of the programmable logic controller MELSEC iQ-R, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the programmable logic controller MELSEC iQ-R is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause malfunctions in the service process using a specially crafted package...

The vulnerabilities of microprogrammed software in programmable logic controllers such as CompactLogix 1768, CompactLogix 1769, CompactLogix 5370, CompactLogix 5380, CompactLogix 5480, ControlLogix 5550, ControlLogix 5560, ControlLogix 5570, ControlLogix 5580, DriveLogix 5560, DriveLogix 5730, DriveLogix 1794-L34, Compact GuardLogix 5370, Compact GuardLogix 5380, GuardLogix 5570, GuardLogix 5580, and SoftLogix 5800 stem from insufficient protection of registration data. This allows attackers to elevate their privileges and alter the configuration of vulnerable devices.

The vulnerabilities of microprogrammed software in programmable logic controllers such as CompactLogix 1768, CompactLogix 1769, CompactLogix 5370, CompactLogix 5380, CompactLogix 5480, ControlLogix 5550, ControlLogix 5560, ControlLogix 5570, ControlLogix 5580, DriveLogix 5560, DriveLogix 5730,...

Siemens LOGO! 8 BM

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

PLC Resource Management Error Vulnerability

The Qualcomm PLC is a programmable logic controller from Qualcomm Incorporated. A security vulnerability exists in the PLC that can be exploited by an attacker to cause the PLC's web visualization component to stop and become unresponsive, resulting in a loss of remote visibility of the PLC's sta...

Delta DVP20ES200TE has a Denial of Service Vulnerability

The Delta DVP20ES200TE is a programmable logic controller from Delta Taiwan. The Delta DVP20ES200TE suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service attack...

Rockwell Automation MicroLogix 1400 Buffer Overflow Vulnerability

Micrologix 1400 is a programmable logic controller from Rockwell Automation. A buffer overflow vulnerability exists in Rockwell Automation MicroLogix 1400 version 21.6 and earlier. An attacker can exploit this vulnerability by sending specially crafted Modbus packets to retrieve or modify random...

Denial of Service Vulnerability in Omron CP1L-EM40DR-D

The Omron CP1L-EM40DR-D is a programmable logic controller from Omron Japan. A denial of service vulnerability exists in the Omron CP1L-EM40DR-D, which can be exploited by an attacker to cause a denial of service on the device...

Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

SIEMENS RWG1.M12D S55370-C170 has a denial of service vulnerability

SIEMENS RWG1.M12D S55370-C170 programmable general-purpose controllers synthesize Siemens' many years of experience in the building, HVAC, and other industries, based on universal hardware design, programmable software platforms, and powerful communication processing capabilities. SIEMENS RWG1.M1...

Schneider TM218LDAE24DRHN IPv4 protocol stack suffers from a denial of service vulnerability

The TM218LDAE24DRHN is a programmable logic controller PLC product under the Modicon banner of Schneider Electric, a French company. A denial of service vulnerability exists in the Schneider TM218LDAE24DRHN IPv4 protocol stack, which can be exploited by an attacker to cause the device to go down...

Denial of Service Vulnerability in ARP Protocol in MITSUBISHI Electric FX5U-32MT/ES

The Mitsubishi Electric FX5U-32MT/ES is a programmable logic controller PLC product of the MELSEC FX series. A denial of service vulnerability exists in the ARP protocol of the MITSUBISHI Electric FX5U-32MT/ES, which can be exploited by attackers to cause the device to fail to function properly...

Scalance X Products Hard-Coded Encryption Key Vulnerability

SCALANCE X is a switch for connecting industrial components such as programmable logic controllers plc or human machine interfaces HMIs. The Scalance X Products hard-coded encryption key vulnerability can be exploited by an attacker to handle man-in-the-middle scenarios and decrypt previously...

The vulnerability of the CmtViewer application, which involves session management errors, allows a hacker to gain unauthorized access.

The vulnerability of the CmtViewer application for controlling programmable panels is related to session management errors. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access by intercepting the session...