Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,864

CVE-2020-14521

Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, modify information, and cause a denial-of-service condition.

CVSS 3.1 · 8.3 High EPSS 1.3% KEV · Not listed
Vendors
Mitsubishielectric
Products
C Controller Interface Module Utility C Controller Module Setting And Monitoring Tool Cc-link Ie Control Network Data Collector and 57 more
CVE-2020-10632

ICSA-20-140-02 Emerson OpenEnterprise

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Emerson
Products
Openenterprise Scada Server
CVE-2022-23985

ICSA-22-055-01 FATEK Automation FvDesigner

The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Fatek
Products
Fvdesigner
CVE-2022-21209

ICSA-22-055-01 FATEK Automation FvDesigner

The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Fatek
Products
Fvdesigner
CVE-2022-25170

ICSA-22-055-01 FATEK Automation FvDesigner

The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Fatek
Products
Fvdesigner
CVE-2022-23921

ICSA-22-053-01 GE Proficy CIMPLICITY-IPM

Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and the server is licensed for multiple projects.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Ge
Products
Proficy Cimplicitiy
CVE-2022-21798

ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext

The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Ge
Products
Cimplicity
CVE-2022-22985

ICSA-22-062-01 IPCOMM ipDIO

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the specific web section where the information is displayed. Injection can be done on specific parameters. The injected code is executed when a legitimate user attempts to review history.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Ipcomm
Products
Ipdio Ipdio Firmware
CVE-2022-24915

ICSA-22-062-01 IPCOMM ipDIO

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section where the information is displayed. Injection can be done on specific parameters. The injected code is executed when a legitimate user attempts to upload, copy, download, or delete an existing configuration (Administrative Services).

CVSS 3.1 · 8 High EPSS 1.0% KEV · Not listed
Vendors
Ipcomm
Products
Ipdio Ipdio Firmware
CVE-2020-25178

Rockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information

ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. This communication protocol provides various file system operations, as well as the uploading of applications. Data is transferred over this protocol unencrypted, which could allow a remote unauthenticated attacker to upload, read, and delete files.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Rockwellautomation Schneider-electric Xylem
Products
Aadvance Controller Isagraf Free Runtime Isagraf Runtime and 28 more
CVE-2020-25182

Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft Windows systems.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation Schneider-electric Xylem
Products
Aadvance Controller Isagraf Free Runtime Isagraf Runtime and 28 more
CVE-2020-25176

Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal

Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform various file operations in the file system. Since the parameter pointing to the file name is not checked for reserved characters, it is possible for a remote, unauthenticated attacker to traverse an application’s directory, which could lead to remote code execution.

CVSS 3.1 · 9.1 Critical EPSS 6.4% KEV · Not listed
Vendors
Rockwellautomation Schneider-electric Xylem
Products
Aadvance Controller Isagraf Free Runtime Isagraf Runtime and 28 more
CVE-2020-25184

Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. ISaGRAF Runtime reads the file and saves the data in a variable without any additional modification. A local, unauthenticated attacker could compromise the user passwords, resulting in information disclosure.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation Schneider-electric Xylem
Products
Aadvance Controller Isagraf Free Runtime Isagraf Runtime and 28 more
CVE-2021-27430

GE UR family hardcoded credentials

GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Ge
Products
Ur Bootloader Binary
CVE-2021-27471

Rockwell Automation Connected Components Workbench Path Traversal

The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files that, when opened by Rockwell Automation Connected Components Workbench v12.00.00 and prior, can traverse the file system. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the Connected Components Workbench software. User interaction is required for this exploit to be successful.

CVSS 3.1 · 7.7 High EPSS 2.9% KEV · Not listed
Vendors
Rockwellautomation
Products
Connected Components Workbench
CVE-2021-27475

Rockwell Automation Connected Components Workbench Deserialization of Untrusted Data

Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.

CVSS 3.1 · 8.6 High EPSS 3.0% KEV · Not listed
Vendors
Rockwellautomation
Products
Connected Components Workbench
CVE-2021-44462

Horner Automation Cscape EnvisionRV Improper Input Validation

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures. User interaction is required to exploit this vulnerability as an attacker must trick a valid user to open a malicious HMI project file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Hornerautomation
Products
Cscape Envisionrv
CVE-2021-27501

Philips Vue PACS Improper Adherence to Coding Standards

Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Philips
Products
Myvue Speech Vue Motion and 1 more
CVE-2021-33018

Philips Vue PACS Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Philips
Products
Myvue Speech Vue Motion and 1 more