Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,863

CVE-2021-32978

Automation Direct CLICK PLC CPU Modules Plaintext Storage of a Password

The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Automationdirect
Products
C0-10are-d C0-10are-d Firmware C0-10dd1e-d and 37 more
CVE-2021-32984

Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can connect to the PLC and read the project without authorization.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Automationdirect
Products
C0-10are-d C0-10are-d Firmware C0-10dd1e-d and 37 more
CVE-2021-32986

Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Automationdirect
Products
C0-10are-d C0-10are-d Firmware C0-10dd1e-d and 37 more
CVE-2021-32982

Automation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive Information

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
C0-10are-d C0-10are-d Firmware C0-10dd1e-d and 37 more
CVE-2021-32994

Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Softing
Products
Opc Ua C\+\+ Software Development Kit
CVE-2022-1161

ICSA-22-090-05 Rockwell Automation Logix Controllers

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

CVSS 3.1 · 10 Critical EPSS 5.2% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5370 Compact Guardlogix 5370 Firmware Compact Guardlogix 5380 and 45 more
CVE-2022-1067

ICSMA-22-095-01 LifePoint Informatics Patient Portal

Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Lifepoint
Products
Patient Portal
CVE-2022-21155

Fernhill SCADA Uncontrolled Resource Consumption

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process (FHSvrService.exe) to exit.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Apple Fernhillsoftware Linux and 1 more
Products
Macos Scada Server Linux Kernel and 1 more
CVE-2020-25150

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.

CVSS 3.1 · 7.6 High EPSS 1.5% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25152

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25160

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25158

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25162

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remote attackers to access sensitive information and escalate privileges.

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25154

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to redirect users to malicious websites.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25166

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper with devices.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25164

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to recover user credentials of the administrative interface.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25168

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enable attackers with command line access to access the device’s Wi-Fi module.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25167

OSIsoft PI Vision Incorrect Authorization

OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Osisoft
Products
Pi Vision