September 2024
24.09.2024
US CERT (ICS)
Franklin Fueling Systems TS-550 EVO
Title
Franklin Fueling Systems TS-550 EVO
Published
Sept. 24, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Franklin Fueling Systems Equipment: TS-550 EVO Automatic Tank Gauge Vulnerability: Absolute Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability allow an attacker to gain administrative access over the affected device. 3. TECHNICAL DETAILS 3.1 ...
24.09.2024
US CERT (ICS)
OMNTEC Proteus Tank Monitoring
Title
OMNTEC Proteus Tank Monitoring
Published
Sept. 24, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-06
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: OMNTEC Mfg., Inc. Equipment: Proteus Tank Monitoring Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform administrative actions without proper authentication. 3. TECHNICAL DETAILS 3.1 ...
19.09.2024
US CERT (ICS)
Kastle Systems Access Control System
Title
Kastle Systems Access Control System
Published
Sept. 19, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-263-05
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Kastle Systems Equipment: Access Control System Vulnerabilities: Use of Hard-coded Credentials, Cleartext Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information on the affected product. ...
19.09.2024
US CERT (ICS)
Rockwell Automation RSLogix 5 and RSLogix 500
Title
Rockwell Automation RSLogix 5 and RSLogix 500
Published
Sept. 19, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-263-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.8 ATTENTION: Exploitable locally/high attack complexity Vendor: Rockwell Automation Equipment: RSLogix 5 and RSLogix 500 Vulnerability: Insufficient verification of data authenticity 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED ...
19.09.2024
US CERT (ICS)
MegaSys Computer Technologies Telenium Online Web Application
Title
MegaSys Computer Technologies Telenium Online Web Application
Published
Sept. 19, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-263-04
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: MegaSys Computer Technologies Equipment: Telenium Online Web Application Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to inject arbitrary Perl code through a crafted HTTP request, leading to ...
19.09.2024
US CERT (ICS)
IDEC CORPORATION WindLDR and WindO/I-NV4
Title
IDEC CORPORATION WindLDR and WindO/I-NV4
Published
Sept. 19, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-263-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: IDEC Corporation Equipment: WindLDR, WindO/I-NV4 Vulnerability: Cleartext Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of WindLDR ...
17.09.2024
US CERT (ICS)
Yokogawa Dual-redundant Platform for Computer (PC2CKM)
Title
Yokogawa Dual-redundant Platform for Computer (PC2CKM)
Published
Sept. 17, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-261-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Yokogawa Equipment: Dual-redundant Platform for Computer (PC2CKM) Vulnerability: Unchecked Return Value 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform a denial-of-service. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions ...
17.09.2024
US CERT (ICS)
Millbeck Communications Proroute H685t-w
Title
Millbeck Communications Proroute H685t-w
Published
Sept. 17, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-261-02
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Millbeck Communications Equipment: Proroute H685t-w Vulnerabilities: Command Injection, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary commands on the device's operating system. 3. TECHNICAL DETAILS 3.1 AFFECTED ...
12.09.2024
US CERT (ICS)
Rockwell Automation FactoryTalk Batch View
Title
Rockwell Automation FactoryTalk Batch View
Published
Sept. 12, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-22
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: FactoryTalk Batch View Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker bypassing authentication. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of Rockwell Automation FactoryTalk Batch ...
12.09.2024
US CERT (ICS)
Rockwell Automation FactoryTalk View Site
Title
Rockwell Automation FactoryTalk View Site
Published
Sept. 12, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-23
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform unauthenticated remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of Rockwell ...
12.09.2024
US CERT (ICS)
Rockwell Automation AADvance Trusted SIS Workstation
Title
Rockwell Automation AADvance Trusted SIS Workstation
Published
Sept. 12, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-20
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: AADvance Trusted SIS Workstation Vulnerabilities: Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in an attacker executing code within the context of a current process. 3. TECHNICAL DETAILS 3.1 ...
12.09.2024
US CERT (ICS)
Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
Title
Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
Published
Sept. 12, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-02
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
12.09.2024
US CERT (ICS)
AutomationDirect DirectLogic H2-DM1E
Title
AutomationDirect DirectLogic H2-DM1E
Published
Sept. 12, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-17
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable from an adjacent network/low attack complexity Vendor: AutomationDirect Equipment: DirectLogic H2-DM1E Vulnerabilities: Session Fixation, Authentication Bypass by Capture-replay 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to inject traffic into an ongoing authenticated session or authenticate ...
12.09.2024
US CERT (ICS)
Siemens SIMATIC SCADA and PCS 7 Systems
Title
Siemens SIMATIC SCADA and PCS 7 Systems
Published
Sept. 12, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-14
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
10.09.2024
US CERT (ICS)
Rockwell Automation SequenceManager
Title
Rockwell Automation SequenceManager
Published
Sept. 10, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-254-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: SequenceManager Vulnerabilities: Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause a denial-of-service condition. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of SequenceManager, a logix ...
10.09.2024
US CERT (ICS)
Viessmann Climate Solutions SE Vitogate 300
Title
Viessmann Climate Solutions SE Vitogate 300
Published
Sept. 10, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-254-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Viessmann Climate Solutions SE Equipment: Vitogate 300 Vulnerabilities: Use of Hard-coded Credentials, Forced Browsing, Command Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution. ...
10.09.2024
US CERT (ICS)
iniNet Solutions SpiderControl SCADA Web Server
Title
iniNet Solutions SpiderControl SCADA Web Server
Published
Sept. 10, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-254-02
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: iniNet Solutions GmbH Equipment: SpiderControl SCADA Web Server Vulnerabilities: Unrestricted Upload of File with Dangerous Type 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to log in or execute arbitrary code. 3. ...
05.09.2024
US CERT (ICS)
Hughes Network Systems WL3000 Fusion Software
Title
Hughes Network Systems WL3000 Fusion Software
Published
Sept. 5, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-249-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION: Low attack complexity Vendor: Hughes Network Systems Equipment: WL3000 Fusion Software Vulnerabilities: Insufficiently Protected Credentials, Missing Encryption of Sensitive Data 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to obtain read-only access to network configuration information and ...
03.09.2024
US CERT (ICS)
LOYTEC Electronics LINX Series
Title
LOYTEC Electronics LINX Series
Published
Sept. 3, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: LOYTEC electronics GmbH Equipment: LINX series Vulnerabilities: Cleartext Transmission of Sensitive Information, Missing Authentication for Critical Function, Cleartext Storage of Sensitive Information, Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities ...
August 2024
29.08.2024
US CERT (ICS)
Delta Electronics DTN Soft
Title
Delta Electronics DTN Soft
Published
Aug. 29, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-242-02
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DTN Soft Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of ...
22.08.2024
US CERT (ICS)
Rockwell Automation Emulate3D
Title
Rockwell Automation Emulate3D
Published
Aug. 22, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-235-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.4 ATTENTION: Exploitable locally Vendor: Rockwell Automation Equipment: Emulate3D Vulnerability: Externally Controlled Reference to a Resource in Another Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The ...
22.08.2024
US CERT (ICS)
Rockwell Automation 5015 - AENFTXT
Title
Rockwell Automation 5015 - AENFTXT
Published
Aug. 22, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-235-02
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: 5015 - AENFTXT Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of Rockwell Automation 5015 ...
22.08.2024
US CERT (ICS)
MOBOTIX P3 and Mx6 Cameras
Title
MOBOTIX P3 and Mx6 Cameras
Published
Aug. 22, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-235-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: MOBOTIX Equipment: P3 Cameras, Mx6 Cameras Vulnerability: Improper Neutralization of Expression/Command Delimiters 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an authenticated attacker to achieve remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS ...
22.08.2024
US CERT (ICS)
Avtec Outpost 0810
Title
Avtec Outpost 0810
Published
Aug. 22, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-235-04
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Avtec Equipment: Outpost 0810, Outpost Uploader Utility Vulnerability: Storage of File with Sensitive Data Under Web Root, Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to gain ...
15.08.2024
US CERT (ICS)
Siemens SCALANCE M-800, RUGGEDCOM RM1224
Title
Siemens SCALANCE M-800, RUGGEDCOM RM1224
Published
Aug. 15, 2024, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-24-228-01
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

Last Updates

BOSCH PSIRT
31.10.2024
SIEMENS CERT
18.11.2024
US CERT
08.11.2024
US CERT (ICS)
14.11.2024

By Source

Archive

2024
2023
2022
2021
2020
2019
2018
2017

Feeds