Browse CVEs

MEDIUM 6.6 CVE-2018-11461 A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4… Sinumerik 808d V4.7 Firmware after 4.8 Fix from $1,6002018-12-12 HIGH 7.5 CVE-2018-13805 A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7-1500 Software Controller (All… Simatic Et 200sp Firmware 2.5+ Fix from $1,9502018-10-10 HIGH 7.2 CVE-2018-13802 A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH … Rox Ii Firmware 2.12.1+ Fix from $1,9502018-10-10 HIGH 8.8 CVE-2018-13801 A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp and valid low-privileged user … Rox Ii Firmware 2.12.1+ Fix from $1,9502018-10-10 HIGH 7.3 CVE-2018-13800 A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 (All versions < V4.2.3). The web interface could allow a Cross-Site Reque… Simatic S7 1200 V4 Firmware 4.2.3+ Fix from $1,9502018-10-10 MEDIUM 6.7 CVE-2018-3657 Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbit… Simatic Field Pg M5 Firmware 19.01.14 / 19.02.11+ Fix from $1,6002018-09-12 MEDIUM 5.3 CVE-2018-3658 Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to pote… Simatic Field Pg M5 Firmware 19.01.14 / 19.02.11+ Fix from $1,6002018-09-12 HIGH 8.6 CVE-2018-13807 A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCALANCE X414 (All versions). Th… Scalance X408 Firmware 4.0.0+ Fix from $1,9502018-09-12 HIGH 7.8 CVE-2018-13806 A vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). A DLL hijacking vulnerability exists in all versions of SIEMENS TD … Td Keypad Designer Mitigation only Fix from $1,9502018-09-12 CRITICAL 9.1 CVE-2018-13799 A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access control to a data point of the a… Simatic Wincc Open Architecture after 3.14 Fix from $2,3002018-09-12 HIGH 8.8 CVE-2018-11455EPSS 5% A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A … Automation License Manager 5.3.4.4 / 6.0.1+ Fix from $1,9502018-08-07 HIGH 8.6 CVE-2018-11454 A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) a… Simatic Step 7 \(tia Portal\) No fix yet Fix from $1,9502018-08-07 HIGH 7.8 CVE-2018-11453 A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) a… Simatic Step 7 \(tia Portal\) Mitigation only Fix from $1,9502018-08-07 MEDIUM 5.8 CVE-2018-11456 A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network access to the device could sen… Automation License Manager 5.3.4.4+ Fix from $1,6002018-08-07 HIGH 7.5 CVE-2018-11451 A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for … Dnp3 Tcp Firmware 4.33 / 7.80+ Fix from $1,9502018-07-23 HIGH 7.5 CVE-2018-11452 A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for … Dnp3 Tcp Firmware 4.33 / 7.80+ Fix from $1,9502018-07-23 MEDIUM 6.1 CVE-2018-11450 A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login po… Teamcenter Product Lifecycle Management after 9.1.2.5 Fix from $1,6002018-07-09 HIGH 7.8 CVE-2018-4858 A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 61850 system configurator is in… Ec 61850 System Configurator Firmware 3.11 / 5.80+ Fix from $1,9502018-07-09 MEDIUM 6.1 CVE-2017-11175 In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login. Fin Stack No fix yet Fix from $1,6002018-07-05 CRITICAL 9.8 CVE-2018-4852 A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device c… Siclock Tc400 Firmware Mitigation only Fix from $2,3002018-07-03 CRITICAL 9.8 CVE-2018-4853 A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp … Siclock Tc400 Firmware Mitigation only Fix from $2,3002018-07-03 HIGH 8.8 CVE-2018-4854 A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp … Siclock Tc400 Firmware Mitigation only Fix from $1,9502018-07-03 HIGH 8.2 CVE-2018-4851 A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device c… Siclock Tc400 Firmware Mitigation only Fix from $1,9502018-07-03 MEDIUM 6.5 CVE-2018-4855 A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client … Siclock Tc400 Firmware Mitigation only Fix from $1,6002018-07-03 CRITICAL 9.8 CVE-2018-4846 A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens … Rapidpoint 400 Firmware 3.3+ Fix from $2,3002018-06-26 HIGH 8.8 CVE-2018-11447 A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a Cross-Site Request Forgery (CSRF… Scalance M875 Firmware Mitigation only Fix from $1,9502018-06-26 HIGH 8.8 CVE-2018-4845 A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens … Rapidpoint 400 Firmware 3.3+ Fix from $1,9502018-06-26 HIGH 7.8 CVE-2018-11449 A vulnerability has been identified in SCALANCE M875 (All versions). An attacker with access to the local file system might obtain passwords for admi… Scalance M875 Firmware Mitigation only Fix from $1,9502018-06-26 HIGH 7.2 CVE-2018-4859 A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), cou… Scalance M875 Firmware Mitigation only Fix from $1,9502018-06-26 HIGH 7.2 CVE-2018-4860 A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), cou… Scalance M875 Firmware Mitigation only Fix from $1,9502018-06-26