Tag
Multiple Vulnerabilities in Siemens SIMATIC S7 Industrial Automation Products
3 TTPsMultiple vulnerabilities in Siemens SIMATIC S7 products enable unauthenticated or local attackers to execute arbitrary code, escalate privileges, manipulate data, or cause a denial-of-service.
Multiple Vulnerabilities in Red Lion Controls N-Tron 700 Series
3 TTPsMultiple high and critical severity vulnerabilities in Red Lion Controls N-Tron 700 series switches, including hard-coded credentials and improper authentication, allow for unauthorized administrative access, configuration theft, and denial-of-service.
Critical Vulnerabilities in End-of-Life Hitachi Energy RTU500 Firmware
2 TTPs 3 CVEsEnd-of-life Hitachi Energy RTU500 CMU firmware versions 11.x and prior are susceptible to multiple critical vulnerabilities, including authentication bypass and path traversal, which could allow remote attackers to compromise device integrity or disrupt industrial control operations.
Buffer Overflow Vulnerability in Savannah lwIP SMTP Client
1 TTPA critical buffer overflow vulnerability (CVE-2026-15340) in Savannah lwIP SMTP client 2.2.1 allows unauthenticated remote attackers to trigger denial-of-service or potential remote code execution.
Vulnerabilities in Moxa MGate Protocol Gateways
2 CVEsMoxa has disclosed two critical vulnerabilities, CVE-2026-86325 and CVE-2026-86326, affecting MGate 3000 and 5000 series protocol gateways.
Supply Chain Risk for Critical Infrastructure via ICS Integrators
3 TTPsForeign threat actors compromised a U.S. industrial automation integrator between March and April 2025 to exfiltrate sensitive SCADA schematics and device details, creating potential pivot points into downstream critical infrastructure networks.
Denial-of-Service Vulnerability in Rockwell Automation Logix Platforms
1 CVERockwell Automation Logix controllers are vulnerable to a denial-of-service condition due to improper input length validation during CIP message processing, leading to major nonrecoverable faults.
Active Exploitation of Siemens S7 Series PLCs in US Critical Infrastructure
1 TTPThe IC3 has issued an advisory regarding the active exploitation of Siemens S7 Series PLCs within US critical infrastructure sectors using CVE-2026-4357 to disrupt operational technology.
Unauthenticated Remote Access to Phoenix Contact CHARX SEC MQTT Broker
2 rules 5 TTPs 12 CVEsA critical vulnerability (CVE-2026-44090) in Phoenix Contact CHARX SEC controllers allows unauthenticated remote attackers to gain full device control by bypassing authentication on the MQTT broker.
Three Chained Zero-Days in Siemens ROX II OT Switches Lead to Root Access
3 rules 4 TTPs 5 CVEsUnit 42 and Siemens collaborated to disclose three critical chained zero-day vulnerabilities (CVE-2025-40948, CVE-2025-40947, CVE-2025-40949) in Siemens ROX II operational technology switches, allowing an attacker to achieve arbitrary file disclosure, privilege escalation to root, and persistent root-level code execution.