Skip to content
Threat Feed

Tag

Plc

4 briefs RSS
high advisory

Active Reconnaissance and Capability Development Against Siemens S7 PLCs

Threat actors are using AI-assisted scripts and the snap7 library to target Internet-exposed Siemens S7 Series PLCs for reconnaissance and potential operational disruption across critical infrastructure sectors.

S7-200 Series +4 ics ot reconnaissance siemens plc
2t
medium advisory

Siemens SIMATIC S7 PLCs Web Server Vulnerabilities Allow Cross-Site Scripting

A remote, authenticated attacker can exploit multiple vulnerabilities in Siemens SIMATIC S7 PLCs Web Server to perform cross-site scripting attacks, potentially leading to information disclosure or further unauthorized actions.

SIMATIC S7 PLCs Web Server xss web-application plc
2r 1t
critical advisory

Qualcomm PLC FW Buffer Overflow via Incorrect Authorization (CVE-2026-25293)

CVE-2026-25293 is a critical buffer overflow vulnerability in Qualcomm PLC FW due to incorrect authorization, potentially allowing unauthorized access and control over programmable logic controllers.

PLC FW plc buffer-overflow industrial-control-systems cve-2026-25293
2r 2t 1c
high advisory

Schneider Electric Modicon PLC Denial-of-Service Vulnerability

Team82 disclosed vulnerabilities in Schneider Electric Modicon Controllers M241, M251, and M262 PLC lines, which can allow an attacker to cause a denial-of-service condition and affect controller availability.

plc denial-of-service industrial-control-system modicon
2r 1t 2i