Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Siemens LOGO! Soft Comfort Flaws Expose Project Data
Siemens LOGO! Soft Comfort has vulnerabilities in encryption and password handling, letting local attackers extract the master key and decrypt project
Siemens License Server Flaws Allow Privilege Escalation
Multiple vulnerabilities in Siemens License Server could let attackers elevate privileges and read arbitrary files.
AVEVA Enterprise SCADA Deserialization Flaw
AVEVA Enterprise SCADA has a vulnerability allowing attackers to tamper with serialized data, potentially leading to code execution during deserializa
Siemens Siveillance Video RCE Flaw Fixed
Siemens Siveillance Video Management Servers have a remote code execution vulnerability. Siemens released updates and urges users to upgrade.
Siemens Desigo DXR/PXC BACnet DoS Flaw
A vulnerability in Siemens Desigo DXR and PXC controllers allows denial of service via malformed BACnet packets, requiring a device reset or reboot to
Johnson Controls Metasys Flaw Allows Persistent Payload
A vulnerability in Johnson Controls Metasys lets low-privilege users inject a persistent malicious payload via a crafted URL, executing in other users
Haiwell IoT Cloud HMI Gateway OS Command Injection
A vulnerability in Haiwell IoT Cloud HMI Gateway allows attackers to inject and execute arbitrary OS commands with root privileges.
Hitachi Energy APM Edge Hit by Dirty Frag Flaws
Hitachi Energy disclosed Dirty Frag vulnerabilities affecting APM Edge products, potentially impacting confidentiality, integrity, and availability.
Siemens Siveillance Video RCE Flaw Fixed
Siemens Siveillance Video Management Servers have a remote code execution vulnerability. Siemens released updates and urges users to upgrade.
ANDRITZ HIPASE-250 Vulnerabilities Allow Data Access
Vulnerabilities in ANDRITZ HIPASE-250 and 250 SCALA could let attackers read device data or access workstations. Affected versions are listed.
Siemens Simcenter Femap Flaws Allow Code Execution
Two file parsing vulnerabilities in Siemens Simcenter Femap can be triggered via malicious BMP files, potentially leading to code execution.
Siemens Parasolid Flaw Allows Code Execution
Siemens Parasolid has an out-of-bounds read vulnerability in X_T file parsing, potentially enabling crashes or arbitrary code execution.