SCADA intelligence
Analysis of a cross-site scripting (XSS) vulnerability in OpenPLC ScadaBR affecting the system_settings.shtm component and its implications for industrial monitoring environments.
Read the analysis →A code injection vulnerability (CVE-2025-6204) in the DELMIA Apriso Manufacturing Execution System could allow for arbitrary code execution, impacting the bridge between enterprise planning and shop floor operations.
Read the analysis →A missing authorization vulnerability (CVE-2025-6205) in Dassault Systèmes DELMIA Apriso could allow unauthorized privileged access to the Manufacturing Execution System, impacting production management security.
Read the analysis →A command injection vulnerability in Smartbedded Meteobridge devices could allow remote unauthenticated attackers to execute arbitrary commands with root privileges.
Read the analysis →A deserialization vulnerability (CVE-2025-5086) in Dassault Systèmes DELMIA Apriso could allow remote code execution, impacting Manufacturing Execution Systems (MES) used for industrial process orchestration.
Read the analysis →CISA has added CVE-2022-40799 to its Known Exploited Vulnerabilities catalog, affecting the D-Link DNR-322L Cloud Network Video Recorder. This vulnerability allows authenticated attackers to execute OS-level commands.
Read the analysis →A vulnerability in the AMI MegaRAC SPx Baseboard Management Controller (BMC) allows for authentication bypass via spoofing, potentially granting remote administrative access to critical OT server hardware.
Read the analysis →A code injection vulnerability in Broadcom Brocade Fabric OS allows local administrative users to gain full root privileges, impacting the storage area networks often used for critical industrial data historians.
Read the analysis →A deserialization vulnerability in Trimble Cityworks could allow authenticated users to execute remote code on the underlying IIS web server, impacting municipal and industrial asset management systems.
Read the analysis →Analysis of CVE-2022-23748, a process control vulnerability in the mDNSResponder.exe component of Audinate Dante Discovery that could allow local arbitrary code execution.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.