December 26, 2024
A vulnerability in the USAHERDS livestock management system could allow remote code execution if a MachineKey is obtained, prompting agricultural operators to seek vendor mitigations.
Read the analysis →
December 21, 2024
A missing authentication vulnerability (CVE-2022-23227) in NUUO NVRmini2 devices allows unauthenticated attackers to add arbitrary users. As the product is end-of-life, decommissioning is the primary remediation path.
Read the analysis →
December 6, 2024
A vulnerability in North Grid Proself remote access software could allow unauthenticated attackers to conduct XML External Entity (XXE) attacks against industrial environments.
Read the analysis →
March 28, 2024
CISA has added a known exploited OS command injection vulnerability affecting the Nice Linear eMerge E3-Series industrial access control system to its KEV catalog, highlighting risks to physical security and building automation…
Read the analysis →
March 8, 2024
An OS command injection vulnerability in Sunhillo SureLine devices could allow attackers to cause denial-of-service or establish network persistence within OT environments.
Read the analysis →
December 24, 2023
A vulnerability in FXC industrial gateways allows authenticated users to execute OS commands via the network, necessitating vendor mitigations or device decommissioning.
Read the analysis →
December 14, 2023
An analysis of CVE-2023-6448 involving insecure default passwords in Unitronics Vision Series PLCs and HMIs, which could allow remote command execution if left unchanged.
Read the analysis →
July 16, 2023
A command injection vulnerability in SolarView Compact monitoring systems could allow unauthorized input execution via the web server's test mail console.
Read the analysis →
April 22, 2023
An authenticated remote code execution vulnerability in Cisco IOS and IOS XE software has been added to CISA's Known Exploited Vulnerabilities catalog, impacting network infrastructure often used in OT environments.
Read the analysis →
August 28, 2022
A vulnerability in Delta Electronics DOPSoft 2 allows for remote code execution via malicious project files; as the product is end-of-life, disconnection is recommended.
Read the analysis →