Critical flaw allows unauthenticated password reset on KMW CCTV cameras
CISA warns of vulnerability affecting surveillance cameras deployed across critical infrastructure worldwide.
Tag: critical-infrastructure
CISA warns of stored XSS flaw in CP Plus network video recorders
Critical manufacturing and emergency services sectors using affected devices face session hijacking and data theft…
CISA warns of DoS vulnerability in ABB automation systems
Critical infrastructure operators urged to patch ABB B&R Automation Runtime after disclosure of unauthenticated network…
ABB Zenon Industrial Control Software Exposed to Authentication Bypass
CISA warns of vulnerability allowing unauthorised system reboots in widely deployed industrial automation platform.
CISA warns of session takeover flaws in ABB automation systems
Three vulnerabilities in B&R Automation Runtime could allow attackers to hijack sessions and execute malicious…
Hitachi Energy GMS600 Affected by OpenSSL Timing Attack Vulnerability
CISA warns of CVE-2022-4304 in industrial grid management systems that could allow attackers to decrypt…
CISA warns of critical ScadaBR vulnerabilities enabling remote code execution
Four vulnerabilities in ScadaBR 1.2.0 allow unauthenticated attackers to execute commands and inject arbitrary sensor…
CISA warns of authentication bypass flaws in PowerSYSTEM Center
Multiple CVEs affect Subnet Solutions industrial control software used in energy and manufacturing sectors worldwide.
Siemens gWAP Vulnerable to Remote Code Execution via Axios Library
Critical infrastructure software affected by prototype pollution vulnerability enabling arbitrary code execution
Chinese Group Targets Azerbaijani Energy Firm via Exchange Flaws
FamousSparrow group conducted multi-wave attacks against oil and gas company over two-month period.