Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
View CSAF Summary Successful exploitation of these vulnerabilities could crash the device being accessed.
View CSAF Summary Successful exploitation of this vulnerability could allow a malicious user the ability to deliver malicious firmware that can update and gain full control of the controller.
MZ Automation libiec61850 contains multiple out-of-bounds read vulnerabilities affecting the GOOSE subscriber component. An unauthenticated attacker can send specially crafted multicast frames to trigger a heap out-of-bounds read, leading to a denial-of-service condition.
CISA is currently observing a significant increase in cyber threat actors targeting programmable logic controllers (PLCs) in the Water and Wastewater Systems (WWS) Sector.
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files, execute stored cross-site scripting attacks, or inject arbitrary HTML content.