Latest Published Vulnerabilities CVE

Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.5

HIGH

CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* ...

Affected Products : modicon_m340_bmxp341000 modicon_m340_bmxp342010 modicon_m340_bmxp342020 modicon_m340_bmxp342030 modicon_m580_bmeh582040 modicon_m580_bmeh582040c modicon_m580_bmeh582040s modicon_m580_bmeh584040 modicon_m580_bmeh584040c modicon_m580_bmeh584040s +39 more products
EPSS Score: %0.46

Published: Sep. 02, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-22791

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and B...

Affected Products : modicon_m340_bmxp341000 modicon_m340_bmxp342010 modicon_m340_bmxp342020 modicon_m340_bmxp342030 modicon_m580_bmeh582040 modicon_m580_bmeh582040c modicon_m580_bmeh582040s modicon_m580_bmeh584040 modicon_m580_bmeh584040c modicon_m580_bmeh584040s +39 more products
EPSS Score: %0.44

Published: Sep. 02, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-22790

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU (part numbers BMEP* and BM...

Affected Products : modicon_m340_bmxp341000 modicon_m340_bmxp342010 modicon_m340_bmxp342020 modicon_m340_bmxp342030 modicon_m580_bmeh582040 modicon_m580_bmeh582040c modicon_m580_bmeh582040s modicon_m580_bmeh584040 modicon_m580_bmeh584040c modicon_m580_bmeh584040s +39 more products
EPSS Score: %0.44

Published: Sep. 02, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-22789

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file ...

Affected Products : modicon_m340_bmxp341000 modicon_m340_bmxp342010 modicon_m340_bmxp342020 modicon_m340_bmxp342030 modicon_m580_bmeh582040 modicon_m580_bmeh582040c modicon_m580_bmeh582040s modicon_m580_bmeh584040 modicon_m580_bmeh584040c modicon_m580_bmeh584040s +39 more products
EPSS Score: %0.44

Published: Sep. 02, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22788

A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon ...

Affected Products : bmxnoe0100_firmware bmxnoe0110_firmware 140cpu65150_firmware 140noc77101_firmware tsxp574634_firmware tsxp575634_firmware tsxp576634_firmware tsxety4103_firmware tsxety5103_firmware bmxnoc0401_firmware +18 more products
EPSS Score: %1.46

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22787

A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior ...

Affected Products : bmxnoe0100_firmware bmxnoe0110_firmware 140cpu65150_firmware 140noc77101_firmware tsxp574634_firmware tsxp575634_firmware tsxp576634_firmware tsxety4103_firmware tsxety5103_firmware bmxnoc0401_firmware +18 more products
EPSS Score: %0.43

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22786

A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU (part numbers BMXP34*) ...

Affected Products : modicon_m580_bmep584040_firmware modicon_m580_bmep582040_firmware modicon_m580_bmep586040_firmware modicon_m580_bmep585040_firmware modicon_m580_bmep582020_firmware modicon_m580_bmep581020_firmware modicon_m580_bmep584020_firmware modicon_m580_bmep583040_firmware modicon_m580_bmep583020_firmware modicon_m580_bmep582040s_firmware +72 more products
EPSS Score: %0.18

Published: Feb. 01, 2023

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22785

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP...

Affected Products : bmxnoe0100_firmware bmxnoe0110_firmware 140cpu65150_firmware 140noc77101_firmware tsxp574634_firmware tsxp575634_firmware tsxp576634_firmware tsxety4103_firmware tsxety5103_firmware bmxnoc0401_firmware +18 more products
EPSS Score: %0.32

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
5.7

MEDIUM

CVE-2021-22784

A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the system....

Affected Products : c-bus_toolkit
EPSS Score: %0.23

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-22783

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door (All versions)...

Affected Products : ritto_wiser_door
EPSS Score: %0.09

Published: Mar. 09, 2022

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-22782

Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), an...

Affected Products : ecostruxure_control_expert ecostruxure_process_expert remoteconnect
EPSS Score: %0.02

Published: Jul. 14, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-22781

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), an...

Affected Products : ecostruxure_control_expert ecostruxure_process_expert remoteconnect
EPSS Score: %0.05

Published: Jul. 14, 2021

Modified: Nov. 21, 2024
7.1

HIGH

CVE-2021-22780

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), an...

Affected Products : ecostruxure_control_expert ecostruxure_process_expert remoteconnect
EPSS Score: %0.05

Published: Jul. 14, 2021

Modified: Nov. 21, 2024
9.1

CRITICAL

CVE-2021-22779

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all vers...

Affected Products : modicon_m580_bmep584040_firmware modicon_m580_bmep582040_firmware modicon_m580_bmep586040_firmware modicon_m580_bmep585040_firmware modicon_m580_bmep582020_firmware modicon_m580_bmep581020_firmware modicon_m580_bmep584020_firmware modicon_m580_bmep583040_firmware modicon_m580_bmep583020_firmware ecostruxure_control_expert +51 more products
EPSS Score: %0.12

Published: Jul. 14, 2021

Modified: Nov. 21, 2024
7.1

HIGH

CVE-2021-22778

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), an...

Affected Products : ecostruxure_control_expert ecostruxure_process_expert remoteconnect
EPSS Score: %0.04

Published: Jul. 14, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22777

A CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause code execution by opening a malicious project file....

Affected Products : sosafe_configurable
EPSS Score: %0.36

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22775

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software....

Affected Products : gp-pro_ex
EPSS Score: %0.07

Published: Sep. 02, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22774

A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versio...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.14

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-22773

A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior t...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.15

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22772

A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T200 ((Modbus) SC2-04MOD-07000100 and earlier), Easergy T200 ((IEC104) SC2-04IEC-07000100 and earlier), and Easergy T200 ((DNP3) SC2-04DNP-07000102 and earlier) that c...

Affected Products : t200i_firmware t200e_firmware t200p_firmware t200i t200e t200p
EPSS Score: %0.21

Published: Jul. 21, 2021

Modified: Nov. 21, 2024

Showing 20 of 290958 Results

Latest CVE Feed

7.5

6.5

6.5

6.5

7.5

7.5

7.5

7.5

5.7

8.8

5.5

5.5

7.1

9.1

7.1

7.8

7.8

7.5

6.5

9.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable