ARDEREG Sistemas SCADA contains an SQL Injection vulnerability that can allow an attacker to manipulate SQL query logic to extract sensitive information and perform unauthorized actions within the database.

Sources: CISA, NIST

​GE Digital CIMPLICITY contains a process control vulnerability that can allow a low-privileged local attacker to escalate privileges to SYSTEM.

Sources: CISA, GE Digital

PTC Kepware KepServerEX contains uncontrolled search path element, improper input validation and insufficiently protected credentials vulnerabilities that can allow an attacker to gain elevated privileges, execute arbitrary code, and obtain server hashes and credentials.

Sources: CISA, PTC

Digi RealPort Protocol contains a use of password hash instead of password for authentication vulnerability that can allow the attacker to access connected equipment.

Sources: CISA, Digi

Juniper Networks Junos OS contains a remote execution vulnerability that can lead to a denial-of-service condition.

Sources: CISA, Juniper

PTC Codebeamer contains a cross site scripting vulnerability that can allow an attacker to inject arbitrary JavaScript code, which could be executed in the victim's browser upon clicking on a malicious link.

Sources: CISA, PTC