ot-cert@dragos.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS ot-cert@dragos.com
03
assessed vulnerabilities (24)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-64125US | — | — | ||
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025). End… | ||||
| CVE-2025-64124US | high8.8 | — | ||
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection… | ||||
| CVE-2025-64123US | critical9.8 | — | ||
Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): thr… | ||||
| CVE-2025-64122US | medium5.5 | — | ||
Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller… | ||||
| CVE-2025-64121US | critical9.8OT elevated | — | ||
Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack C… | ||||
| CVE-2025-64120US | high8.8 | — | ||
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection… | ||||
| CVE-2025-64119US | — | — | ||
A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9. | ||||
| CVE-2025-7676US | — | — | ||
DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory… | ||||
| CVE-2025-53696US | —OT elevated | — | ||
iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. T… | ||||
| CVE-2025-53695US | — | — | ||
OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access ('root' user) to the device firmware. | ||||
| CVE-2024-1480US | — | — | ||
Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication. | ||||
| CVE-2022-45792US | high7.8 | — | ||
Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privilege… | ||||
| CVE-2022-45790US | critical9.1 | — | ||
The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain a… | ||||
| CVE-2022-45794US | high7.5OT elevated | — | ||
An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and m… | ||||
| CVE-2023-29447US | medium5.3 | — | ||
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication. | ||||
| CVE-2023-29446US | medium4.7 | — | ||
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture… | ||||
| CVE-2023-29445US | high7.8 | — | ||
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. | ||||
| CVE-2022-45793US | high7.8OT elevated | — | ||
Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with… | ||||
| CVE-2023-29444US | high7.3 | — | ||
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternati… | ||||
| CVE-2023-40710US | high7.5 | — | ||
An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but d… | ||||