Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string.
CVSS 3.1CRITICAL 9.4·Network·No auth·No interaction·EPSS 0.00406·Published 2023-09-27·Fixed in v8.9.8CWE-79
499ES EtherNet/IP (ENIP) Adaptor Source Code is vulnerable to a stack-based buffer overflow, which may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition or code executi…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.03026·Published 2020-11-24·Fixed in 2.28CWE-121