1,944 results · Clear filters · Feed
-
High max 7.1ICSA-23-206-01 1 CVE
AXIS A1001
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 7.5ICSA-23-206-02 1 CVE
Rockwell Automation ThinManager ThinServer
Successful exploitation of this vulnerability could allow a remote actor to leverage the privileges of the server's file system and read arbitrary files stored in it.
-
High max 8.3ICSA-23-206-04 1 CVE
Johnson Controls IQ Wifi 6
Successful exploitation of this vulnerability could allow an unauthorized user to gain account access by conducting a brute force authentication attack.
-
High max 7.5ICSA-23-229-04 2 CVEs
Walchem Intuition 9
Successful exploitation of these vulnerabilities could allow an attacker to download and export sensitive data, or grant an attacker direct login to a device.
-
High max 7.5ICSA-23-201-01 1 CVE
Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers
Successful exploitation of these vulnerabilities could allow an attacker unauthorized access to components, ability to execute arbitrary code, or ability to execute a denial-of-service.
-
High max 7.5ICSA-23-199-01 1 CVE
Rockwell Automation Kinetix 5700 DC Bus Power Supply
Successful exploitation of this vulnerability could result in a denial-of-service attack.
-
High max 7.8ICSA-23-199-02 2 CVEs
Keysight N6845A Geolocation Server
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, execute arbitrary code, or cause a denial-of-service condition.
-
High max 7.5ICSA-23-199-04 4 CVEs
Weintek Weincloud
Successful exploitation of these vulnerabilities could allow an attacker to utilize the JSON web token (JWT) to reset account passwords, use expired credentials, perform brute force attacks on credentials, or cause a denial-of-service condition.
-
High max 8.1ICSA-23-199-07 2 CVEs
WellinTech KingHistorian
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or send malicious data which can lead to a buffer overflow.
-
High max 8.8ICSA-23-194-05 1 CVE
Rockwell Automation PowerMonitor 1000
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution and potentially the complete loss of confidentiality, integrity, and availability of the product.
-
High max 7.5
Mitsubishi Electric MELSEC-F Series
Successful exploitation of this vulnerability could allow an attacker to login to the product by sending specially crafted packets.
first Jun 29, 2023 -
High max 7.8ICSA-23-192-03 3 CVEs
Panasonic Control FPWin Pro7
Successful exploitation of these vulnerabilities could result in information disclosure or remote code execution on affected installation.
-
High max 7.5ICSA-23-192-02 1 CVE
Sensormatic Electronics iSTAR
Successful exploitation of this vulnerability could allow an unauthenticated user to login to iSTAR devices with administrator rights.
-
High max 7.2ICSA-23-187-02 1 CVE
ABUS TVIP
Successful exploitation of this vulnerability could allow arbitrary file reads or remote code execution.
-
High max 7.8ICSA-23-180-02 1 CVE
Schneider Electric EcoStruxure Operator Terminal Expert
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code and gain access to sensitive information on the machine.
-
High max 7.2ICSA-23-180-03 6 CVEs
Ovarro TBox RTUs
Successful exploitation of these vulnerabilities could result in sensitive system information being exposed andprivilege escalation.
-
High max 7.5
Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could allow an unauthenticated malicious actor to login to a file transfer protocol (FTP) server or web server by obtaining plaintext credentials stored in project files.
first Mar 2, 2023 -
High max 8.6ICSA-23-171-02 1 CVE
Enphase Installer Toolkit Android App
Successful exploitation of this vulnerability could allow sensitive information to be obtained by an attacker using hard-coded credentials.
-
High max 7.3ICSA-23-164-02 3 CVEs
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of these vulnerabilities could allow an attacker to disclose information, load malicious configuration files, or elevate privileges from a user to an administrator.
-
HighICSA-23-164-03 1 CVE
Rockwell Automation FactoryTalk Edge Gateway
Successful exploitation of this vulnerability could allow a local user to cause the program to crash, causing a denial of service.
-
High max 7.5ICSA-23-164-04 1 CVE
Rockwell Automation FactoryTalk Transaction Manager
Successful exploitation of this vulnerability could cause the application to crash or experience a high CPU or memory usage condition, causing intermittent application functionality issues. The user would need to restart the application to recover from the de…
-
High max 7.2ICSA-23-166-13 3 CVEs
Siemens SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by multiple vulnerabilities such as authenticated remote command injection, exposure of serial UART interface, and hard coded credentials (for UART login). Siemens has released updates for the…
-
High max 8.3ICSA-23-159-02 1 CVE
Sensormatic Electronics Illustra Pro Gen 4
Successful exploitation of this vulnerability could allow an attacker to compromise device credentials over a long period of sustained attack.
-
High max 7.2ICSA-23-152-01 3 CVEs
Advantech WebAccess/SCADA
Successful exploitation of these vulnerabilities could allow an attacker to arbitrarily overwrite files resulting in remote code execution.
-
High max 7.3ICSA-23-152-02 1 CVE
HID Global SAFE
Successful exploitation of this vulnerability could result in exposure of personal data or create a denial-of-service condition.
-
High max 7.8ICSA-23-143-04 10 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and to execute arbitrary code.
-
High max 8.1ICSA-23-143-01 2 CVEs
Hitachi Energy’s AFS65x, AFS67x, AFR67x and AFF66x Products
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or lead to a Denial-of-Service (DoS).
-
High max 7.3ICSA-23-150-01 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could allow an attacker full control over the SCADA (supervisory control and data acquisition) server.
-
High max 7.0ICSA-23-136-02 10 CVEs
Rockwell ArmorStart
Successful exploitation of these vulnerabilities could allow a malicious user to view and modify sensitive data or make the web page unavailable.
-
High max 7.5ICSA-23-138-01 1 CVE
Carlo Gavazzi Powersoft
Successful exploitation of this vulnerability could allow an attacker to access and retrieve any file from the server.
-
High max 7.1ICSA-23-136-03 1 CVE
Rockwell Automation FactoryTalk Vantagepoint
Successful exploitation of this vulnerability could allow an attacker to impersonate an existing user or execute a cross site request forgery attack.
-
High max 8.0ICSA-23-131-13 6 CVEs
PTC Vuforia Studio
Successful exploitation of these vulnerabilities could allow an attacker to view credentials, perform a cross-site request forgery attack, resend requests, or upload or delete arbitrary files.
-
High max 7.8ICSA-23-131-10 3 CVEs
Rockwell Automation Arena Simulation Software
Successful exploitation of these vulnerabilities could allow a malicious user to commit unauthorized arbitrary code to the software using a memory buffer overflow.
-
High max 7.5ICSA-23-131-15 1 CVE
Rockwell Automation ThinManager
Successful exploitation of this vulnerability could allow an attacker to decrypt traffic sent between the client and server application programming interface (API), resulting in unauthorized access to information.
-
High max 8.4ICSA-23-131-07 2 CVEs
Sierra Wireless AirVantage
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute code or obtain unauthorized access to the product.
-
High max 8.4ICSA-23-131-11 2 CVEs
BirdDog Cameras & Encoders
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute code or obtain unauthorized access to the product.
-
High max 8.2
Siemens S7-400 CPUs (Update B)
Two vulnerabilities have been identified in the SIMATIC S7-400 CPU family that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerabilities, an attacker must have access to the affected devices on port 102/tcp via Et…
first Nov 13, 2018 -
High max 6.8ICSA-23-122-01 9 CVEs
Mitsubishi Electric Factory Automation Products
Successful exploitation of these vulnerabilities could allow a malicious attacker to escalate privileges, disclose parameter information in the affected products, and cause a denial-of-service condition.
-
High max 7.8ICSA-23-103-14 5 CVEs
Datakit CrossCAD-WARE
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or execute arbitrary code.
-
High max 8.6ICSA-23-108-01 1 CVE
Omron CS/CJ Series
Successful exploitation of this vulnerability could allow an attacker to access sensitive information in the file system and memory.