1,944 results · Clear filters · Feed
-
High max 8.7ICSA-22-165-01 3 CVEs
Johnson Controls Metasys ADS ADX OAS Servers
Successful exploitation of these vulnerabilities could allow unauthorized users to compromise passwords and inject malicious code into web interfaces.
-
HighICSA-22-165-02 1 CVE
Meridian Cooperative Meridian
Successful exploitation of this vulnerability could result in a disclosure of sensitive information.
-
HighICSA-22-165-03 1 CVE
Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R
Successful exploitation of this vulnerability could result in a denial-of-service condition and/or enable remote code execution.
-
HighICSA-22-167-04 2 CVEs
Siemens Mendix SAML Module
The latest updates of Mendix the SAML module fixes two vulnerabilities. One is an XML External Entity (XXE) attack that could allow an attacker to potentially disclose confidential data under certain circumstances the other is an Cross Site Scripting (XSS) at…
-
HighICSA-22-167-05 1 CVE
Siemens EN100 Ethernet Module
EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30937). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures f…
-
HighICSA-22-167-12 1 CVE
Siemens Spectrum Power Systems
Siemens has been made aware of a default password leakage in the internet affecting the component Shared HIS (SHHIS) used in Spectrum Power systems. The products listed below are affected by this default password leakage. This could allow an attacker to acces…
-
High max 7.8
Siemens SCALANCE LPE 4903 and SINUMERIK Edge
The products listed below contain a local privilege escalation vulnerability (CVE-2021-4034) found on polkit's pkexec utility, that could allow an unprivileged user to gain administrative rights. Siemens has released updates for the affected products and reco…
-
High max 9.8ICSA-22-160-01 5 CVEs
Mitsubishi Electric Air Conditioning Systems
Successful exploitation of these vulnerabilities could allow an attacker to disclose or tamper data in communication between the air conditioning system and the external computers or cause a denial-of-service condition.
-
High max 7.6ICSA-22-154-01 9 CVEs
Vulnerabilities Affecting Dominion Voting Systems ImageCast X
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
-
High
Mitsubishi Electric FA Products
Successful exploitation of these vulnerabilities may allow an attacker to log in to the affected products and/or alter and obtain sensitive information.
first Mar 31, 2022 -
High
Mitsubishi Electric MELSEC iQ-F Series
This updated advisory is a follow-up to the original advisory titled ICSA-22-139-01 Mitsubishi Electric MELSEC iQ-F Series that was published May 19, 2022, on the ICS webpage at cisa.gov/ics.
first May 19, 2022 -
High max 7.8ICSA-22-151-01 1 CVE
Fuji Electric Alpha7 PC Loader
Successful exploitation of this vulnerability could allow arbitrary code execution.
-
High max 8.8ICSMA-22-151-01 1 CVE
BD Pyxis
Successful exploitation of this vulnerability could allow an attacker to gain access to electronic protected health information (ePHI) or other sensitive information.
-
High max 7.8ICSA-22-146-02 4 CVEs
Horner Automation Cscape Csfont
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code by opening a malicious file.
-
High max 7.5
ICSA-19-253-03_Siemens Industrial Products (Update P)
Successful exploitation of these vulnerabilities could cause denial-of-service condition.
first Sep 10, 2019 -
High max 7.8ICSA-22-132-01 2 CVEs
Delta Electronics CNCSoft
Successful exploitation of these vulnerabilities could allow arbitrary code execution or information disclosure.
-
High max 7.8ICSA-22-132-03 3 CVEs
Inkscape in Industrial Products
Successful exploitation of these vulnerabilities could allow unauthorized information disclosure and code execution.
-
High max 7.5ICSA-22-130-01 1 CVE
Adminer in Industrial Products
Successful exploitation of this vulnerability could allow reading of database credentials and loss of sensitive information.
-
High max 7.4ICSA-22-130-05 1 CVE
AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere
Successful exploitation of this vulnerability could allow an authenticated user to escape from the context of the streamed application into the OS and launch arbitrary OS commands.
-
High max 7.5ICSA-22-130-06 2 CVEs
Mitsubishi Electric MELSOFT GT OPC UA
Successful exploitation of these vulnerabilities could allow a remote attacker to send specially crafted messages, resulting in information disclosure or a denial-of-service condition.
-
High max 8.0ICSA-22-125-01 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could allow an authenticated user to lock other users out of the system and take over their accounts.
-
HighICSA-22-123-01 5 CVEs
Yokogawa CENTUM and ProSafe-RS
Successful exploitation of these vulnerabilities may allow leakage/tampering of data, cause a denial-of-service condition, or allow a local attacker to execute arbitrary programs.
-
High max 8.8ICSA-22-118-01 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could allow an authenticated user to elevate their privileges to administrator.
-
High max 7.5ICSA-22-116-01 7 CVEs
Hitachi Energy System Data Manager
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic or to cause a denial-of-service condition.
-
High max 7.8ICSA-22-111-01 2 CVEs
Delta Electronics ASDA-Soft
Successful exploitation of these vulnerabilities may allow arbitrary code execution.
-
High max 3.7ICSA-22-111-03 9 CVEs
Hitachi Energy MicroSCADA Pro/X SYS600
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic between network source and destination, gain unauthorized access to information, or cause a denial-of-service condition.
-
High max 7.5
Siemens Industrial Products with OPC UA (Update H)
Successful exploitation of this vulnerability could cause a denial-of-service condition on the affected service or device.
first Apr 9, 2019 -
High max 8.1ICSA-22-104-02 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could allow a remote attacker to use a session token that has not been cleared upon log out of an authenticated user.
-
High max 8.8ICSA-22-102-01 1 CVE
Valmet DNA
Successful exploitation of this vulnerability could allow an attacker to execute commands remotely with system privileges.
-
High
Mitsubishi Electric GOT and Tension Controller (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition by sending specially crafted packets.
first Oct 5, 2021 -
High max 7.5ICSA-22-097-02 3 CVEs
ABB SPIET800 and PNI800
Successful exploitation of these vulnerabilities could cause the affect device to become unresponsive, resulting in a denial-of-service condition and requiring a manual reboot.
-
High max 8.6ICSA-22-095-01 1 CVE
Rockwell Automation ISaGRAF
Successful exploitation of this vulnerability could allow arbitrary code execution.
-
High max 8.4ICSA-22-095-02 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code into the MUI PDF export feature.
-
High max 3.7ICSA-22-090-02 4 CVEs
Hitachi Energy e-mesh EMS
Successful exploitation of these vulnerabilities could cause a denial-of-service condition.
-
High max 7.8ICSA-22-090-03 5 CVEs
Fuji Electric Alpha5
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information and execute arbitrary code.
-
High max 7.7ICSA-22-090-07 1 CVE
Rockwell Automation Studio 5000 Logix Designer
Successful exploitation of this vulnerability may allow an attacker to download a modified program to the controller.
-
High max 7.8ICSA-22-088-02 4 CVEs
Omron CX-Position
Successful exploitation of these vulnerabilities when parsing an NCI file could allow code execution.
-
HighICSA-22-083-01 7 CVEs
Yokogawa CENTUM and Exaopc
Successful exploitation of these vulnerabilities in CAMS server functions can be abused to suppress alarms, read or write files, crash the server, or execute arbitrary code.
-
High max 8.8ICSA-22-083-02 1 CVE
mySCADA myPRO
Successful exploitation of this vulnerability could allow arbitrary operating system commands injection.
-
High max 8.4ICSA-22-074-01 1 CVE
ABB OPC Server for AC 800M
Successful exploitation of this vulnerability could allow a low privileged authenticated user to remotely execute arbitrary code.