1,944 results · Clear filters · Feed
-
High max 8.1ICSA-22-067-02 1 CVE
AVEVA System Platform
Successful exploitation of this vulnerability could expose cleartext credentials for the network user account or for logged-in users to an authorized, low privilege user. The cleartext credentials would also be exposed if the user creates a diagnostic memory …
-
High max 8.8ICSA-22-062-01 4 CVEs
IPCOMM ipDIO
Successful exploitation of these vulnerabilities could allow an attacker to inject and execute arbitrary code.
-
High max 7.0ICSMA-22-062-01 1 CVE
BD Pyxis
Successful exploitation of this vulnerability could allow an attacker to gain access to electronic protected health information (ePHI) or other sensitive information.
-
High max 8.0ICSMA-22-062-02 1 CVE
BD Viper LT
Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information.
-
High max 8.2
Baker Hughes Bently Nevada 3500
Successful exploitation of this vulnerability could allow an attacker access to system credentials.
first Aug 19, 2021 -
High max 7.8ICSA-22-055-01 3 CVEs
FATEK Automation FvDesigner
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
-
High max 6.1ICSA-22-055-02 3 CVEs
Mitsubishi Electric EcoWebServerIII
Successful exploitation of these vulnerabilities could allow information to be disclosed, tampered with, or result in a denial-of-service condition.
-
High max 5.1ICSA-22-055-03 4 CVEs
Schneider Electric Easergy P5 and P3
Successful exploitation of these vulnerabilities may disclose device credentials, cause a denial-of-service condition, device reboot, or allow an attacker to gain full control of the relay. This could result in loss of protection to your electrical network.
-
High max 7.5ICSA-22-053-01 1 CVE
GE Proficy CIMPLICITY-IPM
Successful exploitation of this vulnerability could allow an attacker to achieve both code execution and local privilege escalation.
-
High max 7.5ICSA-22-053-02 1 CVE
GE Proficy CIMPLICITY-Cleartext
Successful exploitation of this vulnerability could allow an attacker to capture a connection session, resulting in disclosure of sensitive information.
-
High
ICSA-19-225-03_Siemens SCALANCE X Switches (Update D)
Younes Dragoni and Alessandro Di Pinto from Nozomi Networks and Artem Zinenko from Kaspersky reported these vulnerability details to Siemens.
first Aug 13, 2019 -
High max 7.8
Siemens Healthineers syngo fastView (Update A)
Successful exploitation of these vulnerabilities could lead to a crash of the application or arbitrary code execution.
first Dec 16, 2021 -
High max 7.5
FANUC Robot Controllers (Update A)
Successful exploitation of these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution.
first Aug 31, 2021 -
High max 8.6
Multiple Data Distribution Service (DDS) Implementations (Update A)
Successful exploitation of these vulnerabilities could result in denial-of-service or buffer-overflow conditions, which may lead to remote code execution or information exposure.
first Nov 11, 2021 -
High max 7.5
Fresenius Kabi Agilia Connect Infusion System (Update A)
Successful exploitation of these vulnerabilities in system accessories could allow an attacker to gain access to sensitive information, modify settings or parameters, or perform arbitrary actions as an authenticated user.
first Dec 21, 2021 -
High max 8.6ICSA-22-025-01 2 CVEs
GE Gas Power ToolBoxST
Successful exploitation of these vulnerabilities could result in data exfiltration or arbitrary write, overwrite, and execution.
-
High
Mitsubishi Electric GOT and Tension Controller (Update B)
Successful exploitation of this vulnerability could allow malicious attackers to cause deterioration of communication performance or cause a denial-of-service condition of the TCP communication functions of the products requiring a re-boot of the device to re…
first Dec 8, 2020 -
High max 7.5
Trane Symbio (Update B)
Successful exploitation of this vulnerability could allow a user to execute arbitrary code on the controller.
first Sep 23, 2021 -
HighICSA-22-013-01 1 CVE
Mitsubishi Electric MELSEC-F Series
Successful exploitation of this vulnerability could lead to a denial-of-service condition in the communication function of the product or cause other unspecified effects.
-
HighICSA-22-013-07 1 CVE
Mitsubishi Electric MELSEC-F Series
Successful exploitation of this vulnerability may cause a denial-of-service condition in the affected product.
-
High max 7.8ICSA-22-006-01 1 CVE
Omron CX-One
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
High max 7.5ICSA-22-006-02 1 CVE
Fernhill SCADA
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
HighICSA-22-006-03 4 CVEs
IDEC PLCs
Successful exploitation of these vulnerabilities could allow an attacker to upload, alter, and/or download the PLC user program. An attacker could also access the PLC web server and hijack the controllers, resulting in the manipulation and/or suspension of th…
-
High max 7.8ICSA-21-355-02 1 CVE
Horner Automation Cscape EnvisionRV
Successful exploitation of this vulnerability could execute arbitrary code in the context of the current process.
-
High max 7.8ICSA-21-355-03 2 CVEs
WECON LeviStudioU
Successful exploitation of these vulnerabilities may allow remote code execution.
-
High max 8.1ICSA-21-355-04 2 CVEs
Emerson DeltaV
Successful exploitation of these vulnerabilities could allow an attacker to achieve local privilege escalation or restart a controller, resulting in a denial-of-service condition.
-
High
Mitsubishi Electric MELSEC iQ-R Series (Update C)
Successful exploitation of this vulnerability could cause a denial-of-service condition for the affected product.
first Nov 19, 2020 -
HighICSA-21-350-03 1 CVE
Wibu-Systems CodeMeter Runtime
Successful exploitation of this vulnerability could allow an attacker to crash the CodeMeter Runtime Server, which could cause a denial-of-service condition.
-
High max 7.7ICSA-21-348-01 2 CVEs
Advantech R-SeeNet
Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege escalation and retrieve any information from the product 's database.
-
High max 7.2ICSA-21-343-01 1 CVE
Hitachi Energy GMS600, PWC600, and Relion
This updated advisory is a follow-up to the original advisory titled ICSA-21-343-01 Hitachi Energy GMS600, PWC600, and Relion that was published December 9, 2021, on the ICS webpage at cisa.gov/ics.
-
High max 7.8ICSA-21-343-02 1 CVE
WECON LeviStudioU
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
High max 8.1ICSMA-21-343-01 1 CVE
Hillrom Welch Allyn Cardio Products
Successful exploitation of this vulnerability could allow an attacker to access privileged accounts.
-
HighICSA-21-341-01 2 CVEs
Hitachi Energy RTU500 OpenLDAP
Successful exploitation of these vulnerabilities could cause a denial-of-service condition in the affected version of the RTU500 series product.
-
High max 8.3ICSA-21-336-02 1 CVE
Johnson Controls Entrapass
Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.
-
High max 7.5ICSA-21-336-04 1 CVE
Hitachi Energy RTU500 series BCI
Successful exploitation of this vulnerability could allow a remote attacker to reboot the device.
-
High max 8.6ICSA-21-336-08 3 CVEs
Hitachi Energy RTU500 series
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic, retrieve information from memory, or cause a denial-of-service condition.
-
HighICSA-21-334-01 1 CVE
Xylem Aanderaa GeoView
Successful exploitation of this vulnerability could allow an attacker to manipulate the database server.
-
High max 7.8ICSA-21-334-03 1 CVE
Delta Electronics CNCSoft
Successful exploitation of this vulnerability could allow for arbitrary code execution.
-
High max 7.8
Johnson Controls CEM Systems AC2000
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access on the underlying Linux operating system.
-
High max 7.2ICSA-21-334-05 1 CVE
Hitachi Energy Retail Operations and CSB Software
Successful exploitation of this vulnerability could allow unauthorized access to data and modification of data inside the affected product.