1,944 results · Clear filters · Feed
-
High max 8.1ICSMA-21-322-01 2 CVEs
Philips IntelliBridge EC 40 and EC 80 Hub
Successful exploitation of these vulnerabilities may allow an attacker unauthorized access to the IntelliBridge EC40 and80 Hub. This could allow an attacker to execute software, modify system configurations, or view/update files, including unidentifiable pati…
-
High max 7.8ICSA-21-320-01 2 CVEs
FATEK Automation WinProladder
Successful exploitation of these vulnerabilities could allow for arbitrary code execution.
-
HighICSA-21-320-02 1 CVE
Mitsubishi Electric GOT products
Successful exploitation of this vulnerability could allow the system 's operations to be adversely affected.
-
High max 6.5
Multiple Embedded TCP/IP Stacks (Update B)
Successful exploitation of weak initial sequence numbers (ISN) can be used to hijack or spoof TCP connections, cause denial-of-service conditions, inject malicious data, or bypass authentication.
first Feb 11, 2021 -
High max 7.8ICSA-21-315-01 2 CVEs
WECON PLC Editor
Successful exploitation of these vulnerabilities may allow arbitrary code execution.
-
High max 7.8
Advantech WebAccess HMI Designer (Update A)
Successful exploitation of these vulnerabilities could result in memory corruption, code execution, hijacking of user 's cookie/session tokens, and unintended browser action.
first Jun 22, 2021 -
HighICSA-21-313-02 3 CVEs
Schneider Electric GUIcon
Successful exploitation of these vulnerabilities may allow an attacker to execute arbitrary code on the host PC, leading to sensitive information disclosure or unintended user actions.
-
High max 7.3ICSA-21-313-04 1 CVE
mySCADA myDESIGNER
Successful exploitation of this vulnerability could allow for remote code execution.
-
High max 7.4
VISAM VBASE Editor
Successful exploitation of these vulnerabilities may allow un-neutralized user-controllable data input, disclosure of local files, access to NTLM (Windows New Technology LAN Manager) hashes, and access to sensitive files.
-
High max 7.8ICSA-21-308-02 4 CVEs
AzeoTech DAQFactory
Successful exploitation of these vulnerabilities could allow code execution, memory corruption, or unauthorized access to user information.
-
HighICSMA-21-308-01 2 CVEs
Philips Tasy EMR
Successful exploitation of these vulnerabilities could result in patient 's confidential data being exposed or extracted from Tasy 's database, give unauthorized access, or create a denial-of-service condition.
-
High
WECON PI Studio (Update A)
Successful exploitation of these vulnerabilities may allow execution of code and disclose sensitive information under the context of administrator.
first Oct 4, 2018 -
High
Delta Electronics DOPSoft (Update A)
Successful exploitation of this vulnerability may allow arbitrary code execution.
first Aug 26, 2021 -
HighICSA-21-301-01 1 CVE
Sensormatic Electronics victor
Successful exploitation of this vulnerability could allow an unauthorized elevation of privileges.
-
High max 7.8ICSA-21-299-01 6 CVEs
Fuji Electric Tellus Lite V-Simulator and V-Server Lite
Successful exploitation of these vulnerabilities could allow an attacker to cause data corruption, read sensitive information, obtain code execution, or crash the application.
-
HighICSA-21-294-01 2 CVEs
ICONICS GENESIS64 and Mitsubishi Electric MC Works64
Successful exploitation of these vulnerabilities may result in remote code execution.
-
High max 8.8ICSA-21-294-02 10 CVEs
Delta Electronics DIALink
Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized information, remotely execute code, access the application directory and escalate privileges, take over the system where the software is installed, and modify the …
-
HighICSA-21-294-03 1 CVE
ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA
Successful exploitation of this vulnerability could trigger a stack overflow.
-
HighICSA-21-287-01 1 CVE
Schneider Electric CNM
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands.
-
High max 7.5ICSA-21-280-03 1 CVE
Johnson Controls exacqVision
Successful exploitation of this vulnerability could allow an unauthenticated remote user to exploit an integer overflow in the exacqVision Server with a specially crafted script and cause a denial-of-service condition.
-
High max 7.8ICSA-21-280-06 7 CVEs
FATEK Automation WinProladder
Successful exploitation of these vulnerabilities may allow arbitrary code execution, remote code execution, heap corruption, and unauthorized information disclosure.
-
High max 8.0ICSA-21-278-02 6 CVEs
Emerson WirelessHART Gateway
Successful exploitation of these vulnerabilities by an authenticated user can allow root level arbitrary write permission, which can lead to remote code execution.
-
High max 8.8
Ovarro TBox (Update A)
Successful exploitation of these vulnerabilities could result in remote code execution, which may cause a denial-of-service condition.
first Feb 23, 2021 -
High max 7.8ICSA-21-259-02 1 CVE
Schneider Electric EcoStruxure and SCADAPack
Successful exploitation of this vulnerability could result in code execution on the engineering workstation.
-
High max 9.8
Siemens SINAMICS PERFECT HARMONY GH180 (Update A)
Successful exploitation of this vulnerability could result in arbitrary code execution and unauthorized access to sensitive data.
first Jul 13, 2021 -
High max 8.6ICSA-21-257-02 1 CVE
Johnson Controls Sensormatic Electronics KT-1
Successful exploitation of this vulnerability may allow replay attacks.
-
HighICSA-21-257-20 2 CVEs
Siemens LOGO! CMR and SIMATIC RTU 3000
Successful exploitation of these vulnerabilities could allow an attacker with access to any of the interfaces of an affected device to impact the availability or to communicate with invalid certificates.
-
High max 7.3ICSA-21-252-01 1 CVE
AVEVA PCS Portal
The DLL hijacking vulnerability in the Platform Common Services (PCS) Portal, if exploited, could allow malicious code execution within the context of the PCS Portal application.
-
High max 7.8
Delta Electronics DOPSoft 2 (Update A)
Successful exploitation of these vulnerabilities may allow arbitrary code execution.
-
High max 7.8
Johnson Controls Sensormatic Electronics Illustra
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access to the underlying Linux operating system.
-
High max 8.2ICSA-21-238-01 1 CVE
Johnson Controls Controlled Electronic Management Systems CEM Systems AC2000
Under specific conditions, successful exploitation of this vulnerability could allow a remote attacker access to the system without adequate authorization.
-
High
Advantech WebAccess/SCADA (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to read files outside the intended directory or redirect a user to a malicious webpage.
first Jun 17, 2021 -
High max 5.3ICSA-21-236-01 12 CVEs
Hitachi ABB Power Grids TropOS
Successful exploitation of these vulnerabilities could allow an attacker to direct a client that is connected to a TropOS Wi-Fi access point to fake websites and extract sensitive data.
-
High max 7.7ICSA-21-236-02 1 CVE
Hitachi ABB Power Grids Retail Operations and CSB Products
Successful exploitation of this vulnerability could allow an attacker to access database credentials, shut down the product, and access or alter system data.
-
HighICSA-21-236-03 1 CVE
Delta Electronics TPEditor
Successful exploitation of this vulnerability may allow for arbitrary code execution.
-
High max 8.1ICSA-21-231-01 6 CVEs
ICSA-21-231-01_AVEVA SuiteLink Server
Sharon Brizinov of Claroty reported these vulnerabilities to AVEVA.
-
High max 8.8
Sensormatic Electronics C-CURE 9000 (Update A)
Successful exploitation of this vulnerability could allow remote execution of lower privileged Windows programs.
first Jul 1, 2021 -
High max 8.8ICSA-21-224-01 1 CVE
Cognex In-Sight OPC Server
Successful exploitation of this vulnerability could allow a remote attacker access to system level permissions and local privilege escalation.
-
HighICSA-21-224-02 3 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities may allow code execution in the context of the current process.
-
High max 9.8
Siemens SINAMICS Medium Voltage Products Telnet (Update A)
Successful exploitation of this vulnerability could allow an attacker to gain full remote access to the HMI.
first May 11, 2021