1,944 results · Clear filters · Feed
-
HighICSA-21-222-08 3 CVEs
ICSA-21-222-08_Siemens Solid Edge
Xina1i, working with Trend Micro 's Zero Day Initiative, and Michael Heinzl reported these vulnerabilities to CISA.
-
HighICSA-21-217-02 3 CVEs
FATEK Automation FvDesigner
Successful exploitation of these vulnerabilities may allow an attacker to execute arbitrary code.
-
High max 8.2ICSA-21-217-03 4 CVEs
ICSA-21-217-03_mySCADA myPRO
Michael Heinzl reported these vulnerabilities to CISA.
-
High max 7.5ICSA-21-210-01 1 CVE
Hitachi ABB Power Grids eSOMS
Successful exploitation of this vulnerability could allow access to user credentials that are stored by the browser.
-
High max 8.8
AVEVA System Platform (Update A)
Successful exploitation of these vulnerabilities, if exploited and chained together, could allow a malicious entity to achieve arbitrary code execution with system privileges or cause a denial-of-service condition.
first Jun 29, 2021 -
High max 7.8ICSA-21-208-05 1 CVE
Delta Electronics DIAScreen
Successful exploitation of these vulnerabilities could crash the device being accessed and may allow remote code execution.
-
HighICSA-21-201-01 1 CVE
Mitsubishi Electric MELSEC-F Series
Successful exploitation of this vulnerability may cause a denial-of-service condition in communication with the product. System reset may be required for recovery.
-
HighICSA-21-194-15 43 CVEs
ICSA-21-194-15_Siemens JT2Go and Teamcenter Visualization
Brian Gorenc and Mat Powell of Trend Micro Zero Day Initiative; garmin and xina1i at SecZone; and Tran Van Khang - khangkito (VinCSS) working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
-
High max 7.5ICSA-21-189-01 1 CVE
Rockwell Automation MicroLogix 1100
Successful exploitation of this vulnerability could allow an attacker to create a denial-of-service condition.
-
High max 7.2
All Bachmann M1 System Processor Modules
Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain access to the password hashes of the controller if Security Level 4 is not in use as recommended. In the recommended Security Level 4 setting, an authenticate…
first Jan 26, 2021 -
High max 8.8ICSA-21-182-01 1 CVE
Johnson Controls Facility Explorer
Successful exploitation of this vulnerability could give an authenticated user an unintended level of access to the controller 's file system.
-
HighICSA-21-182-04 1 CVE
Mitsubishi Electric Air Conditioning System
An attacker could exploit this vulnerability by impersonating administrators to disclose configuration information of the air conditioning system in order to tamper with operation information and system configuration.
-
HighICSA-21-175-01 3 CVEs
FATEK Automation WinProladder
Successful exploitation of these vulnerabilities could allow for the execution of arbitrary code.
-
High max 7.3
WAGO M&M Software fdtCONTAINER (Update C)
If an attacker can socially engineer a valid user into loading a manipulated project file, malicious code can be executed without notice.
first Jan 21, 2021 -
High max 5.3ICSA-21-168-01 1 CVE
Schneider Electric Enerlin'X Com 'X 510
Successful exploitation of this vulnerability could allow elevation of privileges, which could result in unintended disclosure of device configuration information to any authenticated user.
-
High max 7.5ICSA-21-168-02 1 CVE
Softing OPC-UA C++ SDK
A remote attacker may be able to crash the device, resulting in a denial-of-service condition. This vulnerability existsin exported functions of the library, and exploits may have different consequences depending on how the library functions have been used.
-
High max 8.5ICSA-21-161-01 1 CVE
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability may allow remote, authenticated users to bypass FactoryTalk Security policies that are based on a computer name.
-
High max 8.2ICSA-21-161-02 2 CVEs
AGG Software Web Server Plugin
Successful exploitation of these vulnerabilities could allow remote code execution and exposure of arbitrary system files.
-
HighICSA-21-159-02 8 CVEs
Open Design Alliance Drawings SDK
Successful exploitation of these vulnerabilities may allow code execution in the context of the current process or cause a denial-of-service condition.
-
High max 8.8ICSA-21-159-01 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system.
-
HighICSA-21-159-04 13 CVEs
Schneider Electric IGSS
Successful exploitation of these vulnerabilities may result in remote code execution, which could result in an attacker gaining access to the Windows Operating System on the machine used to import CGF and WSP files.
-
High max 8.3
Mitsubishi Electric Factory Automation Products Path Traversal (Update C)
Successful exploitation of this vulnerability may allow an attacker to obtain unauthorized information, tamper the information, and cause a denial-of-service condition.
first Jul 30, 2020 -
High
Siemens JT2Go and Teamcenter Visualization (Update B)
Successful exploitation of these vulnerabilities could lead to arbitrary code execution.
first Jan 12, 2021 -
High max 7.8
Johnson Controls Sensormatic Electronics VideoEdge
Under specific circumstances, a local authenticated user may be able to exploit this vulnerability to gain administrative access.
-
HighICSA-21-147-04 5 CVEs
Siemens JT2Go and Teamcenter Visualization
Successful exploitation of these vulnerabilities could lead to arbitrary code execution or information leakage.
-
HighICSA-21-145-01 5 CVEs
Datakit Libraries bundled in Luxion KeyShot
Successful exploitation of these vulnerabilities could lead to execution of arbitrary code and disclosure of arbitrary files to unauthorized actors.
-
High
Mitsubishi Electric MELFA (Update A)
Successful exploitation of this vulnerability could cause a denial-of-service condition.
first Jan 21, 2021 -
HighICSA-21-138-01 6 CVEs
ICSA-21-138-01_Emerson Rosemount X-STREAM
Emerson reported these vulnerabilities to CISA.
-
High max 8.6ICSA-21-133-01 3 CVEs
Rockwell Automation Connected Components Workbench
Successful exploitation of these vulnerabilities may allow remote code execution, authentication bypass, or privilege escalation.
-
High max 7.8
Johnson Controls Sensormatic Tyco AI
Under specific circumstances, a local attacker could use this vulnerability to obtain super-user access to the underlying openSUSE Linux operating system.
-
HighICSA-21-133-03 1 CVE
OPC Foundation UA Products Built with .NET Framework
Successful exploitation of this vulnerability could trigger a stack overflow.
-
HighICSA-21-133-04 1 CVE
OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5
Successful exploitation of this vulnerability could allow an unauthenticated attacker to read any file on the file system.
-
HighICSA-21-131-01 1 CVE
Omron CX-One
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
HighICSA-21-124-02 1 CVE
Delta Electronics CNCSoft ScreenEditor
Successful exploitation of this vulnerability could crash the device, and an out-of-bounds write may allow remote code execution.
-
High max 7.8
Johnson Controls Exacq Technologies exacqVision
A local attacker could exploit this vulnerability to obtain Super User access to the underlying Ubuntu Linux operating system.
-
HighICSA-21-112-01 2 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities may allow code execution in the context of the current process or locally escalate privileges.
-
High max 7.5
Hitachi Energy Relion 670, 650 and SAM600-IO
This updated advisory is a follow-up to the original advisory titled �ICSA-21-096-01 Hitachi ABB Power Grids Multiple Products� published April 6, 2021 on the ICS webpage at cisa.gov.
first Apr 6, 2021 -
High max 7.8ICSA-21-110-02 7 CVEs
ICSA-21-110-02_Rockwell Automation Stratix Switches
Cisco reported these vulnerabilities to Rockwell Automation.
-
HighICSA-21-110-04 1 CVE
Delta Electronics CNCSoft ScreenEditor
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
HighICSA-21-110-05 2 CVEs
Delta Electronics CNCSoft-B
Successful exploitation of these vulnerabilities could lead to arbitrary code execution.