1,944 results · Clear filters · Feed
-
High max 10.0ICSA-21-110-06 6 CVEs
Eaton Intelligent Power Manager
Successful exploitation of these vulnerabilities could allow attackers to change certain settings, upload code, delete files, or execute commands.
-
High max 7.8
Schneider Electric C-Bus Toolkit
Successful exploitation of these vulnerabilities may allow remote code execution.
-
High max 8.2ICSA-21-105-02 4 CVEs
EIPStackGroup OpENer Ethernet/IP
Successful exploitation of these vulnerabilities could cause a denial-of-service condition and data exposure.
-
HighICSA-21-103-01 1 CVE
Schneider Electric SoMachine Basic
Successful exploitation of this vulnerability may result in disclosure and retrieval of arbitrary data on the affected node via out-of-band (OOB) attack.
-
HighICSA-21-103-02 1 CVE
Advantech WebAccessSCADA
Successful exploitation of this vulnerability could allow an attacker to login as an -admin ' to fully control the system.
-
HighICSA-21-103-03 1 CVE
JTEKT TOYOPUC products
Successful exploitation of this vulnerability could allow an unauthorized user to stop Ethernet communications between devices from being established.
-
HighICSA-21-098-01 1 CVE
FATEK Automation WinProladder
Successful exploitation of this vulnerability could cause execution of arbitrary code.
-
High max 7.5
Rockwell Automation MicroLogix 1400 (Update A)
Successful exploitation of this vulnerability may result in a denial-of-service condition.
first Feb 2, 2021 -
High max 7.5ICSA-21-077-02 1 CVE
Hitachi ABB Power Grids eSOMS
Successful exploitation of this vulnerability could allow an attacker to gain access to unauthorized information.
-
HighICSA-21-070-01 4 CVEs
Schneider Electric IGSS SCADA Software
Successful exploitation of these vulnerabilities could result in remote code execution.
-
High max 7.5
Siemens SINEMA Remote Connect (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to circumvent the system authorization for certain functionalities, and to execute privileged functions.
first Apr 9, 2019 -
High max 7.5first Apr 9, 2019
-
Highfirst Jun 11, 2019
-
High
Luxion KeyShot (Update A)
Successful exploitation of these vulnerabilities could allow arbitrary code execution, the storing of arbitrary scripts into automatic startup folders, and the attacking of products without sufficient UI warning.
first Feb 4, 2021 -
High
-
High
-
High max 6.1ICSA-21-063-01 2 CVEs
Rockwell Automation 1734-AENTR Series B and Series C
Successful exploitation of these vulnerabilities could lead to unauthorized data modification on the affected devices.
-
High max 7.5ICSA-21-061-03 18 CVEs
MB connect line mbCONNECT24, mymbCONNECT24
Successful exploitation of these vulnerabilities could allow a remote attacker to gain unauthorized access to arbitrary information or allow remote code execution.
-
High max 8.8ICSA-21-056-01 1 CVE
PerFact OpenVPN-Client
Successful exploitation of this vulnerability could allow for local privilege escalation or remote code execution through a malicious webpage.
-
HighICSA-21-056-02 5 CVEs
FATEK Automation FvDesigner
Successful exploitation of these vulnerabilities may allow an attacker to read/modify information, execute arbitrary, and/or crash the application.
-
HighICSA-21-056-04 1 CVE
ProSoft Technology ICX35
Successful exploitation of this vulnerability could allow an attacker to change the current user 's password and alter device configurations.
-
High
Schneider Electric EcoStruxure Power Build-Rapsody (Update A)
Successful exploitation of this vulnerability could allow a local attacker to upload a malicious SSD file, resulting in a use-after-free condition or a stack-based buffer overflow.
first Jan 12, 2021 -
High max 7.5ICSA-21-049-01 1 CVE
Johnson Controls Metasys Reporting Engine (MRE) Web Services
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
-
High max 7.5ICSA-21-047-02 1 CVE
Rockwell Automation Allen-Bradley Micrologix 1100
Successful exploitation of this vulnerability could result in denial-of-service conditions.
-
HighICSA-21-042-02 1 CVE
Rockwell Automation DriveTools SP and Drives AOP
Successful exploitation of this vulnerability may result in privilege escalation and total loss of device confidentiality, integrity, and availability.
-
Highfirst Jun 11, 2019
-
High
-
High
-
HighICSA-21-035-02 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability may allow code execution in the context of the current process.
-
HighICSA-21-028-01 4 CVEs
Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform
Successful exploitation of these vulnerabilities may result in denial-of-service conditions.
-
High max 9.8
-
HighICSA-21-026-01 5 CVEs
Fuji Electric Tellus Lite V-Simulator and V-Server Lite
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
HighICSA-21-021-01 1 CVE
Delta Electronics ISPSoft
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
HighICSA-21-021-02 2 CVEs
Delta Electronics TPEditor
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
Highfirst Jan 12, 2021
-
HighICSMA-21-012-01 9 CVEs
SOOIL Dana Diabecare RS Products
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, modify therapy settings, bypass authentication, or crash the device being accessed. These vulnerabilities could affect patient safety.
-
High
-
HighICSA-21-007-04 4 CVEs
Delta Electronics CNCSoft-B
Successful exploitation of these vulnerabilities could lead to arbitrary code execution.
-
High
Yokogawa CENTUM (Update A)
Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to send tampered communication packets or create/overwrite any file and run any commands.
first Aug 11, 2020 -
High max 7.1
Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A)
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to delete arbitrary files on the system or render the system unusable through a denial-of-service attack.
first Oct 8, 2020