1,944 results · Clear filters · Feed
-
HighICSA-21-005-02 1 CVE
Panasonic FPWIN Pro
Successful exploitation of this vulnerability could result in an out-of-bounds read, which may allow remote code execution.
-
High max 7.5ICSA-21-005-04 3 CVEs
Red Lion Crimson 3.1
Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition, read and modify the database, and leak memory data.
-
HighICSA-21-005-05 2 CVEs
Delta Electronics DOPSoft
Successful exploitation of these vulnerabilities could allow arbitrary code execution.
-
HighICSA-21-005-06 1 CVE
Delta Electronics CNCSoft ScreenEditor
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
HighICSA-20-352-01 1 CVE
Emerson Rosemount X-STREAM
Successful exploitation of this vulnerability could allow an attacker through a specially crafted URL to download files and obtain sensitive information.
-
High max 7.5
WAGO Series 750-88x and 750-352 (Update A)
Successful exploitation of this vulnerability could allow an attacker to crash the device being accessed using a denial-of-service attack.
first Nov 3, 2020 -
HighICSA-20-345-01 1 CVE
Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could cause the device to enter a denial-of-service condition, and a reset of the CPU module is required for recovery.
-
HighICSA-20-345-02 1 CVE
Host Engineering H2-ECOM100 Module
Successful exploitation of this vulnerability could lead to a denial-of-service condition, forcing an operator to manually restart the device.
-
Highfirst Aug 30, 2017
-
High
Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)
first Jun 12, 2018 -
Highfirst May 14, 2019
-
High max 9.8ICSA-20-343-04 5 CVEs
Schneider Electric Modicon M221 Programmable Logic Controller
Successful exploitation of these vulnerabilities could allow an attacker to take control over the PLC and gain unauthorized access, which could result in exposure of sensitive information.
-
High
-
High
-
High max 8.8ICSMA-20-345-01 3 CVEs
Medtronic MyCareLink Smart
Successful exploitation of these vulnerabilities together could result in the attacker being able to modify or fabricate data from the implanted cardiac device being uploaded to the CareLink Network and remotely execute code on the MCL Smart Patient Reader de…
-
High
WECON LeviStudioU (Update C)
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application and obtain sensitive information.
first Aug 25, 2020 -
HighICSA-20-338-01 1 CVE
National Instruments CompactRIO
Successful exploitation of this vulnerability could allow an attacker to reboot the device remotely.
-
HighICSA-20-336-01 1 CVE
Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD)
Successful exploitation of this vulnerability may allow unauthorized command execution by a local user of the Windows engineering workstation, which could result in loss of availability, confidentiality, and integrity of the workstation where EcoStruxure Oper…
-
HighICSA-20-329-02 1 CVE
Fuji Electric V-Server Lite
Successful exploitation of this vulnerability could allow for remote code execution on the device.
-
High max 7.1ICSA-20-324-01 1 CVE
Johnson Controls Sensormatic Electronics American Dynamics victor Web Client
Successful exploitation of this vulnerability could allow an unauthenticated attacker on the network to create and sign their own JSON web token and use it to execute an HTTP API method without the need for valid authentication/authorization. Under certain ci…
-
HighICSA-20-324-04 9 CVEs
Schneider Electric Interactive Graphical SCADA System (IGSS)
Successful exploitation of these vulnerabilities may result in remote code execution.
-
High max 8.8ICSA-20-315-01 1 CVE
ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA
OSIsoft reported this vulnerability to CISA.
-
High max 7.7ICSA-20-315-02 2 CVEs
OSIsoft PI Vision
Successful exploitation of these vulnerabilities may allow a remote attacker with write access to the PI ProcessBook files to inject code that is imported into PI Vision, or disclose information to a user with insufficient privileges.
-
HighICSA-20-315-03 1 CVE
Schneider Electric PLC Simulator for EcoStruxure Control Expert
Successful exploitation of this vulnerability could cause a denial-of-service condition, which could result in a failure of the EcoStruxture Control Expert Simulator.
-
HighICSA-20-310-01 2 CVEs
WECON PLC Editor
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
HighICSA-20-301-01 2 CVEs
SHUN HU Technology JUUKO Industrial Radio Remote Control
Successful exploitation of these vulnerabilities could allow attackers to replay commands, control the device, view commands, and/or stop the device from running.
-
HighICSMA-20-296-01 3 CVEs
B. Braun OnlineSuite
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, download and upload arbitrary files, and perform remote code execution.
-
High max 7.6ICSMA-20-296-02 11 CVEs
B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
Successful exploitation of these vulnerabilities could allow an attacker to compromise the security of the Space or compactplus communication devices, allowing an attacker to escalate privileges, view sensitive information, upload arbitrary files, and perform…
-
High max 7.6
Capsule Technologies SmartLinx Neuron 2 (Update A)
Successful exploitation of this vulnerability could provide an attacker with full control of a trusted device on a hospital 's internal network.
first Jul 14, 2020 -
High max 7.5ICSA-20-294-01 3 CVEs
Rockwell Automation 1794-AENT Flex I/O Series B
Successful exploitation of these vulnerabilities could crash the device being accessed, resulting in a buffer overflow condition that may allow remote code execution.
-
HighICSA-20-289-01 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could allow an attacker to execute remote code as an administrator.
-
HighICSA-20-289-02 1 CVE
Advantech R-SeeNet
Successful exploitation of this vulnerability could allow remote attackers to retrieve sensitive information from the R-SeeNet database.
-
HighICSA-20-287-02 1 CVE
LCDS LAquis SCADA
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
HighICSA-20-287-03 1 CVE
Flexera InstallShield
Successful exploitation of this vulnerability could allow execution of a malicious DLL.
-
High
-
HighICSA-20-273-01 3 CVEs
ICSA-20-273-01_MB Connect line mbCONNECT24, mymbCONNECT24
Alik Koldobsky, Ofir Manzur, Hay Mizrachi, Nikolay Sokolik, and Haviv Vaizman from OTORIO reported these vulnerabilities to CISA.
-
High max 7.7ICSA-20-273-03 6 CVEs
B&R Automation SiteManager and GateManager
Successful exploitation of these vulnerabilities could allow for arbitrary information disclosure, manipulation, and a denial-of-service condition.
-
HighICSA-20-266-01 2 CVEs
GE Digital APM Classic
Successful exploitation of these vulnerabilities could allow access to sensitive information.
-
HighICSA-20-261-01 1 CVE
Advantech WebAccess Node
Successful exploitation of this vulnerability could allow an attacker to escalate their privileges.
-
High
ENTTEC Lighting Controllers (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized SSH/SCP access to devices, inject malicious code, run commands with root privileges, and read, write, and execute files in system directories as any user.
first Jun 25, 2020