1,944 results · Clear filters · Feed
-
HighICSA-20-254-02 1 CVE
FATEK Automation PLC WinProladder
Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may cause a denial-of-service event and remote code execution.
-
Highfirst Apr 14, 2020
-
High
-
High
-
High
-
Highfirst Jul 14, 2020
-
High
-
High
-
HighICSA-20-219-03 1 CVE
Geutebrück G-Cam and G-Code
Successful exploitation of this vulnerability could allow remote code execution as root.
-
HighICSA-20-219-04 5 CVEs
Delta Industrial Automation TPEditor
Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.
-
HighICSA-20-217-01 3 CVEs
Delta Industrial Automation CNCSoft ScreenEditor
Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.
-
HighICSA-20-212-01 1 CVE
Inductive Automation Ignition 8
Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information.
-
High
Delta Industrial Automation DOPSoft (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.
first Jun 30, 2020 -
High
Baxter PrismaFlex and PrisMax (Update B)
Successful exploitation of these vulnerabilities may allow an attacker with network access to view and alter sensitive data.
first Jun 18, 2020 -
HighICSA-20-196-06 1 CVE
Siemens SIMATIC S7-200 SMART CPU Family
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
High max 7.8ICSA-20-191-01 2 CVEs
Phoenix Contact Automation Worx Software Suite
Successful exploitation could allow an attacker to execute arbitrary code under the privileges of the application.
-
HighICSA-20-189-01 2 CVEs
Grundfos CIM 500
Successful exploitation of these vulnerabilities could allow access to cleartext credential data.
-
High max 8.8ICSA-20-184-02 1 CVE
ABB System 800xA Information Manager
Successful exploitation of this vulnerability could allow an attacker to inject and execute arbitrary code on the information manager server.
-
HighICSA-20-182-02 2 CVEs
Mitsubishi Electric Factory Automation Engineering Software Products
Successful exploitation of these vulnerabilities could allow a local attacker to send files outside of the system as well as cause a denial-of-service condition.
-
High max 7.1ICSA-20-177-02 1 CVE
Rockwell Automation FactoryTalk Services Platform XXE
Successful exploitation of this vulnerability could lead to a denial-of-service condition and to the arbitrary reading of any local file via system level services.
-
High max 7.8ICSA-20-177-03 2 CVEs
Rockwell Automation FactoryTalk View SE
Successful exploitation of these vulnerabilities could lead to unauthorized access to server data.
-
High max 8.8
Baxter ExactaMix (Update A)
Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive data, alteration of system configuration, alteration of system resources, and impact to system availability.
first Jun 18, 2020 -
High
Baxter Phoenix Hemodialysis Delivery System (Update A)
Successful exploitation of this vulnerability could allow an attacker with unauthorized network access to view sensitive data.
first Jun 18, 2020 -
High
Baxter Sigma Spectrum Infusion Pumps (Update B)
Successful exploitation of these vulnerabilities could result in access to sensitive data, alteration of system configuration, and impact to system availability.
first Jun 18, 2020 -
High max 7.8ICSA-20-175-03 1 CVE
ABB Device Library Wizard
Successful exploitation of this vulnerability could allow a low-level user to escalate privileges and fully compromise the device.
-
HighICSA-20-170-04 1 CVE
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute remote COM objects with elevated privileges.
-
HighICSA-20-163-01 1 CVE
OSIsoft PI Web API 2019
Successful exploitation of this vulnerability could allow a remote authenticated attacker with write access to a PI Server to trick a user into interacting with a PI Web API endpoint that executes arbitrary JavaScript in the user 's browser, resulting in view…
-
High max 7.5
OSIsoft PI System (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized information, delete or modify local processes, and crash the affected device.
first May 12, 2020 -
High max 7.3ICSA-20-154-01 2 CVEs
ABB System 800xA
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, cause system functions to stop, and corrupt user applications.
-
High max 7.8ICSA-20-154-02 1 CVE
ABB System 800xA Base
Successful exploitation of this vulnerability could allow an attacker to escalate privileges and cause system functions to stop or malfunction.
-
High max 7.8ICSA-20-154-03 7 CVEs
ABB Multiple System 800xA Products
Successful exploitation of these vulnerabilities could allow an attacker to make the system node inaccessible or tamper with runtime data in the system.
-
High max 8.8
-
HighICSA-20-142-02 5 CVEs
Schneider Electric EcoStruxure Operator Terminal Expert
Successful exploitation of these vulnerabilities could allow unauthorized write access or remote code execution.
-
HighICSA-20-140-01 2 CVEs
Rockwell Automation EDS Subsystem
Successful exploitation of these vulnerabilities could lead to a denial-of-service condition.
-
High
3S-Smart Software Solutions GmbH CODESYS V3 (Update A)
Successful exploitation of this vulnerability could allow for an attacker with access to PLC traffic to obtain user credentials.
first Aug 1, 2019 -
Highfirst Jul 9, 2019
-
High max 7.5first Aug 13, 2019
-
High
3S-Smart Software Solutions GmbH CODESYS V3 Library Manager (Update A)
Successful exploitation of this vulnerability may allow malicious content from manipulated libraries to be displayed or executed.
first Sep 12, 2019 -
High max 8.8ICSA-20-133-01 2 CVEs
Eaton Intelligent Power Manager
Successful exploitation of these vulnerabilities could allow an attacker to perform command injection or code execution and allow non-administrator users to manipulate the system configurations.
-
HighICSA-20-126-01 1 CVE
Fazecast jSerialComm
Successful exploitation of this vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.