1,944 results · Clear filters · Feed
-
HighICSA-19-353-01 1 CVE
Moxa EDS Ethernet Switches
Successful exploitation of this vulnerability could cause the target device to go out of service.
-
HighICSA-19-353-03 1 CVE
WECON PLC Editor
Successful exploitation could allow an attacker to execute code under the privileges of the application.
-
HighICSA-19-353-04 1 CVE
Reliable Controls MACH-ProWebCom/Sys
Successful exploitation of this vulnerability could allow an attacker to execute commands on behalf of the affected user.
-
High max 7.5
PLC Cycle Time Influences (Update A)
High network load can consume CPU power in such a way that the normal operation of the device can be affected; that is, the configured cycle time can be influenced.
first Apr 16, 2019 -
High max 8.6ICSA-19-346-02 3 CVEs
Omron PLC CJ and CS Series
This updated advisory is a follow-up to the original advisory titled ICSA-19-346-02 Omron PLC CJ and CS Series (Update A) published November 29, 2022, on the ICS webpage at cisa.gov.
-
High
-
HighICSA-19-339-01 1 CVE
Thales DIS SafeNet Sentinel LDK License Manager Runtime
Successful exploitation of this vulnerability could allow a local attacker to escalate privileges.
-
HighICSA-19-337-01 1 CVE
Reliable Controls LicenseManager
Successful exploitation of this vulnerability could allow an attacker to crash the system, view sensitive data, or execute arbitrary commands.
-
HighICSA-19-311-01 1 CVE
Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules
Successful exploitation of this vulnerability may prevent the FTP client from connecting to the FTP server on MELSEC-Q Series and MELSEC-L Series CPU module.
-
HighICSA-19-311-02 1 CVE
Fuji Electric V-Server
Successful exploitation of this vulnerability could crash the device being accessed; several heap-based buffer overflows have been identified.
-
High
Omron Network Configurator for DeviceNet (Update A)
Successful exploitation of this vulnerability could allow an attacker to achieve arbitrary code execution under the privileges of the application.
first May 14, 2019 -
HighICSA-19-304-02 1 CVE
Honeywell equIP Series IP Cameras
Successful exploitation of this vulnerability could result in denial-of-service conditions.
-
HighICSA-19-304-03 1 CVE
Honeywell equIP and Performance Series IP Cameras
Successful exploitation of this vulnerability could result in unauthenticated access.
-
HighICSA-19-304-04 1 CVE
Honeywell equIP and Performance Series IP Cameras and Recorders
Successful exploitation of this vulnerability could result in unauthenticated access.
-
HighICSA-19-302-01 1 CVE
PHOENIX CONTACT Automation Worx Software Suite
Successful exploitation of this vulnerability could compromise the availability, integrity, or confidentiality of an application programming workstation. Automated systems programmed using one of the affected products are not impacted.
-
HighICSA-19-290-02 2 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities could crash the device being accessed, which may allow the attacker to access information and execute arbitrary code.
-
High
Philips Brilliance Computed Tomography (CT) System (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to attain elevated privileges and access unauthorized system resources, including access to execute software or to view/update files including patient health information (PHI), directories…
first May 3, 2018 -
Highfirst Jul 9, 2019
-
High
BD Pyxis (Update A)
Successful exploitation of this vulnerability could allow the Active Directory (AD) credentials of a previously authenticated user to gain access to the device. This could result in an attacker having the same level of privilege previously granted to a user p…
first Sep 5, 2019 -
HighICSA-19-274-02 1 CVE
Yokogawa Products
Successful exploitation of this vulnerability could allow a local attacker to execute malicious files.
-
HighICSA-19-274-03 2 CVEs
Moxa EDR 810 Series
Successful exploitation of these vulnerabilities could allow remote code execution or access to sensitive information.
-
High
WECON LeviStudioU (Update A)
Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary code.
first Feb 5, 2019 -
High
Rockwell Automation Arena Simulation Software (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to cause a current Arena session to fault or enter a denial-of-service (DoS) state, allowing the attacker to run arbitrary code.
first Aug 1, 2019 -
High max 7.8ICSA-19-262-01 2 CVEs
Tridium Niagara
Successful exploitation of these vulnerabilities could allow a local user to escalate their privileges.
-
HighICSA-19-255-03 1 CVE
3S-Smart Software Solutions GmbH CODESYS Control V3 Online User Management
Successful exploitation of this vulnerability could allow unauthorized actors access to unintended functionality and/or information.
-
HighICSA-19-255-05 1 CVE
3S-Smart Software Solutions GmbH CODESYS V3 Products Containing a CODESYS Communication Server
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
HighICSA-19-253-01 3 CVEs
Delta Electronics TPEditor
Successful exploitation of these vulnerabilities may allow information disclosure, remote code execution, or may crash the application.
-
High
-
High
-
High
-
HighICSA-19-253-06 1 CVE
OSIsoft PI SQL Client
Successful exploitation of this vulnerability could allow remote code execution or cause a denial of service, resulting in disclosure, deletion, or modification of information.
-
High
-
High max 7.8
-
HighICSA-19-246-01 1 CVE
EZAutomation EZ Touch Editor
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
HighICSA-19-246-02 1 CVE
EZAutomation EZ PLC Editor
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
HighICSMA-19-241-01 1 CVE
Change Healthcare McKesson and Horizon Cardiology
Successful exploitation of this vulnerability could allow a locally authenticated user to insert specially crafted files that could result in arbitrary code execution.
-
HighICSA-19-239-02 1 CVE
Datalogic AV7000 Linear Barcode Scanner
Successful exploitation of this vulnerability could allow a remote attacker to bypass authentication through issues in the HTTP authentication process.
-
HighICSA-19-227-02 1 CVE
Fuji Electric Alpha5 Smart Loader
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
HighICSA-19-225-01 2 CVEs
Delta Industrial Automation DOPSoft
Successful exploitation of these vulnerabilities may allow information disclosure, remote code execution, or crash of the application.
-
HighICSA-19-225-02 2 CVEs
OSIsoft PI Web API
Successful exploitation of these vulnerabilities may allow direct attacks against the product and disclose sensitive information.