1,944 results · Clear filters · Feed
-
HighICSA-19-213-01 1 CVE
Advantech WebAccess HMI Designer
Successful exploitation of this vulnerability may allow an attacker to remotely execute arbitrary code.
-
HighICSA-19-213-06 2 CVEs
LCDS LAquis SCADA LQS File Parsing
Successful exploitation of these vulnerabilities could allow an attacker to obtain confidential information or execute remote code.
-
HighICSA-19-204-01 2 CVEs
Mitsubishi Electric FR Configurator2
Successful exploitation of these vulnerabilities may enable arbitrary files to be read or cause a denial-of-service condition.
-
HighICSA-19-192-01 2 CVEs
Delta Industrial Automation CNCSoft ScreenEditor
Successful exploitation of these vulnerabilities could cause buffer overflow conditions that may allow information disclosure, remote code execution, or crash the application.
-
HighICSA-19-192-06 1 CVE
Schneider Electric Interactive Graphical SCADA System
Successful exploitation of this vulnerability could allow an attacker to achieve arbitrary code execution or crash the software.
-
HighICSA-19-190-02 1 CVE
Rockwell Automation PanelView 5510
Successful exploitation of this vulnerability could allow a remote unauthenticated user to gain root privileges on the device.
-
HighICSA-19-190-03 1 CVE
Schneider Electric Zelio Soft 2
Successful exploitation of this vulnerability could allow remote code execution through the opening of a specially crafted project file.
-
High
-
High max 7.5ICSA-19-183-01 1 CVE
Schneider Electric Modicon Controllers
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
HighICSA-19-178-01 7 CVEs
ABB PB610 Panel Builder 600
An attacker who successfully exploits these vulnerabilities could prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected sy…
-
HighICSA-19-178-02 1 CVE
ABB CP651 HMI
Successful exploitation of this vulnerability could allow an attacker to prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affe…
-
HighICSA-19-178-03 1 CVE
ABB CP635 HMI
Successful exploitation of this vulnerability could allow an attacker to prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affe…
-
High max 7.1ICSMA-19-178-01 1 CVE
Medtronic MiniMed 508 and Paradigm Series Insulin Pumps
Successful exploitation of this vulnerability may allow an attacker with adjacent access to one of the affected products to intercept, modify, or interfere with the wireless RF (radio frequency) communications to or from the product. This may allow attackers …
-
HighICSA-19-171-01 3 CVEs
PHOENIX CONTACT Automation Worx Software Suite
Successful exploitation of these vulnerabilities could allow an attacker, with access to an original PC Worx or Config+ project file, to perform remote code execution.
-
High
-
HighICSA-19-157-02 2 CVEs
Panasonic Control FPWIN Pro
Successful exploitation of these vulnerabilities could crash the device and allow remote code execution.
-
HighICSA-19-155-02 1 CVE
PHOENIX CONTACT FL NAT SMx
Successful exploitation of this vulnerability could allow unauthorized users full access to the device configuration.
-
HighICSA-19-155-03 3 CVEs
Geutebrück G-Cam and G-Code
Successful exploitation of these vulnerabilities could allow remote code execution as root and remote code execution in the browser of the IP camera operator.
-
HighICSA-19-141-01 9 CVEs
Computrols CBAS Web
Successful exploitation of these vulnerabilities could allow unauthorized actions with administrative privileges, disclosure of sensitive information, execution of code within a user 's browser, execution of unauthorized OS commands, unauthorized access to th…
-
HighICSA-19-141-02 1 CVE
Mitsubishi Electric MELSEC-Q Series Ethernet Module
Successful exploitation of this vulnerability may render the device unresponsive, requiring a physical reset of the PLC (Programmable Logic Controller).
-
HighICSA-19-134-05 1 CVE
ICSA-19-134-05 Siemens SINAMICS PERFECT HARMONY GH180 Drives NXG I and NXG II
-
High
-
HighICSA-19-122-02 5 CVEs
GE Communicator
Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges, manipulate widgets and UI elements, gain control over the database, or execute administrative commands.
-
HighICSA-19-120-01 2 CVEs
ICSA-19-120-01_Rockwell Automation CompactLogix 5370
Younes Dragoni of Nozomi Networks reported CVE-2019-10952 to NCCIC. George Lashenko of CyberX reported CVE-2019-10954 to NCCIC.
-
High max 6.1ICSA-19-113-01 1 CVE
Rockwell Automation MicroLogix 1400 and CompactLogix 5370 Controllers
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to input a malicious link redirecting users to a malicious website.
-
HighICSA-19-106-01 3 CVEs
ICSA-19-106-01_Delta Industrial Automation CNCSoft
Natnael Samson (@NattiSamson) and an anonymous researcher working with Trend Micro 's Zero Day Initiative (ZDI) reported these vulnerabilities to NCCIC.
-
High
IDenticard PremiSys (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information via backups, obtain access to credentials, and/or obtain full access to the system with admin privileges.
first Jan 31, 2019 -
HighICSA-19-094-03 5 CVEs
Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700
Successful exploitation of these vulnerabilities could result in a denial-of-service condition or time synchronization issues across the network via reloading the device, a buffer overflow, or memory exhaustion.
-
HighICSA-19-094-04 1 CVE
Rockwell Automation Stratix 5950
Successful exploitation of this vulnerability could allow a remote attacker to cause an affected device to reload.
-
HighICSA-19-087-01 1 CVE
Rockwell Automation PowerFlex 525 AC Drives
Successful exploitation of this vulnerability could result in resource exhaustion, denial of service, and/or memory corruption.
-
HighICSA-19-085-03 1 CVE
ENTTEC Lighting Controllers
Successful exploitation of this vulnerability could reboot this device allowing a continual denial of service condition.
-
HighICSA-19-073-01 1 CVE
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA ELS Files
Successful exploitation of this vulnerability could allow remote code execution.
-
HighICSA-19-059-01 1 CVE
PSI GridConnect Telecontrol
Successful exploitation of this vulnerability could allow an attacker to execute dynamic scripts in the context of the application, which could allow cross-site scripting attacks.
-
HighICSA-19-050-01 11 CVEs
Intel Data Center Manager SDK
Successful exploitation of these vulnerabilities may allow escalation of privilege, denial of service, or information disclosure.
-
HighICSA-19-050-03 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability could crash the device being accessed, which may allow the attacker to read confidential information and remotely execute arbitrary code.
-
High
gpsd Open Source Project
Successful exploitation of this vulnerability could allow remote code execution, data exfiltration, or denial-of service via device crash.
first Nov 6, 2018 -
HighICSA-19-045-01 1 CVE
Pangea Communications Internet FAX ATA
Successful exploitation of this vulnerability could cause the device to reboot and create a continual denial-of-service condition.
-
High
ICSA-18-067-02_Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension (Update B)
Ilya Karpov and Dmitry Sklyarov from Positive Technologies reported this vulnerability to Siemens.
first Mar 8, 2018 -
High
ICSA-18-347-02 Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays (Update A)
first Jul 11, 2018 -
HighICSA-19-043-02 1 CVE
ICSA-19-043-02 Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays