1,944 results · Clear filters · Feed
-
High
Omron CX-Supervisor (Update A)
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, and/or allow an attacker to achieve code execution with privileges within the context of the application.
first Jan 17, 2019 -
High
Omron CX-Supervisor (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the context of the application, corrupt objects, and force the application to read a value outside of an array.
first Oct 17, 2018 -
HighICSA-19-029-01 1 CVE
Yokogawa License Manager Service
Successful exploitation of this vulnerability could allow an attacker to remotely upload files, allowing execution of arbitrary code.
-
HighICSA-19-029-03 1 CVE
AVEVA Wonderware System Platform
This vulnerability could allow unauthorized access to the credentials for the ArchestrA Network User Account.
-
High max 8.8ICSA-19-024-02 6 CVEs
PHOENIX CONTACT FL SWITCH
Successful exploitation of these vulnerabilities may allow attackers to have user privileges, gain access to the switch, read user credentials, deny access to the switch, or perform man-in-the-middle attacks.
-
HighICSMA-19-022-01 3 CVEs
Dräger Infinity Delta
Successful exploitation of these vulnerabilities could cause information disclosure of device logs, denial of service through device reboots of the patient monitors, and privilege escalation.
-
HighICSA-19-017-02 1 CVE
ABB CP400 Panel Builder TextEditor 2.0
Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code, and cause a denial-of-service condition within the Text Editor application.
-
HighICSA-19-017-03 2 CVEs
ControlByWeb X-320M
Successful exploitation of these vulnerabilities may allow arbitrary code execution and could cause the device being accessed to require a physical factory reset to restore the device to an operational state.
-
HighICSA-19-015-01 11 CVEs
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
Successful exploitation of these vulnerabilities could allow remote code execution, data exfiltration, or cause a system crash.
-
High
Schneider Electric Modicon M340 PLC (Update A)
Successful exploitation of this vulnerability may render the device unresponsive requiring a physical reset of the PLC.
first Feb 23, 2017 -
HighICSA-19-010-01 1 CVE
Emerson DeltaV
Successful exploitation of this vulnerability could allow an attacker to shut down a service, resulting in a denial of service.
-
HighICSA-19-008-01 1 CVE
Schneider Electric Zelio Soft 2
Successful exploitation of this vulnerability could allow for remote code execution when opening a specially crafted project file.
-
High
-
HighICSA-19-003-02 1 CVE
Yokogawa Vnet/IP Open Communication Driver
Successful exploitation of this vulnerability could allow an attacker to cause Vnet/IP network communications to controlled devices to become unavailable.
-
HighICSA-19-003-03 1 CVE
Hetronic Nova-M
Successful exploitation of this vulnerability could allow unauthorized users to view commands, replay commands, control the device, or stop the device from running.
-
High
Omron CX-Supervisor (Update A)
Successful exploitation of these vulnerabilities could allow remote code execution.
first Mar 13, 2018 -
High
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability could allow a remote attacker to diminish communications or cause a complete denial of service to the device.
first Nov 27, 2018 -
HighICSA-18-354-02 1 CVE
Schneider Electric EcoStruxure
Successful exploitation of this vulnerability could allow an attacker to use this device as a platform to conduct a phishing attack.
-
HighICSA-18-352-02 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could cause a stack buffer overflow condition.
-
High
-
HighICSA-18-347-01 3 CVEs
Schneider Electric GUIcon Eurotherm
Successful exploitation of these vulnerabilities may allow an attacker to execute code with privileges within the context of the application.
-
HighICSA-18-347-03 1 CVE
Geutebrück GmbH E2 Series IP Cameras
Successful exploitation of this vulnerability may allow a remote attacker to inject OS commands as root.
-
HighICSA-18-347-04 1 CVE
GE Mark VIe, EX2100e, EX2100e
Successful exploitation of this vulnerability could allow an attacker to access system data, which could result in escalation of privilege and unauthorized access to the controller.
-
High max 6.1
-
High max 7.5
Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules
Successful exploitation of this vulnerability could allow an unauthenticated attacker to modify system settings and cause a loss of communication between the device and the system.
first Nov 6, 2018 -
HighICSA-18-340-01 1 CVE
GE Proficy GDS
Successful exploitation of this vulnerability could allow an attacker to initiate an OPC UA session and retrieve an arbitrary file.
-
HighICSA-18-331-01 1 CVE
AVEVA Vijeo Citect and Citect SCADA
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.
-
HighICSA-18-324-01 1 CVE
Teledyne DALSA Sherlock
Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution.
-
High max 8.2ICSA-18-324-02 1 CVE
Schneider Electric Modicon M221
Successful exploitation of this vulnerability could cause a change of IPv4 configuration (IP address, mask, and gateway) when remotely connected to the device.
-
High
-
High
Roche Diagnostics Point of Care Handheld Medical Devices (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to modify system settings or execute arbitrary code.
first Nov 6, 2018 -
High
Schneider Electric Software Update (SESU) (Update A)
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.
first Nov 1, 2018 -
HighICSA-18-305-04 1 CVE
Fr. Sauter AG CASE Suite
Successful exploitation of this vulnerability could allow an attacker to remotely retrieve unauthorized files from the system.
-
High
Vecna VGo Robot (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to capture firmware updates through network traffic, extract credentials from the firmware, record video conversations, and may allow remote code execution with root privileges.
first Apr 24, 2018 -
HighICSA-18-303-01 1 CVE
PEPPERL+FUCHS CT50-Ex
Successful exploitation of this vulnerability could allow a malicious third-party application to gain elevated privileges and obtain access to sensitive information.
-
HighICSA-18-298-02 2 CVEs
Advantech WebAccess
Successful exploitation of these vulnerabilities could allow for arbitrary remote code execution.
-
HighICSA-18-296-02 3 CVEs
GAIN Electronic Co. Ltd SAGA1-L Series
Successful exploitation of these vulnerabilities could allow remote code execution and potentially delete the product 's firmware.
-
HighICSA-18-296-03 1 CVE
Telecrane F25 Series
Successful exploitation of this vulnerability could allow unauthorized users to view commands, replay commands, control the device, or stop the device from running.
-
HighICSA-18-289-01 6 CVEs
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, crash the system, or write controlled content to the target system.
-
High
ICSA-18-226-01 Siemens SIMATIC STEP 7 and SIMATIC WinCC (Update A)
first Aug 7, 2018