1,944 results · Clear filters · Feed
-
High
-
HighICSA-18-282-06 3 CVEs
Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server
Successful exploitation of these vulnerabilities could allow unauthorized access to video feeds with the potential to modify settings, replace firmware, and/or execute code.
-
HighICSA-18-282-07 1 CVE
Fuji Electric Energy Savings Estimator
Successful exploitation of this vulnerability may allow an attacker to load a malicious DLL and execute code on the affected system with the same privileges as the application that loaded the malicious DLL.
-
High
WECON LeviStudioU (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to execute remote code.
first Jul 31, 2018 -
HighICSA-18-275-02 1 CVE
GE Communicator
Exploitation could allow attackers to execute arbitrary code or create a denial-of-service condition.
-
HighICSA-18-263-01 1 CVE
Tec4Data SmartCooler
Successful exploitation of this vulnerability could cause the device to shut down by exploiting missing authentication for a critical function.
-
HighICSA-18-256-01 1 CVE
Honeywell Mobile Computers with Android Operating Systems
A vulnerability in a system service on CT60, CN80, CT40, CK75, CN75, CT50, D75e, CN51, and EDA series mobile computers running the Android Operating System (OS) could allow a malicious third-party application to gain elevated privileges.
-
HighICSA-18-254-01 7 CVEs
Fuji Electric V-Server
Successful exploitation of these vulnerabilities could allow for remote code execution on the device, causing a denial of service condition or information exposure.
-
HighICSA-18-254-02 1 CVE
Fuji Electric V-Server Lite
Successful exploitation of this vulnerability could allow a remote attacker to view sensitive information and disrupt the availability of the device.
-
High
-
HighICSA-18-249-01 2 CVEs
Ice Qube Thermal Management Center
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to configuration files or obtain sensitive information.
-
HighICSA-18-247-01 1 CVE
Opto 22 PAC Control Basic and PAC Control Professional
Successful exploitation of this vulnerability could crash the device being accessed, and a buffer overflow condition may then allow remote code execution.
-
High
Philips e-Alert Unit
Successful exploitation from an attacker within the same subnet may impact or compromise user contact details, unit integrity, and/or unit availability. The vulnerabilities may allow attackers to provide unexpected input into the application, execute arbitrar…
-
High max 9.8ICSA-18-240-01 3 CVEs
Schneider Electric Modicon M221
Successful exploitation of these vulnerabilities may allow unauthorized users to replay authentication sequences, overwrite passwords, or decode passwords.
-
High max 5.4ICSA-18-240-03 1 CVE
Schneider Electric PowerLogic PM5560
Successful exploitation of this vulnerability could allow user input to be manipulated, allowing for remote code execution.
-
HighICSA-18-233-01 1 CVE
Yokogawa iDefine, STARDOM, ASTPLANNER, and TriFellows
Successful exploitation of this vulnerability may allow arbitrary code execution, or the stopping of the license management function.
-
High
Tridium Niagara
Successful exploitation of these vulnerabilities could allow an attacker to read, write, and delete sensitive files to gain administrator privileges on the Niagara system.
first Jul 10, 2018 -
HighICSA-18-219-01 2 CVEs
Delta Electronics CNCSoft and ScreenEditor
Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution with administrator privileges.
-
High
-
HighICSA-18-200-04 1 CVE
Moxa NPort 5210 5230 5232
Successful exploitation of this vulnerability could allow a remote attacker to send TCP SYN packages, causing a resource exhaustion condition that would cause the device to become unavailable.
-
High
Rockwell Automation Allen-Bradley CompactLogix and Compact GuardLogix (Update A)
Successful exploitation of this vulnerability could result in a denial-of-service condition. As a result, the controller goes into a Major Non-Recoverable Fault (MNRF) state, which is considered safe. However, recovery requires the user to download the applic…
first Jun 21, 2018 -
HighICSA-18-198-01 1 CVE
ABB Panel Builder 800
An attacker could exploit the vulnerability by tricking a user to open a specially crafted file, allowing the attacker to insert and run arbitrary code. This vulnerability requires user interaction, and the exploit is only triggered when a local user runs the…
-
HighICSA-18-198-02 1 CVE
WAGO e!DISPLAY Web-Based-Management
Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the user, execute code within the user 's browser, place malicious files within the filesystem, and replace existing files to allow privilege escalation.
-
HighICSA-18-198-03 1 CVE
PEPPERL+FUCHS VisuNet RM, VisuNet PC, and Box Thin Client
Successful exploitation of this vulnerability could allow attackers to intercept sensitive communications, establish a man-in-the-middle attack, achieve administrator privileges, and execute remote code.
-
HighICSA-18-191-02 3 CVEs
Schweitzer Engineering Laboratories, Inc. Compass and AcSELerator Architect
Successful exploitation of these vulnerabilities could allow modification/replacement of files within the Compass installation directory, disclosure of information, or denial of service.
-
High max 7.5
Rockwell Automation Allen-Bradley Stratix 5950
Successful exploitation of these vulnerabilities could allow an attacker to bypass client certification to create connections to the affected device or cause the device to crash.
-
HighICSA-18-172-01 1 CVE
Delta Electronics Delta Industrial Automation COMMGR
Successful exploitation of this vulnerability may allow remote code execution, cause the application to crash, or cause a denial-of-service condition in the application server.
-
High
ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)
first Jul 4, 2017 -
High
Delta Electronics Delta Industrial Automation TPEditor (Update A)
Successful exploitation of this vulnerability could crash the accessed device, resulting in a buffer overflow condition that may allow remote code execution.
first May 17, 2018 -
HighICSA-18-158-01 1 CVE
Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway
Successful exploitation of this vulnerability could allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.
-
High
Silex Technology SX-500/SD-320AN or GE Healthcare MobileLink (Update B)
Successful exploitation of these vulnerabilities could allow modification of system settings and remote code execution.
first May 8, 2018 -
High
Philips' IntelliVue Patient and Avalon Fetal Monitors
Successful exploitation may allow an attacker to read/write memory, and/or induce a denial of service through a system restart, thus potentially leading to a delay in diagnosis and treatment of patients.
-
HighICSA-18-151-01 1 CVE
ICSA-18-151-01_Delta Industrial Automation DOPSoft
B0nd @garagehackers working with Trend Micro 's Zero Day Initiative reported the vulnerabilities to NCCIC.
-
HighICSA-18-151-02 3 CVEs
GE MDS PulseNET and MDS PulseNET Enterprise
Exploitation of these vulnerabilities may allow elevation of privilege and exfiltration of information on the host platform.
-
HighICSMA-18-144-01 2 CVEs
BeaconMedaes TotalAlert Scroll Medical Air Systems
Successful exploitation of these vulnerabilities could allow an attacker to view and potentially modify some device information and web application setup information, which does not include access to patient health information. Additionally, BeaconMedaes has …
-
Highfirst May 3, 2018
-
HighICSA-18-137-01 1 CVE
GE PACSystems CPE305/310, CPE330, CPE400, RSTi-EP CPE 100, CPU320/CRU320, RXi
Successful exploitation of this vulnerability could cause the device to reboot and change its state, causing the device to become unavailable.
-
High
Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)
first Nov 17, 2017 -
HighICSA-18-116-01 1 CVE
Delta Electronics PMSoft
Successful exploitation of these vulnerabilities could cause the application to crash; stack-based buffer overflow conditions may allow arbitrary code execution.
-
HighICSA-18-114-02 1 CVE
Intel 2G Modem
Successful exploitation of this buffer overflow vulnerability may allow remote code execution.