1,944 results · Clear filters · Feed
-
High
ICSA-18-060-01_Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A)
Siemens ProductCERT reported the vulnerabilities to NCCIC.
first Mar 1, 2018 -
High max 8.8
ICSA-18-107-05_Rockwell Automation Stratix Industrial Managed Ethernet Switch
Rockwell Automation reported these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
-
HighICSMA-18-107-01 2 CVEs
Abbott Laboratories Defibrillator
Successful exploitation of these vulnerabilities may allow a nearby attacker to gain unauthorized access to an ICD to issue commands, change settings, or otherwise interfere with the intended function of the ICD.
-
HighICSA-18-095-02 1 CVE
Moxa MXview
Successful exploitation of this vulnerability could allow a remote attacker to access and read cryptographic private keys.
-
HighICSA-18-095-03 1 CVE
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
Successful exploitation of this vulnerability could cause the device an attacker is accessing to crash, resulting in a structured exception handler overflow condition, which may allow code execution.
-
High
-
HighICSA-18-072-02 3 CVEs
OSIsoft PI Data Archive
ATTENTION: Exploitable remotely/low skill level to exploit.
-
HighICSA-18-065-01 5 CVEs
Hirschmann Automation and Control GmbH Classic Platform Switches
ATTENTION: Exploitable remotely/high skill level is needed to exploit.
-
HighICSA-18-065-02 1 CVE
Schneider Electric SoMove Software and DTM Software Components
Vendor: Schneider Electric
-
HighICSA-18-058-02 3 CVEs
Delta Electronics WPLSoft
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-18-058-03 1 CVE
Emerson ControlWave Micro Process Automation Controller
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-18-046-04 1 CVE
Schneider Electric StruxureOn Gateway
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-18-044-02 1 CVE
Schneider Electric IGSS SCADA Software
ATTENTION: Locally exploitable/high skill level to exploit.
-
High
NXP Semiconductors MQX RTOS (Update A)
ATTENTION: Remotely exploitable/low skill level to exploit.
first Oct 12, 2017 -
HighICSA-18-032-01 1 CVE
Fuji Electric V-Server VPR
ATTENTION: Remotely exploitable/low skill level to exploit.
-
High
-
HighICSA-18-030-02 3 CVEs
Siemens TeleControl Server Basic
ATTENTION: Remotely exploitable/low skill level to exploit.
-
High
Advantech WebAccess (Update A)
ATTENTION: Remotely exploitable/low skill level to exploit.
first Jan 4, 2018 -
High
-
HighICSA-18-009-01 1 CVE
Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-17-355-02 3 CVEs
Schneider Electric Pelco VideoXpert Enterprise
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-17-353-02 1 CVE
PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol
ATTENTION: Low skill level is needed to exploit. Public exploits are available.
-
HighICSA-17-353-05 1 CVE
WECON Technology Co., Ltd. LeviStudio HMI Editor
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-17-341-02 1 CVE
Rockwell Automation FactoryTalk Alarms and Events
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-17-341-03 1 CVE
PHOENIX CONTACT FL COMSERVER, FL COM SERVER, and PSI-MODEM/ETH
ATTENTION: Remotely exploitable/low skill level to exploit.
-
High max 8.6ICSA-17-320-01 3 CVEs
Moxa NPort 5110, 5130, and 5150
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSMA-17-318-01 1 CVE
Philips IntelliSpace Cardiovascular System and Xcelera System Vulnerability
Philips reported a vulnerability in the Philips ' IntelliSpace Cardiovascular and Xcelera cardiac image and information management systems. Philips has produced updates that mitigate this vulnerability in the affected products.
-
HighICSA-17-306-02 2 CVEs
Advantech WebAccess
ATTENTION: Remotely exploitable/low skill level to exploit.
-
High
-
HighICSA-17-292-01 1 CVE
SpiderControl MicroBrowser
ATTENTION: Remotely exploitable/low skill level to exploit
-
HighICSA-17-285-01 5 CVEs
ProMinent MultiFLEX M10a Controller
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-17-285-02 1 CVE
WECON Technology Co., Ltd. LeviStudio HMI Editor
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-17-285-03 1 CVE
Envitech Ltd. EnviDAS Ultimate
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-17-283-01 1 CVE
LAVA Computer MFG Inc. Ether-Serial Link
ATTENTION: Low skill level to exploit.
-
HighICSA-17-264-02 1 CVE
Ctek, Inc. SkyRouter
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-17-264-03 1 CVE
Digium Asterisk GUI
ATTENTION: Remotely exploitable/low skill level to exploit.
-
High
-
HighICSA-17-255-01 1 CVE
mySCADA myPRO
ATTENTION: Low skill level to exploit. Public exploits are available.
-
HighICSA-17-250-02 1 CVE
PHOENIX CONTACT, Innominate Security Technologies mGuard Firmware
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSMA-17-250-01 1 CVE
i-SENS, Inc. SmartLog Diabetes Management Software
Independent researcher Mark Cross has identified an uncontrolled search path element vulnerability in i-SENS, Inc. SmartLog Diabetes Management Software. i-SENS has produced an update that mitigates this vulnerability. Mark Cross has tested the update to vali…