74 results · Clear filters · Feed
-
Low
Siemens Mendix
When querying the database, it is possible to sort the results using a protected field. With this an authenticated attacker could extract information about the contents of a protected field. Siemens has released updates for the affected products and recommend…
first Apr 12, 2022 -
Low max 3.7
Siemens TeleControl Server Basic
TeleControl Server Basic before V3.1.2.2 contains a Improper Handling of Length Parameter Inconsistency Vulnerability that could allow an attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a denial of service co…
first Apr 16, 2025 -
Low max 3.1ICSA-24-184-01 1 CVE
Johnson Controls Kantech Door Controllers
Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information.
-
Low max 3.3ICSA-24-165-03 1 CVE
Siemens TIA Administrator
TIA Administrator creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process. Siemens has released a new version for TIA Administrator and recommends to updat…
-
Low max 6.5ICSA-24-158-03 1 CVE
Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch
Successful exploitation of this vulnerability could allow an attacker to cause a temporary denial-of service (DoS) condition in the web service on the product.
-
Low max 3.3ICSA-24-107-04 1 CVE
RoboDK RoboDK
Successful exploitation of this vulnerability could result in an attacker crashing the program through heap-based buffer overflow.
-
Low max 2.5ICSA-23-331-03 2 CVEs
Mitsubishi Electric GX Works2
Successful exploitation of these vulnerabilities could allow a Denial-of-service (DoS) due to improper input validation in the simulation function of GX Works2 by sending specially crafted packets.
-
Low max 2.7ICSA-23-325-01 1 CVE
WAGO PFC200 Series
Successful exploitation of this vulnerability could allow an attacker with administrative privileges can access sensitive files in an unintended, undocumented way.
-
Low max 3.3ICSA-23-236-04 1 CVE
CODESYS Development System
Successful exploitation of this vulnerability could provide a local attacker with account information.
-
Low max 3.9ICSA-23-166-05 1 CVE
Siemens SIMATIC WinCC
Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement stat…
-
Low max 2.2ICSA-23-068-04 1 CVE
Step Tools Third-Party
Successful exploitation of this vulnerability could allow an attacker to deny application usage when reading a specially constructed file.
-
Low max 3.9ICSA-23-026-07 1 CVE
Landis+Gyr E850
Successful exploitation of this vulnerability could cause a denial-of-service condition for the end user that the cookie was modified for.
-
Low max 3.3
Delta Electronics DOPSoft (Update A)
Successful exploitation of this vulnerability could allow an attacker to gain sensitive information.
first Sep 1, 2022 -
Low max 2.6ICSMA-22-006-01 1 CVE
Philips Engage Software
Successful exploitation of this vulnerability may allow improper viewing (read-only) of business contact information.
-
LowICSA-21-336-01 1 CVE
Schneider Electric SESU
Successful exploitation of this vulnerability could cause unintended connection from an internal network to an external network.
-
Low max 3.7ICSMA-21-175-01 1 CVE
Philips Interoperability Solution XDS
Successful exploitation of this vulnerability could allow an attacker to read the LDAP system credentials by gaining access to the network channel used for communication. This risk applies to configurations using LDAP via TLS and where the domain controller r…
-
Low max 2.4ICSMA-21-084-01 1 CVE
Philips Gemini PET/CT Family
Successful exploitation of this vulnerability involving removable media could allow access to sensitive information (including patient information).
-
Lowfirst Aug 11, 2020
-
Low max 2.8ICSA-20-273-02 1 CVE
Yokogawa WideField3
Successful exploitation of this vulnerability could terminate the program abnormally.
-
LowICSA-20-254-03 1 CVE
HMS Networks Ewon Flexy and Cosy
Successful exploitation of this vulnerability could allow attackers to retrieve limited confidential information.
-
Low
-
Low max 3.8ICSA-20-238-02 1 CVE
Emerson OpenEnterprise
Successful exploitation of this vulnerability could allow an attacker access to credentials held by OpenEnterprise used for accessing field devices and external systems.
-
Low max 2.1ICSMA-20-233-01 1 CVE
Philips SureSigns VS4
Successful exploitation of these vulnerabilities could allow an attacker access to administrative controls and system configurations, which could allow changes to system configuration items causing patient data to be sent to a remote destination.
-
LowICSA-20-191-02 1 CVE
Rockwell Automation Logix Designer Studio 5000
Successful exploitation of this vulnerability could allow an unauthenticated attacker to craft a malicious file, which when parsed, could lead to some information disclosure of hostnames or other resources from the program.
-
Low max 3.6ICSMA-20-177-01 1 CVE
Philips Ultrasound Systems
Successful exploitation of this vulnerability may allow a non-authenticated attacker to view or modify information.
-
Low max 2.0ICSMA-20-163-01 1 CVE
Philips IntelliBridge Enterprise IBE
Successful exploitation of this vulnerability could allow an attacker to access credentials to the hospital 's clinical information systems (EMR).
-
LowICSMA-19-241-02 1 CVE
Philips HDI 4000 Ultrasound
Successful exploitation of this vulnerability could lead to exposure of ultrasound images (breaches of confidentiality) and compromised image integrity. The vulnerability does not affect patient safety or systems operations (availability).
-
LowICSMA-19-192-01 1 CVE
Philips Holter 2010 Plus
Successful exploitation of this vulnerability under certain conditions can lead to a product feature escalation.
-
LowICSA-19-183-02 1 CVE
Quest KACE Systems Management Appliance
Successful exploitation of this vulnerability could allow an administrative user unintentional access to the underlying operating system of the device.
-
LowICSA-19-136-02 1 CVE
Fuji Electric Alpha7 PC Loader
Successful exploitation of this vulnerability could crash the device.
-
LowICSA-19-010-03 1 CVE
Pilz PNOZmulti Configurator
Successful exploitation of this vulnerability could allow sensitive data to be read from the system.
-
LowICSMA-18-340-01 1 CVE
Philips HealthSuite Health Android App
Successful exploitation of this vulnerability may allow an attacker with physical access to impact confidentiality and integrity of the product.
-
LowICSMA-18-277-01 1 CVE
Carestream Vue RIS
An attacker with access to the network of the affected system can passively read traffic.
-
Low
Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities (Update A)
This updated advisory is a follow-up to the original advisory titled ICSMA-17-250-02 Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities that was published September 7, 2017, on the NCCIC/ICS-CERT web site.
first Sep 7, 2017