901 results · Clear filters · Feed
-
MediumICSA-22-167-10 1 CVE
Siemens SCALANCE XM-400 and XR-500
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to …
-
MediumICSA-22-167-15 1 CVE
Siemens Teamcenter Active Workspace
Teamcenter Active Workspace is affected by a cross site scripting vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Medium max 5.7ICSMA-22-151-02 1 CVE
BD Synapsys
Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information. This includes electronic protected health information (ePHI), protected health information (PHI), and personally identifiable information…
-
Medium max 6.8ICSA-22-144-01 1 CVE
Rockwell Automation Logix Controllers
Successful exploitation of this vulnerability may allow an unauthorized user to send malicious messages to the targeted device, which could lead to a denial-of-service condition.
-
Medium max 5.8ICSA-22-144-02 1 CVE
Matrikon OPC Server
Successful exploitation of this vulnerability could allow an attacker to achieve remote command execution with system-level privileges through the support of the IPersistFile COM interface.
-
Medium max 6.8ICSA-22-137-01 1 CVE
Circutor COMPACT DC-S BASIC
Successful exploitation of this vulnerability could cause a buffer overflow condition resulting in remote code execution.
-
Medium
Siemens VxWorks-based Industrial Products (Update C)
Successful exploitation of this vulnerability could allow an attacker to cause a heap-based buffer overflow.
first Jul 13, 2021 -
Medium max 5.3
Mitsubishi Electric GT25-WLAN
There are multiple vulnerabilities due to design flaws in the frame fragmentation functionality and the frame aggregation functionality in the Wireless Communication Standards IEEE 802.11. These vulnerabilities could allow an attacker to steal communication c…
first Apr 12, 2022 -
Medium max 5.2ICSA-22-130-02 1 CVE
Eaton Intelligent Power Protector
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code using untrusted data.
-
Medium max 5.7ICSA-22-130-03 3 CVEs
Eaton Intelligent Power Manager Infrastructure
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code using untrusted data.
-
Medium max 5.2ICSA-22-130-04 1 CVE
Eaton Intelligent Power Manager
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code using untrusted data.
-
Medium max 5.3ICSA-22-111-02 1 CVE
Johnson Controls Metasys SCT Pro
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to identify and forge requests to internal systems via a specially crafted request, allowing an attacker to determine whether specific files or paths exist.
-
Medium max 6.2ICSA-22-109-01 2 CVEs
Interlogix Hills ComNav
Successful exploitation of these vulnerabilities could allow an attacker to log in to modify the system.
-
Medium max 5.2ICSA-22-109-02 1 CVE
Automated Logic WebCTRL
Successful exploitation of this vulnerability could allow an attacker to redirect the user to a malicious webpage or to download a malicious file.
-
Medium max 6.1ICSA-22-109-03 5 CVEs
FANUC ROBOGUIDE Simulation Platform
Successful exploitation of these vulnerabilities could cause a denial-of-service condition, allow for remote code execution, or provide unauthorized privilege escalation.
-
Medium max 5.5ICSA-22-104-01 1 CVE
Delta Electronics DMARS
Successful exploitation of this vulnerability could allow an attacker to gain sensitive information.
-
Medium max 6.8ICSA-22-102-03 1 CVE
Inductive Automation Ignition
Successful exploitation of this vulnerability could allow an authenticated attacker with network access to execute code by uploading a malicious zip file.
-
Medium max 6.5ICSMA-22-095-01 1 CVE
LifePoint Informatics Patient Portal
Successful exploitation of this vulnerability could disclose sensitive information, including HIPAA-protected PII.
-
Medium max 5.5ICSA-22-090-01 1 CVE
Schneider Electric SCADAPack Workbench
Successful exploitation of this vulnerability could result from exfiltration of data from local files to a remote system controlled by an attacker.
-
Medium max 5.5ICSA-22-088-01 1 CVE
Rockwell Automation ISaGRAF
Successful exploitation of this vulnerability could allow an attacker to pass local file data to a remote web server, leading to loss of confidentiality.
-
Medium max 4.2ICSA-22-088-03 4 CVEs
Hitachi Energy LinkOne WebView
Successful exploitation of these vulnerabilities could allow an attacker to modify a victim 's system files or information, disclose application full path, disclose sensitive information to an unauthorized actor, and launch a common web attack.
-
Medium max 5.5ICSA-22-088-04 1 CVE
Modbus Tools Modbus Slave
Successful exploitation of this vulnerability could crash the application when inputting a registration key.
-
Medium max 6.5ICSMA-22-088-01 1 CVE
Philips e-Alert
Successful exploitation of this vulnerability may allow an unauthorized actor to remotely shutdown the system, if on the healthcare facilities network.
-
Medium
Siemens Climatix POL909 (Update A)
Successful exploitation of this vulnerability could allow sensitive data disclosure or modification of data in transit.
first Nov 11, 2021 -
Medium max 5.6ICSA-22-053-03 2 CVEs
WIN-911 2021
Successful exploitation of these vulnerabilities could allow an attacker to leverage the misconfigured privileges to the installed directory and achieve code execution in the application 's context and permissions.
-
Medium
Mitsubishi Electric GOT and Tension Controller (Update A)
Successful exploitation of this vulnerability may be able to stop the communication function of the products, requiring a reset to regain functionality.
first May 11, 2021 -
Medium max 5.3ICSA-22-011-01 1 CVE
Johnson Controls VideoEdge
Running a vulnerability scanner against VideoEdge NVRs can cause some functions to stop.
-
Medium max 8.0
Schneider Electric Rack PDU (Update A)
Successful exploitation of this vulnerability could allow an attacker to access the system with elevated privileges.
first Dec 14, 2021 -
Medium max 6.1ICSA-21-350-02 1 CVE
Delta Electronics CNCSoft
Successful exploitation of this vulnerability could allow information disclosure or an application crash.
-
MediumICSA-21-350-04 1 CVE
Mitsubishi Electric GX Works2
Successful exploitation of this vulnerability may cause a denial-of-service condition in GX Works2.
-
MediumICSA-21-350-05 2 CVEs
Mitsubishi Electric FA Engineering Software (Update B)
Successful exploitation of these vulnerabilities may cause a denial-of-service condition.
-
Medium
Hillrom Medical Device Management (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption and remotely execute arbitrary code.
first Jun 1, 2021 -
Medium max 6.7ICSA-21-336-07 1 CVE
Hitachi Energy PCM600 Update Manager
Successful exploitation of this vulnerability could allow an attacker to bypass the certificate validation and install an untrusted software package.
-
Medium max 6.5ICSMA-21-322-02 3 CVEs
Philips Patient Information Center iX (PIC iX) and Efficia CM Series
Successful exploitation of these vulnerabilities may allow an attacker unauthorized access to data (including patient data) and create a denial of service resulting in temporary interruption of viewing physiological data at the central station. Exploitation d…
-
MediumICSA-21-313-01 6 CVEs
Schneider Electric NMC cards and Embedded Devices
Successful exploitation of these vulnerabilities may allow data disclosure or cross-site scripting, which could result in an execution of malicious web code or a loss of device functionality.
-
Medium max 6.5ICSA-21-313-05 2 CVEs
OSIsoft PI Vision
Successful exploitation of these vulnerabilities could lead to information disclosure, modification, or deletion.
-
Medium max 6.9ICSA-21-313-06 1 CVE
OSIsoft PI Web API
Successful exploitation of this vulnerability could allow a remote authenticated attacker access to sensitive information or deliver false information.
-
Medium max 6.9
Sensormatic Electronics VideoEdge
Successful exploitation of this vulnerability could allow the execution of untrusted code when viewing the VideoEdge admin graphical user interface.
-
Medium
Mitsubishi Electric MELSEC iQ-R Series C Controller Module (Update B)
Successful exploitation of this vulnerability could prevent the module from starting up. If successfully exploited, a system reset would be required for recovery.
first Oct 7, 2021 -
Medium max 6.3ICSA-21-292-02 1 CVE
Trane HVAC Systems Controls
Successful exploitation of this vulnerability could allow an attacker to redirect a user to a malicious webpage and steal the user 's cookie.