901 results · Clear filters · Feed
-
Medium max 4.3ICSA-21-285-01 1 CVE
Advantech WebAccess SCADA
Successful exploitation of this vulnerability could allow an attacker to access project names and paths.
-
Medium max 5.3
Medtronic MiniMed MMT-500/MMT-503 Remote Controllers (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to replay captured wireless communications and cause an insulin (bolus) delivery. This is only possible when non-default options are configured. Additionally, the pump will annunciate this…
first Aug 7, 2018 -
Medium max 6.9ICSMA-21-273-01 5 CVEs
Boston Scientific Zoom Latitude
Successful exploitation of these vulnerabilities may allow an attacker with physical access to the affected device to obtain patient protected health information (PHI), and/or compromise the integrity of the device. The affected device is not network connecte…
-
Medium max 6.3ICSA-21-250-02 1 CVE
Hitachi ABB Power Grids System Data Manager
Successful exploitation of this vulnerability could allow an attacker access to sensitive information.
-
MediumICSA-21-245-02 1 CVE
JTEKT TOYOPUC Products
Successful exploitation of this vulnerability could allow a remote attacker to deny Ethernet communications between affected devices without authorization.
-
Medium max 5.3ICSA-21-229-02 1 CVE
Advantech WebAccess/NMS
Successful exploitation of this vulnerability could lead to the exposure of resources or functionality and could result in sensitive information disclosure.
-
Medium max 6.1ICSA-21-229-03 3 CVEs
xArrow SCADA
Successful exploitation of these vulnerabilities could result in remote code execution.
-
Medium
Mitsubishi Electric GOT (Update A)
Successful exploitation of this vulnerability may allow an attacker to gain unauthorized access.
first Apr 22, 2021 -
MediumICSA-21-208-02 1 CVE
Mitsubishi Electric GOT2000 series and GT SoftGOT2000
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
MediumICSMA-21-196-01 4 CVEs
ICSMA-21-196-01_Ypsomed mylife
Julian Suleder, Linda Huischen, and Nils Emmerich of ERNW Research GmbH and Dr. Oliver Matula of Enno Rey Netzwerke GmbH (ERNW) reported these vulnerabilities to the Federal Office for Information Security (BSI, Germany), in the context of the BSI project Man…
-
MediumICSA-21-194-01 1 CVE
Schneider Electric C-Bus Toolkit
Successful exploitation of this vulnerability could allow an attacker to enable remote access to the system.
-
Medium max 5.3ICSA-21-180-01 1 CVE
Exacq Technologies exacqVision Web Service
Successful exploitation of this vulnerability could allow an attacker to send malicious requests on behalf of the victim.
-
Medium max 4.3ICSA-21-180-02 1 CVE
Exacq Technologies exacqVision Enterprise Manager
Successful exploitation of this vulnerability could allow an attacker to send malicious requests on behalf of the victim.
-
MediumICSA-21-180-03 1 CVE
Panasonic FPWIN Pro
Successful exploitation of this vulnerability could allow a remote attacker to retrieve sensitive information from the file system where affected software is installed.
-
MediumICSA-21-180-04 1 CVE
JTEKT TOYOPUC PLC
Successful exploitation of this vulnerability could crash the device being accessed.
-
Medium max 5.5ICSA-21-180-06 1 CVE
Claroty Secure Remote Access Site
Successful exploitation of this vulnerability enables an attacker with local (Linux) system access to bypass access controls for the central configuration file of the SRA Site software.
-
MediumICSA-21-173-04 1 CVE
CODESYS Control V2 Linux SysFile library
Successful exploitation of this vulnerability may allow the control programmer to call additional OS functions from the PLC logic utilizing the SysFile system library.
-
Medium max 6.6ICSA-21-159-03 1 CVE
AVEVA InTouch
Successful exploitation of this vulnerability could expose cleartext credentials from InTouch Runtime.
-
MediumICSA-21-159-05 1 CVE
Schneider Electric Modicon X80
Successful exploitation of this vulnerability may result in information disclosure to an unauthenticated remote user, which could result in an understanding of the network architecture.
-
MediumICSA-21-147-05 1 CVE
Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability may prevent legitimate clients from connecting to an affected product.
-
Medium max 5.9ICSA-21-145-02 1 CVE
Rockwell Automation Micro800 and MicroLogix 1400
Successful exploitation of this vulnerability may result in denial-of-service conditions, which may require a firmware flash to recover.
-
Medium
Siemens SIMARIS Configuration (Update A)
Successful exploitation of this vulnerability could allow an attacker to gain persistence or escalate privileges within the system.
first Feb 9, 2021 -
Medium max 6.2ICSA-21-119-02 1 CVE
Cassia Networks Access Controller
Successful exploitation of this vulnerability could allow an attacker to read any file from the Access Controller server.
-
Medium
Mitsubishi Electric MELSEC iQ-R Series (Update C)
Successful exploitation of this vulnerability could cause the Ethernet port to enter a denial-of-service condition.
first Jun 9, 2020 -
Medium max 6.3ICSA-21-110-01 1 CVE
Hitachi ABB Power Grids Ellipse APM
Successful exploitation of this vulnerability may allow an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim 's browser.
-
Medium max 5.8
Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers (Update A)
Successful exploitation of this vulnerability may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products.
first Mar 2, 2021 -
Medium max 5.3ICSA-21-077-01 1 CVE
Johnson Controls Exacq Technologies exacqVision
Successful exploitation of this vulnerability could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system.
-
Medium
BD Alaris 8015 PC Unit (Update B)
Successful exploitation of these vulnerabilities could allow an unauthorized user with physical access to the affected devices to access the host facility 's wireless network authentication credentials and other sensitive technical data, which may compromise …
first Jan 17, 2017 -
MediumICSA-21-075-01 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could allow an unauthorized user to steal a user 's cookie/session token or redirect an authorized user to a malicious webpage.
-
MediumICSA-21-075-03 1 CVE
Hitachi ABB Power Grids AFS Series
Successful exploitation of this vulnerability could cause a denial-of-service condition on one of the ports in a HSR ring.
-
Medium
-
Medium max 6.5
-
Medium max 7.0ICSA-21-063-02 7 CVEs
ICSA-21-063-02_Schneider Electric EcoStruxure Building Operation (EBO)
Luis Vázquez, Francisco Palma, and Diego León of Zerolynx in coordination with INCIBE and Alessandro Bosco, Luca Di Giuseppe, Alessandro Sabetta, and Massimiliano Brolli of TIM Security Red Team Research reported these vulnerabilities to Schneider Electric.
-
Medium max 5.5ICSA-21-061-01 2 CVEs
Hitachi ABB Power Grids Ellipse EAM
Successful exploitation of these vulnerabilities could allow an attacker to steal sensitive information, hijack a user 's session, or compromise authentication credentials.
-
MediumICSMA-21-047-01 3 CVEs
Hamilton-T1
Successful exploitation of these vulnerabilities could allow attackers with physical access to the device to obtain sensitive information or crash the device being accessed.
-
Mediumfirst Apr 14, 2020
-
MediumICSA-21-040-01 2 CVEs
GE Digital HMI/SCADA iFIX
Successful exploitation of these vulnerabilities could allow an attacker to escalate their privileges.
-
Medium
-
Medium
-
Medium max 5.8
Eaton EASYsoft (Update A)
Successful exploitation of these vulnerabilities could allow a local attacker to modify or crash the program.
first Jan 7, 2021