901 results · Clear filters · Feed
-
Medium max 6.5ICSMA-21-019-01 1 CVE
Philips Interventional Workstations
Successful exploitation of this vulnerability makes it possible for someone within the hospital network to remotely shut down or restart the workstation. In the event the workstation is remotely shut down, physicians are still able to use diagnostic imaging f…
-
MediumICSMA-21-007-01 2 CVEs
Innokas Yhtymä Oy Vital Signs Monitor
Successful exploitation of these vulnerabilities could allow an attacker to modify communications between downstream devices or cause some features of the affected devices to become disabled.
-
Medium max 6.3ICSA-21-005-01 3 CVEs
Schneider Electric Web Server on Modicon M340
Successful exploitation of these vulnerabilities may allow write access and the execution of commands, which could result in data corruption or a web server crash.
-
Medium max 6.5
Siemens SIMATIC S7-300 and S7-400 CPUs (Update C)
Successful exploitation of this vulnerability could result in credential disclosure.
first Sep 8, 2020 -
MediumICSA-20-343-09 1 CVE
Siemens SIMATIC Controller Web Servers
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
MediumICSA-20-317-01 1 CVE
Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability could cause a denial-of-service condition for the affected products.
-
MediumICSMA-20-317-01 1 CVE
BD Alaris 8015 PC Unit and BD Alaris Systems Manager
Successful exploitation of this vulnerability could lead to a drop in the wireless capability of the Alaris PC Unit. In order to exploit this vulnerability, an attacker would need to gain access to the network associated with the affected devices and redirect…
-
MediumICSA-20-308-02 2 CVEs
NEXCOM NIO50
Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information and cause a denial-of-service condition due to improper input validation.
-
Medium
-
MediumICSA-20-266-02 2 CVEs
GE Reason S20 Ethernet Switch
Successful exploitation of these vulnerabilities could allow unauthorized accounts manipulation and allow for remote code execution.
-
Medium max 6.8ICSMA-20-261-01 5 CVEs
ICSMA-20-261-01_Philips Clinical Collaboration Platform
Northridge Hospital Medical Center reported these vulnerabilities to Philips.
-
Medium
-
MediumICSA-20-224-03 1 CVE
Tridium Niagara
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
Medium max 4.3ICSA-20-219-01 1 CVE
Trailer Power Line Communications
The National Motor Freight Traffic Association (NMFTA) and Assured Information Security (AIS) have released research detailing a vulnerability within trailer Power Line Communications (PLC) signals. Their research indicates it is possible to read PLC signals …
-
Medium max 5.3ICSMA-20-212-01 1 CVE
Philips DreamMapper
Successful exploitation of this vulnerability could allow an attacker access to the log file information containing descriptive error messages.
-
Mediumfirst Aug 13, 2019
-
Mediumfirst Nov 12, 2019
-
Medium
-
Medium max 6.8
Johnson Controls exacqVision (Update A)
Successful exploitation of this vulnerability could allow an attacker with administrative privileges to potentially download and run a malicious executable that could allow the execution of operating system commands on the system.
first Jun 18, 2020 -
Medium max 5.3
BD Alaris PCU (Update A)
Successful exploitation of this vulnerability could allow an attacker to cause a denial of service (DoS) on the target system and could cause the BD Alaris PCU to disconnect from the facility 's wireless network.
first Jun 18, 2020 -
MediumICSA-20-175-02 2 CVEs
Honeywell ControlEdge PLC and RTU
Successful exploitation of these vulnerabilities could allow an attacker to obtain passwords and session tokens.
-
MediumICSMA-20-170-05 5 CVEs
BIOTRONIK CardioMessenger II
Successful exploitation of these vulnerabilities could allow an attacker with physical access to the CardioMessenger to obtain sensitive data, obtain transmitted medical data from implanted cardiac devices with the implant 's serial number or impact Cardio Me…
-
Medium
Philips PageWriter TC10, TC20, TC30, TC50, and TC70 Cardiographs (Update A)
Successful exploitation of these vulnerabilities could allow buffer overflows, or allow an attacker to access and modify settings on the device.
first Aug 16, 2018 -
MediumICSA-20-119-01 2 CVEs
LCDS LAquis SCADA
Successful exploitation of these vulnerabilities could allow unauthorized attackers to view sensitive information and create files in arbitrary locations.
-
MediumICSA-20-098-02 1 CVE
GE Digital CIMPLICITY
Successful exploitation of this vulnerability could allow an adversary to modify the systemwide CIMPLICITY configuration, leading to the arbitrary execution of code.
-
MediumICSA-20-098-03 1 CVE
HMS Networks eWON Flexy and Cosy
Successful exploitation of this vulnerability could initiate a password change.
-
Medium max 4.3ICSA-20-098-05 1 CVE
ICSA-20-098-05_KUKA.Sim Pro
Federico Maggi of Trend Micro reported this vulnerability to CISA.
-
MediumICSA-20-091-02 1 CVE
Mitsubishi Electric MELSEC
Successful exploitation of this vulnerability may render the device unresponsive.
-
MediumICSMA-20-091-01 1 CVE
BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System
The affected BD medical devices utilize a method of software application implementation called kiosk mode. This kiosk mode is vulnerable to local breakouts, which could allow an attacker with physical access to bypass kiosk mode and view and/or modify sensiti…
-
MediumICSA-20-079-01 1 CVE
Systech NDS-5000 Terminal Server
Successful exploitation of this vulnerability could allow information disclosure, limit system availability, and may allow remote code execution.
-
Medium max 6.7ICSA-20-072-03 1 CVE
Rockwell Automation Allen-Bradley Stratix 5950
Successful exploitation of this vulnerability could allow an attacker to write a modified image to the component.
-
Medium
Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B)
Successful exploitation of these vulnerabilities may allow an attacker to modify network traffic or impact the perceived integrity of the user program stored on the CPU.
first Dec 10, 2019 -
Medium
-
MediumICSA-20-049-01 1 CVE
Honeywell INNCOM INNControl 3
Successful exploitation of this vulnerability could allow an attacker to escalate user privileges within the INNControl application.
-
Medium
-
Medium
-
Mediumfirst Feb 22, 2018
-
Medium
Siemens SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP OpenController (Update A)
first Oct 9, 2018 -
Mediumfirst Nov 13, 2018
-
Mediumfirst Nov 13, 2018