901 results · Clear filters · Feed
-
Mediumfirst Jan 8, 2019
-
MediumICSA-19-043-01 1 CVE
OSIsoft PI Vision
Successful exploitation of this vulnerability could allow an attacker to read and modify the contents of the PI Vision web page and data related to the PI Vision application in the victim 's browser.
-
Medium
BD FACSLyric (Update A)
Successful exploitation of this vulnerability may allow an attacker to gain unauthorized access to administrative level privileges on a workstation, which could allow arbitrary execution of commands. This vulnerability does not impact BD FACSLyric flow cytome…
first Jan 29, 2019 -
MediumICSA-19-036-02 1 CVE
Rockwell Automation EtherNet/IP Web Server Modules
Successful exploitation of this vulnerability could allow a remote attacker to deny communication with Simple Network Management Protocol (SNMP) service.
-
MediumICSMA-19-029-01 1 CVE
Stryker Medical Beds
Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.
-
MediumICSA-19-022-01 1 CVE
Johnson Controls Facility Explorer
Successful exploitation of these vulnerabilities could allow an attacker to read, write, and delete sensitive files to gain administrator privileges in the Facility Explorer system.
-
Medium
ICSA-18-333-02_Tridium Niagara Enterprise Security, Niagara AX, and Niagara 4
Daniel Santos and Elisa Costante of SecurityMatters reported the vulnerability to Tridium.
first Nov 29, 2018 -
MediumICSA-19-010-02 1 CVE
Omron CX-One CX-Protocol
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
MediumICSA-18-354-01 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability could crash the device being accessed, allow the attacker to read confidential information, and may allow an attacker to remotely execute arbitrary code.
-
Medium
-
Medium
Philips Alice 6 Vulnerabilities (Update B)
Successful exploitation may allow an attacker to gain visibility to usernames/passwords and personal data. Insufficient encryption and cryptographic integrity checks can lead to altered, corrupted, or disclosed sensitive data. Disclosure of personal data can …
first Mar 27, 2018 -
Medium max 4.6ICSMA-18-347-01 1 CVE
Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers
As part of the intended functionality of this device, it may store protected health information (PHI) or personally identifiable information (PII). Successful exploitation of the vulnerability may allow an attacker with physical access to an affected programm…
-
MediumICSA-18-338-01 2 CVEs
Omron CX-One
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
MediumICSA-18-338-02 1 CVE
SpiderControl SCADA WebServer
Successful exploitation of this vulnerability could allow an attacker to execute JavaScript on the victim 's browser.
-
MediumICSA-18-333-01 2 CVEs
INVT Electric VT-Designer
Successful exploitation of these vulnerabilities could cause the program to crash and may allow remote code execution.
-
Medium
ICSA-18-317-01 Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC
first Jun 26, 2018 -
Medium
-
Medium
-
MediumICSMA-18-312-01 1 CVE
Philips iSite and IntelliSpace PACS
Successful exploitation of this vulnerability may allow an attacker with local network access to impact confidentiality, integrity, and availability of a component of the system.
-
Medium
Rockwell Automation Stratix 5100 (Update A)
Successful exploitation of this vulnerability may allow the attacker to operate as a man-in-the-middle between the device and the wireless network.
first Oct 26, 2017 -
MediumICSA-18-298-01 1 CVE
GEOVAP Reliance 4 SCADA/HMI
Successful exploitation of this vulnerability could allow an unauthenticated attacker to use HTTP proxy to inject arbitrary Javascript in a specially crafted HTTP request that may reflect it back in the HTTP response.
-
Medium
BD Kiestra and InoquIA Systems (Update A)
Successful exploitation of these vulnerabilities may lead to loss or corruption of data.
first May 22, 2018 -
Medium
Philips IntelliVue Information Center iX (Update B)
Successful exploitation of this vulnerability may result in a denial of service, the operating system will become unresponsive due to the network attack, which will affect the applications ability to meet the intended use.
first Aug 21, 2018 -
MediumICSA-18-284-03 2 CVEs
Delta Industrial Automation TPEditor
Successful exploitation of these vulnerabilities could crash the accessed device, resulting in a buffer overflow condition that may allow remote code execution.
-
Medium
Siemens SIMATIC WinCC OA Operator IOS App (Update A)
Successful exploitation of this vulnerability could allow an attacker with physical access to read sensitive data located in the app 's directory.
first Apr 19, 2018 -
MediumICSA-18-282-01 1 CVE
GE iFix
Successful exploitation of this vulnerability could cause a buffer overflow condition.
-
Medium max 7.5
-
Medium max 4.3ICSMA-18-277-02 1 CVE
Change Healthcare PeerVue Web Server
Successful exploitation of this vulnerability could allow an attacker to obtain technical information about the PeerVue Web Server, allowing an attacker to target a system for attack.
-
MediumICSA-18-275-01 1 CVE
Delta Electronics ISPSoft
Successful exploitation of this vulnerability could allow an attacker to execute code under the context of the application.
-
MediumICSA-18-270-04 1 CVE
Delta Electronics Delta Industrial Automation PMSoft
Successful exploitation of this vulnerability could allow an attacker to read confidential information.
-
MediumICSA-18-261-01 1 CVE
WECON PLC Editor
Successful exploitation of this vulnerability could result in unauthorized code execution within the current process.
-
Medium max 4.8ICSA-18-240-02 1 CVE
Schneider Electric Modicon M221
Successful exploitation of this vulnerability could allow an unauthorized user to remotely reboot the device.
-
MediumICSMA-18-226-01 1 CVE
Philips IntelliSpace Cardiovascular Vulnerabilities
Successful exploitation of these vulnerabilities could allow an attacker with local access and users privileges to the ISCV/Xcelera server to escalate privileges on the ISCV/Xcelera server and execute arbitrary code.
-
Medium max 4.3ICSA-18-212-02 1 CVE
Johnson Controls Metasys and BCPro
Successful exploitation of this vulnerability could allow an attacker to obtain technical information about the Metasys or BCPro server, allowing an attacker to target a system for attack.
-
Medium max 6.1ICSA-18-212-04 1 CVE
AVEVA InTouch Access Anywhere
Successful exploitation of this vulnerability may allow attackers to obtain sensitive information and/or execute Javascript or HTML code.
-
Medium
AutomationDirect CLICK, C-More, C-More Micro, Do-more Designer, GS Drives, SL-Soft SOLO, DirectSOFT (Update B)
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the system.
first Nov 9, 2017 -
Medium max 6.3
Medtronic N'Vision Clinician Programmer (Update A)
As part of the normal functionality of this device, the N 'Vision Clinician Programmer may store Personal Health Information (PHI) or Personal Identifying Information (PII). Successful exploitation of these vulnerabilities may allow an attacker with physical …
first May 17, 2018 -
MediumICSA-18-193-01 1 CVE
Eaton 9000X Drive
Successful exploitation of this vulnerability may allow remote code execution.
-
Medium max 6.4ICSMA-18-179-01 2 CVEs
Medtronic MyCareLink Patient Monitor
If exploited, these vulnerabilities may allow privileged access to the monitor 's operating system. However, physical access to the MyCareLink monitor is required. Additionally, these vulnerabilities may allow a MyCareLink monitor, when operated within close …
-
Mediumfirst Oct 18, 2017