4,108 results · Feed
-
High max 7.5ICSA-23-206-02 1 CVE
Rockwell Automation ThinManager ThinServer
Successful exploitation of this vulnerability could allow a remote actor to leverage the privileges of the server's file system and read arbitrary files stored in it.
-
Critical max 9.4ICSA-23-206-03 1 CVE
Emerson ROC800 Series RTU and DL8000 Preset Controller
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition or gain unauthorized access to data or control of the device.
-
High max 8.3ICSA-23-206-04 1 CVE
Johnson Controls IQ Wifi 6
Successful exploitation of this vulnerability could allow an unauthorized user to gain account access by conducting a brute force authentication attack.
-
High max 7.5ICSA-23-229-04 2 CVEs
Walchem Intuition 9
Successful exploitation of these vulnerabilities could allow an attacker to download and export sensitive data, or grant an attacker direct login to a device.
-
High max 7.5ICSA-23-201-01 1 CVE
Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers
Successful exploitation of these vulnerabilities could allow an attacker unauthorized access to components, ability to execute arbitrary code, or ability to execute a denial-of-service.
-
High max 7.5ICSA-23-199-01 1 CVE
Rockwell Automation Kinetix 5700 DC Bus Power Supply
Successful exploitation of this vulnerability could result in a denial-of-service attack.
-
High max 7.8ICSA-23-199-02 2 CVEs
Keysight N6845A Geolocation Server
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, execute arbitrary code, or cause a denial-of-service condition.
-
Critical max 10.0ICSA-23-199-03 4 CVEs
Iagona ScrutisWeb
Successful exploitation of these vulnerabilities could allow an attacker to upload and execute arbitrary files.
-
High max 7.5ICSA-23-199-04 4 CVEs
Weintek Weincloud
Successful exploitation of these vulnerabilities could allow an attacker to utilize the JSON web token (JWT) to reset account passwords, use expired credentials, perform brute force attacks on credentials, or cause a denial-of-service condition.
-
Critical max 9.8ICSA-23-199-05 1 CVE
GeoVision GV-ADR2701
Successful exploitation of this vulnerability could allow an attacker to log in to the camera's web application.
-
Medium max 6.6ICSA-23-199-06 1 CVE
GE Digital CIMPLICITY
Successful exploitation of this vulnerability could allow an attacker to cause memory corruption issues resulting in unwanted behavior such as code execution.
-
High max 8.1ICSA-23-199-07 2 CVEs
WellinTech KingHistorian
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or send malicious data which can lead to a buffer overflow.
-
Medium max 6.3
Enphase Envoy
Successful exploitation of this vulnerability could allow an attacker to gain root access to the affected product.
first Jun 20, 2023 -
High max 8.8ICSA-23-194-05 1 CVE
Rockwell Automation PowerMonitor 1000
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution and potentially the complete loss of confidentiality, integrity, and availability of the product.
-
Critical max 9.8ICSA-23-194-06 9 CVEs
Honeywell Experion PKS, LX and PlantCruise
Successful exploitation of these vulnerabilities could cause a denial-of-service condition, allow privilege escalation or allow remote code execution.
-
Critical max 9.8ICSA-23-193-01 2 CVEs
Rockwell Automation Select Communication Modules
Successful exploitation of these vulnerabilities could allow malicious actors to gain remote access of the running memory of the module and perform malicious activity.
-
High max 7.5
Mitsubishi Electric MELSEC-F Series
Successful exploitation of this vulnerability could allow an attacker to login to the product by sending specially crafted packets.
first Jun 29, 2023 -
High max 7.8ICSA-23-192-03 3 CVEs
Panasonic Control FPWin Pro7
Successful exploitation of these vulnerabilities could result in information disclosure or remote code execution on affected installation.
-
Critical max 9.6ICSA-23-192-01 1 CVE
Rockwell Automation Enhanced HIM
Successful exploitation of this vulnerability could lead to sensitive information disclosure and full remote access to the affected products.
-
High max 7.5ICSA-23-192-02 1 CVE
Sensormatic Electronics iSTAR
Successful exploitation of this vulnerability could allow an unauthenticated user to login to iSTAR devices with administrator rights.
-
Critical max 9.8ICSA-23-187-01 9 CVEs
PiiGAB M-Bus
Successful exploitation of these vulnerabilities could crash allow an attacker to inject arbitrary commands, steal passwords, or trick valid users into executing malicious commands.
-
High max 7.2ICSA-23-187-02 1 CVE
ABUS TVIP
Successful exploitation of this vulnerability could allow arbitrary file reads or remote code execution.
-
Critical max 9.8ICSA-23-180-01 3 CVEs
Delta Electronics InfraSuite Device Master
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or remotely execute arbitrary code.
-
High max 7.8ICSA-23-180-02 1 CVE
Schneider Electric EcoStruxure Operator Terminal Expert
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code and gain access to sensitive information on the machine.
-
High max 7.2ICSA-23-180-03 6 CVEs
Ovarro TBox RTUs
Successful exploitation of these vulnerabilities could result in sensitive system information being exposed andprivilege escalation.
-
Critical max 9.8ICSMA-23-180-01 1 CVE
Medtronic Paceart Optima System
Successful exploitation of this vulnerability could result in remote code execution or a denial-of-service condition impacting a healthcare delivery organization's Paceart Optima system.
-
Medium max 4.0ICSA-23-178-01 1 CVE
Hitachi Energy FOXMAN-UN and UNEM Products
Successful exploitation of this vulnerability could permit an attacker to access sensitive information.
-
MediumICSA-23-173-03 1 CVE
SpiderControl SCADAWebServer
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
Critical max 9.8
Econolite EOS (Update A)
This updated advisory is a follow-up to the original advisory titled ICSA-23-026-02 Econolite EOS that was published January 26, 2023.
first Jan 26, 2023 -
High max 7.5
Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could allow an unauthenticated malicious actor to login to a file transfer protocol (FTP) server or web server by obtaining plaintext credentials stored in project files.
first Mar 2, 2023 -
High max 8.6ICSA-23-171-02 1 CVE
Enphase Installer Toolkit Android App
Successful exploitation of this vulnerability could allow sensitive information to be obtained by an attacker using hard-coded credentials.
-
Critical max 9.8ICSA-23-173-02 2 CVEs
Advantech R-SeeNet
Successful exploitation of these vulnerabilities could allow an attacker to authenticate as a valid user or access files on the system.
-
Medium max 6.5ICSA-23-166-01 2 CVEs
SUBNET PowerSYSTEM Center
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious scripts or perform a denial-of-service type attack.
-
Critical max 9.8ICSA-23-166-02 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could lead to an attacker gaining remote file system access and the achieving remote command execution.
-
Critical max 9.8
Siemens SINAMICS Medium Voltage Products
SINAMICS PERFECT HARMONY GH180 is affected by multiple vulnerabilities in the integrated SCALANCE S615 device, as documented in SSA-419740 ( https://cert-portal.siemens.com/productcert/html/ssa-419740.html). Siemens recommends to update the firmware of the in…
first Jun 13, 2023 -
Medium max 5.5ICSA-23-164-01 1 CVE
Datalogics Library Third-Party
Successful exploitation of this vulnerability could allow an attacker to crash the device.
-
High max 7.3ICSA-23-164-02 3 CVEs
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of these vulnerabilities could allow an attacker to disclose information, load malicious configuration files, or elevate privileges from a user to an administrator.
-
HighICSA-23-164-03 1 CVE
Rockwell Automation FactoryTalk Edge Gateway
Successful exploitation of this vulnerability could allow a local user to cause the program to crash, causing a denial of service.
-
High max 7.5ICSA-23-164-04 1 CVE
Rockwell Automation FactoryTalk Transaction Manager
Successful exploitation of this vulnerability could cause the application to crash or experience a high CPU or memory usage condition, causing intermittent application functionality issues. The user would need to restart the application to recover from the de…
-
Low max 3.9ICSA-23-166-05 1 CVE
Siemens SIMATIC WinCC
Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement stat…