4,108 results · Feed
-
High max 7.2ICSA-23-166-13 3 CVEs
Siemens SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by multiple vulnerabilities such as authenticated remote command injection, exposure of serial UART interface, and hard coded credentials (for UART login). Siemens has released updates for the…
-
Medium max 9.4ICSA-23-159-01 3 CVEs
Atlas Copco Power Focus 6000
Successful exploitation of these vulnerabilities could cause a loss of sensitive information and the takeover of a user's active session.
-
High max 8.3ICSA-23-159-02 1 CVE
Sensormatic Electronics Illustra Pro Gen 4
Successful exploitation of this vulnerability could allow an attacker to compromise device credentials over a long period of sustained attack.
-
Critical max 9.8
Delta Electronics DIAEnergie
This updated advisory is a follow-up to the original advisory titled �ICSA-22-256-03 Delta Industrial Automation DIAEnergie� that was published September 19, 2022, on the ICS webpage on cisa.gov/ICS.
first Sep 19, 2022 -
High max 7.2ICSA-23-152-01 3 CVEs
Advantech WebAccess/SCADA
Successful exploitation of these vulnerabilities could allow an attacker to arbitrarily overwrite files resulting in remote code execution.
-
High max 7.3ICSA-23-152-02 1 CVE
HID Global SAFE
Successful exploitation of this vulnerability could result in exposure of personal data or create a denial-of-service condition.
-
High max 7.8ICSA-23-143-04 10 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and to execute arbitrary code.
-
Critical max 9.8ICSA-23-145-01 2 CVEs
Moxa MXsecurity Series
Successful exploitation of these vulnerabilities could allow an unauthorized user to bypass authentication or to execute arbitrary commands on the device.
-
High max 8.1ICSA-23-143-01 2 CVEs
Hitachi Energy’s AFS65x, AFS67x, AFR67x and AFF66x Products
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or lead to a Denial-of-Service (DoS).
-
High max 7.3ICSA-23-150-01 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could allow an attacker full control over the SCADA (supervisory control and data acquisition) server.
-
Critical max 10.0ICSA-23-138-04 2 CVEs
Johnson Controls OpenBlue Enterprise Manager Data Collector
Successful exploitation of these vulnerabilities could allow an attacker, under certain circumstances, to make application programming interface (API) calls to the OpenBlue Enterprise Manager Data Collector, which do not require authentication and may expose …
-
MediumICSA-23-138-03 1 CVE
Hitachi Energy’s MicroSCADA Pro/X SYS600 Products
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected product.
-
High max 7.0ICSA-23-136-02 10 CVEs
Rockwell ArmorStart
Successful exploitation of these vulnerabilities could allow a malicious user to view and modify sensitive data or make the web page unavailable.
-
High max 7.5ICSA-23-138-01 1 CVE
Carlo Gavazzi Powersoft
Successful exploitation of this vulnerability could allow an attacker to access and retrieve any file from the server.
-
High max 7.1ICSA-23-136-03 1 CVE
Rockwell Automation FactoryTalk Vantagepoint
Successful exploitation of this vulnerability could allow an attacker to impersonate an existing user or execute a cross site request forgery attack.
-
High max 8.0ICSA-23-131-13 6 CVEs
PTC Vuforia Studio
Successful exploitation of these vulnerabilities could allow an attacker to view credentials, perform a cross-site request forgery attack, resend requests, or upload or delete arbitrary files.
-
Critical max 9.8ICSA-23-131-12 1 CVE
SDG PnPSCADA
Successful exploitation of this vulnerability could allow an attacker to interact with the database and retrieve critical data.
-
High max 7.8ICSA-23-131-10 3 CVEs
Rockwell Automation Arena Simulation Software
Successful exploitation of these vulnerabilities could allow a malicious user to commit unauthorized arbitrary code to the software using a memory buffer overflow.
-
Critical max 9.4ICSA-23-131-09 1 CVE
Rockwell Automation Kinetix 5500
Successful exploitation of this vulnerability could create a denial-of-service condition or allow attackers unauthorized access to the device.
-
CriticalICSA-23-131-14 2 CVEs
Rockwell Automation PanelView 800
Successful exploitation of these vulnerabilities could allow remote code execution.
-
High max 7.5ICSA-23-131-15 1 CVE
Rockwell Automation ThinManager
Successful exploitation of this vulnerability could allow an attacker to decrypt traffic sent between the client and server application programming interface (API), resulting in unauthorized access to information.
-
Critical max 9.0ICSA-23-131-08 8 CVEs
Teltonika Remote Management System and RUT Model Routers
Successful exploitation of these vulnerabilities could expose sensitive device information and device credentials, enable remote code execution, expose connected devices managed on the network, and allow impersonation of legitimate devices.
-
High max 8.4ICSA-23-131-07 2 CVEs
Sierra Wireless AirVantage
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute code or obtain unauthorized access to the product.
-
Critical max 6.5ICSA-23-129-02 8 CVEs
Hitachi Energy MSM
Successful exploitation of these vulnerabilities could allow an attacker to obtain user access credentials of the MSM web interface or cause a denial-of-service condition.
-
High max 8.4ICSA-23-131-11 2 CVEs
BirdDog Cameras & Encoders
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute code or obtain unauthorized access to the product.
-
Medium max 6.5
Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)
Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 ac…
first Mar 20, 2018 -
High max 8.2
Siemens S7-400 CPUs (Update B)
Two vulnerabilities have been identified in the SIMATIC S7-400 CPU family that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerabilities, an attacker must have access to the affected devices on port 102/tcp via Et…
first Nov 13, 2018 -
Critical max 9.9ICSA-23-131-03 2 CVEs
Siemens Siveillance
Both the Event Server and the Management Server components of Siveillance Video deserialize data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system. Siemens has released updates for the aff…
-
Critical max 9.8
Dataprobe iBoot-PDU
This updated advisory is a follow-up to the original advisory titled ICSA-22-263-03 Dataprobe iBoot-PDU that was published September 20, 2022, on the ICS webpage on cisa.gov/ICS.
first Sep 20, 2022 -
High max 6.8ICSA-23-122-01 9 CVEs
Mitsubishi Electric Factory Automation Products
Successful exploitation of these vulnerabilities could allow a malicious attacker to escalate privileges, disclose parameter information in the affected products, and cause a denial-of-service condition.
-
MediumICSA-23-115-02 1 CVE
Scada-LTS Third Party Component
Successful exploitation of this vulnerability could allow loss of sensitive information and execution of arbitrary code.
-
Critical max 10.0ICSMA-23-117-01 2 CVEs
Illumina Universal Copy Service
Successful exploitation of these vulnerabilities could allow an attacker to take any action at the operating system level. A threat actor could impact settings, configurations, software, or data on the affected product; a threat actor could interact through t…
-
High max 7.8ICSA-23-103-14 5 CVEs
Datakit CrossCAD-WARE
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or execute arbitrary code.
-
High max 8.6ICSA-23-108-01 1 CVE
Omron CS/CJ Series
Successful exploitation of this vulnerability could allow an attacker to access sensitive information in the file system and memory.
-
Critical max 10.0ICSA-23-110-01 1 CVE
INEA ME RTU
Successful exploitation of this vulnerability could allow remote code execution.
-
Medium max 6.8ICSA-23-101-01 1 CVE
FANUC ROBOGUIDE-HandlingPRO
Successful exploitation of this vulnerability could allow an attacker to read and/or overwrite files on the system running the affected software.
-
Medium max 4.9ICSMA-23-103-01 1 CVE
B. Braun Battery Pack SP with Wi-Fi
Successful exploitation of this vulnerability could allow a sophisticated and authenticated attacker to compromise the security of the Space communication device Battery Pack SP with Wi-Fi. An attacker could escalate privileges, view sensitive information, up…
-
High max 7.5ICSA-23-103-15 1 CVE
Mitsubishi Electric GOC35 Series
Successful exploitation of this vulnerability could lead to a communication error and may result in a denial-of-service condition.
-
High max 7.5
Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update G)
A Denial-of-Service vulnerability was found in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC software when encrypted communication is enabled. The vulnerability could allow an attacker with network access to cause a Denial-of-Service condition under certain…
first Feb 11, 2020 -
Critical max 9.9
Siemens SIMATIC WinCC (Update E)
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow local or remote attackers to escalate privileges and read, write or delete critical files. Siemens has released updates for several affected products and recommends to update to …
first Nov 9, 2021