4,108 results · Feed
-
Critical max 7.8
Siemens SCALANCE LPE9403 Third-Party Vulnerabilities
Multiple vulnerabilities in the third-party components CivetWeb, Docker, Linux Kernel and systemd could allow an attacker to impact SCALANCE LPE9403 confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recom…
-
MediumICSA-22-167-10 1 CVE
Siemens SCALANCE XM-400 and XR-500
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to …
-
HighICSA-22-167-12 1 CVE
Siemens Spectrum Power Systems
Siemens has been made aware of a default password leakage in the internet affecting the component Shared HIS (SHHIS) used in Spectrum Power systems. The products listed below are affected by this default password leakage. This could allow an attacker to acces…
-
MediumICSA-22-167-15 1 CVE
Siemens Teamcenter Active Workspace
Teamcenter Active Workspace is affected by a cross site scripting vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
High max 7.8
Siemens SCALANCE LPE 4903 and SINUMERIK Edge
The products listed below contain a local privilege escalation vulnerability (CVE-2021-4034) found on polkit's pkexec utility, that could allow an unprivileged user to gain administrative rights. Siemens has released updates for the affected products and reco…
-
High max 9.8ICSA-22-160-01 5 CVEs
Mitsubishi Electric Air Conditioning Systems
Successful exploitation of these vulnerabilities could allow an attacker to disclose or tamper data in communication between the air conditioning system and the external computers or cause a denial-of-service condition.
-
High max 7.6ICSA-22-154-01 9 CVEs
Vulnerabilities Affecting Dominion Voting Systems ImageCast X
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
-
Critical max 10.0ICSA-22-153-01 8 CVEs
Carrier LenelS2 HID Mercury access panels
Successful exploitation of these vulnerabilities could allow an attacker access to the device, allowing monitoring of all communications sent to and from the device, modification of onboard relays, changing of configuration files, device instability, and a de…
-
High
Mitsubishi Electric FA Products
Successful exploitation of these vulnerabilities may allow an attacker to log in to the affected products and/or alter and obtain sensitive information.
first Mar 31, 2022 -
High
Mitsubishi Electric MELSEC iQ-F Series
This updated advisory is a follow-up to the original advisory titled ICSA-22-139-01 Mitsubishi Electric MELSEC iQ-F Series that was published May 19, 2022, on the ICS webpage at cisa.gov/ics.
first May 19, 2022 -
High max 7.8ICSA-22-151-01 1 CVE
Fuji Electric Alpha7 PC Loader
Successful exploitation of this vulnerability could allow arbitrary code execution.
-
High max 8.8ICSMA-22-151-01 1 CVE
BD Pyxis
Successful exploitation of this vulnerability could allow an attacker to gain access to electronic protected health information (ePHI) or other sensitive information.
-
Medium max 5.7ICSMA-22-151-02 1 CVE
BD Synapsys
Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information. This includes electronic protected health information (ePHI), protected health information (PHI), and personally identifiable information…
-
Critical max 9.8ICSA-22-146-01 2 CVEs
Keysight N6854A Geolocation server and N6841A RF Sensor software
Successful exploitation of these vulnerabilities could allow an attacker to obtain arbitrary operating system files and execute arbitrary code.
-
High max 7.8ICSA-22-146-02 4 CVEs
Horner Automation Cscape Csfont
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code by opening a malicious file.
-
Medium max 6.8ICSA-22-144-01 1 CVE
Rockwell Automation Logix Controllers
Successful exploitation of this vulnerability may allow an unauthorized user to send malicious messages to the targeted device, which could lead to a denial-of-service condition.
-
Medium max 5.8ICSA-22-144-02 1 CVE
Matrikon OPC Server
Successful exploitation of this vulnerability could allow an attacker to achieve remote command execution with system-level privileges through the support of the IPersistFile COM interface.
-
Medium max 6.8ICSA-22-137-01 1 CVE
Circutor COMPACT DC-S BASIC
Successful exploitation of this vulnerability could cause a buffer overflow condition resulting in remote code execution.
-
High max 7.5
ICSA-19-253-03_Siemens Industrial Products (Update P)
Successful exploitation of these vulnerabilities could cause denial-of-service condition.
first Sep 10, 2019 -
Medium
Siemens VxWorks-based Industrial Products (Update C)
Successful exploitation of this vulnerability could allow an attacker to cause a heap-based buffer overflow.
first Jul 13, 2021 -
Medium max 5.3
Mitsubishi Electric GT25-WLAN
There are multiple vulnerabilities due to design flaws in the frame fragmentation functionality and the frame aggregation functionality in the Wireless Communication Standards IEEE 802.11. These vulnerabilities could allow an attacker to steal communication c…
first Apr 12, 2022 -
High max 7.8ICSA-22-132-01 2 CVEs
Delta Electronics CNCSoft
Successful exploitation of these vulnerabilities could allow arbitrary code execution or information disclosure.
-
Critical max 9.8ICSA-22-132-02 8 CVEs
Mitsubishi Electric MELSOFT iQ AppPortal
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, malicious program execution, information disclosure, information tampering, or authentication bypass.
-
High max 7.8ICSA-22-132-03 3 CVEs
Inkscape in Industrial Products
Successful exploitation of these vulnerabilities could allow unauthorized information disclosure and code execution.
-
Critical max 9.8ICSA-22-132-04 7 CVEs
Cambium Networks cnMaestro
Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution, sensitive data exfiltration, and complete takeover of the main multi-tenant cloud infrastructure.
-
High max 7.5ICSA-22-130-01 1 CVE
Adminer in Industrial Products
Successful exploitation of this vulnerability could allow reading of database credentials and loss of sensitive information.
-
Medium max 5.2ICSA-22-130-02 1 CVE
Eaton Intelligent Power Protector
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code using untrusted data.
-
Medium max 5.7ICSA-22-130-03 3 CVEs
Eaton Intelligent Power Manager Infrastructure
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code using untrusted data.
-
Medium max 5.2ICSA-22-130-04 1 CVE
Eaton Intelligent Power Manager
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code using untrusted data.
-
High max 7.4ICSA-22-130-05 1 CVE
AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere
Successful exploitation of this vulnerability could allow an authenticated user to escape from the context of the streamed application into the OS and launch arbitrary OS commands.
-
High max 7.5ICSA-22-130-06 2 CVEs
Mitsubishi Electric MELSOFT GT OPC UA
Successful exploitation of these vulnerabilities could allow a remote attacker to send specially crafted messages, resulting in information disclosure or a denial-of-service condition.
-
High max 8.0ICSA-22-125-01 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could allow an authenticated user to lock other users out of the system and take over their accounts.
-
HighICSA-22-123-01 5 CVEs
Yokogawa CENTUM and ProSafe-RS
Successful exploitation of these vulnerabilities may allow leakage/tampering of data, cause a denial-of-service condition, or allow a local attacker to execute arbitrary programs.
-
Critical max 9.8
Delta Electronics DIAEnergie (Update C)
Successful exploitation of these vulnerabilities could allow remote code execution, causing a user to carry out an action unintentionally.
first Mar 22, 2022 -
High max 8.8ICSA-22-118-01 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could allow an authenticated user to elevate their privileges to administrator.
-
High max 7.5ICSA-22-116-01 7 CVEs
Hitachi Energy System Data Manager
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic or to cause a denial-of-service condition.
-
High max 7.8ICSA-22-111-01 2 CVEs
Delta Electronics ASDA-Soft
Successful exploitation of these vulnerabilities may allow arbitrary code execution.
-
Medium max 5.3ICSA-22-111-02 1 CVE
Johnson Controls Metasys SCT Pro
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to identify and forge requests to internal systems via a specially crafted request, allowing an attacker to determine whether specific files or paths exist.
-
High max 3.7ICSA-22-111-03 9 CVEs
Hitachi Energy MicroSCADA Pro/X SYS600
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic between network source and destination, gain unauthorized access to information, or cause a denial-of-service condition.
-
Critical max 7.4
Multiple RTOS (Update E)
Successful exploitation of these vulnerabilities could result in unexpected behavior such as a crash or a remote code injection/execution.
first Apr 29, 2021