4,108 results · Feed
-
Medium max 6.2ICSA-22-109-01 2 CVEs
Interlogix Hills ComNav
Successful exploitation of these vulnerabilities could allow an attacker to log in to modify the system.
-
Medium max 5.2ICSA-22-109-02 1 CVE
Automated Logic WebCTRL
Successful exploitation of this vulnerability could allow an attacker to redirect the user to a malicious webpage or to download a malicious file.
-
Medium max 6.1ICSA-22-109-03 5 CVEs
FANUC ROBOGUIDE Simulation Platform
Successful exploitation of these vulnerabilities could cause a denial-of-service condition, allow for remote code execution, or provide unauthorized privilege escalation.
-
Critical max 9.8ICSA-22-109-04 4 CVEs
Elcomplus SmartPTT SCADA
Successful exploitation of these vulnerabilities could provide attackers a way to traverse the file system to access files or directories that are outside of the restricted directory; allow the upload or transfer files of dangerous types that can be automatic…
-
Critical max 9.8ICSA-22-109-05 5 CVEs
Elcomplus SmartPTT SCADA Server
Successful exploitation of these vulnerabilities could allow an unauthorized user to store dangerous data in a trusted database; potentially exposing sensitive information; allow malicious users to upload arbitrary files; provide attackers a way to traverse t…
-
High max 7.5
Siemens Industrial Products with OPC UA (Update H)
Successful exploitation of this vulnerability could cause a denial-of-service condition on the affected service or device.
first Apr 9, 2019 -
Medium max 5.5ICSA-22-104-01 1 CVE
Delta Electronics DMARS
Successful exploitation of this vulnerability could allow an attacker to gain sensitive information.
-
High max 8.1ICSA-22-104-02 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could allow a remote attacker to use a session token that has not been cleared upon log out of an authenticated user.
-
Critical max 9.6ICSA-22-104-03 3 CVEs
Red Lion DA50N
Successful exploitation of these vulnerabilities could result in data compromise, data modification, and a denial-of-service condition.
-
High max 8.8ICSA-22-102-01 1 CVE
Valmet DNA
Successful exploitation of this vulnerability could allow an attacker to execute commands remotely with system privileges.
-
CriticalICSA-22-102-02 1 CVE
Mitsubishi Electric MELSEC-Q Series C Controller Module
Successful exploitation of this vulnerability could cause a denial-of-service condition or allow remote code execution.
-
Medium max 6.8ICSA-22-102-03 1 CVE
Inductive Automation Ignition
Successful exploitation of this vulnerability could allow an authenticated attacker with network access to execute code by uploading a malicious zip file.
-
Critical max 8.2ICSA-22-102-05 5 CVEs
Aethon TUG Home Base Server
Successful exploitation of these vulnerabilities could cause a denial-of-service condition, allow full control of robot functions, or expose sensitive information.
-
High
Mitsubishi Electric GOT and Tension Controller (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition by sending specially crafted packets.
first Oct 5, 2021 -
Critical max 9.8
Pepperl+Fuchs WirelessHART-Gateway
Successful exploitation of these vulnerabilities may result in a denial-of-service condition, code execution, and code exposure.
-
High max 7.5ICSA-22-097-02 3 CVEs
ABB SPIET800 and PNI800
Successful exploitation of these vulnerabilities could cause the affect device to become unresponsive, resulting in a denial-of-service condition and requiring a manual reboot.
-
Critical max 9.8
Philips Vue PACS (Update B)
Successful exploitation of these vulnerabilities could allow an unauthorized person or process to eavesdrop, view or modify data, gain system access, perform code execution, install unauthorized software, or affect system data integrity in such a way as to ne…
first Jul 6, 2021 -
High max 8.6ICSA-22-095-01 1 CVE
Rockwell Automation ISaGRAF
Successful exploitation of this vulnerability could allow arbitrary code execution.
-
High max 8.4ICSA-22-095-02 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code into the MUI PDF export feature.
-
Medium max 6.5ICSMA-22-095-01 1 CVE
LifePoint Informatics Patient Portal
Successful exploitation of this vulnerability could disclose sensitive information, including HIPAA-protected PII.
-
Critical max 9.8
PTC Axeda agent and Axeda Desktop Server (Update C)
Successful exploitation of these vulnerabilities could result in full system access, remote code execution, read/change configuration, file system read access, log information access, and a denial-of-service condition.
first Mar 8, 2022 -
Medium max 5.5ICSA-22-090-01 1 CVE
Schneider Electric SCADAPack Workbench
Successful exploitation of this vulnerability could result from exfiltration of data from local files to a remote system controlled by an attacker.
-
High max 3.7ICSA-22-090-02 4 CVEs
Hitachi Energy e-mesh EMS
Successful exploitation of these vulnerabilities could cause a denial-of-service condition.
-
High max 7.8ICSA-22-090-03 5 CVEs
Fuji Electric Alpha5
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information and execute arbitrary code.
-
Critical max 10.0ICSA-22-090-05 1 CVE
Rockwell Automation Logix Controllers
Successful exploitation of this vulnerability may allow an attacker to modify user programs. A user could then unknowingly download those modified elements containing malicious code.
-
Critical max 9.8
General Electric Renewable Energy MDS Radios
Successful exploitation of these vulnerabilities could allow an attacker to control the configuration of the radio, join the network without proper authorization, or keep valid users from using the system correctly.
-
High max 7.7ICSA-22-090-07 1 CVE
Rockwell Automation Studio 5000 Logix Designer
Successful exploitation of this vulnerability may allow an attacker to download a modified program to the controller.
-
Medium max 5.5ICSA-22-088-01 1 CVE
Rockwell Automation ISaGRAF
Successful exploitation of this vulnerability could allow an attacker to pass local file data to a remote web server, leading to loss of confidentiality.
-
High max 7.8ICSA-22-088-02 4 CVEs
Omron CX-Position
Successful exploitation of these vulnerabilities when parsing an NCI file could allow code execution.
-
Medium max 4.2ICSA-22-088-03 4 CVEs
Hitachi Energy LinkOne WebView
Successful exploitation of these vulnerabilities could allow an attacker to modify a victim 's system files or information, disclose application full path, disclose sensitive information to an unauthorized actor, and launch a common web attack.
-
Medium max 5.5ICSA-22-088-04 1 CVE
Modbus Tools Modbus Slave
Successful exploitation of this vulnerability could crash the application when inputting a registration key.
-
Medium max 6.5ICSMA-22-088-01 1 CVE
Philips e-Alert
Successful exploitation of this vulnerability may allow an unauthorized actor to remotely shutdown the system, if on the healthcare facilities network.
-
HighICSA-22-083-01 7 CVEs
Yokogawa CENTUM and Exaopc
Successful exploitation of these vulnerabilities in CAMS server functions can be abused to suppress alarms, read or write files, crash the server, or execute arbitrary code.
-
High max 8.8ICSA-22-083-02 1 CVE
mySCADA myPRO
Successful exploitation of this vulnerability could allow arbitrary operating system commands injection.
-
Critical max 7.5
Delta Electronics DIAEnergie (Update C)
Successful exploitation of these vulnerabilities could allow an attacker to retrieve passwords in cleartext, remotely execute code, cause a user to carry out an action unintentionally, or log in and use the device with administrative privileges.
first Aug 26, 2021 -
High max 8.4ICSA-22-074-01 1 CVE
ABB OPC Server for AC 800M
Successful exploitation of this vulnerability could allow a low privileged authenticated user to remotely execute arbitrary code.
-
Critical
Wibu-Systems CodeMeter (Update F)
Successful exploitation of these vulnerabilities could allow an attacker to alter and forge a license file, cause a denial-of-service condition, potentially attain remote code execution, read heap data, and prevent normal operation of third-party software dep…
first Aug 20, 2020 -
Medium
Siemens Climatix POL909 (Update A)
Successful exploitation of this vulnerability could allow sensitive data disclosure or modification of data in transit.
first Nov 11, 2021 -
Critical max 10.0
Sensormatic PowerManage (Update A)
Successful exploitation of this vulnerability could allow an attacker to gain remote code execution.
first Feb 3, 2022 -
High max 8.1ICSA-22-067-02 1 CVE
AVEVA System Platform
Successful exploitation of this vulnerability could expose cleartext credentials for the network user account or for logged-in users to an authorized, low privilege user. The cleartext credentials would also be exposed if the user creates a diagnostic memory …