4,108 results · Feed
-
Critical max 9.3ICSA-22-063-01 2 CVEs
Trailer Power Line Communications (PLC) J2497
Successful exploitation of these vulnerabilities could allow a nearby attacker to execute diagnostic functions in the trailer or light the trailer ABS fault telltale in a tractor. Please see the NMFTA disclosure letter at for more details.
-
High max 8.8ICSA-22-062-01 4 CVEs
IPCOMM ipDIO
Successful exploitation of these vulnerabilities could allow an attacker to inject and execute arbitrary code.
-
High max 7.0ICSMA-22-062-01 1 CVE
BD Pyxis
Successful exploitation of this vulnerability could allow an attacker to gain access to electronic protected health information (ePHI) or other sensitive information.
-
High max 8.0ICSMA-22-062-02 1 CVE
BD Viper LT
Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information.
-
High max 8.2
Baker Hughes Bently Nevada 3500
Successful exploitation of this vulnerability could allow an attacker access to system credentials.
first Aug 19, 2021 -
High max 7.8ICSA-22-055-01 3 CVEs
FATEK Automation FvDesigner
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.
-
High max 6.1ICSA-22-055-02 3 CVEs
Mitsubishi Electric EcoWebServerIII
Successful exploitation of these vulnerabilities could allow information to be disclosed, tampered with, or result in a denial-of-service condition.
-
High max 5.1ICSA-22-055-03 4 CVEs
Schneider Electric Easergy P5 and P3
Successful exploitation of these vulnerabilities may disclose device credentials, cause a denial-of-service condition, device reboot, or allow an attacker to gain full control of the relay. This could result in loss of protection to your electrical network.
-
High max 7.5ICSA-22-053-01 1 CVE
GE Proficy CIMPLICITY-IPM
Successful exploitation of this vulnerability could allow an attacker to achieve both code execution and local privilege escalation.
-
High max 7.5ICSA-22-053-02 1 CVE
GE Proficy CIMPLICITY-Cleartext
Successful exploitation of this vulnerability could allow an attacker to capture a connection session, resulting in disclosure of sensitive information.
-
Medium max 5.6ICSA-22-053-03 2 CVEs
WIN-911 2021
Successful exploitation of these vulnerabilities could allow an attacker to leverage the misconfigured privileges to the installed directory and achieve code execution in the application 's context and permissions.
-
CriticalICSA-22-046-01 8 CVEs
Schneider Electric IGSS
Successful exploitation of these vulnerabilities could result in a variety of issues, including disclosure of data and loss of control of the SCADA system with IGSS running in production mode.
-
High
ICSA-19-225-03_Siemens SCALANCE X Switches (Update D)
Younes Dragoni and Alessandro Di Pinto from Nozomi Networks and Artem Zinenko from Kaspersky reported these vulnerability details to Siemens.
first Aug 13, 2019 -
High max 7.8
Siemens Healthineers syngo fastView (Update A)
Successful exploitation of these vulnerabilities could lead to a crash of the application or arbitrary code execution.
first Dec 16, 2021 -
High max 7.5
FANUC Robot Controllers (Update A)
Successful exploitation of these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution.
first Aug 31, 2021 -
Critical max 10.0ICSA-22-034-02 7 CVEs
Airspan Networks Mimosa
Successful exploitation of these vulnerabilities could allow an attacker to gain user data (including organization details) and other sensitive data, compromise Mimosa 's AWS (Amazon Web Services) cloud EC2 instance and S3 Buckets, and execute unauthorized re…
-
High max 8.6
Multiple Data Distribution Service (DDS) Implementations (Update A)
Successful exploitation of these vulnerabilities could result in denial-of-service or buffer-overflow conditions, which may lead to remote code execution or information exposure.
first Nov 11, 2021 -
Critical max 9.1ICSA-22-032-01 1 CVE
Ricon Mobile Industrial Cellular Router
Successful exploitation of this vulnerability could allow an attacker to inject and execute arbitrary shell commands as an Admin user.
-
Critical max 9.8ICSA-22-032-02 1 CVE
Advantech ADAM-3600
Successful exploitation of this vulnerability could allow unauthorized access to intercept traffic using the hardcoded key. This could allow an attacker to achieve Web Server login and perform further actions.
-
High max 7.5
Fresenius Kabi Agilia Connect Infusion System (Update A)
Successful exploitation of these vulnerabilities in system accessories could allow an attacker to gain access to sensitive information, modify settings or parameters, or perform arbitrary actions as an authenticated user.
first Dec 21, 2021 -
High max 8.6ICSA-22-025-01 2 CVEs
GE Gas Power ToolBoxST
Successful exploitation of these vulnerabilities could result in data exfiltration or arbitrary write, overwrite, and execution.
-
High
Mitsubishi Electric GOT and Tension Controller (Update B)
Successful exploitation of this vulnerability could allow malicious attackers to cause deterioration of communication performance or cause a denial-of-service condition of the TCP communication functions of the products requiring a re-boot of the device to re…
first Dec 8, 2020 -
Medium
Mitsubishi Electric GOT and Tension Controller (Update A)
Successful exploitation of this vulnerability may be able to stop the communication function of the products, requiring a reset to regain functionality.
first May 11, 2021 -
High max 7.5
Trane Symbio (Update B)
Successful exploitation of this vulnerability could allow a user to execute arbitrary code on the controller.
first Sep 23, 2021 -
HighICSA-22-013-01 1 CVE
Mitsubishi Electric MELSEC-F Series
Successful exploitation of this vulnerability could lead to a denial-of-service condition in the communication function of the product or cause other unspecified effects.
-
HighICSA-22-013-07 1 CVE
Mitsubishi Electric MELSEC-F Series
Successful exploitation of this vulnerability may cause a denial-of-service condition in the affected product.
-
Medium max 5.3ICSA-22-011-01 1 CVE
Johnson Controls VideoEdge
Running a vulnerability scanner against VideoEdge NVRs can cause some functions to stop.
-
High max 7.8ICSA-22-006-01 1 CVE
Omron CX-One
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
High max 7.5ICSA-22-006-02 1 CVE
Fernhill SCADA
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
HighICSA-22-006-03 4 CVEs
IDEC PLCs
Successful exploitation of these vulnerabilities could allow an attacker to upload, alter, and/or download the PLC user program. An attacker could also access the PLC web server and hijack the controllers, resulting in the manipulation and/or suspension of th…
-
Low max 2.6ICSMA-22-006-01 1 CVE
Philips Engage Software
Successful exploitation of this vulnerability may allow improper viewing (read-only) of business contact information.
-
Critical max 9.8ICSA-21-357-01 1 CVE
Moxa MGate Protocol Gateways
Successful exploitation of this vulnerability could allow remote attackers to obtain sensitive information.
-
Critical max 10.0
Johnson Controls exacq Enterprise Manager
Successful exploitation of this vulnerability could allow an attacker to enter malicious input resulting in remote code execution.
-
Medium max 8.0
Schneider Electric Rack PDU (Update A)
Successful exploitation of this vulnerability could allow an attacker to access the system with elevated privileges.
first Dec 14, 2021 -
Critical max 10.0ICSA-21-355-01 8 CVEs
mySCADA myPRO
Successful exploitation of these vulnerabilities could allow an attacker to completely compromise the products.
-
High max 7.8ICSA-21-355-02 1 CVE
Horner Automation Cscape EnvisionRV
Successful exploitation of this vulnerability could execute arbitrary code in the context of the current process.
-
High max 7.8ICSA-21-355-03 2 CVEs
WECON LeviStudioU
Successful exploitation of these vulnerabilities may allow remote code execution.
-
High max 8.1ICSA-21-355-04 2 CVEs
Emerson DeltaV
Successful exploitation of these vulnerabilities could allow an attacker to achieve local privilege escalation or restart a controller, resulting in a denial-of-service condition.
-
High
Mitsubishi Electric MELSEC iQ-R Series (Update C)
Successful exploitation of this vulnerability could cause a denial-of-service condition for the affected product.
first Nov 19, 2020 -
Critical
HCC Embedded InterNiche TCP/IP stack, NicheLite (Update B)
Successful exploitation of these vulnerabilities may result in unauthorized access to arbitrary information, DNS cache poisoning, remote code execution, or a denial-of-service condition.
first Aug 5, 2021