4,108 results · Feed
-
Critical max 9.3ICSA-21-350-01 1 CVE
Xylem AquaView
Successful exploitation of this vulnerability could allow an authenticated local attacker to create users, delete users, disable user groups, and update the system and its security levels.
-
Medium max 6.1ICSA-21-350-02 1 CVE
Delta Electronics CNCSoft
Successful exploitation of this vulnerability could allow information disclosure or an application crash.
-
HighICSA-21-350-03 1 CVE
Wibu-Systems CodeMeter Runtime
Successful exploitation of this vulnerability could allow an attacker to crash the CodeMeter Runtime Server, which could cause a denial-of-service condition.
-
MediumICSA-21-350-04 1 CVE
Mitsubishi Electric GX Works2
Successful exploitation of this vulnerability may cause a denial-of-service condition in GX Works2.
-
MediumICSA-21-350-05 2 CVEs
Mitsubishi Electric FA Engineering Software (Update B)
Successful exploitation of these vulnerabilities may cause a denial-of-service condition.
-
CriticalICSA-21-350-13 1 CVE
Siemens Questa and ModelSim
Successful exploitation of this vulnerability could allow access to unencrypted data.
-
Medium
Hillrom Medical Device Management (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption and remotely execute arbitrary code.
first Jun 1, 2021 -
High max 7.7ICSA-21-348-01 2 CVEs
Advantech R-SeeNet
Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege escalation and retrieve any information from the product 's database.
-
High max 7.2ICSA-21-343-01 1 CVE
Hitachi Energy GMS600, PWC600, and Relion
This updated advisory is a follow-up to the original advisory titled ICSA-21-343-01 Hitachi Energy GMS600, PWC600, and Relion that was published December 9, 2021, on the ICS webpage at cisa.gov/ics.
-
High max 7.8ICSA-21-343-02 1 CVE
WECON LeviStudioU
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
High max 8.1ICSMA-21-343-01 1 CVE
Hillrom Welch Allyn Cardio Products
Successful exploitation of this vulnerability could allow an attacker to access privileged accounts.
-
HighICSA-21-341-01 2 CVEs
Hitachi Energy RTU500 OpenLDAP
Successful exploitation of these vulnerabilities could cause a denial-of-service condition in the affected version of the RTU500 series product.
-
Critical max 9.0ICSA-21-341-02 2 CVEs
Hitachi Energy XMC20 and FOX61x
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration and cause a disruption to the Network Management (NMS) and Network Element (NE) communication.
-
LowICSA-21-336-01 1 CVE
Schneider Electric SESU
Successful exploitation of this vulnerability could cause unintended connection from an internal network to an external network.
-
High max 8.3ICSA-21-336-02 1 CVE
Johnson Controls Entrapass
Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.
-
Critical max 10.0ICSA-21-336-03 2 CVEs
Distributed Data Systems WebHMI
Successful exploitation of these vulnerabilities could allow an administrator account login without password authentication and remote code execution with root privileges.
-
High max 7.5ICSA-21-336-04 1 CVE
Hitachi Energy RTU500 series BCI
Successful exploitation of this vulnerability could allow a remote attacker to reboot the device.
-
Critical max 9.1ICSA-21-336-06 29 CVEs
Hitachi Energy APM Edge
Successful exploitation of this vulnerability could cause the product to become inaccessible.
-
Medium max 6.7ICSA-21-336-07 1 CVE
Hitachi Energy PCM600 Update Manager
Successful exploitation of this vulnerability could allow an attacker to bypass the certificate validation and install an untrusted software package.
-
High max 8.6ICSA-21-336-08 3 CVEs
Hitachi Energy RTU500 series
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic, retrieve information from memory, or cause a denial-of-service condition.
-
Critical max 9.8
InHand Networks IR615 Router (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to have full control over the product, remotely perform actions on the product, intercept communication and steal sensitive information, session hijacking, and successful brute-force again…
first Oct 7, 2021 -
HighICSA-21-334-01 1 CVE
Xylem Aanderaa GeoView
Successful exploitation of this vulnerability could allow an attacker to manipulate the database server.
-
High max 7.8ICSA-21-334-03 1 CVE
Delta Electronics CNCSoft
Successful exploitation of this vulnerability could allow for arbitrary code execution.
-
High max 7.8
Johnson Controls CEM Systems AC2000
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access on the underlying Linux operating system.
-
High max 7.2ICSA-21-334-05 1 CVE
Hitachi Energy Retail Operations and CSB Software
Successful exploitation of this vulnerability could allow unauthorized access to data and modification of data inside the affected product.
-
Critical
VISAM Automation Base (VBASE) (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to read the contents of unexpected files, escalate privileges to system level, execute arbitrary code on the targeted system, bypass security mechanisms, and discover the cryptographic k…
first Mar 24, 2020 -
High max 8.1ICSMA-21-322-01 2 CVEs
Philips IntelliBridge EC 40 and EC 80 Hub
Successful exploitation of these vulnerabilities may allow an attacker unauthorized access to the IntelliBridge EC40 and80 Hub. This could allow an attacker to execute software, modify system configurations, or view/update files, including unidentifiable pati…
-
Medium max 6.5ICSMA-21-322-02 3 CVEs
Philips Patient Information Center iX (PIC iX) and Efficia CM Series
Successful exploitation of these vulnerabilities may allow an attacker unauthorized access to data (including patient data) and create a denial of service resulting in temporary interruption of viewing physiological data at the central station. Exploitation d…
-
High max 7.8ICSA-21-320-01 2 CVEs
FATEK Automation WinProladder
Successful exploitation of these vulnerabilities could allow for arbitrary code execution.
-
HighICSA-21-320-02 1 CVE
Mitsubishi Electric GOT products
Successful exploitation of this vulnerability could allow the system 's operations to be adversely affected.
-
High max 6.5
Multiple Embedded TCP/IP Stacks (Update B)
Successful exploitation of weak initial sequence numbers (ISN) can be used to hijack or spoof TCP connections, cause denial-of-service conditions, inject malicious data, or bypass authentication.
first Feb 11, 2021 -
High max 7.8ICSA-21-315-01 2 CVEs
WECON PLC Editor
Successful exploitation of these vulnerabilities may allow arbitrary code execution.
-
High max 7.8
Advantech WebAccess HMI Designer (Update A)
Successful exploitation of these vulnerabilities could result in memory corruption, code execution, hijacking of user 's cookie/session tokens, and unintended browser action.
first Jun 22, 2021 -
MediumICSA-21-313-01 6 CVEs
Schneider Electric NMC cards and Embedded Devices
Successful exploitation of these vulnerabilities may allow data disclosure or cross-site scripting, which could result in an execution of malicious web code or a loss of device functionality.
-
HighICSA-21-313-02 3 CVEs
Schneider Electric GUIcon
Successful exploitation of these vulnerabilities may allow an attacker to execute arbitrary code on the host PC, leading to sensitive information disclosure or unintended user actions.
-
High max 7.3ICSA-21-313-04 1 CVE
mySCADA myDESIGNER
Successful exploitation of this vulnerability could allow for remote code execution.
-
Medium max 6.5ICSA-21-313-05 2 CVEs
OSIsoft PI Vision
Successful exploitation of these vulnerabilities could lead to information disclosure, modification, or deletion.
-
Medium max 6.9ICSA-21-313-06 1 CVE
OSIsoft PI Web API
Successful exploitation of this vulnerability could allow a remote authenticated attacker access to sensitive information or deliver false information.
-
High max 7.4
VISAM VBASE Editor
Successful exploitation of these vulnerabilities may allow un-neutralized user-controllable data input, disclosure of local files, access to NTLM (Windows New Technology LAN Manager) hashes, and access to sensitive files.
-
High max 7.8ICSA-21-308-02 4 CVEs
AzeoTech DAQFactory
Successful exploitation of these vulnerabilities could allow code execution, memory corruption, or unauthorized access to user information.