4,108 results · Feed
-
HighICSMA-21-308-01 2 CVEs
Philips Tasy EMR
Successful exploitation of these vulnerabilities could result in patient 's confidential data being exposed or extracted from Tasy 's database, give unauthorized access, or create a denial-of-service condition.
-
High
WECON PI Studio (Update A)
Successful exploitation of these vulnerabilities may allow execution of code and disclose sensitive information under the context of administrator.
first Oct 4, 2018 -
Medium max 6.9
Sensormatic Electronics VideoEdge
Successful exploitation of this vulnerability could allow the execution of untrusted code when viewing the VideoEdge admin graphical user interface.
-
High
Delta Electronics DOPSoft (Update A)
Successful exploitation of this vulnerability may allow arbitrary code execution.
first Aug 26, 2021 -
Medium
Mitsubishi Electric MELSEC iQ-R Series C Controller Module (Update B)
Successful exploitation of this vulnerability could prevent the module from starting up. If successfully exploited, a system reset would be required for recovery.
first Oct 7, 2021 -
HighICSA-21-301-01 1 CVE
Sensormatic Electronics victor
Successful exploitation of this vulnerability could allow an unauthorized elevation of privileges.
-
High max 7.8ICSA-21-299-01 6 CVEs
Fuji Electric Tellus Lite V-Simulator and V-Server Lite
Successful exploitation of these vulnerabilities could allow an attacker to cause data corruption, read sensitive information, obtain code execution, or crash the application.
-
HighICSA-21-294-01 2 CVEs
ICONICS GENESIS64 and Mitsubishi Electric MC Works64
Successful exploitation of these vulnerabilities may result in remote code execution.
-
High max 8.8ICSA-21-294-02 10 CVEs
Delta Electronics DIALink
Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized information, remotely execute code, access the application directory and escalate privileges, take over the system where the software is installed, and modify the …
-
HighICSA-21-294-03 1 CVE
ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA
Successful exploitation of this vulnerability could trigger a stack overflow.
-
Critical max 10.0ICSMA-21-294-01 5 CVEs
B. Braun Infusomat Space Large Volume Pump
Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to gain user-level command-line access, send the device malicious data to be used in place of correct data, reconfigure the device from an unknown source, obtain se…
-
Critical max 9.8ICSA-21-292-01 17 CVEs
AUVESY Versiondog
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution, and acquire complete remote control over the machine.
-
Medium max 6.3ICSA-21-292-02 1 CVE
Trane HVAC Systems Controls
Successful exploitation of this vulnerability could allow an attacker to redirect a user to a malicious webpage and steal the user 's cookie.
-
HighICSA-21-287-01 1 CVE
Schneider Electric CNM
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands.
-
Critical max 7.1ICSA-21-287-02 5 CVEs
Uffizio GPS Tracker
Successful exploitation of these vulnerabilities could allow an attacker with access to the host to view sensitive information, gain code execution, cause a redirection to an arbitrary external domain, and perform actions on behalf of an unsuspecting user.
-
Medium max 4.3ICSA-21-285-01 1 CVE
Advantech WebAccess SCADA
Successful exploitation of this vulnerability could allow an attacker to access project names and paths.
-
Critical max 9.8ICSA-21-285-02 2 CVEs
Advantech WebAccess
Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution.
-
CriticalICSA-21-285-03 4 CVEs
Schneider Electric IGSS
Successful exploitation of these vulnerabilities could allow an attacker to gain code execution, read/delete files, and create arbitrary files.
-
Critical max 9.8ICSA-21-280-01 1 CVE
Johnson Controls exacqVision Server Bundle
Successful exploitation of this vulnerability could allow an unauthenticated remote user to be given access to credentials stored in the exacqVision Server.
-
Critical max 10.0ICSA-21-280-02 10 CVEs
Mobile Industrial Robots Vehicles and MiR Fleet Software
Successful exploitation of these vulnerabilities could lead to privilege escalation, data exfiltration, control of the robot, and a denial-of-service condition.
-
High max 7.5ICSA-21-280-03 1 CVE
Johnson Controls exacqVision
Successful exploitation of this vulnerability could allow an unauthenticated remote user to exploit an integer overflow in the exacqVision Server with a specially crafted script and cause a denial-of-service condition.
-
High max 7.8ICSA-21-280-06 7 CVEs
FATEK Automation WinProladder
Successful exploitation of these vulnerabilities may allow arbitrary code execution, remote code execution, heap corruption, and unauthorized information disclosure.
-
Critical max 9.8ICSA-21-280-07 1 CVE
FATEK Automation Communication Server
Successful exploitation of this vulnerability may allow remote code execution.
-
Medium max 5.3
Medtronic MiniMed MMT-500/MMT-503 Remote Controllers (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to replay captured wireless communications and cause an insulin (bolus) delivery. This is only possible when non-default options are configured. Additionally, the pump will annunciate this…
first Aug 7, 2018 -
High max 8.0ICSA-21-278-02 6 CVEs
Emerson WirelessHART Gateway
Successful exploitation of these vulnerabilities by an authenticated user can allow root level arbitrary write permission, which can lead to remote code execution.
-
Critical max 10.0ICSA-21-278-03 5 CVEs
Moxa MXview Network Management Software
Successful exploitation of these vulnerabilities may allow an attacker to create or overwrite critical files to execute code, gain access to the program, obtain credentials, disable the software, read and modify otherwise inaccessible data, allow remote conne…
-
Critical max 10.0ICSA-21-278-04 3 CVEs
Honeywell Experion PKS and ACE Controllers
Successful exploitation of these vulnerabilities could lead to remote code execution and denial-of-service conditions.
-
Medium max 6.9ICSMA-21-273-01 5 CVEs
Boston Scientific Zoom Latitude
Successful exploitation of these vulnerabilities may allow an attacker with physical access to the affected device to obtain patient protected health information (PHI), and/or compromise the integrity of the device. The affected device is not network connecte…
-
High max 8.8
Ovarro TBox (Update A)
Successful exploitation of these vulnerabilities could result in remote code execution, which may cause a denial-of-service condition.
first Feb 23, 2021 -
Critical max 9.9ICSA-21-266-02 1 CVE
Trane Tracer
Successful exploitation of this vulnerability could allow an authenticated user to execute arbitrary code on the controller.
-
High max 7.8ICSA-21-259-02 1 CVE
Schneider Electric EcoStruxure and SCADAPack
Successful exploitation of this vulnerability could result in code execution on the engineering workstation.
-
High max 9.8
Siemens SINAMICS PERFECT HARMONY GH180 (Update A)
Successful exploitation of this vulnerability could result in arbitrary code execution and unauthorized access to sensitive data.
first Jul 13, 2021 -
Critical max 9.6ICSA-21-257-01 1 CVE
Digi PortServer TS 16
Successful exploitation of this vulnerability allows write access, which grants control of settings, command execution, and access to the command line interface.
-
High max 8.6ICSA-21-257-02 1 CVE
Johnson Controls Sensormatic Electronics KT-1
Successful exploitation of this vulnerability may allow replay attacks.
-
Critical max 9.1ICSA-21-257-03 2 CVEs
Schneider Electric Struxureware Data Center Expert
Successful exploitation of these vulnerabilities could allow remote code execution.
-
HighICSA-21-257-20 2 CVEs
Siemens LOGO! CMR and SIMATIC RTU 3000
Successful exploitation of these vulnerabilities could allow an attacker with access to any of the interfaces of an affected device to impact the availability or to communicate with invalid certificates.
-
CriticalICSA-21-257-21 1 CVE
Siemens Industrial Edge
Successful exploitation of this vulnerability could allow an unauthenticated attacker to change the password of any user in the system resulting in the attacker being able to impersonate any valid user on the affected system.
-
High max 7.3ICSA-21-252-01 1 CVE
AVEVA PCS Portal
The DLL hijacking vulnerability in the Platform Common Services (PCS) Portal, if exploited, could allow malicious code execution within the context of the PCS Portal application.
-
High max 7.8
Delta Electronics DOPSoft 2 (Update A)
Successful exploitation of these vulnerabilities may allow arbitrary code execution.
-
CriticalICSA-21-252-03 7 CVEs
Mitsubishi Electric Europe B.V. smartRTU and INEA ME-RTU
Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution, obtain credentials, and use credentials found to log into other affected devices.