4,108 results · Feed
-
Medium max 6.3ICSA-21-250-02 1 CVE
Hitachi ABB Power Grids System Data Manager
Successful exploitation of this vulnerability could allow an attacker access to sensitive information.
-
High max 7.8
Johnson Controls Sensormatic Electronics Illustra
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access to the underlying Linux operating system.
-
MediumICSA-21-245-02 1 CVE
JTEKT TOYOPUC Products
Successful exploitation of this vulnerability could allow a remote attacker to deny Ethernet communications between affected devices without authorization.
-
CriticalICSA-21-245-03 1 CVE
Advantech WebAccess
Successful exploitation of this vulnerability may allow remote code execution.
-
High max 8.2ICSA-21-238-01 1 CVE
Johnson Controls Controlled Electronic Management Systems CEM Systems AC2000
Under specific conditions, successful exploitation of this vulnerability could allow a remote attacker access to the system without adequate authorization.
-
Critical max 9.4ICSA-21-238-02 1 CVE
Annke Network Video Recorder
Successful exploitation of this vulnerability may cause a stack-based buffer overflow, which could allow an unauthenticated remote attacker access to sensitive information and execute arbitrary code.
-
High
Advantech WebAccess/SCADA (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to read files outside the intended directory or redirect a user to a malicious webpage.
first Jun 17, 2021 -
High max 5.3ICSA-21-236-01 12 CVEs
Hitachi ABB Power Grids TropOS
Successful exploitation of these vulnerabilities could allow an attacker to direct a client that is connected to a TropOS Wi-Fi access point to fake websites and extract sensitive data.
-
High max 7.7ICSA-21-236-02 1 CVE
Hitachi ABB Power Grids Retail Operations and CSB Products
Successful exploitation of this vulnerability could allow an attacker to access database credentials, shut down the product, and access or alter system data.
-
HighICSA-21-236-03 1 CVE
Delta Electronics TPEditor
Successful exploitation of this vulnerability may allow for arbitrary code execution.
-
High max 8.1ICSA-21-231-01 6 CVEs
ICSA-21-231-01_AVEVA SuiteLink Server
Sharon Brizinov of Claroty reported these vulnerabilities to AVEVA.
-
CriticalICSA-21-229-01 1 CVE
ThroughTek Kalay P2P SDK
Successful exploitation of this vulnerability could permit remote code execution and unauthorized access to sensitive information, such as to camera audio/video feeds. ThroughTek supplies multiple original equipment manufacturers of IP cameras with P2P connec…
-
Medium max 5.3ICSA-21-229-02 1 CVE
Advantech WebAccess/NMS
Successful exploitation of this vulnerability could lead to the exposure of resources or functionality and could result in sensitive information disclosure.
-
Medium max 6.1ICSA-21-229-03 3 CVEs
xArrow SCADA
Successful exploitation of these vulnerabilities could result in remote code execution.
-
High max 8.8
Sensormatic Electronics C-CURE 9000 (Update A)
Successful exploitation of this vulnerability could allow remote execution of lower privileged Windows programs.
first Jul 1, 2021 -
High max 8.8ICSA-21-224-01 1 CVE
Cognex In-Sight OPC Server
Successful exploitation of this vulnerability could allow a remote attacker access to system level permissions and local privilege escalation.
-
HighICSA-21-224-02 3 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities may allow code execution in the context of the current process.
-
High max 9.8
Siemens SINAMICS Medium Voltage Products Telnet (Update A)
Successful exploitation of this vulnerability could allow an attacker to gain full remote access to the HMI.
first May 11, 2021 -
HighICSA-21-222-08 3 CVEs
ICSA-21-222-08_Siemens Solid Edge
Xina1i, working with Trend Micro 's Zero Day Initiative, and Michael Heinzl reported these vulnerabilities to CISA.
-
HighICSA-21-217-02 3 CVEs
FATEK Automation FvDesigner
Successful exploitation of these vulnerabilities may allow an attacker to execute arbitrary code.
-
High max 8.2ICSA-21-217-03 4 CVEs
ICSA-21-217-03_mySCADA myPRO
Michael Heinzl reported these vulnerabilities to CISA.
-
CriticalICSA-21-217-04 3 CVEs
Advantech WebAccess SCADA
Successful exploitation of these vulnerabilities could allow an attacker to hijack a user 's cookie/session tokens, gain unauthorized access to files and directories, and execute arbitrary code.
-
CriticalICSMA-21-215-01 8 CVEs
Swisslog Healthcare Translogic PTS
Successful exploitation of these vulnerabilities could allow an attacker to gain control of the device, escalate privileges, or execute arbitrary code.
-
High max 7.5ICSA-21-210-01 1 CVE
Hitachi ABB Power Grids eSOMS
Successful exploitation of this vulnerability could allow access to user credentials that are stored by the browser.
-
Medium
Mitsubishi Electric GOT (Update A)
Successful exploitation of this vulnerability may allow an attacker to gain unauthorized access.
first Apr 22, 2021 -
High max 8.8
AVEVA System Platform (Update A)
Successful exploitation of these vulnerabilities, if exploited and chained together, could allow a malicious entity to achieve arbitrary code execution with system privileges or cause a denial-of-service condition.
first Jun 29, 2021 -
Critical max 7.3
Schneider Electric Modicon Controllers and Software (Update A)
Successful exploitation of these vulnerabilities may allow arbitrary code execution and loss of confidentiality and integrity of the project file.
first Jul 13, 2021 -
Critical max 9.8ICSA-21-208-01 2 CVEs
KUKA KR C4
Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive information and access to shell.
-
MediumICSA-21-208-02 1 CVE
Mitsubishi Electric GOT2000 series and GT SoftGOT2000
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Critical max 9.8ICSA-21-208-03 12 CVEs
Geutebrück G-Cam E2 and G-Code
UDP Technology supplies multiple OEMs such as Geutebrück with firmware for IP cameras. Successful exploitation of these vulnerabilities could allow unauthenticated access to sensitive information; buffer overflow and command injection conditions may allow rem…
-
Critical max 9.3ICSA-21-208-04 1 CVE
LCDS LAquis SCADA
Successful exploitation of this vulnerability may allow an unauthenticated remote attacker to access sensitive information or execute arbitrary code.
-
High max 7.8ICSA-21-208-05 1 CVE
Delta Electronics DIAScreen
Successful exploitation of these vulnerabilities could crash the device being accessed and may allow remote code execution.
-
HighICSA-21-201-01 1 CVE
Mitsubishi Electric MELSEC-F Series
Successful exploitation of this vulnerability may cause a denial-of-service condition in communication with the product. System reset may be required for recovery.
-
MediumICSMA-21-196-01 4 CVEs
ICSMA-21-196-01_Ypsomed mylife
Julian Suleder, Linda Huischen, and Nils Emmerich of ERNW Research GmbH and Dr. Oliver Matula of Enno Rey Netzwerke GmbH (ERNW) reported these vulnerabilities to the Federal Office for Information Security (BSI, Germany), in the context of the BSI project Man…
-
MediumICSA-21-194-01 1 CVE
Schneider Electric C-Bus Toolkit
Successful exploitation of this vulnerability could allow an attacker to enable remote access to the system.
-
HighICSA-21-194-15 43 CVEs
ICSA-21-194-15_Siemens JT2Go and Teamcenter Visualization
Brian Gorenc and Mat Powell of Trend Micro Zero Day Initiative; garmin and xina1i at SecZone; and Tran Van Khang - khangkito (VinCSS) working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
-
High max 7.5ICSA-21-189-01 1 CVE
Rockwell Automation MicroLogix 1100
Successful exploitation of this vulnerability could allow an attacker to create a denial-of-service condition.
-
Critical max 10.0ICSA-21-189-02 7 CVEs
MDT AutoSave
Successful exploitation of these vulnerabilities by an attacker with detailed understanding of the product architecture and database structure could lead to full remote execution on the Remote MDT Server without an existing user or password.
-
Critical max 9.8ICSA-21-187-01 4 CVEs
Moxa NPort IAW5000A-I/O Series Serial Device Server
Successful exploitation of these vulnerabilities could crash the device being accessed, cause a buffer overflow condition, or allow remote code execution.
-
High max 7.2
All Bachmann M1 System Processor Modules
Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain access to the password hashes of the controller if Security Level 4 is not in use as recommended. In the recommended Security Level 4 setting, an authenticate…
first Jan 26, 2021