4,108 results · Feed
-
High max 8.8ICSA-21-182-01 1 CVE
Johnson Controls Facility Explorer
Successful exploitation of this vulnerability could give an authenticated user an unintended level of access to the controller 's file system.
-
HighICSA-21-182-04 1 CVE
Mitsubishi Electric Air Conditioning System
An attacker could exploit this vulnerability by impersonating administrators to disclose configuration information of the air conditioning system in order to tamper with operation information and system configuration.
-
CriticalICSA-21-182-05 1 CVE
Mitsubishi Electric Air Conditioning Systems
Successful exploitation of this vulnerability may allow an attacker to disclose some of the data in the air conditioning system or cause a denial-of-service condition.
-
Medium max 5.3ICSA-21-180-01 1 CVE
Exacq Technologies exacqVision Web Service
Successful exploitation of this vulnerability could allow an attacker to send malicious requests on behalf of the victim.
-
Medium max 4.3ICSA-21-180-02 1 CVE
Exacq Technologies exacqVision Enterprise Manager
Successful exploitation of this vulnerability could allow an attacker to send malicious requests on behalf of the victim.
-
MediumICSA-21-180-03 1 CVE
Panasonic FPWIN Pro
Successful exploitation of this vulnerability could allow a remote attacker to retrieve sensitive information from the file system where affected software is installed.
-
MediumICSA-21-180-04 1 CVE
JTEKT TOYOPUC PLC
Successful exploitation of this vulnerability could crash the device being accessed.
-
Medium max 5.5ICSA-21-180-06 1 CVE
Claroty Secure Remote Access Site
Successful exploitation of this vulnerability enables an attacker with local (Linux) system access to bypass access controls for the central configuration file of the SRA Site software.
-
HighICSA-21-175-01 3 CVEs
FATEK Automation WinProladder
Successful exploitation of these vulnerabilities could allow for the execution of arbitrary code.
-
Low max 3.7ICSMA-21-175-01 1 CVE
Philips Interoperability Solution XDS
Successful exploitation of this vulnerability could allow an attacker to read the LDAP system credentials by gaining access to the network channel used for communication. This risk applies to configurations using LDAP via TLS and where the domain controller r…
-
CriticalICSA-21-173-02 6 CVEs
CODESYS V2 web server
Successful exploitation of these vulnerabilities may allow an attacker to read or write arbitrary memory or files in the CODESYS Control runtime system, cause invalid memory accesses to execute code, or crash the CODESYS web server or CODESYS Control runtime …
-
CriticalICSA-21-173-03 3 CVEs
CODESYS Control V2 communication
Successful exploitation of these vulnerabilities may cause a heap-based buffer overflow, a stack-based buffer overflow, or a buffer over-read in the affected CODESYS products. This could result in a denial-of-service condition or allow remote code execution.
-
MediumICSA-21-173-04 1 CVE
CODESYS Control V2 Linux SysFile library
Successful exploitation of this vulnerability may allow the control programmer to call additional OS functions from the PLC logic utilizing the SysFile system library.
-
Critical max 9.1
Rockwell Automation ISaGRAF5 Runtime (Update A)
Successful exploitation of these vulnerabilities may result in remote code execution, information disclosure, or a denial-of-service condition.
first Oct 6, 2020 -
High max 7.3
WAGO M&M Software fdtCONTAINER (Update C)
If an attacker can socially engineer a valid user into loading a manipulated project file, malicious code can be executed without notice.
first Jan 21, 2021 -
High max 5.3ICSA-21-168-01 1 CVE
Schneider Electric Enerlin'X Com 'X 510
Successful exploitation of this vulnerability could allow elevation of privileges, which could result in unintended disclosure of device configuration information to any authenticated user.
-
High max 7.5ICSA-21-168-02 1 CVE
Softing OPC-UA C++ SDK
A remote attacker may be able to crash the device, resulting in a denial-of-service condition. This vulnerability existsin exported functions of the library, and exploits may have different consequences depending on how the library functions have been used.
-
Critical max 8.8
OpenClinic GA (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, discover restricted information, view/manipulate restricted database information, and/or execute malicious code.
first Jul 2, 2020 -
Critical max 9.1ICSA-21-166-01 1 CVE
ThroughTek P2P SDK
ThroughTek supplies multiple original equipment manufacturers of IP cameras with P2P connections as part of its cloud platform. Successful exploitation of this vulnerability could permit unauthorized access to sensitive information, such as camera audio/video…
-
Critical max 9.8ICSA-21-166-02 5 CVEs
Automation Direct CLICK PLC CPU Modules
Successful exploitation of these vulnerabilities could allow an attacker to log in as a currently or previously authenticated user or discover passwords for valid users.
-
High max 8.5ICSA-21-161-01 1 CVE
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability may allow remote, authenticated users to bypass FactoryTalk Security policies that are based on a computer name.
-
High max 8.2ICSA-21-161-02 2 CVEs
AGG Software Web Server Plugin
Successful exploitation of these vulnerabilities could allow remote code execution and exposure of arbitrary system files.
-
CriticalICSMA-21-161-01 6 CVEs
ZOLL Defibrillator Dashboard
Successful exploitation of these vulnerabilities could allow remote code execution, allow an attacker to gain access to credentials, or impact confidentiality, integrity, and availability of the application.
-
HighICSA-21-159-02 8 CVEs
Open Design Alliance Drawings SDK
Successful exploitation of these vulnerabilities may allow code execution in the context of the current process or cause a denial-of-service condition.
-
High max 8.8ICSA-21-159-01 1 CVE
Johnson Controls Metasys
Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system.
-
Medium max 6.6ICSA-21-159-03 1 CVE
AVEVA InTouch
Successful exploitation of this vulnerability could expose cleartext credentials from InTouch Runtime.
-
HighICSA-21-159-04 13 CVEs
Schneider Electric IGSS
Successful exploitation of these vulnerabilities may result in remote code execution, which could result in an attacker gaining access to the Windows Operating System on the machine used to import CGF and WSP files.
-
MediumICSA-21-159-05 1 CVE
Schneider Electric Modicon X80
Successful exploitation of this vulnerability may result in information disclosure to an unauthenticated remote user, which could result in an understanding of the network architecture.
-
CriticalICSA-21-159-06 1 CVE
Thales Sentinel LDK Run-Time Environment
Products that have uninstalled software using the Sentinel LDK Run-Time Environment, may have a port left open that may allow an attacker to connect.
-
CriticalICSA-21-154-01 2 CVEs
Advantech iView
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and perform remote code execution.
-
High max 8.3
Mitsubishi Electric Factory Automation Products Path Traversal (Update C)
Successful exploitation of this vulnerability may allow an attacker to obtain unauthorized information, tamper the information, and cause a denial-of-service condition.
first Jul 30, 2020 -
High
Siemens JT2Go and Teamcenter Visualization (Update B)
Successful exploitation of these vulnerabilities could lead to arbitrary code execution.
first Jan 12, 2021 -
CriticalICSA-21-147-01 1 CVE
GENIVI Alliance DLT
Successful exploitation of this vulnerability could lead to remote code execution or crash the application.
-
High max 7.8
Johnson Controls Sensormatic Electronics VideoEdge
Under specific circumstances, a local authenticated user may be able to exploit this vulnerability to gain administrative access.
-
Critical max 10.0ICSA-21-147-03 5 CVEs
MesaLabs AmegaView
Successful exploitation of these vulnerabilities could allow remote code execution or allow access to the device.
-
HighICSA-21-147-04 5 CVEs
Siemens JT2Go and Teamcenter Visualization
Successful exploitation of these vulnerabilities could lead to arbitrary code execution or information leakage.
-
MediumICSA-21-147-05 1 CVE
Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability may prevent legitimate clients from connecting to an affected product.
-
HighICSA-21-145-01 5 CVEs
Datakit Libraries bundled in Luxion KeyShot
Successful exploitation of these vulnerabilities could lead to execution of arbitrary code and disclosure of arbitrary files to unauthorized actors.
-
Medium max 5.9ICSA-21-145-02 1 CVE
Rockwell Automation Micro800 and MicroLogix 1400
Successful exploitation of this vulnerability may result in denial-of-service conditions, which may require a firmware flash to recover.
-
High
Mitsubishi Electric MELFA (Update A)
Successful exploitation of this vulnerability could cause a denial-of-service condition.
first Jan 21, 2021