4,108 results · Feed
-
HighICSA-21-138-01 6 CVEs
ICSA-21-138-01_Emerson Rosemount X-STREAM
Emerson reported these vulnerabilities to CISA.
-
High max 8.6ICSA-21-133-01 3 CVEs
Rockwell Automation Connected Components Workbench
Successful exploitation of these vulnerabilities may allow remote code execution, authentication bypass, or privilege escalation.
-
High max 7.8
Johnson Controls Sensormatic Tyco AI
Under specific circumstances, a local attacker could use this vulnerability to obtain super-user access to the underlying openSUSE Linux operating system.
-
HighICSA-21-133-03 1 CVE
OPC Foundation UA Products Built with .NET Framework
Successful exploitation of this vulnerability could trigger a stack overflow.
-
HighICSA-21-133-04 1 CVE
OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5
Successful exploitation of this vulnerability could allow an unauthenticated attacker to read any file on the file system.
-
Medium
Siemens SIMARIS Configuration (Update A)
Successful exploitation of this vulnerability could allow an attacker to gain persistence or escalate privileges within the system.
first Feb 9, 2021 -
HighICSA-21-131-01 1 CVE
Omron CX-One
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
CriticalICSA-21-124-01 1 CVE
Advantech WISE-PaaS RMM
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information.
-
HighICSA-21-124-02 1 CVE
Delta Electronics CNCSoft ScreenEditor
Successful exploitation of this vulnerability could crash the device, and an out-of-bounds write may allow remote code execution.
-
CriticalICSA-21-119-01 5 CVEs
Texas Instruments SimpleLink
Successful exploitation of these vulnerabilities could result in memory corruption, allowing remote code execution and causing a denial-of-service condition.
-
Medium max 6.2ICSA-21-119-02 1 CVE
Cassia Networks Access Controller
Successful exploitation of this vulnerability could allow an attacker to read any file from the Access Controller server.
-
High max 7.8
Johnson Controls Exacq Technologies exacqVision
A local attacker could exploit this vulnerability to obtain Super User access to the underlying Ubuntu Linux operating system.
-
HighICSA-21-112-01 2 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities may allow code execution in the context of the current process or locally escalate privileges.
-
Medium
Mitsubishi Electric MELSEC iQ-R Series (Update C)
Successful exploitation of this vulnerability could cause the Ethernet port to enter a denial-of-service condition.
first Jun 9, 2020 -
High max 7.5
Hitachi Energy Relion 670, 650 and SAM600-IO
This updated advisory is a follow-up to the original advisory titled �ICSA-21-096-01 Hitachi ABB Power Grids Multiple Products� published April 6, 2021 on the ICS webpage at cisa.gov.
first Apr 6, 2021 -
Medium max 6.3ICSA-21-110-01 1 CVE
Hitachi ABB Power Grids Ellipse APM
Successful exploitation of this vulnerability may allow an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim 's browser.
-
High max 7.8ICSA-21-110-02 7 CVEs
ICSA-21-110-02_Rockwell Automation Stratix Switches
Cisco reported these vulnerabilities to Rockwell Automation.
-
CriticalICSA-21-110-03 1 CVE
Delta Industrial Automation COMMGR
Successful exploitation of this vulnerability could allow for remote code execution or cause the application to crash, resulting in a denial-of-service condition in the application server.
-
HighICSA-21-110-04 1 CVE
Delta Electronics CNCSoft ScreenEditor
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
HighICSA-21-110-05 2 CVEs
Delta Electronics CNCSoft-B
Successful exploitation of these vulnerabilities could lead to arbitrary code execution.
-
High max 10.0ICSA-21-110-06 6 CVEs
Eaton Intelligent Power Manager
Successful exploitation of these vulnerabilities could allow attackers to change certain settings, upload code, delete files, or execute commands.
-
High max 7.8
Schneider Electric C-Bus Toolkit
Successful exploitation of these vulnerabilities may allow remote code execution.
-
High max 8.2ICSA-21-105-02 4 CVEs
EIPStackGroup OpENer Ethernet/IP
Successful exploitation of these vulnerabilities could cause a denial-of-service condition and data exposure.
-
Critical max 9.8
Siemens and PKE SiNVR, SiVMS Video Server (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to read the SiVMS/SiNVR users database, including the passwords of all users in obfuscated cleartext and configuration files.
first Dec 10, 2019 -
HighICSA-21-103-01 1 CVE
Schneider Electric SoMachine Basic
Successful exploitation of this vulnerability may result in disclosure and retrieval of arbitrary data on the affected node via out-of-band (OOB) attack.
-
HighICSA-21-103-02 1 CVE
Advantech WebAccessSCADA
Successful exploitation of this vulnerability could allow an attacker to login as an -admin ' to fully control the system.
-
HighICSA-21-103-03 1 CVE
JTEKT TOYOPUC products
Successful exploitation of this vulnerability could allow an unauthorized user to stop Ethernet communications between devices from being established.
-
Critical max 9.9ICSA-21-103-10 12 CVEs
Siemens and PKE Control Center Server
Successful exploitation of these vulnerabilities may allow an attacker to read and write arbitrary files and sensitive data and execute commands and arbitrary code.
-
Critical max 9.3
Medtronic Conexus Radio Frequency Telemetry Protocol (Update C)
Successful exploitation of these vulnerabilities may allow an attacker with adjacent short-range access to one of the affected products to interfere with, generate, modify, or intercept the radio frequency (RF) communication of the Medtronic proprietary Conex…
first Mar 21, 2019 -
HighICSA-21-098-01 1 CVE
FATEK Automation WinProladder
Successful exploitation of this vulnerability could cause execution of arbitrary code.
-
Critical max 10.0ICSA-21-091-01 9 CVEs
Rockwell Automation FactoryTalk AssetCentre
Successful exploitation of these vulnerabilities may allow unauthenticated attackers to perform arbitrary command execution, SQL injection, or remote code execution.
-
Low max 2.4ICSMA-21-084-01 1 CVE
Philips Gemini PET/CT Family
Successful exploitation of this vulnerability involving removable media could allow access to sensitive information (including patient information).
-
High max 7.5
Rockwell Automation MicroLogix 1400 (Update A)
Successful exploitation of this vulnerability may result in a denial-of-service condition.
first Feb 2, 2021 -
Medium max 5.8
Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers (Update A)
Successful exploitation of this vulnerability may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products.
first Mar 2, 2021 -
Critical max 10.0ICSA-21-082-01 3 CVEs
Weintek EasyWeb cMT
Successful exploitation of these vulnerabilities could allow an unauthenticated remote attacker to access sensitive information and execute arbitrary code to gain root privileges.
-
CriticalICSA-21-082-02 3 CVEs
GE MU320E
Successful exploitation of these vulnerabilities could allow an attacker to escalate unnecessary privileges and use hard-coded credentials to take control of the device.
-
CriticalICSA-21-082-03 3 CVEs
GE Reason DR60
Successful exploitation of these vulnerabilities could allow an attacker to take full control of the digital fault recorder (DFR), remotely execute code, or escalate privileges.
-
Critical max 9.8
Rockwell Automation Logix Controllers (Update A)
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to bypass the verification mechanism and connect with Logix controllers. Additionally, this vulnerability could enable an unauthorized third-party tool to alter the co…
first Feb 25, 2021 -
Medium max 5.3ICSA-21-077-01 1 CVE
Johnson Controls Exacq Technologies exacqVision
Successful exploitation of this vulnerability could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system.
-
High max 7.5ICSA-21-077-02 1 CVE
Hitachi ABB Power Grids eSOMS
Successful exploitation of this vulnerability could allow an attacker to gain access to unauthorized information.