4,108 results · Feed
-
Critical max 9.8
Hitachi ABB Power Grids eSOMS Telerik
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files to the server, discover sensitive information, or execute arbitrary code.
-
Medium
BD Alaris 8015 PC Unit (Update B)
Successful exploitation of these vulnerabilities could allow an unauthorized user with physical access to the affected devices to access the host facility 's wireless network authentication credentials and other sensitive technical data, which may compromise …
first Jan 17, 2017 -
MediumICSA-21-075-01 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could allow an unauthorized user to steal a user 's cookie/session token or redirect an authorized user to a malicious webpage.
-
MediumICSA-21-075-03 1 CVE
Hitachi ABB Power Grids AFS Series
Successful exploitation of this vulnerability could cause a denial-of-service condition on one of the ports in a HSR ring.
-
HighICSA-21-070-01 4 CVEs
Schneider Electric IGSS SCADA Software
Successful exploitation of these vulnerabilities could result in remote code execution.
-
High max 7.5
Siemens SINEMA Remote Connect (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to circumvent the system authorization for certain functionalities, and to execute privileged functions.
first Apr 9, 2019 -
High max 7.5first Apr 9, 2019
-
Highfirst Jun 11, 2019
-
High
Luxion KeyShot (Update A)
Successful exploitation of these vulnerabilities could allow arbitrary code execution, the storing of arbitrary scripts into automatic startup folders, and the attacking of products without sufficient UI warning.
first Feb 4, 2021 -
Medium
-
High
-
High
-
Medium max 6.5
-
High max 6.1ICSA-21-063-01 2 CVEs
Rockwell Automation 1734-AENTR Series B and Series C
Successful exploitation of these vulnerabilities could lead to unauthorized data modification on the affected devices.
-
Medium max 7.0ICSA-21-063-02 7 CVEs
ICSA-21-063-02_Schneider Electric EcoStruxure Building Operation (EBO)
Luis Vázquez, Francisco Palma, and Diego León of Zerolynx in coordination with INCIBE and Alessandro Bosco, Luca Di Giuseppe, Alessandro Sabetta, and Massimiliano Brolli of TIM Security Red Team Research reported these vulnerabilities to Schneider Electric.
-
Medium max 5.5ICSA-21-061-01 2 CVEs
Hitachi ABB Power Grids Ellipse EAM
Successful exploitation of these vulnerabilities could allow an attacker to steal sensitive information, hijack a user 's session, or compromise authentication credentials.
-
High max 7.5ICSA-21-061-03 18 CVEs
MB connect line mbCONNECT24, mymbCONNECT24
Successful exploitation of these vulnerabilities could allow a remote attacker to gain unauthorized access to arbitrary information or allow remote code execution.
-
High max 8.8ICSA-21-056-01 1 CVE
PerFact OpenVPN-Client
Successful exploitation of this vulnerability could allow for local privilege escalation or remote code execution through a malicious webpage.
-
HighICSA-21-056-02 5 CVEs
FATEK Automation FvDesigner
Successful exploitation of these vulnerabilities may allow an attacker to read/modify information, execute arbitrary, and/or crash the application.
-
HighICSA-21-056-04 1 CVE
ProSoft Technology ICX35
Successful exploitation of this vulnerability could allow an attacker to change the current user 's password and alter device configurations.
-
CriticalICSA-21-054-01 1 CVE
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability could allow a remote, unauthenticated attacker to create new users in the FactoryTalk Services Platform administration console. These new users could allow an attacker to modify or delete configuration and applica…
-
CriticalICSA-21-054-02 1 CVE
Advantech BB-ESWGP506-2SFP-T
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information and execute arbitrary code.
-
Critical max 7.5ICSA-21-054-03 5 CVEs
Advantech Spectre RT Industrial Routers
Successful exploitation of these vulnerabilities may allow information disclosure, deletion of files, and remote code execution.
-
High
Schneider Electric EcoStruxure Power Build-Rapsody (Update A)
Successful exploitation of this vulnerability could allow a local attacker to upload a malicious SSD file, resulting in a use-after-free condition or a stack-based buffer overflow.
first Jan 12, 2021 -
High max 7.5ICSA-21-049-01 1 CVE
Johnson Controls Metasys Reporting Engine (MRE) Web Services
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
-
High max 7.5ICSA-21-047-02 1 CVE
Rockwell Automation Allen-Bradley Micrologix 1100
Successful exploitation of this vulnerability could result in denial-of-service conditions.
-
MediumICSMA-21-047-01 3 CVEs
Hamilton-T1
Successful exploitation of these vulnerabilities could allow attackers with physical access to the device to obtain sensitive information or crash the device being accessed.
-
HighICSA-21-042-02 1 CVE
Rockwell Automation DriveTools SP and Drives AOP
Successful exploitation of this vulnerability may result in privilege escalation and total loss of device confidentiality, integrity, and availability.
-
Highfirst Jun 11, 2019
-
Mediumfirst Apr 14, 2020
-
MediumICSA-21-040-01 2 CVEs
GE Digital HMI/SCADA iFIX
Successful exploitation of these vulnerabilities could allow an attacker to escalate their privileges.
-
CriticalICSA-21-040-02 4 CVEs
Advantech iView
Successful exploitation of these vulnerabilities may allow an attacker to disclose information, escalate privileges to Administrator, perform an arbitrary file read, and remotely execute commands.
-
High
-
Critical max 7.5
-
Medium
-
Medium
-
High
-
HighICSA-21-035-02 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability may allow code execution in the context of the current process.
-
HighICSA-21-028-01 4 CVEs
Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform
Successful exploitation of these vulnerabilities may result in denial-of-service conditions.
-
High max 9.8