4,108 results · Feed
-
High
-
MediumICSA-20-343-09 1 CVE
Siemens SIMATIC Controller Web Servers
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Critical
-
CriticalICSMA-20-343-01 2 CVEs
GE Healthcare Imaging and Ultrasound Products
Successful exploitation of these vulnerabilities could occur if an attacker gains access to the healthcare delivery organization 's (HDO) network. If exploited, these vulnerabilities could allow an attacker to gain access to affected devices in a way that is …
-
High max 8.8ICSMA-20-345-01 3 CVEs
Medtronic MyCareLink Smart
Successful exploitation of these vulnerabilities together could result in the attacker being able to modify or fabricate data from the implanted cardiac device being uploaded to the CareLink Network and remotely execute code on the MCL Smart Patient Reader de…
-
High
WECON LeviStudioU (Update C)
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application and obtain sensitive information.
first Aug 25, 2020 -
HighICSA-20-338-01 1 CVE
National Instruments CompactRIO
Successful exploitation of this vulnerability could allow an attacker to reboot the device remotely.
-
HighICSA-20-336-01 1 CVE
Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD)
Successful exploitation of this vulnerability may allow unauthorized command execution by a local user of the Windows engineering workstation, which could result in loss of availability, confidentiality, and integrity of the workstation where EcoStruxure Oper…
-
CriticalICSA-20-329-01 3 CVEs
Rockwell Automation FactoryTalk Linx
Successful exploitation of these vulnerabilities could allow a denial-of-service condition, remote code execution, or leak information that could be used to bypass address space layout randomization (ASLR).
-
HighICSA-20-329-02 1 CVE
Fuji Electric V-Server Lite
Successful exploitation of this vulnerability could allow for remote code execution on the device.
-
High max 7.1ICSA-20-324-01 1 CVE
Johnson Controls Sensormatic Electronics American Dynamics victor Web Client
Successful exploitation of this vulnerability could allow an unauthenticated attacker on the network to create and sign their own JSON web token and use it to execute an HTTP API method without the need for valid authentication/authorization. Under certain ci…
-
CriticalICSA-20-324-03 1 CVE
Real Time Automation EtherNet/IP
Successful exploitation of this vulnerability could cause a denial-of-service condition, and a buffer overflow may allow remote code execution.
-
HighICSA-20-324-04 9 CVEs
Schneider Electric Interactive Graphical SCADA System (IGSS)
Successful exploitation of these vulnerabilities may result in remote code execution.
-
MediumICSA-20-317-01 1 CVE
Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability could cause a denial-of-service condition for the affected products.
-
MediumICSMA-20-317-01 1 CVE
BD Alaris 8015 PC Unit and BD Alaris Systems Manager
Successful exploitation of this vulnerability could lead to a drop in the wireless capability of the Alaris PC Unit. In order to exploit this vulnerability, an attacker would need to gain access to the network associated with the affected devices and redirect…
-
High max 8.8ICSA-20-315-01 1 CVE
ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA
OSIsoft reported this vulnerability to CISA.
-
High max 7.7ICSA-20-315-02 2 CVEs
OSIsoft PI Vision
Successful exploitation of these vulnerabilities may allow a remote attacker with write access to the PI ProcessBook files to inject code that is imported into PI Vision, or disclose information to a user with insufficient privileges.
-
HighICSA-20-315-03 1 CVE
Schneider Electric PLC Simulator for EcoStruxure Control Expert
Successful exploitation of this vulnerability could cause a denial-of-service condition, which could result in a failure of the EcoStruxture Control Expert Simulator.
-
Critical
-
HighICSA-20-310-01 2 CVEs
WECON PLC Editor
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
CriticalICSA-20-310-02 6 CVEs
Mitsubishi Electric GT14 Model of GOT1000 Series
Successful exploitation of these vulnerabilities by an attacker may result in a denial-of-service condition or code execution.
-
MediumICSA-20-308-02 2 CVEs
NEXCOM NIO50
Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information and cause a denial-of-service condition due to improper input validation.
-
CriticalICSA-20-303-02 6 CVEs
Mitsubishi Electric MELSEC iQ-R
Successful exploitation of these vulnerabilities by malicious attackers may result in network functions entering a denial-of-service condition or allow malware execution.
-
HighICSA-20-301-01 2 CVEs
SHUN HU Technology JUUKO Industrial Radio Remote Control
Successful exploitation of these vulnerabilities could allow attackers to replay commands, control the device, view commands, and/or stop the device from running.
-
HighICSMA-20-296-01 3 CVEs
B. Braun OnlineSuite
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, download and upload arbitrary files, and perform remote code execution.
-
High max 7.6ICSMA-20-296-02 11 CVEs
B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
Successful exploitation of these vulnerabilities could allow an attacker to compromise the security of the Space or compactplus communication devices, allowing an attacker to escalate privileges, view sensitive information, upload arbitrary files, and perform…
-
High max 7.6
Capsule Technologies SmartLinx Neuron 2 (Update A)
Successful exploitation of this vulnerability could provide an attacker with full control of a trusted device on a hospital 's internal network.
first Jul 14, 2020 -
High max 7.5ICSA-20-294-01 3 CVEs
Rockwell Automation 1794-AENT Flex I/O Series B
Successful exploitation of these vulnerabilities could crash the device being accessed, resulting in a buffer overflow condition that may allow remote code execution.
-
Critical max 9.1ICSA-20-294-02 1 CVE
Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer
Successful exploitation of this vulnerability could allow an attacker to remotely take control of the product.
-
HighICSA-20-289-01 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could allow an attacker to execute remote code as an administrator.
-
HighICSA-20-289-02 1 CVE
Advantech R-SeeNet
Successful exploitation of this vulnerability could allow remote attackers to retrieve sensitive information from the R-SeeNet database.
-
Critical max 9.8ICSA-20-287-01 6 CVEs
MOXA NPort IAW5000A-I/O Series
Successful exploitation of these vulnerabilities could allow an attacker to gain access to and hijack a session; allow an attacker with user privileges to perform requests with administrative privileges; allow the use of weak passwords; allow credentials of t…
-
HighICSA-20-287-02 1 CVE
LCDS LAquis SCADA
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
HighICSA-20-287-03 1 CVE
Flexera InstallShield
Successful exploitation of this vulnerability could allow execution of a malicious DLL.
-
Critical max 9.8ICSA-20-287-04 1 CVE
Fieldcomm Group HART-IP and hipserver
Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution.
-
Medium
-
High
-
HighICSA-20-273-01 3 CVEs
ICSA-20-273-01_MB Connect line mbCONNECT24, mymbCONNECT24
Alik Koldobsky, Ofir Manzur, Hay Mizrachi, Nikolay Sokolik, and Haviv Vaizman from OTORIO reported these vulnerabilities to CISA.
-
Low max 2.8ICSA-20-273-02 1 CVE
Yokogawa WideField3
Successful exploitation of this vulnerability could terminate the program abnormally.
-
High max 7.7ICSA-20-273-03 6 CVEs
B&R Automation SiteManager and GateManager
Successful exploitation of these vulnerabilities could allow for arbitrary information disclosure, manipulation, and a denial-of-service condition.