4,108 results · Feed
-
HighICSA-20-266-01 2 CVEs
GE Digital APM Classic
Successful exploitation of these vulnerabilities could allow access to sensitive information.
-
MediumICSA-20-266-02 2 CVEs
GE Reason S20 Ethernet Switch
Successful exploitation of these vulnerabilities could allow unauthorized accounts manipulation and allow for remote code execution.
-
HighICSA-20-261-01 1 CVE
Advantech WebAccess Node
Successful exploitation of this vulnerability could allow an attacker to escalate their privileges.
-
Medium max 6.8ICSMA-20-261-01 5 CVEs
ICSMA-20-261-01_Philips Clinical Collaboration Platform
Northridge Hospital Medical Center reported these vulnerabilities to Philips.
-
High
ENTTEC Lighting Controllers (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized SSH/SCP access to devices, inject malicious code, run commands with root privileges, and read, write, and execute files in system directories as any user.
first Jun 25, 2020 -
Critical max 9.8ICSA-20-254-01 3 CVEs
AVEVA Enterprise Data Management Web
Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected device.
-
HighICSA-20-254-02 1 CVE
FATEK Automation PLC WinProladder
Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may cause a denial-of-service event and remote code execution.
-
LowICSA-20-254-03 1 CVE
HMS Networks Ewon Flexy and Cosy
Successful exploitation of this vulnerability could allow attackers to retrieve limited confidential information.
-
Highfirst Apr 14, 2020
-
High
-
High
-
Low
-
Medium
-
High
-
Critical max 8.8ICSA-20-240-01 5 CVEs
Red Lion N-Tron 702-W, 702M12-W
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to sensitive information, execute system commands, and perform actions in the context of an attacked user.
-
CriticalICSA-20-238-01 1 CVE
Advantech iView
Successful exploitation of this vulnerability could allow an attacker to read/modify information, execute arbitrary code, limit system availability, and/or crash the application.
-
Low max 3.8ICSA-20-238-02 1 CVE
Emerson OpenEnterprise
Successful exploitation of this vulnerability could allow an attacker access to credentials held by OpenEnterprise used for accessing field devices and external systems.
-
Low max 2.1ICSMA-20-233-01 1 CVE
Philips SureSigns VS4
Successful exploitation of these vulnerabilities could allow an attacker access to administrative controls and system configurations, which could allow changes to system configuration items causing patient data to be sent to a remote destination.
-
Highfirst Jul 14, 2020
-
CriticalICSA-20-224-02 2 CVEs
Schneider Electric APC Easy UPS On-Line
Successful exploitation of these vulnerabilities could lead to remote code execution.
-
MediumICSA-20-224-03 1 CVE
Tridium Niagara
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
Critical max 9.8
-
Critical
-
High
-
High
-
Medium max 4.3ICSA-20-219-01 1 CVE
Trailer Power Line Communications
The National Motor Freight Traffic Association (NMFTA) and Assured Information Security (AIS) have released research detailing a vulnerability within trailer Power Line Communications (PLC) signals. Their research indicates it is possible to read PLC signals …
-
CriticalICSA-20-219-02 6 CVEs
Advantech WebAccess HMI Designer
Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.
-
HighICSA-20-219-03 1 CVE
Geutebrück G-Cam and G-Code
Successful exploitation of this vulnerability could allow remote code execution as root.
-
HighICSA-20-219-04 5 CVEs
Delta Industrial Automation TPEditor
Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.
-
HighICSA-20-217-01 3 CVEs
Delta Industrial Automation CNCSoft ScreenEditor
Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.
-
HighICSA-20-212-01 1 CVE
Inductive Automation Ignition 8
Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information.
-
Medium max 5.3ICSMA-20-212-01 1 CVE
Philips DreamMapper
Successful exploitation of this vulnerability could allow an attacker access to the log file information containing descriptive error messages.
-
High
Delta Industrial Automation DOPSoft (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.
first Jun 30, 2020 -
Critical max 10.0ICSA-20-210-01 4 CVEs
Secomea GateManager
Successful exploitation of these vulnerabilities could allow a remote attacker to gain remote code execution on the device.
-
Critical max 9.8ICSA-20-210-02 2 CVEs
Softing Industrial Automation OPC
Successful exploitation of these vulnerabilities could crash the device being accessed. A buffer-overflow condition may also allow remote code execution.
-
Critical max 9.6ICSA-20-210-03 1 CVE
HMS Industrial Networks eCatcher
Successful exploitation of this vulnerability could crash the device being accessed. In addition, a buffer overflow condition may allow remote code execution with highest privileges.
-
CriticalICSA-20-205-01 5 CVEs
Schneider Electric Triconex TriStation and Tricon Communication Module
Successful exploitation of these vulnerabilities may allow an attacker to view clear text data on the network, cause a denial-of-service condition, or allow improper access.
-
Mediumfirst Aug 13, 2019
-
Mediumfirst Nov 12, 2019
-
High
Baxter PrismaFlex and PrisMax (Update B)
Successful exploitation of these vulnerabilities may allow an attacker with network access to view and alter sensitive data.
first Jun 18, 2020