4,108 results · Feed
-
CriticalICSA-20-196-01 6 CVEs
Advantech iView
Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, limit system availability, and/or crash the application.
-
CriticalICSA-20-196-02 1 CVE
Moxa EDR-G902 and EDR-G903 Series Routers
Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution.
-
Critical
-
Medium
-
HighICSA-20-196-06 1 CVE
Siemens SIMATIC S7-200 SMART CPU Family
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Critical
-
Critical
Rockwell Automation FactoryTalk Linx Software (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, obtain remote code execution, and read sensitive information.
first Jun 11, 2020 -
High max 7.8ICSA-20-191-01 2 CVEs
Phoenix Contact Automation Worx Software Suite
Successful exploitation could allow an attacker to execute arbitrary code under the privileges of the application.
-
LowICSA-20-191-02 1 CVE
Rockwell Automation Logix Designer Studio 5000
Successful exploitation of this vulnerability could allow an unauthenticated attacker to craft a malicious file, which when parsed, could lead to some information disclosure of hostnames or other resources from the program.
-
Critical
Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L and FX Series CPU Modules (Update A)
Successful exploitation of this vulnerability could allow information disclosure, information tampering, unauthorized operation, or a denial-of-service condition.
first Jun 23, 2020 -
HighICSA-20-189-01 2 CVEs
Grundfos CIM 500
Successful exploitation of these vulnerabilities could allow access to cleartext credential data.
-
Critical
-
Medium max 6.8
Johnson Controls exacqVision (Update A)
Successful exploitation of this vulnerability could allow an attacker with administrative privileges to potentially download and run a malicious executable that could allow the execution of operating system commands on the system.
first Jun 18, 2020 -
CriticalICSA-20-184-01 5 CVEs
Nortek Linear eMerge 50P/5000P
Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.
-
High max 8.8ICSA-20-184-02 1 CVE
ABB System 800xA Information Manager
Successful exploitation of this vulnerability could allow an attacker to inject and execute arbitrary code on the information manager server.
-
Critical max 5.3first May 26, 2020
-
HighICSA-20-182-02 2 CVEs
Mitsubishi Electric Factory Automation Engineering Software Products
Successful exploitation of these vulnerabilities could allow a local attacker to send files outside of the system as well as cause a denial-of-service condition.
-
High max 7.1ICSA-20-177-02 1 CVE
Rockwell Automation FactoryTalk Services Platform XXE
Successful exploitation of this vulnerability could lead to a denial-of-service condition and to the arbitrary reading of any local file via system level services.
-
High max 7.8ICSA-20-177-03 2 CVEs
Rockwell Automation FactoryTalk View SE
Successful exploitation of these vulnerabilities could lead to unauthorized access to server data.
-
Low max 3.6ICSMA-20-177-01 1 CVE
Philips Ultrasound Systems
Successful exploitation of this vulnerability may allow a non-authenticated attacker to view or modify information.
-
High max 8.8
Baxter ExactaMix (Update A)
Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive data, alteration of system configuration, alteration of system resources, and impact to system availability.
first Jun 18, 2020 -
High
Baxter Phoenix Hemodialysis Delivery System (Update A)
Successful exploitation of this vulnerability could allow an attacker with unauthorized network access to view sensitive data.
first Jun 18, 2020 -
High
Baxter Sigma Spectrum Infusion Pumps (Update B)
Successful exploitation of these vulnerabilities could result in access to sensitive data, alteration of system configuration, and impact to system availability.
first Jun 18, 2020 -
Medium max 5.3
BD Alaris PCU (Update A)
Successful exploitation of this vulnerability could allow an attacker to cause a denial of service (DoS) on the target system and could cause the BD Alaris PCU to disconnect from the facility 's wireless network.
first Jun 18, 2020 -
MediumICSA-20-175-02 2 CVEs
Honeywell ControlEdge PLC and RTU
Successful exploitation of these vulnerabilities could allow an attacker to obtain passwords and session tokens.
-
High max 7.8ICSA-20-175-03 1 CVE
ABB Device Library Wizard
Successful exploitation of this vulnerability could allow a low-level user to escalate privileges and fully compromise the device.
-
CriticalICSA-20-170-02 5 CVEs
Mitsubishi Electric MC Works64, MC Works32
Successful exploitation of these vulnerabilities may allow remote code execution, a denial-of-service condition, information disclosure, or information tampering.
-
CriticalICSA-20-170-03 5 CVEs
ICONICS GENESIS64, GENESIS32
Successful exploitation of these vulnerabilities may allow remote code execution or denial of service.
-
HighICSA-20-170-04 1 CVE
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute remote COM objects with elevated privileges.
-
Critical max 9.0ICSA-20-170-05 4 CVEs
Rockwell Automation FactoryTalk View SE
Successful exploitation of these vulnerabilities may allow a remote authenticated attacker to manipulate data of affected devices.
-
MediumICSMA-20-170-05 5 CVEs
BIOTRONIK CardioMessenger II
Successful exploitation of these vulnerabilities could allow an attacker with physical access to the CardioMessenger to obtain sensitive data, obtain transmitted medical data from implanted cardiac devices with the implant 's serial number or impact Cardio Me…
-
HighICSA-20-163-01 1 CVE
OSIsoft PI Web API 2019
Successful exploitation of this vulnerability could allow a remote authenticated attacker with write access to a PI Server to trick a user into interacting with a PI Web API endpoint that executes arbitrary JavaScript in the user 's browser, resulting in view…
-
Low max 2.0ICSMA-20-163-01 1 CVE
Philips IntelliBridge Enterprise IBE
Successful exploitation of this vulnerability could allow an attacker to access credentials to the hospital 's clinical information systems (EMR).
-
Medium
Philips PageWriter TC10, TC20, TC30, TC50, and TC70 Cardiographs (Update A)
Successful exploitation of these vulnerabilities could allow buffer overflows, or allow an attacker to access and modify settings on the device.
first Aug 16, 2018 -
High max 7.5
OSIsoft PI System (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized information, delete or modify local processes, and crash the affected device.
first May 12, 2020 -
CriticalICSA-20-161-01 1 CVE
Advantech WebAccess Node
Successful exploitation of this vulnerability could crash the application being accessed; a buffer overflow condition may allow remote code execution.
-
Critical
-
High max 7.3ICSA-20-154-01 2 CVEs
ABB System 800xA
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, cause system functions to stop, and corrupt user applications.
-
High max 7.8ICSA-20-154-02 1 CVE
ABB System 800xA Base
Successful exploitation of this vulnerability could allow an attacker to escalate privileges and cause system functions to stop or malfunction.
-
High max 7.8ICSA-20-154-03 7 CVEs
ABB Multiple System 800xA Products
Successful exploitation of these vulnerabilities could allow an attacker to make the system node inaccessible or tamper with runtime data in the system.