4,108 results · Feed
-
Critical max 9.8ICSA-20-154-04 5 CVEs
ABB Central Licensing System
Successful exploitation of these vulnerabilities could allow an attacker to take control of the affected system node remotely and cause an affected CLS Server node to stop or prevent legitimate access to the affected CLS Server.
-
CriticalICSA-20-154-05 1 CVE
GE Grid Solutions Reason RT Clocks
Successful exploitation of this vulnerability could allow access to sensitive information, execution of arbitrary code, and cause the device to become unresponsive.
-
Critical max 10.0ICSA-20-154-06 1 CVE
SWARCO CPU LS4000
Successful exploitation of this vulnerability could allow access to the device and disturb operations with connected devices.
-
High max 8.8
-
Critical max 9.9ICSA-20-142-01 1 CVE
Johnson Controls Software House C-CURE 9000 and American Dynamics victor VMS
Successful exploitation of this vulnerability may allow an attacker to access credentials used for access to the application.
-
HighICSA-20-142-02 5 CVEs
Schneider Electric EcoStruxure Operator Terminal Expert
Successful exploitation of these vulnerabilities could allow unauthorized write access or remote code execution.
-
HighICSA-20-140-01 2 CVEs
Rockwell Automation EDS Subsystem
Successful exploitation of these vulnerabilities could lead to a denial-of-service condition.
-
Critical max 10.0ICSA-20-140-02 3 CVEs
Emerson OpenEnterprise
Successful exploitation of these vulnerabilities could allow an attacker access to OpenEnterprise configuration services or access passwords for OpenEnterprise user accounts.
-
High
3S-Smart Software Solutions GmbH CODESYS V3 (Update A)
Successful exploitation of this vulnerability could allow for an attacker with access to PLC traffic to obtain user credentials.
first Aug 1, 2019 -
CriticalICSA-20-135-01 5 CVEs
Opto 22 SoftPAC Project
Successful exploitation of these vulnerabilities could allow arbitrary file write access with system access, start or stop service, allow remote code execution, and limit system availability.
-
Critical max 10.0ICSA-20-135-02 1 CVE
Emerson WirelessHART Gateway
Successful exploitation of this vulnerability could disable the internal gateway firewall. Once the gateway's firewall is disabled, a malicious user could issue specific commands to the gateway, which could then be forwarded on to the end user's wireless devi…
-
Highfirst Jul 9, 2019
-
High max 7.5first Aug 13, 2019
-
High
3S-Smart Software Solutions GmbH CODESYS V3 Library Manager (Update A)
Successful exploitation of this vulnerability may allow malicious content from manipulated libraries to be displayed or executed.
first Sep 12, 2019 -
High max 8.8ICSA-20-133-01 2 CVEs
Eaton Intelligent Power Manager
Successful exploitation of these vulnerabilities could allow an attacker to perform command injection or code execution and allow non-administrator users to manipulate the system configurations.
-
CriticalICSA-20-128-01 8 CVEs
Advantech WebAccess Node
Successful exploitation of these vulnerabilities may allow information disclosure, remote code execution, and compromise system availability.
-
HighICSA-20-126-01 1 CVE
Fazecast jSerialComm
Successful exploitation of this vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.
-
CriticalICSA-20-126-02 2 CVEs
SAE IT-systems FW-50 Remote Telemetry Unit (RTU)
Successful exploitation of these vulnerabilities could allow an attacker to execute remote code through input injection, or allow an attacker to view the file structure of the affected device and access files that should be inaccessible.
-
MediumICSA-20-119-01 2 CVEs
LCDS LAquis SCADA
Successful exploitation of these vulnerabilities could allow unauthorized attackers to view sensitive information and create files in arbitrary locations.
-
Critical max 8.8
Sierra Wireless AirLink ALEOS (Update B)
Successful exploitation of these vulnerabilities could allow attackers to remotely execute code, discover user credentials, upload files, or discover file paths.
first May 2, 2019 -
CriticalICSA-20-112-01 1 CVE
Inductive Automation Ignition
Successful exploitation of this vulnerability could allow an attacker to write endless log statements into the database, which could result in a denial-of-service condition.
-
HighICSA-20-105-01 2 CVEs
Eaton HMiSoft VU3
Successful exploitation of these vulnerabilities could crash the device being accessed and may allow remote code execution or information disclosure.
-
HighICSA-20-105-02 1 CVE
Triangle MicroWorks DNP3 Outstation Libraries
Successful exploitation of this vulnerability could possibly allow remote attackers to stop the execution of code on affected equipment.
-
CriticalICSA-20-105-03 3 CVEs
Triangle MicroWorks SCADA Data Gateway
These vulnerabilities allow remote attackers to execute arbitrary code and disclose on affected installations of Triangle Microworks SCADA Data Gateway with DNP3 Outstation channels. Authentication is not required to exploit these vulnerabilities.
-
Critical
-
HighICSA-20-100-01 1 CVE
Rockwell Automation RSLinx Classic
Successful exploitation of this vulnerability could allow a local authenticated attacker to execute malicious code when opening RSLinx Classic.
-
Critical
Synergy Systems & Solutions HUSKY RTU (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to read sensitive information, execute arbitrary code, or cause a denial-of-service condition.
first Feb 11, 2020 -
CriticalICSA-20-098-01 8 CVEs
Advantech WebAccess/NMS
Successful exploitation of these vulnerabilities may allow an attacker to gain remote code execution, upload files, delete files, cause a denial-of-service condition, and create an admin account for the application.
-
MediumICSA-20-098-02 1 CVE
GE Digital CIMPLICITY
Successful exploitation of this vulnerability could allow an adversary to modify the systemwide CIMPLICITY configuration, leading to the arbitrary execution of code.
-
MediumICSA-20-098-03 1 CVE
HMS Networks eWON Flexy and Cosy
Successful exploitation of this vulnerability could initiate a password change.
-
HighICSA-20-098-04 1 CVE
Fuji Electric V-Server Lite
Successful exploitation of this vulnerability could allow a remote attacker to gain elevated privileges for remote code execution.
-
Medium max 4.3ICSA-20-098-05 1 CVE
ICSA-20-098-05_KUKA.Sim Pro
Federico Maggi of Trend Micro reported this vulnerability to CISA.
-
High max 7.5ICSA-20-093-01 3 CVEs
B&R Automation Studio
Successful exploitation of these vulnerabilities could allow an attacker to delete arbitrary files from this system, fetch arbitrary files, or perform arbitrary write operations.
-
High max 7.5
Schneider Electric Modicon Controllers (Update A)
Successful exploitation of this vulnerability could result in a denial-of-service condition.
first Jan 16, 2020 -
CriticalICSA-20-091-01 1 CVE
Hirschmann Automation and Control HiOS and HiSecOS Products
Successful exploitation of this vulnerability could allow an unauthenticated, remote attacker to overflow a buffer and fully compromise the device.
-
MediumICSA-20-091-02 1 CVE
Mitsubishi Electric MELSEC
Successful exploitation of this vulnerability may render the device unresponsive.
-
MediumICSMA-20-091-01 1 CVE
BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System
The affected BD medical devices utilize a method of software application implementation called kiosk mode. This kiosk mode is vulnerable to local breakouts, which could allow an attacker with physical access to bypass kiosk mode and view and/or modify sensiti…
-
HighICSA-20-086-01 1 CVE
Advantech WebAccess
Successful exploitation of this vulnerability may allow remote code execution.
-
HighICSA-20-084-02 2 CVEs
Schneider Electric IGSS SCADA Software
Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive data and functions.
-
MediumICSA-20-079-01 1 CVE
Systech NDS-5000 Terminal Server
Successful exploitation of this vulnerability could allow information disclosure, limit system availability, and may allow remote code execution.