4,108 results · Feed
-
Highfirst Sep 11, 2018
-
Highfirst Oct 9, 2018
-
Medium
Siemens SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP OpenController (Update A)
first Oct 9, 2018 -
Mediumfirst Nov 13, 2018
-
Mediumfirst Nov 13, 2018
-
Highfirst Nov 13, 2018
-
Criticalfirst Dec 11, 2018
-
Highfirst Jan 8, 2019
-
High max 7.5first Jan 8, 2019
-
Mediumfirst Feb 12, 2019
-
High max 7.5first Apr 9, 2019
-
Highfirst Jun 11, 2019
-
CriticalICSA-20-035-01 1 CVE
ICSA-20-035-01_AutomationDirect C-More Touch Panels
Joel Langill of Amentum Mission Engineering & Resilience reported this vulnerability to CISA.
-
High max 7.1
Medtronic 2090 Carelink Programmer Vulnerabilities (Update C)
Successful exploitation of these vulnerabilities may allow an attacker with physical access to a 2090 Programmer to obtain per-product credentials to the software deployment network. These credentials grant access to the software deployment network, but acces…
first Feb 27, 2018 -
CriticalICSMA-20-023-01 6 CVEs
GE CARESCAPE, ApexPro, and Clinical Information Center systems
Successful exploitation of these vulnerabilities could occur when an attacker gains access to the mission critical (MC) and/or information exchange (IX) networks due to improper configuration or physical access to devices. An exploit could result in a loss of…
-
CriticalICSA-20-021-01 2 CVEs
ICSA-20-021-01_Honeywell Maxpro VMS & NVR
Joachim Kerschbaumer discovered these vulnerabilities; Honeywell reported these vulnerabilities to CISA.
-
Highfirst Oct 8, 2019
-
Highfirst Dec 10, 2019
-
HighICSA-20-014-01 1 CVE
GE PACSystems RX3i
Successful exploitation of this vulnerability could cause the system to change to halt-mode, resulting in a denial-of-service condition.
-
Critical
-
Medium
-
HighICSA-20-014-06 4 CVEs
OSIsoft PI Vision
Successful exploitation of these vulnerabilities may allow disclosure of sensitive information and limit the availability of the system.
-
Critical
Interpeak IPnet TCP/IP Stack (Update D)
Successful exploitation of these vulnerabilities could allow remote code execution.
first Oct 1, 2019 -
High
AVEVA Vijeo Citect and Citect SCADA (Update A)
The IEC870IP driver for AVEVA 's Vijeo Citect and Citect SCADA and Schneider Electric 's Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.
first Oct 17, 2019 -
High
Omron CX-Supervisor (Update A)
Successful exploitation of this vulnerability could result in information disclosure, total compromise of the system, and system unavailability.
first Nov 14, 2019 -
HighICSA-19-353-01 1 CVE
Moxa EDS Ethernet Switches
Successful exploitation of this vulnerability could cause the target device to go out of service.
-
CriticalICSA-19-353-02 1 CVE
Equinox Control Expert
Successful exploitation of this vulnerability may allow remote code execution.
-
HighICSA-19-353-03 1 CVE
WECON PLC Editor
Successful exploitation could allow an attacker to execute code under the privileges of the application.
-
HighICSA-19-353-04 1 CVE
Reliable Controls MACH-ProWebCom/Sys
Successful exploitation of this vulnerability could allow an attacker to execute commands on behalf of the affected user.
-
MediumICSMA-19-353-01 1 CVE
Philips Veradius Unity, Pulsera, and Endura Dual WAN Routers
Successful exploitation of this vulnerability could compromise the management interface of the front end router impacting the availability of data transfer via wireless communication.
-
MediumICSA-19-351-01 1 CVE
GE S2020/S2020G Fast Switch 61850
Successful exploitation of this vulnerability may allow an attacker to inject arbitrary code and allow disclosure of sensitive data.
-
High max 7.5
PLC Cycle Time Influences (Update A)
High network load can consume CPU power in such a way that the normal operation of the device can be affected; that is, the configured cycle time can be influenced.
first Apr 16, 2019 -
Medium
Philips IntelliBridge EC40/80 (Update A)
Successful exploitation of this vulnerability may allow an attacker unauthorized access to the IntelliBridge EC40/80 hub and may allow access to execute software, modify system configuration, or view/update files, including unidentifiable patient data.
first Nov 14, 2019 -
CriticalICSA-19-346-01 1 CVE
Advantech DiagAnywhere Server
Successful exploitation of this vulnerability may allow remote code execution.
-
High max 8.6ICSA-19-346-02 3 CVEs
Omron PLC CJ and CS Series
This updated advisory is a follow-up to the original advisory titled ICSA-19-346-02 Omron PLC CJ and CS Series (Update A) published November 29, 2022, on the ICS webpage at cisa.gov.
-
MediumICSA-19-346-03 1 CVE
Omron PLC CJ, CS and NJ Series
Successful exploitation of this vulnerability could allow an attacker to brute force login credentials, obtain unauthorized access of the system, and may allow an attacker unauthorized access to the FTP interface.
-
Medium
-
High
-
HighICSA-19-339-01 1 CVE
Thales DIS SafeNet Sentinel LDK License Manager Runtime
Successful exploitation of this vulnerability could allow a local attacker to escalate privileges.
-
Critical max 9.8ICSA-19-339-02 5 CVEs
Weidmueller Industrial Ethernet Switches
Successful exploitation of these vulnerabilities could allow a remote attacker to gain unauthorized access to the device, affecting the confidentiality, integrity, and availability of the device the attacker is targeting.