4,108 results · Feed
-
HighICSA-19-337-01 1 CVE
Reliable Controls LicenseManager
Successful exploitation of this vulnerability could allow an attacker to crash the system, view sensitive data, or execute arbitrary commands.
-
CriticalICSA-19-337-02 14 CVEs
Moxa AWK-3121
Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information, cause availability issues, and execute remote code.
-
CriticalICSA-19-330-01 1 CVE
ABB Relion 670 Series
Successful exploitation of this vulnerability may allow an attacker to read and delete files on the device.
-
MediumICSA-19-330-02 1 CVE
ABB Relion 650 and 670 Series
Successful exploitation of this vulnerability may allow an attacker to reboot the device, causing a denial of service.
-
CriticalICSA-19-323-01 4 CVEs
Flexera FlexNet Publisher
These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product. The memory corruption vulnerability could allow remote code execution.
-
CriticalICSA-19-318-05 1 CVE
ABB Power Generation Information Manager (PGIM) and Plant Connect
Successful exploitation of this vulnerability could allow a remote attacker to bypass authentication and extract credentials from the device.
-
Medium
-
Medium
Philips Tasy EMR (Update A)
Successful exploitation of these vulnerabilities could impact or compromise patient confidentiality and system integrity. Philips ' analysis has shown these issues, if fully exploited, may allow an attacker of low skill to provide unexpected input into the ap…
first Apr 30, 2019 -
HighICSA-19-311-01 1 CVE
Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules
Successful exploitation of this vulnerability may prevent the FTP client from connecting to the FTP server on MELSEC-Q Series and MELSEC-L Series CPU module.
-
HighICSA-19-311-02 1 CVE
Fuji Electric V-Server
Successful exploitation of this vulnerability could crash the device being accessed; several heap-based buffer overflows have been identified.
-
Medium max 4.8ICSMA-19-311-01 2 CVEs
Medtronic Valleylab FT10 and LS10
Successful exploitation of these vulnerabilities may allow an attacker to connect inauthentic instruments to the affected products by spoofing RFID security mechanisms. This may lead to a loss of performance integrity and platform availability due to incorrec…
-
Critical max 7.0ICSMA-19-311-02 3 CVEs
Medtronic Valleylab FT10 and FX8
Successful exploitation of these vulnerabilities may allow an attacker to overwrite files or remotely execute code, resulting in a remote, non-root shell on the affected products. By default, the network connections on these devices are disabled. Additionally…
-
High
Omron Network Configurator for DeviceNet (Update A)
Successful exploitation of this vulnerability could allow an attacker to achieve arbitrary code execution under the privileges of the application.
first May 14, 2019 -
CriticalICSA-19-309-01 1 CVE
Omron CX-Supervisor
Successful exploitation of this vulnerability could result in information disclosure, total compromise of the system, and system unavailability.
-
CriticalICSA-19-304-01 4 CVEs
Advantech WISE-PaaS/RMM
Successful exploitation of these vulnerabilities may allow information disclosure, remote code execution, and compromise system availability.
-
HighICSA-19-304-02 1 CVE
Honeywell equIP Series IP Cameras
Successful exploitation of this vulnerability could result in denial-of-service conditions.
-
HighICSA-19-304-03 1 CVE
Honeywell equIP and Performance Series IP Cameras
Successful exploitation of this vulnerability could result in unauthenticated access.
-
HighICSA-19-304-04 1 CVE
Honeywell equIP and Performance Series IP Cameras and Recorders
Successful exploitation of this vulnerability could result in unauthenticated access.
-
HighICSA-19-302-01 1 CVE
PHOENIX CONTACT Automation Worx Software Suite
Successful exploitation of this vulnerability could compromise the availability, integrity, or confidentiality of an application programming workstation. Automated systems programmed using one of the affected products are not impacted.
-
Critical
Moxa IKS, EDS (Update A)
Successful exploitation of these vulnerabilities could allow the reading of sensitive information, remote code execution, arbitrary configuration changes, authentication bypass, sensitive data capture, reboot of the device, device crash, or full compromise of…
first Feb 26, 2019 -
CriticalICSA-19-297-01 2 CVEs
Rittal Chiller SK 3232-Series
Successful exploitation of these vulnerabilities could disrupt the primary operations of the affected component, shut down cooling to other equipment, and allow changes to the temperature set point.
-
MediumICSA-19-297-02 1 CVE
Honeywell IP-AK2
Successful exploitation of this vulnerability could allow an attacker to download configuration files directly through a URL without authentication, exposing configuration and authorized visitor information.
-
MediumICSMA-19-297-01 1 CVE
Philips IntelliSpace Perinatal
Successful exploitation of this vulnerability may allow an attacker unauthorized access to system resources, including access to execute software or to view/update files, directories, or system configuration. This could impact confidentiality and integrity of…
-
CriticalICSA-19-295-01 3 CVEs
ICSA-19-295-01_Schneider Electric ProClima
Haojun Hou reported a vulnerability to CISA. Kushal Arvind Shah of Fortinet,Yongjun Liu of NSFOCUS security team, and Telus reported vulnerabilities to Schneider Electric.
-
HighICSA-19-290-02 2 CVEs
Horner Automation Cscape
Successful exploitation of these vulnerabilities could crash the device being accessed, which may allow the attacker to access information and execute arbitrary code.
-
High
Philips Brilliance Computed Tomography (CT) System (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to attain elevated privileges and access unauthorized system resources, including access to execute software or to view/update files including patient health information (PHI), directories…
first May 3, 2018 -
Medium
ICSA-17-129-01 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update K)
first May 8, 2017 -
Critical
ICSA-19-134-08 Siemens SIMATIC PCS7, WinCC, TIA Portal (Update D)
first May 14, 2019 -
Highfirst Jul 9, 2019
-
High
BD Pyxis (Update A)
Successful exploitation of this vulnerability could allow the Active Directory (AD) credentials of a previously authenticated user to gain access to the device. This could result in an attacker having the same level of privilege previously granted to a user p…
first Sep 5, 2019 -
Critical max 8.8ICSA-19-281-01 1 CVE
SMA Solar Technology AG Sunny WebBox
Successful exploitation of this vulnerability could allow an attacker to generate a denial-of-service condition, modify passwords, enable services, achieve man-in-the-middle, and modify input parameters associated with devices such as sensors.
-
MediumICSA-19-281-02 2 CVEs
GE Mark VIe Controller
Successful exploitation of these vulnerabilities could allow an attacker to create read/write/execute commands within the Mark VIe control system.
-
Medium
-
HighICSA-19-274-02 1 CVE
Yokogawa Products
Successful exploitation of this vulnerability could allow a local attacker to execute malicious files.
-
HighICSA-19-274-03 2 CVEs
Moxa EDR 810 Series
Successful exploitation of these vulnerabilities could allow remote code execution or access to sensitive information.
-
High
WECON LeviStudioU (Update A)
Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary code.
first Feb 5, 2019 -
High
Rockwell Automation Arena Simulation Software (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to cause a current Arena session to fault or enter a denial-of-service (DoS) state, allowing the attacker to run arbitrary code.
first Aug 1, 2019 -
High max 7.8ICSA-19-262-01 2 CVEs
Tridium Niagara
Successful exploitation of these vulnerabilities could allow a local user to escalate their privileges.
-
CriticalICSA-19-260-01 4 CVEs
Advantech WebAccess
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, access files and perform actions at a privileged level, or delete files on the system.
-
MediumICSA-19-260-03 1 CVE
Honeywell Performance IP Cameras and Performance NVRs
Successful exploitation of this vulnerability could allow an attacker to view device configuration information.