4,108 results · Feed
-
CriticalICSA-19-255-01 2 CVEs
3S-Smart Software Solutions GmbH CODESYS V3 Web Server
Successful exploitation of these vulnerabilities may allow an attacker to create a denial-of-service condition, to perform remote code execution, or to access restricted files.
-
HighICSA-19-255-03 1 CVE
3S-Smart Software Solutions GmbH CODESYS Control V3 Online User Management
Successful exploitation of this vulnerability could allow unauthorized actors access to unintended functionality and/or information.
-
MediumICSA-19-255-04 1 CVE
3S-Smart Software Solutions GmbH CODESYS Control V3 OPC UA Server
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
HighICSA-19-255-05 1 CVE
3S-Smart Software Solutions GmbH CODESYS V3 Products Containing a CODESYS Communication Server
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
MediumICSMA-19-255-01 2 CVEs
Philips IntelliVue WLAN
Successful exploitation of these vulnerabilities may cause corruption of the IntelliVue WLAN firmware and impact to the data flow over the WLAN Version A and WLAN Version B wireless modules. This would lead to an inoperative condition alert at the device and …
-
HighICSA-19-253-01 3 CVEs
Delta Electronics TPEditor
Successful exploitation of these vulnerabilities may allow information disclosure, remote code execution, or may crash the application.
-
High
-
High
-
High
-
HighICSA-19-253-06 1 CVE
OSIsoft PI SQL Client
Successful exploitation of this vulnerability could allow remote code execution or cause a denial of service, resulting in disclosure, deletion, or modification of information.
-
High
-
Critical
Rockwell Automation Allen-Bradley PowerMonitor 1000 (Update A)
Successful exploitation of these vulnerabilities could allow a remote attacker to affect the confidentiality, integrity, and availability of the device.
first Feb 19, 2019 -
High max 7.8
-
HighICSA-19-246-01 1 CVE
EZAutomation EZ Touch Editor
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
HighICSA-19-246-02 1 CVE
EZAutomation EZ PLC Editor
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
HighICSMA-19-241-01 1 CVE
Change Healthcare McKesson and Horizon Cardiology
Successful exploitation of this vulnerability could allow a locally authenticated user to insert specially crafted files that could result in arbitrary code execution.
-
LowICSMA-19-241-02 1 CVE
Philips HDI 4000 Ultrasound
Successful exploitation of this vulnerability could lead to exposure of ultrasound images (breaches of confidentiality) and compromised image integrity. The vulnerability does not affect patient safety or systems operations (availability).
-
CriticalICSA-19-239-01 1 CVE
Delta Controls enteliBUS Controllers
Successful exploitation of this vulnerability could allow an attacker on the same network to gain complete control of the device 's operating system and allow remote code execution.
-
HighICSA-19-239-02 1 CVE
Datalogic AV7000 Linear Barcode Scanner
Successful exploitation of this vulnerability could allow a remote attacker to bypass authentication through issues in the HTTP authentication process.
-
MediumICSA-19-232-01 1 CVE
Zebra Industrial Printers
Successful exploitation of this vulnerability could allow a remote attacker to send specially crafted packets to a port on the printer, resulting in the retrieval of a front control panel passcode.
-
Medium max 6.8ICSA-19-227-01 2 CVEs
Johnson Controls Metasys
Successful exploitation of these vulnerabilities could be leveraged by an attacker to decrypt captured network traffic.
-
HighICSA-19-227-02 1 CVE
Fuji Electric Alpha5 Smart Loader
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
Mediumfirst Jul 9, 2019
-
HighICSA-19-225-01 2 CVEs
Delta Industrial Automation DOPSoft
Successful exploitation of these vulnerabilities may allow information disclosure, remote code execution, or crash of the application.
-
HighICSA-19-225-02 2 CVEs
OSIsoft PI Web API
Successful exploitation of these vulnerabilities may allow direct attacks against the product and disclose sensitive information.
-
Critical
Wind River VxWorks (Update A)
Successful exploitation of these vulnerabilities could allow remote code execution.
first Jul 30, 2019 -
HighICSA-19-213-01 1 CVE
Advantech WebAccess HMI Designer
Successful exploitation of this vulnerability may allow an attacker to remotely execute arbitrary code.
-
MediumICSA-19-213-02 1 CVE
Fuji Electric FRENIC Loader
Successful exploitation of this vulnerability could allow information disclosure.
-
CriticalICSA-19-213-03 2 CVEs
3S-Smart Software Solutions GmbH CODESYS V3
Successful exploitation of these vulnerabilities could allow a remote attacker to close existing communication channels or to take over an already established user session to send crafted packets to a PLC.
-
HighICSA-19-213-06 2 CVEs
LCDS LAquis SCADA LQS File Parsing
Successful exploitation of these vulnerabilities could allow an attacker to obtain confidential information or execute remote code.
-
CriticalICSA-19-211-02 9 CVEs
Prima Systems FlexAir
Exploitation of these vulnerabilities may allow an attacker to execute commands directly on the operating system, upload malicious files, perform actions with administrative privileges, execute arbitrary code in a user 's browser, discover login credentials, …
-
Medium
GE Aestiva and Aespire Anesthesia (Update A)
Successful exploitation of this vulnerability could allow an attacker the ability to remotely modify GE Healthcare anesthesia device parameters. This results from the configuration exposure of certain terminal server implementations that extend GE Healthcare …
first Jul 9, 2019 -
HighICSA-19-204-01 2 CVEs
Mitsubishi Electric FR Configurator2
Successful exploitation of these vulnerabilities may enable arbitrary files to be read or cause a denial-of-service condition.
-
MediumICSA-19-204-02 1 CVE
NREL EnergyPlus
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition.
-
Medium max 6.7ICSA-19-199-01 1 CVE
Johnson Controls exacqVision Server
Successful exploitation of this vulnerability could allow an unauthenticated user to elevate their privileges.
-
HighICSA-19-192-01 2 CVEs
Delta Industrial Automation CNCSoft ScreenEditor
Successful exploitation of these vulnerabilities could cause buffer overflow conditions that may allow information disclosure, remote code execution, or crash the application.
-
CriticalICSA-19-192-05 4 CVEs
AVEVA Vijeo Citect and Citect SCADA Floating License Manager
These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product.
-
HighICSA-19-192-06 1 CVE
Schneider Electric Interactive Graphical SCADA System
Successful exploitation of this vulnerability could allow an attacker to achieve arbitrary code execution or crash the software.
-
CriticalICSA-19-192-07 4 CVEs
Schneider Electric Floating License Manager
These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product.
-
LowICSMA-19-192-01 1 CVE
Philips Holter 2010 Plus
Successful exploitation of this vulnerability under certain conditions can lead to a product feature escalation.