4,108 results · Feed
-
Criticalfirst Jan 8, 2019
-
MediumICSA-19-190-01 1 CVE
Emerson DeltaV Distributed Control System
Successful exploitation of this vulnerability could allow an attacker to gain administrative access to DeltaV Smart Switches.
-
HighICSA-19-190-02 1 CVE
Rockwell Automation PanelView 5510
Successful exploitation of this vulnerability could allow a remote unauthenticated user to gain root privileges on the device.
-
HighICSA-19-190-03 1 CVE
Schneider Electric Zelio Soft 2
Successful exploitation of this vulnerability could allow remote code execution through the opening of a specially crafted project file.
-
High
-
Medium
-
High max 7.5ICSA-19-183-01 1 CVE
Schneider Electric Modicon Controllers
Successful exploitation of this vulnerability could result in a denial-of-service condition.
-
LowICSA-19-183-02 1 CVE
Quest KACE Systems Management Appliance
Successful exploitation of this vulnerability could allow an administrative user unintentional access to the underlying operating system of the device.
-
HighICSA-19-178-01 7 CVEs
ABB PB610 Panel Builder 600
An attacker who successfully exploits these vulnerabilities could prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affected sy…
-
HighICSA-19-178-02 1 CVE
ABB CP651 HMI
Successful exploitation of this vulnerability could allow an attacker to prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affe…
-
HighICSA-19-178-03 1 CVE
ABB CP635 HMI
Successful exploitation of this vulnerability could allow an attacker to prevent legitimate access to an affected system node, remotely cause an affected system node to stop, take control of an affected system node, or insert and run arbitrary code in an affe…
-
CriticalICSA-19-178-04 1 CVE
SICK MSC800
Successful exploitation of this vulnerability could allow a low-skilled remote attacker to reconfigure settings and/or disrupt the functionality of the device.
-
CriticalICSA-19-178-05 6 CVEs
Advantech WebAccess/SCADA
Successful exploitation of these vulnerabilities may allow information disclosure, deletion of files, and remote code execution.
-
High max 7.1ICSMA-19-178-01 1 CVE
Medtronic MiniMed 508 and Paradigm Series Insulin Pumps
Successful exploitation of this vulnerability may allow an attacker with adjacent access to one of the affected products to intercept, modify, or interfere with the wireless RF (radio frequency) communications to or from the product. This may allow attackers …
-
HighICSA-19-171-01 3 CVEs
PHOENIX CONTACT Automation Worx Software Suite
Successful exploitation of these vulnerabilities could allow an attacker, with access to an original PC Worx or Config+ project file, to perform remote code execution.
-
Medium max 6.7ICSA-19-164-01 1 CVE
Johnson Controls exacqVision Enterprise System Manager
Successful exploitation of this vulnerability could allow malicious code execution.
-
CriticalICSA-19-164-02 2 CVEs
WAGO Industrial Managed Switches 852-303, 852-1305, and 852-1505
Successful exploitation of these vulnerabilities could allow a compromise of the managed switch, resulting in disruption of communication, and root access to the operating system.
-
CriticalICSMA-19-164-01 2 CVEs
BD Alaris Gateway Workstation
Exploitation of these vulnerabilities could allow unauthorized arbitrary code execution, which could allow an attacker to view and edit device status and configuration details as well as cause devices to become unavailable. The vendor has stated the affected …
-
High
-
CriticalICSA-19-157-01 7 CVEs
Optergy Proton Enterprise Building Management System
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and gain full system access.
-
HighICSA-19-157-02 2 CVEs
Panasonic Control FPWIN Pro
Successful exploitation of these vulnerabilities could crash the device and allow remote code execution.
-
Critical max 9.8ICSA-19-155-01 46 CVEs
PHOENIX CONTACT PLCNext AXC F 2152
Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to …
-
HighICSA-19-155-02 1 CVE
PHOENIX CONTACT FL NAT SMx
Successful exploitation of this vulnerability could allow unauthorized users full access to the device configuration.
-
HighICSA-19-155-03 3 CVEs
Geutebrück G-Cam and G-Code
Successful exploitation of these vulnerabilities could allow remote code execution as root and remote code execution in the browser of the IP camera operator.
-
MediumICSA-19-150-01 1 CVE
AVEVA Vijeo Citect and CitectSCADA
Successful exploitation of this vulnerability could allow a locally authenticated user to obtain Citect user credentials.
-
MediumICSA-19-148-01 2 CVEs
Emerson Ovation OCR400 Controller
Successful exploitation of these vulnerabilities may allow privilege escalation or remote code execution, or it may halt the controller.
-
HighICSA-19-141-01 9 CVEs
Computrols CBAS Web
Successful exploitation of these vulnerabilities could allow unauthorized actions with administrative privileges, disclosure of sensitive information, execution of code within a user 's browser, execution of unauthorized OS commands, unauthorized access to th…
-
HighICSA-19-141-02 1 CVE
Mitsubishi Electric MELSEC-Q Series Ethernet Module
Successful exploitation of this vulnerability may render the device unresponsive, requiring a physical reset of the PLC (Programmable Logic Controller).
-
MediumICSA-19-136-01 1 CVE
Schneider Electric Modicon Controllers
Successful exploitation of this vulnerability could allow an attacker to hijack TCP connections or cause information leakage.
-
LowICSA-19-136-02 1 CVE
Fuji Electric Alpha7 PC Loader
Successful exploitation of this vulnerability could crash the device.
-
Critical max 10.0
WIBU SYSTEMS AG WibuKey Digital Rights Management (Update D)
Successful exploitation of these vulnerabilities may allow information disclosure, privilege escalation, or remote code execution.
first Feb 12, 2019 -
Critical
-
HighICSA-19-134-05 1 CVE
ICSA-19-134-05 Siemens SINAMICS PERFECT HARMONY GH180 Drives NXG I and NXG II
-
High
-
Critical
-
Critical max 9.8ICSA-19-122-01 6 CVEs
Orpak SiteOmat
Successful exploitation of these vulnerabilities could result in arbitrary remote code execution resulting in possible denial-of-service conditions and unauthorized access to view and edit monitoring, configuration, and payment information.
-
HighICSA-19-122-02 5 CVEs
GE Communicator
Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges, manipulate widgets and UI elements, gain control over the database, or execute administrative commands.
-
HighICSA-19-120-01 2 CVEs
ICSA-19-120-01_Rockwell Automation CompactLogix 5370
Younes Dragoni of Nozomi Networks reported CVE-2019-10952 to NCCIC. George Lashenko of CyberX reported CVE-2019-10954 to NCCIC.
-
High max 6.1ICSA-19-113-01 1 CVE
Rockwell Automation MicroLogix 1400 and CompactLogix 5370 Controllers
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to input a malicious link redirecting users to a malicious website.
-
CriticalICSMA-19-113-01 2 CVEs
Fujifilm FCR Capsula X/Carbon X
Successful exploitation of these vulnerabilities could result in a denial-of-service condition in affected cassette reader units, causing potential image loss or device unavailability. Attackers could gain unauthorized access to the underlying operating syste…