4,108 results · Feed
-
HighICSA-19-106-01 3 CVEs
ICSA-19-106-01_Delta Industrial Automation CNCSoft
Natnael Samson (@NattiSamson) and an anonymous researcher working with Trend Micro 's Zero Day Initiative (ZDI) reported these vulnerabilities to NCCIC.
-
CriticalICSA-19-106-02 1 CVE
WAGO Series 750-88x and 750-87x
This vulnerability allows a remote attacker to change the settings or alter the programming of the device.
-
Medium
ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)
Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.
first Nov 14, 2017 -
Critical
-
Critical max 7.5
-
High
IDenticard PremiSys (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information via backups, obtain access to credentials, and/or obtain full access to the system with admin privileges.
first Jan 31, 2019 -
MediumICSA-19-094-01 1 CVE
Omron CX-Programmer
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
MediumICSA-19-094-02 1 CVE
Rockwell Automation Stratix 5400/5410/5700 and ArmorStratix 5700
Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to cause a memory leak on an affected device, which may cause the device to reload.
-
HighICSA-19-094-03 5 CVEs
Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700
Successful exploitation of these vulnerabilities could result in a denial-of-service condition or time synchronization issues across the network via reloading the device, a buffer overflow, or memory exhaustion.
-
HighICSA-19-094-04 1 CVE
Rockwell Automation Stratix 5950
Successful exploitation of this vulnerability could allow a remote attacker to cause an affected device to reload.
-
CriticalICSA-19-092-01 3 CVEs
Advantech WebAccess/SCADA
Successful exploitation of these vulnerabilities may cause a denial of service and allow remote code execution.
-
HighICSA-19-087-01 1 CVE
Rockwell Automation PowerFlex 525 AC Drives
Successful exploitation of this vulnerability could result in resource exhaustion, denial of service, and/or memory corruption.
-
CriticalICSA-19-085-02 1 CVE
PHOENIX CONTACT RAD-80211-XD
Successful exploitation of this vulnerability could allow an attacker to execute system level commands with administrative privileges.
-
HighICSA-19-085-03 1 CVE
ENTTEC Lighting Controllers
Successful exploitation of this vulnerability could reboot this device allowing a continual denial of service condition.
-
MediumICSA-19-078-01 1 CVE
AVEVA InduSoft Web Studio and InTouch Edge HMI
Successful exploitation of this vulnerability could allow execution of unauthorized code or commands.
-
CriticalICSA-19-078-02 6 CVEs
Columbia Weather Systems MicroServer
Successful exploitation of these vulnerabilities may allow disclosure of data, cause a denial-of-service condition, and allow remote code execution.
-
HighICSA-19-073-01 1 CVE
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA ELS Files
Successful exploitation of this vulnerability could allow remote code execution.
-
MediumICSA-19-073-02 1 CVE
Gemalto Sentinel UltraPro
Successful exploitation of this vulnerability could allow execution of unauthorized code or commands.
-
MediumICSA-19-073-03 1 CVE
PEPPERL+FUCHS WirelessHART-Gateways
Successful exploitation of this vulnerability could allow access to files and restricted directories stored on the device through the manipulation of file parameters.
-
Criticalfirst Dec 11, 2018
-
CriticalICSA-19-064-01 1 CVE
Rockwell Automation RSLinx Classic
Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the target device.
-
Critical
Kunbus PR100088 Modbus Gateway (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and/or cause a denial-of-service condition.
first Feb 5, 2019 -
HighICSA-19-059-01 1 CVE
PSI GridConnect Telecontrol
Successful exploitation of this vulnerability could allow an attacker to execute dynamic scripts in the context of the application, which could allow cross-site scripting attacks.
-
HighICSA-19-050-01 11 CVEs
Intel Data Center Manager SDK
Successful exploitation of these vulnerabilities may allow escalation of privilege, denial of service, or information disclosure.
-
MediumICSA-19-050-02 1 CVE
Delta Industrial Automation CNCSoft
Successful exploitation of this vulnerability could cause a buffer overflow condition that may allow information disclosure or crash the application.
-
HighICSA-19-050-03 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability could crash the device being accessed, which may allow the attacker to read confidential information and remotely execute arbitrary code.
-
Critical
Fuji Electric FRENIC Devices (Update A)
Successful exploitation of these vulnerabilities could allow for arbitrary remote code execution affecting the availability of the device.
first Sep 27, 2018 -
High
gpsd Open Source Project
Successful exploitation of this vulnerability could allow remote code execution, data exfiltration, or denial-of service via device crash.
first Nov 6, 2018 -
HighICSA-19-045-01 1 CVE
Pangea Communications Internet FAX ATA
Successful exploitation of this vulnerability could cause the device to reboot and create a continual denial-of-service condition.
-
Medium max 6.5first Jan 18, 2018
-
High
ICSA-18-067-02_Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension (Update B)
Ilya Karpov and Dmitry Sklyarov from Positive Technologies reported this vulnerability to Siemens.
first Mar 8, 2018 -
High
ICSA-18-347-02 Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays (Update A)
first Jul 11, 2018 -
Mediumfirst Jan 8, 2019
-
MediumICSA-19-043-01 1 CVE
OSIsoft PI Vision
Successful exploitation of this vulnerability could allow an attacker to read and modify the contents of the PI Vision web page and data related to the PI Vision application in the victim 's browser.
-
HighICSA-19-043-02 1 CVE
ICSA-19-043-02 Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays
-
Critical
Fuji Electric Alpha5 Smart Loader (Update A)
Successful exploitation of these vulnerabilities could allow for arbitrary remote code execution on the device.
first Sep 27, 2018 -
High
Omron CX-Supervisor (Update A)
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, and/or allow an attacker to achieve code execution with privileges within the context of the application.
first Jan 17, 2019 -
Medium
BD FACSLyric (Update A)
Successful exploitation of this vulnerability may allow an attacker to gain unauthorized access to administrative level privileges on a workstation, which could allow arbitrary execution of commands. This vulnerability does not impact BD FACSLyric flow cytome…
first Jan 29, 2019 -
CriticalICSA-19-036-01 2 CVEs
AVEVA InduSoft Web Studio and InTouch Edge HMI
Successful exploitation of these vulnerabilities could allow a remote attacker to execute an arbitrary process using a specially crafted database connection configuration file.
-
MediumICSA-19-036-02 1 CVE
Rockwell Automation EtherNet/IP Web Server Modules
Successful exploitation of this vulnerability could allow a remote attacker to deny communication with Simple Network Management Protocol (SNMP) service.