4,108 results · Feed
-
High
Omron CX-Supervisor (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the context of the application, corrupt objects, and force the application to read a value outside of an array.
first Oct 17, 2018 -
CriticalICSA-19-031-01 3 CVEs
Schneider Electric EVLink Parking
Successful exploitation of these vulnerabilities could allow an attacker to stop the device and prevent charging, execute arbitrary commands, and access the web interface with full privileges.
-
HighICSA-19-029-01 1 CVE
Yokogawa License Manager Service
Successful exploitation of this vulnerability could allow an attacker to remotely upload files, allowing execution of arbitrary code.
-
HighICSA-19-029-03 1 CVE
AVEVA Wonderware System Platform
This vulnerability could allow unauthorized access to the credentials for the ArchestrA Network User Account.
-
MediumICSMA-19-029-01 1 CVE
Stryker Medical Beds
Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.
-
CriticalICSA-19-024-01 3 CVEs
Advantech WebAccess/SCADA
Successful exploitation of these vulnerabilities may allow an attacker to access and manipulate sensitive data.
-
High max 8.8ICSA-19-024-02 6 CVEs
PHOENIX CONTACT FL SWITCH
Successful exploitation of these vulnerabilities may allow attackers to have user privileges, gain access to the switch, read user credentials, deny access to the switch, or perform man-in-the-middle attacks.
-
MediumICSA-19-022-01 1 CVE
Johnson Controls Facility Explorer
Successful exploitation of these vulnerabilities could allow an attacker to read, write, and delete sensitive files to gain administrator privileges in the Facility Explorer system.
-
HighICSMA-19-022-01 3 CVEs
Dräger Infinity Delta
Successful exploitation of these vulnerabilities could cause information disclosure of device logs, denial of service through device reboots of the patient monitors, and privilege escalation.
-
HighICSA-19-017-02 1 CVE
ABB CP400 Panel Builder TextEditor 2.0
Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code, and cause a denial-of-service condition within the Text Editor application.
-
HighICSA-19-017-03 2 CVEs
ControlByWeb X-320M
Successful exploitation of these vulnerabilities may allow arbitrary code execution and could cause the device being accessed to require a physical factory reset to restore the device to an operational state.
-
Criticalfirst Jan 8, 2019
-
HighICSA-19-015-01 11 CVEs
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
Successful exploitation of these vulnerabilities could allow remote code execution, data exfiltration, or cause a system crash.
-
High
Schneider Electric Modicon M340 PLC (Update A)
Successful exploitation of this vulnerability may render the device unresponsive requiring a physical reset of the PLC.
first Feb 23, 2017 -
Medium
ICSA-18-333-02_Tridium Niagara Enterprise Security, Niagara AX, and Niagara 4
Daniel Santos and Elisa Costante of SecurityMatters reported the vulnerability to Tridium.
first Nov 29, 2018 -
HighICSA-19-010-01 1 CVE
Emerson DeltaV
Successful exploitation of this vulnerability could allow an attacker to shut down a service, resulting in a denial of service.
-
MediumICSA-19-010-02 1 CVE
Omron CX-One CX-Protocol
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
LowICSA-19-010-03 1 CVE
Pilz PNOZmulti Configurator
Successful exploitation of this vulnerability could allow sensitive data to be read from the system.
-
Critical max 9.8
Schneider Electric U.motion Builder (Update A)
A successful exploit of these vulnerabilities could allow an attacker to execute arbitrary commands or compromise the confidentiality, integrity, and availability of the system.
first Jun 29, 2017 -
HighICSA-19-008-01 1 CVE
Schneider Electric Zelio Soft 2
Successful exploitation of this vulnerability could allow for remote code execution when opening a specially crafted project file.
-
High
-
CriticalICSA-19-003-01 1 CVE
Schneider Electric Pro-face GP-Pro EX
Successful exploitation of this vulnerability could allow an attacker to modify code to launch an arbitrary executable upon launch of the program.
-
HighICSA-19-003-02 1 CVE
Yokogawa Vnet/IP Open Communication Driver
Successful exploitation of this vulnerability could allow an attacker to cause Vnet/IP network communications to controlled devices to become unavailable.
-
HighICSA-19-003-03 1 CVE
Hetronic Nova-M
Successful exploitation of this vulnerability could allow unauthorized users to view commands, replay commands, control the device, or stop the device from running.
-
High
Omron CX-Supervisor (Update A)
Successful exploitation of these vulnerabilities could allow remote code execution.
first Mar 13, 2018 -
High
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability could allow a remote attacker to diminish communications or cause a complete denial of service to the device.
first Nov 27, 2018 -
MediumICSA-18-354-01 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability could crash the device being accessed, allow the attacker to read confidential information, and may allow an attacker to remotely execute arbitrary code.
-
HighICSA-18-354-02 1 CVE
Schneider Electric EcoStruxure
Successful exploitation of this vulnerability could allow an attacker to use this device as a platform to conduct a phishing attack.
-
Critical
Schneider Electric Triconex Tricon
Successful exploitation of these vulnerabilities could misinform or control the safety instrumented system which could result in arbitrary code execution, system shutdown, or the compromise of safety systems.
first Apr 17, 2018 -
CriticalICSA-18-352-01 2 CVEs
ABB GATE-E2
Successful exploitation of these vulnerabilities could allow unrestricted access to the administrative telnet/web interface of the device, enabling attackers to compromise the availability of the device, read or modify registers and settings, or change the de…
-
HighICSA-18-352-02 1 CVE
Advantech WebAccess/SCADA
Successful exploitation of this vulnerability could cause a stack buffer overflow condition.
-
CriticalICSA-18-352-03 1 CVE
3S-Smart Software Solutions GmbH CODESYS Control V3 Products
Successful exploitation of this vulnerability could allow unauthorized access and exfiltration of sensitive data including user credentials.
-
CriticalICSA-18-352-04 2 CVEs
3S-Smart Software Solutions GmbH CODESYS V3 Products
Successful exploitation of these vulnerabilities could allow a remote attacker to disguise the source of malicious communication packets and also exploit a random values weakness affecting confidentiality and integrity of data stored on the device.
-
High
-
Medium
-
Medium
Philips Alice 6 Vulnerabilities (Update B)
Successful exploitation may allow an attacker to gain visibility to usernames/passwords and personal data. Insufficient encryption and cryptographic integrity checks can lead to altered, corrupted, or disclosed sensitive data. Disclosure of personal data can …
first Mar 27, 2018 -
HighICSA-18-347-01 3 CVEs
Schneider Electric GUIcon Eurotherm
Successful exploitation of these vulnerabilities may allow an attacker to execute code with privileges within the context of the application.
-
HighICSA-18-347-03 1 CVE
Geutebrück GmbH E2 Series IP Cameras
Successful exploitation of this vulnerability may allow a remote attacker to inject OS commands as root.
-
HighICSA-18-347-04 1 CVE
GE Mark VIe, EX2100e, EX2100e
Successful exploitation of this vulnerability could allow an attacker to access system data, which could result in escalation of privilege and unauthorized access to the controller.
-
Medium max 4.6ICSMA-18-347-01 1 CVE
Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers
As part of the intended functionality of this device, it may store protected health information (PHI) or personally identifiable information (PII). Successful exploitation of the vulnerability may allow an attacker with physical access to an affected programm…