4,108 results · Feed
-
High max 6.1
-
High max 7.5
Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules
Successful exploitation of this vulnerability could allow an unauthenticated attacker to modify system settings and cause a loss of communication between the device and the system.
first Nov 6, 2018 -
HighICSA-18-340-01 1 CVE
GE Proficy GDS
Successful exploitation of this vulnerability could allow an attacker to initiate an OPC UA session and retrieve an arbitrary file.
-
LowICSMA-18-340-01 1 CVE
Philips HealthSuite Health Android App
Successful exploitation of this vulnerability may allow an attacker with physical access to impact confidentiality and integrity of the product.
-
MediumICSA-18-338-01 2 CVEs
Omron CX-One
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
MediumICSA-18-338-02 1 CVE
SpiderControl SCADA WebServer
Successful exploitation of this vulnerability could allow an attacker to execute JavaScript on the victim 's browser.
-
MediumICSA-18-333-01 2 CVEs
INVT Electric VT-Designer
Successful exploitation of these vulnerabilities could cause the program to crash and may allow remote code execution.
-
HighICSA-18-331-01 1 CVE
AVEVA Vijeo Citect and Citect SCADA
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.
-
Critical
NUUO CMS (Update A)
Successful exploitation of theses vulnerabilities could result in arbitrary remote code execution.
first Oct 11, 2018 -
HighICSA-18-324-01 1 CVE
Teledyne DALSA Sherlock
Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution.
-
High max 8.2ICSA-18-324-02 1 CVE
Schneider Electric Modicon M221
Successful exploitation of this vulnerability could cause a change of IPv4 configuration (IP address, mask, and gateway) when remotely connected to the device.
-
Medium
ICSA-18-317-01 Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC
first Jun 26, 2018 -
Medium
-
Medium
-
High
-
High
Roche Diagnostics Point of Care Handheld Medical Devices (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to modify system settings or execute arbitrary code.
first Nov 6, 2018 -
MediumICSMA-18-312-01 1 CVE
Philips iSite and IntelliSpace PACS
Successful exploitation of this vulnerability may allow an attacker with local network access to impact confidentiality, integrity, and availability of a component of the system.
-
High
Schneider Electric Software Update (SESU) (Update A)
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.
first Nov 1, 2018 -
Medium
Rockwell Automation Stratix 5100 (Update A)
Successful exploitation of this vulnerability may allow the attacker to operate as a man-in-the-middle between the device and the wireless network.
first Oct 26, 2017 -
CriticalICSA-18-305-01 2 CVEs
AVEVA InduSoft Web Studio and InTouch Edge HMI (formerly InTouch Machine Edition)
Successful exploitation of these vulnerabilities could allow an unauthenticated user to remotely execute code.
-
CriticalICSA-18-305-03 2 CVEs
Circontrol CirCarLife
Successful exploitation of these vulnerabilities could allow a remote attacker to retrieve credentials stored in clear text to bypass authentication, and see and access critical information.
-
HighICSA-18-305-04 1 CVE
Fr. Sauter AG CASE Suite
Successful exploitation of this vulnerability could allow an attacker to remotely retrieve unauthorized files from the system.
-
High
Vecna VGo Robot (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to capture firmware updates through network traffic, extract credentials from the firmware, record video conversations, and may allow remote code execution with root privileges.
first Apr 24, 2018 -
HighICSA-18-303-01 1 CVE
PEPPERL+FUCHS CT50-Ex
Successful exploitation of this vulnerability could allow a malicious third-party application to gain elevated privileges and obtain access to sensitive information.
-
MediumICSA-18-298-01 1 CVE
GEOVAP Reliance 4 SCADA/HMI
Successful exploitation of this vulnerability could allow an unauthenticated attacker to use HTTP proxy to inject arbitrary Javascript in a specially crafted HTTP request that may reflect it back in the HTTP response.
-
HighICSA-18-298-02 2 CVEs
Advantech WebAccess
Successful exploitation of these vulnerabilities could allow for arbitrary remote code execution.
-
CriticalICSA-18-296-01 4 CVEs
Advantech WebAccess
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, access files and perform actions at a privileged level, or delete files on the system.
-
HighICSA-18-296-02 3 CVEs
GAIN Electronic Co. Ltd SAGA1-L Series
Successful exploitation of these vulnerabilities could allow remote code execution and potentially delete the product 's firmware.
-
HighICSA-18-296-03 1 CVE
Telecrane F25 Series
Successful exploitation of this vulnerability could allow unauthorized users to view commands, replay commands, control the device, or stop the device from running.
-
HighICSA-18-289-01 6 CVEs
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, crash the system, or write controlled content to the target system.
-
Medium
BD Kiestra and InoquIA Systems (Update A)
Successful exploitation of these vulnerabilities may lead to loss or corruption of data.
first May 22, 2018 -
Critical
Yokogawa STARDOM Controllers (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain access to the affected device, cause a denial of service, or gain unauthorized access, which could result in remote arbitrary code execution.
first May 31, 2018 -
Medium
Philips IntelliVue Information Center iX (Update B)
Successful exploitation of this vulnerability may result in a denial of service, the operating system will become unresponsive due to the network attack, which will affect the applications ability to meet the intended use.
first Aug 21, 2018 -
CriticalICSA-18-284-01 2 CVEs
NUUO NVRmini2 and NVRsolo
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and user account modification.
-
MediumICSA-18-284-03 2 CVEs
Delta Industrial Automation TPEditor
Successful exploitation of these vulnerabilities could crash the accessed device, resulting in a buffer overflow condition that may allow remote code execution.
-
Medium
Siemens SIMATIC WinCC OA Operator IOS App (Update A)
Successful exploitation of this vulnerability could allow an attacker with physical access to read sensitive data located in the app 's directory.
first Apr 19, 2018 -
High
ICSA-18-226-01 Siemens SIMATIC STEP 7 and SIMATIC WinCC (Update A)
first Aug 7, 2018 -
MediumICSA-18-282-01 1 CVE
GE iFix
Successful exploitation of this vulnerability could cause a buffer overflow condition.
-
Medium max 7.5
-
High