4,108 results · Feed
-
HighICSA-18-282-06 3 CVEs
Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server
Successful exploitation of these vulnerabilities could allow unauthorized access to video feeds with the potential to modify settings, replace firmware, and/or execute code.
-
HighICSA-18-282-07 1 CVE
Fuji Electric Energy Savings Estimator
Successful exploitation of this vulnerability may allow an attacker to load a malicious DLL and execute code on the affected system with the same privileges as the application that loaded the malicious DLL.
-
LowICSMA-18-277-01 1 CVE
Carestream Vue RIS
An attacker with access to the network of the affected system can passively read traffic.
-
Medium max 4.3ICSMA-18-277-02 1 CVE
Change Healthcare PeerVue Web Server
Successful exploitation of this vulnerability could allow an attacker to obtain technical information about the PeerVue Web Server, allowing an attacker to target a system for attack.
-
High
WECON LeviStudioU (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to execute remote code.
first Jul 31, 2018 -
Critical
ABB eSOMS (Update A)
Successful exploitation of this vulnerability requires an attacker to discover a valid user account, which could be used to gain access to the application without authentication.
first Aug 28, 2018 -
MediumICSA-18-275-01 1 CVE
Delta Electronics ISPSoft
Successful exploitation of this vulnerability could allow an attacker to execute code under the context of the application.
-
HighICSA-18-275-02 1 CVE
GE Communicator
Exploitation could allow attackers to execute arbitrary code or create a denial-of-service condition.
-
CriticalICSA-18-275-03 2 CVEs
Entes EMG 12
Successful exploitation of these vulnerabilities may allow attackers to gain unauthorized access and could allow the ability to change device configuration and settings.
-
CriticalICSA-18-270-01 2 CVEs
Emerson AMS Device Manager
Successful exploitation of these vulnerabilities could allow arbitrary remote code execution and malware injection.
-
MediumICSA-18-270-04 1 CVE
Delta Electronics Delta Industrial Automation PMSoft
Successful exploitation of this vulnerability could allow an attacker to read confidential information.
-
HighICSA-18-263-01 1 CVE
Tec4Data SmartCooler
Successful exploitation of this vulnerability could cause the device to shut down by exploiting missing authentication for a critical function.
-
CriticalICSA-18-263-02 3 CVEs
Rockwell Automation RSLinx Classic
Successful exploitation of these vulnerabilities could crash the device being accessed or allow arbitrary code execution on the device.
-
Critical max 9.8
Echelon SmartServer 1, SmartServer 2, SmartServer 3, i.LON 100, i.LON 600 (Update A)
Successful exploitation of these vulnerabilities could allow for remote code execution on the device.
first Jul 19, 2018 -
MediumICSA-18-261-01 1 CVE
WECON PLC Editor
Successful exploitation of this vulnerability could result in unauthorized code execution within the current process.
-
HighICSA-18-256-01 1 CVE
Honeywell Mobile Computers with Android Operating Systems
A vulnerability in a system service on CT60, CN80, CT40, CK75, CN75, CT50, D75e, CN51, and EDA series mobile computers running the Android Operating System (OS) could allow a malicious third-party application to gain elevated privileges.
-
HighICSA-18-254-01 7 CVEs
Fuji Electric V-Server
Successful exploitation of these vulnerabilities could allow for remote code execution on the device, causing a denial of service condition or information exposure.
-
HighICSA-18-254-02 1 CVE
Fuji Electric V-Server Lite
Successful exploitation of this vulnerability could allow a remote attacker to view sensitive information and disrupt the availability of the device.
-
High
-
Critical
-
HighICSA-18-249-01 2 CVEs
Ice Qube Thermal Management Center
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to configuration files or obtain sensitive information.
-
HighICSA-18-247-01 1 CVE
Opto 22 PAC Control Basic and PAC Control Professional
Successful exploitation of this vulnerability could crash the device being accessed, and a buffer overflow condition may then allow remote code execution.
-
Critical
Martem TELEM-GW6/GWM (Update B)
Successful exploitation of these vulnerabilities could allow execution of unauthorized industrial process control commands, full control over RTU, denial of service, or client-side code execution.
first May 22, 2018 -
High
Philips e-Alert Unit
Successful exploitation from an attacker within the same subnet may impact or compromise user contact details, unit integrity, and/or unit availability. The vulnerabilities may allow attackers to provide unexpected input into the application, execute arbitrar…
-
High max 9.8ICSA-18-240-01 3 CVEs
Schneider Electric Modicon M221
Successful exploitation of these vulnerabilities may allow unauthorized users to replay authentication sequences, overwrite passwords, or decode passwords.
-
Medium max 4.8ICSA-18-240-02 1 CVE
Schneider Electric Modicon M221
Successful exploitation of this vulnerability could allow an unauthorized user to remotely reboot the device.
-
High max 5.4ICSA-18-240-03 1 CVE
Schneider Electric PowerLogic PM5560
Successful exploitation of this vulnerability could allow user input to be manipulated, allowing for remote code execution.
-
CriticalICSMA-18-240-01 1 CVE
ICSMA-18-240-01_Qualcomm Life Capsule
Elad Luz of CyberMDX reported this vulnerability to NCCIC.
-
CriticalICSMA-18-235-01 1 CVE
BD Alaris Plus
Successful exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to various Alaris Syringe pumps and impact the intended operation of the pump when it is connected to a terminal server via the serial port. BD has determine…
-
HighICSA-18-233-01 1 CVE
Yokogawa iDefine, STARDOM, ASTPLANNER, and TriFellows
Successful exploitation of this vulnerability may allow arbitrary code execution, or the stopping of the license management function.
-
High
Tridium Niagara
Successful exploitation of these vulnerabilities could allow an attacker to read, write, and delete sensitive files to gain administrator privileges on the Niagara system.
first Jul 10, 2018 -
CriticalICSA-18-228-01 4 CVEs
Emerson DeltaV DCS Workstations
Successful exploitation of these vulnerabilities could allow arbitrary code execution, malware injection, or malware to spread to other workstations.
-
MediumICSMA-18-226-01 1 CVE
Philips IntelliSpace Cardiovascular Vulnerabilities
Successful exploitation of these vulnerabilities could allow an attacker with local access and users privileges to the ISCV/Xcelera server to escalate privileges on the ISCV/Xcelera server and execute arbitrary code.
-
CriticalICSA-18-221-01 4 CVEs
Crestron TSW-X60 and MC3
Successful exploitation of these vulnerabilities may allow remote code execution with escalated system privileges.
-
CriticalICSA-18-221-02 4 CVEs
NetComm Wireless 4G LTE Light Industrial M2M Router
Successful exploitation of these vulnerabilities could allow for the exposure of sensitive information.
-
HighICSA-18-219-01 2 CVEs
Delta Electronics CNCSoft and ScreenEditor
Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution with administrator privileges.
-
High
-
CriticalICSA-18-212-01 1 CVE
Davolink DVW-3200N
Successful exploitation of this vulnerability may result in a remote attacker obtaining the password to the device.
-
Medium max 4.3ICSA-18-212-02 1 CVE
Johnson Controls Metasys and BCPro
Successful exploitation of this vulnerability could allow an attacker to obtain technical information about the Metasys or BCPro server, allowing an attacker to target a system for attack.
-
Medium max 6.1ICSA-18-212-04 1 CVE
AVEVA InTouch Access Anywhere
Successful exploitation of this vulnerability may allow attackers to obtain sensitive information and/or execute Javascript or HTML code.