4,108 results · Feed
-
CriticalICSA-18-123-01 2 CVEs
Lantech IDS 2102
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code on the system through crafting malicious input.
-
Medium
-
HighICSA-18-116-01 1 CVE
Delta Electronics PMSoft
Successful exploitation of these vulnerabilities could cause the application to crash; stack-based buffer overflow conditions may allow arbitrary code execution.
-
MediumICSA-18-116-02 1 CVE
WECON Technology Co., Ltd. LeviStudio HMI Editor and PI Studio HMI Project Programmer
Successful exploitation of these vulnerabilities could allow remote code execution.
-
HighICSA-18-114-02 1 CVE
Intel 2G Modem
Successful exploitation of this buffer overflow vulnerability may allow remote code execution.
-
MediumICSA-18-114-03 3 CVEs
Advantech WebAccess HMI Designer
Successful exploitation of these vulnerabilities may allow an attacker to remotely execute arbitrary code.
-
MediumICSMA-18-114-01 1 CVE
BD Pyxis
Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.
-
High
ICSA-18-060-01_Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A)
Siemens ProductCERT reported the vulnerabilities to NCCIC.
first Mar 1, 2018 -
CriticalICSA-18-107-01 1 CVE
Schneider Electric InduSoft Web Studio and InTouch Machine Edition
Successful exploitation of this vulnerability during tag, alarm, or event related actions could allow remote code execution that, under high privileges, could completely compromise the device.
-
Critical max 9.8
ICSA-18-107-03_Rockwell Automation Stratix Services Router
Rockwell Automation reported these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
-
Critical max 8.8
Rockwell Automation Stratix and ArmorStratix Switches
Successful exploitation of these vulnerabilities could result in loss of availability, confidentiality, and/or integrity caused by memory exhaustion, module restart, information corruption, and/or information exposure.
-
High max 8.8
ICSA-18-107-05_Rockwell Automation Stratix Industrial Managed Ethernet Switch
Rockwell Automation reported these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
-
HighICSMA-18-107-01 2 CVEs
Abbott Laboratories Defibrillator
Successful exploitation of these vulnerabilities may allow a nearby attacker to gain unauthorized access to an ICD to issue commands, change settings, or otherwise interfere with the intended function of the ICD.
-
MediumICSA-18-102-01 1 CVE
Yokogawa CENTUM and Exaopc
Successful exploitation of this vulnerability could allow a local attacker to generate false system or process alarms, or block system or process alarm displays.
-
MediumICSA-18-100-01 1 CVE
ATI Systems Emergency Mass Notification Systems
Successful exploitation of these vulnerabilities could trigger false alarms.
-
MediumICSA-18-100-02 3 CVEs
Omron CX-One
Successful exploitation of these vulnerabilities could allow remote code execution.
-
HighICSA-18-095-02 1 CVE
Moxa MXview
Successful exploitation of this vulnerability could allow a remote attacker to access and read cryptographic private keys.
-
HighICSA-18-095-03 1 CVE
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
Successful exploitation of this vulnerability could cause the device an attacker is accessing to crash, resulting in a structured exception handler overflow condition, which may allow code execution.
-
Critical
ICSA-18-093-01 Siemens Building Technologies Products (Update A)
first Mar 28, 2018 -
Medium
-
MediumICSA-18-086-01 3 CVEs
Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200
ATTENTION: Exploitable remotely/low skill level to exploit.
-
High
-
CriticalICSA-18-079-01 6 CVEs
Geutebruck IP Cameras
ATTENTION: Exploitable remotely/low skill level to exploit.
-
Medium
-
Critical
GE Medical Devices Vulnerability
Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices.
first Feb 6, 2018 -
HighICSA-18-072-02 3 CVEs
OSIsoft PI Data Archive
ATTENTION: Exploitable remotely/low skill level to exploit.
-
Medium
-
CriticalICSA-18-072-04 2 CVEs
OSIsoft PI Web API
ATTENTION: Exploitable remotely/low skill level to exploit.
-
HighICSA-18-065-01 5 CVEs
Hirschmann Automation and Control GmbH Classic Platform Switches
ATTENTION: Exploitable remotely/high skill level is needed to exploit.
-
HighICSA-18-065-02 1 CVE
Schneider Electric SoMove Software and DTM Software Components
Vendor: Schneider Electric
-
Medium
-
CriticalICSA-18-060-02 3 CVEs
Moxa OnCell G3100-HSPA Series
ATTENTION: Remotely exploitable/low skill level to exploit.
-
MediumICSA-18-060-03 1 CVE
Delta Electronics Delta Industrial Automation DOPSoft
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-18-058-02 3 CVEs
Delta Electronics WPLSoft
ATTENTION: Remotely exploitable/low skill level to exploit.
-
HighICSA-18-058-03 1 CVE
Emerson ControlWave Micro Process Automation Controller
ATTENTION: Remotely exploitable/low skill level to exploit.
-
Critical max 9.8
Philips Intellispace Portal ISP Vulnerabilities
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to sensitive information, perform man-in-the-middle attacks, create denial of service conditions, or execute arbitrary code.
-
Criticalfirst Jan 18, 2018
-
MediumICSA-18-051-01 1 CVE
ABB netCADOPS Web Application
ATTENTION: Remotely exploitable/low skill level to exploit.
-
Unscoredfirst Nov 14, 2017
-
CriticalICSA-18-046-01 1 CVE
Nortek Linear eMerge E3 Series
ATTENTION: Remotely exploitable/low skill level to exploit.