Vendor
ICS-CERT
93 known vulnerabilities.
ICS-CERT at a glance
- Last 12 months
- 0
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 5
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Products
Moxa IKS, EDS 9
CX-Supervisor 7
LCDS Laquis SCADA 7
Omron CX-Supervisor 6
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. 4
Dräger Infinity Delta 3
WECON LeviStudioU 3
Omron CX-One 3
Advantech WebAccess HMI Designer 3
Delta Electronics WPLSoft 3
IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors 3
PR100088 Modbus gateway 3
ABB IP GATEWAY 2
DeltaV 2
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update 2
Beckhoff TwinCAT 2
VGo Robot 2
Niagara AX Framework and Niagara 4 Framework 2
BeaconMedæs TotalAlert Scroll Medical Air Systems web application 2
CNCSoft with ScreenEditor 2
PSI GridConnect GmbH (formerly known as PSI Nentec GmbH) Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy. 1
ABB eSOMS 1
Delta Industrial Automation CNCSoft 1
ABB CP400 Panel Builder TextEditor 2.0 1
ABB SREA-01 and SREA-50 1
Pangea Communications Internet FAX ATA 1
Advantech WebAccess Versions 8.1 and prior. 1
gpsd and microjson (Open Source Project) 1
Eaton 9000X Drive 1
Teledyne DALSA Sherlock 1
Cscape 1
Rockwell Automation Arena 1
Yokogawa CENTUM and Exaopc 1
Schneider Electric InduSoft Web Studio and InTouch Machine Edition 1
GE PACSystems RX3i CPE305/310 version 9.20 and prior RX3i CPE330 version 9.21 and prior RX3i CPE 400 version 9.30 and prior PACSystems RSTi-EP CPE 100 all versionsPACSystems CPU320/CRU320 RX 1
LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA 1
Beckhoff TwinCAT PLC products 1
BeaconMedaes TotalAlert Scroll Medical Air Systems web application 1
Delta Industrial Automation COMMGR and accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) 1
BD FACSLyric 1
93 results · Feed
-
Unscored —
gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overfl…
-
Unscored —
Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary ad…
-
Unscored —
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the adminis…
-
Unscored —
Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to …
-
Unscored —
Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which ma…
-
Unscored —
Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may all…
-
Unscored —
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perf…
-
Unscored —
Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability …
-
Unscored —
PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol …
-
Unscored —
Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized a…
-
Unscored —
Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.
-
Unscored —
Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication usi…
-
Unscored —
Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerabilit…
-
Unscored —
Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted…
-
Unscored —
The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser …
-
Unscored —
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition…
-
Unscored —
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition…
-
Unscored —
A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow ar…
-
Unscored —
Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, …
-
Unscored —
Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited whe…
-
Unscored —
An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusio…
-
Unscored —
When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attack…
-
Unscored —
An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Rel…
-
Unscored —
Registers used to store Modbus values can be read and written from the web interface without authentication in the PR10…
-
Unscored —
PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able …
-
Unscored —
BD FACSLyric Research Use Only, Windows 10 Professional Operating System, U.S. and Malaysian Releases, between November…
-
Unscored —CVE-2018-18990 EPSS 39%
LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized acc…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, w…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to se…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, …
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report for…
-
Unscored —
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer …
-
Unscored —
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer …
-
Unscored —
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer …
-
Unscored —
An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 …
-
Unscored —
CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could …
-
Unscored —
A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An atta…
-
Unscored —
Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing…