Login Request a demo
IC
Vendor
ICS-CERT
19 products with CVEs on record
52
CVEs
0
On KEV
0
New 30D
Products
MI
Moxa IKS, EDS
ICS-CERT
9.8
9 CVEs0 on KEV0 new
CX
CX-Supervisor
ICS-CERT
8.8
7 CVEs0 on KEV0 new
LL
LCDS Laquis SCADA
ICS-CERT
9.8
7 CVEs0 on KEV0 new
NW
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
ICS-CERT
8.8
4 CVEs0 on KEV0 new
DI
Dräger Infinity Delta
ICS-CERT
7.8
3 CVEs0 on KEV0 new
PM
PR100088 Modbus gateway
ICS-CERT
9.8
3 CVEs0 on KEV0 new
WL
WECON LeviStudioU
ICS-CERT
7.8
3 CVEs0 on KEV0 new
AS
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
ICS-CERT
9.8
2 CVEs0 on KEV0 new
CW
CNCSoft with ScreenEditor
ICS-CERT
8.8
2 CVEs0 on KEV0 new
DE
DeltaV
ICS-CERT
8.8
2 CVEs0 on KEV0 new
NA
Niagara AX Framework and Niagara 4 Framework
ICS-CERT
9.8
2 CVEs0 on KEV0 new
AC
ABB CP400 Panel Builder TextEditor 2.0
ICS-CERT
7.8
1 CVEs0 on KEV0 new
BF
BD FACSLyric
ICS-CERT
6.8
1 CVEs0 on KEV0 new
CT
Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001
ICS-CERT
9.8
1 CVEs0 on KEV0 new
CS
Cscape
ICS-CERT
7.8
1 CVEs0 on KEV0 new
DI
Delta Industrial Automation CNCSoft
ICS-CERT
5.5
1 CVEs0 on KEV0 new
GA
gpsd and microjson (Open Source Project)
ICS-CERT
8.8
1 CVEs0 on KEV0 new
PC
Pangea Communications Internet FAX ATA
ICS-CERT
7.5
1 CVEs0 on KEV0 new
PG
PSI GridConnect GmbH (formerly known as PSI Nentec GmbH) Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy.
ICS-CERT
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2018-17937
GA
gpsd and microjson (Open Source Project)
ICS-CERT
8.8
3%
Mar 13gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary…
CVE-2019-6565
MI
Moxa IKS, EDS
ICS-CERT
6.1
1%
Mar 5Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a…
CVE-2019-6563
MI
Moxa IKS, EDS
ICS-CERT
9.8
2%
Mar 5Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of…
CVE-2019-6561
MI
Moxa IKS, EDS
ICS-CERT
8.8
1%
Mar 5Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device
CVE-2019-6559
MI
Moxa IKS, EDS
ICS-CERT
6.5
2%
Mar 5Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash
CVE-2019-6557
MI
Moxa IKS, EDS
ICS-CERT
9.8
5%
Mar 5Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution
CVE-2019-6528
PG
PSI GridConnect GmbH (formerly known as PSI Nentec GmbH) Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy.
ICS-CERT
8.8
3%
Mar 5PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol Gateway 3G Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and…
CVE-2019-6524
MI
Moxa IKS, EDS
ICS-CERT
9.8
3%
Mar 5Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack
CVE-2019-6522
MI
Moxa IKS, EDS
ICS-CERT
9.1
3%
Mar 5Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive…
CVE-2019-6520
MI
Moxa IKS, EDS
ICS-CERT
7.5
2%
Mar 5Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes
CVE-2019-6518
MI
Moxa IKS, EDS
ICS-CERT
7.5
1%
Mar 5Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device
CVE-2019-6551
PC
Pangea Communications Internet FAX ATA
ICS-CERT
7.5
3%
Feb 28Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot,…
CVE-2019-6547
DI
Delta Industrial Automation CNCSoft
ICS-CERT
5.5
1%
Feb 28Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior
CVE-2019-6555
CS
Cscape
ICS-CERT
7.8
2%
Feb 28Cscape, 9.80 SP4 and prior
CVE-2018-19008
AC
ABB CP400 Panel Builder TextEditor 2.0
ICS-CERT
7.8
2%
Feb 13The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly…
CVE-2019-6545
AS
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
ICS-CERT
7.5
14%
Feb 13AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
CVE-2019-6543
AS
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
ICS-CERT
9.8
17%
Feb 13AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
CVE-2019-6539
WL
WECON LeviStudioU
ICS-CERT
7.8
2%
Feb 13Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution
CVE-2019-6541
WL
WECON LeviStudioU
ICS-CERT
7.8
2%
Feb 13A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code execution
CVE-2019-6537
WL
WECON LeviStudioU
ICS-CERT
7.8
2%
Feb 13Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings within project files
CVE-2018-19018
CX
CX-Supervisor
ICS-CERT
7.3
1%
Feb 12An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files
CVE-2018-19020
CX
CX-Supervisor
ICS-CERT
5.0
1%
Feb 12When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an…
CVE-2019-6549
PM
PR100088 Modbus gateway
ICS-CERT
7.2
1%
Feb 12An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) through FTP
CVE-2019-6533
PM
PR100088 Modbus gateway
ICS-CERT
9.1
1%
Feb 12Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or…
CVE-2019-6527
PM
PR100088 Modbus gateway
ICS-CERT
9.8
1%
Feb 12PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or…
CVE-2019-6517
BF
BD FACSLyric
ICS-CERT
6.8
0%
Feb 6BD FACSLyric Research Use Only, Windows 10 Professional Operating System, U.S
CVE-2018-18996
LL
LCDS Laquis SCADA
ICS-CERT
9.8
2%
Feb 5LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the…
CVE-2018-19000
LL
LCDS Laquis SCADA
ICS-CERT
5.3
9%
Feb 5LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data
CVE-2018-18998
LL
LCDS Laquis SCADA
ICS-CERT
9.8
2%
Feb 5LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges
CVE-2018-18992
LL
LCDS Laquis SCADA
ICS-CERT
8.8
2%
Feb 5LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the server
CVE-2018-18990
LL
LCDS Laquis SCADA
ICS-CERT
5.3
39%
Feb 5LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation
CVE-2018-19004
LL
LCDS Laquis SCADA
ICS-CERT
3.3
4%
Feb 1LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration
CVE-2018-18988
LL
LCDS Laquis SCADA
ICS-CERT
8.8
3%
Feb 1LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file
CVE-2018-19014
DI
Dräger Infinity Delta
ICS-CERT
6.5
1%
Jan 28Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions
CVE-2018-19010
DI
Dräger Infinity Delta
ICS-CERT
6.5
1%
Jan 28Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions
CVE-2018-19012
DI
Dräger Infinity Delta
ICS-CERT
7.8
0%
Jan 28Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions
CVE-2018-19015
CX
CX-Supervisor
ICS-CERT
7.3
1%
Jan 28An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file
CVE-2018-19013
CX
CX-Supervisor
ICS-CERT
5.0
1%
Jan 22An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file
CVE-2018-19019
CX
CX-Supervisor
ICS-CERT
7.3
1%
Jan 22A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior)
CVE-2018-19017
CX
CX-Supervisor
ICS-CERT
8.8
2%
Jan 22Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior)
CVE-2018-19011
CX
CX-Supervisor
ICS-CERT
8.8
2%
Jan 22CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file
CVE-2018-14795
DE
DeltaV
ICS-CERT
8.8
2%
Aug 21DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files
CVE-2018-14793
DE
DeltaV
ICS-CERT
8.8
1%
Aug 21DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitrary code execution
CVE-2017-16748
NA
Niagara AX Framework and Niagara 4 Framework
ICS-CERT
9.8
5%
Aug 20An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a…
CVE-2017-16744
NA
Niagara AX Framework and Niagara 4 Framework
ICS-CERT
7.2
6%
Aug 20A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by…
CVE-2018-10636
CW
CNCSoft with ScreenEditor
ICS-CERT
8.8
9%
Aug 13CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking…
CVE-2018-10598
CW
CNCSoft with ScreenEditor
ICS-CERT
8.1
3%
Aug 13CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input…
CVE-2018-14782
NW
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
ICS-CERT
7.5
2%
Aug 10NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior
CVE-2018-14785
NW
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
ICS-CERT
7.5
2%
Aug 10NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior
CVE-2018-14784
NW
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
ICS-CERT
6.1
1%
Aug 10NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior
CVE-2018-14783
NW
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
ICS-CERT
8.8
1%
Aug 10NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior
CVE-2018-10630
CT
Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001
ICS-CERT
9.8
11%
Aug 10For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there is no indication to…