ICS CERT vulnerabilities, page 2

92 vulnerabilities

Known vulnerabilities in ICS CERT products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 42 products.

10CVE-2018-17930ics-certteledyne dalsa sherlock+1
EPSS score
7.26%
A stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock Version 7.2.7.4 and prior, which may allow remote code execution.8.8CVE-2018-17937debiangpsd+6
EPSS score
2.66%
gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs.5.3CVE-2018-7523ics-certomron cx-supervisor+1
EPSS score
0.34%
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.5.3CVE-2018-7521ics-certomron cx-supervisor+1
EPSS score
0.34%
In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file.9.8CVE-2018-7510beaconmedaesscroll_medical_air_systems_firmware+1
EPSS score
1.41%
In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are presented in plaintext in a file that is accessible without authentication.8.8CVE-2018-7494deltawwwplsoft+1
EPSS score
2.73%
WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash.8.8CVE-2018-7507deltawwwplsoft+1
EPSS score
2.73%
WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash.5.3CVE-2018-7515ics-certbeaconmedæs totalalert scroll medical air systems web application+1
EPSS score
0.29%
In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets.5.3CVE-2018-7525ics-certomron cx-supervisor+1
EPSS score
0.34%
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability.7.8CVE-2018-7530ics-certomron cx-one+7
EPSS score
0.33%
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition.7.5CVE-2018-7506ics-certmoxa mxview+1
EPSS score
1.91%
The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET request, which may allow a remote attacker to decrypt encrypted information.7.8CVE-2018-7514ics-certomron cx-one+7
EPSS score
0.32%
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a stack-based buffer overflow.8.8CVE-2018-7509deltawwwplsoft+1
EPSS score
2.58%
WPLSoft in Delta Electronics versions 2.45.0 and prior writes data from a file outside the bounds of the intended buffer space, which could cause memory corruption or may allow remote code execution.5.3CVE-2018-7513ics-certomron cx-supervisor+1
EPSS score
0.36%
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow.5.3CVE-2018-7519ics-certomron cx-supervisor+1
EPSS score
0.36%
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow.7.8CVE-2018-7502beckhofftwincat+2
EPSS score
0.56%
Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges.5.3CVE-2018-7517ics-certomron cx-supervisor+1
EPSS score
0.34%
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability.9.8CVE-2018-7518beaconmedaesscroll_medical_air_systems_firmware+1
EPSS score
1.31%
In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, an attacker with network access to the integrated web server could retrieve default or user defined credentials stored and transmitted in an insecure manner.8.8CVE-2018-18988ics-certlcds laquis scada+1
EPSS score
2.57%
LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash.9.8CVE-2018-18998ics-certlcds laquis scada+1
EPSS score
2.38%
LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges.