ICS CERT vulnerabilities, page 5
92 vulnerabilities
Known vulnerabilities in ICS CERT products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 42 products.
CVE-2019-6537ics-certwecon levistudiou+1
EPSS score1.90%
Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings within project files. The process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage these vulnerabilities to execute code under the context of the current process. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.CVE-2019-6522ics-certmoxa iks, eds+4EPSS score2.54%
Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.CVE-2019-6539ics-certwecon levistudiou+1EPSS score2.11%
Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.CVE-2019-6565ics-certmoxa iks, eds+4EPSS score1.09%
Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.CVE-2019-6520ics-certmoxa iks, eds+4EPSS score1.67%
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.CVE-2019-6555hornerautomationcscape+1EPSS score1.72%
Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code.CVE-2019-6545avevaindusoft_web_studio+2EPSS score13.86%
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary process on the server machine.CVE-2019-6559ics-certmoxa iks, eds+4EPSS score2.42%
Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.CVE-2019-6551ics-certpangea communications internet fax ata+1EPSS score3.30%
Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition.CVE-2019-6518ics-certmoxa iks, eds+4EPSS score1.25%
Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.CVE-2019-6549ics-certpr100088 modbus gateway+1EPSS score0.59%
An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) through FTP.CVE-2019-6527ics-certpr100088 modbus gateway+1EPSS score1.21%
PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.