Ics-cert
52 CVEs tracked since 2018. Since Mar 2018, none of them reached CISA KEV.
Ics-cert CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2018-03 | 8 | 0 |
| 2018-04 | null or fewer | |
| 2018-05 | null or fewer | |
| 2018-06 | 10 | 0 |
| 2018-07 | null or fewer | |
| 2018-08 | 12 | 0 |
| 2018-09 | null or fewer | |
| 2018-10 | null or fewer | |
| 2018-11 | null or fewer | |
| 2018-12 | null or fewer | |
| 2019-01 | null or fewer | |
| 2019-02 | 22 | 0 |
Products
The products that kept showing up in Ics-cert's monthly top three, with their CVEs summed over those months.
- Lcds Laquis Scada7
- Omron Cx-supervisor6
- Netcomm Wireless G Lte Light Industrial M2M Router (Nwl-25) With Firmware 2.0.29.11 and Prior.4
- Intellivue Patient Monitors, Avalon Fetal/maternal Monitors3
- PR100088 Modbus Gateway3
- Wecon Levistudiou3
- Abb Ip Gateway2
- Beckhoff Twincat2
- Cncsoft With Screeneditor2
- Deltav2
Latest CVEs
The 15 most recently published vulnerabilities affecting Ics-cert.
- CVE-2018-17937gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded pla...8.8
- CVE-2019-6559Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.6.5
- CVE-2019-6565Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.6.1
- CVE-2019-6557Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.9.8
- CVE-2019-6524Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.9.8
- CVE-2019-6520Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.7.5
- CVE-2019-6518Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.7.5
- CVE-2019-6563Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.9.8
- CVE-2019-6522Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device ...9.1
- CVE-2019-6561Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.8.8
- CVE-2019-6528PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol Gateway 3G Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol ...8.8
- CVE-2019-6547Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for pro...5.5
- CVE-2019-6551Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to...7.5
- CVE-2019-6555Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and re...7.8
- CVE-2018-19008The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insert...7.8
The record
- Peak rank
- #21 in Feb 2019
- Busiest month shown
- Feb 2019, 22 CVEs
- Months with a KEV entry
- 0 since Mar 2018
- Monthly snapshots
- 4 since 2018