Vendor
ICS-CERT
93 known vulnerabilities in products by ICS-CERT, 0 of them actively exploited (CISA KEV).
Key figures
93
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
21
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-10594 | Delta Electronics COMMGR: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-6543 | Aveva InduSoft Web Studio: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2018-10630 | Crestron Mc3 Firmware: Improper Access Control | 9.8 | |
| Critical | CVE-2018-8840 | InduSoft Web Studio: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2018-17930 | ICS-CERT Teledyne DALSA Sherlock: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2018-8847 | ICS-CERT Eaton 9000X Drive: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2017-16748 | ICS-CERT Niagara AX Framework and Niagara 4 Framework: Improper Authentication | 9.8 | |
| Critical | CVE-2019-6557 | Moxa EDS-405A Firmware: Classic Buffer Overflow | 9.8 | |
| High | CVE-2018-10636 | ICS-CERT CNCSoft with ScreenEditor: Stack-based Buffer Overflow | 8.8 | |
| Critical | CVE-2018-14805 | ICS-CERT ABB eSOMS: Improper Authentication | 9.8 | |
| High | CVE-2019-6545 | Aveva InduSoft Web Studio: Resource Injection | 7.5 | |
| Critical | CVE-2019-6524 | Moxa EDS-405A Firmware: Improper Restriction of Excessive Authentication Attempts | 9.8 | |
| Critical | CVE-2017-9664 | ICS-CERT ABB SREA-01 and SREA-50: Relative Path Traversal | 9.8 | |
| Critical | CVE-2017-7931 | ICS-CERT ABB IP GATEWAY: Improper Authentication | 9.8 | |
| Critical | CVE-2018-18996 | ICS-CERT LCDS Laquis SCADA: Injection | 9.8 | |
| High | CVE-2017-16744 | ICS-CERT Niagara AX Framework and Niagara 4 Framework: Path Traversal | 7.2 | |
| Critical | CVE-2018-18998 | ICS-CERT LCDS Laquis SCADA: Use of Hard-coded Credentials | 9.8 | |
| Medium | CVE-2018-18990 | ICS-CERT LCDS Laquis SCADA: Relative Path Traversal | 5.3 | |
| High | CVE-2018-10598 | ICS-CERT CNCSoft with ScreenEditor: Out-of-bounds Read | 8.1 | |
| Critical | CVE-2019-6522 | Moxa EDS-405A Firmware: Out-of-bounds Read | 9.1 | |
| High | CVE-2018-7507 | ICS-CERT Delta Electronics WPLSoft: Heap-based Buffer Overflow | 8.8 | |
| High | CVE-2018-7494 | ICS-CERT Delta Electronics WPLSoft: Stack-based Buffer Overflow | 8.8 | |
| High | CVE-2018-17937 | ICS-CERT gpsd and microjson (Open Source Project): Stack-based Buffer Overflow | 8.8 | |
| High | CVE-2019-6528 | PSI GridConnect Smart Telecontrol Unit TCG Firmware: Cross-site Scripting | 8.8 | |
| High | CVE-2018-7509 | ICS-CERT Delta Electronics WPLSoft: Out-of-bounds Write | 8.8 |