Advisories

The following is a list of all publicly disclosed vulnerabilities discovered by Kaspersky ICS CERT researchers. While the affected vendor is working on a patch for these vulnerabilities, Kaspersky customers are protected from exploitation by security filters delivered ahead of public disclosure. Once the vendor patches the vulnerability, we publish an accompanying security advisory, which describes the issue, including links to the vendor’s fixes.

Filter

09 November 2023

CVE-2023-47615

KLCERT-22-212

KLCERT-22-212: Telit Cinterion (Thales/Gemalto) modules. Exposure of Sensitive Information Through Environmental Variables

09 November 2023

CVE-2023-47616

KLCERT-22-193

KLCERT-22-193: Telit Cinterion (Thales/Gemalto) modules. Exposure of Sensitive Information to an Unauthorized Actor

08 November 2023

CVE-2023-47610

KLCERT-23-018

KLCERT-23-018: Telit Cinterion (Thales/Gemalto) modules. Buffer Copy without Checking Size of Input vulnerability

08 November 2023

CVE-2023-47611

KLCERT-22-216

KLCERT-22-216: Telit Cinterion (Thales/Gemalto) modules. Improper Privilege Management vulnerability

08 November 2023

CVE-2023-47613

KLCERT-22-211

KLCERT-22-211: Telit Cinterion (Thales/Gemalto) modules. Relative Path Traversal

08 November 2023

CVE-2023-47614

KLCERT-22-210

KLCERT-22-210: Telit Cinterion (Thales/Gemalto) modules. Exposure of Sensitive Information to an Unauthorized Actor vulnerability

08 November 2023

CVE-2023-47612

KLCERT-22-194

KLCERT-22-194: Telit Cinterion (Thales/Gemalto) modules. Files or Directories Accessible to External Parties vulnerability

12 October 2022

CVE-2022-38371

KLCERT-22-046

KLCERT-22-046: WAGO 750 Controllers. Denial of service of the FTP server

20 May 2022

CVE-2021-22782

KLCERT-21-007

KLCERT-21-007: Schneider Electric EcoStruxure Control Expert / Process Expert, SCADAPack RemoteConnect for x70. Information leak from project file

20 May 2022

CVE-2021-22779

KLCERT-20-061 / KLCERT-20-068

KLCERT-20-061 / KLCERT-20-068: Schneider Electric Modicon M340/M580 Authentication Bypass by Spoofing

1

...

Select a date

Search by vendor

Materials

Advisories RSS feed

Back to top

Select a date

Search by vendor

Filter