Advisories

The following is a list of all publicly disclosed vulnerabilities discovered by Kaspersky ICS CERT researchers. While the affected vendor is working on a patch for these vulnerabilities, Kaspersky customers are protected from exploitation by security filters delivered ahead of public disclosure. Once the vendor patches the vulnerability, we publish an accompanying security advisory, which describes the issue, including links to the vendor’s fixes.

Filter

23 March 2020

CVE-2019-15693

KLCERT-20-007

KLCERT-20-007: Remote Code Execution on TigerVNC version prior to 1.10.1

TigerVNC

23 March 2020

CVE-2019-15692

KLCERT-20-006

KLCERT-20-006: Remote Code Execution on TigerVNC version prior to 1.10.1

TigerVNC

23 March 2020

CVE-2019-15691

KLCERT-20-005

KLCERT-20-005: Remote Code Execution on TigerVNC version prior to 1.10.1

TigerVNC

23 March 2020

CVE-2019-15694

KLCERT-20-323

KLCERT-20-323: Remote Code Execution on TigerVNC version prior to 1.10.1

TigerVNC

23 March 2020

CVE-2020-6970

KLCERT-20-324

KLCERT-20-324: Remote Code Execution on Emerson OpenEnterprise SCADA Server version 2.83 and all versions of OpenEnterprise 3.1 through 3.3.3

Emerson

16 March 2020

CVE-2015-3269

KLCERT-20-002

KLCERT-20-002: XXE on Moxa’s cellular management software OnCell Central Manager Version lower than 2.4.1

Moxa

16 March 2020

CVE-2017-5641

KLCERT-20-001

KLCERT-20-001: Remote Code Execution on Moxa’s cellular management software OnCell Central Manager Version lower than 2.4.1

Moxa

30 October 2019

CVE-2019-15682

KLCERT-19-032

KLCERT-19-032: A denial-of-service condition in RDesktop before 1.8.5

RDesktop

13 August 2019

CVE-2019-9013

KLCERT-19-031

KLCERT-19-031: CODESYS V3 Password transmission vulnerability

CodeSYS

05 June 2019

CVE-2019-8283

KLCERT-19-030

KLCERT-19-030: Hasplm cookie without HTTPOnly attribute

Thales

5

...

Select a date

Search by vendor

Materials

Advisories RSS feed

Back to top

Select a date

Search by vendor

Filter