Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

1,185 results · Clear filters · Feed

  • Critical max 10.0
    ICSA-14-350-01 5 CVEs rev. 2

    Schneider Electric ProClima Command Injection Vulnerabilities

    Schneider Electric
    first Sep 18, 2014
  • Critical
    ICSA-14-329-02D 2 CVEs rev. 2

    Siemens SIMATIC WinCC, PCS7, and TIA Portal Vulnerabilities

    Siemens
    first Aug 28, 2014
  • Critical
    ICSA-14-308-01 1 CVE rev. 2

    ABB RobotStudio and Test Signal Viewer DLL Hijack Vulnerability

    ABB
    first Aug 7, 2014
  • Critical
    ICSA-14-288-01 4 CVEs rev. 2

    CareFusion Pyxis SupplyStation System Vulnerabilities

    CareFusion
    first Jul 18, 2014
  • Critical max 9.0
    ICSA-14-198-02 5 CVEs rev. 2

    Advantech WebAccess Vulnerabilities

    Advantech
    first Apr 19, 2014
  • Critical
    ICSA-13-077-01B 2 CVEs rev. 2

    Schneider Electric PLCs Vulnerabilities

    Schneider Electric
    first Dec 20, 2013
  • Critical
    ICSA-13-016-01 1 CVE rev. 2

    Schneider Electric Authenticated Communication Risk Vulnerability

    Schneider Electric
    first Oct 20, 2013
  • Critical max 9.8
    ICSA-13-011-03 8 CVEs rev. 2

    Rockwell Automation ControlLogix PLC Vulnerabilities

    Rockwell Automation
    first Oct 15, 2013
  • Critical
    ICSA-12-185-01 5 CVEs rev. 2

    WellinTech KingView Multiple Vulnerabilities

    WellinTech
    first Apr 6, 2012
  • Critical
    ICSA-12-137-02 1 CVE rev. 2

    Advantech Studio ISSymbol ActiveX Buffer Overflow

    Advantech
    first Feb 17, 2012
  • Critical
    ICSA-15-069-03 3 CVEs rev. 2

    SCADA Engine BACnet OPC Server Vulnerabilities

    SCADA Engine
    first Dec 11, 2015
  • Critical
    ICSA-15-069-01 1 CVE rev. 2

    Cimon CmnView DLL Hijacking Vulnerability

    CIMON
    first Dec 11, 2015
  • Critical
    ICSA-15-057-01 1 CVE rev. 2

    Network Vision IntraVue Code Injection Vulnerability

    Network Vision
    first Nov 29, 2015
  • Critical
    ICSA-15-034-02 3 CVEs rev. 2

    Siemens Ruggedcom WIN Vulnerability

    Siemens
    first Nov 6, 2015
  • Critical max 10.0
    ICSA-15-020-02 2 CVEs rev. 2

    Schneider Electric ETG3000 FactoryCast HMI Gateway Vulnerabilities

    Schneider Electric
    first Oct 23, 2015
  • Critical max 10.0
    ICSA-15-013-04A 3 CVEs rev. 2

    GE Multilink Switch Vulnerabilities (Update A)

    GE
    first Oct 16, 2015
  • Critical max 10.0
    ICSA-15-013-03 1 CVE rev. 2

    Phoenix Contact Software ProConOs and MultiProg Authentication Vulnerability

    Phoenix Contact
    first Oct 16, 2015
  • Critical max 10.0
    ICSA-15-013-02 1 CVE rev. 2

    Clorius Controls A/S ISC SCADA Insecure Java Client Web Authentication

    Clorius Controls
    first Oct 16, 2015
  • Critical
    ICSA-12-122-01 1 CVE rev. 2

    WellinTech KingView DLL Hijack Vulnerability

    WellinTech
    first Feb 2, 2012
  • Critical
    ICSA-12-083-01 1 CVE rev. 2

    Ecava IntegraXor ActiveX Directory Traversal

    Ecava
    first Dec 25, 2012
  • Critical
    ICSA-12-032-02 1 CVE rev. 2

    GE Intelligent Platforms Proficy Plant Applications Memory Corruption Vulnerabilities

    GE
    first Nov 4, 2012
  • Critical
    ICSA-12-032-01 1 CVE rev. 2

    GE Proficy Historian ihDataArchiver

    GE
    first Nov 4, 2012
  • Critical
    ICSA-15-167-01 1 CVE rev. 2

    Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability

    Schneider Electric
    first Mar 19, 2015
  • Critical
    ICSA-15-162-01A 1 CVE rev. 2

    RLE Nova-Wind Turbine HMI Unsecure Credentials Vulnerability (Update A)

    RLE International
    first Mar 14, 2015
  • Critical
    ICSA-15-160-01A 1 CVE rev. 2

    N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A)

    N-Tron
    first Mar 12, 2015
  • Critical
    ICSA-15-155-01 1 CVE rev. 2

    XZERES 442SR Wind Turbine CSRF Vulnerability

    XZERES
    first Mar 7, 2015
  • Critical
    ICSA-15-125-01 1 CVE rev. 2

    Hospira LifeCare PCA Infusion System Vulnerabilities

    Hospira
    first Feb 5, 2015
  • Critical max 10.0
    ICSA-15-090-03 1 CVE rev. 2

    Hospira MedNet Vulnerabilitie

    Hospira
    first Jan 1, 2015
  • Critical
    ICSA-15-090-01 1 CVE rev. 2

    Inductive Automation Ignition Vulnerabilities

    Inductive Automation
    first Jan 1, 2015
  • Critical
    ICSA-15-076-02 1 CVE rev. 2

    Honeywell XL Web Controller Directory Traversal Vulnerability

    Honeywell
    first Dec 18, 2015
  • Critical
    ICSA-15-076-01 1 CVE rev. 2

    XZERES 442SR Wind Turbine Vulnerability

    XZERES
    first Dec 18, 2015
  • Critical
    ICSA-14-353-01C 6 CVEs rev. 2

    Network Time Protocol Vulnerabilities

    Arbiter Systems; Innomoninate; Meinberg; Siemens; Wind River System
    first Sep 21, 2014
  • Critical max 10.0
    ICSA-14-273-01 1 CVE rev. 2

    SchneiderWEB Server Directory Traversal Vulnerability

    Schneider Electric
    first Jul 3, 2014
  • Critical max 9.8
    ICSA-14-269-01A 1 CVE 1 exploited rev. 2

    Bash Command Injection Vulnerability

    ABB ; Cisco ; Digi ; eWON ; Meinberg ; Moxa ; Red Lion; Siemens
    first Jun 29, 2014
  • Critical max 10.0
    ICSA-14-205-01 1 CVE rev. 2

    Morpho Itemiser 3 Hard-Coded Credential

    Morpho
    first Apr 26, 2014
  • Critical
    ICSA-14-107-01 3 CVEs rev. 2

    Siemens SINEMA Vulnerabilities

    Siemens
    first Jan 18, 2014
  • Critical
    ICSA-14-007-01B 2 CVEs rev. 2

    Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B)

    Sierra Wireless
    first Oct 10, 2014
  • Critical
    ICSA-13-338-01 1 CVE rev. 2

    Siemens SINAMICS S/G Authentication Bypass Vulnerability

    Siemens
    first Sep 6, 2013
  • Critical
    ICSA-13-277-01 1 CVE rev. 2

    Philips Xper Buffer Overflow Vulnerability

    Philips
    first Jul 7, 2013
  • Critical
    ICSA-13-274-01 1 CVE rev. 2

    Siemens SCALANCE X-200 Authentication Bypass Vulnerability

    Siemens
    first Jul 4, 2013