Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

1,185 results · Clear filters · Feed

  • Critical
    ICSA-12-025-02A 1 CVE rev. 2

    7-Technologies Termis DLL Hijacking

    7-Technologies
    first Oct 28, 2012
  • Critical
    ICSA-15-258-01 1 CVE rev. 2

    Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability

    Schneider Electric
    first Jun 18, 2015
  • Critical
    ICSA-12-263-01 1 CVE rev. 2

    Siemens S7-1200 Insecure Storage of HTTPS CA Certificate

    Siemens
    first Jun 23, 2012
  • Critical
    ICSMA-16-306-01 2 CVEs rev. 2

    Smiths Medical CADD-Solis Medication Safety Software Vulnerabilities

    Smiths Medical
    first Aug 5, 2016
  • Critical
    ICSA-12-214-01 1 CVE rev. 2

    Siemens Synco OZW Default Password

    Siemens
    first May 5, 2012
  • Critical
    ICSA-12-263-02 1 CVE rev. 2

    ORing Industrial Networking IDS-5042/5042+ Hard-Coded Credential Vulnerability

    ORing Industrial Networking
    first Jun 23, 2012
  • Critical
    ICSA-12-249-02 1 CVE rev. 2

    WAGO IO 758 Default Linux Credentials

    WAGO
    first Jun 9, 2012
  • Critical
    ICSA-16-336-01A 4 CVEs rev. 2

    Siemens SICAM PAS Vulnerabilities

    Siemens
    first Sep 4, 2016
  • Critical
    ICSA-11-356-01 2 CVEs rev. 2

    Siemens Simatic HMI Authentication Vulnerabilities

    Siemens
    first Sep 24, 2011
  • Critical
    ICSA-15-258-03 2 CVEs rev. 2

    GE MDS PulseNET Vulnerabilities

    GE
    first Jun 18, 2015
  • Critical max 9.8
    ICSA-16-336-02A 8 CVEs rev. 2

    Moxa NPort Device Vulnerabilities

    Moxa
    first Sep 4, 2016
  • Critical
    ICSA-12-213-01A 7 CVEs rev. 2

    Sielco Sistemi Winlog Multiple Vulnerabilities

    Sielco Sistemi
    first May 4, 2012
  • Critical
    ICSA-11-273-02 1 CVE rev. 2

    InduSoft ISSymbol ActiveX Control Buffer Overflow

    InduSoft
    first Jul 3, 2011
  • Critical
    ICSA-11-264-01 1 CVE rev. 2

    AzeoTech DAQFactory Stack Overflow

    AzeoTech
    first Jun 24, 2011
  • Critical
    ICSA-11-263-01 4 CVEs rev. 2

    Measuresoft ScadaPro Vulnerabilities

    Measuresoft Development
    first Jun 23, 2011
  • Critical
    ICSA-11-244-01 1 CVE rev. 2

    Siemens WinCC Flexible Runtime Heap Overflow

    Siemens
    first Jun 4, 2011
  • Critical
    ICSA-11-243-03A 1 CVE rev. 2

    GE Intelligent Platforms Proficy Historian Data Archiver Buffer Overflow Vulnerability

    GE
    first Jun 3, 2011
  • Critical
    ICSA-11-243-01 1 CVE rev. 2

    GE Intelligent Platforms Proficy Plant Applications Buffer Overflow

    GE
    first Jun 3, 2011
  • Critical
    ICSA-11-216-01 1 CVE rev. 2

    Scadatec Limited Procyon Telnet Buffer Overflow

    Scadatec
    first May 7, 2011
  • Critical
    ICSA-11-195-01 1 CVE rev. 2

    Wonderware Information Server

    Invensys
    first Apr 16, 2011
  • Critical
    ICSA-11-182-02 1 CVE rev. 2

    ICONICS Login ActiveX Vulnerability

    ICONICS
    first Apr 3, 2011
  • Critical
    ICSA-11-182-01 1 CVE rev. 2

    ICONICS GENESIS32 and BizViz ActiveX Trusted Zone Vulnerability

    ICONICS
    first Apr 3, 2011
  • Critical max 7.5
    ICSA-16-159-01 3 CVEs 1 exploited rev. 2

    Trihedral Engineering Limited VTScada Vulnerabilities

    Trihedral Engineering
    first Mar 11, 2016
  • Critical
    ICSA-16-154-01 1 CVE rev. 2

    GE MultiLink Series Hard-coded Credential Vulnerability

    GE
    first Mar 6, 2016
  • Critical
    ICSA-16-147-02 1 CVE rev. 2

    Sixnet BT Series Hard-coded Credentials Vulnerability

    Sixnet
    first Feb 27, 2016
  • Critical
    ICSA-16-147-01B 2 CVEs rev. 2

    Environmental Systems Corporation Data Controllers Vulnerabilities

    Environmental Systems
    first Feb 27, 2016
  • Critical
    ICSA-16-133-01A 4 CVEs rev. 2

    Meteocontrol WEB'log Vulnerabilities (Update A)

    Meteocontrol
    first Feb 13, 2016
  • Critical
    ICSA-16-096-01 4 CVEs rev. 2

    Pro-face GP-Pro EX HMI Vulnerabilities

    Pro-face
    first Jan 7, 2016
  • Critical
    ICSA-16-091-01 1 CVE rev. 2

    ICONICS WebHMI Directory Traversal Vulnerability

    ICONICS
    first Jan 2, 2016
  • Critical
    ICSA-16-049-02A 2 CVEs rev. 2

    AMX Multiple Products Credential Management Vulnerabilities (Update A)

    Harman
    first Nov 21, 2016
  • Critical
    ICSA-16-049-01 1 CVE rev. 2

    B+B SmartWorx VESP211 Authentication Bypass Vulnerability

    B+B SmartWorx
    first Nov 21, 2016
  • Critical
    ICSA-16-042-01A 5 CVEs rev. 2

    Moxa EDR-G903 Secure Router Vulnerabilities (Update A)

    Moxa
    first Nov 14, 2016
  • Critical
    ICSA-16-033-01 3 CVEs rev. 2

    Sauter moduWeb Vision Vulnerabilities

    Sauter
    first Nov 5, 2016
  • Critical
    ICSA-16-028-01A 1 CVE rev. 2

    Westermo Industrial Switch Hard-coded Certificate Vulnerability (Update A)

    Westermo
    first Oct 31, 2016
  • Critical max 9.8
    ICSA-25-155-01 5 CVEs

    CyberData 011209 SIP Emergency Intercom

    Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial-of-service condition, or achieve code execution.

    CyberData
  • Critical max 9.8
    ICSA-25-153-01 1 CVE

    Schneider Electric Wiser Home Automation

    Successful exploitation of this vulnerability could allow an attacker to inject code or bypass authentication.

    Schneider Electric
  • Critical max 9.1
    ICSA-25-153-03 1 CVE

    Mitsubishi Electric MELSEC iQ-F Series

    Successful exploitation of this vulnerability could allow an attacker to read confidential information, cause a denial-of-service condition, or stop operations by sending specially crafted packets.

    Mitsubishi Electric
  • Critical max 7.3
    ICSA-25-155-02 2 CVEs rev. 2

    Hitachi Energy Relion 670 650 series and SAM600-IO Product

    Hitachi Energy is aware of two critical memory allocation vulnerabilities (called BadAlloc [1] vulnerabilities) in the WindRiver VxWorks Operating Systems [2][3] that are used in our product versions listed in this advisory. An attacker that exploits these vu…

    Hitachi Energy
    first Dec 16, 2021
  • Critical max 9.8
    ICSA-25-142-02 1 CVE

    Rockwell Automation FactoryTalk Historian ThingWorx

    Successful exploitation of this vulnerability could allow an attacker to launch XXE-based attacks on applications that accept malicious log4net configuration files.

    Rockwell Automation
  • Critical max 10.0
    ICSA-25-140-09 1 CVE

    AutomationDirect MB-Gateway

    Successful exploitation of this vulnerability could allow an attacker to make configuration changes, disrupt operations, or achieve arbitrary code execution.

    Automation Direct