Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

1,185 results · Clear filters · Feed

  • Critical
    ICSA-12-145-02 4 CVEs rev. 2

    xArrow Multiple Vulnerabilities

    xArrow
    first Feb 25, 2012
  • Critical
    ICSA-16-208-01C 2 CVEs rev. 2

    Siemens SIMATIC WinCC, PCS 7, and WinCC Runtime Professional Vulnerabilities (Update C)

    Siemens
    first Apr 29, 2016
  • Critical max 9.3
    ICSA-25-175-01 2 CVEs

    Kaleris Navis N4 Terminal Operating System

    Successful exploitation of these vulnerabilities could allow an attacker to remotely exploit the operating system, achieve remote code execution, or extract sensitive information.

    Kaleris
  • Critical max 9.1
    ICSA-25-175-05 3 CVEs

    ControlID iDSecure On-premises

    Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, retrieve information, leak arbitrary data, or perform SQL injections.

    Control iD
  • Critical max 9.3
    ICSA-25-175-07 3 CVEs

    MICROSENS NMP Web+

    Successful exploitation of these vulnerabilities could allow an attacker to gain system access, overwrite files or execute arbitrary code.

    Microsens
  • Critical max 9.8
    ICSA-25-182-04 4 CVEs rev. 3

    FESTO Hardware Controller, Hardware Servo Press Kit

    The Festo controller CECC-X-M1 product family in multiple versions are affected by a preauthentication command injection vulnerability. Update A, 2022-07-05 Remediation has been updated. Fixed firmwares are now available.

    Festo
    first Jul 6, 2022
  • Critical
    ICSA-16-145-01A 3 CVEs rev. 2

    Moxa MiiNePort Vulnerabilities

    Moxa
    first Feb 25, 2016
  • Critical max 9.8
    VA-25-171-01 1 CVE

    ClamAV

    ClamAV is an open source antivirus maintained by Cisco. A heap-based buffer overflow vulnerability in the PDF scanning process of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service or possibly execute arbitrary code.

    Cisco
  • Critical
    ICSA-12-354-01A 1 CVE rev. 2

    Ruggedcom ROS Hard-Coded RSA SSL Private Key

    Siemens
    first Sep 22, 2012
  • Critical
    ICSA-12-079-01 1 CVE rev. 2

    Microsoft Remote Desktop Protocol Memory Corruption Vulnerability

    Microsoft
    first Dec 21, 2012
  • Critical
    ICSA-10-348-01A 1 CVE rev. 2

    Wonderware InBatch Vulnerability

    Invensys
    first Sep 16, 2010
  • Critical
    ICSA-12-047-01A 18 CVEs rev. 2

    Advantech WebAccess Vulnerabilities

    Advantech/Broadwin
    first Nov 19, 2012
  • Critical
    ICSA-12-059-01 1 CVE rev. 2

    ABB Robot Communications Runtime Buffer Overflow

    ABB
    first Dec 1, 2012
  • Critical max 9.8
    ICSA-25-168-05 1 CVE

    Dover Fueling Solutions ProGauge MagLink LX consoles

    Successful exploitation of this vulnerability could result in an attacker gaining control of the monitoring device, manipulating fueling operations, deleting system configurations, or deploying malware.

    Dover Fueling Solutions
  • Critical
    ICSA-13-113-01 4 CVEs rev. 2

    Wonderware Information Server Vulnerabilities

    Invensys
    first Jan 25, 2013
  • Critical max 9.8
    ICSA-25-162-10 4 CVEs 2 exploited

    PTZOptics and Other Pan-Tilt-Zoom Cameras

    Successful exploitation of these vulnerabilities could allow an attacker to leak sensitive data, execute arbitrary commands, and access the admin web interface using hard-coded credentials.

    ValueHD, PTZOptics, multiCAM Systems, SMTAV
  • Critical max 9.8
    ICSA-24-030-01 4 CVEs rev. 2

    Emerson Rosemount GC370XA, GC700XA, GC1500XA

    Successful exploitation of these vulnerabilities could allow an unauthenticated attacker with network access to run arbitrary commands, access sensitive information, cause a denial-of-service condition, and bypass authentication to acquire admin capabilities.

    Emerson
    first Jan 30, 2024
  • Critical
    ICSA-21-103-11 14 CVEs rev. 2

    Siemens TIM 4R-IE Devices

    TIM 4R-IE devices contain multiple vulnerabilities in the integrated NTP component as listed below. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

    Siemens
    first Apr 13, 2021
  • Critical max 8.7
    ICSA-24-338-02 18 CVEs 5 exploited rev. 6

    Siemens RUGGEDCOM APE1808

    Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where f…

    Siemens
    first Nov 22, 2024
  • Critical max 9.9
    ICSA-25-162-06 1 CVE

    Siemens Energy Services

    Siemens Energy Services (previously known as Managed Applications and Services), sell solutions using Elspec G5 Digital Fault Recorder which contains default credentials with admin privileges. A client configuration with remote access could allow an attacker …

    Siemens
  • Critical
    ICSA-11-340-01 2 CVEs rev. 2

    ARC Informatique PcVue HMI/SCADA ActiveX Vulnerabilities

    ARC Informatique
    first Sep 8, 2011
  • Critical
    ICSA-11-319-01 2 CVEs rev. 2

    InduSoft Web Studio Vulnerabilities

    InduSoft
    first Aug 18, 2011
  • Critical
    ICSA-11-307-01 4 CVEs rev. 2

    Schneider Electric Vijeo Historian Web Server Multiple Vulnerabilities

    Schneider Electric
    first Aug 6, 2011
  • Critical
    ICSA-11-298-01A 1 CVE rev. 2

    Sielco Sistemi Winlog Buffer Overflow

    Sielco Sistemi
    first Jul 28, 2011
  • Critical
    ICSA-11-294-01 3 CVEs rev. 2

    Progea Movicon Power HMI Vulnerabilities

    Progea
    first Jul 24, 2011
  • Critical
    ICSA-11-280-01 4 CVEs rev. 2

    Cogent DataHub Vulnerabilities

    Cogent Real-Time Systems
    first Jul 10, 2011
  • Critical
    ICSA-11-279-01 1 CVE rev. 2

    Advantech OPC Server Buffer Overflow

    Advantech
    first Jul 9, 2011
  • Critical max 9.3
    ICSA-14-133-01 4 CVEs rev. 2

    Yokogawa Multiple Products Vulnerabilities

    Yokogawa
    first Feb 13, 2014
  • Critical max 10.0
    ICSA-14-098-02 1 CVE rev. 2

    WellinTech KingSCADA Stack-Based Buffer Overflow

    WellinTech KingSCADA
    first Jan 9, 2014
  • Critical max 9.3
    ICSA-14-070-01A 4 CVEs rev. 2

    Yokogawa CENTUM CS 3000 Vulnerabilities (Update A)

    Yokogawa
    first Dec 12, 2014
  • Critical
    ICSA-14-051-02 1 CVE rev. 2

    Mitsubishi Electric Automation MC-WorX Suite Unsecure ActiveX Control

    Mitsubishi Electric
    first Nov 23, 2014
  • Critical max 9.3
    ICSA-14-051-01 1 CVE rev. 2

    ICONICS GENESIS32 Insecure ActiveX Control

    ICONICS
    first Nov 23, 2014
  • Critical
    ICSA-14-035-01 4 CVEs rev. 2

    Siemens SIMATIC WinCC OA Multiple Vulnerabilities

    Siemens
    first Nov 7, 2014
  • Critical
    ICSA-11-167-01 1 CVE rev. 2

    Sunway Force Control

    Sunway ForceControl Technology
    first Mar 19, 2011
  • Critical
    ICSA-11-131-01 1 CVE rev. 2

    ICONICS GENESIS32 and BizViz ActiveX Stack Overflow

    ICONICS
    first Feb 11, 2011
  • Critical
    ICSA-11-119-01 1 CVE rev. 2

    7-Technologies IGSS ODBC Remote Stack Overflow

    7T
    first Jan 30, 2011
  • Critical
    ICSA-11-094-01 1 CVE rev. 2

    Wonderware InBatch Client ActiveX Buffer Overflow

    Invensys
    first Jan 5, 2011
  • Critical
    ICSA-11-082-01 1 CVE rev. 2

    Ecava IntegraXor SQL

    Ecava
    first Dec 24, 2011
  • Critical
    ICSA-11-074-01 1 CVE rev. 2

    WellinTech KingView 6.53 KVWebSvr ActiveX

    WellinTech
    first Dec 16, 2011
  • Critical
    ICSA-11-018-02 1 CVE rev. 2

    7-Technologies IGSS 8 ODBC Server Remote Heap Corruption

    7-Technologies
    first Oct 21, 2011