Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

1,185 results · Clear filters · Feed

  • Critical
    ICSA-11-017-01 1 CVE rev. 2

    WellinTech Kingview 6.53 Remote Heap Overflow

    WellinTech
    first Oct 20, 2011
  • Critical max 9.1
    ICSA-16-278-02 2 CVEs rev. 2

    Beckhoff Embedded PC Images and TwinCAT Components Vulnerabilities

    Beckhoff
    first Jul 8, 2016
  • Critical
    ICSA-16-278-01 1 CVE rev. 2

    INDAS Web SCADA Path Traversal Vulnerability

    INDAS
    first Jul 8, 2016
  • Critical
    ICSA-16-252-01 1 CVE rev. 2

    GE Bently Nevada 3500/22M Improper Authorization Vulnerability

    GE
    first Jun 12, 2016
  • Critical
    ICSA-16-236-01A 3 CVEs rev. 2

    Moxa OnCell Vulnerabilities (Update A)

    Moxa
    first May 27, 2016
  • Critical
    ICSA-16-215-01 1 CVE rev. 2

    Moxa SoftCMS SQL Injection Vulnerability

    Moxa
    first May 6, 2016
  • Critical
    ICSA-16-196-02 1 CVE rev. 2

    Moxa MGate Authentication Bypass Vulnerability

    Moxa
    first Apr 17, 2016
  • Critical
    ICSA-12-030-01A 12 CVEs rev. 2

    Siemens SIMATIC WinCC Vulnerabilities

    Siemens
    first Nov 2, 2012
  • Critical
    ICSA-12-024-01 2 CVEs rev. 2

    Ocean Data Systems Dream Reports XSS and Write Access Violation Vulnerabilities

    Ocean Data Systems
    first Oct 27, 2012
  • Critical
    ICSA-12-018-01B 1 CVE rev. 2

    Schneider Electric Quantum Ethernet Module Hard-Coded Credentials

    Schneider Electric
    first Oct 21, 2012
  • Critical
    ICSA-12-012-01A 2 CVEs rev. 2

    Open Automation Software OPC Systems.NET Vulnerability

    Open Automation Software
    first Oct 15, 2012
  • Critical
    ICSA-12-006-01 3 CVEs rev. 2

    3S CoDeSys Vulnerabilities

    3S-Smart Software Solutions
    first Oct 9, 2012
  • Critical
    ICSA-11-355-02 1 CVE rev. 2

    WellinTech KingView History Server Buffer Overflow

    WellinTech
    first Sep 23, 2011
  • Critical
    ICSA-11-353-01 1 CVE rev. 2

    7-Technologies Interactive Graphical SCADA

    7-Technologies
    first Sep 21, 2011
  • Critical
    ICSA-11-343-01 2 CVEs rev. 2

    Siemens FactoryLink Multiple ActiveX Vulnerabilities

    Siemens
    first Sep 11, 2011
  • Critical
    ICSA-16-026-02 1 CVE rev. 2

    Rockwell Automation MicroLogix 1100 PLC Overflow Vulnerability

    Rockwell Automation
    first Oct 29, 2016
  • Critical
    ICSA-16-014-01 15 CVEs rev. 2

    Advantech WebAccess Vulnerabilities

    Advantech
    first Oct 17, 2016
  • Critical
    ICSA-15-351-03 6 CVEs rev. 2

    eWON Vulnerabilities

    eWON
    first Sep 19, 2015
  • Critical
    ICSA-15-349-01 4 CVEs rev. 2

    Adcon Telemetry A840 Vulnerabilities

    Adcon Telemetry
    first Sep 17, 2015
  • Critical max 9.8
    ICSA-15-344-01B 4 CVEs 2 exploited rev. 2

    Advantech EKI Vulnerabilities (Update B)

    Advantech
    first Sep 12, 2015
  • Critical
    ICSA-15-342-02 1 CVE rev. 2

    LOYTEC Router Information Exposure Vulnerability

    Loytec
    first Sep 10, 2015
  • Critical
    ICSA-15-337-01 1 CVE rev. 2

    SearchBlox File Exfiltration Vulnerability

    SearchBlox
    first Sep 5, 2015
  • Critical
    ICSA-15-323-01 2 CVEs rev. 2

    Tibbo AggreGate Platform Vulnerabilities

    Tibbo Systems
    first Aug 22, 2015
  • Critical
    ICSA-15-309-02 2 CVEs rev. 2

    Honeywell Midas Gas Detector Vulnerabilities

    Honeywell
    first Aug 8, 2015
  • Critical max 9.8
    ICSA-15-300-03A 5 CVEs rev. 2

    Rockwell Automation Micrologix 1100 and 1400 PLC Systems Vulnerabilities (Update A)

    Rockwell Automation
    first Jul 30, 2015
  • Critical
    ICSA-15-293-02 3 CVEs rev. 2

    IniNet Solutions SCADA Web Server Vulnerabilities

    iniNet Solutions
    first Jul 23, 2015
  • Critical
    ICSA-15-274-02A 3 CVEs rev. 2

    Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A)

    Unitronics
    first Jul 4, 2015
  • Critical max 10.0
    ICSA-15-274-01 3 CVEs rev. 2

    Omron Multiple Product Vulnerabilities

    Omron
    first Jul 4, 2015
  • Critical
    ICSA-15-272-01 1 CVE rev. 2

    Honeywell Experion PKS Directory Traversal Vulnerability

    Honeywell
    first Jul 2, 2015
  • Critical
    ICSA-15-265-03 7 CVEs rev. 2

    Janitza UMG Power Quality Measuring Products Vulnerabilities

    Janitza
    first Jun 25, 2015
  • Critical
    ICSA-15-265-02 3 CVEs rev. 2

    IBC Solar ServeMaster Source Code Vulnerability

    IBC Solar
    first Jun 25, 2015
  • Critical
    ICSA-15-237-02 1 CVE rev. 2

    EasyIO-30P-SF Hard-Coded Credential Vulnerability

    EasyIO
    first May 28, 2015
  • Critical max 10.0
    ICSA-14-084-01 4 CVEs rev. 2

    Festo CECX-X-(C1/M1) Controller Vulnerabilities

    Festo
    first Dec 26, 2014
  • Critical
    ICSA-13-213-01 2 CVEs rev. 2

    Siemens Scalance W-7xx Product Family Multiple Vulnerabilities

    Siemens
    first May 4, 2013
  • Critical
    ICSA-13-142-01 1 CVE rev. 2

    3S CODESYS Gateway Use After Free

    3S-Smart Software Solutions
    first Feb 23, 2013
  • Critical
    ICSA-13-136-01 1 CVE rev. 2

    TURCK BL20 and BL67 Programmable Gateway Hard-Coded User Accounts

    TURCK
    first Feb 17, 2013
  • Critical
    ICSA-13-084-01 1 CVE rev. 2

    Siemens CP 1604 and CP 1616 Improper Access Control

    Siemens
    first Dec 27, 2013
  • Critical max 10.0
    ICSA-15-008-02 1 CVE rev. 2

    Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow Vulnerability

    Schneider Electric
    first Oct 11, 2015
  • Critical
    ICSA-14-352-01 5 CVEs rev. 2

    Honeywell Experion PKS Vulnerabilities

    Honeywell
    first Sep 20, 2014
  • Critical
    ICSA-14-350-02 2 CVEs rev. 2

    Johnson Controls Metasys Vulnerabilities

    Johnson Controls
    first Sep 18, 2014