Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

1,944 results · Clear filters · Feed

  • High max 7.4
    VA-25-219-01 1 CVE

    Tyler Technologies ERP Pro 9

    Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands.

    Tyler Technologies
  • High max 7.8
    ICSA-24-338-06 5 CVEs rev. 2

    Fuji Electric Tellus Lite V-Simulator (Update A)

    Successful exploitation of these vulnerabilities could crash the device being accessed.

    Fuji Electric
    first Dec 3, 2024
  • High max 7.8
    ICSA-25-210-01 2 CVEs

    National Instruments LabVIEW

    Successful exploitation of these vulnerabilities could lead to the execution of arbitrary code on affected installations of LabVIEW, which could result in invalid memory reads.

    National Instruments
  • High max 8.0
    ICSA-25-210-02 6 CVEs

    Samsung HVAC DMS

    Successful exploitation of these vulnerabilities can lead to unauthenticated remote code execution.

    Samsung
  • High max 7.8
    ICSA-25-210-03 1 CVE

    Delta Electronics DTN Soft

    Successful exploitation of this vulnerability could allow an attacker to use a specially crafted project file to execute arbitrary code.

    Delta Electronics
  • High max 7.5
    ICSA-25-273-03 1 CVE rev. 4

    Festo CPX-CEC-C1 and CPX-CMXX

    Unauthenticated access to critical webpage functions (e.g. reboot) may cause a denial of service of the device.

    Festo
    first Sep 20, 2022
  • High max 8.3
    ICSA-25-205-04 1 CVE

    LG Innotek Camera Model LNV5110R

    Successful exploitation of this vulnerability could allow an attacker to gain administrative access to the device.

    LG Innotek
  • High max 8.1
    ICSA-25-203-01 3 CVEs

    DuraComm DP-10iN-100-MU

    Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or cause a denial-of-service condition.

    DuraComm
  • High max 8.0
    ICSA-25-203-02 1 CVE

    Lantronix Provisioning Manager

    Successful exploitation of this vulnerability could allow an attacker perform a cross-site scripting attack, which could result in remote code execution.

    LANTRONIX
  • High max 7.8
    ICSA-24-151-02 3 CVEs rev. 3

    Fuji Electric Monitouch V-SFT (Update A)

    Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.

    Fuji Electric
    first May 30, 2024
  • High max 7.8
    ICSA-24-191-05 1 CVE rev. 3

    Johnson Controls Inc. Software House C●CURE 9000 (Update B)

    Successful exploitation of this vulnerability may allow an attacker to access credentials used for access to the application.

    Johnson Controls
    first Jul 9, 2024
  • High max 7.8
    ICSMA-25-198-01 1 CVE

    Panoramic Corporation Digital Imaging Software

    Successful exploitation of this vulnerability could allow a standard user to obtain NT Authority/SYSTEM privileges.

    Panoramic
  • High max 8.7
    ICSA-25-196-03 1 CVE

    LITEON IC48A and IC80A EV Chargers

    Successful exploitation of this vulnerability could allow an attacker to access sensitive information when accessing the Liteon EV chargers.

    LITEON
  • High max 7.2
    ICSA-25-135-19 3 CVEs rev. 2

    ECOVACS DEEBOT Vacuum and Base Station (Update A)

    Successful exploitation of these vulnerabilities could allow an attacker to send malicious updates to the devices or execute code.

    ECOVACS
    first May 15, 2025
  • High max 7.8
    ICSA-25-191-07 1 CVE

    Delta Electronics DTM Soft

    Successful exploitation of this vulnerability could allow an attacker to encrypt files referencing the application in order to extract information.

    Delta Electronics
  • High max 8.8
    ICSA-25-191-08 10 CVEs

    Advantech iView

    Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, achieve remote code execution, or cause service disruptions.

    Advantech
  • High max 7.8
    ICSA-25-014-02 1 CVE rev. 2

    Schneider Electric Vijeo Designer and EcoStruxureâ„¢ Machine Expert (Update A)

    Schneider Electric is aware of a vulnerability in its Vijeo Designer product. The Vijeo Designer https://www.se.com/ww/en/product-range/1054-vijeo-designer-hmi-software/ product is HMI Configuration Software compatible with Harmony and Magelis HMI. Vijeo Desi…

    Schneider Electric
    first Sep 10, 2024
  • High max 7.2
    ICSA-25-175-04 4 CVEs rev. 2

    Schneider Electric EVLink WallBox (Update A)

    Schneider Electric is aware of multiple vulnerabilities in its EVLink WallBox product. The EVLink WallBox https://www.se.com/ww/en/product-range/62395-evlink-wallbox/%23products is a charging station for electric vehicles at home or on private property, suita…

    Schneider Electric
    first Jun 10, 2025
  • High max 7.5
    ICSA-20-105-08 1 CVE rev. 16

    Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D)

    A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which c…

    Siemens
    first Apr 14, 2020
  • High max 8.1
    ICSA-24-256-15 1 CVE rev. 2

    Siemens Industrial Products

    An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high imp…

    Siemens
    first Sep 10, 2024
  • High max 7.8
    ICSA-25-191-02 3 CVEs

    Siemens Solid Edge

    Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or CFG format. This could allow an attacker to crash the application or execute arbitrary…

    Siemens
  • High max 7.8
    ICSA-25-191-03 2 CVEs

    Siemens TIA Administrator

    Siemens TIA Administrator before V3.0.6 contains multiple vulnerabilities which could allow an attacker to escalate privilege or exceute arbitrary code during installations. Siemens has released a new version for TIA Administrator and recommends to update to …

    Siemens
  • High max 7.3
    ICSA-25-184-02 5 CVEs

    Hitachi Energy MicroSCADA X SYS600

    Successful exploitation of these vulnerabilities could allow an attacker to tamper with the system file, overwrite files, create a denial-of-service condition, or leak file content.

    Hitachi Energy
  • High max 7.6
    ICSA-25-177-02 2 CVEs

    TrendMakers Sight Bulb Pro

    Successful exploitation of these vulnerabilities could allow an attacker to capture sensitive information and execute arbitrary shell commands on the target device as root if connected to the local network segment.

    TrendMakers
  • High
    ICSA-15-202-01 1 CVE rev. 2

    Siemens SIPROTEC Denial-of-Service Vulnerability

    Siemens
    first Apr 23, 2015
  • High
    ICSA-13-254-01 1 CVE rev. 2

    Siemens SCALANCE X-200 Web Hijack Vulnerability

    Siemens
    first Jun 14, 2013
  • High
    ICSA-11-122-01 1 CVE rev. 2

    AzeoTech DAQFactory Networking Vulnerabilities

    AzeoTech
    first Feb 2, 2011
  • High
    ICSA-16-231-01-0 1 CVE rev. 2

    Locus Energy LGate Command Injection Vulnerability

    Locus Energy
    first May 22, 2016
  • High
    ICSA-16-231-01 1 CVE rev. 2

    Navis WebAccess SQL Injection Vulnerability

    Navis
    first May 22, 2016
  • High max 7.5
    ICSA-19-029-02 1 CVE rev. 3

    Mitsubishi Electric MELSEC-Q Series PLCs

    Successful exploitation of this vulnerability could allow a remote attacker to send specially crafted packets to the device via Ethernet, causing Ethernet and USB communication to stop.

    Mitsubishi Electric
    first Jan 29, 2019
  • High max 7.3
    ICSA-25-175-02 4 CVEs

    Delta Electronics CNCSoft

    Successful exploitation of these vulnerabilities could allow an attacker to execute code within the context of the current process.

    Delta Electronics
  • High max 8.8
    ICSA-25-175-06 1 CVE

    Parsons AccuWeather widget

    Successful exploitation of this vulnerability could allow an attacker to insert a malicious link that users might access through the RSS feed.

    Parsons
  • High
    ICSA-12-258-01 1 CVE rev. 2

    IOServer OPC Server Multiple Vulnerabilities

    IOServer
    first Jun 18, 2012
  • High
    ICSA-13-022-02 2 CVEs rev. 2

    GE Intelligent Platforms Proficy Cimplicity Multiple Vulnerabilities

    GE
    first Oct 26, 2013
  • High
    ICSA-12-342-01B 1 CVE rev. 2

    Rockwell Allen-Bradley MicroLogix, SLC 500, and PLC-5 Fault Generation Vulnerability

    Rockwell Automation
    first Sep 10, 2012
  • High
    ICSA-12-249-03 1 CVE rev. 2

    InduSoft ISSymbol ActiveX Control Buffer Overflow

    InduSoft
    first Jun 9, 2012
  • High
    ICSA-15-146-01 1 CVE rev. 2

    Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service

    Mitsubishi Electric
    first Feb 26, 2015
  • High
    ICSA-15-169-02 1 CVE rev. 2

    Schneider Electric Wonderware System Platform Vulnerabilities

    Schneider Electric
    first Mar 21, 2015
  • High
    ICSA-10-322-02A 1 CVE rev. 2

    Automated Solutions OPC Vulnerability

    Automated Solutions
    first Aug 21, 2010
  • High
    ICSA-12-150-01 1 CVE rev. 2

    Honeywell HMIWeb Browser Buffer Overflow Vulnerability

    Honeywell
    first Mar 2, 2012