Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

1,944 results · Clear filters · Feed

  • High
    ICSA-12-146-01A 1 CVE rev. 2

    RuggedCom Weak Cryptography for Password Vulnerability

    Siemens
    first Feb 26, 2012
  • High
    ICSA-12-138-01 5 CVEs rev. 2

    Emerson DeltaV Multiple Vulnerabilities

    Emerson
    first Feb 18, 2012
  • High
    ICSA-12-062-01 3 CVEs rev. 2

    Wonderware Information Server Multiple Vulnerabilities

    Invensys
    first Dec 4, 2012
  • High max 8.4
    ICSA-25-168-02 3 CVEs

    LS Electric GMWin 4

    Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.

    LS Electric
  • High max 7.8
    ICSA-25-168-04 3 CVEs

    Fuji Electric Smart Editor

    Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.

    Fuji Electric
  • High
    ICSA-13-352-01 2 CVEs rev. 2

    NovaTech Orion DNP3 Improper Input Validation Vulnerability

    NovaTech
    first Sep 20, 2013
  • High
    ICSA-13-219-01 2 CVEs rev. 2

    Schweitzer Engineering Laboratories Improper Input Validation

    SEL
    first May 10, 2013
  • High max 7.1
    ICSA-25-162-07 2 CVEs

    AVEVA PI Data Archive

    Successful exploitation of these vulnerabilities could shut down necessary subsystems and cause a denial-of-service condition.

    AVEVA
  • High max 8.7
    ICSA-25-140-11 1 CVE rev. 2

    Assured Telematics Inc (ATI) Fleet Management System (Update A)

    Successful exploitation of this vulnerability could result in an attacker collecting sensitive file system information or obtain administrative credentials.

    Assured Telematics
    first May 20, 2025
  • High max 8.8
    ICSMA-25-160-01 1 CVE

    MicroDicom DICOM Viewer

    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer.

    MicroDicom
  • High max 8.6
    ICSA-25-160-01 2 CVEs

    SinoTrack GPS Receiver

    Successful exploitation of these vulnerabilities could allow an attacker to access device profiles for which they are not authorized through the common web management interface. Access to the device profile may allow an attacker to perform some remote functio…

    SinoTrack
  • High max 7.1
    ICSA-20-105-06 1 CVE rev. 5

    Siemens SIMOTICS, Desigo, APOGEE, and TALON

    SIMOTICS CONNECT 400, Desigo (Power PC-based), APOGEE MEC/MBC/PXC and TALON TC products are affected by a DHCP Client vulnerability as initially reported in SSA-434032 for the Mentor Nucleus Networking Module. Siemens has released updates for several affected…

    Siemens
    first Apr 14, 2020
  • High max 7.5
    ICSA-24-284-12 1 CVE rev. 3

    Siemens Sentron Powercenter 1000

    A vulnerability in SIRIUS 3RV2921-5M could allow an attacker to cause a denial of service condition. Siemens has released a new version for SIRIUS 3RV2921-5M and recommends to update to the latest version.

    Siemens
    first Oct 8, 2024
  • High max 7.4
    ICSA-25-044-07 1 CVE rev. 4

    Siemens Teamcenter

    The SSO login service in Teamcenter contains an open redirect vulnerability that could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data. Siemens has released new versions for the affected products and rec…

    Siemens
    first Feb 11, 2025
  • High max 7.8
    ICSA-25-162-01 1 CVE

    Siemens Tecnomatix Plant Simulation

    Siemens Tecnomatix Plant Simulation contains a out-of-bound read vulnerability that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the applica…

    Siemens
  • High
    ICSA-11-277-01 1 CVE rev. 2

    Schneider Electric UnitelWay Buffer Overflow

    Schneider Electric
    first Jul 7, 2011
  • High
    ICSA-14-189-01 1 CVE rev. 2

    Yokogawa Centum Buffer Overflow Vulnerability

    Yokogawa
    first Apr 10, 2014
  • High
    ICSA-14-175-01 2 CVEs rev. 2

    Honeywell FALCON XLWeb Controllers Vulnerabilities

    Honeywell
    first Mar 27, 2014
  • High max 7.1
    ICSA-14-154-01 2 CVEs rev. 2

    COPA-DATA Improper Input Validation

    COPA-DATA
    first Mar 6, 2014
  • High max 7.8
    ICSA-14-149-02 3 CVEs rev. 2

    Cogent DataHub Vulnerabilities

    Cogent Real-Time Systems
    first Mar 1, 2014
  • High max 7.5
    ICSA-14-135-01 1 CVE rev. 2

    CSWorks Software SQL Injection Vulnerability

    CSWorks
    first Feb 15, 2014
  • High max 7.0
    ICSA-14-121-01 2 CVEs rev. 2

    AMTELCO miSecure Vulnerabilities

    AMTELCO
    first Feb 1, 2014
  • High max 8.3
    ICSA-14-100-01 1 CVE rev. 2

    IOServer Out of Bounds Read Vulnerability

    IOServer
    first Jan 11, 2014
  • High
    ICSA-14-098-01 2 CVEs rev. 2

    OSIsoft PI Interface for DNP3 Improper Input Validation

    OSIsoft
    first Jan 9, 2014
  • High max 7.5
    ICSA-14-091-01 1 CVE rev. 2

    Ecava IntegraXor Guest Account Information Disclosure Vulnerability

    Ecava
    first Jan 2, 2014
  • High max 7.5
    ICSA-14-079-03 10 CVEs rev. 2

    Advantech WebAccess Vulnerabilities

    Advantech
    first Dec 21, 2014
  • High
    ICSA-14-079-02 6 CVEs rev. 2

    Siemens SIMATIC S7-1200 Vulnerabilities

    Siemens
    first Dec 21, 2014
  • High
    ICSA-14-079-01 2 CVEs rev. 2

    Siemens SIMATIC S7-1200 Improper Input Validation Vulnerabilities

    Siemens
    first Dec 21, 2014
  • High
    ICSA-14-073-01 9 CVEs rev. 2

    Siemens SIMATIC S7-1500 CPU Firmware Vulnerabilities

    Siemens
    first Dec 15, 2014
  • High
    ICSA-14-051-04 1 CVE rev. 2

    NTP Reflection Attack

    NTP Project
    first Nov 23, 2014
  • High max 7.1
    ICSA-14-030-01 1 CVE rev. 2

    3S CoDeSys Runtime Toolkit NULL Pointer Dereference

    3S
    first Nov 2, 2014
  • High max 7.5
    ICSA-14-023-01 1 CVE rev. 2

    GE Proficy Vulnerabilities

    GE
    first Oct 26, 2014
  • High
    ICSA-11-175-01 1 CVE rev. 2

    Rockwell FactoryTalk Diag Viewer Memory Corruption

    Rockwell Automation
    first Mar 27, 2011
  • High
    ICSA-11-069-01B 1 CVE rev. 2

    Samsung Data Management Server (Update B)

    Samsung
    first Dec 11, 2011
  • High
    ICSA-11-017-02 1 CVE rev. 2

    Sielco Sistemi WinLog Stack Overflow

    Sielco
    first Oct 20, 2011
  • High
    ICSA-16-273-01 2 CVEs rev. 2

    American Auto-Matrix Front-End Solutions Vulnerabilities

    American Auto-Matrix
    first Jul 3, 2016
  • High
    ICSA-16-264-01 1 CVE rev. 2

    Moxa Active OPC Server Unquoted Service Path Escalation Vulnerability

    Moxa
    first Jun 24, 2016
  • High
    ICSA-16-259-02 1 CVE rev. 2

    ABB DataManagerPro Credential Management Vulnerability

    ABB
    first Jun 19, 2016
  • High
    ICSA-16-259-01 1 CVE rev. 2

    Yokogawa STARDOM Authentication Bypass Vulnerability

    Yokogawa
    first Jun 19, 2016
  • High
    ICSA-16-224-02A 1 CVE rev. 2

    Rockwell Automation RSLogix 500 and RSLogix Micro File Parser Buffer Overflow Vulnerability (Update A)

    Rockwell Automation
    first May 15, 2016