Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

1,944 results · Clear filters · Feed

  • High
    ICSA-13-234-02 1 CVE rev. 2

    Top Server OPC Improper Input Validation Vulnerability

    Software Toolbox
    first May 25, 2013
  • High
    ICSA-13-234-01 1 CVE rev. 2

    Schneider Electric Trio J-Series Radio Encryption

    Schneider Electric
    first May 25, 2013
  • High
    ICSA-13-233-01 1 CVE rev. 2

    Siemens COMOS Privilege Escalation Vulnerability

    Siemens
    first May 24, 2013
  • High
    ICSA-13-226-01 1 CVE rev. 2

    Kepware Technologies Improper Input Validation Vulnerability

    Kepware
    first May 17, 2013
  • High
    ICSA-13-225-02 2 CVEs rev. 2

    OSIsoft Multiple Vulnerabilities

    OSIsoft
    first May 16, 2013
  • High
    ICSA-13-217-01 1 CVE rev. 2

    MOXA Weak Entropy in DSA Keys Vulnerability

    Moxa
    first May 8, 2013
  • High
    ICSA-13-213-04A 1 CVE rev. 2

    MatrikonOPC SCADA DNP3 Master Station Improper Input Validation

    MatrikonOPC
    first May 4, 2013
  • High
    ICSA-13-213-03 1 CVE rev. 2

    IOServer Master Station Improper Input Validation

    IOServer
    first May 4, 2013
  • High
    ICSA-13-189-02 1 CVE rev. 2

    Triangle Research Nano 10 PLC Denial of Service

    Triangle Research International, Inc.’s (Tri Inc.)
    first Apr 10, 2013
  • High
    ICSA-15-246-03 1 CVE rev. 2

    Moxa Industrial Managed Switch Vulnerabilities

    Moxa
    first Jun 6, 2015
  • High
    ICSA-15-239-03 1 CVE rev. 2

    Innominate mGuard VPN Vulnerability

    Innominate
    first May 30, 2015
  • High
    ICSA-15-246-01 1 CVE rev. 2

    Cogent DataHub Code Injection Vulnerability

    Cogent
    first Jun 6, 2015
  • High
    ICSA-13-169-02 3 CVEs rev. 2

    Siemens WinCC 7.2 Multiple Vulnerabilities

    Siemens
    first Mar 21, 2013
  • High
    ICSA-13-169-01 2 CVEs rev. 2

    Siemens Scalance X200 IRT Multiple Vulnerabilities

    Siemens
    first Mar 21, 2013
  • High
    ICSA-13-170-01 1 CVE rev. 2

    GE Proficy HMI/SCADA CIMPLICITY WebView Improper Input Validation

    GE
    first Mar 22, 2013
  • High
    ICSA-13-161-01 1 CVE rev. 2

    IOServer DNP3 Improper Input Validation

    IOServer
    first Mar 13, 2013
  • High
    ICSA-13-189-01 2 CVEs rev. 2

    QNX Multiple Vulnerabilities

    QNX
    first Apr 10, 2013
  • High
    ICSA-13-067-01 1 CVE rev. 2

    InduSoft Advantech Studio Directory Traversal

    InduSoft
    first Dec 10, 2013
  • High
    ICSA-13-095-01 4 CVEs rev. 2

    Cogent Real-Time Systems Vulnerabilities

    Cogent Real-Time Systems
    first Jan 7, 2013
  • High
    ICSA-13-045-01 1 CVE rev. 2

    Tridium NiagaraAX Directory Traversal Vulnerability

    Tridium
    first Nov 18, 2013
  • High
    ICSA-13-095-02A 7 CVEs rev. 2

    Rockwell Automation FactoryTalk and RSLinx Vulnerabilities

    Rockwell Automation
    first Jan 7, 2013
  • High
    ICSA-13-042-01 2 CVEs rev. 2

    MOXA EDR-G903 Series Multiple Vulnerabilities

    Moxa
    first Nov 15, 2013
  • High
    ICSA-12-341-01 1 CVE rev. 2

    GE Proficy HMI/SCADA Cimplicity Integer Overflow

    GE
    first Sep 9, 2012
  • High max 7.5
    ICSA-12-362-01 1 CVE rev. 2

    I-GEN opLYNX Central Authentication Bypass

    i-GEN Solutions
    first Sep 30, 2012
  • High max 7.6
    ICSA-12-335-01 1 CVE rev. 2

    Post Oak Bluetooth Traffic Systems Insufficient Entropy Vulnerability

    Post Oak Traffic Systems
    first Sep 3, 2012
  • High
    ICSA-13-098-01 1 CVE rev. 2

    Canary Labs Inc Trend Link Insecure ActiveX Control Method

    Canary Labs
    first Jan 10, 2013
  • High
    ICSA-12-320-01 1 CVE rev. 2

    ABB AC500 PLC Webserver CoDeSys Vulnerability

    ABB
    first Aug 19, 2012
  • High
    ICSA-15-064-03 1 CVE rev. 2

    Siemens SPC Controller Series Denial-of-Service Vulnerability

    Siemens
    first Dec 6, 2015
  • High
    ICSA-16-357-01 1 CVE rev. 2

    Fidelix FX-20 Series Controllers Path Traversal Vulnerability

    Fidelix
    first Sep 25, 2016
  • High
    ICSA-16-350-02 2 CVEs rev. 2

    OmniMetrix OmniView Vulnerabilities

    OmniMetrix
    first Sep 18, 2016
  • High
    ICSA-16-350-01 1 CVE rev. 2

    FATEK Automation PLC WinProladder Stack-Based Buffer Overflow Vulnerability

    FATEK Automation
    first Sep 18, 2016
  • High
    ICSA-16-348-03 2 CVEs rev. 2

    Delta Electronics WPLSoft, ISPSoft, and PMSoft Vulnerabilities

    Delta Electronics
    first Sep 16, 2016
  • High
    ICSA-16-348-02 2 CVEs rev. 2

    Moxa DACenter Vulnerabilities

    Moxa
    first Sep 16, 2016
  • High
    ICSA-16-343-02 1 CVE rev. 2

    Sauter NovaWeb Web HMI Authentication Bypass Vulnerability

    Sauter
    first Sep 11, 2016
  • High
    ICSA-16-336-03 2 CVEs rev. 2

    Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module Vulnerabilities

    Mitsubishi Electric
    first Sep 4, 2016
  • High
    ICSA-16-334-01 1 CVE rev. 2

    Emerson Liebert SiteScan XML External Entity Vulnerability

    Emerson
    first Sep 2, 2016
  • High
    ICSA-16-315-01B 1 CVE rev. 2

    CA Unified Infrastructure Management Directory Traversal Vulnerability (Update B)

    CA Technologies
    first Aug 14, 2016
  • High
    ICSA-16-313-03 1 CVE rev. 2

    OSIsoft PI System Incomplete Model of Endpoint Features Vulnerability

    OSIsoft
    first Aug 12, 2016
  • High
    ICSA-16-313-01 2 CVEs rev. 2

    Phoenix Contact ILC PLC Authentication Vulnerabilities

    Phoenix Contact
    first Aug 12, 2016
  • High
    ICSA-16-308-02B 2 CVEs rev. 2

    Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)

    Schneider Electric
    first Aug 7, 2016