Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

1,944 results · Clear filters · Feed

  • High
    ICSA-16-306-03 1 CVE rev. 2

    Schneider Electric Unity PRO Control Flow Management Vulnerability

    Schneider Electric
    first Aug 5, 2016
  • High
    ICSA-16-299-01 1 CVE rev. 2

    Siemens SICAM RTU Devices Denial-of-Service Vulnerability

    Siemens
    first Jul 29, 2016
  • High
    ICSA-16-294-01 1 CVE rev. 2

    Moxa EDR-810 Industrial Secure Router Privilege Escalation Vulnerability

    Moxa
    first Jul 24, 2016
  • High
    ICSA-16-287-06 3 CVEs rev. 2

    FATEK Automation Designer Memory Corruption Vulnerabilities

    FATEK Automation
    first Jul 17, 2016
  • High
    ICSA-12-283-01 1 CVE rev. 2

    Siemens S7-1200 Web Application Cross Site Scripting

    Siemens
    first Jul 13, 2012
  • High
    ICSA-12-249-01 1 CVE rev. 2

    Arbiter Systems Power Sentinel Denial-of-Service Vulnerability

    Arbiter Systems
    first Jun 9, 2012
  • High
    ICSA-12-212-02 1 CVE rev. 2

    Siemens SIMATIC S7-400 PN CPU DoS

    Siemens
    first May 3, 2012
  • High
    ICSA-12-243-01 1 CVE rev. 2

    GarrettCom - Use of Hard-Coded Password

    GarrettCom
    first Jun 3, 2012
  • High
    ICSA-12-227-01 1 CVE rev. 2

    Siemens COMOS Database Privilege Escalation Vulnerability

    Siemens
    first May 18, 2012
  • High
    ICSA-12-262-01 1 CVE rev. 2

    Fultek WinTr Directory Traversal

    Fultek
    first Jun 22, 2012
  • High
    ICSA-16-336-04 3 CVEs rev. 2

    Advantech SUSIAccess Server Vulnerabilities

    Advantech
    first Sep 4, 2016
  • High
    ICSA-12-271-01 4 CVEs rev. 2

    C3-ilex EOScada Multiple Vulnerabilities

    C3-ilex
    first Jul 1, 2012
  • High
    ICSA-16-021-01 1 CVE rev. 2

    CAREL PlantVisor Enhanced Authentication Bypass Vulnerability

    CAREL
    first Oct 24, 2016
  • High
    ICSA-12-234-01 3 CVEs rev. 2

    GE Intelligent Platforms Proficy Real-Time Information Portal Vulnerabilities

    GE
    first May 25, 2012
  • High
    ICSA-12-171-01 1 CVE rev. 2

    Wonderware SuiteLink Unallocated Unicode String Vulnerability

    Invensys
    first Mar 23, 2012
  • High
    ICSA-12-131-02 2 CVEs rev. 2

    GE Intelligent Platforms Proficy HTML Help Vulnerabilities

    GE
    first Feb 11, 2012
  • High
    ICSA-16-140-01A 2 CVEs rev. 2

    Resource Data Management Intuitive 650 TDB Controller Vulnerabilities (Update A)

    Resource Data Management
    first Feb 20, 2016
  • High
    ICSA-16-138-01A 1 CVE rev. 2

    IRZ RUH2 3G Firmware Overwrite Vulnerability (Update A)

    iRZ
    first Feb 18, 2016
  • High
    ICSA-16-105-03 8 CVEs rev. 2

    Ecava IntegraXor Vulnerabilities

    Ecava
    first Jan 16, 2016
  • High
    ICSA-16-105-02 2 CVEs rev. 2

    Accuenergy Acuvim II Series AXM-NET Module Vulnerabilities

    Accuenergy
    first Jan 16, 2016
  • High
    ICSA-16-103-01C 1 CVE rev. 2

    Siemens Industrial Products glibc Library Vulnerability (Update C)

    Siemens
    first Jan 14, 2016
  • High
    ICSA-16-084-01 1 CVE rev. 2

    Cogent DataHub Elevation of Privilege Vulnerability

    Cogent Real-Time Systems
    first Dec 26, 2016
  • High
    ICSA-16-077-01A 1 CVE rev. 2

    ABB Panel Builder 800 DLL Hijacking Vulnerability (Update A)

    ABB
    first Dec 19, 2016
  • High
    ICSA-16-070-02A 1 CVE rev. 2

    Honeywell Uniformance PHD Denial Of Service (Update A)

    Honeywell
    first Dec 12, 2016
  • High
    ICSA-16-061-03 2 CVEs rev. 2

    Eaton Lighting Systems EG2 Web Control Authentication Bypass Vulnerabilities

    Eaton
    first Dec 3, 2016
  • High
    ICSA-16-061-01 1 CVE rev. 2

    Schneider Electric Building Operation Automation Server Vulnerability

    Schneider Electric
    first Dec 3, 2016
  • High
    ICSA-16-040-02 2 CVEs rev. 2

    Siemens SIMATIC S7-1500 CPU Vulnerabilities

    Siemens
    first Nov 12, 2016
  • High
    ICSA-16-040-01 4 CVEs rev. 2

    Tollgrade SmartGrid Sensor Management System Software Vulnerabilities

    Tollgrade Communications
    first Nov 12, 2016
  • High
    ICSA-16-033-02 2 CVEs rev. 2

    GE SNMP/Web Interface Vulnerabilities

    GE
    first Nov 5, 2016
  • High max 7.5
    ICSA-21-049-02 2 CVEs rev. 9

    Mitsubishi Electric FA Engineering Software Products (Update H)

    Successful exploitation of these vulnerabilities may cause a denial-of-service condition.

    Mitsubishi Electric
    first Feb 18, 2021
  • High max 7.8
    ICSMA-25-148-01 1 CVE

    Santesoft Sante DICOM Viewer Pro

    Successful exploitation of this vulnerability could allow an attacker to disclose information or execute arbitrary code.

    Santesoft
  • High max 7.3
    VA-25-148-01 1 CVE

    ZKTeco BioTime multiple vulnerabilities

    ZKTeco BioTime is a web-based time and attendance management software. A default password vulnerability was found that allows an attacker to log in to any user account that does not change their password. Attackers utilizing this obtain user credentials and c…

    ZKTeco
  • High max 8.1
    ICSA-21-336-05 1 CVE rev. 3

    Hitachi Energy Relion 670/650/SAM600-IO

    Hitachi Energy is aware of a report from U.S. Department of Energy CyTRICS researcher of a vulnerability in the Relion 670/650/SAM600-IO series versions listed below. Recommended action for each affected version is listed in the Recommended Immediate Actions …

    Hitachi Energy
    first Nov 4, 2021
  • High max 6.3
    ICSA-25-146-01 1 CVE

    Johnson Controls iSTAR Configuration Utility (ICU) tool

    Successful exploitation of this vulnerability may allow an attacker to gain access to memory leaked from the ICU. This utility is only used to configure products that are no longer manufactured or supported. ICU is not used to configure the iSTAR Ultra and th…

    Johnson Controls
  • High max 7.8
    ICSA-25-140-02 5 CVEs

    National Instruments Circuit Design Suite

    Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.

    National Instruments
  • High max 7.8
    VA-25-119-01 2 CVEs rev. 2

    MSP360 Backup insecure filesystem permissions

    MSP360 Backup is a data backup and recovery solution. Insecure file system permission vulnerabilities in both the Windows and Linux versions allow a lower privileged user to execute commands the privileges of other users, including administrative users. An at…

    MSP360
    first Apr 29, 2025
  • High max 7.3
    ICSA-25-037-01 1 CVE rev. 3

    Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update B)

    Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) product. EcoStruxure™ Power Monitoring Expert (PME) https://www.se.com/us/en/product-range/65404-ecostruxure-power-monitoring-expert/#overview is an on-premises s…

    Schneider Electric
    first Oct 8, 2024
  • High max 8.1
    ICSA-21-194-10 1 CVE rev. 2

    Siemens RUGGEDCOM ROS

    The latest update for RUGGEDCOM ROS devices fixes a buffer overflow vulnerability in the third party component that could allow an attacker with network access to an affected device to cause a remote code execution condition. Siemens has released updates for …

    Siemens
    first Jul 13, 2021
  • High max 7.5
    ICSA-22-286-12 1 CVE rev. 4

    Siemens APOGEE, TALON and Desigo PXC/PXM Products

    A denial of service vulnerability has been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-313313: https://cert-portal.siemens.com/productcert/html/ssa-313313.html. The products listed below use af…

    Siemens
    first Oct 11, 2022
  • High max 8.6
    ICSA-24-256-06 1 CVE rev. 2

    Siemens Automation License Manager

    A vulnerability was identified in the Automation License Manager software that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial-of-service preventing legitimate users from using the syst…

    Siemens
    first Sep 10, 2024