Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

1,944 results · Clear filters · Feed

  • High

    Eaton HMiSoft VU3

    Successful exploitation of these vulnerabilities could crash the device being accessed and may allow remote code execution or information disclosure.

  • High

    Triangle MicroWorks DNP3 Outstation Libraries

    Successful exploitation of this vulnerability could possibly allow remote attackers to stop the execution of code on affected equipment.

  • High

    Rockwell Automation RSLinx Classic

    Successful exploitation of this vulnerability could allow a local authenticated attacker to execute malicious code when opening RSLinx Classic.

  • High

    Fuji Electric V-Server Lite

    Successful exploitation of this vulnerability could allow a remote attacker to gain elevated privileges for remote code execution.

  • High max 7.5

    B&R Automation Studio

    Successful exploitation of these vulnerabilities could allow an attacker to delete arbitrary files from this system, fetch arbitrary files, or perform arbitrary write operations.

  • High max 7.5
    ICSA-20-016-01 3 CVEs rev. 2

    Schneider Electric Modicon Controllers (Update A)

    Successful exploitation of this vulnerability could result in a denial-of-service condition.

    first Jan 16, 2020
  • High

    Advantech WebAccess

    Successful exploitation of this vulnerability may allow remote code execution.

  • High

    Schneider Electric IGSS SCADA Software

    Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive data and functions.

  • High max 7.3

    Insulet Omnipod

    Successful exploitation of this vulnerability may allow an attacker to gain access to the affected products to intercept, modify, or interfere with the wireless RF (radio frequency) communications to or from the product. This may allow attackers to read sensi…

  • High

    Delta Electronics Industrial Automation CNCSoft ScreenEditor

    Successful exploitation of these vulnerabilities could cause buffer overflow conditions that may allow information disclosure, remote code execution, or crash the application.

  • High max 7.6
    ICSA-20-072-01 13 CVEs

    ICSA-20-072-01_ABB eSOMS

    ABB reported these vulnerabilities to CISA.

    ABB
  • High max 7.1

    ABB Asset Suite

    Successful exploitation of this vulnerability could allow an attacker access to unauthorized information in the application by direct resource access.

    ABB
  • High
    ICSA-20-042-11 1 CVE rev. 2

    Siemens SIMATIC S7-1500 (Update A)

    first Feb 11, 2020
  • High max 7.5

    Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet (Update A)

  • High max 7.5

    Johnson Controls Metasys

    Successful exploitation of this vulnerability can allow a denial-of-service attack or disclosure of sensitive data.

  • High

    Emerson ValveLink

    Successful exploitation of this vulnerability could allow arbitrary code execution.

  • High max 7.5

    Omron PLC CJ Series

    Successful exploitation of this vulnerability could cause a denial-of-service condition.

  • High

    Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility

    Successful exploitation of these vulnerabilities could crash the device or allow access to sensitive information.

  • High

    Honeywell WIN-PAK

    Successful exploitation of these vulnerabilities allows an attacker to perform remote code execution.

  • High

    Emerson OpenEnterprise

    Successful exploitation of this vulnerability could allow an attacker to execute code on an OpenEnterprise SCADA Server.

  • High

    Schneider Electric Modicon Ethernet Serial RTU

    Successful exploitation of these vulnerabilities could allow remote code execution or cause a denial-of-service condition.

  • High max 6.5

    Schneider Electric Magelis HMI Panels

    Successful exploitation of this vulnerability could allow a denial-of-service condition.

  • High

    Siemens SIPROTEC 4 and SIPROTEC Compact

  • High

    Digi ConnectPort LTS 32 MEI

    Successful exploitation of these vulnerabilities could limit system availability.

  • High max 7.5
    ICSA-18-128-01 2 CVEs rev. 2

    Siemens Medium Voltage SINAMICS Products (Update A)

    first May 3, 2018
  • High
    ICSA-18-137-03 1 CVE rev. 3

    Siemens SIMATIC S7-400 CPU (Update A)

    first May 15, 2018
  • High
    ICSA-18-254-05 1 CVE rev. 2

    Siemens SCALANCE X Switches

    first Sep 11, 2018
  • High
    ICSA-18-282-04 1 CVE rev. 2

    Siemens SIMATIC S7-1200 CPU Family Version 4

    first Oct 9, 2018
  • High
    ICSA-18-317-08 2 CVEs rev. 2

    Siemens SIMATIC Panels

    first Nov 13, 2018
  • High
    ICSA-19-036-04 2 CVEs rev. 2

    Siemens SIMATIC S7-1500 CPU

    first Jan 8, 2019
  • High max 7.5
    ICSA-19-043-04 1 CVE rev. 2

    Siemens SIMATIC S7-300 CPU

    first Jan 8, 2019
  • High max 7.5
    ICSA-19-099-01 1 CVE rev. 2

    Siemens SIMOCODE pro V EIP

    first Apr 9, 2019
  • High
    ICSA-19-162-03 2 CVEs rev. 2

    Siemens LOGO!8 Devices

    first Jun 11, 2019
  • High max 7.1
    ICSMA-18-058-01 3 CVEs rev. 4

    Medtronic 2090 Carelink Programmer Vulnerabilities (Update C)

    Successful exploitation of these vulnerabilities may allow an attacker with physical access to a 2090 Programmer to obtain per-product credentials to the software deployment network. These credentials grant access to the software deployment network, but acces…

    first Feb 27, 2018
  • High
    ICSA-19-281-03 1 CVE rev. 2

    Siemens SIMATIC WinAC RTX (F) 2010 (Update A)

    first Oct 8, 2019
  • High
    ICSA-19-344-07 3 CVEs rev. 2

    Siemens EN100 Ethernet Module (Update A)

    first Dec 10, 2019
  • High

    GE PACSystems RX3i

    Successful exploitation of this vulnerability could cause the system to change to halt-mode, resulting in a denial-of-service condition.

  • High

    OSIsoft PI Vision

    Successful exploitation of these vulnerabilities may allow disclosure of sensitive information and limit the availability of the system.

  • High
    ICSA-19-290-01 1 CVE rev. 2

    AVEVA Vijeo Citect and Citect SCADA (Update A)

    The IEC870IP driver for AVEVA 's Vijeo Citect and Citect SCADA and Schneider Electric 's Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.

    first Oct 17, 2019
  • High
    ICSA-19-318-04 1 CVE rev. 2

    Omron CX-Supervisor (Update A)

    Successful exploitation of this vulnerability could result in information disclosure, total compromise of the system, and system unavailability.

    first Nov 14, 2019