Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

1,944 results · Clear filters · Feed

  • High
    ICSA-17-019-01A 2 CVEs rev. 2

    Schneider Electric homeLYnk Controller (Update A)

    ATTENTION: Remotely exploitable/low skill level to exploit

    Schneider Electric
    first Jan 19, 2017
  • High
    ICSA-17-103-01 2 CVEs

    Wecon Technologies LEVI Studio HMI Editor

    ATTENTION: Remotely exploitable/low skill level to exploit.

    WECON
  • High
    ICSA-17-089-01 3 CVEs

    Schneider Electric Wonderware InTouch Access Anywhere

    ATTENTION: Remotely Exploitable/low skill level to exploit

    Schneider Electric
  • High max 6.5
    ICSA-17-089-02 3 CVEs

    Schneider Electric Modicon PLCs

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Schneider Electric
  • High
    ICSA-17-087-01 5 CVEs

    Siemens RUGGEDCOM ROX I

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Siemens
  • High
    ICSMA-17-082-01 1 CVE

    ICSMA-17-082-01_BD Kiestra PerformA and KLA Journal Service Applications Hard-Coded Passwords Vulnerability

    Becton, Dickinson and Company (BD)
  • High
    ICSA-17-047-01 1 CVE rev. 2

    Rockwell Automation Connected Components Workbench

    Vendor: Rockwell Automation

    Rockwell Automation
    first Feb 16, 2017
  • High
    ICSA-17-047-02 1 CVE rev. 2

    Rockwell Automation FactoryTalk Activation

    REPOSTED INFORMATION

    Rockwell Automation
    first Feb 16, 2017
  • High
    ICSA-17-075-01 1 CVE

    LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

    ATTENTION: Low skill level to exploit.

    LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME
  • High
    ICSA-17-073-01 1 CVE

    FATEK Automation PLC Ethernet Module

    ATTENTION: Remotely exploitable. Low skill level to exploit.

    FATEK Automation
  • High
    ICSA-17-068-01 1 CVE

    Schneider Electric ClearSCADA

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Schneider Electric
  • High
    ICSA-17-061-01 1 CVE

    ICSA-17-061-01_Eaton xComfort Ethernet Communication Interface

    Maxim Rupp identified the vulnerability.

    Eaton
  • High
    ICSA-17-061-02 1 CVE

    Schneider Electric Conext ComBox

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Schneider Electric
  • High
    ICSA-17-061-03 1 CVE

    Siemens SINUMERIK Integrate and SINUMERIK Operate

    ATTENTION: Remotely exploitable.

    Siemens
  • High
    ICSA-17-059-01 2 CVEs

    Siemens RUGGEDCOM NMS

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Siemens
  • High
    ICSA-17-054-01 1 CVE

    VIPA Controls WinPLC7

    ATTENTION: Remotely exploitable/low skill level to exploit

    VIPA Controls
  • High
    ICSA-17-045-01 1 CVE

    Advantech WebAccess

    ATTENTION: Low skill level to exploit

    Advantech
  • High
    ICSA-17-040-01 2 CVEs

    Hanwha Techwin Smart Security Manager

    ATTENTION: Remotely exploitableVendor: Hanwha TechwinEquipment: Smart Security ManagerVulnerabilities: Remote Code Execution

    Hanwha Techwin
  • High
    ICSA-17-038-01 1 CVE

    ICSA-17-038-01_Sielco Sistemi Winlog SCADA Software

    Researcher Karn Ganeshen identified this vulnerability.

    Sielco Sistemi
  • High
    ICSMA-17-009-01A 1 CVE rev. 2

    ICSMA-17-009-01A_St. Jude Merlin@home Transmitter Vulnerability (Update A)

    St. Jude Medical
    first Jan 9, 2017
  • High
    ICSA-17-033-01 5 CVEs

    Honeywell XL Web II Controller Vulnerabilities

    Independent researcher Maxim Rupp has identified vulnerabilities in Honeywell 's XL Web II controller application. Honeywell has produced a new version to mitigate these vulnerabilities.

    Honeywell
  • High
    ICSA-17-031-02 1 CVE

    Ecava IntegraXor

    ATTENTION: Remotely Exploitable/low skill level to exploit

    Ecava
  • High
    ICSA-17-024-01 1 CVE

    Schneider Electric Wonderware Historian

    ATTENTION: Remotely exploitable/Low skill level to exploit

    Schneider Electric
  • High
    ICSA-17-012-02 1 CVE

    VideoInsight Web Client

    ATTENTION: Remotely exploitable/low skill level to exploit.

    VideoInsight