Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

901 results · Clear filters · Feed

  • Medium
    ICSA-19-043-05 3 CVEs rev. 2

    Siemens Intel Active Management Technology of SIMATIC IPCs

    Siemens
    first Feb 12, 2019
  • Medium
    ICSA-20-014-04 1 CVE

    Siemens SINAMICS PERFECT HARMONY GH180

    Siemens
  • Medium
    ICSMA-19-353-01 1 CVE

    Philips Veradius Unity, Pulsera, and Endura Dual WAN Routers

    Successful exploitation of this vulnerability could compromise the management interface of the front end router impacting the availability of data transfer via wireless communication.

    Philips
  • Medium
    ICSA-19-351-01 1 CVE

    GE S2020/S2020G Fast Switch 61850

    Successful exploitation of this vulnerability may allow an attacker to inject arbitrary code and allow disclosure of sensitive data.

    General Electric (GE)
  • Medium
    ICSMA-19-318-01 1 CVE rev. 2

    Philips IntelliBridge EC40/80 (Update A)

    Successful exploitation of this vulnerability may allow an attacker unauthorized access to the IntelliBridge EC40/80 hub and may allow access to execute software, modify system configuration, or view/update files, including unidentifiable patient data.

    Philips
    first Nov 14, 2019
  • Medium
    ICSA-19-346-03 1 CVE

    Omron PLC CJ, CS and NJ Series

    Successful exploitation of this vulnerability could allow an attacker to brute force login credentials, obtain unauthorized access of the system, and may allow an attacker unauthorized access to the FTP interface.

    Omron
  • Medium
    ICSA-19-344-01 1 CVE

    Siemens SCALANCE W700 and W1700

    Siemens
  • Medium
    ICSA-19-330-02 1 CVE

    ABB Relion 650 and 670 Series

    Successful exploitation of this vulnerability may allow an attacker to reboot the device, causing a denial of service.

    ABB
  • Medium
    ICSA-19-318-03 1 CVE

    Siemens Desigo PX Devices

    Siemens
  • Medium
    ICSMA-19-120-01 2 CVEs rev. 2

    Philips Tasy EMR (Update A)

    Successful exploitation of these vulnerabilities could impact or compromise patient confidentiality and system integrity. Philips ' analysis has shown these issues, if fully exploited, may allow an attacker of low skill to provide unexpected input into the ap…

    Philips
    first Apr 30, 2019
  • Medium max 4.8
    ICSMA-19-311-01 2 CVEs

    Medtronic Valleylab FT10 and LS10

    Successful exploitation of these vulnerabilities may allow an attacker to connect inauthentic instruments to the affected products by spoofing RFID security mechanisms. This may lead to a loss of performance integrity and platform availability due to incorrec…

    Medtronic
  • Medium
    ICSA-19-297-02 1 CVE

    Honeywell IP-AK2

    Successful exploitation of this vulnerability could allow an attacker to download configuration files directly through a URL without authentication, exposing configuration and authorized visitor information.

    Honeywell
  • Medium
    ICSMA-19-297-01 1 CVE

    Philips IntelliSpace Perinatal

    Successful exploitation of this vulnerability may allow an attacker unauthorized access to system resources, including access to execute software or to view/update files, directories, or system configuration. This could impact confidentiality and integrity of…

    Philips
  • Medium
    ICSA-17-129-01 1 CVE rev. 13

    ICSA-17-129-01 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update K)

    Siemens
    first May 8, 2017
  • Medium
    ICSA-19-281-02 2 CVEs

    GE Mark VIe Controller

    Successful exploitation of these vulnerabilities could allow an attacker to create read/write/execute commands within the Mark VIe control system.

    General Electric (GE)
  • Medium
    ICSA-19-281-04 1 CVE

    ICSA-19-281-04 Siemens SIMATIC IT UADM

    Siemens
  • Medium
    ICSA-19-260-03 1 CVE

    Honeywell Performance IP Cameras and Performance NVRs

    Successful exploitation of this vulnerability could allow an attacker to view device configuration information.

    Honeywell
  • Medium
    ICSA-19-255-04 1 CVE

    3S-Smart Software Solutions GmbH CODESYS Control V3 OPC UA Server

    Successful exploitation of this vulnerability could cause a denial-of-service condition.

    3S-Smart Software Solutions
  • Medium
    ICSMA-19-255-01 2 CVEs

    Philips IntelliVue WLAN

    Successful exploitation of these vulnerabilities may cause corruption of the IntelliVue WLAN firmware and impact to the data flow over the WLAN Version A and WLAN Version B wireless modules. This would lead to an inoperative condition alert at the device and …

    Philips
  • Medium
    ICSA-19-232-01 1 CVE

    Zebra Industrial Printers

    Successful exploitation of this vulnerability could allow a remote attacker to send specially crafted packets to a port on the printer, resulting in the retrieval of a front control panel passcode.

    Zebra
  • Medium max 6.8
    ICSA-19-227-01 2 CVEs

    Johnson Controls Metasys

    Successful exploitation of these vulnerabilities could be leveraged by an attacker to decrypt captured network traffic.

    Johnson Controls
  • Medium
    ICSA-19-190-04 1 CVE rev. 2

    ICSA-19-190-04 Siemens Spectrum Power (Update A)

    Siemens
    first Jul 9, 2019
  • Medium
    ICSA-19-213-02 1 CVE

    Fuji Electric FRENIC Loader

    Successful exploitation of this vulnerability could allow information disclosure.

    Fuji Electric
  • Medium
    ICSMA-19-190-01 1 CVE rev. 2

    GE Aestiva and Aespire Anesthesia (Update A)

    Successful exploitation of this vulnerability could allow an attacker the ability to remotely modify GE Healthcare anesthesia device parameters. This results from the configuration exposure of certain terminal server implementations that extend GE Healthcare …

    General Electric (GE)
    first Jul 9, 2019
  • Medium
    ICSA-19-204-02 1 CVE

    NREL EnergyPlus

    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition.

    National Renewable Energy Laboratory (NREL)
  • Medium max 6.7
    ICSA-19-199-01 1 CVE

    Johnson Controls exacqVision Server

    Successful exploitation of this vulnerability could allow an unauthenticated user to elevate their privileges.

    Exacq Technologies, Johnson Controls
  • Medium
    ICSA-19-190-01 1 CVE

    Emerson DeltaV Distributed Control System

    Successful exploitation of this vulnerability could allow an attacker to gain administrative access to DeltaV Smart Switches.

    Emerson
  • Medium
    ICSA-19-192-04 3 CVEs

    ICSA-19-192-04 Siemens SIMATIC RF6XXR

    Siemens
  • Medium max 6.7
    ICSA-19-164-01 1 CVE

    Johnson Controls exacqVision Enterprise System Manager

    Successful exploitation of this vulnerability could allow malicious code execution.

    Johnson Controls
  • Medium
    ICSA-19-150-01 1 CVE

    AVEVA Vijeo Citect and CitectSCADA

    Successful exploitation of this vulnerability could allow a locally authenticated user to obtain Citect user credentials.

    AVEVA
  • Medium
    ICSA-19-148-01 2 CVEs

    Emerson Ovation OCR400 Controller

    Successful exploitation of these vulnerabilities may allow privilege escalation or remote code execution, or it may halt the controller.

    Emerson
  • Medium
    ICSA-19-136-01 1 CVE

    Schneider Electric Modicon Controllers

    Successful exploitation of this vulnerability could allow an attacker to hijack TCP connections or cause information leakage.

    Schneider Electric
  • Medium
    ICSA-17-318-01 10 CVEs rev. 7

    ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)

    Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.

    Siemens
    first Nov 14, 2017
  • Medium
    ICSA-19-094-01 1 CVE

    Omron CX-Programmer

    Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.

    Omron
  • Medium
    ICSA-19-094-02 1 CVE

    Rockwell Automation Stratix 5400/5410/5700 and ArmorStratix 5700

    Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to cause a memory leak on an affected device, which may cause the device to reload.

    Rockwell Automation
  • Medium
    ICSA-19-078-01 1 CVE

    AVEVA InduSoft Web Studio and InTouch Edge HMI

    Successful exploitation of this vulnerability could allow execution of unauthorized code or commands.

    AVEVA
  • Medium
    ICSA-19-073-02 1 CVE

    Gemalto Sentinel UltraPro

    Successful exploitation of this vulnerability could allow execution of unauthorized code or commands.

    Gemalto
  • Medium
    ICSA-19-073-03 1 CVE

    PEPPERL+FUCHS WirelessHART-Gateways

    Successful exploitation of this vulnerability could allow access to files and restricted directories stored on the device through the manipulation of file parameters.

    Pepperl+Fuchs
  • Medium
    ICSA-19-050-02 1 CVE

    Delta Industrial Automation CNCSoft

    Successful exploitation of this vulnerability could cause a buffer overflow condition that may allow information disclosure or crash the application.

    Delta Electronics
  • Medium max 6.5
    ICSA-18-023-02 1 CVE rev. 2

    ICSA-18-023-02 Siemens Industrial Products (Update A)

    Siemens
    first Jan 18, 2018