Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

901 results · Clear filters · Feed

  • Medium max 5.9

    Philips EncoreAnywhere

    Successful exploitation of this vulnerability could result in unencrypted communication and potential improper disclosure of sensitive data.

  • Medium

    MatrikonOPC Explorer

    If the attacker has local access to the system, an attacker could exploit this vulnerability. This could allow an attacker to transfer unauthorized files from the host system, which could result in unauthorized information disclosure.

  • Medium

    Rockwell Automation Arena

    Successful exploitation of this vulnerability could cause the software application to crash.

  • Medium

    ICSA-18-128-03 Siemens Siveillance VMS Video Mobile App

  • Medium

    WECON Technology Co., Ltd. LeviStudio HMI Editor and PI Studio HMI Project Programmer

    Successful exploitation of these vulnerabilities could allow remote code execution.

  • Medium

    Advantech WebAccess HMI Designer

    Successful exploitation of these vulnerabilities may allow an attacker to remotely execute arbitrary code.

  • Medium

    BD Pyxis

    Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.

  • Medium

    Yokogawa CENTUM and Exaopc

    Successful exploitation of this vulnerability could allow a local attacker to generate false system or process alarms, or block system or process alarm displays.

  • Medium

    ATI Systems Emergency Mass Notification Systems

    Successful exploitation of these vulnerabilities could trigger false alarms.

  • Medium

    Omron CX-One

    Successful exploitation of these vulnerabilities could allow remote code execution.

  • Medium

    WAGO 750 Series

    ATTENTION: Exploitable remotely/low skill level to exploit.

  • Medium

    Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200

    ATTENTION: Exploitable remotely/low skill level to exploit.

  • Medium

    ICSA-18-081-01 Siemens SIMATIC WinCC OA UI Mobile App

  • Medium

    OSIsoft PI Vision

    ATTENTION: Exploitable remotely/low skill level to exploit

  • Medium

    Eaton ELCSoft

    ATTENTION: Exploitable remotely/low skill level to exploit.

  • Medium

    Delta Electronics Delta Industrial Automation DOPSoft

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    ABB netCADOPS Web Application

    ATTENTION: Remotely exploitable/low skill level to exploit.

    ABB
  • Medium

    Schneider Electric IGSS Mobile

    ATTENTION: Locally exploitable/low skill level to exploit.

  • Medium

    Vyaire Medical CareFusion Upgrade Utility Vulnerability

    Independent researcher Mark Cross (@xerubus) has identified an uncontrolled search path element vulnerability in Vyaire Medical 's CareFusion Upgrade Utility application. Vyaire Medical has produced an update that mitigates this vulnerability.

  • Medium

    Philips IntelliSpace Cardiovascular System Vulnerability

    Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information stored on the system and modify this information.

  • Medium

    Advantech WebAccess/SCADA

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    WECON Technology Co., Ltd. LeviStudio HMI Editor

    ATTENTION: Locally exploitable/low skill level to exploit.

  • Medium

    Delta Electronics Delta Industrial Automation Screen Editor

    ATTENTION: Low skill level to exploit.

  • Medium

    ICSA-17-355-01_Moxa NPort W2150A and W2250A

    Federico Maggi reported the vulnerability to ICS-CERT.

  • Medium

    ABB Ellipse

    ATTENTION: Remotely exploitable/low skill level to exploit.

    ABB
  • Medium

    Ecava IntegraXor

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Siemens LOGO! Soft Comfort

    ATTENTION: Remotely exploitable.

  • Medium

    Siemens SWT3000

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    GEOVAP Reliance SCADA

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Ethicon Endo-Surgery Generator G11 Vulnerability

    Johnson & Johnson, the parent company of Ethicon Endo-Surgery, LLC, reported an improper authentication vulnerability in the Ethicon Endo-Surgery Generator Gen11. EthiconEndo-Surgery, LLC has produced updates that mitigate this vulnerability in the affected p…

  • Medium

    PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol

    ATTENTION: Public exploits are available.

  • Medium

    ABB FOX515T

    ATTENTION: Low skill level to exploit.

    ABB
  • Medium

    ICSMA-17-292-01_Boston Scientific ZOOM LATITUDE PRM Vulnerabilities

  • Medium

    Progea Movicon SCADA/HMI

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium
    ICSA-17-278-01A 1 CVE rev. 2

    GE CIMPLICITY (Update A)

    ATTENTION: Remotely exploitable/low skill level to exploit.

    first Oct 5, 2017
  • Medium

    Saia Burgess Controls PCD Controllers

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    ICSMA-17-255-01_Philips' IntelliView MX40 Patient Worn Monitor (WLAN) Vulnerabilities

  • Medium

    SpiderControl SCADA Web Server

    ATTENTION: Low skill level to exploit

  • Medium
    ICSA-17-150-01 1 CVE rev. 2

    Automated Logic Corporation ALC WebCTRL, Liebert SiteScan, Carrier i-VU

    ATTENTION: Remotely exploitable/low skill level to exploit.

    first May 30, 2017
  • Medium

    Siemens 7KM PAC Switched Ethernet

    ATTENTION: Low skill level to exploit.