CISA ICS & IT advisories

901 results · Clear filters · Feed

• Medium
  ICSA-17-234-03 1 CVE

  SpiderControl SCADA Web Server

  ATTENTION: Remotely exploitable/low skill level to exploit.

  SpiderControl
  Aug 22, 2017
• Medium
  ICSA-17-227-01 1 CVE

  Advantech WebOP

  ATTENTION: Low skill level to exploit. Public exploits are available.

  Advantech
  Aug 15, 2017
• Medium
  ICSMA-17-227-01 1 CVE

  ICSMA-17-227-01_BMC Medical and 3B Medical Luna CPAP Machine

  BMC Medical, 3B Medical
  Aug 15, 2017
• Medium
  ICSA-17-208-02 2 CVEs

  Mirion Technologies Telemetry Enabled Devices

  Vendor: Mirion Technologies

  Mirion Technologies
  Jul 27, 2017
• Medium
  ICSA-17-152-02 2 CVEs rev. 2

  NXP i.MX Product Family

  REPOSTED INFORMATION

  i.MX
  Jul 25, 2017

  first Jun 1, 2017
• Medium
  ICSA-17-010-01A 1 CVE rev. 2

  OSIsoft PI Coresight and PI Web API (Update A)

  Vendor: OSIsoft

  OSIsoft
  Jul 11, 2017

  first Jan 10, 2017
• Medium
  ICSA-17-192-01 1 CVE

  Siemens SIMATIC Logon

  ATTENTION: Remotely exploitable/low skill level to exploit.

  Siemens
  Jul 11, 2017
• Medium
  ICSA-17-187-05 2 CVEs

  Schneider Electric Ampla MES

  ATTENTION: Low skill level to exploit.

  Schneider Electric
  Jul 6, 2017
• Medium
  ICSA-17-173-02 1 CVE

  Siemens XHQ

  ATTENTION: Remotely exploitable/low skill level to exploit.

  Siemens
  Jun 22, 2017
• Medium
  ICSA-17-152-01 1 CVE

  Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller

  ATTENTION: Remotely exploitable/low skill level to exploit.

  Phoenix Broadband Technologies
  Jun 1, 2017
• Medium
  ICSMA-17-082-02 1 CVE rev. 2

  ICSMA-17-082-02_B. Braun Medical SpaceCom Open Redirect Vulnerability

  B. Braun
  May 23, 2017

  first Mar 23, 2017
• Medium
  ICSA-17-136-04 1 CVE

  Schneider Electric VAMPSET

  ATTENTION: Low skill level to exploit.

  Schneider Electric
  May 16, 2017
• Medium
  ICSA-17-129-03 1 CVE

  Siemens SIMATIC WinCC and SIMATIC WinCC Runtime Professional

  ATTENTION: Remotely exploitable/low skill level to exploit.

  Siemens
  May 9, 2017
• Medium
  ICSA-17-094-05 1 CVE rev. 2

  Rockwell Automation ControlLogix 5580 and CompactLogix 5380

  ATTENTION: Remotely exploitable.

  Rockwell Automation
  May 4, 2017

  first Apr 4, 2017
• Medium
  ICSA-17-122-01 1 CVE

  Schneider Electric Wonderware Historian Client

  ATTENTION: Low skill level to exploit.

  Schneider Electric
  May 2, 2017
• Medium
  ICSA-17-122-02 1 CVE

  CyberVision Kaa IoT Platform

  ATTENTION: Remotely exploitable/low skill level to exploit.

  CyberVision
  May 2, 2017
• Medium
  ICSA-17-096-01A 2 CVEs rev. 2

  Certec EDV GmbH atvise scada (Update A)

  ATTENTION: Remotely exploitable/low skill level to exploit.

  Certec EDV
  Apr 27, 2017

  first Apr 6, 2017
• Medium
  ICSA-17-094-01 1 CVE

  Schneider Electric Interactive Graphical SCADA System Software

  ATTENTION: Remotely exploitable/low skill level to exploit.

  Schneider Electric
  Apr 4, 2017
• Medium
  ICSA-17-082-01 1 CVE

  LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

  ATTENTION: Remotely exploitable/low skill level to exploit.

  LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME
  Mar 23, 2017
• Medium
  ICSMA-17-017-01 1 CVE rev. 2

  ICSMA-17-017-01_BD Alaris 8000 Insufficiently Protected Credentials Vulnerability

  Becton, Dickinson and Company (BD)
  Feb 7, 2017

  first Jan 17, 2017
• Medium
  ICSA-17-026-01 1 CVE

  Eaton ePDU Path Traversal Vulnerability

  Independent researcher Maxim Rupp has identified a path traversal vulnerability in certain legacy Eaton ePDUs. Although the affected products are past end-of-life (EoL) and is no longer supported, Eaton has provided defense-in-depth mitigation instructions to…

  Eaton
  Jan 26, 2017