Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

901 results · Clear filters · Feed

  • Medium max 6.2
    ICSA-25-148-01 1 CVE rev. 2

    Siemens SiPass

    SiPass integrated ACC (Advanced Central Controller) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens recommends specific countermeasures for produc…

    Siemens
    first May 23, 2025
  • Medium max 4.3
    VA-25-280-01 4 CVEs

    OPEXUS FOIAXpress stored XSS

    OPEXUS FOIAXpress before 11.13.3.0 contains multiple stored cross-site-scripting vulnerabilities. These vulnerabilities allow an authenticated administrative user to inject JavaScript or other content into various components of FOIAXpress. Successful exploita…

    OPEXUS
  • Medium max 7.1
    ICSA-25-226-31 2 CVEs rev. 3

    Rockwell Automation 1756-EN4TR, 1756-EN4TRXT (Update B)

    Successful exploitation of these vulnerabilities could result in an attacker causing a denial of service condition.

    Rockwell Automation
    first Aug 14, 2025
  • Medium max 6.5
    ICSA-25-343-02 1 CVE rev. 2

    Festo LX Appliance

    A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the "Teacher" role), to craft a malicious course and launch an XSS attack.

    Festo
    first Aug 29, 2023
  • Medium max 6.5
    ICSA-25-289-11 3 CVEs

    Hitachi Energy MACH GWS

    Hitachi Energy is aware of these vulnerabilities that affect the MACH GWS product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Re…

    Hitachi Energy
  • Medium max 6.8
    ICSA-25-266-02 1 CVE

    Mitsubishi Electric MELSEC-Q Series CPU Module

    Successful exploitation of this vulnerability could allow an attacker to cause a denial of service (DoS).

    Mitsubishi Electric
  • Medium max 5.9
    ICSA-25-261-02 1 CVE

    Westermo Network Technologies WeOS 5

    Successful exploitation of this vulnerability could cause the device to reboot.

    Westermo Network Technologies
  • Medium max 5.8
    ICSA-25-261-03 2 CVEs

    Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit

    Successful exploitation of these vulnerabilities could enable an attacker to execute arbitrary shell commands on the affected devices.

    Schneider Electric
  • Medium max 5.4
    VA-25-259-01 7 CVEs

    CISA Thorium multiple vulnerabilities

    CISA Thorium is a framework used for malware analysis. Multiple vulnerabilities were reported in Thorium. Impacts include denial of service, authenticated arbitrary file read, and failure to expire previously issued user tokens.

    CISA
  • Medium max 5.3
    VA-25-174-01 3 CVEs rev. 3

    OPEXUS FOIAXpress Public Access Link (PAL) multiple vulnerabilities

    Multiple vulnerabilities could allow unauthenticated attackers to bypass rate-limiting measures for login attempts, or check for the existence of other users. Low-privileged users can modify certain site content without authorization.

    OPEXUS
    first Jul 31, 2025
  • Medium max 5.3
    ICSA-25-233-01 1 CVE rev. 2

    Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module (Update A)

    Successful exploitation of this vulnerability could result in a remote attacker being able to delay the processing of the Web server function and prevent legitimate users from utilizing the Web server function by sending a specially crafted HTTP request.

    Mitsubishi Electric
    first Aug 21, 2025
  • Medium max 7.0
    ICSA-25-252-06 1 CVE

    Rockwell Automation CompactLogix® 5480

    Successful exploitation of this vulnerability could result in arbitrary code execution.

    Rockwell Automation
  • Medium max 4.1
    ICSA-25-254-08 2 CVEs rev. 2

    Schneider Electric EcoStruxure

    Schneider Electric is aware of multiple vulnerabilities in EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation. [EcoStruxure™ Building Operation (EBO)](https://www.se.com/us/en/pr…

    Schneider Electric
    first Aug 12, 2025
  • Medium max 5.3
    ICSA-25-254-05 1 CVE

    Siemens Apogee PXC and Talon TC Devices

    Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

    Siemens
  • Medium max 5.5
    ICSA-25-245-01 1 CVE

    Delta Electronics EIP Builder

    Successful exploitation of this vulnerability could allow an attacker to potentially process dangerous external entities, resulting in disclosure of sensitive information.

    Delta Electronics
  • Medium max 4.3
    ICSMA-25-233-01 1 CVE

    FUJIFILM Healthcare Americas Synapse Mobility

    Successful exploitation of this vulnerability could allow an attacker to access information beyond their assigned roles.

    FUJIFILM Healthcare Americas
  • Medium max 6.7
    ICSA-25-240-03 1 CVE

    Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit

    Schneider Electric is aware of a vulnerability in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) products. The Saitel DR RTU is a field device, offering a solid and powerful platform for data acquisition, communication, automation and IED integration fo…

    Schneider Electric
  • Medium max 6.7
    ICSA-22-069-01 1 CVE rev. 10

    Siemens RUGGEDCOM Devices

    The SSH server on RUGGEDCOM ROS devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affecte…

    Siemens
    first Mar 8, 2022
  • Medium max 5.3
    ICSA-22-314-05 1 CVE rev. 6

    Siemens RUGGEDCOM ROS

    RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP conn…

    Siemens
    first Nov 8, 2022
  • Medium max 4.9
    ICSA-24-074-08 2 CVEs rev. 3

    Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family

    SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family is affected by multiple vulnerabilities. CVE-2023-44318 and CVE-2023-44321 were previously published as part of SSA-699386. Siemens has released new versions for several affected products and recommends t…

    Siemens
    first Mar 12, 2024
  • Medium max 5.3
    ICSA-24-256-05 1 CVE rev. 10

    Siemens Mendix Runtime

    Mendix Runtime contains an observable response discrepancy vulnerability when validating usernames during authentication. This could allow unauthenticated remote attackers to distinguish between valid and invalid usernames. Siemens has released new versions f…

    Siemens
    first Sep 10, 2024
  • Medium max 5.3
    ICSA-24-319-12 1 CVE rev. 2

    Siemens Mendix Runtime

    The basic authentication mechanism of Mendix Runtime contains a race condition vulnerability which could allow unauthenticated remote attackers to circumvent default account lockout measures. Siemens has released new versions for several affected products and…

    Siemens
    first Nov 12, 2024
  • Medium max 4.3
    ICSA-25-191-05 1 CVE rev. 2

    Siemens TIA Project-Server and TIA Portal

    A vulnerability in TIA Project Server and TIA Portal could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further …

    Siemens
    first Jul 8, 2025
  • Medium max 6.3
    ICSA-25-226-01 2 CVEs

    Siemens SIMATIC RTLS Locating Manager

    Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version.

    Siemens
  • Medium max 4.1
    ICSA-25-226-14 1 CVE

    Siemens RUGGEDCOM ROX II

    RUGGEDCOM ROX II devices does not properly enforce limitations on type and size of files that can be uploaded through their web interface. This could allow an attacker with a legitimate, highly privileged account on the web interface to upload arbitrary files…

    Siemens
  • Medium max 6.2
    ICSA-25-226-16 2 CVEs

    Siemens SICAM Q100/Q200

    SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes. Siemens has released new v…

    Siemens
  • Medium max 5.0
    ICSA-25-219-08 4 CVEs

    Yealink IP Phones and RPS (Redirect and Provisioning Service)

    Successful exploitation of these vulnerabilities could result in an information disclosure.

    Yealink
  • Medium max 5.3
    ICSA-25-105-03 1 CVE rev. 3

    Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX

    A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The integrated ICMP services in the underlying TCP/IP stack is vulnerable to a denial of service attack through s…

    Siemens
    first Apr 8, 2025
  • Medium max 6.5
    ICSA-25-175-03 6 CVEs rev. 2

    Schneider Electric Modicon Controllers (Update A)

    Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M241 / M251 / M258 / LMC058 / M262 products. The Modicon Controllers M241/M251/M258/M262 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and M…

    Schneider Electric
    first Jun 10, 2025
  • Medium max 5.3
    ICSA-25-203-03 1 CVE

    Schneider Electric EcoStruxure

    Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) https://www.se.com/us/en/product-range/65404-ecostruxure-power-monitor…

    Schneider Electric
  • Medium max 6.9
    ICSA-25-203-05 1 CVE 1 exploited

    Schneider Electric System Monitor Application

    Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC and Pro-face PS5000 trusted Legacy industrial PC series products. The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iP…

    Schneider Electric
  • Medium max 6.5
    ICSA-25-191-04 1 CVE

    Siemens SIMATIC CN 4100

    A vulnerability in SIMATIC CN 4100 could allow an attacker to cause a denial of service condition. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.

    Siemens
  • Medium max 5.3
    ICSA-25-184-04 1 CVE

    Mitsubishi Electric MELSEC iQ-F Series

    Successful exploitation of this vulnerability could result in a denial-of-service condition for legitimate users for a certain period by repeatedly attempting to log in with incorrect passwords. When the product repeatedly receives unauthorized logins from an…

    Mitsubishi Electric
  • Medium
    ICSA-15-062-02 1 CVE rev. 2

    Rockwell Automation FactoryTalk DLL Hijacking Vulnerabilities

    Rockwell Automation
    first Dec 4, 2015
  • Medium
    ICSA-16-189-01 2 CVEs rev. 2

    WECON LeviStudio Buffer Overflow Vulnerabilities

    WECON
    first Apr 10, 2016
  • Medium
    ICSA-15-335-02 1 CVE rev. 2

    Schneider Electric ProClima ActiveX Control Vulnerabilities

    Schneider Electric
    first Sep 3, 2015
  • Medium max 6.9
    ICSA-25-182-07 1 CVE

    Hitachi Energy MSM

    Hitachi Energy is aware of the vulnerability CVE-2020-11022 that affects MSM versions as listed below. If an attacker successfully exploits this vulnerability, it could impact the confidentiality, integrity or availability of MSM. Please consult the Recommend…

  • Medium
    ICSA-12-265-01 1 CVE rev. 2

    Emerson DeltaV Buffer Overflow

    Emerson
    first Jun 25, 2012
  • Medium
    ICSA-15-034-01 1 CVE rev. 2

    Siemens SCALANCE X-200IRT Switch Family User Impersonation Vulnerability

    Siemens
    first Nov 6, 2015
  • Medium
    ICSA-12-228-01A 1 CVE rev. 2

    Tridium Niagara Vulnerabilities

    Tridium
    first May 19, 2012