Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

901 results · Clear filters · Feed

  • Medium
    ICSA-15-099-01E 1 CVE rev. 2

    Siemens SIMATIC HMI Devices Vulnerabilities (Update E)

    Siemens
    first Jan 10, 2015
  • Medium
    ICSA-15-153-01 1 CVE rev. 2

    Beckwith Electric TCP Initial Sequence Vulnerability

    Beckwith Electric
    first Mar 5, 2015
  • Medium
    ICSA-15-169-01B 1 CVE rev. 2

    Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B)

    Wind River Systems
    first Mar 21, 2015
  • Medium
    ICSA-12-032-03 1 CVE rev. 2

    GE Intelligent Platforms Proficy Real-Time Information Portal Directory Traversal

    GE
    first Nov 4, 2012
  • Medium
    ICSA-16-343-01 2 CVEs rev. 2

    Moxa MiiNePort Session Hijack Vulnerabilities

    Moxa
    first Sep 11, 2016
  • Medium
    ICSA-14-205-02A 5 CVEs rev. 2

    Siemens SIMATIC WinCC Vulnerabilities (Update A)

    Siemens
    first Apr 26, 2014
  • Medium max 4.3
    ICSA-14-105-01 1 CVE rev. 2

    Progea Movicon SCADA Information Disclosure Vulnerability

    Progea
    first Jan 16, 2014
  • Medium max 6.5
    ICSA-25-162-08 1 CVE

    AVEVA PI Web API

    Successful exploitation of this vulnerability could allow an attacker to disable content security policy protections.

    AVEVA
  • Medium max 5.5
    ICSA-25-162-09 2 CVEs

    AVEVA PI Connector for CygNet

    Successful exploitation of these vulnerabilities could allow an attacker to persist arbitrary code in the administrative portal of the product or cause a denial-of-service condition.

    AVEVA
  • Medium max 5.3
    ICSA-25-105-01 1 CVE rev. 4

    Siemens Mendix Runtime

    Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has rele…

    Siemens
    first Apr 8, 2025
  • Medium max 4.3
    ICSA-25-162-03 1 CVE

    Siemens SCALANCE and RUGGEDCOM

    Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the "guest" role. Siemens has released new versions fo…

    Siemens
  • Medium
    ICSA-11-335-01 1 CVE rev. 2

    7-Technologies Data Server Denial of Service

    7T
    first Sep 3, 2011
  • Medium
    ICSA-11-314-01 1 CVE rev. 2

    Safenet Sentinel and 7-T Input Sanitization Vulnerability

    SafeNet
    first Aug 13, 2011
  • Medium
    ICSA-11-279-04 1 CVE rev. 2

    Beckhoff TwinCAT Read Access Violation

    Beckhoff
    first Jul 9, 2011
  • Medium
    ICSA-11-279-03A 1 CVE rev. 2

    Unitronics UNIOPC Server Input Handling Vulnerability

    Unitronics
    first Jul 9, 2011
  • Medium
    ICSA-11-279-02 1 CVE rev. 2

    CitectSCADA and Mitsubishi MX4 SCADA Batch Server Buffer Overflow

    Schneider Electric
    first Jul 9, 2011
  • Medium max 4.3
    ICSA-14-149-01 2 CVEs rev. 2

    Triangle MicroWorks Uncontrolled Resource Consumption

    Triangle MicroWorks
    first Mar 1, 2014
  • Medium max 7.5
    ICSA-14-135-05 1 CVE 1 exploited rev. 2

    OpenSSL Vulnerability

    OpenSSL
    first Feb 15, 2014
  • Medium max 7.5
    ICSA-14-135-04 1 CVE 1 exploited rev. 2

    Unified Automation OPC SDK OpenSSL Vulnerability

    Unified Automation
    first Feb 15, 2014
  • Medium
    ICSA-14-135-03A 1 CVE rev. 2

    Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)

    Siemens
    first Feb 15, 2014
  • Medium max 7.5
    ICSA-14-135-02 1 CVE 1 exploited rev. 2

    Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability

    Schneider Electric
    first Feb 15, 2014
  • Medium max 6.2
    ICSA-14-133-02 2 CVEs rev. 2

    Emerson DeltaV Vulnerabilities

    Emerson
    first Feb 13, 2014
  • Medium max 7.5
    ICSA-14-128-01 1 CVE 1 exploited rev. 2

    Digi International OpenSSL Vulnerability

    Digi International
    first Feb 8, 2014
  • Medium max 7.5
    ICSA-14-126-01A 1 CVE 1 exploited rev. 2

    ABB Relion 650 Series OpenSSL Vulnerability (Update A)

    ABB
    first Feb 6, 2014
  • Medium max 7.5
    ICSA-14-105-03B 1 CVE 1 exploited rev. 2

    Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)

    Siemens
    first Jan 16, 2014
  • Medium
    ICSA-14-098-03 1 CVE rev. 2

    Siemens Ruggedcom WIN Products BEAST Attack Vulnerability

    Siemens
    first Jan 9, 2014
  • Medium max 5.0
    ICSA-14-093-01 1 CVE rev. 2

    Schneider Electric OPC Factory Server Buffer Overflow

    Schneider Electric
    first Jan 4, 2014
  • Medium
    ICSA-14-087-01A 1 CVE rev. 2

    Siemens ROS Improper Input Validation (Update A)

    Siemens
    first Dec 29, 2014
  • Medium max 6.8
    ICSA-14-072-01 1 CVE rev. 2

    Schneider Electric StruxureWare SCADA Expert ClearSCADA Parsing Vulnerability

    Schneider Electric
    first Dec 14, 2014
  • Medium max 6.8
    ICSA-14-058-02 1 CVE rev. 2

    Schneider Electric OFS Buffer Overflow Vulnerability

    Schneider Electric
    first Nov 30, 2014
  • Medium max 5.9
    ICSA-14-058-01 1 CVE rev. 2

    Schneider Electric Floating License Manager Vulnerability

    Schneider Electric
    first Nov 30, 2014
  • Medium max 6.3
    ICSA-14-021-01 1 CVE rev. 2

    Rockwell RSLogix 5000 Password Vulnerability

    Rockwell Automation
    first Oct 24, 2014
  • Medium
    ICSA-16-271-01 1 CVE rev. 2

    Siemens SCALANCE M-800/S615 Web Vulnerability

    Siemens
    first Jul 1, 2016
  • Medium
    ICSA-16-259-03 1 CVE rev. 2

    Trane Tracer SC Sensitive Information Exposure Vulnerability

    Trane
    first Jun 19, 2016
  • Medium
    ICSA-16-250-01 3 CVEs rev. 2

    Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities

    Siemens
    first Jun 10, 2016
  • Medium
    ICSA-16-208-03 1 CVE rev. 2

    Siemens SINEMA Remote Connect Server Cross-site Scripting Vulnerability

    Siemens
    first Apr 29, 2016
  • Medium
    ICSA-16-208-02 1 CVE rev. 2

    Siemens SIMATIC NET PC-Software Denial-of-Service Vulnerability

    Siemens
    first Apr 29, 2016
  • Medium
    ICSA-16-194-02 1 CVE rev. 2

    GE Proficy HMI SCADA CIMPLICITY Privilege Management Vulnerability

    GE
    first Apr 15, 2016
  • Medium
    ICSA-16-187-01 2 CVEs rev. 2

    Rexroth Bosch BLADEcontrol-WebVIS Vulnerabilities

    Bosch Rexroth
    first Apr 8, 2016
  • Medium
    ICSA-16-175-01 1 CVE rev. 2

    Rockwell Automation Allen-Bradley Stratix 5400 and 5410 Packet Corruption Vulnerability

    Rockwell Automation
    first Mar 27, 2016