Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

901 results · Clear filters · Feed

  • Medium
    ICSA-16-173-02 1 CVE rev. 2

    Schneider Electric PowerLogic PM8ECC Cross-site Scripting Vulnerability

    Schneider Electric
    first Mar 25, 2016
  • Medium
    ICSA-16-173-01A 3 CVEs rev. 2

    Advantech WebAccess ActiveX Vulnerabilities (Update A)

    Advantech
    first Mar 25, 2016
  • Medium
    ICSA-16-166-02 1 CVE rev. 2

    OSIsoft PI AF Server Input Validation Vulnerability

    OSIsoft
    first Mar 18, 2016
  • Medium
    ICSA-16-166-01 1 CVE rev. 2

    OSIsoft PI SQL Data Access Server Input Validation Vulnerability

    OSIsoft
    first Mar 18, 2016
  • Medium
    ICSA-12-024-02 3 CVEs rev. 2

    MICROSYS PROMOTIC Vulnerabilities

    MICROSYS
    first Oct 27, 2012
  • Medium
    ICSA-12-016-01 2 CVEs rev. 2

    Cogent DataHub XSS and CRLF

    Cogent Real-Time Systems
    first Oct 19, 2012
  • Medium
    ICSA-11-362-01 1 CVE rev. 2

    ScadaTEC ScadaPhone & Modbus TagServer Buffer Overflow Vulnerability

    Scadatec
    first Sep 30, 2011
  • Medium
    ICSA-16-026-01 1 CVE rev. 2

    MICROSYS PROMOTIC Memory Corruption Vulnerability

    MICROSYS
    first Oct 29, 2016
  • Medium
    ICSA-16-019-01 1 CVE rev. 2

    Siemens OZW672 and OZW772 XSS Vulnerability

    Siemens
    first Oct 22, 2016
  • Medium
    ICSA-15-356-01 4 CVEs rev. 2

    Siemens RUGGEDCOM ROX-based Devices NTP Vulnerabilities

    Siemens
    first Sep 24, 2015
  • Medium
    ICSA-15-309-01 1 CVE rev. 2

    Advantech EKI Hard-coded SSH Keys Vulnerability

    Advantech
    first Aug 8, 2015
  • Medium
    ICSA-15-300-02A 7 CVEs rev. 2

    Infinite Automation Systems Mango Automation Vulnerabilities (Update A)

    Infinite Automation Systems
    first Jul 30, 2015
  • Medium
    ICSA-15-300-01 1 CVE rev. 2

    Siemens RuggedCom Improper Ethernet Frame Padding Vulnerability

    Siemens
    first Jul 30, 2015
  • Medium
    ICSA-15-295-01 1 CVE rev. 2

    Eaton's Cooper Devices Improper Ethernet Frame Padding Vulnerability

    Eaton’s Cooper
    first Jul 25, 2015
  • Medium
    ICSA-15-293-01 1 CVE rev. 2

    IniNet Solutions embeddedWebServer Cleartext Storage Vulnerability

    iniNet Solutions
    first Jul 23, 2015
  • Medium max 6.1
    ICSA-15-286-01 1 CVE rev. 2

    Nordex NC2 XSS Vulnerability

    Nordex
    first Jul 16, 2015
  • Medium
    ICSA-15-258-04 1 CVE rev. 2

    Advantech WebAccess Stack-Based Buffer Overflow Vulnerability

    Advantech
    first Jun 18, 2015
  • Medium
    ICSA-15-232-01 1 CVE rev. 2

    Everest Software PeakHMI Pointer Dereference Vulnerabilities

    EVerest
    first May 23, 2015
  • Medium max 7.5
    ICSA-14-105-02A 1 CVE 1 exploited rev. 2

    Innominate mGuard OpenSSL HeartBleed Vulnerability

    Innominate
    first Jan 16, 2014
  • Medium max 5.4
    ICSA-14-345-01 1 CVE rev. 2

    Arbiter Systems 1094B GPS Clock Spoofing Vulnerability

    Arbiter Systems
    first Sep 13, 2014
  • Medium
    ICSA-14-329-01 1 CVE rev. 2

    MatrikonOPC for DNP Unhandled C++ Exception

    MatrikonOPC
    first Aug 28, 2014
  • Medium
    ICSA-14-303-02 1 CVE rev. 2

    Elipse SCADA DNP3 Denial of Service

    Elipse
    first Aug 2, 2014
  • Medium max 6.6
    ICSA-14-289-02 1 CVE rev. 2

    GE Proficy HMI/SCADA CIMPLICITY CimView Memory Access Violation

    GE
    first Jul 19, 2014
  • Medium max 4.3
    ICSA-14-269-02 1 CVE rev. 2

    Fox DataDiode Proxy Server CSRF Vulnerability

    Fox-IT
    first Jun 29, 2014
  • Medium
    ICSA-14-261-01 8 CVEs rev. 2

    Advantech WebAccess Vulnerabilities

    Advantech
    first Jun 21, 2014
  • Medium
    ICSA-14-260-01A 1 CVE rev. 2

    Yokogawa CENTUM and Exaopc Vulnerability (Update A)

    Yokogawa
    first Jun 20, 2014
  • Medium max 6.4
    ICSA-14-259-01A 3 CVEs rev. 2

    Schneider Electric SCADA Expert ClearSCADA Vulnerabilities (Update A)

    Schneider Electric
    first Jun 19, 2014
  • Medium max 4.1
    ICSA-14-254-01 1 CVE rev. 2

    Schneider Electric VAMPSET Buffer Overflow

    Schneider Electric
    first Jun 14, 2014
  • Medium max 6.5
    ICSA-14-247-01A 2 CVEs rev. 2

    Sensys Networks Traffic Sensor Vulnerabilities (Update A)

    Sensys Networks
    first Jun 7, 2014
  • Medium max 4.6
    ICSA-14-203-01 2 CVEs rev. 2

    Omron NS Series HMI Vulnerabilities

    Omron
    first Apr 24, 2014
  • Medium max 4.3
    ICSA-14-189-02 1 CVE rev. 2

    Innominate mGuard Unauthorized Leakage of System Data

    Innominate
    first Apr 10, 2014
  • Medium
    ICSA-13-014-01 1 CVE rev. 2

    Siemens SIMATIC RF Manager ActiveX Buffer Overflow

    Siemens
    first Oct 18, 2013
  • Medium
    ICSA-12-205-02 1 CVE rev. 2

    Siemens SIMATIC STEP 7 DLL Vulnerability

    Siemens
    first Apr 26, 2012
  • Medium
    ICSA-12-177-02 1 CVE rev. 2

    Invensys Wonderware InTouch 10 DLL Hijack

    Invensys
    first Mar 29, 2012
  • Medium
    ICSA-15-069-04A 1 CVE rev. 2

    Elipse E3 Process Control Vulnerability (Update A)

    Elipse
    first Dec 11, 2015
  • Medium
    ICSA-15-069-04 1 CVE rev. 2

    Elipse E3 Process Control Vulnerability

    Elipse
    first Dec 11, 2015
  • Medium
    ICSA-15-064-02A 1 CVE rev. 2

    Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A)

    Siemens
    first Dec 6, 2015
  • Medium
    ICSA-15-064-02 1 CVE rev. 2

    Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths

    Siemens
    first Dec 6, 2015
  • Medium
    ICSA-15-064-01A 1 CVE rev. 2

    Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A)

    Siemens
    first Dec 6, 2015
  • Medium
    ICSA-15-064-01 1 CVE rev. 2

    Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability

    Siemens
    first Dec 6, 2015