Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

901 results · Clear filters · Feed

  • Medium
    ICSA-15-055-03 1 CVE rev. 2

    Schneider Electric Invensys Positioner Buffer Overflow Vulnerability

    Schneider Electric
    first Nov 27, 2015
  • Medium
    ICSA-15-050-01A 2 CVEs rev. 2

    Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities (Update A)

    Siemens
    first Nov 22, 2015
  • Medium
    ICSA-15-048-02 2 CVEs rev. 2

    Siemens SIMATIC WinCC TIA Portal Vulnerabilities

    Siemens
    first Nov 20, 2015
  • Medium
    ICSA-15-041-02 1 CVE rev. 2

    GE Hydran M2 Predictable TCP Initial Sequence Vulnerability

    GE
    first Nov 13, 2015
  • Medium
    ICSA-15-036-01A 1 CVE rev. 2

    GE and MACTek HART Device DTM Vulnerability (Update A)

    GE
    first Nov 8, 2015
  • Medium
    ICSA-15-022-01 1 CVE rev. 2

    Siemens SIMATIC S7-1200 CPU Web Vulnerability

    Siemens
    first Oct 25, 2015
  • Medium
    ICSA-15-013-01 3 CVEs rev. 2

    Siemens SIMATIC WinCC Sm@rtClient iOS Application Authentication Vulnerabilities

    Siemens
    first Oct 16, 2015
  • Medium
    ICSA-12-102-05 1 CVE rev. 2

    Siemens Scalance S Multiple Security Vulnerabilities

    Siemens
    first Jan 13, 2012
  • Medium
    ICSA-12-102-02 1 CVE rev. 2

    Koyo Ecom Modules Vulnerabilities

    KOYO
    first Jan 13, 2012
  • Medium
    ICSA-12-102-01 1 CVE rev. 2

    Certec atvise webMI2ADS Vulnerabilities

    Certec
    first Jan 13, 2012
  • Medium
    ICSA-12-088-01A 1 CVE rev. 2

    Rockwell Automation FactoryTalk RNADiagReceiver

    Rockwell Automation
    first Dec 30, 2012
  • Medium
    ICSA-15-211-01 1 CVE rev. 2

    Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Password Storage Vulnerability

    Schneider Electric
    first May 2, 2015
  • Medium
    ICSA-15-202-03B 1 CVE rev. 2

    Siemens RUGGEDCOM ROS and ROX-based Devices TLS POODLE Vulnerability (Update B)

    Siemens
    first Apr 23, 2015
  • Medium
    ICSA-15-181-01 1 CVE rev. 2

    Baxter SIGMA Spectrum Infusion System Vulnerabilities

    Baxter
    first Apr 2, 2015
  • Medium
    ICSA-15-176-01 1 CVE rev. 2

    Siemens Climatix BACnet/IP Communication Module Cross-site Scripting Vulnerability

    Siemens
    first Mar 28, 2015
  • Medium
    ICSA-15-141-01A 1 CVE rev. 2

    Schneider Electric OFS Server Vulnerability (Update A)

    Schneider Electric
    first Feb 21, 2015
  • Medium
    ICSA-15-132-02 1 CVE rev. 2

    Rockwell Automation RSView32 Weak Encryption Algorithm on Passwords

    Rockwell Automation
    first Feb 12, 2015
  • Medium
    ICSA-15-132-01 1 CVE rev. 2

    Hospira LifeCare PCA Infusion System Vulnerabilities

    Hospira
    first Feb 12, 2015
  • Medium
    ICSA-15-120-01 1 CVE rev. 2

    Opto 22 Multiple Product Vulnerabilities

    Opto 22
    first Jan 31, 2015
  • Medium
    ICSA-15-111-02 1 CVE rev. 2

    Rockwell Automation RSLinx Classic Vulnerability

    Rockwell Automation
    first Jan 22, 2015
  • Medium
    ICSA-15-111-01 1 CVE rev. 2

    Emerson AMS Device Manager SQL Injection Vulnerability

    Emerson
    first Jan 22, 2015
  • Medium
    ICSA-15-092-01 1 CVE rev. 2

    Schneider Electric VAMPSET Software Buffer Overflow Vulnerability

    Schneider Electric
    first Jan 3, 2015
  • Medium
    ICSA-15-090-02 1 CVE rev. 2

    Ecava IntegraXor DLL Vulnerabilities

    SCADA Server
    first Jan 1, 2015
  • Medium
    ICSA-15-085-01A 1 CVE rev. 2

    Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities (Update A)

    Schneider Electric
    first Dec 27, 2015
  • Medium
    ICSA-14-114-02 2 CVEs rev. 2

    Siemens SIMATIC S7-1200 CPU Web Vulnerabilities

    Siemens
    first Jan 25, 2014
  • Medium max 7.5
    ICSA-14-114-01 1 CVE 1 exploited rev. 2

    Certec atvise scada OpenSSL Heartbleed Vulnerability

    Certec
    first Jan 25, 2014
  • Medium
    ICSA-14-014-01 1 CVE rev. 2

    Schneider Electric ClearSCADA Uncontrolled Resource Consumption Vulnerability

    Schneider Electric
    first Oct 17, 2014
  • Medium
    ICSA-14-006-01 1 CVE rev. 2

    Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability

    Schneider Electric
    first Oct 9, 2014
  • Medium
    ICSA-13-337-01 1 CVE rev. 2

    Elecsys Director Gateway Improper Input Validation Vulnerability

    Elecsys
    first Sep 5, 2013
  • Medium
    ICSA-13-295-01 2 CVEs rev. 2

    WellinTech KingView ActiveX Vulnerabilities

    WellinTech
    first Jul 25, 2013
  • Medium
    ICSA-13-276-01 1 CVE rev. 2

    Invensys Wonderware InTouch Improper Input Validation Vulnerability

    Invensys
    first Jul 6, 2013
  • Medium
    ICSA-13-225-01 1 CVE rev. 2

    Advantech WebAccess Cross-Site Scripting

    Advantech
    first May 16, 2013
  • Medium
    ICSA-13-217-02 1 CVE rev. 2

    Schneider Electric Vijeo Citect, CitectSCADA, PowerLogic SCADA Vulnerability

    Schneider Electric
    first May 8, 2013
  • Medium
    ICSA-13-213-02 2 CVEs rev. 2

    Siemens WinCC TIA Portal Vulnerabilities

    Siemens
    first May 4, 2013
  • Medium
    ICSA-15-244-01 1 CVE rev. 2

    Siemens RUGGEDCOM ROS IP Forwarding Vulnerability

    Siemens
    first Jun 4, 2015
  • Medium
    ICSA-15-239-01 2 CVEs rev. 2

    Moxa SoftCMS Buffer Overflow Vulnerabilities

    Moxa
    first May 30, 2015
  • Medium
    ICSA-15-239-02 1 CVE rev. 2

    Siemens SIMATIC S7-1200 CSRF Vulnerability

    Siemens
    first May 30, 2015
  • Medium
    ICSA-13-169-03 1 CVE rev. 2

    Siemens COMOS Permissions, Privileges, and Access Controls

    Siemens
    first Mar 21, 2013
  • Medium
    ICSA-13-184-01 1 CVE rev. 2

    Alstom Grid S1 Agile Improper Authorization

    Alstom Grid
    first Apr 5, 2013
  • Medium
    ICSA-13-100-01 1 CVE rev. 2

    Schneider Electric MiCOM S1 Studio Improper Authorization Vulnerability

    Schneider Electric
    first Jan 12, 2013