Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

901 results · Clear filters · Feed

  • Medium
    ICSA-13-079-02 6 CVEs rev. 2

    Siemens WinCC 7.0 SP3 Multiple Vulnerabilities

    Siemens
    first Dec 22, 2013
  • Medium
    ICSA-13-079-01 1 CVE rev. 2

    Schweitzer Engineering Laboratories AcSELerator Improper Authorization Vulnerability

    Schweitzer Engineering Laboratories
    first Dec 22, 2013
  • Medium
    ICSA-13-022-01 2 CVEs rev. 2

    GE Proficy Real-Time Information Portal Information Disclosure Vulnerabilities

    GE
    first Oct 26, 2013
  • Medium
    ICSA-13-053-02A 1 CVE rev. 2

    Honeywell EBI, SymmetrE, and ComfortPoint Open Manager Station

    Honeywell
    first Nov 26, 2013
  • Medium max 6.1
    ICSA-12-297-01 1 CVE rev. 2

    Tropos Wireless Mesh Routers

    Tropos
    first Jul 27, 2012
  • Medium
    ICSA-13-067-02 1 CVE rev. 2

    Invensys Wonderware Win-XML Exporter Improper Input Validation Vulnerability

    Invensys
    first Dec 10, 2013
  • Medium
    ICSA-13-053-01 1 CVE rev. 2

    Emerson DeltaV Uncontroller Resource Consumption Vulnerability

    Emerson
    first Nov 26, 2013
  • Medium
    ICSA-12-348-01 1 CVE rev. 2

    Siemens ProcessSuite and Invensys Intouch Poorly Encrypted Password File

    Siemens ; Invensys Wonderware
    first Sep 16, 2012
  • Medium
    ICSA-13-079-03 7 CVEs rev. 2

    Siemens WinCC TIA Portal Vulnerabilities

    Siemens
    first Dec 22, 2013
  • Medium
    ICSA-15-085-01 4 CVEs rev. 2

    Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities

    Schneider Electric
    first Dec 27, 2015
  • Medium
    ICSMA-16-279-01 3 CVEs rev. 2

    Animas OneTouch Ping Insulin Pump Vulnerabilities

    Animas
    first Jul 9, 2016
  • Medium
    ICSA-16-355-01 1 CVE rev. 2

    Siemens Desigo PX Web Module Insufficient Entropy Vulnerability

    Siemens
    first Sep 23, 2016
  • Medium
    ICSA-16-348-04 1 CVE rev. 2

    Siemens SIMATIC WinCC and SIMATIC PCS 7 ActiveX Vulnerability

    Siemens
    first Sep 16, 2016
  • Medium
    ICSA-16-348-01 2 CVEs rev. 2

    Visonic PowerLink2 Vulnerabilities

    Visonic
    first Sep 16, 2016
  • Medium
    ICSA-16-341-01 1 CVE rev. 2

    Tesla Gateway ECU Vulnerability

    Tesla Motors
    first Sep 9, 2016
  • Medium
    ICSA-16-334-03 1 CVE rev. 2

    Emerson DeltaV Wireless I/O Card Open SSH Port Vulnerability

    Emerson
    first Sep 2, 2016
  • Medium
    ICSA-12-271-02 2 CVEs rev. 2

    Optimalog Optima PLC Multiple Vulnerabilities

    Optimalog
    first Jul 1, 2012
  • Medium
    ICSA-12-251-01 1 CVE rev. 2

    RealFlex RealWinDemo DLL Hijack

    RealFlex Technologies
    first Jun 11, 2012
  • Medium
    ICSA-12-145-01 1 CVE rev. 2

    Measuresoft ScadaPro DLL Hijack

    Measuresoft
    first Feb 25, 2012
  • Medium
    ICSA-12-283-02 1 CVE rev. 2

    WellinTech KingView User Credentials Not Securely Hashed

    WellinTech
    first Jul 13, 2012
  • Medium
    ICSA-16-334-02 1 CVE rev. 2

    Emerson DeltaV Easy Security Management Application Vulnerability

    Emerson
    first Sep 2, 2016
  • Medium
    ICSA-16-287-01 1 CVE rev. 2

    OSIsoft PI Web API 2015 R2 Service Account Permissions Vulnerability

    OSIsoft
    first Jul 17, 2016
  • Medium
    ICSA-12-212-01 1 CVE rev. 2

    ICONICS GENESIS32/BizViz Security Configurator Authentication Bypass Vulnerability

    ICONICS
    first May 3, 2012
  • Medium
    ICSA-12-201-01 1 CVE rev. 2

    OSIsoft PI OPC DA Interface Buffer Overflow

    OSIsoft
    first Apr 22, 2012
  • Medium
    ICSA-11-332-01A 1 CVE rev. 2

    Wonderware InBatch ActiveX Vulnerabilities

    Invensys
    first Aug 31, 2011
  • Medium
    ICSA-12-179-01 5 CVEs rev. 2

    Pro-Face Pro-Server EX Vulnerabilities

    Pro-face America, Inc., a subsidiary of Digital Electronics
    first Mar 31, 2012
  • Medium
    ICSA-12-158-01 5 CVEs rev. 2

    Siemens WinCC Multiple Vulnerabilities

    Siemens
    first Mar 10, 2012
  • Medium
    ICSA-12-081-01 2 CVEs rev. 2

    Wonderware System Platform Buffer Overflows

    Invensys
    first Dec 23, 2012
  • Medium
    ICSA-11-273-03A 1 CVE rev. 2

    Rockwell RSLogix Overflow Vulnerability

    Rockwell Automation
    first Jul 3, 2011
  • Medium
    ICSA-11-243-02 1 CVE rev. 2

    GE Proficy Historian Web Administrator XSS

    GE
    first Jun 3, 2011
  • Medium
    ICSA-16-152-02 4 CVEs rev. 2

    ABB PCM600 Vulnerabilities

    ABB
    first Mar 4, 2016
  • Medium
    ICSA-16-152-01 1 CVE rev. 2

    Moxa UC 7408-LX-Plus Firmware Overwrite Vulnerability

    Moxa
    first Mar 4, 2016
  • Medium
    ICSA-16-147-03 1 CVE rev. 2

    Black Box AlertWerks ServSensor Credential Management Vulnerability

    Black Box
    first Feb 27, 2016
  • Medium
    ICSA-16-140-02 2 CVEs rev. 2

    Siemens SIPROTEC Information Disclosure Vulnerabilities (Update B)

    Siemens
    first Feb 20, 2016
  • Medium
    ICSA-16-131-01 4 CVEs rev. 2

    Panasonic FPWIN Pro Vulnerabilities

    panasonic
    first Feb 11, 2016
  • Medium
    ICSA-16-126-01 2 CVEs rev. 2

    KMC Controls Conquest BACnet Router Vulnerabilities

    KMC Controls
    first Feb 6, 2016
  • Medium
    ICSA-16-105-01 1 CVE rev. 2

    Sierra Wireless ACEmanager Information Exposure Vulnerability

    Sierra Wireless
    first Jan 16, 2016
  • Medium
    ICSA-16-103-03C 1 CVE rev. 2

    Siemens Industrial Products DROWN Vulnerability (Update C)

    Siemens
    first Jan 14, 2016
  • Medium
    ICSA-16-103-02 1 CVE rev. 2

    Siemens SCALANCE S613 Denial-of-Service Vulnerability

    Siemens
    first Jan 14, 2016
  • Medium
    ICSA-16-075-01 1 CVE rev. 2

    Siemens SIMATIC S7-1200 CPU Protection Mechanism Failure

    Siemens
    first Dec 17, 2016