Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

4,108 results · Feed

  • High

    Advantech WebAccess

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    ABB FOX515T

    ATTENTION: Low skill level to exploit.

    ABB
  • High

    Trihedral Engineering Limited VTScada

    ATTENTION: Low skill level to exploit.

  • Critical

    Korenix JetNet

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    SpiderControl MicroBrowser

    ATTENTION: Remotely exploitable/low skill level to exploit

  • Medium

    ICSMA-17-292-01_Boston Scientific ZOOM LATITUDE PRM Vulnerabilities

  • Medium

    Progea Movicon SCADA/HMI

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical
    ICSA-17-094-02B 3 CVEs rev. 3

    Marel Food Processing Systems (Update B)

    ATTENTION: Remotely exploitable/low skill level to exploit.

    first Apr 4, 2017
  • High

    ProMinent MultiFLEX M10a Controller

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    WECON Technology Co., Ltd. LeviStudio HMI Editor

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Envitech Ltd. EnviDAS Ultimate

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium
    ICSA-17-278-01A 1 CVE rev. 2

    GE CIMPLICITY (Update A)

    ATTENTION: Remotely exploitable/low skill level to exploit.

    first Oct 5, 2017
  • High

    LAVA Computer MFG Inc. Ether-Serial Link

    ATTENTION: Low skill level to exploit.

  • Critical

    JanTek JTC-200

    ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

  • Critical

    Siemens 7KT PAC1200 Data Manager

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Saia Burgess Controls PCD Controllers

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    Schneider Electric InduSoft Web Studio, InTouch Machine Edition

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Ctek, Inc. SkyRouter

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Digium Asterisk GUI

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    iniNet Solutions GmbH SCADA Webserver

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    PHOENIX CONTACT mGuard Device Manager

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    LOYTEC LVIS-3ME

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    mySCADA myPRO

    ATTENTION: Low skill level to exploit. Public exploits are available.

  • Medium

    ICSMA-17-255-01_Philips' IntelliView MX40 Patient Worn Monitor (WLAN) Vulnerabilities

  • Medium

    SpiderControl SCADA Web Server

    ATTENTION: Low skill level to exploit

  • High

    PHOENIX CONTACT, Innominate Security Technologies mGuard Firmware

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    i-SENS, Inc. SmartLog Diabetes Management Software

    Independent researcher Mark Cross has identified an uncontrolled search path element vulnerability in i-SENS, Inc. SmartLog Diabetes Management Software. i-SENS has produced an update that mitigates this vulnerability. Mark Cross has tested the update to vali…

  • Medium
    ICSA-17-150-01 1 CVE rev. 2

    Automated Logic Corporation ALC WebCTRL, Liebert SiteScan, Carrier i-VU

    ATTENTION: Remotely exploitable/low skill level to exploit.

    first May 30, 2017
  • Medium

    Siemens 7KM PAC Switched Ethernet

    ATTENTION: Low skill level to exploit.

  • Critical

    OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    Moxa SoftCMS Live Viewer

    AFFECTED PRODUCTS

  • High

    AzeoTech DAQFactory

    ATTENTION: Local access and user-level privileges are required to exploit these vulnerabilities

  • High

    Advantech WebAccess

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    ICSMA-17-241-01_Abbott Laboratories ' Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI Pacemaker Vulnerabilities

  • High max 8.8
    ICSA-17-208-04 1 CVE 1 exploited rev. 2

    Rockwell Automation Allen-Bradley Stratix and ArmorStratix

    ATTENTION: Remotely exploitable/low skill level to exploit

    first Jul 27, 2017
  • Critical

    ICSA-17-236-01_Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455

    Mandar Jadhav from Qualys Security has identified the vulnerabilities.

  • High

    Automated Logic Corporation WebCTRL, i-VU, SiteScan

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    SpiderControl SCADA MicroBrowser

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    SpiderControl SCADA Web Server

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    ICSMA-17-229-01_Philips' DoseWise Portal Vulnerabilities