Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

4,108 results · Feed

  • Medium

    Advantech WebOP

    ATTENTION: Low skill level to exploit. Public exploits are available.

  • Medium

    ICSMA-17-227-01_BMC Medical and 3B Medical Luna CPAP Machine

  • High

    SIMPlight SCADA Software

    ATTENTION: Low skill level to exploit.

  • High

    Solar Controls Heating Control Downloader (HCDownloader)

    ATTENTION: Low skill level to exploit.

  • High

    Solar Controls WATTConfig M Software

    ATTENTION: Low skill level to exploit.

  • High

    Fuji Electric Monitouch V-SFT

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    ABB SREA-01 and SREA-50

    ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

    ABB
  • Critical

    OSIsoft PI Integrator

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Moxa SoftNVR-IA Live Viewer

    Vendor: Moxa

  • High

    Schneider Electric Pro-face GP-Pro EX

    ATTENTION: Public exploits are available.

  • Critical max 9.8
    ICSMA-17-215-01 2 CVEs 2 exploited

    ICSMA-17-215-01_Siemens Molecular Imaging Vulnerabilities

  • Critical max 9.8
    ICSMA-17-215-02 4 CVEs 1 exploited

    ICSMA-17-215-02_Siemens Molecular Imaging Vulnerabilities

  • Critical

    Mitsubishi Electric Europe B.V. E-Designer

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High max 8.8

    Continental AG Infineon S-Gold 2 (PMB 8876)

    ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

  • Medium

    Mirion Technologies Telemetry Enabled Devices

    Vendor: Mirion Technologies

  • Critical

    PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch

    ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available

  • High
    ICSA-17-117-01B 1 CVE rev. 3

    GE Multilin SR, UR, and URplus Protective Relays (Update B)

    ATTENTION: Remotely exploitable/low skill level to exploit.

    first Apr 27, 2017
  • Medium
    ICSA-17-152-02 2 CVEs rev. 2

    NXP i.MX Product Family

    REPOSTED INFORMATION

    first Jun 1, 2017
  • Critical max 10.0
    ICSA-17-103-02A 2 CVEs rev. 2

    Schneider Electric Modicon M221 PLCs and SoMachine Basic (Update A)

    ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

    first Apr 13, 2017
  • High

    Schneider Electric PowerSCADA Anywhere and Citect Anywhere

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High
    ICSA-17-138-03 1 CVE rev. 2

    Rockwell Automation MicroLogix 1100 Controllers

    Vendor: Rockwell Automation

    first May 18, 2017
  • Critical

    Siemens SiPass integrated

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Siemens SIMATIC Sm@rtClient Android App

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium
    ICSA-17-010-01A 1 CVE rev. 2

    OSIsoft PI Coresight and PI Web API (Update A)

    Vendor: OSIsoft

    first Jan 10, 2017
  • Critical max 9.8
    ICSA-17-180-01A 1 CVE 1 exploited rev. 2

    ICSA-17-180-01A_Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320 (Update A)

    Maksim Malyutin from Embedi reported this issue to Intel.

    first Jun 29, 2017
  • Medium

    Siemens SIMATIC Logon

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Fuji Electric V-Server

    ATTENTION: Remotely exploitable

  • High

    ABB VSN300 WiFi Logger Card

    ATTENTION: Remotely exploitable/low skill level to exploit.

    ABB
  • High

    OSIsoft PI Coresight

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622

    ATTENTION: Remotely exploitable/Low skill level to exploit.

  • High

    Siemens OZW672 and OZW772

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Siemens Reyrolle

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    Schneider Electric Wonderware ArchestrA Logger

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Schneider Electric Ampla MES

    ATTENTION: Low skill level to exploit.

  • Critical

    Siemens Viewport for Web Office Portal

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Newport XPS-Cx, XPS-Qx

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    Siemens SIMATIC CP 44x-1 Redundant Network Access Modules

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Siemens XHQ

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Ecava IntegraXor

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Cambium Networks ePMP

    ATTENTION: Remotely exploitable/low skill level to exploit.