Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,108 results · Feed

  • High
    ICSMA-17-082-01 1 CVE

    ICSMA-17-082-01_BD Kiestra PerformA and KLA Journal Service Applications Hard-Coded Passwords Vulnerability

    Becton, Dickinson and Company (BD)
  • High
    ICSA-17-047-01 1 CVE rev. 2

    Rockwell Automation Connected Components Workbench

    Vendor: Rockwell Automation

    Rockwell Automation
    first Feb 16, 2017
  • High
    ICSA-17-047-02 1 CVE rev. 2

    Rockwell Automation FactoryTalk Activation

    REPOSTED INFORMATION

    Rockwell Automation
    first Feb 16, 2017
  • High
    ICSA-17-075-01 1 CVE

    LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

    ATTENTION: Low skill level to exploit.

    LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME
  • High
    ICSA-17-073-01 1 CVE

    FATEK Automation PLC Ethernet Module

    ATTENTION: Remotely exploitable. Low skill level to exploit.

    FATEK Automation
  • High
    ICSA-17-068-01 1 CVE

    Schneider Electric ClearSCADA

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Schneider Electric
  • Critical
    ICSA-17-066-01 1 CVE

    ICSA-17-066-01_Schneider Electric Wonderware Intelligence

    Schneider Electric self-reported this vulnerability.

    Schneider Electric
  • High
    ICSA-17-061-01 1 CVE

    ICSA-17-061-01_Eaton xComfort Ethernet Communication Interface

    Maxim Rupp identified the vulnerability.

    Eaton
  • High
    ICSA-17-061-02 1 CVE

    Schneider Electric Conext ComBox

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Schneider Electric
  • High
    ICSA-17-061-03 1 CVE

    Siemens SINUMERIK Integrate and SINUMERIK Operate

    ATTENTION: Remotely exploitable.

    Siemens
  • High
    ICSA-17-059-01 2 CVEs

    Siemens RUGGEDCOM NMS

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Siemens
  • High
    ICSA-17-054-01 1 CVE

    VIPA Controls WinPLC7

    ATTENTION: Remotely exploitable/low skill level to exploit

    VIPA Controls
  • Critical
    ICSA-17-054-02 1 CVE

    Red Lion Controls Sixnet-Managed Industrial Switches, AutomationDirect STRIDE-Managed Ethernet Switches Vulnerability

    ATTENTION: Remotely exploitable. Low skill level is needed to exploit.

    Red Lion, AutomationDirect
  • High
    ICSA-17-045-01 1 CVE

    Advantech WebAccess

    ATTENTION: Low skill level to exploit

    Advantech
  • Critical
    ICSA-17-045-02 2 CVEs

    Geutebrück IP Cameras

    ATTENTION: Remotely exploitable/low skill level to exploit

    Geutebrück
  • High
    ICSA-17-040-01 2 CVEs

    Hanwha Techwin Smart Security Manager

    ATTENTION: Remotely exploitableVendor: Hanwha TechwinEquipment: Smart Security ManagerVulnerabilities: Remote Code Execution

    Hanwha Techwin
  • Medium
    ICSMA-17-017-01 1 CVE rev. 2

    ICSMA-17-017-01_BD Alaris 8000 Insufficiently Protected Credentials Vulnerability

    Becton, Dickinson and Company (BD)
    first Jan 17, 2017
  • Critical
    ICSA-17-031-01A 5 CVEs rev. 2

    BINOM3 Electric Power Quality Meter (Update A)

    ATTENTION: Remotely exploitable/low skill level to exploit

    BINOM3
    first Jan 31, 2017
  • High
    ICSA-17-038-01 1 CVE

    ICSA-17-038-01_Sielco Sistemi Winlog SCADA Software

    Researcher Karn Ganeshen identified this vulnerability.

    Sielco Sistemi
  • High
    ICSMA-17-009-01A 1 CVE rev. 2

    ICSMA-17-009-01A_St. Jude Merlin@home Transmitter Vulnerability (Update A)

    St. Jude Medical
    first Jan 9, 2017
  • High
    ICSA-17-033-01 5 CVEs

    Honeywell XL Web II Controller Vulnerabilities

    Independent researcher Maxim Rupp has identified vulnerabilities in Honeywell 's XL Web II controller application. Honeywell has produced a new version to mitigate these vulnerabilities.

    Honeywell
  • High
    ICSA-17-031-02 1 CVE

    Ecava IntegraXor

    ATTENTION: Remotely Exploitable/low skill level to exploit

    Ecava
  • Medium
    ICSA-17-026-01 1 CVE

    Eaton ePDU Path Traversal Vulnerability

    Independent researcher Maxim Rupp has identified a path traversal vulnerability in certain legacy Eaton ePDUs. Although the affected products are past end-of-life (EoL) and is no longer supported, Eaton has provided defense-in-depth mitigation instructions to…

    Eaton
  • High
    ICSA-17-024-01 1 CVE

    Schneider Electric Wonderware Historian

    ATTENTION: Remotely exploitable/Low skill level to exploit

    Schneider Electric
  • Critical
    ICSA-17-017-01 1 CVE

    PHOENIX CONTACT mGuard

    ATTENTION: Remotely exploitable/low skill level to exploit

    PHOENIX CONTACT, Innominate Security Technologies
  • Critical
    ICSA-17-012-01 2 CVEs

    Advantech WebAccess

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Advantech
  • High
    ICSA-17-012-02 1 CVE

    VideoInsight Web Client

    ATTENTION: Remotely exploitable/low skill level to exploit.

    VideoInsight
  • Critical
    ICSA-17-012-03 3 CVEs

    Carlo Gavazzi VMU-C EM and VMU-C PV

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Carlo Gavazzi Automation