Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,105 results · Feed

  • High max 7.8
    ICSA-25-191-07 1 CVE

    Delta Electronics DTM Soft

    Successful exploitation of this vulnerability could allow an attacker to encrypt files referencing the application in order to extract information.

    Delta Electronics
  • High max 8.8
    ICSA-25-191-08 10 CVEs

    Advantech iView

    Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, achieve remote code execution, or cause service disruptions.

    Advantech
  • Critical max 9.8
    ICSA-25-191-09 1 CVE

    KUNBUS RevPi Webstatus

    Successful exploitation of this vulnerability could allow attackers to bypass authentication and gain unauthorized access to the application.

    KUNBUS
  • Medium max 5.3
    ICSA-25-105-03 1 CVE rev. 3

    Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX

    A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The integrated ICMP services in the underlying TCP/IP stack is vulnerable to a denial of service attack through s…

    Siemens
    first Apr 8, 2025
  • Critical max 9.4
    ICSA-25-189-01 5 CVEs

    Emerson ValveLink Products

    Successful exploitation of these vulnerabilities could allow an attacker with access to the system to read sensitive information stored in cleartext, tamper with parameters, and run un-authorized code.

    Emerson
  • High max 7.8
    ICSA-25-014-02 1 CVE rev. 2

    Schneider Electric Vijeo Designer and EcoStruxureâ„¢ Machine Expert (Update A)

    Schneider Electric is aware of a vulnerability in its Vijeo Designer product. The Vijeo Designer https://www.se.com/ww/en/product-range/1054-vijeo-designer-hmi-software/ product is HMI Configuration Software compatible with Harmony and Magelis HMI. Vijeo Desi…

    Schneider Electric
    first Sep 10, 2024
  • Medium max 6.5
    ICSA-25-175-03 6 CVEs rev. 2

    Schneider Electric Modicon Controllers (Update A)

    Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M241 / M251 / M258 / LMC058 / M262 products. The Modicon Controllers M241/M251/M258/M262 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and M…

    Schneider Electric
    first Jun 10, 2025
  • High max 7.2
    ICSA-25-175-04 4 CVEs rev. 2

    Schneider Electric EVLink WallBox (Update A)

    Schneider Electric is aware of multiple vulnerabilities in its EVLink WallBox product. The EVLink WallBox https://www.se.com/ww/en/product-range/62395-evlink-wallbox/%23products is a charging station for electric vehicles at home or on private property, suita…

    Schneider Electric
    first Jun 10, 2025
  • Medium max 5.3
    ICSA-25-203-03 1 CVE

    Schneider Electric EcoStruxure

    Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Monitoring Expert (PME) and EcoStruxure™ Power Operation (EPO) products. EcoStruxure™ Power Monitoring Expert (PME) https://www.se.com/us/en/product-range/65404-ecostruxure-power-monitor…

    Schneider Electric
  • Medium max 6.9
    ICSA-25-203-05 1 CVE 1 exploited

    Schneider Electric System Monitor Application

    Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC and Pro-face PS5000 trusted Legacy industrial PC series products. The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iP…

    Schneider Electric
  • Critical max 9.5
    ICSA-25-203-06 6 CVEs

    Schneider Electric EcoStruxture IT Data Center Expert

    Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ IT Data Center Expert (DCE) product. The EcoStruxure™ IT Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device informa…

    Schneider Electric
  • Critical
    ICSA-15-335-03 1 CVE rev. 7

    Siemens SIMATIC Communication Processor Vulnerability (Update C)

    SIMATIC CP and TIM devices contain an authentication bypass vulnerability that could allow unauthenticated users to perform administrative operations under certain conditions. Siemens has released new versions for several affected products and recommends to u…

    Siemens
    first Nov 27, 2015
  • High max 7.5
    ICSA-20-105-08 1 CVE rev. 16

    Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D)

    A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which c…

    Siemens
    first Apr 14, 2020
  • High max 8.1
    ICSA-24-256-15 1 CVE rev. 2

    Siemens Industrial Products

    An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high imp…

    Siemens
    first Sep 10, 2024
  • Critical max 9.8
    ICSA-25-191-01 4 CVEs

    Siemens SINEC NMS

    Siemens SINEC NMS before V4.0 is affected by multiple vulnerabilities which could allow an attacker to elevate privilege and exceute arbitrary code. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. Siemens is pr…

    Siemens
  • High max 7.8
    ICSA-25-191-02 3 CVEs

    Siemens Solid Edge

    Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or CFG format. This could allow an attacker to crash the application or execute arbitrary…

    Siemens
  • High max 7.8
    ICSA-25-191-03 2 CVEs

    Siemens TIA Administrator

    Siemens TIA Administrator before V3.0.6 contains multiple vulnerabilities which could allow an attacker to escalate privilege or exceute arbitrary code during installations. Siemens has released a new version for TIA Administrator and recommends to update to …

    Siemens
  • Medium max 6.5
    ICSA-25-191-04 1 CVE

    Siemens SIMATIC CN 4100

    A vulnerability in SIMATIC CN 4100 could allow an attacker to cause a denial of service condition. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.

    Siemens
  • High max 7.3
    ICSA-25-184-02 5 CVEs

    Hitachi Energy MicroSCADA X SYS600

    Successful exploitation of these vulnerabilities could allow an attacker to tamper with the system file, overwrite files, create a denial-of-service condition, or leak file content.

    Hitachi Energy
  • Medium max 5.3
    ICSA-25-184-04 1 CVE

    Mitsubishi Electric MELSEC iQ-F Series

    Successful exploitation of this vulnerability could result in a denial-of-service condition for legitimate users for a certain period by repeatedly attempting to log in with incorrect passwords. When the product repeatedly receives unauthorized logins from an…

    Mitsubishi Electric
  • Critical max 9.8
    VA-25-169-01 9 CVEs

    Versa Networks Versa Director multiple vulnerabilities

    Versa Networks Versa Director contains a variety of vulnerabilities. In the most severe cases, a remote, unauthenticated attacker could execute arbitrary code with administrative privileges.

    Versa
  • Critical max 10.0
    ICSA-25-182-05 2 CVEs

    Voltronic Power and PowerShield UPS monitoring software

    Successful exploitation of these vulnerabilities could allow an unauthenticated attacker remotely to make configuration changes, resulting in shutting down UPS connected devices or execution of arbitrary code.

    Voltronic Power, PowerShield
  • Critical
    ICSA-16-306-02 1 CVE rev. 2

    IBHsoftec S7-SoftPLC CPX43 Heap-based Buffer Overflow Vulnerability

    IBHsoftec
    first Aug 5, 2016
  • Critical
    ICSA-16-287-07A 4 CVEs rev. 2

    Kabona AB WDC Vulnerabilities (Update A)

    Kabona AB
    first Jul 17, 2016
  • High max 7.6
    ICSA-25-177-02 2 CVEs

    TrendMakers Sight Bulb Pro

    Successful exploitation of these vulnerabilities could allow an attacker to capture sensitive information and execute arbitrary shell commands on the target device as root if connected to the local network segment.

    TrendMakers
  • Low
    ICSA-15-202-02 1 CVE rev. 2

    Siemens Sm@rtClient Password Storage Vulnerability

    Siemens
    first Apr 23, 2015
  • High
    ICSA-15-202-01 1 CVE rev. 2

    Siemens SIPROTEC Denial-of-Service Vulnerability

    Siemens
    first Apr 23, 2015
  • Medium
    ICSA-15-062-02 1 CVE rev. 2

    Rockwell Automation FactoryTalk DLL Hijacking Vulnerabilities

    Rockwell Automation
    first Dec 4, 2015
  • Critical
    ICSA-14-086-01A 1 CVE rev. 2

    Schneider Electric Serial Modbus Driver Buffer Overflow (Update A)

    Schneider Electric
    first Dec 28, 2014
  • High
    ICSA-13-254-01 1 CVE rev. 2

    Siemens SCALANCE X-200 Web Hijack Vulnerability

    Siemens
    first Jun 14, 2013
  • Critical
    ICSA-13-140-01 1 CVE rev. 2

    Mitsubishi Electric Automation MX Component V3 ActiveX Vulnerability

    Mitsubishi Electric
    first Feb 21, 2013
  • Critical
    ICSA-12-256-01 5 CVEs rev. 2

    Siemens WinCC WebNavigator Multiple Vulnerabilities

    Siemens
    first Jun 16, 2012
  • Critical
    ICSA-12-145-02 4 CVEs rev. 2

    xArrow Multiple Vulnerabilities

    xArrow
    first Feb 25, 2012
  • High
    ICSA-11-122-01 1 CVE rev. 2

    AzeoTech DAQFactory Networking Vulnerabilities

    AzeoTech
    first Feb 2, 2011
  • High
    ICSA-16-231-01-0 1 CVE rev. 2

    Locus Energy LGate Command Injection Vulnerability

    Locus Energy
    first May 22, 2016
  • High
    ICSA-16-231-01 1 CVE rev. 2

    Navis WebAccess SQL Injection Vulnerability

    Navis
    first May 22, 2016
  • Critical
    ICSA-16-208-01C 2 CVEs rev. 2

    Siemens SIMATIC WinCC, PCS 7, and WinCC Runtime Professional Vulnerabilities (Update C)

    Siemens
    first Apr 29, 2016
  • Medium
    ICSA-16-189-01 2 CVEs rev. 2

    WECON LeviStudio Buffer Overflow Vulnerabilities

    WECON
    first Apr 10, 2016
  • Medium
    ICSA-15-335-02 1 CVE rev. 2

    Schneider Electric ProClima ActiveX Control Vulnerabilities

    Schneider Electric
    first Sep 3, 2015
  • Medium max 6.9
    ICSA-25-182-07 1 CVE

    Hitachi Energy MSM

    Hitachi Energy is aware of the vulnerability CVE-2020-11022 that affects MSM versions as listed below. If an attacker successfully exploits this vulnerability, it could impact the confidentiality, integrity or availability of MSM. Please consult the Recommend…