Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,105 results · Feed

  • High max 7.5
    ICSA-19-029-02 1 CVE rev. 3

    Mitsubishi Electric MELSEC-Q Series PLCs

    Successful exploitation of this vulnerability could allow a remote attacker to send specially crafted packets to the device via Ethernet, causing Ethernet and USB communication to stop.

    Mitsubishi Electric
    first Jan 29, 2019
  • Critical max 9.3
    ICSA-25-175-01 2 CVEs

    Kaleris Navis N4 Terminal Operating System

    Successful exploitation of these vulnerabilities could allow an attacker to remotely exploit the operating system, achieve remote code execution, or extract sensitive information.

    Kaleris
  • High max 7.3
    ICSA-25-175-02 4 CVEs

    Delta Electronics CNCSoft

    Successful exploitation of these vulnerabilities could allow an attacker to execute code within the context of the current process.

    Delta Electronics
  • Critical max 9.1
    ICSA-25-175-05 3 CVEs

    ControlID iDSecure On-premises

    Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, retrieve information, leak arbitrary data, or perform SQL injections.

    Control iD
  • High max 8.8
    ICSA-25-175-06 1 CVE

    Parsons AccuWeather widget

    Successful exploitation of this vulnerability could allow an attacker to insert a malicious link that users might access through the RSS feed.

    Parsons
  • Critical max 9.3
    ICSA-25-175-07 3 CVEs

    MICROSENS NMP Web+

    Successful exploitation of these vulnerabilities could allow an attacker to gain system access, overwrite files or execute arbitrary code.

    Microsens
  • Critical max 9.8
    ICSA-25-182-04 4 CVEs rev. 3

    FESTO Hardware Controller, Hardware Servo Press Kit

    The Festo controller CECC-X-M1 product family in multiple versions are affected by a preauthentication command injection vulnerability. Update A, 2022-07-05 Remediation has been updated. Fixed firmwares are now available.

    Festo
    first Jul 6, 2022
  • Critical
    ICSA-16-145-01A 3 CVEs rev. 2

    Moxa MiiNePort Vulnerabilities

    Moxa
    first Feb 25, 2016
  • Critical max 9.8
    VA-25-171-01 1 CVE

    ClamAV

    ClamAV is an open source antivirus maintained by Cisco. A heap-based buffer overflow vulnerability in the PDF scanning process of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service or possibly execute arbitrary code.

    Cisco
  • Medium
    ICSA-12-265-01 1 CVE rev. 2

    Emerson DeltaV Buffer Overflow

    Emerson
    first Jun 25, 2012
  • High
    ICSA-12-258-01 1 CVE rev. 2

    IOServer OPC Server Multiple Vulnerabilities

    IOServer
    first Jun 18, 2012
  • Medium
    ICSA-15-034-01 1 CVE rev. 2

    Siemens SCALANCE X-200IRT Switch Family User Impersonation Vulnerability

    Siemens
    first Nov 6, 2015
  • High
    ICSA-13-022-02 2 CVEs rev. 2

    GE Intelligent Platforms Proficy Cimplicity Multiple Vulnerabilities

    GE
    first Oct 26, 2013
  • Critical
    ICSA-12-354-01A 1 CVE rev. 2

    Ruggedcom ROS Hard-Coded RSA SSL Private Key

    Siemens
    first Sep 22, 2012
  • High
    ICSA-12-342-01B 1 CVE rev. 2

    Rockwell Allen-Bradley MicroLogix, SLC 500, and PLC-5 Fault Generation Vulnerability

    Rockwell Automation
    first Sep 10, 2012
  • High
    ICSA-12-249-03 1 CVE rev. 2

    InduSoft ISSymbol ActiveX Control Buffer Overflow

    InduSoft
    first Jun 9, 2012
  • Medium
    ICSA-12-228-01A 1 CVE rev. 2

    Tridium Niagara Vulnerabilities

    Tridium
    first May 19, 2012
  • Medium
    ICSA-15-099-01E 1 CVE rev. 2

    Siemens SIMATIC HMI Devices Vulnerabilities (Update E)

    Siemens
    first Jan 10, 2015
  • High
    ICSA-15-146-01 1 CVE rev. 2

    Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service

    Mitsubishi Electric
    first Feb 26, 2015
  • Medium
    ICSA-15-153-01 1 CVE rev. 2

    Beckwith Electric TCP Initial Sequence Vulnerability

    Beckwith Electric
    first Mar 5, 2015
  • High
    ICSA-15-169-02 1 CVE rev. 2

    Schneider Electric Wonderware System Platform Vulnerabilities

    Schneider Electric
    first Mar 21, 2015
  • Medium
    ICSA-15-169-01B 1 CVE rev. 2

    Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B)

    Wind River Systems
    first Mar 21, 2015
  • Medium
    ICSA-12-032-03 1 CVE rev. 2

    GE Intelligent Platforms Proficy Real-Time Information Portal Directory Traversal

    GE
    first Nov 4, 2012
  • Critical
    ICSA-12-079-01 1 CVE rev. 2

    Microsoft Remote Desktop Protocol Memory Corruption Vulnerability

    Microsoft
    first Dec 21, 2012
  • Critical
    ICSA-10-348-01A 1 CVE rev. 2

    Wonderware InBatch Vulnerability

    Invensys
    first Sep 16, 2010
  • High
    ICSA-10-322-02A 1 CVE rev. 2

    Automated Solutions OPC Vulnerability

    Automated Solutions
    first Aug 21, 2010
  • Medium
    ICSA-16-343-01 2 CVEs rev. 2

    Moxa MiiNePort Session Hijack Vulnerabilities

    Moxa
    first Sep 11, 2016
  • Critical
    ICSA-12-047-01A 18 CVEs rev. 2

    Advantech WebAccess Vulnerabilities

    Advantech/Broadwin
    first Nov 19, 2012
  • High
    ICSA-12-150-01 1 CVE rev. 2

    Honeywell HMIWeb Browser Buffer Overflow Vulnerability

    Honeywell
    first Mar 2, 2012
  • High
    ICSA-12-146-01A 1 CVE rev. 2

    RuggedCom Weak Cryptography for Password Vulnerability

    Siemens
    first Feb 26, 2012
  • High
    ICSA-12-138-01 5 CVEs rev. 2

    Emerson DeltaV Multiple Vulnerabilities

    Emerson
    first Feb 18, 2012
  • High
    ICSA-12-062-01 3 CVEs rev. 2

    Wonderware Information Server Multiple Vulnerabilities

    Invensys
    first Dec 4, 2012
  • Critical
    ICSA-12-059-01 1 CVE rev. 2

    ABB Robot Communications Runtime Buffer Overflow

    ABB
    first Dec 1, 2012
  • High max 8.4
    ICSA-25-168-02 3 CVEs

    LS Electric GMWin 4

    Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.

    LS Electric
  • High max 7.8
    ICSA-25-168-04 3 CVEs

    Fuji Electric Smart Editor

    Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code.

    Fuji Electric
  • Critical max 9.8
    ICSA-25-168-05 1 CVE

    Dover Fueling Solutions ProGauge MagLink LX consoles

    Successful exploitation of this vulnerability could result in an attacker gaining control of the monitoring device, manipulating fueling operations, deleting system configurations, or deploying malware.

    Dover Fueling Solutions
  • Low max 5.5
    VA-25-136-01 1 CVE rev. 2

    IBM Security Guardium stored cross-site scripting

    IBM Security Guardium 11.5 before patch 11.0p565 is vulnerable to stored cross-site scripting (XSS). An attacker with administrative privileges could store arbitrary content or script in the administrative web interface that would be rendered or executed by u…

    IBM
    first May 16, 2025
  • High
    ICSA-13-352-01 2 CVEs rev. 2

    NovaTech Orion DNP3 Improper Input Validation Vulnerability

    NovaTech
    first Sep 20, 2013
  • Critical
    ICSA-13-113-01 4 CVEs rev. 2

    Wonderware Information Server Vulnerabilities

    Invensys
    first Jan 25, 2013
  • Medium
    ICSA-14-205-02A 5 CVEs rev. 2

    Siemens SIMATIC WinCC Vulnerabilities (Update A)

    Siemens
    first Apr 26, 2014