Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,105 results · Feed

  • Medium
    ICSA-14-135-03A 1 CVE rev. 2

    Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)

    Siemens
    first Feb 15, 2014
  • Medium max 7.5
    ICSA-14-135-02 1 CVE 1 exploited rev. 2

    Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability

    Schneider Electric
    first Feb 15, 2014
  • High max 7.5
    ICSA-14-135-01 1 CVE rev. 2

    CSWorks Software SQL Injection Vulnerability

    CSWorks
    first Feb 15, 2014
  • Medium max 6.2
    ICSA-14-133-02 2 CVEs rev. 2

    Emerson DeltaV Vulnerabilities

    Emerson
    first Feb 13, 2014
  • Critical max 9.3
    ICSA-14-133-01 4 CVEs rev. 2

    Yokogawa Multiple Products Vulnerabilities

    Yokogawa
    first Feb 13, 2014
  • Medium max 7.5
    ICSA-14-128-01 1 CVE 1 exploited rev. 2

    Digi International OpenSSL Vulnerability

    Digi International
    first Feb 8, 2014
  • Medium max 7.5
    ICSA-14-126-01A 1 CVE 1 exploited rev. 2

    ABB Relion 650 Series OpenSSL Vulnerability (Update A)

    ABB
    first Feb 6, 2014
  • High max 7.0
    ICSA-14-121-01 2 CVEs rev. 2

    AMTELCO miSecure Vulnerabilities

    AMTELCO
    first Feb 1, 2014
  • Medium max 7.5
    ICSA-14-105-03B 1 CVE 1 exploited rev. 2

    Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)

    Siemens
    first Jan 16, 2014
  • High max 8.3
    ICSA-14-100-01 1 CVE rev. 2

    IOServer Out of Bounds Read Vulnerability

    IOServer
    first Jan 11, 2014
  • Medium
    ICSA-14-098-03 1 CVE rev. 2

    Siemens Ruggedcom WIN Products BEAST Attack Vulnerability

    Siemens
    first Jan 9, 2014
  • Critical max 10.0
    ICSA-14-098-02 1 CVE rev. 2

    WellinTech KingSCADA Stack-Based Buffer Overflow

    WellinTech KingSCADA
    first Jan 9, 2014
  • High
    ICSA-14-098-01 2 CVEs rev. 2

    OSIsoft PI Interface for DNP3 Improper Input Validation

    OSIsoft
    first Jan 9, 2014
  • Medium max 5.0
    ICSA-14-093-01 1 CVE rev. 2

    Schneider Electric OPC Factory Server Buffer Overflow

    Schneider Electric
    first Jan 4, 2014
  • High max 7.5
    ICSA-14-091-01 1 CVE rev. 2

    Ecava IntegraXor Guest Account Information Disclosure Vulnerability

    Ecava
    first Jan 2, 2014
  • Medium
    ICSA-14-087-01A 1 CVE rev. 2

    Siemens ROS Improper Input Validation (Update A)

    Siemens
    first Dec 29, 2014
  • High max 7.5
    ICSA-14-079-03 10 CVEs rev. 2

    Advantech WebAccess Vulnerabilities

    Advantech
    first Dec 21, 2014
  • High
    ICSA-14-079-02 6 CVEs rev. 2

    Siemens SIMATIC S7-1200 Vulnerabilities

    Siemens
    first Dec 21, 2014
  • High
    ICSA-14-079-01 2 CVEs rev. 2

    Siemens SIMATIC S7-1200 Improper Input Validation Vulnerabilities

    Siemens
    first Dec 21, 2014
  • High
    ICSA-14-073-01 9 CVEs rev. 2

    Siemens SIMATIC S7-1500 CPU Firmware Vulnerabilities

    Siemens
    first Dec 15, 2014
  • Medium max 6.8
    ICSA-14-072-01 1 CVE rev. 2

    Schneider Electric StruxureWare SCADA Expert ClearSCADA Parsing Vulnerability

    Schneider Electric
    first Dec 14, 2014
  • Critical max 9.3
    ICSA-14-070-01A 4 CVEs rev. 2

    Yokogawa CENTUM CS 3000 Vulnerabilities (Update A)

    Yokogawa
    first Dec 12, 2014
  • Medium max 6.8
    ICSA-14-058-02 1 CVE rev. 2

    Schneider Electric OFS Buffer Overflow Vulnerability

    Schneider Electric
    first Nov 30, 2014
  • Medium max 5.9
    ICSA-14-058-01 1 CVE rev. 2

    Schneider Electric Floating License Manager Vulnerability

    Schneider Electric
    first Nov 30, 2014
  • High
    ICSA-14-051-04 1 CVE rev. 2

    NTP Reflection Attack

    NTP Project
    first Nov 23, 2014
  • Low
    ICSA-14-051-03B 1 CVE rev. 2

    Siemens RuggedCom Uncontrolled Resource Consumption Vulnerability (Update B)

    Siemens
    first Nov 23, 2014
  • Critical
    ICSA-14-051-02 1 CVE rev. 2

    Mitsubishi Electric Automation MC-WorX Suite Unsecure ActiveX Control

    Mitsubishi Electric
    first Nov 23, 2014
  • Critical max 9.3
    ICSA-14-051-01 1 CVE rev. 2

    ICONICS GENESIS32 Insecure ActiveX Control

    ICONICS
    first Nov 23, 2014
  • Critical
    ICSA-14-035-01 4 CVEs rev. 2

    Siemens SIMATIC WinCC OA Multiple Vulnerabilities

    Siemens
    first Nov 7, 2014
  • High max 7.1
    ICSA-14-030-01 1 CVE rev. 2

    3S CoDeSys Runtime Toolkit NULL Pointer Dereference

    3S
    first Nov 2, 2014
  • High max 7.5
    ICSA-14-023-01 1 CVE rev. 2

    GE Proficy Vulnerabilities

    GE
    first Oct 26, 2014
  • Medium max 6.3
    ICSA-14-021-01 1 CVE rev. 2

    Rockwell RSLogix 5000 Password Vulnerability

    Rockwell Automation
    first Oct 24, 2014
  • High
    ICSA-11-175-01 1 CVE rev. 2

    Rockwell FactoryTalk Diag Viewer Memory Corruption

    Rockwell Automation
    first Mar 27, 2011
  • Critical
    ICSA-11-167-01 1 CVE rev. 2

    Sunway Force Control

    Sunway ForceControl Technology
    first Mar 19, 2011
  • Critical
    ICSA-11-131-01 1 CVE rev. 2

    ICONICS GENESIS32 and BizViz ActiveX Stack Overflow

    ICONICS
    first Feb 11, 2011
  • Critical
    ICSA-11-119-01 1 CVE rev. 2

    7-Technologies IGSS ODBC Remote Stack Overflow

    7T
    first Jan 30, 2011
  • Critical
    ICSA-11-094-01 1 CVE rev. 2

    Wonderware InBatch Client ActiveX Buffer Overflow

    Invensys
    first Jan 5, 2011
  • Critical
    ICSA-11-082-01 1 CVE rev. 2

    Ecava IntegraXor SQL

    Ecava
    first Dec 24, 2011
  • Critical
    ICSA-11-074-01 1 CVE rev. 2

    WellinTech KingView 6.53 KVWebSvr ActiveX

    WellinTech
    first Dec 16, 2011
  • High
    ICSA-11-069-01B 1 CVE rev. 2

    Samsung Data Management Server (Update B)

    Samsung
    first Dec 11, 2011