Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,105 results · Feed

  • Critical
    ICSA-11-018-02 1 CVE rev. 2

    7-Technologies IGSS 8 ODBC Server Remote Heap Corruption

    7-Technologies
    first Oct 21, 2011
  • High
    ICSA-11-017-02 1 CVE rev. 2

    Sielco Sistemi WinLog Stack Overflow

    Sielco
    first Oct 20, 2011
  • Critical
    ICSA-11-017-01 1 CVE rev. 2

    WellinTech Kingview 6.53 Remote Heap Overflow

    WellinTech
    first Oct 20, 2011
  • Critical max 9.1
    ICSA-16-278-02 2 CVEs rev. 2

    Beckhoff Embedded PC Images and TwinCAT Components Vulnerabilities

    Beckhoff
    first Jul 8, 2016
  • Critical
    ICSA-16-278-01 1 CVE rev. 2

    INDAS Web SCADA Path Traversal Vulnerability

    INDAS
    first Jul 8, 2016
  • High
    ICSA-16-273-01 2 CVEs rev. 2

    American Auto-Matrix Front-End Solutions Vulnerabilities

    American Auto-Matrix
    first Jul 3, 2016
  • Medium
    ICSA-16-271-01 1 CVE rev. 2

    Siemens SCALANCE M-800/S615 Web Vulnerability

    Siemens
    first Jul 1, 2016
  • High
    ICSA-16-264-01 1 CVE rev. 2

    Moxa Active OPC Server Unquoted Service Path Escalation Vulnerability

    Moxa
    first Jun 24, 2016
  • Medium
    ICSA-16-259-03 1 CVE rev. 2

    Trane Tracer SC Sensitive Information Exposure Vulnerability

    Trane
    first Jun 19, 2016
  • High
    ICSA-16-259-02 1 CVE rev. 2

    ABB DataManagerPro Credential Management Vulnerability

    ABB
    first Jun 19, 2016
  • High
    ICSA-16-259-01 1 CVE rev. 2

    Yokogawa STARDOM Authentication Bypass Vulnerability

    Yokogawa
    first Jun 19, 2016
  • Critical
    ICSA-16-252-01 1 CVE rev. 2

    GE Bently Nevada 3500/22M Improper Authorization Vulnerability

    GE
    first Jun 12, 2016
  • Medium
    ICSA-16-250-01 3 CVEs rev. 2

    Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities

    Siemens
    first Jun 10, 2016
  • Critical
    ICSA-16-236-01A 3 CVEs rev. 2

    Moxa OnCell Vulnerabilities (Update A)

    Moxa
    first May 27, 2016
  • High
    ICSA-16-224-02A 1 CVE rev. 2

    Rockwell Automation RSLogix 500 and RSLogix Micro File Parser Buffer Overflow Vulnerability (Update A)

    Rockwell Automation
    first May 15, 2016
  • High max 7.3
    ICSA-16-224-01 1 CVE rev. 2

    Rockwell Automation MicroLogix 1400 SNMP Credentials Vulnerability

    Rockwell Automation
    first May 15, 2016
  • High
    ICSA-16-215-02A 1 CVE rev. 2

    Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)

    Siemens
    first May 6, 2016
  • Critical
    ICSA-16-215-01 1 CVE rev. 2

    Moxa SoftCMS SQL Injection Vulnerability

    Moxa
    first May 6, 2016
  • Medium
    ICSA-16-208-03 1 CVE rev. 2

    Siemens SINEMA Remote Connect Server Cross-site Scripting Vulnerability

    Siemens
    first Apr 29, 2016
  • Medium
    ICSA-16-208-02 1 CVE rev. 2

    Siemens SIMATIC NET PC-Software Denial-of-Service Vulnerability

    Siemens
    first Apr 29, 2016
  • High
    ICSA-16-196-03 1 CVE rev. 2

    Schneider Electric SoMachine HVAC Unsafe ActiveX Control Vulnerability

    Schneider Electric
    first Apr 17, 2016
  • Critical
    ICSA-16-196-02 1 CVE rev. 2

    Moxa MGate Authentication Bypass Vulnerability

    Moxa
    first Apr 17, 2016
  • Medium
    ICSA-16-194-02 1 CVE rev. 2

    GE Proficy HMI SCADA CIMPLICITY Privilege Management Vulnerability

    GE
    first Apr 15, 2016
  • High
    ICSA-16-194-01 3 CVEs rev. 2

    Tollgrade Smart Grid EMS LightHouse Vulnerabilities

    Tollgrade
    first Apr 15, 2016
  • High
    ICSA-16-189-02 1 CVE rev. 2

    Moxa Device Server Web Console Authorization Bypass Vulnerability

    Moxa
    first Apr 10, 2016
  • Medium
    ICSA-16-187-01 2 CVEs rev. 2

    Rexroth Bosch BLADEcontrol-WebVIS Vulnerabilities

    Bosch Rexroth
    first Apr 8, 2016
  • Low
    ICSA-16-182-02B 2 CVEs rev. 2

    Siemens SICAM PAS Information Disclosure Vulnerabilities (Update B)

    Siemens
    first Apr 3, 2016
  • High
    ICSA-16-182-01 2 CVEs rev. 2

    Eaton ELCSoft Programming Software Memory Vulnerabilities

    Eaton
    first Apr 3, 2016
  • High
    ICSA-16-175-03 3 CVEs rev. 2

    Meinberg NTP Time Server Vulnerabilities

    Meinberg
    first Mar 27, 2016
  • Medium
    ICSA-16-175-01 1 CVE rev. 2

    Rockwell Automation Allen-Bradley Stratix 5400 and 5410 Packet Corruption Vulnerability

    Rockwell Automation
    first Mar 27, 2016
  • High
    ICSA-16-173-03 2 CVEs rev. 2

    Rockwell Automation FactoryTalk EnergyMetrix Vulnerabilities

    Rockwell Automation
    first Mar 25, 2016
  • Medium
    ICSA-16-173-02 1 CVE rev. 2

    Schneider Electric PowerLogic PM8ECC Cross-site Scripting Vulnerability

    Schneider Electric
    first Mar 25, 2016
  • Medium
    ICSA-16-173-01A 3 CVEs rev. 2

    Advantech WebAccess ActiveX Vulnerabilities (Update A)

    Advantech
    first Mar 25, 2016
  • High
    ICSA-16-168-01 1 CVE rev. 2

    Moxa PT-7728 Series Switch Improper Authorization Vulnerability

    Moxa
    first Mar 20, 2016
  • Medium
    ICSA-16-166-02 1 CVE rev. 2

    OSIsoft PI AF Server Input Validation Vulnerability

    OSIsoft
    first Mar 18, 2016
  • Medium
    ICSA-16-166-01 1 CVE rev. 2

    OSIsoft PI SQL Data Access Server Input Validation Vulnerability

    OSIsoft
    first Mar 18, 2016
  • Low
    ICSA-16-161-02 1 CVE rev. 2

    Siemens SIMATIC WinCC Flexible Weakly Protected Credentials Vulnerability

    Siemens
    first Mar 13, 2016
  • High
    ICSA-16-161-01 1 CVE rev. 2

    Siemens SIMATIC S7-300 Denial-of-Service Vulnerability

    Siemens
    first Mar 13, 2016
  • Critical
    ICSA-12-030-01A 12 CVEs rev. 2

    Siemens SIMATIC WinCC Vulnerabilities

    Siemens
    first Nov 2, 2012
  • Medium
    ICSA-12-024-02 3 CVEs rev. 2

    MICROSYS PROMOTIC Vulnerabilities

    MICROSYS
    first Oct 27, 2012