Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,105 results · Feed

  • Medium max 6.1
    ICSA-15-286-01 1 CVE rev. 2

    Nordex NC2 XSS Vulnerability

    Nordex
    first Jul 16, 2015
  • Critical
    ICSA-15-274-02A 3 CVEs rev. 2

    Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A)

    Unitronics
    first Jul 4, 2015
  • Critical max 10.0
    ICSA-15-274-01 3 CVEs rev. 2

    Omron Multiple Product Vulnerabilities

    Omron
    first Jul 4, 2015
  • Critical
    ICSA-15-272-01 1 CVE rev. 2

    Honeywell Experion PKS Directory Traversal Vulnerability

    Honeywell
    first Jul 2, 2015
  • High
    ICSA-15-267-01 1 CVE rev. 2

    Endress+Hauser Fieldcare/CodeWrights HART Comm DTM XML Injection Vulnerability

    Endress+Hauser
    first Jun 27, 2015
  • Critical
    ICSA-15-265-03 7 CVEs rev. 2

    Janitza UMG Power Quality Measuring Products Vulnerabilities

    Janitza
    first Jun 25, 2015
  • Critical
    ICSA-15-265-02 3 CVEs rev. 2

    IBC Solar ServeMaster Source Code Vulnerability

    IBC Solar
    first Jun 25, 2015
  • High
    ICSA-15-265-01 2 CVEs rev. 2

    Resource Data Management Privilege Escalation Vulnerability

    Resource Data Management
    first Jun 25, 2015
  • High
    ICSA-15-260-01 1 CVE rev. 2

    Harman-Kardon Uconnect Vulnerability

    Fiat-Chrysler Automobile US (FCA US)
    first Jun 20, 2015
  • Medium
    ICSA-15-258-04 1 CVE rev. 2

    Advantech WebAccess Stack-Based Buffer Overflow Vulnerability

    Advantech
    first Jun 18, 2015
  • Critical
    ICSA-15-237-02 1 CVE rev. 2

    EasyIO-30P-SF Hard-Coded Credential Vulnerability

    EasyIO
    first May 28, 2015
  • Medium
    ICSA-15-232-01 1 CVE rev. 2

    Everest Software PeakHMI Pointer Dereference Vulnerabilities

    EVerest
    first May 23, 2015
  • Medium max 7.5
    ICSA-14-105-02A 1 CVE 1 exploited rev. 2

    Innominate mGuard OpenSSL HeartBleed Vulnerability

    Innominate
    first Jan 16, 2014
  • Critical max 10.0
    ICSA-14-084-01 4 CVEs rev. 2

    Festo CECX-X-(C1/M1) Controller Vulnerabilities

    Festo
    first Dec 26, 2014
  • High
    ICSA-13-344-01 2 CVEs rev. 2

    WellinTech Vulnerabilities

    WellinTech
    first Sep 12, 2013
  • Critical
    ICSA-13-213-01 2 CVEs rev. 2

    Siemens Scalance W-7xx Product Family Multiple Vulnerabilities

    Siemens
    first May 4, 2013
  • Critical
    ICSA-13-142-01 1 CVE rev. 2

    3S CODESYS Gateway Use After Free

    3S-Smart Software Solutions
    first Feb 23, 2013
  • Critical
    ICSA-13-136-01 1 CVE rev. 2

    TURCK BL20 and BL67 Programmable Gateway Hard-Coded User Accounts

    TURCK
    first Feb 17, 2013
  • High
    ICSA-13-116-01 1 CVE rev. 2

    Galil RIO-47100 Improper Input Validation

    Galil
    first Jan 28, 2013
  • Critical
    ICSA-13-084-01 1 CVE rev. 2

    Siemens CP 1604 and CP 1616 Improper Access Control

    Siemens
    first Dec 27, 2013
  • Critical max 10.0
    ICSA-15-008-02 1 CVE rev. 2

    Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow Vulnerability

    Schneider Electric
    first Oct 11, 2015
  • Low
    ICSA-15-008-01A 1 CVE rev. 2

    Emerson HART DTM Vulnerability

    Emerson Process Management
    first Oct 11, 2015
  • High max 8.5
    ICSA-14-352-02 1 CVE rev. 2

    Innominate mGuard Privilege Escalation Vulnerability

    Innominate
    first Sep 20, 2014
  • Critical
    ICSA-14-352-01 5 CVEs rev. 2

    Honeywell Experion PKS Vulnerabilities

    Honeywell
    first Sep 20, 2014
  • Critical
    ICSA-14-350-02 2 CVEs rev. 2

    Johnson Controls Metasys Vulnerabilities

    Johnson Controls
    first Sep 18, 2014
  • Critical max 10.0
    ICSA-14-350-01 5 CVEs rev. 2

    Schneider Electric ProClima Command Injection Vulnerabilities

    Schneider Electric
    first Sep 18, 2014
  • Medium max 5.4
    ICSA-14-345-01 1 CVE rev. 2

    Arbiter Systems 1094B GPS Clock Spoofing Vulnerability

    Arbiter Systems
    first Sep 13, 2014
  • High max 7.8
    ICSA-14-343-02 1 CVE rev. 2

    Trihedral Engineering Limited VTScada Integer Overflow Vulnerability

    Trihedral Engineering
    first Sep 11, 2014
  • Low
    ICSA-14-343-01 1 CVE rev. 2

    Yokogawa FAST/TOOLS XML External Entity

    Yokogawa
    first Sep 11, 2014
  • Critical
    ICSA-14-329-02D 2 CVEs rev. 2

    Siemens SIMATIC WinCC, PCS7, and TIA Portal Vulnerabilities

    Siemens
    first Aug 28, 2014
  • Medium
    ICSA-14-329-01 1 CVE rev. 2

    MatrikonOPC for DNP Unhandled C++ Exception

    MatrikonOPC
    first Aug 28, 2014
  • High
    ICSA-14-324-01 1 CVE rev. 2

    Advantech WebAccess Stack-based Buffer Overflow

    Advantech
    first Aug 23, 2014
  • Critical
    ICSA-14-308-01 1 CVE rev. 2

    ABB RobotStudio and Test Signal Viewer DLL Hijack Vulnerability

    ABB
    first Aug 7, 2014
  • Medium
    ICSA-14-303-02 1 CVE rev. 2

    Elipse SCADA DNP3 Denial of Service

    Elipse
    first Aug 2, 2014
  • High max 7.5
    ICSA-14-303-01 1 CVE rev. 2

    Nordex NC2 XSS Vulnerability

    Nordex
    first Aug 2, 2014
  • High
    ICSA-14-294-01 1 CVE rev. 2

    Rockwell Automation Connected Components Workbench ActiveX Component Vulnerabilities

    Rockwell Automation
    first Jul 24, 2014
  • Medium max 6.6
    ICSA-14-289-02 1 CVE rev. 2

    GE Proficy HMI/SCADA CIMPLICITY CimView Memory Access Violation

    GE
    first Jul 19, 2014
  • High
    ICSA-14-289-01 1 CVE rev. 2

    IOServer Resource Exhaustion Vulnerability

    IOServer
    first Jul 19, 2014
  • Critical
    ICSA-14-288-01 4 CVEs rev. 2

    CareFusion Pyxis SupplyStation System Vulnerabilities

    CareFusion
    first Jul 18, 2014
  • High
    ICSA-14-287-01 1 CVE rev. 2

    GE Proficy HMI/SCADA DNP3 Driver Input Validation

    GE
    first Jul 17, 2014