Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,105 results · Feed

  • High max 7.5
    ICSA-14-275-02 2 CVEs rev. 2

    Accuenergy Acuvim II Authentication Vulnerabilities

    Accuenergy Acuvim II
    first Jul 5, 2014
  • High max 7.5
    ICSA-14-275-01 1 CVE rev. 2

    Meinberg Radio Clocks LANTIME M-Series XSS

    Meinberg Radio Clocks
    first Jul 5, 2014
  • Medium max 4.3
    ICSA-14-269-02 1 CVE rev. 2

    Fox DataDiode Proxy Server CSRF Vulnerability

    Fox-IT
    first Jun 29, 2014
  • Medium
    ICSA-14-261-01 8 CVEs rev. 2

    Advantech WebAccess Vulnerabilities

    Advantech
    first Jun 21, 2014
  • Medium
    ICSA-14-260-01A 1 CVE rev. 2

    Yokogawa CENTUM and Exaopc Vulnerability (Update A)

    Yokogawa
    first Jun 20, 2014
  • Medium max 6.4
    ICSA-14-259-01A 3 CVEs rev. 2

    Schneider Electric SCADA Expert ClearSCADA Vulnerabilities (Update A)

    Schneider Electric
    first Jun 19, 2014
  • High max 7.1
    ICSA-14-254-02 1 CVE rev. 2

    Rockwell Micrologix 1400 DNP3 DOS Vulnerability

    Rockwell Automation
    first Jun 14, 2014
  • Medium max 4.1
    ICSA-14-254-01 1 CVE rev. 2

    Schneider Electric VAMPSET Buffer Overflow

    Schneider Electric
    first Jun 14, 2014
  • Medium max 6.5
    ICSA-14-247-01A 2 CVEs rev. 2

    Sensys Networks Traffic Sensor Vulnerabilities (Update A)

    Sensys Networks
    first Jun 7, 2014
  • High max 7.1
    ICSA-14-238-01 2 CVEs rev. 2

    CG Automation Improper Input Validation

    CG Automation
    first May 29, 2014
  • High
    ICSA-14-226-01 1 CVE rev. 2

    Siemens SIMATIC S7-1500 CPU Denial of Service

    Siemens
    first May 17, 2014
  • High max 8.3
    ICSA-14-224-01 4 CVEs rev. 2

    Ecava Integraxor SCADA Server Vulnerabilities

    Ecava
    first May 15, 2014
  • Medium max 4.6
    ICSA-14-203-01 2 CVEs rev. 2

    Omron NS Series HMI Vulnerabilities

    Omron
    first Apr 24, 2014
  • Critical max 9.0
    ICSA-14-198-02 5 CVEs rev. 2

    Advantech WebAccess Vulnerabilities

    Advantech
    first Apr 19, 2014
  • High
    ICSA-14-198-01 1 CVE rev. 2

    Cogent DataHub Code Injection Vulnerability

    Cogent
    first Apr 19, 2014
  • High max 8.3
    ICSA-14-196-01 1 CVE rev. 2

    SubSTATION Server Telegyr 8979 Master Vulnerabilities

    Subnet Solutions
    first Apr 17, 2014
  • Medium max 4.3
    ICSA-14-189-02 1 CVE rev. 2

    Innominate mGuard Unauthorized Leakage of System Data

    Innominate
    first Apr 10, 2014
  • Critical
    ICSA-13-077-01B 2 CVEs rev. 2

    Schneider Electric PLCs Vulnerabilities

    Schneider Electric
    first Dec 20, 2013
  • Critical
    ICSA-13-016-01 1 CVE rev. 2

    Schneider Electric Authenticated Communication Risk Vulnerability

    Schneider Electric
    first Oct 20, 2013
  • Medium
    ICSA-13-014-01 1 CVE rev. 2

    Siemens SIMATIC RF Manager ActiveX Buffer Overflow

    Siemens
    first Oct 18, 2013
  • Critical max 9.8
    ICSA-13-011-03 8 CVEs rev. 2

    Rockwell Automation ControlLogix PLC Vulnerabilities

    Rockwell Automation
    first Oct 15, 2013
  • Medium
    ICSA-12-205-02 1 CVE rev. 2

    Siemens SIMATIC STEP 7 DLL Vulnerability

    Siemens
    first Apr 26, 2012
  • Critical
    ICSA-12-185-01 5 CVEs rev. 2

    WellinTech KingView Multiple Vulnerabilities

    WellinTech
    first Apr 6, 2012
  • Medium
    ICSA-12-177-02 1 CVE rev. 2

    Invensys Wonderware InTouch 10 DLL Hijack

    Invensys
    first Mar 29, 2012
  • High
    ICSA-12-167-01 1 CVE rev. 2

    Innominate MGuard Weak HTTPS and SSH Keys

    Innominate
    first Mar 19, 2012
  • Critical
    ICSA-12-137-02 1 CVE rev. 2

    Advantech Studio ISSymbol ActiveX Buffer Overflow

    Advantech
    first Feb 17, 2012
  • High
    ICSA-12-131-01 1 CVE rev. 2

    Progea Movicon Memory Corruption Vulnerability

    Progea
    first Feb 11, 2012
  • Medium
    ICSA-15-069-04A 1 CVE rev. 2

    Elipse E3 Process Control Vulnerability (Update A)

    Elipse
    first Dec 11, 2015
  • Medium
    ICSA-15-069-04 1 CVE rev. 2

    Elipse E3 Process Control Vulnerability

    Elipse
    first Dec 11, 2015
  • Critical
    ICSA-15-069-03 3 CVEs rev. 2

    SCADA Engine BACnet OPC Server Vulnerabilities

    SCADA Engine
    first Dec 11, 2015
  • Low
    ICSA-15-069-02 1 CVE rev. 2

    ABB HART Device DTM Vulnerability

    ABB
    first Dec 11, 2015
  • Critical
    ICSA-15-069-01 1 CVE rev. 2

    Cimon CmnView DLL Hijacking Vulnerability

    CIMON
    first Dec 11, 2015
  • High max 7.5
    ICSA-15-064-04 1 CVE rev. 2

    Siemens SIMATIC S7-300 CPU Denial-of-Service Vulnerability

    Siemens
    first Dec 6, 2015
  • Medium
    ICSA-15-064-02A 1 CVE rev. 2

    Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A)

    Siemens
    first Dec 6, 2015
  • Medium
    ICSA-15-064-02 1 CVE rev. 2

    Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths

    Siemens
    first Dec 6, 2015
  • Medium
    ICSA-15-064-01A 1 CVE rev. 2

    Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A)

    Siemens
    first Dec 6, 2015
  • Medium
    ICSA-15-064-01 1 CVE rev. 2

    Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability

    Siemens
    first Dec 6, 2015
  • High
    ICSA-15-062-01 1 CVE rev. 2

    MICROSYS PROMOTIC Stack Buffer Overflow

    MICROSYS
    first Dec 4, 2015
  • Critical
    ICSA-15-057-01 1 CVE rev. 2

    Network Vision IntraVue Code Injection Vulnerability

    Network Vision
    first Nov 29, 2015
  • Medium
    ICSA-15-055-03 1 CVE rev. 2

    Schneider Electric Invensys Positioner Buffer Overflow Vulnerability

    Schneider Electric
    first Nov 27, 2015