CISA ICS & IT advisories

4,105 results · Feed

• Low
  ICSA-15-176-02 1 CVE rev. 2

  PACTware Exceptional Conditions Vulnerability

  PACTware Consortium
  Jun 6, 2025

  first Mar 28, 2015
• Medium
  ICSA-15-176-01 1 CVE rev. 2

  Siemens Climatix BACnet/IP Communication Module Cross-site Scripting Vulnerability

  Siemens
  Jun 6, 2025

  first Mar 28, 2015
• High
  ICSA-15-174-01 1 CVE rev. 2

  Hospira Symbiq Infusion System Vulnerability

  Hospira
  Jun 6, 2025

  first Mar 26, 2015
• Critical
  ICSA-15-167-01 1 CVE rev. 2

  Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability

  Schneider Electric
  Jun 6, 2025

  first Mar 19, 2015
• Critical
  ICSA-15-162-01A 1 CVE rev. 2

  RLE Nova-Wind Turbine HMI Unsecure Credentials Vulnerability (Update A)

  RLE International
  Jun 6, 2025

  first Mar 14, 2015
• High
  ICSA-15-160-02 1 CVE rev. 2

  Sinapsi eSolar Light Plaintext Passwords Vulnerability

  Sinapsi
  Jun 6, 2025

  first Mar 12, 2015
• Critical
  ICSA-15-160-01A 1 CVE rev. 2

  N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A)

  N-Tron
  Jun 6, 2025

  first Mar 12, 2015
• Critical
  ICSA-15-155-01 1 CVE rev. 2

  XZERES 442SR Wind Turbine CSRF Vulnerability

  XZERES
  Jun 6, 2025

  first Mar 7, 2015
• High
  ICSA-15-153-02 1 CVE rev. 2

  Moxa SoftCMS Buffer Overflow Vulnerability

  Moxa
  Jun 6, 2025

  first Mar 5, 2015
• High
  ICSA-15-148-01 1 CVE rev. 2

  IDS RTU 850 Directory Traversal Vulnerability

  IDS
  Jun 6, 2025

  first Feb 28, 2015
• Medium
  ICSA-15-141-01A 1 CVE rev. 2

  Schneider Electric OFS Server Vulnerability (Update A)

  Schneider Electric
  Jun 6, 2025

  first Feb 21, 2015
• Medium
  ICSA-15-132-02 1 CVE rev. 2

  Rockwell Automation RSView32 Weak Encryption Algorithm on Passwords

  Rockwell Automation
  Jun 6, 2025

  first Feb 12, 2015
• Medium
  ICSA-15-132-01 1 CVE rev. 2

  Hospira LifeCare PCA Infusion System Vulnerabilities

  Hospira
  Jun 6, 2025

  first Feb 12, 2015
• Critical
  ICSA-15-125-01 1 CVE rev. 2

  Hospira LifeCare PCA Infusion System Vulnerabilities

  Hospira
  Jun 6, 2025

  first Feb 5, 2015
• Medium
  ICSA-15-120-01 1 CVE rev. 2

  Opto 22 Multiple Product Vulnerabilities

  Opto 22
  Jun 6, 2025

  first Jan 31, 2015
• Medium
  ICSA-15-111-02 1 CVE rev. 2

  Rockwell Automation RSLinx Classic Vulnerability

  Rockwell Automation
  Jun 6, 2025

  first Jan 22, 2015
• Medium
  ICSA-15-111-01 1 CVE rev. 2

  Emerson AMS Device Manager SQL Injection Vulnerability

  Emerson
  Jun 6, 2025

  first Jan 22, 2015
• High
  ICSA-15-097-01 1 CVE rev. 2

  Moxa VPort ActiveX SDK Plus Stack-Based Buffer Overflow Vulnerability

  Moxa
  Jun 6, 2025

  first Jan 8, 2015
• Medium
  ICSA-15-092-01 1 CVE rev. 2

  Schneider Electric VAMPSET Software Buffer Overflow Vulnerability

  Schneider Electric
  Jun 6, 2025

  first Jan 3, 2015
• Critical max 10.0
  ICSA-15-090-03 1 CVE rev. 2

  Hospira MedNet Vulnerabilitie

  Hospira
  Jun 6, 2025

  first Jan 1, 2015
• Medium
  ICSA-15-090-02 1 CVE rev. 2

  Ecava IntegraXor DLL Vulnerabilities

  SCADA Server
  Jun 6, 2025

  first Jan 1, 2015
• Critical
  ICSA-15-090-01 1 CVE rev. 2

  Inductive Automation Ignition Vulnerabilities

  Inductive Automation
  Jun 6, 2025

  first Jan 1, 2015
• Medium
  ICSA-15-085-01A 1 CVE rev. 2

  Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities (Update A)

  Schneider Electric
  Jun 6, 2025

  first Dec 27, 2015
• Critical
  ICSA-15-076-02 1 CVE rev. 2

  Honeywell XL Web Controller Directory Traversal Vulnerability

  Honeywell
  Jun 6, 2025

  first Dec 18, 2015
• Critical
  ICSA-15-076-01 1 CVE rev. 2

  XZERES 442SR Wind Turbine Vulnerability

  XZERES
  Jun 6, 2025

  first Dec 18, 2015
• High
  ICSA-15-071-01 1 CVE rev. 2

  Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability

  Schneider Electric
  Jun 6, 2025

  first Dec 13, 2015
• High max 7.5
  ICSA-15-027-02 1 CVE rev. 2

  Schneider Electric Multiple Products Buffer Overflow Vulnerability

  Schneider Electric
  Jun 6, 2025

  first Oct 30, 2015
• High max 7.6
  ICSA-15-006-01 1 CVE rev. 2

  Eaton Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet Vulnerability

  Eaton Cooper Power Systems
  Jun 6, 2025

  first Oct 9, 2015
• Critical
  ICSA-14-353-01C 6 CVEs rev. 2

  Network Time Protocol Vulnerabilities

  Arbiter Systems; Innomoninate; Meinberg; Siemens; Wind River System
  Jun 6, 2025

  first Sep 21, 2014
• Critical max 10.0
  ICSA-14-273-01 1 CVE rev. 2

  SchneiderWEB Server Directory Traversal Vulnerability

  Schneider Electric
  Jun 6, 2025

  first Jul 3, 2014
• Critical max 9.8
  ICSA-14-269-01A 1 CVE 1 exploited rev. 2

  Bash Command Injection Vulnerability

  ABB ; Cisco ; Digi ; eWON ; Meinberg ; Moxa ; Red Lion; Siemens
  Jun 6, 2025

  first Jun 29, 2014
• High max 7.8
  ICSA-14-238-02 5 CVEs rev. 2

  Schneider Electric Wonderware Vulnerabilities

  Schneider Electric
  Jun 6, 2025

  first May 29, 2014
• Critical max 10.0
  ICSA-14-205-01 1 CVE rev. 2

  Morpho Itemiser 3 Hard-Coded Credential

  Morpho
  Jun 6, 2025

  first Apr 26, 2014
• High max 7.8
  ICSA-14-202-01A 3 CVEs rev. 2

  OleumTech WIO Family Vulnerabilities

  OleumTech
  Jun 6, 2025

  first Apr 23, 2014
• Medium
  ICSA-14-114-02 2 CVEs rev. 2

  Siemens SIMATIC S7-1200 CPU Web Vulnerabilities

  Siemens
  Jun 6, 2025

  first Jan 25, 2014
• Medium max 7.5
  ICSA-14-114-01 1 CVE 1 exploited rev. 2

  Certec atvise scada OpenSSL Heartbleed Vulnerability

  Certec
  Jun 6, 2025

  first Jan 25, 2014
• High max 9.8
  ICSA-14-107-02 1 CVE 1 exploited rev. 2

  InduSoft Web Studio Directory Traversal Vulnerability

  InduSoft
  Jun 6, 2025

  first Jan 18, 2014
• Critical
  ICSA-14-107-01 3 CVEs rev. 2

  Siemens SINEMA Vulnerabilities

  Siemens
  Jun 6, 2025

  first Jan 18, 2014
• High max 7.8
  ICSA-14-016-01 1 CVE rev. 2

  Ecava IntegraXor Buffer Overflow Vulnerability

  Ecava Sdn Bhd
  Jun 6, 2025

  first Oct 19, 2014
• Medium
  ICSA-14-014-01 1 CVE rev. 2

  Schneider Electric ClearSCADA Uncontrolled Resource Consumption Vulnerability

  Schneider Electric
  Jun 6, 2025

  first Oct 17, 2014