Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,105 results · Feed

  • High
    ICSA-14-010-01 1 CVE rev. 2

    MatrikonOPC Improper Input Validation

    MatrikonOPC
    first Oct 13, 2014
  • High max 7.5
    ICSA-14-008-01 1 CVE rev. 2

    Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability

    Ecava Sdn Bhd
    first Oct 11, 2014
  • Critical
    ICSA-14-007-01B 2 CVEs rev. 2

    Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B)

    Sierra Wireless
    first Oct 10, 2014
  • Medium
    ICSA-14-006-01 1 CVE rev. 2

    Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability

    Schneider Electric
    first Oct 9, 2014
  • High
    ICSA-13-350-01A 1 CVE rev. 2

    Schneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A)

    Schneider Electric
    first Sep 18, 2013
  • High
    ICSA-13-347-01 1 CVE rev. 2

    Siemens COMOS Privilege Escalation

    Siemens
    first Sep 15, 2013
  • High
    ICSA-13-346-02 1 CVE rev. 2

    Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation

    Cooper Power Systems
    first Sep 14, 2013
  • High
    ICSA-13-346-01 2 CVEs rev. 2

    Cooper Power Systems Improper Input Validation Vulnerability

    Cooper Power Systems
    first Sep 14, 2013
  • High
    ICSA-13-340-01 2 CVEs rev. 2

    RuggedCom ROS Multiple Vulnerabilities

    Simens
    first Sep 8, 2013
  • Critical
    ICSA-13-338-01 1 CVE rev. 2

    Siemens SINAMICS S/G Authentication Bypass Vulnerability

    Siemens
    first Sep 6, 2013
  • Medium
    ICSA-13-337-01 1 CVE rev. 2

    Elecsys Director Gateway Improper Input Validation Vulnerability

    Elecsys
    first Sep 5, 2013
  • High
    ICSA-13-329-01 1 CVE rev. 2

    Triangle Research Nano-10 PLC Improper Input Validation

    TRi
    first Aug 28, 2013
  • High
    ICSA-13-297-02 2 CVEs rev. 2

    GE Proficy DNP3 Improper Input Validation

    GE
    first Jul 27, 2013
  • High
    ICSA-13-297-01 2 CVEs rev. 2

    Catapult Software DNP3 Driver Improper Input Validation

    Catapult Software
    first Jul 27, 2013
  • Medium
    ICSA-13-295-01 2 CVEs rev. 2

    WellinTech KingView ActiveX Vulnerabilities

    WellinTech
    first Jul 25, 2013
  • High
    ICSA-13-282-01A 2 CVEs rev. 2

    Alstom e-Terracontrol DNP3 Master Improper Input Validation (Update A)

    Alstom
    first Jul 12, 2013
  • Critical
    ICSA-13-277-01 1 CVE rev. 2

    Philips Xper Buffer Overflow Vulnerability

    Philips
    first Jul 7, 2013
  • Medium
    ICSA-13-276-01 1 CVE rev. 2

    Invensys Wonderware InTouch Improper Input Validation Vulnerability

    Invensys
    first Jul 6, 2013
  • Critical
    ICSA-13-274-01 1 CVE rev. 2

    Siemens SCALANCE X-200 Authentication Bypass Vulnerability

    Siemens
    first Jul 4, 2013
  • Critical
    ICSA-13-259-01B 5 CVEs rev. 2

    Emerson ROC800 Multiple Vulnerabilities (Update B)

    Emerson Process Management
    first Jun 19, 2013
  • Critical
    ICSA-13-259-01A 5 CVEs rev. 2

    Emerson ROC800 Multiple Vulnerabilities (Update A)

    Emerson Process Management
    first Jun 19, 2013
  • High
    ICSA-13-252-01 1 CVE rev. 2

    SUBNET Solutions Inc. SubSTATION Server DNP3 Outstation Improper Input Validation

    Subnet Solutions
    first Jun 12, 2013
  • Critical
    ICSA-13-248-01 1 CVE rev. 2

    ProSoft Technology RadioLinx ControlScape PRNG Vulnerability

    ProSoft Technology
    first Jun 8, 2013
  • High
    ICSA-13-240-01 2 CVEs rev. 2

    Triangle MicroWorks Improper Input Validation

    Triangle MicroWorks
    first May 31, 2013
  • High
    ICSA-13-234-02 1 CVE rev. 2

    Top Server OPC Improper Input Validation Vulnerability

    Software Toolbox
    first May 25, 2013
  • High
    ICSA-13-234-01 1 CVE rev. 2

    Schneider Electric Trio J-Series Radio Encryption

    Schneider Electric
    first May 25, 2013
  • High
    ICSA-13-233-01 1 CVE rev. 2

    Siemens COMOS Privilege Escalation Vulnerability

    Siemens
    first May 24, 2013
  • Critical
    ICSA-13-231-01B 1 CVE rev. 2

    Sixnet Universal Protocol Undocumented Function Codes (Update B)

    Sixnet
    first May 22, 2013
  • High
    ICSA-13-226-01 1 CVE rev. 2

    Kepware Technologies Improper Input Validation Vulnerability

    Kepware
    first May 17, 2013
  • High
    ICSA-13-225-02 2 CVEs rev. 2

    OSIsoft Multiple Vulnerabilities

    OSIsoft
    first May 16, 2013
  • Medium
    ICSA-13-225-01 1 CVE rev. 2

    Advantech WebAccess Cross-Site Scripting

    Advantech
    first May 16, 2013
  • Medium
    ICSA-13-217-02 1 CVE rev. 2

    Schneider Electric Vijeo Citect, CitectSCADA, PowerLogic SCADA Vulnerability

    Schneider Electric
    first May 8, 2013
  • High
    ICSA-13-217-01 1 CVE rev. 2

    MOXA Weak Entropy in DSA Keys Vulnerability

    Moxa
    first May 8, 2013
  • High
    ICSA-13-213-04A 1 CVE rev. 2

    MatrikonOPC SCADA DNP3 Master Station Improper Input Validation

    MatrikonOPC
    first May 4, 2013
  • High
    ICSA-13-213-03 1 CVE rev. 2

    IOServer Master Station Improper Input Validation

    IOServer
    first May 4, 2013
  • Medium
    ICSA-13-213-02 2 CVEs rev. 2

    Siemens WinCC TIA Portal Vulnerabilities

    Siemens
    first May 4, 2013
  • High
    ICSA-13-189-02 1 CVE rev. 2

    Triangle Research Nano 10 PLC Denial of Service

    Triangle Research International, Inc.’s (Tri Inc.)
    first Apr 10, 2013
  • Medium
    ICSA-15-244-01 1 CVE rev. 2

    Siemens RUGGEDCOM ROS IP Forwarding Vulnerability

    Siemens
    first Jun 4, 2015
  • High
    ICSA-15-246-03 1 CVE rev. 2

    Moxa Industrial Managed Switch Vulnerabilities

    Moxa
    first Jun 6, 2015
  • Low
    ICSA-15-246-02 2 CVEs rev. 2

    Schneider Electric Modicon PLC Vulnerabilities

    Schneider Electric
    first Jun 6, 2015