Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,105 results · Feed

  • High
    ICSA-13-045-01 1 CVE rev. 2

    Tridium NiagaraAX Directory Traversal Vulnerability

    Tridium
    first Nov 18, 2013
  • Critical
    ICSA-13-036-02 1 CVE rev. 2

    Ecava IntegraXor ActiveX Buffer Overflow

    Ecava
    first Nov 9, 2013
  • High
    ICSA-13-095-02A 7 CVEs rev. 2

    Rockwell Automation FactoryTalk and RSLinx Vulnerabilities

    Rockwell Automation
    first Jan 7, 2013
  • High
    ICSA-13-042-01 2 CVEs rev. 2

    MOXA EDR-G903 Series Multiple Vulnerabilities

    Moxa
    first Nov 15, 2013
  • Medium
    ICSA-12-348-01 1 CVE rev. 2

    Siemens ProcessSuite and Invensys Intouch Poorly Encrypted Password File

    Siemens ; Invensys Wonderware
    first Sep 16, 2012
  • High
    ICSA-12-341-01 1 CVE rev. 2

    GE Proficy HMI/SCADA Cimplicity Integer Overflow

    GE
    first Sep 9, 2012
  • High max 7.5
    ICSA-12-362-01 1 CVE rev. 2

    I-GEN opLYNX Central Authentication Bypass

    i-GEN Solutions
    first Sep 30, 2012
  • High max 7.6
    ICSA-12-335-01 1 CVE rev. 2

    Post Oak Bluetooth Traffic Systems Insufficient Entropy Vulnerability

    Post Oak Traffic Systems
    first Sep 3, 2012
  • Critical
    ICSA-12-297-02 1 CVE rev. 2

    Korenix Jetport 5600 Series Hard-coded Credentials

    Korenix
    first Jul 27, 2012
  • High
    ICSA-13-098-01 1 CVE rev. 2

    Canary Labs Inc Trend Link Insecure ActiveX Control Method

    Canary Labs
    first Jan 10, 2013
  • High
    ICSA-12-320-01 1 CVE rev. 2

    ABB AC500 PLC Webserver CoDeSys Vulnerability

    ABB
    first Aug 19, 2012
  • Medium
    ICSA-13-079-03 7 CVEs rev. 2

    Siemens WinCC TIA Portal Vulnerabilities

    Siemens
    first Dec 22, 2013
  • Critical
    ICSA-10-337-01 1 CVE rev. 2

    Advantech Studio Test Web Server Buffer Overflow

    Advantech
    first Sep 5, 2010
  • Critical
    ICSA-10-322-01 1 CVE rev. 2

    Ecava IntegraXor Buffer Overflow

    Ecava
    first Aug 21, 2010
  • Critical
    ICSA-10-316-01A 4 CVEs rev. 2

    Intellicom NetBiter WebSCADA Vulnerabilities

    Intellicom
    first Aug 15, 2010
  • Critical
    ICSA-10-147-01 6 CVEs rev. 2

    Cisco Network Building Mediator

    Cisco
    first Feb 27, 2010
  • Medium
    ICSA-15-085-01 4 CVEs rev. 2

    Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities

    Schneider Electric
    first Dec 27, 2015
  • High
    ICSA-15-064-03 1 CVE rev. 2

    Siemens SPC Controller Series Denial-of-Service Vulnerability

    Siemens
    first Dec 6, 2015
  • Medium
    ICSMA-16-279-01 3 CVEs rev. 2

    Animas OneTouch Ping Insulin Pump Vulnerabilities

    Animas
    first Jul 9, 2016
  • Critical
    ICSA-16-357-02 1 CVE rev. 2

    WAGO Ethernet Web-based Management Authentication Bypass Vulnerability

    WAGO
    first Sep 25, 2016
  • High
    ICSA-16-357-01 1 CVE rev. 2

    Fidelix FX-20 Series Controllers Path Traversal Vulnerability

    Fidelix
    first Sep 25, 2016
  • Medium
    ICSA-16-355-01 1 CVE rev. 2

    Siemens Desigo PX Web Module Insufficient Entropy Vulnerability

    Siemens
    first Sep 23, 2016
  • High
    ICSA-16-350-02 2 CVEs rev. 2

    OmniMetrix OmniView Vulnerabilities

    OmniMetrix
    first Sep 18, 2016
  • High
    ICSA-16-350-01 1 CVE rev. 2

    FATEK Automation PLC WinProladder Stack-Based Buffer Overflow Vulnerability

    FATEK Automation
    first Sep 18, 2016
  • Medium
    ICSA-16-348-04 1 CVE rev. 2

    Siemens SIMATIC WinCC and SIMATIC PCS 7 ActiveX Vulnerability

    Siemens
    first Sep 16, 2016
  • High
    ICSA-16-348-03 2 CVEs rev. 2

    Delta Electronics WPLSoft, ISPSoft, and PMSoft Vulnerabilities

    Delta Electronics
    first Sep 16, 2016
  • High
    ICSA-16-348-02 2 CVEs rev. 2

    Moxa DACenter Vulnerabilities

    Moxa
    first Sep 16, 2016
  • Medium
    ICSA-16-348-01 2 CVEs rev. 2

    Visonic PowerLink2 Vulnerabilities

    Visonic
    first Sep 16, 2016
  • Critical
    ICSA-16-343-03 1 CVE rev. 2

    Adcon Telemetry A850 Telemetry Gateway Base Station Vulnerabilities

    Adcon Telemetry
    first Sep 11, 2016
  • High
    ICSA-16-343-02 1 CVE rev. 2

    Sauter NovaWeb Web HMI Authentication Bypass Vulnerability

    Sauter
    first Sep 11, 2016
  • Medium
    ICSA-16-341-01 1 CVE rev. 2

    Tesla Gateway ECU Vulnerability

    Tesla Motors
    first Sep 9, 2016
  • High
    ICSA-16-336-03 2 CVEs rev. 2

    Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module Vulnerabilities

    Mitsubishi Electric
    first Sep 4, 2016
  • Medium
    ICSA-16-334-03 1 CVE rev. 2

    Emerson DeltaV Wireless I/O Card Open SSH Port Vulnerability

    Emerson
    first Sep 2, 2016
  • High
    ICSA-16-334-01 1 CVE rev. 2

    Emerson Liebert SiteScan XML External Entity Vulnerability

    Emerson
    first Sep 2, 2016
  • Critical
    ICSA-16-322-02 3 CVEs rev. 2

    Moxa SoftCMS Vulnerabilities

    Moxa
    first Aug 21, 2016
  • Critical
    ICSA-16-322-01 1 CVE rev. 2

    Vanderbilt Industries Siemens IP CCTV Cameras Vulnerability

    Vanderbilt Industries
    first Aug 21, 2016
  • Critical
    ICSA-16-320-01 4 CVEs rev. 2

    Lynxspring JENEsys BAS Bridge Vulnerabilities

    Lynxspring
    first Aug 19, 2016
  • High
    ICSA-16-315-01B 1 CVE rev. 2

    CA Unified Infrastructure Management Directory Traversal Vulnerability (Update B)

    CA Technologies
    first Aug 14, 2016
  • High
    ICSA-16-313-03 1 CVE rev. 2

    OSIsoft PI System Incomplete Model of Endpoint Features Vulnerability

    OSIsoft
    first Aug 12, 2016
  • High
    ICSA-16-313-01 2 CVEs rev. 2

    Phoenix Contact ILC PLC Authentication Vulnerabilities

    Phoenix Contact
    first Aug 12, 2016