Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,105 results · Feed

  • High
    ICSA-16-308-02B 2 CVEs rev. 2

    Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)

    Schneider Electric
    first Aug 7, 2016
  • Critical
    ICSA-16-308-01 2 CVEs rev. 2

    Moxa OnCell Security Vulnerabilities

    Moxa
    first Aug 7, 2016
  • High
    ICSA-16-306-03 1 CVE rev. 2

    Schneider Electric Unity PRO Control Flow Management Vulnerability

    Schneider Electric
    first Aug 5, 2016
  • Critical
    ICSA-16-306-01 1 CVE rev. 2

    Schneider Electric ConneXium Buffer Overflow Vulnerability

    Schneider Electric
    first Aug 5, 2016
  • Low
    ICSA-16-301-01 1 CVE rev. 2

    Honeywell Experion PKS Improper Input Validation Vulnerability

    Honeywell
    first Jul 31, 2016
  • High
    ICSA-16-299-01 1 CVE rev. 2

    Siemens SICAM RTU Devices Denial-of-Service Vulnerability

    Siemens
    first Jul 29, 2016
  • High
    ICSA-16-294-01 1 CVE rev. 2

    Moxa EDR-810 Industrial Secure Router Privilege Escalation Vulnerability

    Moxa
    first Jul 24, 2016
  • Critical
    ICSA-16-292-01 1 CVE rev. 2

    Schneider Electric PowerLogic PM8ECC Hard-coded Password Vulnerability

    Schneider Electric
    first Jul 22, 2016
  • High
    ICSA-16-287-06 3 CVEs rev. 2

    FATEK Automation Designer Memory Corruption Vulnerabilities

    FATEK Automation
    first Jul 17, 2016
  • Critical
    ICSA-16-287-04 4 CVEs rev. 2

    Rockwell Automation Stratix Denial-of-Service and Memory Leak Vulnerabilities

    Rockwell Automation
    first Jul 17, 2016
  • Critical
    ICSA-16-287-02 3 CVEs rev. 2

    Siemens Automation License Manager Vulnerabilities

    Siemens
    first Jul 17, 2016
  • Critical
    ICSA-11-094-02B 1 CVE rev. 2

    Advantech/Broadwin WebAccess RPC Vulnerability

    Advantech/Broadwin
    first Jan 5, 2011
  • Critical
    ICSA-12-205-01 1 CVE rev. 2

    Siemens WinCC Insecure SQL Server Authentication

    Siemens
    first Apr 26, 2012
  • Critical
    ICSA-15-342-01C 1 CVE rev. 2

    XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability

    XZERES
    first Sep 10, 2015
  • High
    ICSA-12-283-01 1 CVE rev. 2

    Siemens S7-1200 Web Application Cross Site Scripting

    Siemens
    first Jul 13, 2012
  • Medium
    ICSA-12-271-02 2 CVEs rev. 2

    Optimalog Optima PLC Multiple Vulnerabilities

    Optimalog
    first Jul 1, 2012
  • Medium
    ICSA-12-251-01 1 CVE rev. 2

    RealFlex RealWinDemo DLL Hijack

    RealFlex Technologies
    first Jun 11, 2012
  • Medium
    ICSA-12-145-01 1 CVE rev. 2

    Measuresoft ScadaPro DLL Hijack

    Measuresoft
    first Feb 25, 2012
  • Critical
    ICSA-12-025-02A 1 CVE rev. 2

    7-Technologies Termis DLL Hijacking

    7-Technologies
    first Oct 28, 2012
  • High
    ICSA-12-249-01 1 CVE rev. 2

    Arbiter Systems Power Sentinel Denial-of-Service Vulnerability

    Arbiter Systems
    first Jun 9, 2012
  • High
    ICSA-12-212-02 1 CVE rev. 2

    Siemens SIMATIC S7-400 PN CPU DoS

    Siemens
    first May 3, 2012
  • Critical
    ICSA-15-258-01 1 CVE rev. 2

    Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability

    Schneider Electric
    first Jun 18, 2015
  • Medium
    ICSA-12-283-02 1 CVE rev. 2

    WellinTech KingView User Credentials Not Securely Hashed

    WellinTech
    first Jul 13, 2012
  • Critical
    ICSA-12-263-01 1 CVE rev. 2

    Siemens S7-1200 Insecure Storage of HTTPS CA Certificate

    Siemens
    first Jun 23, 2012
  • Low
    ICSA-16-287-03 2 CVEs rev. 2

    Siemens SIMATIC STEP 7 (TIA Portal) Information Disclosure Vulnerabilities

    Siemens
    first Jul 17, 2016
  • Critical
    ICSMA-16-306-01 2 CVEs rev. 2

    Smiths Medical CADD-Solis Medication Safety Software Vulnerabilities

    Smiths Medical
    first Aug 5, 2016
  • Medium
    ICSA-16-334-02 1 CVE rev. 2

    Emerson DeltaV Easy Security Management Application Vulnerability

    Emerson
    first Sep 2, 2016
  • Medium
    ICSA-16-287-01 1 CVE rev. 2

    OSIsoft PI Web API 2015 R2 Service Account Permissions Vulnerability

    OSIsoft
    first Jul 17, 2016
  • Critical
    ICSA-12-214-01 1 CVE rev. 2

    Siemens Synco OZW Default Password

    Siemens
    first May 5, 2012
  • Medium
    ICSA-12-212-01 1 CVE rev. 2

    ICONICS GENESIS32/BizViz Security Configurator Authentication Bypass Vulnerability

    ICONICS
    first May 3, 2012
  • Critical
    ICSA-12-263-02 1 CVE rev. 2

    ORing Industrial Networking IDS-5042/5042+ Hard-Coded Credential Vulnerability

    ORing Industrial Networking
    first Jun 23, 2012
  • Critical
    ICSA-12-249-02 1 CVE rev. 2

    WAGO IO 758 Default Linux Credentials

    WAGO
    first Jun 9, 2012
  • High
    ICSA-12-243-01 1 CVE rev. 2

    GarrettCom - Use of Hard-Coded Password

    GarrettCom
    first Jun 3, 2012
  • Critical
    ICSA-16-336-01A 4 CVEs rev. 2

    Siemens SICAM PAS Vulnerabilities

    Siemens
    first Sep 4, 2016
  • Critical
    ICSA-11-356-01 2 CVEs rev. 2

    Siemens Simatic HMI Authentication Vulnerabilities

    Siemens
    first Sep 24, 2011
  • High
    ICSA-12-227-01 1 CVE rev. 2

    Siemens COMOS Database Privilege Escalation Vulnerability

    Siemens
    first May 18, 2012
  • Critical
    ICSA-15-258-03 2 CVEs rev. 2

    GE MDS PulseNET Vulnerabilities

    GE
    first Jun 18, 2015
  • High
    ICSA-12-262-01 1 CVE rev. 2

    Fultek WinTr Directory Traversal

    Fultek
    first Jun 22, 2012
  • High
    ICSA-16-336-04 3 CVEs rev. 2

    Advantech SUSIAccess Server Vulnerabilities

    Advantech
    first Sep 4, 2016
  • High
    ICSA-12-271-01 4 CVEs rev. 2

    C3-ilex EOScada Multiple Vulnerabilities

    C3-ilex
    first Jul 1, 2012