Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

4,108 results · Feed

  • High max 7.3
    ICSMA-20-079-01 1 CVE

    Insulet Omnipod

    Successful exploitation of this vulnerability may allow an attacker to gain access to the affected products to intercept, modify, or interfere with the wireless RF (radio frequency) communications to or from the product. This may allow attackers to read sensi…

    Insulet
  • High
    ICSA-20-077-01 2 CVEs

    Delta Electronics Industrial Automation CNCSoft ScreenEditor

    Successful exploitation of these vulnerabilities could cause buffer overflow conditions that may allow information disclosure, remote code execution, or crash the application.

    Delta Electronics
  • High max 7.6
    ICSA-20-072-01 13 CVEs

    ICSA-20-072-01_ABB eSOMS

    ABB reported these vulnerabilities to CISA.

    ABB
  • High max 7.1
    ICSA-20-072-02 1 CVE

    ABB Asset Suite

    Successful exploitation of this vulnerability could allow an attacker access to unauthorized information in the application by direct resource access.

    ABB
  • Medium max 6.7
    ICSA-20-072-03 1 CVE

    Rockwell Automation Allen-Bradley Stratix 5950

    Successful exploitation of this vulnerability could allow an attacker to write a modified image to the component.

    Rockwell Automation
  • Medium
    ICSA-19-344-06 2 CVEs rev. 2

    Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B)

    Successful exploitation of these vulnerabilities may allow an attacker to modify network traffic or impact the perceived integrity of the user program stored on the CPU.

    Siemens
    first Dec 10, 2019
  • High
    ICSA-20-042-11 1 CVE rev. 2

    Siemens SIMATIC S7-1500 (Update A)

    Siemens
    first Feb 11, 2020
  • High max 7.5
    ICSA-20-070-02 1 CVE

    Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet (Update A)

    Siemens
  • Medium
    ICSA-20-070-03 1 CVE

    Siemens Spectrum Power 5

    Siemens
  • Critical max 9.8
    ICSA-20-070-04 1 CVE

    ICSA-20-070-04_Johnson Controls Kantech EntraPass

    Joachim Kerschbaumer reported this vulnerability to Johnson Controls.

    Kantech, Johnson Controls
  • High max 7.5
    ICSA-20-070-05 1 CVE

    Johnson Controls Metasys

    Successful exploitation of this vulnerability can allow a denial-of-service attack or disclosure of sensitive data.

    Johnson Controls
  • Critical max 9.8
    ICSA-20-070-06 4 CVEs

    Rockwell Automation MicroLogix Controllers and RSLogix 500 Software

    Successful exploitation of these vulnerabilities could allow an attacker to gain access to sensitive project file information including passwords.

    Rockwell Automation
  • Critical
    ICSA-20-065-01 9 CVEs

    WAGO I/O-CHECK

    Successful exploitation of these vulnerabilities could allow an attacker to change settings, delete the application, run remote code, cause a system crash, cause a denial-of-service condition, revert to factory settings, and overwrite MAC addresses.

    WAGO
  • High
    ICSA-20-063-01 1 CVE

    Emerson ValveLink

    Successful exploitation of this vulnerability could allow arbitrary code execution.

    Emerson
  • Critical
    ICSA-20-063-02 1 CVE

    ICSA-20-063-02_PHOENIX CONTACT Emalytics Controller ILC

    Phoenix Contact strongly recommends affected users update to engineering software Emalytics v1.2.3 or higher and recommission the controllers. The updated version is available on the vendor's product page.

    Phoenix Contact
  • High max 7.5
    ICSA-20-063-03 1 CVE

    Omron PLC CJ Series

    Successful exploitation of this vulnerability could cause a denial-of-service condition.

    Omron
  • Critical max 9.9
    ICSA-20-063-04 12 CVEs

    Moxa AWK-3131A Series Industrial AP/Bridge/Client

    Successful exploitation of these vulnerabilities could allow an attacker to gain control of the device and remotely execute arbitrary code.

    Moxa
  • Critical max 9.8
    ICSA-20-056-01 8 CVEs

    Moxa MB3xxx Series Protocol Gateways

    Successful exploitation of these vulnerabilities could crash the device, cause a buffer overflow, allow remote execution of arbitrary code, or allow access to sensitive information.

    Moxa
  • High
    ICSA-20-056-02 3 CVEs

    Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility

    Successful exploitation of these vulnerabilities could crash the device or allow access to sensitive information.

    Moxa
  • Critical
    ICSA-20-056-03 6 CVEs

    Moxa PT-7528 and PT-7828 Series Ethernet Switches

    Successful exploitation of these vulnerabilities could crash the device or allow access to sensitive information.

    Moxa
  • Critical
    ICSA-20-056-04 7 CVEs

    Moxa EDS-G516E and EDS-510E Series Ethernet Switches

    Successful exploitation of these vulnerabilities could crash the device, execute arbitrary code, and allow access to sensitive information.

    Moxa
  • High
    ICSA-20-056-05 3 CVEs

    Honeywell WIN-PAK

    Successful exploitation of these vulnerabilities allows an attacker to perform remote code execution.

    Honeywell
  • Critical max 9.4
    ICSA-20-051-01 1 CVE

    ICSA-20-051-01_B&R Automation Studio and Automation Runtime

    Yehuda Anikster and Amir Preminger of Claroty reported this vulnerability to CISA.

    B&R Industrial Automation
  • Critical
    ICSA-20-051-02 1 CVE

    Rockwell Automation FactoryTalk Diagnostics

    This updated advisory is a follow-up to the original advisory titled ICSA-20-051-02-Rockwell Automation FactoryTalk Diagnostics that was published February 20, 2020, on the ICS webpage on cisa.gov/ICS.

    Rockwell Automation
  • Critical
    ICSA-20-051-03 2 CVEs

    Honeywell NOTI-FIRE-NET Web Server (NWS-3)

    Successful exploitation of these vulnerabilities could result in an attacker bypassing web server authentication methods.

    Honeywell
  • Critical max 9.4
    ICSA-20-051-04 6 CVEs

    Auto-Maskin RP210E, DCU210E, and Marine Observer Pro (Android App)

    Successful exploitation of these vulnerabilities could allow a remote attacker to gain root access to the underlying operating system of the device and may allow read/write access.

    Auto-Maskin
  • Medium
    ICSA-20-049-01 1 CVE

    Honeywell INNCOM INNControl 3

    Successful exploitation of this vulnerability could allow an attacker to escalate user privileges within the INNControl application.

    Honeywell
  • High
    ICSA-20-049-02 1 CVE

    Emerson OpenEnterprise

    Successful exploitation of this vulnerability could allow an attacker to execute code on an OpenEnterprise SCADA Server.

    Emerson
  • Critical max 9.8
    ICSMA-20-049-01 1 CVE 1 exploited

    Spacelabs Xhibit Telemetry Receiver (XTR)

    A remote code execution vulnerability called BlueKeep (CVE-2019-0708) exists within the Remote Desktop Protocol (RDP) used by the Microsoft Windows operating systems listed below. An attacker can exploit this vulnerability to perform remote code execution on …

    Spacelabs
  • High
    ICSA-20-044-01 3 CVEs

    Schneider Electric Modicon Ethernet Serial RTU

    Successful exploitation of these vulnerabilities could allow remote code execution or cause a denial-of-service condition.

    Schneider Electric
  • High max 6.5
    ICSA-20-044-02 1 CVE

    Schneider Electric Magelis HMI Panels

    Successful exploitation of this vulnerability could allow a denial-of-service condition.

    Schneider Electric
  • Critical
    ICSA-20-042-03 2 CVEs

    Siemens SIMATIC CP 1543-1

    Siemens
  • Medium
    ICSA-20-042-08 1 CVE

    Siemens SIPORT MP

    Siemens
  • Medium
    ICSA-20-042-09 1 CVE

    Siemens OZW Web Server

    Siemens
  • High
    ICSA-20-042-12 1 CVE

    Siemens SIPROTEC 4 and SIPROTEC Compact

    Siemens
  • High
    ICSA-20-042-13 2 CVEs

    Digi ConnectPort LTS 32 MEI

    Successful exploitation of these vulnerabilities could limit system availability.

    Digi International
  • Medium
    ICSA-18-058-01A 1 CVE rev. 3

    Siemens SIMATIC Industrial PCs (Update A)

    Siemens
    first Feb 22, 2018
  • Critical
    ICSA-18-088-02 1 CVE rev. 2

    Siemens TIM 1531 IRC

    Siemens
    first Mar 27, 2018
  • High max 7.5
    ICSA-18-128-01 2 CVEs rev. 2

    Siemens Medium Voltage SINAMICS Products (Update A)

    Siemens
    first May 3, 2018
  • High
    ICSA-18-137-03 1 CVE rev. 3

    Siemens SIMATIC S7-400 CPU (Update A)

    Siemens
    first May 15, 2018