CISA ICS & IT advisories

4,108 results · Feed

• Critical
  ICSA-18-212-05 1 CVE

  AVEVA Wonderware License Server

  Successful exploitation of this vulnerability may result in remote code execution with administrative privileges.

  AVEVA
  Jul 31, 2018
• Medium
  ICSA-17-313-01 1 CVE rev. 3

  AutomationDirect CLICK, C-More, C-More Micro, Do-more Designer, GS Drives, SL-Soft SOLO, DirectSOFT (Update B)

  Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the system.

  Automation Direct
  Jul 24, 2018

  first Nov 9, 2017
• Critical
  ICSA-18-200-01 1 CVE

  AVEVA InduSoft Web Studio and InTouch Machine Edition

  The listed products are vulnerable only if the TCP/IP Server Task is enabled. A remote attacker could send a carefully crafted packet during a tag, alarm, or event related action such as read and write, which may allow remote code execution.

  AVEVA
  Jul 19, 2018
• Critical
  ICSA-18-200-02 1 CVE

  AVEVA InTouch

  Successful exploitation of this vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as those of the InTouch View process which could lead to a compromise of the InTouch HMI.Systems are only vulnerable if the ope…

  AVEVA
  Jul 19, 2018
• High
  ICSA-18-200-04 1 CVE

  Moxa NPort 5210 5230 5232

  Successful exploitation of this vulnerability could allow a remote attacker to send TCP SYN packages, causing a resource exhaustion condition that would cause the device to become unavailable.

  Moxa
  Jul 19, 2018
• High
  ICSA-18-172-02 1 CVE rev. 2

  Rockwell Automation Allen-Bradley CompactLogix and Compact GuardLogix (Update A)

  Successful exploitation of this vulnerability could result in a denial-of-service condition. As a result, the controller goes into a Major Non-Recoverable Fault (MNRF) state, which is considered safe. However, recovery requires the user to download the applic…

  Rockwell Automation
  Jul 17, 2018

  first Jun 21, 2018
• High
  ICSA-18-198-01 1 CVE

  ABB Panel Builder 800

  An attacker could exploit the vulnerability by tricking a user to open a specially crafted file, allowing the attacker to insert and run arbitrary code. This vulnerability requires user interaction, and the exploit is only triggered when a local user runs the…

  ABB
  Jul 17, 2018
• High
  ICSA-18-198-02 1 CVE

  WAGO e!DISPLAY Web-Based-Management

  Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the user, execute code within the user 's browser, place malicious files within the filesystem, and replace existing files to allow privilege escalation.

  WAGO
  Jul 17, 2018
• High
  ICSA-18-198-03 1 CVE

  PEPPERL+FUCHS VisuNet RM, VisuNet PC, and Box Thin Client

  Successful exploitation of this vulnerability could allow attackers to intercept sensitive communications, establish a man-in-the-middle attack, achieve administrator privileges, and execute remote code.

  Pepperl+Fuchs
  Jul 17, 2018
• Medium max 6.3
  ICSMA-18-137-01 2 CVEs rev. 2

  Medtronic N'Vision Clinician Programmer (Update A)

  As part of the normal functionality of this device, the N 'Vision Clinician Programmer may store Personal Health Information (PHI) or Personal Identifying Information (PII). Successful exploitation of these vulnerabilities may allow an attacker with physical …

  Medtronic
  Jul 12, 2018

  first May 17, 2018
• Medium
  ICSA-18-193-01 1 CVE

  Eaton 9000X Drive

  Successful exploitation of this vulnerability may allow remote code execution.

  Eaton
  Jul 12, 2018
• Critical
  ICSA-18-191-01 2 CVEs

  Universal Robots Robot Controllers

  Successful exploitation of these vulnerabilities could allow a remote attacker to run arbitrary code on the device.

  Universal Robots
  Jul 10, 2018
• High
  ICSA-18-191-02 3 CVEs

  Schweitzer Engineering Laboratories, Inc. Compass and AcSELerator Architect

  Successful exploitation of these vulnerabilities could allow modification/replacement of files within the Compass installation directory, disclosure of information, or denial of service.

  Schweitzer Engineering Laboratories, Inc. (SEL)
  Jul 10, 2018
• High max 7.5
  ICSA-18-184-01 5 CVEs 1 exploited

  Rockwell Automation Allen-Bradley Stratix 5950

  Successful exploitation of these vulnerabilities could allow an attacker to bypass client certification to create connections to the affected device or cause the device to crash.

  Rockwell Automation
  Jul 3, 2018
• Medium max 6.4
  ICSMA-18-179-01 2 CVEs

  Medtronic MyCareLink Patient Monitor

  If exploited, these vulnerabilities may allow privileged access to the monitor 's operating system. However, physical access to the MyCareLink monitor is required. Additionally, these vulnerabilities may allow a MyCareLink monitor, when operated within close …

  Medtronic
  Jun 28, 2018
• High
  ICSA-18-172-01 1 CVE

  Delta Electronics Delta Industrial Automation COMMGR

  Successful exploitation of this vulnerability may allow remote code execution, cause the application to crash, or cause a denial-of-service condition in the application server.

  Delta Electronics
  Jun 21, 2018
• Critical max 10.0
  ICSMA-18-165-01 8 CVEs

  Natus Xltek NeuroWorks

  Successful exploitation of these vulnerabilities require access to the Natus customer network, and could crash the device being accessed; a buffer overflow condition may allow remote code execution.

  Natus Medical, Inc. (Natus)
  Jun 14, 2018
• Critical
  ICSA-17-045-03 1 CVE rev. 5

  ICSA-17-045-03 Siemens SIMATIC Authentication Bypass (Update D)

  Siemens
  Jun 12, 2018

  first Feb 13, 2017
• High
  ICSA-17-187-03F 6 CVEs rev. 9

  ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)

  Siemens
  Jun 12, 2018

  first Jul 4, 2017
• Medium
  ICSA-17-306-01 1 CVE rev. 2

  ICSA-17-306-01 Siemens SIMATIC PCS 7 (Update A)

  Siemens
  Jun 12, 2018

  first Oct 18, 2017
• Critical
  ICSA-18-163-01 4 CVEs

  Schneider Electric U.motion Builder

  Successful exploitation of these vulnerabilities could allow remote code execution.

  Schneider Electric
  Jun 12, 2018
• High
  ICSA-18-137-04 1 CVE rev. 2

  Delta Electronics Delta Industrial Automation TPEditor (Update A)

  Successful exploitation of this vulnerability could crash the accessed device, resulting in a buffer overflow condition that may allow remote code execution.

  Delta Electronics
  Jun 7, 2018

  first May 17, 2018
• High
  ICSA-18-158-01 1 CVE

  Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway

  Successful exploitation of this vulnerability could allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.

  Rockwell Automation
  Jun 7, 2018
• High
  ICSMA-18-128-01 2 CVEs rev. 3

  Silex Technology SX-500/SD-320AN or GE Healthcare MobileLink (Update B)

  Successful exploitation of these vulnerabilities could allow modification of system settings and remote code execution.

  Silex Technology and GE Healthcare
  Jun 5, 2018

  first May 8, 2018
• Critical
  ICSA-18-156-01 3 CVEs

  ABB IP Gateway

  Successful exploitation of these vulnerabilities could allow attackers to perform actions using administrative privileges.

  ABB
  Jun 5, 2018
• High
  ICSMA-18-156-01 3 CVEs rev. 2

  Philips' IntelliVue Patient and Avalon Fetal Monitors

  Successful exploitation may allow an attacker to read/write memory, and/or induce a denial of service through a system restart, thus potentially leading to a delay in diagnosis and treatment of patients.

  Philips
  Jun 5, 2018
• Critical
  ICSA-18-102-02 2 CVEs rev. 4

  Rockwell Automation FactoryTalk Activation Manager (Update B)

  Successful exploitation of these vulnerabilities could allow a remote attacker to access sensitive information, rewrite content, or cause a buffer overflow that could result in remote code execution.

  Rockwell Automation
  May 31, 2018

  first Apr 12, 2018
• High
  ICSA-18-151-01 1 CVE

  ICSA-18-151-01_Delta Industrial Automation DOPSoft

  B0nd @garagehackers working with Trend Micro 's Zero Day Initiative reported the vulnerabilities to NCCIC.

  Delta Electronics
  May 31, 2018
• High
  ICSA-18-151-02 3 CVEs

  GE MDS PulseNET and MDS PulseNET Enterprise

  Exploitation of these vulnerabilities may allow elevation of privilege and exfiltration of information on the host platform.

  General Electric (GE)
  May 31, 2018
• Critical
  ICSA-18-144-01 3 CVEs

  Schneider Electric Floating License Manager

  Successful exploitation of these vulnerabilities could cause a denial of service, allow arbitrary execution of code with system level privileges, or send users to arbitrary websites.

  Schneider Electric
  May 24, 2018
• High
  ICSMA-18-144-01 2 CVEs

  BeaconMedaes TotalAlert Scroll Medical Air Systems

  Successful exploitation of these vulnerabilities could allow an attacker to view and potentially modify some device information and web application setup information, which does not include access to patient health information. Additionally, BeaconMedaes has …

  BeaconMedaes
  May 24, 2018
• High
  ICSA-18-128-02 1 CVE rev. 2

  ICSA-18-128-02 Siemens Siveillance VMS (Update A)

  Siemens
  May 23, 2018

  first May 3, 2018
• Medium max 5.9
  ICSMA-18-137-02 1 CVE

  Philips EncoreAnywhere

  Successful exploitation of this vulnerability could result in unencrypted communication and potential improper disclosure of sensitive data.

  Philips
  May 17, 2018
• High
  ICSA-18-137-01 1 CVE

  GE PACSystems CPE305/310, CPE330, CPE400, RSTi-EP CPE 100, CPU320/CRU320, RXi

  Successful exploitation of this vulnerability could cause the device to reboot and change its state, causing the device to become unavailable.

  General Electric (GE)
  May 17, 2018
• Critical
  ICSA-18-137-02 4 CVEs

  PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx Series

  Successful exploitation of these vulnerabilities could allow for remote code execution and information disclosure.

  PHOENIX CONTACT, Innominate Security Technologies
  May 17, 2018
• Critical
  ICSA-18-135-01 11 CVEs

  Advantech WebAccess

  Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information from the host and/or target, execute arbitrary code, or delete files.

  Advantech
  May 15, 2018
• Medium
  ICSA-18-130-01 1 CVE

  MatrikonOPC Explorer

  If the attacker has local access to the system, an attacker could exploit this vulnerability. This could allow an attacker to transfer unauthorized files from the host system, which could result in unauthorized information disclosure.

  MatrikonOPC
  May 10, 2018
• Medium
  ICSA-18-130-02 1 CVE

  Rockwell Automation Arena

  Successful exploitation of this vulnerability could cause the software application to crash.

  Rockwell Automation
  May 10, 2018
• High
  ICSA-17-332-01 4 CVEs rev. 3

  Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)

  Siemens
  May 9, 2018

  first Nov 17, 2017
• Critical
  ICSA-18-025-01 1 CVE rev. 2

  Nari PCS-9611 (Update A)

  Successful exploitation of this vulnerability could allow a remote attacker arbitrary read/write abilities on the system.

  Nari
  May 3, 2018

  first Jan 25, 2018