Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

4,108 results · Feed

  • Critical

    GE D60 Line Distance Relay

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Schneider Electric IGSS Mobile

    ATTENTION: Locally exploitable/low skill level to exploit.

  • High

    Schneider Electric StruxureOn Gateway

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    WAGO PFC200 Series

    ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

  • High

    Schneider Electric IGSS SCADA Software

    ATTENTION: Locally exploitable/high skill level to exploit.

  • Medium

    Vyaire Medical CareFusion Upgrade Utility Vulnerability

    Independent researcher Mark Cross (@xerubus) has identified an uncontrolled search path element vulnerability in Vyaire Medical 's CareFusion Upgrade Utility application. Vyaire Medical has produced an update that mitigates this vulnerability.

  • High
    ICSA-17-285-04A 2 CVEs rev. 2

    NXP Semiconductors MQX RTOS (Update A)

    ATTENTION: Remotely exploitable/low skill level to exploit.

    first Oct 12, 2017
  • High

    Fuji Electric V-Server VPR

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    3S-Smart Software Solutions GmbH CODESYS Web Server

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    Gemalto Sentinel License Manager

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    PHOENIX CONTACT mGuard

    ATTENTION: Low skill level to exploit.

  • High

    Siemens TeleControl Server Basic

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Philips IntelliSpace Cardiovascular System Vulnerability

    Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information stored on the system and modify this information.

  • Medium

    Advantech WebAccess/SCADA

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High
    ICSA-18-004-02A 7 CVEs rev. 2

    Advantech WebAccess (Update A)

    ATTENTION: Remotely exploitable/low skill level to exploit.

    first Jan 4, 2018
  • Medium

    WECON Technology Co., Ltd. LeviStudio HMI Editor

    ATTENTION: Locally exploitable/low skill level to exploit.

  • High

    Moxa MXview

    ATTENTION: Low skill level to exploit.

  • Critical

    PHOENIX CONTACT FL SWITCH

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical
    ICSA-17-234-04 3 CVEs rev. 2

    General Motors and Shanghai OnStar (SOS) iOS Client

    ATTENTION: Remotely exploitable/low skill level to exploit.

    first Aug 22, 2017
  • High

    Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Delta Electronics Delta Industrial Automation Screen Editor

    ATTENTION: Low skill level to exploit.

  • Medium

    ICSA-17-355-01_Moxa NPort W2150A and W2250A

    Federico Maggi reported the vulnerability to ICS-CERT.

  • High

    Schneider Electric Pelco VideoXpert Enterprise

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    ABB Ellipse

    ATTENTION: Remotely exploitable/low skill level to exploit.

    ABB
  • High

    PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol

    ATTENTION: Low skill level is needed to exploit. Public exploits are available.

  • Medium

    Ecava IntegraXor

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Siemens LOGO! Soft Comfort

    ATTENTION: Remotely exploitable.

  • High

    WECON Technology Co., Ltd. LeviStudio HMI Editor

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Low
    ICSMA-17-250-02A 8 CVEs rev. 2

    Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities (Update A)

    This updated advisory is a follow-up to the original advisory titled ICSMA-17-250-02 Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities that was published September 7, 2017, on the NCCIC/ICS-CERT web site.

    first Sep 7, 2017
  • Critical

    Xiongmai Technology IP Cameras and DVRs

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    Rockwell Automation FactoryTalk Alarms and Events

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • High

    PHOENIX CONTACT FL COMSERVER, FL COM SERVER, and PSI-MODEM/ETH

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Siemens SWT3000

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    GEOVAP Reliance SCADA

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Medium

    Ethicon Endo-Surgery Generator G11 Vulnerability

    Johnson & Johnson, the parent company of Ethicon Endo-Surgery, LLC, reported an improper authentication vulnerability in the Ethicon Endo-Surgery Generator Gen11. EthiconEndo-Surgery, LLC has produced updates that mitigate this vulnerability in the affected p…

  • Medium

    PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol

    ATTENTION: Public exploits are available.

  • High max 8.6

    Moxa NPort 5110, 5130, and 5150

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • Critical

    Siemens SICAM

    ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

  • High

    Philips IntelliSpace Cardiovascular System and Xcelera System Vulnerability

    Philips reported a vulnerability in the Philips ' IntelliSpace Cardiovascular and Xcelera cardiac image and information management systems. Philips has produced updates that mitigate this vulnerability in the affected products.

  • Critical

    Schneider Electric InduSoft Web Studio and InTouch Machine Edition

    ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.