awesome-industrial-control-system-security

awesome-industrial-control-system-security 与工业控制系统 ICS 安全相关的精选资源列表。 欢迎贡献。 工具...

sel4-ics-gateway-demo

seL4 ICS Gateway Demo A defensive security research project comparing protocol-break vs packet-forwarding architectures for protecting industrial control systems from cyber attacks. Documentation: Network Architecture - Network diagrams and traffic flow Container Architecture - Docker container...

ICS-Security-Tools

ICS 安全工具、技巧与行业经验 作为社区资产开发 这项工作旨在汇集在 ICS 环境中开展网络安全工作时所需的工具、技巧和行业诀窍。 代码仓库将存放可用于该领域的各种特定脚本、工具、配置或其他有用的资料。 总体结构： /companies/ /configurations/ /feeds/ /guides/ /hardware/ /hwinfo/ /pcaps/ /protocols/ /scripts/ /tools/ /tools/analysis /tools/audit /tools/general /tools/honeypots /tools/mirrored...

CVE-2026-73809

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 12:00:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu5cu5ndbv2j 2026-08-28 12:01:02+00:00| seen|...

AVEVA Enterprise SCADA

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to tamper with serialized data, potentially resulting in code execution during deserialization. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

Haiwell IoT Cloud HMI Gateway

ADVISORY SUMMARY Successful exploitation of this vulnerability may allow an attacker to inject and execute arbitrary OS commands with root privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

CVE-2025-38727

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10 2026-07-28 16:19:25+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

Festo Compact Vision System, Control Block, Controller, and Operator Unit products

RISK EVALUATION Successful exploitation of these vulnerabilities could result in an attacker accessing devices without authentication or modifying configuration files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

CVE-2019-9262

creationtimestamp| type| source ---|---|--- 2025-07-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-196-01...

CVE-2025-30183

creationtimestamp| type| source ---|---|--- 2025-06-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01 2025-06-09 23:32:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17810...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update F)

RISK EVALUATION Successful exploitation of this vulnerability could result in information tampering on the target workstation. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for...

Nice Linear eMerge E3

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary OS commands. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper...

CVE-2025-32844

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01...

CVE-2025-30031

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-389/...

CVE-2025-32823

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01...

CVE-2022-2964

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08...

Rockwell Automation 440G TLS-Z

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to take over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact...

CVE-2023-45863

creationtimestamp| type| source ---|---|--- 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...

The High-Stakes Disconnect For ICS/OT Security

Why does ICS/OT need specific controls and its own cybersecurity budget today? Because treating ICS/OT security with an IT security playbook isn't just ineffective—it's high risk. In the rapidly evolving domain of cybersecurity, the specific challenges and needs for Industrial Control Systems ICS...

Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)

RISK EVALUATION Successful exploitation of this vulnerability could cause information disclosure of a restricted web page, modification of a web page and a denial of service when specific web pages are modified and restricted functions are invoked. 2. RECOMMENDED PRACTICES CISA reminds...