awesome-industrial-control-system-security

awesome-industrial-control-system-security 산업 제어 시스템ICS 보안과 관련된 리소스를 선별한 목록입니다. 자유롭게 기여하세요. 도구 AttkFinder | AttkFinder는 PLC 프로그램의 정적 프로그램 분석을 수행하고 데이터 중심 공격 벡터Data-oriented Attack vectors를 생성하는 도구입니다. 간단히 말해, AttkFinder는 IEC-61131-3 표준으로 작성된 PLC 프로그램을 XML 형식 또는 구조화 텍스트로 받아 데이터 흐름 그래프DFG, 제어 흐름...

ICS-Security-Tools

ICS 보안 도구, 팁, 그리고 노하우 커뮤니티 자산으로 개발됨 이 작업은 ICS 환경에서 사이버 보안 업무를 수행하기 위한 도구, 팁, 그리고 현장 노하우를 한데 모으기 위한 것입니다. 이 코드 저장소에는 이 분야에서 활용할 수 있는 특정 스크립트, 도구, 구성, 기타 유용한 정보들이 보관될 예정입니다. 일반 구조: /companies/ /configurations/ /feeds/ /guides/ /hardware/ /hwinfo/ /pcaps/ /protocols/ /scripts/ /tools/ /tools/analysi...

sel4-ics-gateway-demo

seL4 ICS 게이트웨이 데모 사이버 공격으로부터 산업 제어 시스템을 보호하기 위한 프로토콜 차단 및 패킷 포워딩 아키텍처를 비교하는 방어적 보안 연구 프로젝트입니다. 문서: 네트워크 아키텍처 - 네트워크 다이어그램 및 트래픽 흐름 컨테이너 아키텍처 - Docker 컨테이너 관계 CVE 설명 - 취약점 세부 정보 및 공격 메커니즘 연구 동기 현대의 ICS/SCADA 시스템은 2024년 1월 Modbus TCP를 통해 우크라이나 지역 난방 시스템을 표적으로 삼아 영하의 기온에서 600가구 이상이 난방을 사용하지 못하게 한...

Rockwell Automation FactoryTalk Activation Manager

RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...

Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix

RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...

CVE-2026-73809

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 12:00:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu5cu5ndbv2j 2026-08-28 12:01:02+00:00| seen|...

AVEVA Enterprise SCADA

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to tamper with serialized data, potentially resulting in code execution during deserialization. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

Haiwell IoT Cloud HMI Gateway

ADVISORY SUMMARY Successful exploitation of this vulnerability may allow an attacker to inject and execute arbitrary OS commands with root privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

Thermo Fisher Applied Biosystems Genetic Analyzers

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to modify .fsa/.hid output files, tampering with DNA data and resulting in inaccurate test results. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...

CVE-2025-38727

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10 2026-07-28 16:19:25+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

Festo Compact Vision System, Control Block, Controller, and Operator Unit products

RISK EVALUATION Successful exploitation of these vulnerabilities could result in an attacker accessing devices without authentication or modifying configuration files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

CVE-2019-9262

creationtimestamp| type| source ---|---|--- 2025-07-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-196-01...

CVE-2025-30183

creationtimestamp| type| source ---|---|--- 2025-06-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01 2025-06-09 23:32:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17810...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update F)

RISK EVALUATION Successful exploitation of this vulnerability could result in information tampering on the target workstation. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for...

Nice Linear eMerge E3

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary OS commands. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper...

CVE-2025-32844

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01...

CVE-2025-30031

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-389/...

CVE-2025-32823

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01...

CVE-2022-2964

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08...

Rockwell Automation 440G TLS-Z

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to take over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact...