Lucene search
+L
IcsMost viewed

4305 matches found

ICS
ICS
added 2026/07/21 6:0 a.m.11 views

Rockwell Automation 1734 POINT I/O

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

8.7CVSS5.6AI score0.00253EPSS
SaveExploits0References13
ICS
ICS
added 2026/07/07 6:0 a.m.11 views

Hydro-Québec Le Circuit Electrique charging station backend

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could lead to privilege escalation, or result in a denial-of-service attack. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

9.8CVSS6.1AI score0.00562EPSS
SaveExploits0References11
ICS
ICS
added 2026/06/30 12:0 a.m.11 views

Hitachi Energy e-mesh EMS

SUMMARY Hitachi Energy is aware of a buffer overflow vulnerability that affects e-mesh EMS product versions listed in this document. Successful exploitation of this vulnerability could lead to a buffer overflow condition, potentially resulting in application outages denial of service and...

9.2CVSS8AI score0.61469EPSS
SaveExploits41References10
ICS
ICS
added 2026/06/10 12:30 a.m.11 views

XZ Utils vulnerability impacting B&R Products

SUMMARY An update is available that resolves vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or corrupt memory data. 2. FREQUENTLY ASKED QUESTIONS Could the vulnerability be...

8.7CVSS7AI score0.00647EPSS
SaveExploits0References11
ICS
ICS
added 2026/06/09 7:0 a.m.11 views

Schneider Electric EcoStruxure IT Data Center Expert

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...

7.1CVSS6.7AI score0.00233EPSS
SaveExploits0References11
ICS
ICS
added 2026/04/28 6:0 a.m.11 views

NSA GRASSMARLIN

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control...

5.5CVSS5.5AI score0.00197EPSS
SaveExploits1References13
ICS
ICS
added 2026/04/16 6:0 a.m.11 views

AVEVA Pipeline Simulation

RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to modify simulation parameters, training configuration and training records. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

9.3CVSS5.8AI score0.00388EPSS
SaveExploits0References11
ICS
ICS
added 2026/04/16 6:0 a.m.11 views

Delta Electronics ASDA-Soft

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact...

8.4CVSS6.5AI score0.00339EPSS
SaveExploits0References12
ICS
ICS
added 2026/04/16 6:0 a.m.11 views

Anviz Multiple Products

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to conduct reconnaissance, capture or decrypt sensitive data, alter device configurations, gain unauthorized administrative or root‑level access, execute arbitrary code, compromise credentials or...

6.5AI score
SaveExploits0References11
ICS
ICS
added 2026/04/02 5:11 p.m.11 views

Bentley Systems iTwin Platform exposed access token

RISK EVALUATION Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages. An unauthenticated attacker could use this token to enumerate or delete certain assets. 2. RECOMMENDED PRACTICES As of 2026-03-27, the token is no longer present in the web pages and...

6.9CVSS5.9AI score0.00281EPSS
SaveExploits0References1
ICS
ICS
added 2026/04/02 6:0 a.m.11 views

Yokogawa CENTUM VP

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to login as the PROG user and modify permissions. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

2.1CVSS5.8AI score0.00165EPSS
SaveExploits0References13
ICS
ICS
added 2026/03/31 6:0 a.m.11 views

PX4 Autopilot

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with access to the MAVLink interface to execute arbitrary shell commands without cryptographic authentication. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

9.8CVSS6.2AI score0.00926EPSS
SaveExploits0References13
ICS
ICS
added 2026/03/19 5:0 a.m.11 views

IGL-Technologies eParking.fi

RISK EVALUATION Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

5.9AI score
SaveExploits0References11
ICS
ICS
added 2026/03/10 7:0 a.m.11 views

Schneider Electric Modicon Controllers M241, M251, M258, and LMC058

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...

5.4CVSS6.2AI score0.00225EPSS
SaveExploits0References11
ICS
ICS
added 2026/03/10 5:0 a.m.11 views

Ceragon Siklu MultiHaul and EtherHaul Series

RISK EVALUATION Successful exploitation of this vulnerability could result in arbitrary file upload to the target equipment. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this these vulnerabilityies, such as: When remote access is...

6.5CVSS5.9AI score0.00417EPSS
SaveExploits6References10
ICS
ICS
added 2026/03/10 12:0 a.m.11 views

Siemens SIDIS Prime

SUMMARY SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a...

7.1AI score
SaveExploits0References10
ICS
ICS
added 2026/02/24 7:0 a.m.11 views

InSAT MasterSCADA BUK-TS

RISK EVALUATION Successful exploitation of these vulnerabilities may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all control system...

9.8CVSS6.3AI score0.00538EPSS
SaveExploits0References11
ICS
ICS
added 2026/02/17 7:0 a.m.11 views

Delta Electronics ASDA-Soft

RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to write arbitrary data beyond the bounds of a stack-allocated buffer, leading to the corruption of a structured exception handler SEH. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

9.8CVSS6.3AI score0.00532EPSS
SaveExploits0References10
ICS
ICS
added 2026/02/10 7:0 a.m.11 views

ZOLL ePCR IOS Mobile Application

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to protected health information PHI or device telemetry. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

6.7CVSS5.8AI score0.00172EPSS
SaveExploits0References13
ICS
ICS
added 2026/02/03 7:0 a.m.11 views

Synectix LAN 232 TRIO

RISK EVALUATION Successful exploitation of this vulnerability could result in an unauthenticated attacker modifying critical device settings or factory resetting the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

10CVSS5.6AI score0.0055EPSS
SaveExploits0References11
ICS
ICS
added 2026/01/29 7:0 a.m.11 views

KiloView Encoder Series (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to create or delete administrator accounts, granting full administrative control. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

9.8CVSS5.6AI score0.00495EPSS
SaveExploits0References13
ICS
ICS
added 2026/01/27 12:0 a.m.11 views

Hitachi Energy XMC20

SUMMARY Hitachi Energy is aware of a vulnerability that affects XMC20 product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for the product. Please refer to the...

9CVSS5.8AI score0.14859EPSS
SaveExploits2References10
ICS
ICS
added 2026/01/27 12:0 a.m.11 views

Hitachi Energy FOX61x

SUMMARY Hitachi Energy is aware of a vulnerability that affects FOX61x product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for the product. Please refer to...

9CVSS5.6AI score0.14859EPSS
SaveExploits2References10
ICS
ICS
added 2026/01/13 12:0 a.m.11 views

Siemens SIMATIC and SIPLUS products

SUMMARY Siemens ET 200SP contains a denial-of-service vulnerability that could be triggered by sending a valid S7 protocol Disconnect Request COTP DR TPDU, causing the device to become unresponsive and require a power cycle to recover. Siemens has released new versions for several affected...

8.7CVSS6.9AI score0.00397EPSS
SaveExploits0References10
ICS
ICS
added 2025/12/18 7:0 a.m.11 views

National Instruments LabView

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

7.6AI score
SaveExploits0References13
ICS
ICS
added 2025/12/18 12:0 a.m.11 views

BullWall Ransomware Containment and Server Intrusion Protection multiple vulnerabilities

RISK EVALUATION BullWall Ransomware Containment and Server Intrusion Protection are products used for ransomware containment. Multiple vulnerabilities were reported that when used individually or in conjunction could allow a remote attacker with valid credentials to log in to a system with...

8.8CVSS6.8AI score0.00331EPSS
SaveExploits0References1
ICS
ICS
added 2025/12/16 7:0 a.m.11 views

Güralp Systems Fortimus Series, Minimus Series, and Certimus Series

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for...

6.9CVSS6.9AI score0.00346EPSS
SaveExploits0References11
ICS
ICS
added 2025/12/09 12:0 a.m.11 views

Siemens SINEC Security Monitor

SUMMARY SINEC Security Monitor before V4.10.0 contains multiple vulnerabilities. Siemens has released a new version for SINEC Security Monitor and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to protect network...

6.5AI score
SaveExploits0References10
ICS
ICS
added 2025/12/09 12:0 a.m.11 views

Siemens Advanced Licensing (SALT) Toolkit

SUMMARY Multiple Siemens products are affected by improper certificate validation in Siemens Advanced Licensing SALT Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for several affected products and recommends...

9.2CVSS6.8AI score0.00239EPSS
SaveExploits0References10
ICS
ICS
added 2025/12/04 7:0 a.m.11 views

Johnson Controls iSTAR

RISK EVALUATION Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such...

7.1CVSS6.8AI score0.00095EPSS
SaveExploits0References13
ICS
ICS
added 2025/12/04 7:0 a.m.11 views

Mitsubishi Electric GX Works2

RISK EVALUATION Successful exploitation of this vulnerability could open project files protected by user authentication using disclosed credential information, and obtain or modify project information. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk...

5.5CVSS6.5AI score0.00103EPSS
SaveExploits0References10
ICS
ICS
added 2025/12/04 7:0 a.m.11 views

Sunbird DCIM dcTrack and Power IQ

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access or steal credentials. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

7.4AI score
SaveExploits0References13
ICS
ICS
added 2025/12/02 7:0 a.m.11 views

Mirion Medical EC2 Software NMIS BioDose

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to modify program executables, gain access to sensitive information, gain unauthorized access to the application, and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

8.4AI score
SaveExploits0References13
ICS
ICS
added 2025/11/25 7:0 a.m.11 views

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

6AI score
SaveExploits0References13
ICS
ICS
added 2025/11/25 7:0 a.m.11 views

Rockwell Automation Arena Simulation

RISK EVALUATION Successful exploitation of this vulnerability could allow local attackers to execute arbitrary code on affected installations of Arena. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...

7.3CVSS7.5AI score0.00153EPSS
SaveExploits0References13
ICS
ICS
added 2025/11/20 7:0 a.m.11 views

Emerson Appleton UPSMON-PRO

RISK EVALUATION Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on affected installations of Appleton UPSMON-PRO. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

9.8CVSS7.9AI score0.01699EPSS
SaveExploits0References11
ICS
ICS
added 2025/11/20 7:0 a.m.11 views

Automated Logic WebCTRL Premium Server

RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote attacker to deceive a legitimate user into running malicious scripts or redirecting them to malicious websites. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

7AI score
SaveExploits0References13
ICS
ICS
added 2025/11/11 12:0 a.m.11 views

Siemens COMOS

SUMMARY COMOS is affected by two vulnerabilities that could allow an attacker to execute arbitrary code or lead to data infiltration. Siemens has released a new version for COMOS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens...

8.4AI score
SaveExploits0References10
ICS
ICS
added 2025/11/06 7:0 a.m.11 views

Advantech DeviceOn/iEdge

RISK EVALUATION Successful exploitation of these vulnerabilities could result in a denial-of-service condition, remote code execution, or an attacker reading arbitrary files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

6.4CVSS7.7AI score0.00233EPSS
SaveExploits0References11
ICS
ICS
added 2025/11/04 7:0 a.m.11 views

Radiometrics VizAir

RISK EVALUATION Successful exploitation of these vulnerabilities could allow attackers to manipulate critical weather parameters and runway settings, mislead air traffic control and pilots, extract sensitive meteorological data, and cause significant disruption to airport operations, leading to...

10CVSS7.1AI score0.00742EPSS
SaveExploits0References11
ICS
ICS
added 2025/10/31 4:57 p.m.11 views

ELOG multiple vulnerabilities

RISK EVALUATION ELOG the Electronic Logbook package contains multiple vulnerabilities. Regardless of configuration, low-privileged attackers can modify user profiles, escalate privileges, and deny access to ELOG. If the execute facility is specifically enabled with the "-x" command line flag,...

8.6CVSS7.4AI score0.00297EPSS
SaveExploits0References1
ICS
ICS
added 2025/10/30 6:0 a.m.11 views

Hitachi Energy TropOS

RISK EVALUATION Successful exploitation of these vulnerabilities could allow command injections and privilege escalation. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for...

8AI score
SaveExploits0References13
ICS
ICS
added 2025/10/23 6:0 a.m.11 views

AutomationDirect Productivity Suite

RISK EVALUATION Successful exploitation of these vulnerabilities could enable an attacker to execute arbitrary code, disclose information, gain full-control access to projects, or obtain read and write access to files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

7.9AI score
SaveExploits0References13
ICS
ICS
added 2025/10/23 12:0 a.m.11 views

Frontier Airlines website publicly available email address validation

RISK EVALUATION The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks. 2. RECOMMENDED PRACTICES Use a...

6.9CVSS7.1AI score0.0031EPSS
SaveExploits0References1
ICS
ICS
added 2025/10/14 12:0 a.m.11 views

Siemens Solid Edge

SUMMARY Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted PRT files format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new versions for the affected...

7.4AI score
SaveExploits0References10
ICS
ICS
added 2025/10/14 12:0 a.m.11 views

Siemens HyperLynx and Industrial Edge App Publisher

SUMMARY Multiple Siemens products are affected by a type confusion vulnerability in Google Chrome prior to 138.0.7204.96. This could allow a remote attacker to perform arbitrary code execution via a crafted HTML page. Siemens has released a new version for Industrial Edge App Publisher and...

8.1CVSS6.8AI score0.0863EPSS
SaveExploits5References10
ICS
ICS
added 2025/10/09 7:50 p.m.11 views

Newforma Project Center multiple vulnerabilities

RISK EVALUATION Newforma Project Center contains multiple vulnerabilities. In the worst case, successful exploitation could allow unauthenticated, remote code execution. 2. RECOMMENDED PRACTICES Follow updated hardening guides and upgrade to most recent version of Newforma Project Center. 3...

9.8CVSS8.2AI score0.00861EPSS
SaveExploits0References1
ICS
ICS
added 2025/10/02 5:0 a.m.11 views

Raise3D Pro2 Series 3D Printers**

RISK EVALUATION Successful exploitation of this vulnerability could result in data exfiltration and compromise of the target device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...

8.6CVSS6.8AI score0.00406EPSS
SaveExploits0References11
ICS
ICS
added 2025/09/30 6:0 a.m.11 views

Festo Controller CECC-S,-LK,-D Family Firmware (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to crash services, escalate privileges, bypass authentication, or gain unauthorized access to sensitive systems and data. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...

8.2AI score
SaveExploits0References10
ICS
ICS
added 2025/09/30 6:0 a.m.11 views

National Instruments Circuit Design Suite

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption, potentially leading to information disclosure and execution of arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

8.5CVSS7.4AI score0.00171EPSS
SaveExploits0References11
Total number of security vulnerabilities4305