June 2020
02.06.2020
US CERT (ICS)
GE Grid Solutions Reason RT Clocks
Title
GE Grid Solutions Reason RT Clocks
Published
June 2, 2020, 4:10 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-154-05
Summary
This advisory contains mitigations for a Missing Authentication for Critical Function vulnerability in GE's Grid Solutions Reason RT Clocks.
02.06.2020
US CERT (ICS)
SWARCO CPU LS4000
Title
SWARCO CPU LS4000
Published
June 2, 2020, 4:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-154-06
Summary
This advisory contains mitigations for an Improper Access Control vulnerability in SWARCO TRAFFIC SYSTEMS' CPU LS4000 traffic light controllers.
02.06.2020
US CERT (ICS)
Inductive Automation Ignition (Update A)
Title
Inductive Automation Ignition (Update A)
Published
June 2, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-147-01
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-20-147-01 Inductive Automation Ignition that was published May 26, 2020, on the ICS webpage on us-cert.gov. This advisory contains mitigations for missing authentication for critical function and deserialization of untrusted data vulnerabilities in Inductive Automation Ignition products.
May 2020
21.05.2020
US CERT (ICS)
Johnson Controls Software House C-CURE 9000 and American Dynamics victor VMS
Title
Johnson Controls Software House C-CURE 9000 and American Dynamics victor VMS
Published
May 21, 2020, 4:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-142-01
Summary
This advisory contains mitigations for a Cleartext Storage of Sensitive Information vulnerability in Johnson Controls' Software House C•CURE 9000 and American Dynamics victor Video Management systems.
21.05.2020
US CERT (ICS)
Schneider Electric EcoStruxure Operator Terminal Expert
Title
Schneider Electric EcoStruxure Operator Terminal Expert
Published
May 21, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-142-02
Summary
This advisory contains mitigations for SQL Injection, Path Traversal, and Argument Injection vulnerabilities in Schneider Electric EcoStruxure Operator Terminal Expert touchscreen configuration software.
19.05.2020
US CERT (ICS)
Rockwell Automation EDS Subsystem
Title
Rockwell Automation EDS Subsystem
Published
May 19, 2020, 4:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-140-01
Summary
This advisory contains mitigations for Improper Restriction of Operations within the Bounds of a Memory Buffer, and SQL Injection vulnerabiliies in Rockwell Automation EDS Subsystem controllers.
14.05.2020
US CERT (ICS)
Opto 22 SoftPAC Project
Title
Opto 22 SoftPAC Project
Published
May 14, 2020, 4:10 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-135-01
Summary
This advisory contains mitigations for External Control of File Name or Path, Improper Verification of Cryptographic Signature, Improper Access Control, Uncontrolled Search Path Element, and Improper Authorization vulnerabilities in the Opto 22 SoftPAC Project, a virtual PLC.
14.05.2020
US CERT (ICS)
Emerson WirelessHART Gateway
Title
Emerson WirelessHART Gateway
Published
May 14, 2020, 4:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-135-02
Summary
This advisory contains mitigations for an Improper Access Control vulnerability in the Emerson WirelessHART Gateway.
14.05.2020
US CERT (ICS)
3S-Smart Software Solutions GmbH CODESYS V3 (Update A)
Title
3S-Smart Software Solutions GmbH CODESYS V3 (Update A)
Published
May 14, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-19-213-04
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-19-213-04 3S-Smart Software Solutions GmbH CODESYS V3 that was published August 1, 2019, to the ICS webpage on us-cert.gov. This advisory includes mitigations for an insufficiently protected credentials vulnerability reported in the 3S-Smart Software Solutions GmbH CODESYS V3 products.
12.05.2020
US CERT (ICS)
Eaton Intelligent Power Manager
Title
Eaton Intelligent Power Manager
Published
May 12, 2020, 4:40 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-133-01
Summary
This advisory contains mitigations for improper input validation and incorrect privilege assignment vulnerabilities in Eaton's Intelligent Power Manager, a software monitoring and management platform.
12.05.2020
US CERT (ICS)
OSIsoft PI System
Title
OSIsoft PI System
Published
May 12, 2020, 4:35 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-133-02
Summary
This advisory contains mitigations for a several vulnerabilities in the OSIsoft PI System, a real-time data historian application.
12.05.2020
US CERT (ICS)
Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update A)
Title
Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update A)
Published
May 12, 2020, 4:30 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-05
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-20-105-05 Siemens IE/PB-Link, RUGGEDCOM, SCALANCE, SIMATIC, SINEMA that was published April 14, 2020, to the ICS webpage on us-cert.gov. This advisory contains mitigations for uncontrolled resource consumption and improper input validation vulnerabilities in Siemens RUGGEDCOM, SCALANCE, SIMATIC, and SINEMA ...
12.05.2020
US CERT (ICS)
Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update A)
Title
Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update A)
Published
May 12, 2020, 4:25 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-08
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-20-105-08 Siemens KTK, SIDOOR, SIMATIC, and SINAMICS that was published April 14, 2020, to the ICS webpage on us-cert.gov. This advisory contains mitigations for an uncontrolled resource consumption vulnerability in Siemens' KTN, SIDOOR, SIMATIC, and SINAMICS products.
12.05.2020
US CERT (ICS)
Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update C)
Title
Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update C)
Published
May 12, 2020, 4:20 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-042-06
Summary
This updated advisory is a follow-up to the advisory update titled 20-042-06 Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC that (Update B) was published April 14, 2020, to the ICS webpage on us-cert.gov. This advisory contains mitigations for an incorrect calculation of buffer size vulnerability in some ...
12.05.2020
US CERT (ICS)
Siemens SINAMICS (Update C)
Title
Siemens SINAMICS (Update C)
Published
May 12, 2020, 4:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-19-227-04
Summary
This updated advisory is a follow-up to the advisory update ICSA-19-227-04 Siemens SINAMICS (Update B) that was published December 10, 2019, to the ICS webpage on us-cert.gov. This updated advisory includes mitigations for a uncontrolled resource consumption vulnerability reported in Siemens SINAMICS products.
12.05.2020
US CERT (ICS)
Siemens SIPROTEC 5 and DIGSI 5 (Update C)
Title
Siemens SIPROTEC 5 and DIGSI 5 (Update C)
Published
May 12, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-19-190-05
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-19-190-05 Siemens SIPROTEC 5 and DIGSI 5 (Update B) that was published December 10, 2019, to the ICS webpage on us-cert.gov. This advisory includes mitigations for improper input validation vulnerabilities reported in Siemens’ SIPROTEC 5 and DIGSI 5 products.
07.05.2020
US CERT (ICS)
Advantech WebAccess Node
Title
Advantech WebAccess Node
Published
May 7, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-128-01
Summary
This advisory contains mitigations for Improper Validation of Array Index, Relative Path Traversal, SQL Injection, Stack-based Buffer Overflow, Heap-based Buffer Overflow, and Out-of-bounds Read vulnerabilities in Advantech's WebAccess Node HMI platform.
05.05.2020
US CERT (ICS)
Fazecast jSerialComm
Title
Fazecast jSerialComm
Published
May 5, 2020, 4:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/ICSA2012601
Summary
This advisory contains mitigations for an uncontrolled search path element vulnerability in Fazecast's jSerialComm, a platform-independend serial communication for Java.
05.05.2020
US CERT (ICS)
SAE IT-systems FW-50 Remote Telemetry Unit (RTU)
Title
SAE IT-systems FW-50 Remote Telemetry Unit (RTU)
Published
May 5, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/ICSA2012602
Summary
This advisory contains mitigations for Cross-site Scripting and Path Traversal vulnerabilities in the SAE IT-systems FW-50 Remote Telemetry Unit (RTU).
April 2020
28.04.2020
US CERT (ICS)
LCDS LAquis SCADA
Title
LCDS LAquis SCADA
Published
April 28, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-119-01
Summary
This advisory contains mitigations for exposure of sensitive information to an unauthorized actor, and improper input validation vulnerabilities in LCDS's LAquis SCADA software.
23.04.2020
US CERT (ICS)
Sierra Wireless AirLink ALEOS (Update B)
Title
Sierra Wireless AirLink ALEOS (Update B)
Published
April 23, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/ICSA-19-122-03
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-19-122-03 Sierra Wireless AirLink ALEOS (Update A) that was published August 20, 2019, to the ICS webpage on us-cert.gov. This updated advisory includes mitigations for OS command injection, use of hard-coded credentials, unrestricted upload of file with dangerous type, ...
21.04.2020
US CERT (ICS)
Inductive Automation Ignition
Title
Inductive Automation Ignition
Published
April 21, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-112-01
Summary
This advisory contains mitigations for an improper access control vulnerability in Inductive Automation's Ignition 8 Gateway web server software.
14.04.2020
US CERT (ICS)
Eaton HMiSoft VU3
Title
Eaton HMiSoft VU3
Published
April 14, 2020, 5:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-01
Summary
This advisory contains mitigations for stack-based buffer overflow and out-of-bounds read vulnerabilities in Eaton's HMiSoft VU3 human-machine interface (HMI).
14.04.2020
US CERT (ICS)
Triangle MicroWorks DNP3 Outstation Libraries
Title
Triangle MicroWorks DNP3 Outstation Libraries
Published
April 14, 2020, 5 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-02
Summary
This advisory contains mitigations for a stack-based buffer overflow vulnerability in Triangle MicroWorks DNP3 components and source code libraries.
14.04.2020
US CERT (ICS)
Triangle MicroWorks SCADA Data Gateway
Title
Triangle MicroWorks SCADA Data Gateway
Published
April 14, 2020, 4:55 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-03
Summary
This advisory contains mitigations for stack-based buffer overflow, out-of-bounds read, and type confusion vulnerabilities in the Triangle MicroWorks SCADA Data Gateway.

Last Updates

BOSCH PSIRT
15.01.2025
SIEMENS CERT
17.04.2025
US CERT
01.04.2025
US CERT (ICS)
17.04.2025

By Source

Archive

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds