April 2020
14.04.2020
US CERT (ICS)
Siemens Climatix
Title
Siemens Climatix
Published
April 14, 2020, 4:50 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-04
Summary
This advisory contains mitigations for cross-site scripting and basic XSS vulnerabilities in Siemens Climatix controllers.
14.04.2020
US CERT (ICS)
Siemens IE/PB-Link, RUGGEDCOM, SCALANCE, SIMATIC, SINEMA
Title
Siemens IE/PB-Link, RUGGEDCOM, SCALANCE, SIMATIC, SINEMA
Published
April 14, 2020, 4:45 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-05
Summary
This advisory contains mitigations for uncontrolled resource consumption and improper input validation vulnerabilities in Siemens IE/PB-Link, RUGGEDCOM, SCALANCE, SIMATIC, and SINEMA products.
14.04.2020
US CERT (ICS)
Siemens SIMOTICS, Desigo, APOGEE, and TALON
Title
Siemens SIMOTICS, Desigo, APOGEE, and TALON
Published
April 14, 2020, 4:40 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-06
Summary
This advisory contains mitigations for a business logic errors vulnerability in Siemens' SIMOTICS, Desigo, APOGEE, and TALON products.
14.04.2020
US CERT (ICS)
Siemens SCALANCE & SIMATIC
Title
Siemens SCALANCE & SIMATIC
Published
April 14, 2020, 4:35 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-07
Summary
This advisory contains mitigations for a resource exhaustion vulnerability in Siemens' SCALANCE and SIMATIC products.
14.04.2020
US CERT (ICS)
Siemens KTK, SIDOOR, SIMATIC, and SINAMICS
Title
Siemens KTK, SIDOOR, SIMATIC, and SINAMICS
Published
April 14, 2020, 4:30 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-08
Summary
This advisory contains mitigations for an uncontrolled resource consumption vulnerability in Siemens' KTN, SIDOOR, SIMATIC, and SINAMICS products.
14.04.2020
US CERT (ICS)
Siemens TIM 3V-IE and 4R-IE Family Devices
Title
Siemens TIM 3V-IE and 4R-IE Family Devices
Published
April 14, 2020, 4:25 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-105-09
Summary
This advisory contains mitigations for an active debug code vulnerability in Siemens TIM 3V-IE and 4R-IE Family Devices.
14.04.2020
US CERT (ICS)
Siemens SIMATIC S7 (Update B)
Title
Siemens SIMATIC S7 (Update B)
Published
April 14, 2020, 4:20 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-042-05
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-20-042-05 Siemens SIMATIC S7 (Update A) that was published March 10, 2020, to the ICS webpage on us-cert.gov. This advisory contains mitigations for a resource exhaustion vulnerability in Siemens SIMATIC S7 devices.
07.04.2020
US CERT (ICS)
Advantech WebAccess/NMS
Title
Advantech WebAccess/NMS
Published
April 7, 2020, 4:25 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-098-01
Summary
This advisory contains mitigations for multiple vulnerabilities in Advantech's WebAccess/NMS network management system.
07.04.2020
US CERT (ICS)
GE Digital CIMPLICITY
Title
GE Digital CIMPLICITY
Published
April 7, 2020, 4:20 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-098-02
Summary
This advisory contains mitigations for a privilege escalation vulnerability in GE Digital CIMPLICITY HMI/SCADA products.
07.04.2020
US CERT (ICS)
HMS Networks eWON Flexy and Cosy
Title
HMS Networks eWON Flexy and Cosy
Published
April 7, 2020, 4:15 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-098-03
Summary
This advisory contains mitigations for a cross-site scripting vulnerability in HMS Networks eWON Flexy and Cosy Industrial VPN routers.
07.04.2020
US CERT (ICS)
KUKA.Sim Pro
Title
KUKA.Sim Pro
Published
April 7, 2020, 4:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-098-05
Summary
This advisory contains mitigations for a ### vulnerability in ###, a ###
07.04.2020
US CERT (ICS)
Synergy Systems & Solutions HUSKY RTU (Update A)
Title
Synergy Systems & Solutions HUSKY RTU (Update A)
Published
April 7, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-042-01
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-20-042-01 Synergy Systems & Solutions HUSKY RTU that was published February 11, 2020, to the ICS webpage on us-cert.gov. This advisory contains mitigations for improper authentication and improper input validation vulnerabilities in Synergy Systems & Solutions HUSKY RTU, a ...
02.04.2020
US CERT (ICS)
B&R Automation Studio
Title
B&R Automation Studio
Published
April 2, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-093-01
Summary
This advisory contains mitigations for improper privilege management, missing required cryptographic step, and path traversal vulnerabilities in B&R Automation Studio software.
March 2020
31.03.2020
US CERT (ICS)
BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System
Title
BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System
Published
March 31, 2020, 4:15 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsma-20-091-01
Summary
This advisory contains mitigations for a protection mechanism failure vulnerability in BD Pyxis medical devices.
31.03.2020
US CERT (ICS)
Hirschmann Automation and Control HiOS and HiSecOS Products
Title
Hirschmann Automation and Control HiOS and HiSecOS Products
Published
March 31, 2020, 4:10 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-091-01
Summary
This advisory contains mitigations for a classic buffer overflow vulnerability in Hirschmann Automation and Control HiOS and HiSecOS software.
31.03.2020
US CERT (ICS)
Mitsubishi Electric MELSEC
Title
Mitsubishi Electric MELSEC
Published
March 31, 2020, 4:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-091-02
Summary
This advisory contains mitigations for an uncontrolled resource consumption vulnerability in Mitsubishi Electric MELSEC programmable controllers.
31.03.2020
US CERT (ICS)
Schneider Electric Modicon Controllers (Update A)
Title
Schneider Electric Modicon Controllers (Update A)
Published
March 31, 2020, 4 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-016-01
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-20-016-01 Schneider Electric Modicon Controllers that was published January 16, 2020, to the ICS webpage on us-cert.gov. This advisory contains mitigations for several improper check for unusual or exceptional conditions vulnerabilities in Schneider Electric Modicon PLC controllers.
24.03.2020
US CERT (ICS)
VISAM Automation Base (VBASE)
Title
VISAM Automation Base (VBASE)
Published
March 24, 2020, 3:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-084-01
Summary
This advisory contains mitigations for several vulnerabilities in VISAM's VBASE automation platform.
19.03.2020
US CERT (ICS)
Insulet Omnipod
Title
Insulet Omnipod
Published
March 19, 2020, 3:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsma-20-079-01
Summary
This advisory contains mitigations for an improper access control vulnerability in Insulet's Omnipod insulin management system.
19.03.2020
US CERT (ICS)
Systech NDS-5000 Terminal Server
Title
Systech NDS-5000 Terminal Server
Published
March 19, 2020, 3 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-079-01
Summary
This advisory contains mitigations for a cross-site scripting vulnerability in Systech's NDS-5000 network server.
17.03.2020
US CERT (ICS)
Delta Electronics Industrial Automation CNCSoft ScreenEditor
Title
Delta Electronics Industrial Automation CNCSoft ScreenEditor
Published
March 17, 2020, 3 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-077-01
Summary
This advisory contains mitigations for stack-based buffer overflow and out-of-bounds read vulnerabilities in the Delta Electronics Industrial Automation CNCSoft user interface.
12.03.2020
US CERT (ICS)
ABB Asset Suite
Title
ABB Asset Suite
Published
March 12, 2020, 3:05 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-072-02
Summary
This advisory contains mitigations for an authorization bypass through user-controlled key vulnerability in ABB Asset Suite software.
10.03.2020
US CERT (ICS)
SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet
Title
SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet
Published
March 10, 2020, 4:25 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-070-02
Summary
This advisory contains mitigations for an uncontrolled resource consumption vulnerability in Siemens SIMATIC and SINUMERIK controllers.
10.03.2020
US CERT (ICS)
Siemens Spectrum Power 5
Title
Siemens Spectrum Power 5
Published
March 10, 2020, 4:20 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-070-03
Summary
This advisory contains mitigations for a basic cross-site scripting (XSS) vulnerability in the Siemens Spectrum Power 5 grid control system.
10.03.2020
US CERT (ICS)
Johnson Controls Kantech EntraPass
Title
Johnson Controls Kantech EntraPass
Published
March 10, 2020, 4:15 p.m.
URL
https://www.us-cert.gov/ics/advisories/icsa-20-070-04
Summary
This advisory contains mitigations for an improper input validation vulnerability in the Johnson Controls Kantech EntraPass security management software.

Last Updates

BOSCH PSIRT
15.01.2025
SIEMENS CERT
17.04.2025
US CERT
01.04.2025
US CERT (ICS)
17.04.2025

By Source

Archive

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds