Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP
CVE-2026-11317
Rockwell Automation 发布安全公告，其 Logix 5370 和 5570 系列可编程逻辑控制器（PLC）存在一个拒绝服务漏洞（CVE-2026-11317）。该漏洞源于产品对特制 CIP（通用工业协议）消息的处理不当，导
#cisa
共收录 92 条相关情报。
← 返回所有主题Rockwell Automation RSLinx
CVE-2020-13573
CISA发布关于Rockwell Automation RSLinx Classic的漏洞通告，涉及CVE-2020-13573。该漏洞是一个栈缓冲区溢出漏洞，存在于RSLinx Classic版本4.50.00及更早版本中。攻击者无需身份
Rockwell Automation FLEX I/O EtherNet/IP Adapters
CVE-2026-0646 · CVE-2026-0647
Rockwell Automation FLEX I/O EtherNet/IP 适配器（型号 1794-AENTR 和 1794-AENTRXT）存在两个严重漏洞，影响版本 V2.012。CVE-2026-0646 是内存未释放漏洞（CW
Rockwell Automation FactoryTalk Analytics PavilionX
CVE-2025-14272
View CSAF Summary Successful exploitation of this vulnerability could result in an attacker executing privileged operati
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-48907
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e
Rockwell Automation CompactLogix
CVE-2026-9307 · CVE-2025-11694
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CVE-2026-20262 · CVE-2026-54420
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-35273
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e
Yarbo Android/iOS Mobile Application and Cloud Infrastructure
CVE-2026-10557 · CVE-2026-7368
2026年6月11日，CISA发布了一份关于Yarbo Android/iOS移动应用及其云基础设施的工业控制系统（ICS）公告。该公告披露了两个高危漏洞：CVE-2026-10557（硬编码凭据，CVSS 9.8）和CVE-2026-73
Brickcom Cameras
CVE-2026-50005 · CVE-2026-50245
美国网络安全和基础设施安全局（CISA）发布ICS公告，披露Brickcom摄像头产品中存在两个高危漏洞。CVE-2026-50245涉及/ONVIF端点缺少关键功能认证，允许远程未授权攻击者访问实时快照图像；CVE-2026-50005则
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-10520
2026年6月11日，美国网络安全和基础设施安全局（CISA）将CVE-2026-10520（Ivanti Sentry操作系统命令注入漏洞）添加到其已知被利用漏洞（KEV）目录中，原因是存在主动利用的证据。该漏洞影响Ivanti Sent
Naxclow IoT Platform
CVE-2026-50108 · CVE-2026-42947 · CVE-2026-50101
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, inter
Schneider Electric EcoStruxure Panel Server
CVE-2026-6866
2026年6月9日，美国网络安全与基础设施安全局（CISA）发布了施耐德电气（Schneider Electric）EcoStruxure Panel Server系列产品中存在的一个高危漏洞公告（ICSA-26-160-03）。该漏洞编号
Schneider Electric Modicon Network Managed Switches
CVE-2024-3596
2026年6月9日，CISA发布了一份关于施耐德电气Modicon系列网络管理型交换机中RADIUS协议漏洞的安全公告。该漏洞编号为CVE-2024-3596，属于通信通道消息完整性执行不当（CWE-924）。当交换机的RADIUS服务器消
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CVE-2026-20245 · CVE-2026-7473 · CVE-2026-11645
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of acti
Siemens KACO Blueplanet Inverters
CVE-2025-40946 · CVE-2026-41125
View CSAF Summary KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CVE-2026-42271 · CVE-2026-50751
CISA于2026年6月8日更新了已知被利用漏洞（KEV）目录，新增两个被积极利用的漏洞：CVE-2026-42271（BerriAI LiteLLM命令注入漏洞）和CVE-2026-50751（Check Point安全网关认证不当漏洞）
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-28318
2026年6月5日，美国网络安全和基础设施安全局（CISA）将CVE-2026-28318添加到已知被利用漏洞目录（KEV）。该漏洞影响SolarWinds Serv-U产品，属于不受控制的资源消耗漏洞（Uncontrolled Resou
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-45247
2026年6月3日，美国网络安全与基础设施安全局（CISA）将编号为 CVE-2026-45247 的漏洞添加至其已知被利用漏洞（KEV）目录。该漏洞存在于 Mirasvit Full Page Cache Warmer 组件中，属于反序列
CISA and Partners Urge Hardening Automatic Tank Gauge Systems
2026年6月2日，美国网络安全与基础设施安全局（CISA）联合联邦调查局（FBI）、国家安全局（NSA）、能源部（DOE）、环保署（EPA）、运输安全管理局（TSA）、交通部（DOT）及农业部（USDA）发布联合公告，指出近期观察到针对美