#cisa

共收录 92 条相关情报。

← 返回所有主题
威胁情报2026-05-19 发布INFO

Kieback & Peter DDC Building Controllers

CVE-2026-4293

2026年5月19日,美国CISA发布ICS公告(ICSA-26-139-05),披露Kieback & Peter DDC系列楼宇控制器中存在一个存储型跨站脚本(XSS)漏洞(CVE-2026-4293,CVSS v3 5.3)。该漏洞源

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-19 发布INFO

Siemens RUGGEDCOM APE1808 Devices

CVE-2026-0300

CISA 发布了一份关于 Siemens RUGGEDCOM APE1808 设备的安全公告,该设备因集成了 Palo Alto Networks PAN-OS 软件而受到 CVE-2026-0300 漏洞的影响。该漏洞位于 PAN-OS

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-19 发布INFO

ZKTeco CCTV Cameras

CVE-2026-8598

CISA发布了一份ICS公告(ICSA-26-139-04),披露了ZKTeco CCTV摄像头中存在一个高危漏洞(CVE-2026-8598)。该漏洞涉及摄像头的一个未文档化的配置导出端口,无需身份验证即可访问,导致敏感信息泄露,包括开放

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-19 发布INFO

ABB CoreSense HM and CoreSense M10

CVE-2025-3465

View CSAF Summary An update is available that resolves vulnerability in the product versions listed as affected in this

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-19 发布INFO

ScadaBR

CVE-2026-8605 · CVE-2026-8604 · CVE-2026-8602 · CVE-2026-8603

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to perform unauthenticated re

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-15 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-42897

CISA于2026年5月15日将其已知被利用漏洞(KEV)目录新增一个漏洞CVE-2026-42897,该漏洞为Microsoft Exchange Server中的跨站脚本(XSS)漏洞。CISA根据已发现的在野利用证据将该漏洞列入KEV

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens Siemens ROS#

CVE-2026-41551

CISA 发布了一份关于 Siemens ROS# 的安全公告 (ICSA-26-134-08),指出该产品存在一个路径遍历漏洞 (CVE-2026-41551, CVSS 9.1 严重)。该漏洞存在于 ROS# 的 file_server

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens gWAP

CVE-2026-40175

2026年5月14日,CISA发布了一则关于西门子gPROMS Web Applications Publisher(gWAP)的安全公告。该产品存在一个远程代码执行漏洞(CVE-2026-40175),源于其使用的第三方Axios HTT

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens Ruggedcom Rox

CVE-2025-40949

CISA 发布 ICS 安全公告(ICSA-26-134-12),披露 Siemens Ruggedcom ROX 系列工业交换机/路由器中存在一个操作系统命令注入漏洞(CVE-2025-40949,CVSS 3.1 评分 9.1,严重)。

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens Simcenter Femap

CVE-2025-12659

View CSAF Summary Simcenter Femap is affected by heap based buffer overflow vulnerability in Datakit library that could

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Universal Robots Polyscope 5

CVE-2026-8153

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens Ruggedcom Rox

CVE-2025-40947

View CSAF Summary Ruggedcom Rox contains an input validation vulnerability in the feature key installation process that

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens Solid Edge

CVE-2026-44412 · CVE-2026-44411

View CSAF Summary Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be trigge

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens SENTRON 7KT PAC1261 Data Manager

CVE-2025-22871

View CSAF Summary The web server in SENTRON 7KT PAC1261 Data Manager Before V2.1.0 contains a request smuggling vulnerab

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens Ruggedcom Rox

CVE-2025-40948

View CSAF Summary Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remo

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-20182

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens Industrial Devices

CVE-2025-40833

View CSAF Summary Multiple industrial devices contain a vulnerability that could allow an attacker to cause a denial of

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens SIMATIC

CVE-2024-57924 · CVE-2024-47704

View CSAF Summary SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in avai

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens Ruggedcom Rox

CVE-2019-14195 · CVE-2019-14193 · CVE-2022-30552 · CVE-2019-14201 · CVE-2024-57258 · CVE-2019-14192 · CVE-2019-13103 · CVE-2022-2347 · CVE-2025-9714 · CVE-2025-7425 · CVE-2025-0395 · CVE-2019-13106 · CVE-2022-34835 · CVE-2019-14202 · CVE-2019-14204 · CVE-2019-14200 · CVE-2024-57256 · CVE-2025-49796 · CVE-2019-13104 · CVE-2024-3447 · CVE-2019-14203 · CVE-2023-27043 · CVE-2019-14199 · CVE-2024-22365 · CVE-2020-10648 · CVE-2025-46836 · CVE-2019-14197 · CVE-2023-3019 · CVE-2019-14198 · CVE-2019-14196 · CVE-2022-30790 · CVE-2025-3576 · CVE-2025-49794 · CVE-2019-14194 · CVE-2025-6020

View CSAF Summary Ruggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new ve

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens Teamcenter

CVE-2026-33862 · CVE-2026-33893 · CVE-2024-4367

View CSAF Summary Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromis

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories