#cisa

共收录 92 条相关情报。

← 返回所有主题
威胁情报2026-05-14 发布INFO

Siemens Opcenter RDnL

CVE-2026-27446

View CSAF Summary Opcenter RDnL is affected by missing authentication in critical function in ‘ActiveMQ Artemis’. An una

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens SIMATIC S7 PLC Web Server

CVE-2026-25786 · CVE-2026-25787 · CVE-2026-25789

View CSAF Summary SIMATIC S7 PLCs contain multiple vulnerabilities in the web server that could allow an attacker to per

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens SIMATIC

CVE-2026-27662

View CSAF Summary SIMATIC HMI Unified Comfort Panels before V21.0 are affected by a vulnerability that allows an unauthe

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-14 发布INFO

Siemens SIPROTEC 5

CVE-2024-54017

View CSAF Summary The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This co

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-12 发布INFO

ABB Automation Builder Gateway for Windows

CVE-2024-41975

CISA发布了一份关于ABB Automation Builder Gateway for Windows的安全公告(ICSA-26-132-04),披露了一个严重漏洞(CVE-2024-41975)。该漏洞源于网关配置的默认设置不安全:默

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-12 发布INFO

Software Bill of Materials for AI - Minimum Elements

CISA and the Group of Seven (G7) international partners—Germany, Canada, France, Italy, Japan, the United Kingdom, and t

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-12 发布INFO

ABB AC500 V3 Stack Buffer Overflow in Cryptographic Message Syntax

CVE-2025-15467

View CSAF Summary ABB became aware of vulnerability in the products versions listed as affected in the advisory. An upda

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-12 发布INFO

Subnet Solutions PowerSYSTEM Center

CVE-2026-33570 · CVE-2026-35555 · CVE-2026-35504 · CVE-2026-26289

View CSAF Summary Successful exploitation of these vulnerabilities could allow an authenticated attacker to expose sensi

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-12 发布INFO

ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities

CVE-2025-4675 · CVE-2025-4676

View CSAF Summary ABB became aware of multiple internally discovered vulnerabilities in the WebPro SNMP card PowerValue

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-12 发布INFO

ABB AC500 V3 Multiple Vulnerabilities

CVE-2025-41691 · CVE-2025-41659 · CVE-2025-2595

View CSAF Summary ABB became aware of severe vulnerability in the products versions listed as affected in the advisory.

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-12 发布INFO

Fuji Electric Tellus

CVE-2026-8108

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to elevate privileges from user

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-08 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-42208

2026年5月8日,美国网络安全与基础设施安全局(CISA)在其已知被利用漏洞(KEV)目录中新增了一个漏洞CVE-2026-42208。该漏洞是BerriAI LiteLLM中的一个SQL注入漏洞,已被发现存在积极利用的证据。LiteLL

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-07 发布INFO

MAXHUB Pivot Client Application

CVE-2026-6411

CISA于2026年5月7日发布ICS公告(ICSA-26-127-01),披露MAXHUB Pivot客户端应用(版本低于v1.36.2)存在一个高危漏洞(CVE-2026-6411),CVSS v3.1基础评分7.3。该漏洞源于应用程序

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-07 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-6973

2026年5月7日,美国网络安全和基础设施安全局(CISA)将CVE-2026-6973添加到已知被利用漏洞(KEV)目录中。该漏洞影响Ivanti Endpoint Manager Mobile(EPMM),属于不当输入验证漏洞,已被攻击

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-06 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-0300

2026年5月6日,美国网络安全与基础设施安全局(CISA)在其已知被利用漏洞(KEV)目录中新增了一个漏洞(CVE-2026-0300)。该漏洞存在于Palo Alto Networks的PAN-OS操作系统,属于越界写入类型,攻击者可能

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-05 发布INFO

ABB B&R Automation Runtime

CVE-2025-11044

CISA发布了一份关于ABB B&R Automation Runtime的安全公告,披露了一个中等严重性漏洞(CVE-2025-11044)。该漏洞源于ANSL-Server组件中的资源分配无限制或限流问题(CWE-770),攻击者可利用

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-05 发布INFO

Johnson Controls CEM AC2000

CVE-2026-21661

CISA发布了关于Johnson Controls CEM AC2000访问控制系统的安全公告。该产品存在一个DLL劫持漏洞(CVE-2026-21661,CVSS 8.7,高危),攻击者可通过构造恶意DLL文件并诱使系统加载,从而将标准用

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-05 发布INFO

ABB B&R Automation Studio

CVE-2025-11043

CISA发布ICS咨询,披露ABB B&R Automation Studio版本6.5之前存在一个证书验证不当漏洞(CVE-2025-11043,CVSS 7.4)。该漏洞影响OPC-UA和ANSL over TLS客户端,由于服务器证书

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-05 发布INFO

Hitachi Energy PCM600

CVE-2018-1002208

View CSAF Summary Hitachi Energy is aware of a vulnerability that affects the Hitachi Energy PCM600 product versions lis

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-05 发布INFO

ABB B&R PVI

CVE-2026-0936

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An updat

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories