@prefix sepses: <http://w3id.org/sepses/ontology/> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

@prefix cve-res: <http://w3id.org/sepses/resource/cve/> .
@prefix cwe-res: <http://w3id.org/sepses/resource/cwe/> .
@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix icsa: <http://w3id.org/sepses/vocab/ref/icsa#> .
@prefix icsa-res: <http://w3id.org/sepses/resource/icsa/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

icsa-res:ICSA-10-070-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-10-070-01A" ;
    dcterms:issued "2010-03-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLinx Classic EDS Vulnerability (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2011-2530" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-2530 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLinx Classic EDS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EDS Hardware Installation Tool Version 1.0.5.1 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-070-01A" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2010 .

icsa-res:ICSA-10-070-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-070-02" ;
    dcterms:issued "2010-03-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell PLC5/SLC5/0x/RSLogix Security Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2010-5305" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2010-5305 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC5/SLC5/0x/RSLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell PLC-5 and SLC 5/0x controllers 1785-Lx and 1747-L5x RSLogix Programming and Configuration client software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-070-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2010 .

icsa-res:ICSA-10-090-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-090-01" ;
    dcterms:issued "2010-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mariposa Botnet" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mariposa Botnet" ;
    icsa:productDistribution "Spain, United States" ;
    icsa:productsAffected "Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-090-01" ;
    icsa:vendor "Mariposa Botnet" ;
    icsa:year 2010 .

icsa-res:ICSA-10-097-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-097-01" ;
    dcterms:issued "2010-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB NETCADOPS HELP SYSTEM VULNERABILITY" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "netCADOPS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All releases of the ABB netCADOPS product (netCADOPS web-based online Help)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-097-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2010 .

icsa-res:ICSA-10-147-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-147-01" ;
    dcterms:issued "2010-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cisco Network Building Mediator" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities; Information Technology" ;
    icsa:cveNumber "CVE-2010-0600; CVE-2010-0596; CVE-2010-0597" ;
    icsa:cweNumber "CWE-264" ;
    icsa:hasCVE cve-res:CVE-2010-0596,
        cve-res:CVE-2010-0597,
        cve-res:CVE-2010-0600 ;
    icsa:hasCWE cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Network Building Mediator (NBM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Richards-Zeta Mediator 2500 product Cisco Network Building Mediator NBM-2400 Cisco Network Building Mediator NBM-4800 All Mediator Framework software releases prior to 3.1.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-147-01" ;
    icsa:vendor "Cisco" ;
    icsa:year 2010 .

icsa-res:ICSA-10-201-01C a icsa:ICSA ;
    dcterms:identifier "ICSA-10-201-01C" ;
    dcterms:issued "2010-07-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "USB Malware Targeting Siemens Control Software (Update C)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2010-2568" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2010-2568 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens WinCC and STEP 7 software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC WinCC SIMATIC Siemens STEP 7 Windows XP SP 3 Windows XP Professional x64 Edition SP 2 Windows Server 2003 SP 2 Windows Server 2003 x64 Edition SP 2 Windows Server 2003 with SP2 for Itanium-based Systems Windows Vista SP 1 Windows Vista SP 2 Windows Vista x64 Edition SP 1 Windows Vista x64 Edition SP 2 Windows Server 2008 for 32-bit Systems Windows Server 2008 for 32-bit Systems SP 2 Windows Server 2008 for x64-based Systems Windows Server 2008 for x64-based Systems SP 2 Windows Server 2008 for Itanium-based Systems Windows Server 2008 for Itanium-based Systems SP 2 Windows 7 for 32-bit Systems Windows 7 for x64-based Systems Windows Server 2008 R2 for x64-based Systems Windows Server 2008 R2 for Itanium-based Systems" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-201-01C" ;
    icsa:vendor "Siemens" ;
    icsa:year 2010 .

icsa-res:ICSA-10-214-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-214-01" ;
    dcterms:issued "2010-08-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wind River VxWorks Vulnerabilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Defense Industrial Base; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2010-2966; CVE-2010-2967" ;
    icsa:cweNumber "CWE-255; CWE-310" ;
    icsa:hasCVE cve-res:CVE-2010-2966,
        cve-res:CVE-2010-2967 ;
    icsa:hasCWE cwe-res:CWE-255,
        cwe-res:CWE-310 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VxWorks" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "VxWorks" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-214-01" ;
    icsa:vendor "Wind River" ;
    icsa:year 2010 .

icsa-res:ICSA-10-228-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-228-01" ;
    dcterms:issued "2010-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Vendor Admin Accounts Warning" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vendor Admin Vulnerability" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "New Control System Software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-228-01" ;
    icsa:vendor "Vendor Admin" ;
    icsa:year 2010 .

icsa-res:ICSA-10-238-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-10-238-01B" ;
    dcterms:issued "2010-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Stuxnet Malware Mitigation (Update B)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2008-4250; CVE-2010-2568" ;
    icsa:cweNumber "CWE-94; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2008-4250,
        cve-res:CVE-2010-2568 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens WinCC and STEP 7 software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-238-01B" ;
    icsa:vendor "Siemens" ;
    icsa:year 2010 .

icsa-res:ICSA-10-264-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-264-01" ;
    dcterms:issued "2010-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "SCADA Engine BACnet OPC Client Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2010-4740" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2010-4740 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BACnet OPC Client" ;
    icsa:productDistribution "Singapore, Thailand, Australia" ;
    icsa:productsAffected "SCADA Engine Version 1.0.24 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-264-01" ;
    icsa:vendor "SCADA Engine" ;
    icsa:year 2010 .

icsa-res:ICSA-10-272-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-272-01" ;
    dcterms:issued "2010-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Primary Stuxnet Advisory" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2010-4142" ;
    icsa:cweNumber "CWE-255" ;
    icsa:hasCVE cve-res:CVE-2010-4142 ;
    icsa:hasCWE cwe-res:CWE-255 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens WinCC and STEP 7 software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens WinCC and STEP 7 software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-272-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2010 .

icsa-res:ICSA-10-301-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-10-301-01A" ;
    dcterms:issued "2010-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "MOXA Device Manager Buffer Overflow (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing; Communications; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2010-4741" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2010-4741 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Device Manager" ;
    icsa:productDistribution "China, Germany, Taiwan, United States" ;
    icsa:productsAffected "MOXA Device Manager Version 2.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-301-01A" ;
    icsa:vendor "Moxa" ;
    icsa:year 2010 .

icsa-res:ICSA-10-313-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-313-01" ;
    dcterms:issued "2010-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "RealFlex RealWin Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Communications; Energy; Oil and Gas; Transportation Systems; Maritime; Water and Wastewater" ;
    icsa:cveNumber "CVE-2010-4142" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2010-4142 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RealWin" ;
    icsa:productDistribution "Ireland, Russia" ;
    icsa:productsAffected "All RealWin versions up to and including Version 2.1.8 (Build 6.1.8)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-313-01" ;
    icsa:vendor "RealFlex Technologies" ;
    icsa:year 2010 .

icsa-res:ICSA-10-314-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-10-314-01A" ;
    dcterms:issued "2010-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "ClearScada Vulnerabilities (Update A)" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Oil and Gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-3144; CVE-2011-3143" ;
    icsa:cweNumber "CWE-122; CWE-399; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2011-3143,
        cve-res:CVE-2011-3144 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-399,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ClearScada" ;
    icsa:productDistribution "United Kingdom" ;
    icsa:productsAffected "ClearSCADA 2005 (all versions) ClearSCADA 2007 (all versions) ClearSCADA 2009 (all versions except R2.3 and R1.4) SCX Version 67 R4.5SCX Version 68 R3.9" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-314-01A" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2010 .

icsa-res:ICSA-10-316-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-10-316-01A" ;
    dcterms:issued "2010-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Intellicom NetBiter WebSCADA Vulnerabilities (Update A)" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Communications; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NeBiter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Intellicom NetBiter (NB100 and NB200 platforms): WebSCADA (WS100) WebSCADA (WS200) Easy Connect (EC150) Modbus RTU - TCP Gateway (MB100) Serial Ethernet Server (SS100)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-316-01A" ;
    icsa:vendor "Intellicom" ;
    icsa:year 2010 .

icsa-res:ICSA-10-322-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-322-01" ;
    dcterms:issued "2010-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2010-4597" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2010-4597 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All IntegraXor versions prior to v3.5 (Build 3900.10)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-322-01" ;
    icsa:vendor "Ecava" ;
    icsa:year 2010 .

icsa-res:ICSA-10-322-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-10-322-02A" ;
    dcterms:issued "2010-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Automated Solutions OPC Vulnerability (Update)" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Automated Solutions Modbus/TCP Master OPC Server product (Version 3.0.0) and all previous versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-322-02A" ;
    icsa:vendor "Automated Solutions" ;
    icsa:year 2010 .

icsa-res:ICSA-10-337-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-337-01" ;
    dcterms:issued "2010-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech Studio Test Web Server Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-0488" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-0488 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Studio Test Web Server" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Advantech Studio Version 6.1 (Test Serve Bundle) and all previous versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-337-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2010 .

icsa-res:ICSA-10-348-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-10-348-01A" ;
    dcterms:issued "2010-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wonderware InBatch Vulnerability (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Pharmaceutical; Food and Agriculture" ;
    icsa:cveNumber "CVE-2011-2962; CVE-2011-3141" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-2962,
        cve-res:CVE-2011-3141 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware" ;
    icsa:productDistribution "North America, Europe" ;
    icsa:productsAffected "Wonderware InBatch 8.1 - InBatch Server (all versions) Windows XP Professional Windows 2000 Server Windows Server 2003 Wonderware InBatch 9.0 - InBatch Server (all versions) Windows XP Professional Windows Server 2003 I/A Series Batch 8.1 - I/A Series Batch Server (all versions) Windows Server 2003 Server R2 Windows XP Professional SP2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-348-01A" ;
    icsa:vendor "Invensys" ;
    icsa:year 2010 .

icsa-res:ICSA-10-362-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-10-362-01" ;
    dcterms:issued "2010-12-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor Directory Traversal" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2010-4598; CVE-2010-4599" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2010-4598,
        cve-res:CVE-2010-4599 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United states" ;
    icsa:productsAffected "All IntegraXor versions prior to Version 3.6 (Build 4000.0)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-10-362-01" ;
    icsa:vendor "Ecava" ;
    icsa:year 2010 .

icsa-res:ICSA-11-017-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-017-01" ;
    dcterms:issued "2011-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech Kingview 6.53 Remote Heap Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Defense Industrial Base Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-0406" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-0406 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingView 6.53" ;
    icsa:productDistribution "China" ;
    icsa:productsAffected "Chinese and English language versions of KingView V6.53" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-017-01" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2011 .

icsa-res:ICSA-11-017-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-017-02" ;
    dcterms:issued "2011-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sielco Sistemi WinLog Stack Overflow" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2011-0517" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-0517 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinLog" ;
    icsa:productDistribution "Italy" ;
    icsa:productsAffected "WinLog Lite and WinLog Pro prior to Version 2.07. 00" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-017-02" ;
    icsa:vendor "Sielco Sistemi" ;
    icsa:year 2011 .

icsa-res:ICSA-11-018-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-018-01" ;
    dcterms:issued "2011-01-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "AGG SCADA Viewer OPC Buffer Overflow Vulnerability" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA Viewer OPC" ;
    icsa:productDistribution "North America" ;
    icsa:productsAffected "All OPC SCADA Viewer versions prior to Version 1.5.2 (Build 110)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-018-01" ;
    icsa:vendor "AGG Software" ;
    icsa:year 2011 .

icsa-res:ICSA-11-018-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-018-02" ;
    dcterms:issued "2011-01-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "7-Technologies IGSS 8 ODBC Server Remote Heap Corruption" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; oil and gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-2214" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-2011-2214 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS 8 ODBC Server" ;
    icsa:productDistribution "Denmark, Asia, Europe" ;
    icsa:productsAffected "IGSS Versions 8 and 9" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-018-02" ;
    icsa:vendor "7-Technologies" ;
    icsa:year 2011 .

icsa-res:ICSA-11-025-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-025-01" ;
    dcterms:issued "2011-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Federal Aviation Administration GPS Testing" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GPS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Global Positioning System (GPS)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-025-01" ;
    icsa:vendor "Other" ;
    icsa:year 2011 .

icsa-res:ICSA-11-041-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-041-01A" ;
    dcterms:issued "2011-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "McAfee Night Dragon Report (Update A)" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Chemical; Information Technology; Energy; oil and gas" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "McAfee Night Dragon" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Control systems in oil; and petrochemical industries; energy" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-041-01A" ;
    icsa:vendor "Other" ;
    icsa:year 2011 .

icsa-res:ICSA-11-056-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-056-01A" ;
    dcterms:issued "2011-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Progea Movicon TCPUploadServer (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-2963" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2011-2963 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Movicon Power HMI" ;
    icsa:productDistribution "Italy, Europe" ;
    icsa:productsAffected "Movicon 11.2 prior to Build 1084" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-056-01A" ;
    icsa:vendor "Progea" ;
    icsa:year 2011 .

icsa-res:ICSA-11-069-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-11-069-01B" ;
    dcterms:issued "2011-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Samsung Data Management Server (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2010-4284" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2010-4284 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Data Management Server" ;
    icsa:productDistribution "China, South Korea, United States, Europe" ;
    icsa:productsAffected "Data Management Server Version 1.4.2 and all earlier versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-069-01B" ;
    icsa:vendor "Samsung" ;
    icsa:year 2011 .

icsa-res:ICSA-11-074-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-074-01" ;
    dcterms:issued "2011-03-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingView 6.53 KVWebSvr ActiveX" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Defense Industrial Base Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-3142; CVE-2011-0406; CVE-2011-4536" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-0406,
        cve-res:CVE-2011-3142,
        cve-res:CVE-2011-4536 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingView 6.53 KVWebSvr" ;
    icsa:productDistribution "China" ;
    icsa:productsAffected "KingView V6.53" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-074-01" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2011 .

icsa-res:ICSA-11-082-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-082-01" ;
    dcterms:issued "2011-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor SQL" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2011-2958" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2011-2958 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "All IntegraXor versions prior to Version 3.60 (Build 4032)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-082-01" ;
    icsa:vendor "Ecava" ;
    icsa:year 2011 .

icsa-res:ICSA-11-084-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-084-01" ;
    dcterms:issued "2011-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-01-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Solar Magnetic Storm Impact on Control Systems" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Communications; Dams; Emergency Services; Energy; oil and gas; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solar Magnetic Storm" ;
    icsa:productDistribution "Canada, Sweden, United States, South Africa, North America, Africa" ;
    icsa:productsAffected "Terrestrial communications and other electronic systems supporting critical infrastructure" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-084-01" ;
    icsa:vendor "Other" ;
    icsa:year 2011 .

icsa-res:ICSA-11-091-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-091-01A" ;
    dcterms:issued "2011-04-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Tecnomatix FactoryLink Vulnerabilities (Update A)" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; oil and gas; Food and Agriculture; Government Facilities" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tecnomatix FactoryLink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of Siemens Tecnomatix FactoryLink prior to and including Version 8.0.1.1473" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-091-01A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2011 .

icsa-res:ICSA-11-094-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-094-01" ;
    dcterms:issued "2011-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wonderware InBatch Client ActiveX Buffer Overflow" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Pharmaceutical" ;
    icsa:cveNumber "CVE-2011-3141" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-3141 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware" ;
    icsa:productDistribution "North America, Europe" ;
    icsa:productsAffected "Wonderware InBatch 8.1--InBatch Runtime Clients (all versions) Windows XP Professional Windows 2000 Server Windows Server 2003 Wonderware InBatch 9.0--InBatch Runtime Clients (all versions) Windows XP Professional Windows Server 2003 Windows Server 2008" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-094-01" ;
    icsa:vendor "Invensys" ;
    icsa:year 2011 .

icsa-res:ICSA-11-094-02B a icsa:ICSA ;
    dcterms:identifier "ICSA-11-094-02B" ;
    dcterms:issued "2011-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech/Broadwin WebAccess RPC Vulnerability (Update B)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2011-4041" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2011-4041 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Broadwin WebAccess" ;
    icsa:productDistribution "South America, Asia, Europe, North Africa, Africa, Middle East" ;
    icsa:productsAffected "including all legacy versions; Affects all versions of WebAccess prior to Version 7.1 2013.05.30" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-094-02B" ;
    icsa:vendor "Advantech" ;
    icsa:year 2011 .

icsa-res:ICSA-11-096-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-096-01" ;
    dcterms:issued "2011-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "GLEG Agora SCADA+ Exploit Pack" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Russia" ;
    icsa:criticalInfrastructureSector "Multiple Critical sectors" ;
    icsa:cveNumber "CVE-2001-1341; CVE-2010-4740; CVE-2010-4709; CVE-2008-0760; CVE-2010-4741; CVE-2008-0175; CVE-2010-2974; CVE-2010-4142; CVE-2010-4598; CVE-2001-1340; CVE-2011-0488; CVE-2006-6488; CVE-2008-2639" ;
    icsa:cweNumber "CWE-119; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2001-1340,
        cve-res:CVE-2001-1341,
        cve-res:CVE-2006-6488,
        cve-res:CVE-2008-0175,
        cve-res:CVE-2008-0760,
        cve-res:CVE-2008-2639,
        cve-res:CVE-2010-2974,
        cve-res:CVE-2010-4142,
        cve-res:CVE-2010-4598,
        cve-res:CVE-2010-4709,
        cve-res:CVE-2010-4740,
        cve-res:CVE-2010-4741,
        cve-res:CVE-2011-0488 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GLEG Agora SCADA+" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Indusoft SCADA web studio 7.0 SCADA Trace Mode Data Center IGSS SCADA odbc server IGSS ODBC Server OPC Modbus Ethernet OPC Server Automated Solutions OPC Server ITS scada Automated Solutions Modbus/TCP OPC Server BACnet OPC client before 1.0.25 Advantech Studio 6.1 Web server ICONICS Dialog Wrapper Module ActiveX control BECK GMBH; INDUSTRIAL PC SafeNet Sentinel Protection Server 7.4.1.0 Sentinel Keys Server 1.0.4.0 DATARATE SCADA 2.5 SCADA MOXA Device Manager Tool 2.1 Moxa Device Manager Buffer Overflow Ecava IntegraXor GE Fanuc Real Time Information Portal 2.6. Citect SCADA ODBC Invensys Wonderware InFusion SCADA (and other products) ActiveX DATAC RealWin SCADA 1.06" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-096-01" ;
    icsa:vendor "Other" ;
    icsa:year 2011 .

icsa-res:ICSA-11-103-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-103-01A" ;
    dcterms:issued "2011-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell ScanServer ActiveX Control (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2011-0331" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2011-0331 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScanServer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "which is a component of the Web Toolkit (Version 780.0.20.5) that is packaged with all versions of Honeywell SymmetrE. Web Toolkit may also be licensed separately for use with other software products.; Honeywell's ScanServer ActiveX control" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-103-01A" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2011 .

icsa-res:ICSA-11-108-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-108-01" ;
    dcterms:issued "2011-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS GENESIS (32 & 64) Vulnerabilities" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2007-6483" ;
    icsa:cweNumber "CWE-190; CWE-415" ;
    icsa:hasCVE cve-res:CVE-2007-6483 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-415 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GENESIS" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, United States, Asia, Europe" ;
    icsa:productsAffected "GENESIS32 Version 9.21 and priorGENESIS64 Version 10.51 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-108-01" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2011 .

icsa-res:ICSA-11-110-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-110-01" ;
    dcterms:issued "2011-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "RealFlex RealWin Vulnerabilities" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; oil and gas; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-1564" ;
    icsa:cweNumber "CWE-680" ;
    icsa:hasCVE cve-res:CVE-2011-1564 ;
    icsa:hasCWE cwe-res:CWE-680 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RealWin" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RealWin Versions 1.06A and earlier of its demo software only. The commercial version of RealWin is not affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-110-01" ;
    icsa:vendor "RealFlex Technologies" ;
    icsa:year 2011 .

icsa-res:ICSA-11-119-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-119-01" ;
    dcterms:issued "2011-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "7-Technologies IGSS ODBC Remote Stack Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; oil and gas;" ;
    icsa:cveNumber "CVE-2011-2959" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-2959 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS ODBC Server" ;
    icsa:productDistribution "Denmark, United States, Asia, Europe" ;
    icsa:productsAffected "7T IGSS Version 9 and all earlier versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-119-01" ;
    icsa:vendor "7-Technologies" ;
    icsa:year 2011 .

icsa-res:ICSA-11-122-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-122-01" ;
    dcterms:issued "2011-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "AzeoTech DAQFactory Networking Vulnerabilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-2956" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2011-2956 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DAQFactory" ;
    icsa:productDistribution "United States, Europe" ;
    icsa:productsAffected "Lite; Developer; Starter; or Runtime. DAQFactory Express; Pro; DAQFactory Standard; and Base do not support networking and are not vulnerable" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-122-01" ;
    icsa:vendor "AzeoTech" ;
    icsa:year 2011 .

icsa-res:ICSA-11-126-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-126-01" ;
    dcterms:issued "2011-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "7-Technologies IGSS Vulnerabilities" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2011-1566; CVE-2011-1565; CVE-2011-1567" ;
    icsa:cweNumber "CWE-119; CWE-22; CWE-121; CWE-134" ;
    icsa:hasCVE cve-res:CVE-2011-1565,
        cve-res:CVE-2011-1566,
        cve-res:CVE-2011-1567 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-134,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS" ;
    icsa:productDistribution "Denmark, United States, Asia, Europe" ;
    icsa:productsAffected "7T IGSS SCADA HMI prior to Version 9.0.0.11083" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-126-01" ;
    icsa:vendor "7-Technologies" ;
    icsa:year 2011 .

icsa-res:ICSA-11-131-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-131-01" ;
    dcterms:issued "2011-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS GENESIS32 and BizViz ActiveX Stack Overflow" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-2089" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-2089 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GENESIS32 and BizViz ActiveX" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, United States, Asia, Europe" ;
    icsa:productsAffected "GENESIS32 and BizViz (Versions 9 through 9.21)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-131-01" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2011 .

icsa-res:ICSA-11-132-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-132-01A" ;
    dcterms:issued "2011-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "7-Technologies IGSS Denial of Service (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2011-2214" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-2011-2214 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS" ;
    icsa:productDistribution "Denmark, United States, Asia, Europe" ;
    icsa:productsAffected "7T IGSS SCADA HMI Version 7 prior to Revision 10033.The vulnerabilities affect 7T IGSS SCADA HMI Version 8 prior to Revision 11102 7T IGSS SCADA HMI Version 9 prior to Revision 11143" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-132-01A" ;
    icsa:vendor "7-Technologies" ;
    icsa:year 2011 .

icsa-res:ICSA-11-147-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-11-147-01B" ;
    dcterms:issued "2011-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor DLL Hijacking (Update B)" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Multiple Critical sectors" ;
    icsa:cveNumber "CVE-2011-2958" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2011-2958 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "IntegraXor versions prior to Version 3.60 (Build 4090)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-147-01B" ;
    icsa:vendor "Ecava" ;
    icsa:year 2011 .

icsa-res:ICSA-11-147-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-147-02" ;
    dcterms:issued "2011-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor XSS" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Multiple Critical sectors" ;
    icsa:cveNumber "CVE-2011-2958" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2011-2958 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "IntegraXor versions prior to Version 3.60 (Build 4080)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-147-02" ;
    icsa:vendor "Ecava" ;
    icsa:year 2011 .

icsa-res:ICSA-11-161-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-161-01" ;
    dcterms:issued "2011-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell RSLinx EDS Vulnerability" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-2530" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-2530 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLinx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Electronic Data Sheet (EDS) Hardware Installation Tool Version 1.3.0.1 and all earlier versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-161-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2011 .

icsa-res:ICSA-11-167-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-167-01" ;
    dcterms:issued "2011-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sunway Force Control" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Chemical; Pharmaceutical; Communications; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2011-2961; CVE-2011-2960" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-2960,
        cve-res:CVE-2011-2961 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Force Control" ;
    icsa:productDistribution "China, Asia, Europe, Africa" ;
    icsa:productsAffected "and SP3) and pNetPower Version 6; SP2; Sunway ForceControl 6.1 (SP1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-167-01" ;
    icsa:vendor "Sunway" ;
    icsa:year 2011 .

icsa-res:ICSA-11-168-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-168-01A" ;
    dcterms:issued "2011-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "InduSoft ISSymbol ActiveX Control Buffer Overflow (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Pharmaceutical; Critical Manufacturing; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-0340" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-0340 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISSymbol ActiveX Control" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "InduSoft ISSymbol ActiveX Control (build 301.1009.2904.0) InduSoft Thin Client Version 7.0 InduSoft Web Studio Version 7.0B2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-168-01A" ;
    icsa:vendor "InduSoft" ;
    icsa:year 2011 .

icsa-res:ICSA-11-173-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-173-01" ;
    dcterms:issued "2011-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "ClearSCADA Remote Authentication Bypass" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ClearSCADA Remote Authentication" ;
    icsa:productDistribution "United Kingdom" ;
    icsa:productsAffected "ClearSCADA 2010 R1.0 ClearSCADA 2009 ClearSCADA 2007 ClearSCADA 2005. This Advisory applies to all versions of SCX (from Serck UK or Serck Aus) that are older than the following (these SCX versions contain ClearSCADA in the bundle):SCX Version 67 R4.5SCX Version 68 R3.9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-173-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2011 .

icsa-res:ICSA-11-175-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-175-01" ;
    dcterms:issued "2011-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell FactoryTalk Diag Viewer Memory Corruption" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-2957" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-2011-2957 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Diag Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions 2.10.x (SPR9 SR2) and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-175-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2011 .

icsa-res:ICSA-11-175-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-175-02" ;
    dcterms:issued "2011-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC Exploitable Crashes" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WinCC: ProTool 6.0 SP3 (has been phased-out) WinCC flexible 2004 (has been phased-out) WinCC flexible 2005 (has been phased-out) WinCC flexible 2005 SP1 WinCC flexible 2007 WinCC flexible 2008 WinCC flexible 2008 SP1 WinCC flexible 2008 SP2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-175-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2011 .

icsa-res:ICSA-11-182-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-182-01" ;
    dcterms:issued "2011-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS GENESIS32 and BizViz ActiveX Trusted Zone Vulnerability" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GENESIS32 and BizViz ActiveX" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, United States, Asia, Europe" ;
    icsa:productsAffected "GENESIS32 - Version 9.21; including Workbench / WebHMI components BizViz - Version 9.21" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-182-01" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2011 .

icsa-res:ICSA-11-182-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-182-02" ;
    dcterms:issued "2011-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS Login ActiveX Vulnerability" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Login ActiveX" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, United States, Asia, Europe" ;
    icsa:productsAffected "9.1 and 9.2 BizViz - Versions 8.05; 9.0; GENESIS32 - Versions 8.05; 9.1 and 9.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-182-02" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2011 .

icsa-res:ICSA-11-189-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-189-01" ;
    dcterms:issued "2011-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "7-Technologies IGSS Remote Memory Corruption" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2011-2214" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-2011-2214 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS" ;
    icsa:productDistribution "Denmark, United States, Asia, Europe" ;
    icsa:productsAffected "7T Interactive Graphical SCADA System (IGSS) versions prior to 9.0.0.11143" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-189-01" ;
    icsa:vendor "7-Technologies" ;
    icsa:year 2011 .

icsa-res:ICSA-11-195-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-195-01" ;
    dcterms:issued "2011-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wonderware Information Server" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Pharmaceutical; Energy; oil and gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-2962" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-2962 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Wonderware Information Server 3.1 Wonderware Information Server 4.0 Wonderware Information Server 4.0 SP1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-195-01" ;
    icsa:vendor "Invensys" ;
    icsa:year 2011 .

icsa-res:ICSA-11-216-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-216-01" ;
    dcterms:issued "2011-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Scadatec Limited Procyon Telnet Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2011-3322" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-3322 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Procyon Telnet" ;
    icsa:productDistribution "United Kingdom, Philippines, Singapore, Thailand" ;
    icsa:productsAffected "Scadatec Limited Procyon HMI prior to Version 1.14" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-216-01" ;
    icsa:vendor "Scadatec Limited" ;
    icsa:year 2011 .

icsa-res:ICSA-11-223-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-223-01A" ;
    dcterms:issued "2011-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC PLCs Reported Issues Summary (Update A)" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PLCs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC S7 product line; including:S7-200S7-300S7-400S7-1200" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-223-01A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2011 .

icsa-res:ICSA-11-231-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-231-01" ;
    dcterms:issued "2011-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition Information Disclosure Vulnerability" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Pharmaceutical; Critical Manufacturing; Energy; oil and gas; Food and Agriculture" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ignition" ;
    icsa:productDistribution "Australia, South America, Asia, Europe" ;
    icsa:productsAffected "Inductive Automation Ignition versions prior to Version 7.2.8.178" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-231-01" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2011 .

icsa-res:ICSA-11-243-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-243-01" ;
    dcterms:issued "2011-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Intelligent Platforms Proficy Plant Applications Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical sectors" ;
    icsa:cveNumber "CVE-2011-1919" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-1919 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligent Platforms Proficy Historian Data Archiver" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy Plant Applications (Version 5.0 and prior)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-243-01" ;
    icsa:vendor "GE" ;
    icsa:year 2011 .

icsa-res:ICSA-11-243-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-243-02" ;
    dcterms:issued "2011-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy Historian Web Administrator XSS" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical sectors" ;
    icsa:cveNumber "CVE-2011-3320" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2011-3320 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy Historian Web Administrator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy Historian: All versionsProficy HMI/SCADA CIMPLICITY: Version 8.1and 8.2 (If Historian is installed).Proficy HMI/SCADA iFIX: Versions 5.0 and 5.1 (If Historian is installed)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-243-02" ;
    icsa:vendor "GE" ;
    icsa:year 2011 .

icsa-res:ICSA-11-243-03A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-243-03A" ;
    dcterms:issued "2011-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Intelligent Platforms Proficy Historian Data Archiver Buffer Overflow Vulnerability (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical sectors" ;
    icsa:cveNumber "CVE-2011-1918" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-1918 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligent Platforms Proficy Historian Data Archiver" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy Historian: Versions 4.0 and priorProficy HMI/SCADA - CIMPLICITY: Version 8.1 (If Historian is installed)Proficy HMI/SCADA - iFix: Versions 5.0 and 5.1 (If Historian is installed)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-243-03A" ;
    icsa:vendor "GE" ;
    icsa:year 2011 .

icsa-res:ICSA-11-244-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-244-01" ;
    dcterms:issued "2011-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC Flexible Runtime Heap Overflow" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-3321" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-3321 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SIMATIC WinCC flexible RuntimeSiemens SIMATIC WinCC (TIA Portal) Runtime Advanced" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-244-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2011 .

icsa-res:ICSA-11-263-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-263-01" ;
    dcterms:issued "2011-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Measuresoft ScadaPro Vulnerabilities" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Pharmaceutical; Critical Manufacturing; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2011-3495; CVE-2011-3490; CVE-2011-3497; CVE-2011-3496" ;
    icsa:cweNumber "CWE-119; CWE-22; CWE-20; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2011-3490,
        cve-res:CVE-2011-3495,
        cve-res:CVE-2011-3496,
        cve-res:CVE-2011-3497 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScadaPro" ;
    icsa:productDistribution "Ireland" ;
    icsa:productsAffected "ScadaPro Version 4.0.0.0 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-263-01" ;
    icsa:vendor "Measuresoft" ;
    icsa:year 2011 .

icsa-res:ICSA-11-264-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-264-01" ;
    dcterms:issued "2011-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "AzeoTech DAQFactory Stack Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-3492" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-3492 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DAQFactory" ;
    icsa:productDistribution "United States, Europe" ;
    icsa:productsAffected "DAQFactory Version 5.85" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-264-01" ;
    icsa:vendor "AzeoTech" ;
    icsa:year 2011 .

icsa-res:ICSA-11-273-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-273-01" ;
    dcterms:issued "2011-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS GENESIS32 Multiple Memory Corruption" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GENESIS32" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, United States, Asia, Europe" ;
    icsa:productsAffected "V9.1; V9.0; AlarmWorX32 and TrendWorX32 containers GENESIS32 V9.2 - GraphWorX32; GENESIS32 V8.05; and V9.2 - ScriptWorX32" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-273-01" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2011 .

icsa-res:ICSA-11-273-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-273-02" ;
    dcterms:issued "2011-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "InduSoft ISSymbol ActiveX Control Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Pharmaceutical; Critical Manufacturing; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-0342" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-0342 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISSymbol ActiveX Control" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "InduSoft Web Studio Versions 7.0B2 (Build: 0301.1009.2904.0000) and 7.0 (Build: 0301.1102.0303.0000)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-273-02" ;
    icsa:vendor "InduSoft" ;
    icsa:year 2011 .

icsa-res:ICSA-11-273-03A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-273-03A" ;
    dcterms:issued "2011-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell RSLogix Overflow Vulnerability (Update A)" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-3489" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-3489 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "V18; and V19 All FactoryTalk-branded software of specific Versions CPR9 and CPR9-SR1 through SR4; RSLogix 5000 software Versions V17" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-273-03A" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2011 .

icsa-res:ICSA-11-277-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-277-01" ;
    dcterms:issued "2011-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric UnitelWay Buffer Overflow" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Information Technology" ;
    icsa:cveNumber "CVE-2011-3330" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-3330 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UnitelWay" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Platform Unity Pro Version 6 and prior Windows XP OPC Factory Server Version 3.34 Windows XP Vijeo Citect Version 7.20 and prior Windows XP Telemecanique Driver PackVersion 2.6 and prior Windows XP Monitor Pro Version 7.6 and prior Windows XP PL 7 Pro Version 4.5 and prior Windows XP These six products are known to have the vulnerable UnitelWay Windows Device Driver and are elements of Schneider Electric SoCollaborative software components. These components are part of Schneider Electric process automation architecture known as PlantStruxure." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-277-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2011 .

icsa-res:ICSA-11-279-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-279-01" ;
    dcterms:issued "2011-10-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech OPC Server Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Communications; Energy; Transportation Systems; Government Facilities" ;
    icsa:cveNumber "CVE-2011-1914" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-1914 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC Server" ;
    icsa:productDistribution "Taiwan, North America, Asia, East Asia" ;
    icsa:productsAffected "Advantech ADAM OPC Server Versions prior to V3.01.012 Advantech Modbus RTU OPC Server Versions prior to V3.01.010 Advantech Modbus TCP OPC Server Versions prior to V3.01.010" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-279-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2011 .

icsa-res:ICSA-11-279-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-279-02" ;
    dcterms:issued "2011-10-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "CitectSCADA and Mitsubishi MX4 SCADA Batch Server Buffer Overflow" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2011-5163" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-5163 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MX4 SCADA Batch Server" ;
    icsa:productDistribution "Taiwan, Europe" ;
    icsa:productsAffected "CitectSCADA V7.10 and prior using the CitectSCADA Batch Server module.Mitsubishi MX4 SCADA V7.10 and prior using the MX4 SCADA Batch module." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-279-02" ;
    icsa:vendor "Mitsubishi Electric Automation, Schneider Electric" ;
    icsa:year 2011 .

icsa-res:ICSA-11-279-03A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-279-03A" ;
    dcterms:issued "2011-10-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Unitronics UNIOPC Server Input Handling Vulnerability (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Israel" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2011-5086" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2011-5086 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UNIOPC Server" ;
    icsa:productDistribution "Israel" ;
    icsa:productsAffected "Unitronics UniOPC prior to Version 2.0.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-279-03A" ;
    icsa:vendor "Unitronics" ;
    icsa:year 2011 .

icsa-res:ICSA-11-279-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-279-04" ;
    dcterms:issued "2011-10-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Beckhoff TwinCAT Read Access Violation" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-3486" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-3486 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TwinCAT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2.11; 2.11R2; TwinCAT versions 2.10" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-279-04" ;
    icsa:vendor "Beckhoff Automation" ;
    icsa:year 2011 .

icsa-res:ICSA-11-280-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-280-01" ;
    dcterms:issued "2011-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cogent DataHub Vulnerabilities" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical" ;
    icsa:cveNumber "CVE-2011-3502; CVE-2011-3500; CVE-2011-3501; CVE-2011-3493" ;
    icsa:cweNumber "CWE-119; CWE-22; CWE-200; CWE-189" ;
    icsa:hasCVE cve-res:CVE-2011-3493,
        cve-res:CVE-2011-3500,
        cve-res:CVE-2011-3501,
        cve-res:CVE-2011-3502 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-189,
        cwe-res:CWE-200,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataHub" ;
    icsa:productDistribution "Canada, United Kingdom, United States" ;
    icsa:productsAffected "Cogent DataHub all of Version 7 until 7.1.2 OPC DataHub prior to Version 6.4.20 Cascade DataHub all of Version 6 6.4.20" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-280-01" ;
    icsa:vendor "Cogent Real-Time Systems Inc" ;
    icsa:year 2011 .

icsa-res:ICSA-11-285-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-285-01" ;
    dcterms:issued "2011-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell TEMA Remote Installer ActiveX Vulnerability" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TEMA Remote Installer" ;
    icsa:productDistribution "North America, South America" ;
    icsa:productsAffected "EBI product versions: EBI R310.1 - TEMA 4.8EBI R310.1 - TEMA 4.9EBI R310.1 - TEMA 4.10EBI R400.2 SP1 - TEMA 5.2EBI R410.1 - TEMA 5.3.0EBI R410.2 - TEMA 5.3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-285-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2011 .

icsa-res:ICSA-11-294-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-294-01" ;
    dcterms:issued "2011-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Progea Movicon Power HMI Vulnerabilities" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2011-3499; CVE-2011-3491; CVE-2011-3498" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-3491,
        cve-res:CVE-2011-3498,
        cve-res:CVE-2011-3499 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Movicon Power HMI" ;
    icsa:productDistribution "India, United States, Europe" ;
    icsa:productsAffected "Progea Movicon 11.2.1085.3 and earlier Progea Movicon PowerHMI 11.2.1085 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-294-01" ;
    icsa:vendor "Progea" ;
    icsa:year 2011 .

icsa-res:ICSA-11-298-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-298-01A" ;
    dcterms:issued "2011-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sielco Sistemi Winlog Buffer Overflow (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2011-4037" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-4037 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Winlog" ;
    icsa:productDistribution "Italy" ;
    icsa:productsAffected "Winlog Lite versions older than Version 2.07.09 Winlog PRO versions older than Version 2.07.09" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-298-01A" ;
    icsa:vendor "Sielco Sistemi" ;
    icsa:year 2011 .

icsa-res:ICSA-11-307-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-307-01" ;
    dcterms:issued "2011-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Vijeo Historian Web Server Multiple Vulnerabilities" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2011-4035; CVE-2011-4034; CVE-2011-4033; CVE-2011-4036" ;
    icsa:cweNumber "CWE-119; CWE-79; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2011-4033,
        cve-res:CVE-2011-4034,
        cve-res:CVE-2011-4035,
        cve-res:CVE-2011-4036 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-22,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vijeo Historian Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Vijeo Historian V4.30 and earlier Citect Historian V4.30 and earlier CitectSCADA Reports V4.10 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-307-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2011 .

icsa-res:ICSA-11-314-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-314-01" ;
    dcterms:issued "2011-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Safenet Sentinel and 7-T Input Sanitization Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical" ;
    icsa:cveNumber "CVE-2011-3339" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2011-3339 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sentinel and 7-T" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SafeNet Sentinel HASP SDK releases older than Version 5.11; Sentinel HASP Run-time installers older than Version 6.x7 Technologies (7T) IGSS Version 7" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-314-01" ;
    icsa:vendor "SafeNet" ;
    icsa:year 2011 .

icsa-res:ICSA-11-319-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-319-01" ;
    dcterms:issued "2011-11-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "InduSoft Web Studio Vulnerabilities" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Pharmaceutical; Critical Manufacturing; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4052; CVE-2011-4051" ;
    icsa:cweNumber "CWE-119; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2011-4051,
        cve-res:CVE-2011-4052 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Web Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "InduSoft Web Studio Versions 6.1 and 7.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-319-01" ;
    icsa:vendor "InduSoft" ;
    icsa:year 2011 .

icsa-res:ICSA-11-332-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-11-332-01A" ;
    dcterms:issued "2011-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wonderware InBatch ActiveX Vulnerabilities (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4870" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-4870 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Invensys Wonderware InBatch versions 8.1 SP1; and 9.5--InBatch Server and Runtime Clients9.0 and 9.0 SP1.The affected components exist in a variety of Wonderware products including InTouch and Information Server browser clients that have downloaded converted windows that contain these controls.According to Invensys; 9.0 SP2; I/A Series Batch 8.1 SP1 and Wonderware InBatch 9.5 SP1 and higher are not affected by these vulnerabilities." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-332-01A" ;
    icsa:vendor "Invensys" ;
    icsa:year 2011 .

icsa-res:ICSA-11-335-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-335-01" ;
    dcterms:issued "2011-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "7-Technologies Data Server Denial of Service" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2011-4050" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-4050 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Data Server" ;
    icsa:productDistribution "Denmark, United States, Asia, Europe" ;
    icsa:productsAffected "Version 9.0.0.11200 of 7T IGSS Data Server" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-335-01" ;
    icsa:vendor "7-Technologies" ;
    icsa:year 2011 .

icsa-res:ICSA-11-340-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-340-01" ;
    dcterms:issued "2011-12-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ARC Informatique PcVue HMI/SCADA ActiveX Vulnerabilities" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical" ;
    icsa:cveNumber "CVE-2011-4043; CVE-2011-4042" ;
    icsa:cweNumber "CWE-189" ;
    icsa:hasCVE cve-res:CVE-2011-4042,
        cve-res:CVE-2011-4043 ;
    icsa:hasCWE cwe-res:CWE-189 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PcVue HMI/SCADA ActiveX" ;
    icsa:productDistribution "Europe" ;
    icsa:productsAffected "PcVue-All versions from 6.xx onwardFrontVue-All versionsPlantVue-All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-340-01" ;
    icsa:vendor "ARC Informatique" ;
    icsa:year 2011 .

icsa-res:ICSA-11-343-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-343-01" ;
    dcterms:issued "2011-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens FactoryLink Multiple ActiveX Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; oil and gas; Food and Agriculture; Government Facilities" ;
    icsa:cveNumber "CVE-2011-4055; CVE-2011-4056" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-4055,
        cve-res:CVE-2011-4056 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryLink" ;
    icsa:productDistribution "Taiwan" ;
    icsa:productsAffected "Siemens Tecnomatix FactoryLink versions V8.0.2.54V7.5.217 (V7.5 SP2)V6.6" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-343-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2011 .

icsa-res:ICSA-11-353-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-353-01" ;
    dcterms:issued "2011-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "7-Technologies Interactive Graphical SCADA" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2011-4053" ;
    icsa:cweNumber "CWE-426" ;
    icsa:hasCVE cve-res:CVE-2011-4053 ;
    icsa:hasCWE cwe-res:CWE-426 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Interactive Graphical SCADA" ;
    icsa:productDistribution "Denmark, United States, Asia, Europe" ;
    icsa:productsAffected "All versions prior to V9.0.0.11291" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-353-01" ;
    icsa:vendor "7-Technologies" ;
    icsa:year 2011 .

icsa-res:ICSA-11-355-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-355-01" ;
    dcterms:issued "2011-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "7-Technologies IGSS Buffer Overflow" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2011-4537" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-4537 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS" ;
    icsa:productDistribution "Denmark, United States, Asia, Europe" ;
    icsa:productsAffected "7T Interactive Graphical SCADA System Versions 9.0.0.11355 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-355-01" ;
    icsa:vendor "7-Technologies" ;
    icsa:year 2011 .

icsa-res:ICSA-11-355-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-355-02" ;
    dcterms:issued "2011-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingView History Server Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2011-4536" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-4536 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingView History Server" ;
    icsa:productDistribution "China, Japan, Singapore, Taiwan, United States, Europe" ;
    icsa:productsAffected "KingView V65.30.2010.18018" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-355-02" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2011 .

icsa-res:ICSA-11-356-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-356-01" ;
    dcterms:issued "2011-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simatic HMI Authentication Vulnerabilities" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4508; CVE-2011-4509" ;
    icsa:cweNumber "CWE-255; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2011-4508,
        cve-res:CVE-2011-4509 ;
    icsa:hasCWE cwe-res:CWE-255,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simatic HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OP; MP; Comfort); V11 SP1; and V11 SP2 Multiple SIMATIC Panels (TP; and 2008 SP2 SIMATIC WinCC Runtime Advanced V11; 2008 SP1; Mobile; 2005; 2005 SP1; martAccess option package for SIMATIC WinCC flexible RT 2004; 2007; 2008" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-356-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2011 .

icsa-res:ICSA-11-361-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-361-01" ;
    dcterms:issued "2011-12-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Automation License Manager Vulnerabilities" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4529; CVE-2011-4532; CVE-2011-4530; CVE-2011-4531" ;
    icsa:cweNumber "CWE-119; CWE-22; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2011-4529,
        cve-res:CVE-2011-4530,
        cve-res:CVE-2011-4531,
        cve-res:CVE-2011-4532 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and null pointer vulnerabilities. ALM Version 2.0 to 5.1+SP1+Upd2 are affected by the improper input validation vulnerability; exception; ALM Version 4.0 to 5.1+SP1+Upd1 are affected by the buffer overflow" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-361-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2011 .

icsa-res:ICSA-11-362-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-11-362-01" ;
    dcterms:issued "2011-12-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ScadaTEC ScadaPhone & Modbus TagServer Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2011-4535" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-4535 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScadaPhone & Modbus TagServer" ;
    icsa:productDistribution "Australia, United States" ;
    icsa:productsAffected "ScadaPhone V5.3.11.1230 and priorModbusTagServer V4.1.1.81 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-11-362-01" ;
    icsa:vendor "ScadaTEC" ;
    icsa:year 2011 .

icsa-res:ICSA-12-006-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-006-01" ;
    dcterms:issued "2012-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S CoDeSys Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2011-5008; CVE-2011-5009; CVE-2011-5007" ;
    icsa:cweNumber "CWE-119; CWE-189" ;
    icsa:hasCVE cve-res:CVE-2011-5007,
        cve-res:CVE-2011-5008,
        cve-res:CVE-2011-5009 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-189 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CoDeSys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Version 2.3; Version 3.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-006-01" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2012 .

icsa-res:ICSA-12-012-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-012-01A" ;
    dcterms:issued "2012-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Open Automation Software OPC Systems.NET Vulnerability (Update A)" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Information Technology; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4871; CVE-2012-0227" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2011-4871,
        cve-res:CVE-2012-0227 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC Systems.NET" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "All versions of OPC Sytems. NET prior to Version 5.0 are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-012-01A" ;
    icsa:vendor "Open Automation Software" ;
    icsa:year 2012 .

icsa-res:ICSA-12-013-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-013-01" ;
    dcterms:issued "2012-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "ING. Punzenberger COPA-DATA GMBH DoS Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Pharmaceutical; Energy" ;
    icsa:cveNumber "CVE-2011-4534; CVE-2011-4533" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-2011-4533,
        cve-res:CVE-2011-4534 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GMBH" ;
    icsa:productDistribution "Austria, Germany, Spain, France, United Kingdom, Italy, South Korea, Portugal, Sweden, United States, Eastern Europe" ;
    icsa:productsAffected "Ing. Punzenberger COPA-DATA GmbH zenon 6.51 SP0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-013-01" ;
    icsa:vendor "COPA-DATA" ;
    icsa:year 2012 .

icsa-res:ICSA-12-016-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-016-01" ;
    dcterms:issued "2012-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cogent DataHub XSS and CRLF" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical" ;
    icsa:cveNumber "CVE-2012-0309; CVE-2012-0310" ;
    icsa:cweNumber "CWE-94; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2012-0309,
        cve-res:CVE-2012-0310 ;
    icsa:hasCWE cwe-res:CWE-79,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataHub" ;
    icsa:productDistribution "Canada, United Kingdom, Taiwan, United States" ;
    icsa:productsAffected "Cogent DataHub Version 7.1.2 and earlier OPC DataHub Version 6.4.20 and earlier Cascade DataHub Version 6.4.20 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-016-01" ;
    icsa:vendor "Cogent Real-Time Systems Inc" ;
    icsa:year 2012 .

icsa-res:ICSA-12-018-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-12-018-01B" ;
    dcterms:issued "2012-01-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Quantum Ethernet Module Hard-Coded Credentials (Update B)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2011-4859" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-2011-4859 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Quantum Ethernet Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "TSXP571634M Firmware V4.9 and all previous versions; STBNIP2311 Firmware V3.01 and all previous versions; TSXP574634M Firmware V3.5 and all previous versions; BMXP342020 Firmware V2.2 and all previous versions; TSXP572634M Firmware V4.9 and all previous versions; Quantum 140NOE77101 Firmware V4.9 and all previous versions 140NOE77111 Firmware V5.0 and all previous versions 140NOE77100 Firmware V3.4 and all previous versions 140NOE77110 Firmware V3.3 and all previous versions; BMXNOE0110 Firmware V4.65 and all previous versions; andTSXETC101 Firmware V1.01 and all previous versions.Any available conformal-coated versions of the above part numbers.M340BMXNOE0100 Firmware V2.3 and all previous versions; andBMXP342030 Firmware V2.2 and all previous versions; andBMXNOC0401 Firmware V1.01 and all previous versions.The following products are affected by the FTP Service vulnerabilities only (not affected by Telnet or Windriver Debug vulnerabilities):STBNIC2212 Firmware V2.10 and all previous versions; 140CPU65260 Firmware V3.5 and all previous versions; TSXP573634M Firmware V4.9 and all previous versions; and140NOC77101 Firmware V1.01 and all previous versions.Any available conformal-coated versions of the above part numbers.PremiumTSXETY4103 Firmware V5.0 and all previous versions; TSXP575634M Firmware V3.5 and all previous versions; 140NOC77100 Firmware V1.01 and all previous versions; 140CPU65160 Firmware V3.5 and all previous versions; STBNIP2212 Firmware V2.73 and all previous versions; TSXETY5103 Firmware V5.0 and all previous versions; TSXP576634M Firmware V3.5 and all previous versions; 140CPU65150 Firmware V3.5 and all previous versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-018-01B" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2012 .

icsa-res:ICSA-12-018-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-018-02" ;
    dcterms:issued "2012-01-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Certec Atvise Server Remote DOS" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2011-4873" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-2011-4873 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Atvise Server" ;
    icsa:productDistribution "Austria" ;
    icsa:productsAffected "Atvise versions older than Version 2.1 are affected" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-018-02" ;
    icsa:vendor "Certec EDV GmbH" ;
    icsa:year 2012 .

icsa-res:ICSA-12-024-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-024-01" ;
    dcterms:issued "2012-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ocean Data Systems Dream Reports XSS and Write Access Violation Vulnerabilities" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; oil and gas; Government Facilities; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4038; CVE-2011-4039" ;
    icsa:cweNumber "CWE-79; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2011-4038,
        cve-res:CVE-2011-4039 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Systems Dream" ;
    icsa:productDistribution "Germany, France, United Kingdom, Israel, Switzerland, United States" ;
    icsa:productsAffected "Dream Reports versions prior to Version 4.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-024-01" ;
    icsa:vendor "Ocean Data" ;
    icsa:year 2012 .

icsa-res:ICSA-12-024-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-024-02" ;
    dcterms:issued "2012-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "MICROSYS PROMOTIC Vulnerabilities" ;
    icsa:CVSSScore "4.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4520; CVE-2011-4519; CVE-2011-4518" ;
    icsa:cweNumber "CWE-119; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2011-4518,
        cve-res:CVE-2011-4519,
        cve-res:CVE-2011-4520 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PROMOTIC" ;
    icsa:productDistribution "Bulgaria, Hungary, Poland, Romania, Serbia, Slovenia" ;
    icsa:productsAffected "PROMOTIC versions prior to Version 8.1.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-024-02" ;
    icsa:vendor "MICROSYS" ;
    icsa:year 2012 .

icsa-res:ICSA-12-025-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-025-02A" ;
    dcterms:issued "2012-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "7-Technologies Termis DLL Hijacking (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2012-0223" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2012-0223 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Termis" ;
    icsa:productDistribution "Denmark, United States, Asia, Europe" ;
    icsa:productsAffected "TERMIS V2.10 dated November 30 2011 and any previous version." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-025-02A" ;
    icsa:vendor "7-Technologies" ;
    icsa:year 2012 .

icsa-res:ICSA-12-030-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-030-01A" ;
    dcterms:issued "2012-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC Vulnerabilities (UPDATE A)" ;
    icsa:CVSSScore "7.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4510; CVE-2011-4514; CVE-2011-4875; CVE-2011-4509; CVE-2011-4508; CVE-2011-4511; CVE-2011-4876; CVE-2011-4879; CVE-2011-4513; CVE-2011-4512; CVE-2011-4878; CVE-2011-4877" ;
    icsa:cweNumber "CWE-94; CWE-22; CWE-119; CWE-287; CWE-79; CWE-20; CWE-134; CWE-255; CWE-399" ;
    icsa:hasCVE cve-res:CVE-2011-4508,
        cve-res:CVE-2011-4509,
        cve-res:CVE-2011-4510,
        cve-res:CVE-2011-4511,
        cve-res:CVE-2011-4512,
        cve-res:CVE-2011-4513,
        cve-res:CVE-2011-4514,
        cve-res:CVE-2011-4875,
        cve-res:CVE-2011-4876,
        cve-res:CVE-2011-4877,
        cve-res:CVE-2011-4878,
        cve-res:CVE-2011-4879 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-134,
        cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-255,
        cwe-res:CWE-287,
        cwe-res:CWE-399,
        cwe-res:CWE-79,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WinCC flexible versions 2004 2005 2007 2008 WinCC V11 (TIA portal)Multiple SIMATIC HMI panels (TP OP MP Comfort Panels Mobile Panels) WinCC V11 Runtime Advanced WinCC flexible Runtime.The following related products are not affected: WinCC V11 (TIA Portal) Basic WinCC V11 (TIA Portal) Runtime Professional WinCC V6.x and V7.x" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-030-01A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-032-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-032-01" ;
    dcterms:issued "2012-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy Historian ihDataArchiver" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-0229" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-0229 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy Historian ihDataArchiver" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy Historian: Versions 4.5 and prior Proficy HMI/SCADA-CIMPLICITY: Version 8.2 (with Proficy Historian 4.5 or prior installed) Proficy HMI/SCADA-iFIX: Versions 5.5. 5.0. and 5.1 (with Proficy Historian 4.5 or prior installed). Note: Proficy Pulse is not affected by the vulnerability described in this advisory." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-032-01" ;
    icsa:vendor "GE" ;
    icsa:year 2012 .

icsa-res:ICSA-12-032-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-032-02" ;
    dcterms:issued "2012-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Intelligent Platforms Proficy Plant Applications Memory Corruption Vulnerabilities" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-0231; CVE-2012-0230" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-0230,
        cve-res:CVE-2012-0231 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligent Platform Proficy Plant Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy Plant Applications: Versions 5.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-032-02" ;
    icsa:vendor "GE" ;
    icsa:year 2012 .

icsa-res:ICSA-12-032-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-032-03" ;
    dcterms:issued "2012-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Intelligent Platforms Proficy Real-Time Information Portal Directory Traversal" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-0232" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2012-0232 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligent Piatform Real-Time Portal Directory" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy Real-Time Information Portal Versions: 3.53.0 SP13.02.6. Note: Proficy Real-Time Information Portal Versions 2.5 and prior are not affected by this vulnerability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-032-03" ;
    icsa:vendor "GE" ;
    icsa:year 2012 .

icsa-res:ICSA-12-039-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-039-01" ;
    dcterms:issued "2012-02-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Invensys Wonderware HMI Reports XSS and Write Access Violation Vulnerabilities" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; oil and gas; Government Facilities; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4039" ;
    icsa:cweNumber "CWE-79; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2011-4039 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Wonderware HMI Reports 3.42.835.0304 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-039-01" ;
    icsa:vendor "Invensys" ;
    icsa:year 2012 .

icsa-res:ICSA-12-047-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-047-01A" ;
    dcterms:issued "2012-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Vulnerabilities (UPDATE A)" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2012-0234; CVE-2012-0244; CVE-2011-4526; CVE-2011-4521; CVE-2012-0239; CVE-2012-0242; CVE-2012-0237; CVE-2012-0235; CVE-2012-0233; CVE-2011-4522; CVE-2012-0238; CVE-2012-0240; CVE-2011-4523; CVE-2011-4524; CVE-2012-0241; CVE-2012-0243; CVE-2012-0236; CVE-2011-4525" ;
    icsa:cweNumber "CWE-352; CWE-89; CWE-200; CWE-134; CWE-287; CWE-79; CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-4521,
        cve-res:CVE-2011-4522,
        cve-res:CVE-2011-4523,
        cve-res:CVE-2011-4524,
        cve-res:CVE-2011-4525,
        cve-res:CVE-2011-4526,
        cve-res:CVE-2012-0233,
        cve-res:CVE-2012-0234,
        cve-res:CVE-2012-0235,
        cve-res:CVE-2012-0236,
        cve-res:CVE-2012-0237,
        cve-res:CVE-2012-0238,
        cve-res:CVE-2012-0239,
        cve-res:CVE-2012-0240,
        cve-res:CVE-2012-0241,
        cve-res:CVE-2012-0242,
        cve-res:CVE-2012-0243,
        cve-res:CVE-2012-0244 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-134,
        cwe-res:CWE-200,
        cwe-res:CWE-287,
        cwe-res:CWE-352,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "North America, Asia, North Africa, Africa, Middle East" ;
    icsa:productsAffected "All versions of Advantech/BroadWin WebAccess prior to applying the patch (V7.0) listed in the mitigations below" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-047-01A" ;
    icsa:vendor "Advantech" ;
    icsa:year 2012 .

icsa-res:ICSA-12-059-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-059-01" ;
    dcterms:issued "2012-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Robot Communications Runtime Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2012-0245" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-0245 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Robot Communications" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB Interlink Module: Versions 4.6 through 4.9 IRC5 OPC Server: Versions up to and including 5.14.01PC SDK: Versions up to and including 5.14.01 PickMaster 3: Versions up to and including 3.3 PickMaster 5: Versions up to and including 5.13 Robot Communications Runtime: Versions up to and including 5.14.01 RobotStudio: Versions supporting IRC5 up to and including 5.14.01 RobView 5: Works together with other products listed here. WebWare SDK: Versions 4.6 through 4.9 WebWare Server: Versions 4.6 through 4.91" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-059-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2012 .

icsa-res:ICSA-12-062-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-062-01" ;
    dcterms:issued "2012-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wonderware Information Server Multiple Vulnerabilities" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-0225; CVE-2012-0226; CVE-2012-0228" ;
    icsa:cweNumber "CWE-89; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2012-0225,
        cve-res:CVE-2012-0226,
        cve-res:CVE-2012-0228 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware Information Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Wonderware Information Server versions 4.0 SP1 and 4.5--Portal 4.0 SP1 and 4.5--Client.The following Invensys Wonderware Historian Client version is affected: Only Wonderware Historian Client versions installed on the same node as the Wonderware Information Server Portal or Client are subject to these vulnerabilities." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-062-01" ;
    icsa:vendor "Invensys" ;
    icsa:year 2012 .

icsa-res:ICSA-12-079-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-079-01" ;
    dcterms:issued "2012-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Microsoft Remote Desktop Protocol Memory Corruption Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-0002" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2012-0002 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Remote Desktop Protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "For a list of all affected Microsoft products visit the Microsoft Security Bulletin." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-079-01" ;
    icsa:vendor "Microsoft" ;
    icsa:year 2012 .

icsa-res:ICSA-12-081-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-081-01" ;
    dcterms:issued "2012-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wonderware System Platform Buffer Overflows" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2012-0257; CVE-2012-0258" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2012-0257,
        cve-res:CVE-2012-0258 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware System Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Wonderware Application Server 2012 and all prior versions Foxboro Control Software Version 3.1 and all prior versions InFusion CE/FE/SCADA 2.5 and all prior versions Wonderware Information Server 4.5 and all prior versions ArchestrA Application Object Toolkit 3.2 and all prior versions InTouch 10.0 to 10.5 only (earlier versions of InTouch are not affected). NOTE: The Wonderware Historian is part of the System Platform but is not affected by this Security Update." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-081-01" ;
    icsa:vendor "Invensys" ;
    icsa:year 2012 .

icsa-res:ICSA-12-083-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-083-01" ;
    dcterms:issued "2012-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor ActiveX Directory Traversal" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2012-0246" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2012-0246 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor ActiveX" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "IntegraXor versions older than Version 3.71.4200" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-083-01" ;
    icsa:vendor "Ecava" ;
    icsa:year 2012 .

icsa-res:ICSA-12-088-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-088-01A" ;
    dcterms:issued "2012-03-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk RNADiagReceiver (UPDATE A)" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-0222; CVE-2012-0221" ;
    icsa:cweNumber "CWE-125; CWE-389" ;
    icsa:hasCVE cve-res:CVE-2012-0221,
        cve-res:CVE-2012-0222 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-389 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk RNADiagReceiver" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Allen-Bradley RSLogix 5000 (versions 17 18 19 20) Factory Talk (CPR9 up to and including CPR9 SR5) FT Directory FT Alarms & Events FT View SE FT Diagnostics FT Live Data FT Server Health" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-088-01A" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2012 .

icsa-res:ICSA-12-095-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-095-01A" ;
    dcterms:issued "2012-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Multiple Components Buffer Overflow (UPDATE)" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2012-1801" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-1801 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Components" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WebWare Server: All versions of Data Collector and Interlink WebWare SDK: All versionsABB Interlink Module: All versionsS4 OPC Server: All versions QuickTeach: All versionsRobotStudio S4: All versionsRobotStudio Lite: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-095-01A" ;
    icsa:vendor "ABB" ;
    icsa:year 2012 .

icsa-res:ICSA-12-102-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-102-01" ;
    dcterms:issued "2012-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Certec atvise webMI2ADS Vulnerabilities" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2011-4882; CVE-2011-4881; CVE-2011-4880" ;
    icsa:cweNumber "CWE-22; CWE-732; CWE-476; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2011-4880,
        cve-res:CVE-2011-4881,
        cve-res:CVE-2011-4882 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-400,
        cwe-res:CWE-476,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "atvise Server" ;
    icsa:productDistribution "Austria, Germany, Israel, Italy, Switzerland" ;
    icsa:productsAffected "Certec webMI2ADS - All versions prior to Version 2.0.2 are affected" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-102-01" ;
    icsa:vendor "Certec EDV GmbH" ;
    icsa:year 2012 .

icsa-res:ICSA-12-102-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-102-02" ;
    dcterms:issued "2012-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Koyo Ecom Modules Vulnerabilities" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-1808; CVE-2012-1806; CVE-2012-1809; CVE-2012-1805" ;
    icsa:cweNumber "CWE-119; CWE-306; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2012-1805,
        cve-res:CVE-2012-1806,
        cve-res:CVE-2012-1808,
        cve-res:CVE-2012-1809 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-306,
        cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ecom Module" ;
    icsa:productDistribution "Australia, North America, South America, Europe" ;
    icsa:productsAffected "DirectLogic DL205 Series Programmable Logic Controllers H2-ECOM (For DirectLogic DL205 Series Programmable Logic Controllers) H2-ECOM-F (For DirectLogic DL205 Series Programmable Logic Controllers) H2-ECOM100 (For DirectLogic DL205 Series Programmable Logic Controllers)DirectLogic DL06 Series Programmable Logic Controllers H0-ECOM (For DirectLogic DL06 Series Programmable Logic Controllers) H0-ECOM100 (For DirectLogic DL06 Series Programmable Logic Controllers). DirectLogic DL405 Series Programmable Logic Controllers H4-ECOM (For DirectLogic DL405 Series Programmable Logic Controllers) H4-ECOM-F (For DirectLogic DL405 Series Programmable Logic Controllers) H4-ECOM100 (For DirectLogic DL405 Series Programmable Logic Controllers)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-102-02" ;
    icsa:vendor "Koyo" ;
    icsa:year 2012 .

icsa-res:ICSA-12-102-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-102-03" ;
    dcterms:issued "2012-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "MICROSYS PROMOTIC Use After Free Vulnerability" ;
    icsa:CVSSScore "7.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4874" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2011-4874 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PROMOTIC" ;
    icsa:productDistribution "Bulgaria, Hungary, Poland, Romania, Serbia, Slovenia" ;
    icsa:productsAffected "PROMOTIC versions prior to Version 8.1.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-102-03" ;
    icsa:vendor "MICROSYS" ;
    icsa:year 2012 .

icsa-res:ICSA-12-102-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-102-04" ;
    dcterms:issued "2012-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Scalance X Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Communications; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-1802" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-1802 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Scalance X" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Scalance X414-3E Scalance X308-2M Scalance X-300EEC Scalance XR-300 Scalance X-300" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-102-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-102-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-102-05" ;
    dcterms:issued "2012-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Scalance S Multiple Security Vulnerabilities" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Defense Industrial Base; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2012-1800; CVE-2012-1799" ;
    icsa:cweNumber "CWE-1121; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2012-1799,
        cve-res:CVE-2012-1800 ;
    icsa:hasCWE cwe-res:CWE-1121,
        cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Scalance S" ;
    icsa:productDistribution "Asia, Europe" ;
    icsa:productsAffected "Scalance S602 V2Scalance S612 V2 Scalance S613 V2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-102-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-122-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-122-01" ;
    dcterms:issued "2012-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingView DLL Hijack Vulnerability" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-1819" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2012-1819 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingView DLL" ;
    icsa:productDistribution "China, Japan, Singapore, Taiwan, United States, Europe" ;
    icsa:productsAffected "WellinTech KingView 6.53" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-122-01" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2012 .

icsa-res:ICSA-12-129-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-129-01" ;
    dcterms:issued "2012-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingSCADA Insecure Password Encryption" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-1977" ;
    icsa:cweNumber "CWE-311" ;
    icsa:hasCVE cve-res:CVE-2012-1977 ;
    icsa:hasCWE cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingSCADA" ;
    icsa:productDistribution "China, Japan, Singapore, Taiwan, United States, Europe" ;
    icsa:productsAffected "WellinTech KingSCADA 3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-129-01" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2012 .

icsa-res:ICSA-12-131-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-131-01" ;
    dcterms:issued "2012-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Progea Movicon Memory Corruption Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2012-1804" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-1804 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Movicon" ;
    icsa:productDistribution "India, United States, Europe" ;
    icsa:productsAffected "Movicon versions prior to 11.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-131-01" ;
    icsa:vendor "Progea" ;
    icsa:year 2012 .

icsa-res:ICSA-12-131-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-131-02" ;
    dcterms:issued "2012-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Intelligent Platforms Proficy HTML Help Vulnerabilities (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-2515; CVE-2012-2516" ;
    icsa:cweNumber "CWE-77; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2012-2515,
        cve-res:CVE-2012-2516 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligence Platforms Proficy HTML Help" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy Historian: Versions 4.5 4.0 3.5 and 3.1Proficy HMI/SCADA - iFIX: Versions 5.1 and 5.0 Proficy Pulse: Version 1.0 Proficy Batch Execution: Version 5.6SI7 I/O Driver: Versions between 7.20 and 7.424.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-131-02" ;
    icsa:vendor "GE" ;
    icsa:year 2012 .

icsa-res:ICSA-12-137-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-137-02" ;
    dcterms:issued "2012-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech Studio ISSymbol ActiveX Buffer Overflow" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-0340" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2011-0340 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Studio ISSymbol ActiveX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Advantech ISSymbol ActiveX Control 61.6.0.0; and Advantech Studio 6.1 SP6 Build 61.6.01.05" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-137-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2012 .

icsa-res:ICSA-12-138-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-138-01" ;
    dcterms:issued "2012-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV Multiple Vulnerabilities" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2012-1817; CVE-2012-1814; CVE-2012-1815; CVE-2012-1818; CVE-2012-1816" ;
    icsa:cweNumber "CWE-89; CWE-79; CWE-119; CWE-618; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2012-1814,
        cve-res:CVE-2012-1815,
        cve-res:CVE-2012-1816,
        cve-res:CVE-2012-1817,
        cve-res:CVE-2012-1818 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-400,
        cwe-res:CWE-618,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DeltaV and DeltaV Workstations V9.3.1 V10.3.1 V11.3 and V11.3.1 DeltaV ProEssentials Scientific Graph and V5.0.0.6" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-138-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2012 .

icsa-res:ICSA-12-145-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-145-01" ;
    dcterms:issued "2012-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Measuresoft ScadaPro DLL Hijack" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Pharmaceutical; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2012-1824" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2012-1824 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScadaPro" ;
    icsa:productDistribution "Ireland" ;
    icsa:productsAffected "ScadaPro Server prior to Version 4.0.0 and ScadaPro Client prior to Version 4.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-145-01" ;
    icsa:vendor "Measuresoft" ;
    icsa:year 2012 .

icsa-res:ICSA-12-145-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-145-02" ;
    dcterms:issued "2012-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "xArrow Multiple Vulnerabilities" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-2427; CVE-2012-2426; CVE-2012-2429; CVE-2012-2428" ;
    icsa:cweNumber "CWE-119; CWE-122; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2012-2426,
        cve-res:CVE-2012-2427,
        cve-res:CVE-2012-2428,
        cve-res:CVE-2012-2429 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "xArrow" ;
    icsa:productDistribution "China, Indonesia, India, Latvia, Poland" ;
    icsa:productsAffected "xArrowxArrow software versions older than Version 3.4.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-145-02" ;
    icsa:vendor "xArrow" ;
    icsa:year 2012 .

icsa-res:ICSA-12-146-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-146-01A" ;
    dcterms:issued "2012-05-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "RuggedCom Weak Cryptography for Password Vulnerability (Update A)" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Energy; Transportation Systems; Government Facilities" ;
    icsa:cveNumber "CVE-2012-1803" ;
    icsa:cweNumber "CWE-261" ;
    icsa:hasCVE cve-res:CVE-2012-1803 ;
    icsa:hasCWE cwe-res:CWE-261 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RuggedCom Cryptography for Password" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RuggedCom RuggedSwitch or RuggedServer devices are affected using the following versions of ROS:3.2.x and earlier; and3.3.x and above" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-146-01A" ;
    icsa:vendor "RuggedCom" ;
    icsa:year 2012 .

icsa-res:ICSA-12-150-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-150-01" ;
    dcterms:issued "2012-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell HMIWeb Browser Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2012-0254" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2012-0254 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HMIWeb Browser" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "Honeywell Process Solutions: Experion Releases R400.x R31x R30x and R2xx Honeywell Building Solutions:Enterprise Building Manager Releases R400 and R410.1 and SymmetrE R410.1 release Honeywell Environmental Combustion & Controls andSymmetrE R410.1 release" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-150-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2012 .

icsa-res:ICSA-12-158-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-158-01" ;
    dcterms:issued "2012-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC Multiple Vulnerabilities" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3003; CVE-2012-2597; CVE-2012-2596; CVE-2012-2598; CVE-2012-2595" ;
    icsa:cweNumber "CWE-22; CWE-91; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2012-2595,
        cve-res:CVE-2012-2596,
        cve-res:CVE-2012-2597,
        cve-res:CVE-2012-2598,
        cve-res:CVE-2012-3003 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-79,
        cwe-res:CWE-91 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens WinCC 7.0 SP3 web server and web applications are affected" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-158-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-167-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-167-01" ;
    dcterms:issued "2012-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Innominate MGuard Weak HTTPS and SSH Keys" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Communications; Energy; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3006" ;
    icsa:cweNumber "CWE-310" ;
    icsa:hasCVE cve-res:CVE-2012-3006 ;
    icsa:hasCWE cwe-res:CWE-310 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mguard" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "mGuard Smart”HW-101020 HW-101050 BD-101010 BD-101020 mGuard PCI”HW-102020 HW-102050 BD-111010 BD-111020 mGuard Industrial RS”HW-105000 BD-501000 BD-501010 BD-501020 mGuard Blade”HW-104020 HW-104050 mGuard Delta”HW-103050 BD-201000 EAGLE mGuard”HW-201000 BD-301010 All products manufactured prior to 2006" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-167-01" ;
    icsa:vendor "Innominate" ;
    icsa:year 2012 .

icsa-res:ICSA-12-171-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-171-01" ;
    dcterms:issued "2012-06-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wonderware SuiteLink Unallocated Unicode String Vulnerability" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3007" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2012-3007 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware SuiteLink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Slssvc service less than or equal to Version 54.x.x.x is vulnerable and slssvc service equal to or greater than Version 58.x.x.x is not vulnerable. Slssvc service Versions 55-57 were never publicly released. InTouch 2012 and Wonderware Application Server 2012 are not vulnerable to crash but will show excessive resource consumption if exploited." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-171-01" ;
    icsa:vendor "Invensys" ;
    icsa:year 2012 .

icsa-res:ICSA-12-177-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-177-02" ;
    dcterms:issued "2012-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Invensys Wonderware InTouch 10 DLL Hijack" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3005" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2012-3005 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware InTouch 10" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "InTouch 2012 and all prior versions Wonderware Application Server 2012 and prior versions Wonderware Information Server 4.5 and prior versions Foxboro Control Software 4.0 and all prior versions InFusion CE/FE/SCADA 2.5 and all prior versions InBatch 9.5 SP1 and all prior versions andWonderware Historian 10.0 SP1 and all prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-177-02" ;
    icsa:vendor "Invensys" ;
    icsa:year 2012 .

icsa-res:ICSA-12-179-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-179-01" ;
    dcterms:issued "2012-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pro-Face Pro-Server EX Vulnerabilities" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3795; CVE-2012-3797; CVE-2012-3794; CVE-2012-3793; CVE-2012-3796; CVE-2012-3792" ;
    icsa:cweNumber "CWE-119; CWE-680; CWE-788; CWE-388" ;
    icsa:hasCVE cve-res:CVE-2012-3792,
        cve-res:CVE-2012-3793,
        cve-res:CVE-2012-3794,
        cve-res:CVE-2012-3795,
        cve-res:CVE-2012-3796,
        cve-res:CVE-2012-3797 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-388,
        cwe-res:CWE-680,
        cwe-res:CWE-788 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro-Server EX" ;
    icsa:productDistribution "Japan, Asia" ;
    icsa:productsAffected "and HMI screen editor and logic programming software GP-Pro EX and related software WinGP Versions 2.00.00 through 3.01.100.; Data management software Pro-Server EX versions 1.00.00 through 1.30.00" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-179-01" ;
    icsa:vendor "Pro-face" ;
    icsa:year 2012 .

icsa-res:ICSA-12-185-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-185-01" ;
    dcterms:issued "2012-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingView Multiple Vulnerabilities" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-2560; CVE-2012-2559; CVE-2012-1832; CVE-2012-1830; CVE-2012-1831" ;
    icsa:cweNumber "CWE-122; CWE-35; CWE-121; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2012-1830,
        cve-res:CVE-2012-1831,
        cve-res:CVE-2012-1832,
        cve-res:CVE-2012-2559,
        cve-res:CVE-2012-2560 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-35 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingView" ;
    icsa:productDistribution "China, Japan, Singapore, Taiwan, United States, Europe" ;
    icsa:productsAffected "WellinTech KingView 6.53 and WellinTech King Historian 3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-185-01" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2012 .

icsa-res:ICSA-12-201-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-201-01" ;
    dcterms:issued "2012-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI OPC DA Interface Buffer Overflow" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-3008" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2012-3008 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI OPC DA Interface" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of PI OPC DA Interface prior to Version 2.3.20.9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-201-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2012 .

icsa-res:ICSA-12-205-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-205-01" ;
    dcterms:issued "2012-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC Insecure SQL Server Authentication" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2010-2772" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2010-2772 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinCC SQL Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC WinCC versions older than V7.0 SP2 Update 1 (V 7.0.2.1) and SIMATIC PCS 7 versions older than V7.1 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-205-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-205-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-205-02" ;
    dcterms:issued "2012-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 DLL Vulnerability" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3015" ;
    icsa:cweNumber "CWE-114" ;
    icsa:hasCVE cve-res:CVE-2012-3015 ;
    icsa:hasCWE cwe-res:CWE-114 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC STEP 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC STEP 7 versions prior to V5.5 Service Pack 1 (V5.5.1 equivalent) and SIMATIC PCS 7 versions before and including V7.1 SP3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-205-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-212-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-212-01" ;
    dcterms:issued "2012-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS GENESIS32/BizViz Security Configurator Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3018" ;
    icsa:cweNumber "CWE-261" ;
    icsa:hasCVE cve-res:CVE-2012-3018 ;
    icsa:hasCWE cwe-res:CWE-261 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GENESIS32/BizVis Security Configurator" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, United States, Asia, Europe" ;
    icsa:productsAffected "Genesis32: Genesis32 V9.22 and previous. BizViz V9.22 and previous." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-212-01" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2012 .

icsa-res:ICSA-12-212-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-212-02" ;
    dcterms:issued "2012-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-400 PN CPU DoS" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical" ;
    icsa:cveNumber "CVE-2012-3016" ;
    icsa:cweNumber "CWE-404" ;
    icsa:hasCVE cve-res:CVE-2012-3016 ;
    icsa:hasCWE cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-400 PN CPU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "S7-400 CPU family with firmware Versions 6.0.1 and 6.0.2 CPU 412-2 PN (6ES7412-2EK06-0AB0) CPU 414-3 PN/DP (6ES7414-3EM06-0AB0) CPU 414F-3 PN/DP (6ES7414-3FM06-0AB0) CPU 416-3 PN/DP (6ES7416-3ES06-0AB0) CPU 416F-3 PN (6ES7416-3FS06-0AB0) Another vulnerability affects the following products within the S7-400 CPU family with firmware Version 5: CPU 414-3 PN/DP (6ES7414-3EM05-0AB0) CPU 416-3 PN/DP (6ES7416-3ER05-0AB0)CPU 416F-3 PN/DP (6ES7416-3FR05-0AB0)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-212-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-213-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-213-01A" ;
    dcterms:issued "2012-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sielco Sistemi Winlog Multiple Vulnerabilities (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2012-4353; CVE-2012-4354; CVE-2012-4358; CVE-2012-4359; CVE-2012-4356; CVE-2012-3815; CVE-2012-4355" ;
    icsa:cweNumber "CWE-22; CWE-118; CWE-284; CWE-119; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2012-3815,
        cve-res:CVE-2012-4353,
        cve-res:CVE-2012-4354,
        cve-res:CVE-2012-4355,
        cve-res:CVE-2012-4356,
        cve-res:CVE-2012-4358,
        cve-res:CVE-2012-4359 ;
    icsa:hasCWE cwe-res:CWE-118,
        cwe-res:CWE-119,
        cwe-res:CWE-123,
        cwe-res:CWE-22,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Winlog" ;
    icsa:productDistribution "Canada, Spain, Indonesia, Italy, Turkey, United States" ;
    icsa:productsAffected "Winlog Pro SCADA all versions prior to 2.07.18 Winlog Lite SCADA all versions prior to 2.07.18" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-213-01A" ;
    icsa:vendor "Sielco Sistemi" ;
    icsa:year 2012 .

icsa-res:ICSA-12-214-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-214-01" ;
    dcterms:issued "2012-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Synco OZW Default Password" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2012-3020" ;
    icsa:cweNumber "CWE-262" ;
    icsa:hasCVE cve-res:CVE-2012-3020 ;
    icsa:hasCWE cwe-res:CWE-262 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Synco OZW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Synco models:OZW775OZW672.01 OZW672.04 OZW672.16OZW772.01 OZW772.04 OZW772.16 OZW772.250. For the listed products; all firmware versions prior to Version 4 do not force users to change their password on initial login." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-214-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-227-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-227-01" ;
    dcterms:issued "2012-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS Database Privilege Escalation Vulnerability" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-3009" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2012-3009 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS Database" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and Version 10: Patch 004 and earlier; COMOS versions: all versions earlier than Version 9.1 Version 9.1: Patch 412 and earlier Version 9.2: Update 3 Patch 022 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-227-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-228-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-228-01A" ;
    dcterms:issued "2012-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tridium Niagara Vulnerabilities (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Energy" ;
    icsa:cveNumber "CVE-2012-4028; CVE-2012-3024; CVE-2012-3025; CVE-2012-4027" ;
    icsa:cweNumber "CWE-22; CWE-330; CWE-522; CWE-315" ;
    icsa:hasCVE cve-res:CVE-2012-3024,
        cve-res:CVE-2012-3025,
        cve-res:CVE-2012-4027,
        cve-res:CVE-2012-4028 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-315,
        cwe-res:CWE-330,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Niagara" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Niagara AX Framework software products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-228-01A" ;
    icsa:vendor "Tridium" ;
    icsa:year 2012 .

icsa-res:ICSA-12-234-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-234-01" ;
    dcterms:issued "2012-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Intelligent Platforms Proficy Real-Time Information Portal Vulnerabilities" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-3026; CVE-2012-3021; CVE-2012-3010" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2012-3010,
        cve-res:CVE-2012-3021,
        cve-res:CVE-2012-3026 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligence Platforms Proficy Real-Time Information Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Intelligent Platforms Proficy Real-Time Information Portal v2.6; Intelligent Platforms Proficy Real-Time Information Portal v3.0; Intelligent Platforms Proficy Real-Time Information Portal v3.0 SP1; Intelligent Platforms Proficy Real-Time Information Portal v3.5; andIntelligent Platforms Proficy Real-Time Information Portal v3.5 SP1. Note: These vulnerabilities do not affect versions of Proficy Real-Time Information Portal v2.5 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-234-01" ;
    icsa:vendor "GE" ;
    icsa:year 2012 .

icsa-res:ICSA-12-243-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-243-01" ;
    dcterms:issued "2012-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "GarrettCom - Use of Hard-Coded Password" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Defense Industrial Base; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2012-3014" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2012-3014 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hard-Coded Password" ;
    icsa:productDistribution "China, India, United States, South America, Asia, Europe, Middle East" ;
    icsa:productsAffected "MNS-6K Rel v4.1.14 and prior and MNS-6K Rel v14.1.14 SECURE and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-243-01" ;
    icsa:vendor "GarrettCom" ;
    icsa:year 2012 .

icsa-res:ICSA-12-249-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-249-01" ;
    dcterms:issued "2012-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Arbiter Systems Power Sentinel Denial-of-Service Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2012-3012" ;
    icsa:cweNumber "CWE-410" ;
    icsa:hasCVE cve-res:CVE-2012-3012 ;
    icsa:hasCWE cwe-res:CWE-410 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Power Sentinel" ;
    icsa:productDistribution "United States, South America, Europe" ;
    icsa:productsAffected "Model 1133A Power Sentinel firmware versions 09 Jun 2012 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-249-01" ;
    icsa:vendor "Arbiter Systems" ;
    icsa:year 2012 .

icsa-res:ICSA-12-249-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-249-02" ;
    dcterms:issued "2012-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO IO 758 Default Linux Credentials" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2012-3013" ;
    icsa:cweNumber "CWE-259; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2012-3013 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IO 758" ;
    icsa:productDistribution "China, Germany, India, Poland, Switzerland" ;
    icsa:productsAffected "Model 758-870 I/O System 758 Model 758-874 I/O System 758 Model 758-875 and I/O System 758 Model 758-876; I/O System 758" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-249-02" ;
    icsa:vendor "WAGO" ;
    icsa:year 2012 .

icsa-res:ICSA-12-249-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-249-03" ;
    dcterms:issued "2012-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "InduSoft ISSymbol ActiveX Control Buffer Overflow" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Food and Agriculture" ;
    icsa:cveNumber "CVE-2011-0340" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2011-0340 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISSymbol ActiveX Control" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "InduSoft ISSymbol ActiveX Control (Build 301.1009.2904.0) InduSoft Thin Client Version 7.0 and InduSoft Web Studio Version 7.0B" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-249-03" ;
    icsa:vendor "InduSoft" ;
    icsa:year 2012 .

icsa-res:ICSA-12-251-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-251-01" ;
    dcterms:issued "2012-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-01-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "RealFlex RealWinDemo DLL Hijack" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Communications; Energy; oil and gas; Transportation Systems; Maritime; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3004" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2012-3004 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RealWinDemo" ;
    icsa:productDistribution "India, Mexico, Nigeria, Philippines, Saudi Arabia" ;
    icsa:productsAffected "RealWinDemo 2.1.12 and prior RealWin 2.1.12 and prior andFlexView 3.1.85 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-251-01" ;
    icsa:vendor "RealFlex Technologies" ;
    icsa:year 2012 .

icsa-res:ICSA-12-256-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-256-01" ;
    dcterms:issued "2012-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC WebNavigator Multiple Vulnerabilities" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3032; CVE-2012-3028; CVE-2012-3030; CVE-2012-3034; CVE-2012-3031" ;
    icsa:cweNumber "CWE-352; CWE-89; CWE-79; CWE-618; CWE-425" ;
    icsa:hasCVE cve-res:CVE-2012-3028,
        cve-res:CVE-2012-3030,
        cve-res:CVE-2012-3031,
        cve-res:CVE-2012-3032,
        cve-res:CVE-2012-3034 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-425,
        cwe-res:CWE-618,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinCC WebNavigator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WebNavigator component of the following versions of WinCC:WinCC 7.0 SP3 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-256-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-258-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-258-01" ;
    dcterms:issued "2012-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "IOServer OPC Server Multiple Vulnerabilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; oil and gas; Government Facilities" ;
    icsa:cveNumber "CVE-2012-4680" ;
    icsa:cweNumber "CWE-538; CWE-22; CWE-219" ;
    icsa:hasCVE cve-res:CVE-2012-4680 ;
    icsa:hasCWE cwe-res:CWE-219,
        cwe-res:CWE-22,
        cwe-res:CWE-538 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC Server" ;
    icsa:productDistribution "Australia, United States, Asia, Europe" ;
    icsa:productsAffected "IOServer OPC Server 1.0.18.0 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-258-01" ;
    icsa:vendor "IOServer" ;
    icsa:year 2012 .

icsa-res:ICSA-12-262-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-262-01" ;
    dcterms:issued "2012-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fultek WinTr Directory Traversal" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Turkey" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2012-3011" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2012-3011 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinTR" ;
    icsa:productDistribution "Turkey" ;
    icsa:productsAffected "WinTr Scada 4.0.5 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-262-01" ;
    icsa:vendor "Fultek" ;
    icsa:year 2012 .

icsa-res:ICSA-12-263-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-263-01" ;
    dcterms:issued "2012-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens S7-1200 Insecure Storage of HTTPS CA Certificate" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical" ;
    icsa:cveNumber "CVE-2012-3037" ;
    icsa:cweNumber "CWE-311" ;
    icsa:hasCVE cve-res:CVE-2012-3037 ;
    icsa:hasCWE cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "S7-1200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC S7-1200 V2.x" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-263-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-263-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-263-02" ;
    dcterms:issued "2012-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "ORing Industrial Networking IDS-5042/5042+ Hard-Coded Credential Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas; Transportation Systems" ;
    icsa:cveNumber "CVE-2012-4577" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2012-4577 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Network IDS-5042/5042+" ;
    icsa:productDistribution "China, South Korea, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Industrial DIN-Rail Device Server IDS-5042 all versions and Industrial DIN-Rail Device Server IDS-5042+ all versions. Note: Other ORing Industrial Networking products may also be affected by this vulnerability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-263-02" ;
    icsa:vendor "ORing" ;
    icsa:year 2012 .

icsa-res:ICSA-12-265-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-265-01" ;
    dcterms:issued "2012-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV Buffer Overflow" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2012-3035" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2012-3035 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DeltaV V9.3.1; V10.3.1; V11.3; and V11.3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-265-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2012 .

icsa-res:ICSA-12-271-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-271-01" ;
    dcterms:issued "2012-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "C3-ilex EOScada Multiple Vulnerabilities" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-1811; CVE-2012-1812; CVE-2012-1813; CVE-2012-1810" ;
    icsa:cweNumber "CWE-284; CWE-399; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2012-1810,
        cve-res:CVE-2012-1811,
        cve-res:CVE-2012-1812,
        cve-res:CVE-2012-1813 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EOScada" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "C3-ilex reports that the vulnerabilities affect all EOScada versions prior to 11.0.19.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-271-01" ;
    icsa:vendor "C3-ilex" ;
    icsa:year 2012 .

icsa-res:ICSA-12-271-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-271-02" ;
    dcterms:issued "2012-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Optimalog Optima PLC Multiple Vulnerabilities" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-5048; CVE-2012-5049" ;
    icsa:cweNumber "CWE-835; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2012-5048,
        cve-res:CVE-2012-5049 ;
    icsa:hasCWE cwe-res:CWE-476,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Optima PLC" ;
    icsa:productDistribution "France, Europe" ;
    icsa:productsAffected "Optima PLC 1.5.2 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-271-02" ;
    icsa:vendor "Optimalog" ;
    icsa:year 2012 .

icsa-res:ICSA-12-283-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-283-01" ;
    dcterms:issued "2012-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens S7-1200 Web Application Cross Site Scripting" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical" ;
    icsa:cveNumber "CVE-2012-3040" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2012-3040 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "S7-1200 Web Application" ;
    icsa:productDistribution "Germany, Asia" ;
    icsa:productsAffected "S7-1200 PLCs versions: V2.x V3.0.0 and V3.0.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-283-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-283-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-283-02" ;
    dcterms:issued "2012-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingView User Credentials Not Securely Hashed" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-4899" ;
    icsa:cweNumber "CWE-311" ;
    icsa:hasCVE cve-res:CVE-2012-4899 ;
    icsa:hasCWE cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingView User Credentials" ;
    icsa:productDistribution "China, Japan, Singapore, Taiwan, United States, Europe" ;
    icsa:productsAffected "KingView 6.5.3 and previous" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-283-02" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2012 .

icsa-res:ICSA-12-297-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-297-01" ;
    dcterms:issued "2012-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-12-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tropos Wireless Mesh Routers" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Emergency Services; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2012-4898" ;
    icsa:cweNumber "CWE-331" ;
    icsa:hasCVE cve-res:CVE-2012-4898 ;
    icsa:hasCWE cwe-res:CWE-331 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tropos Wireless Mesh Routers" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "All wireless mesh routers running Mesh OS versions prior to release 7.9.1.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-297-01" ;
    icsa:vendor "Tropos" ;
    icsa:year 2012 .

icsa-res:ICSA-12-297-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-297-02" ;
    dcterms:issued "2012-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Korenix Jetport 5600 Series Hard-coded Credentials" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Communications; Information Technology" ;
    icsa:cveNumber "CVE-2012-4577" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2012-4577 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Jetport 5600 Series" ;
    icsa:productDistribution "China, Spain, Taiwan, United States" ;
    icsa:productsAffected "JetPort 5600; all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-297-02" ;
    icsa:vendor "Korenix" ;
    icsa:year 2012 .

icsa-res:ICSA-12-305-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-305-01" ;
    dcterms:issued "2012-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass Server Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical sectors; Energy" ;
    icsa:cveNumber "CVE-2012-5409" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2012-5409 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass Server" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SiPass integrated MP2.6 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-305-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-320-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-320-01" ;
    dcterms:issued "2012-11-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB AC500 PLC Webserver CoDeSys Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2011-5007" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2011-5007 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AC500 PLCS Webserver CoDeSys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB AC500 CPU modules with firmware Version V2.1.3 and Web server enabled are affected: 1SAP130 300 R0271 PM573-ETH; 1SAP140 300 R0271 PM583-ETH; 1SAP150 000 R0271 PM590-ETH; 1SAP150 100 R0271 PM591-ETH; 1SAP150 200 R0271 PM592-ETH; 1TNE968 900 R0110 PM554-T-ETH; 1TNE968 900 R1110 PM564-T-ETH; 1TNE968 900 R1210 PM564-R-ETH; and 1TNE968 900 R1211 PM564-R-ETH-AC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-320-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2012 .

icsa-res:ICSA-12-325-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-325-01" ;
    dcterms:issued "2012-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sinapsi Devices Vulnerabilities" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2012-5864; CVE-2012-5862; CVE-2012-5861; CVE-2012-5863" ;
    icsa:cweNumber "CWE-89; CWE-78; CWE-259; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2012-5861,
        cve-res:CVE-2012-5862,
        cve-res:CVE-2012-5863,
        cve-res:CVE-2012-5864 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-287,
        cwe-res:CWE-78,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sinapsi Devices" ;
    icsa:productDistribution "Italy, United States" ;
    icsa:productsAffected "Sinapsi devices with firmware prior to Version 2.0.2870_xxx_2.2.12 are affected: eSolar eSolar DUO and eSolar Light" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-325-01" ;
    icsa:vendor "Sinapsi" ;
    icsa:year 2012 .

icsa-res:ICSA-12-335-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-335-01" ;
    dcterms:issued "2012-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Post Oak Bluetooth Traffic Systems Insufficient Entropy Vulnerability" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2012-4687" ;
    icsa:cweNumber "CWE-331" ;
    icsa:hasCVE cve-res:CVE-2012-4687 ;
    icsa:hasCWE cwe-res:CWE-331 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Bluetooth Traffic Systems" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "AWAM Bluetooth Reader Traffic System - all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-335-01" ;
    icsa:vendor "Post Oak Traffic Systems" ;
    icsa:year 2012 .

icsa-res:ICSA-12-341-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-341-01" ;
    dcterms:issued "2012-12-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy HMI/SCADA Cimplicity Integer Overflow" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2012-4689" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2012-4689 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy HMI/SCADA Cimplicity" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy HMI/SCADA - CIMPLICITY: Version 4.01 and greater and Proficy Process Systems with CIMPLICITY. Note: Proficy HMI/SCADA”Cimplicity Versions 4.0 and prior are not affected by this vulnerability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-341-01" ;
    icsa:vendor "GE" ;
    icsa:year 2012 .

icsa-res:ICSA-12-342-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-12-342-01B" ;
    dcterms:issued "2012-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Allen-Bradley MicroLogix, SLC 500, and PLC-5 Fault Generation Vulnerability (Update B)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical" ;
    icsa:cveNumber "CVE-2012-4690" ;
    icsa:cweNumber "CWE-471" ;
    icsa:hasCVE cve-res:CVE-2012-4690 ;
    icsa:hasCWE cwe-res:CWE-471 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley MicroLogix, SLC 500, and PLC-5" ;
    icsa:productDistribution "China, Czech Republic, Germany, Denmark, France, Hungary, Italy, Japan, South Korea, Poland, United States, South America, Europe" ;
    icsa:productsAffected "MicroLogix 1100 controller MicroLogix 1200 controller MicroLogix 1400 controller MicroLogix 1500 controller SLC 500 controller platform andPLC-5 controller platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-342-01B" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2012 .

icsa-res:ICSA-12-348-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-348-01" ;
    dcterms:issued "2012-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens ProcessSuite and Invensys Intouch Poorly Encrypted Password File" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2012-4693" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2012-4693 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intouch" ;
    icsa:productDistribution "Canada, United States" ;
    icsa:productsAffected "All versions of ProcessSuite. Please note that according to Siemens ProcessSuite was phased out in 2005 and completely discontinued in 2010. Customers using SIMATIC PCS7 / APACS+ OS are not affected.The following Invensys Wonderware InTouch versions are affected: Wonderware InTouch 2012 R2 and previous. Wonderware applications that use Windows Integrated security or ArchestrA security are not affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-348-01" ;
    icsa:vendor "Invensys" ;
    icsa:year 2012 .

icsa-res:ICSA-12-349-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-349-01" ;
    dcterms:issued "2012-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Automation License Manager Uncontrolled Resource Consumption" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2012-4691" ;
    icsa:cweNumber "CWE-399" ;
    icsa:hasCVE cve-res:CVE-2012-4691 ;
    icsa:hasCWE cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation License Manager (ALM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Starter); SIMOCODE.; STEP 7); SIMATIC HMI (e.g.; WinCC flexible); SIMATIC PCS 7; SIMOTION (e.g.; All Siemens software products that include ALM version between 4.0 and 5.2 are affected. The following Siemens product families are affected: SIMATIC (e.g.; WinCC; Scout); SIMATIC NET; SINAMICS (e.g." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-349-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2012 .

icsa-res:ICSA-12-354-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-12-354-01A" ;
    dcterms:issued "2012-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ruggedcom ROS Hard-Coded RSA SSL Private Key (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2012-4698" ;
    icsa:cweNumber "CWE-320" ;
    icsa:hasCVE cve-res:CVE-2012-4698 ;
    icsa:hasCWE cwe-res:CWE-320 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ROS Hard-Coded RSA SSL" ;
    icsa:productDistribution "Canada, China, Mexico, United States, Europe" ;
    icsa:productsAffected "Rugged OS version 3.11 and prior ROX I OS firmware used by RX1000 and RX1100 series products. ROX I versions before and including ROX v1.14.5ROX II OS firmware used by RX5000 and RX1500 series products. ROX II versions before and including ROX v2.3.0 Rugged Max Operating System Firmware used by the Win7000 and Win7200 base station units and the Win5100 and Win5200 subscriber (CPE) devices. All versions of the firmware released before and including 4.2.1.4621.22" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-354-01A" ;
    icsa:vendor "RuggedCom" ;
    icsa:year 2012 .

icsa-res:ICSA-12-354-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-354-02" ;
    dcterms:issued "2012-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Carlo Gavazzi EOS Box Multiple Vulnerabilities" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2012-6427; CVE-2012-6428" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2012-6427,
        cve-res:CVE-2012-6428 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EOS Box" ;
    icsa:productDistribution "Canada, United States, Asia, Europe" ;
    icsa:productsAffected "Carlo Gavazzi device with firmware version prior to 1.0.0.1080_2.1.10 is affected: EOS-Box" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-354-02" ;
    icsa:vendor "Carlo Gavazzi" ;
    icsa:year 2012 .

icsa-res:ICSA-12-362-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-12-362-01" ;
    dcterms:issued "2012-12-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "I-GEN opLYNX Central Authentication Bypass" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-4688" ;
    icsa:cweNumber "CWE-592" ;
    icsa:hasCVE cve-res:CVE-2012-4688 ;
    icsa:hasCWE cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "opLYNX" ;
    icsa:productDistribution "Canada" ;
    icsa:productsAffected "Version 2.01.8 and prior; opLYNX" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-12-362-01" ;
    icsa:vendor "I-GEN" ;
    icsa:year 2012 .

icsa-res:ICSA-13-011-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-011-01" ;
    dcterms:issued "2013-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S CoDeSys (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2012-6068; CVE-2012-6069" ;
    icsa:cweNumber "CWE-284; CWE-23" ;
    icsa:hasCVE cve-res:CVE-2012-6068,
        cve-res:CVE-2012-6069 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CoDeSys" ;
    icsa:productDistribution "China, Germany" ;
    icsa:productsAffected "CODESYS Control Runtime embedded Versions prior to 2.3.2.8 | CODESYS Control Runtime full Versions prior to 2.4.7.40 | CODESYS Control RTE: Versions prior to 2.3.7.17." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-011-01" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2013 .

icsa-res:ICSA-13-011-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-011-02" ;
    dcterms:issued "2013-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "SpecView Directory Traversal" ;
    icsa:CVSSScore "2.6"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2012-5972" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2012-5972 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SpecView Product" ;
    icsa:productDistribution "United Kingdom, United States" ;
    icsa:productsAffected "SpecView 2.5 Build 853 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-011-02" ;
    icsa:vendor "SpecView" ;
    icsa:year 2013 .

icsa-res:ICSA-13-011-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-011-03" ;
    dcterms:issued "2013-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix PLC Vulnerabilities" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Chemical; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-6441; CVE-2012-6436; CVE-2012-6440; CVE-2012-6438; CVE-2012-6437; CVE-2012-6442; CVE-2012-6439; CVE-2012-6435" ;
    icsa:cweNumber "CWE-119; CWE-399; CWE-200; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2012-6435,
        cve-res:CVE-2012-6436,
        cve-res:CVE-2012-6437,
        cve-res:CVE-2012-6438,
        cve-res:CVE-2012-6439,
        cve-res:CVE-2012-6440,
        cve-res:CVE-2012-6441,
        cve-res:CVE-2012-6442 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-200,
        cwe-res:CWE-287,
        cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix PLC" ;
    icsa:productDistribution "China, France, Italy, Japan, South Korea, Netherlands, United States, South America, Europe" ;
    icsa:productsAffected "All EtherNet/IP products that conform to the CIP and EtherNet/IP specifications 1756-ENBT 1756-EWEB 1768-ENBT 1768-EWEB communication modules | CompactLogix L32E and L35E controllers 1788-ENBT FLEXLogix adapter 1794-AENTR FLEX I/O EtherNet/IP adapter ControlLogix CompactLogix GuardLogix and SoftLogix Version 18 and prior | CompactLogix and SoftLogix controllers Version 19 and prior | ControlLogix and GuardLogix controllers Version 20 and prior | MicroLogix 1100 and MicroLogix 1400." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-011-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2013 .

icsa-res:ICSA-13-014-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-014-01" ;
    dcterms:issued "2013-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RF Manager ActiveX Buffer Overflow" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical manufacturing; Chemical; Energy; Food and Agriculture; Public Health and Health" ;
    icsa:cveNumber "CVE-2013-0656" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2013-0656 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RF Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC RF Manager 2008 and SIMATIC RF Manager Basic v3.0 and lower (as distributed with RF670R and RF 640R)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-014-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-016-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-016-01" ;
    dcterms:issued "2013-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Authenticated Communication Risk Vulnerability" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commericial Facilities; Government Facilities; Energy" ;
    icsa:cveNumber "CVE-2013-0655" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2013-0655 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Software Update (SESU) utility" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric SESU mechanism: Unity Pro V5.0 L M S XL Unity Pro V6.0 L M S XL Unity Pro V6.1 L M S XL Unity Pro V0 L M S XL XLS | Vijeo Designer V6.0.x V6.1.0.x V5.0.0.x V5.1.0.x | Vijeo Designer Opti V6.0.x V5.1.0.x V5.0.0.x | Web Gate Client Files V5.1.x IDS V1.0 V2.0 | PowerSuite 2.5 | Smart Widget Acti 9 V1.0.0.0 | Smart Widget H8035 V1.0.0.0 | Smart Widget H8036 V1.0.0.0 | Smart Widget PM201 V1.0.0.0 | Smart Widget PM710 V1.0.0.0 | Smart Widget PM750 V1.0.0.0 | SoMachine V1.2.1 | Spacail.pro V1.0.0.x and SESU V1.0.x V1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-016-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2013 .

icsa-res:ICSA-13-018-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-018-01" ;
    dcterms:issued "2013-01-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2013-0657" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2013-0657 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IGSS application: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-018-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2013 .

icsa-res:ICSA-13-022-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-022-01" ;
    dcterms:issued "2013-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy Real-Time Information Portal Information Disclosure Vulnerabilities" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2013-0651; CVE-2013-0652" ;
    icsa:cweNumber "CWE-306; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2013-0651,
        cve-res:CVE-2013-0652 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy Real-Time Information Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy Real-Time Information Portal: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-022-01" ;
    icsa:vendor "GE" ;
    icsa:year 2013 .

icsa-res:ICSA-13-022-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-022-02" ;
    dcterms:issued "2013-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Intelligent Platforms Proficy Cimplicity Multiple Vulnerabilities" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2013-0653; CVE-2013-0654" ;
    icsa:cweNumber "CWE-22; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-0653,
        cve-res:CVE-2013-0654 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligent Platforms Proficy Cimplicity" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy HMI/SCADA - CIMPLICITY: Version 4.01 and greater and Proficy Process Systems with CIMPLICITY." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-022-02" ;
    icsa:vendor "GE" ;
    icsa:year 2013 .

icsa-res:ICSA-13-024-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-024-01" ;
    dcterms:issued "2013-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Beijer Electronics ADP and H-Designer Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Transportation Systems" ;
    icsa:cveNumber "CVE-2012-4696" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-4696 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ADP and H-Designer" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, Sweden, Taiwan, United States" ;
    icsa:productsAffected "Beijer products affected: ADP V6.5.0-180_R1967 ADP V6.5.1-186_R2942H-Designer 6.5.0 B180_R1967." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-024-01" ;
    icsa:vendor "Beijer Electronics" ;
    icsa:year 2013 .

icsa-res:ICSA-13-036-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-036-02" ;
    dcterms:issued "2013-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor ActiveX Buffer Overflow" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2012-4700" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-4700 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "IntegraXor SCADA Server 4.00 build 4250.0 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-036-02" ;
    icsa:vendor "Ecava" ;
    icsa:year 2013 .

icsa-res:ICSA-13-038-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-13-038-01A" ;
    dcterms:issued "2013-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "360 Systems Image Server 2000 Series Remote Root Access (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Emergency Services" ;
    icsa:cveNumber "CVE-2012-4702" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2012-4702 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Image Server 2000 Series" ;
    icsa:productDistribution "North America, South America, Asia, Africa" ;
    icsa:productsAffected "Image server 2000 (all models) | Image Server Maxx (all models) | Maxx (all models)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-038-01A" ;
    icsa:vendor "360 Systems" ;
    icsa:year 2013 .

icsa-res:ICSA-13-042-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-042-01" ;
    dcterms:issued "2013-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "MOXA EDR-G903 Series Multiple Vulnerabilities" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Emergency Services; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-4694; CVE-2012-4712" ;
    icsa:cweNumber "CWE-259; CWE-331" ;
    icsa:hasCVE cve-res:CVE-2012-4694,
        cve-res:CVE-2012-4712 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-331 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EDR-G903 Series" ;
    icsa:productDistribution "Argentina, Brazil, Chile, China, Germany, France, United Kingdom, India, Peru, Taiwan, United States, Europe" ;
    icsa:productsAffected "Moxa products affected: EDR-G903 series routers - all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-042-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2013 .

icsa-res:ICSA-13-043-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-043-01" ;
    dcterms:issued "2013-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Accutech Manager Heap Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-0658" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2013-0658 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Accutech Manager" ;
    icsa:productDistribution "Europe" ;
    icsa:productsAffected "Accutech Manager 2.00.1 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-043-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2013 .

icsa-res:ICSA-13-043-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-13-043-02A" ;
    dcterms:issued "2013-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingView KingMess Buffer Overflow (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-4711" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-4711 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingView KingMess" ;
    icsa:productDistribution "China, Japan, Singapore, Taiwan, United States, Europe" ;
    icsa:productsAffected "KingView 6.52 (kingMess.exe 65.20.2003.10300) | KingView 6.53 (kingMess.exe 65.20.2003.10400) | KingView 6.55 (kingMess.exe 65.50.2011.18049)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-043-02A" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2013 .

icsa-res:ICSA-13-045-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-045-01" ;
    dcterms:issued "2013-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tridium NiagaraAX Directory Traversal Vulnerability" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2012-4701" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2012-4701 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NiagaraAX" ;
    icsa:productDistribution "China, United Kingdom, Singapore, United States, South America" ;
    icsa:productsAffected "Tridium NiagaraAX - all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-045-01" ;
    icsa:vendor "Tridium" ;
    icsa:year 2013 .

icsa-res:ICSA-13-050-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-13-050-01A" ;
    dcterms:issued "2013-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S CODESYS Gateway-Server Vulnerabilities (Update A)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical manufacturing; Energy" ;
    icsa:cveNumber "CVE-2012-4706; CVE-2012-4708; CVE-2012-4704; CVE-2012-4705; CVE-2012-4707" ;
    icsa:cweNumber "CWE-22; CWE-122; CWE-118; CWE-121; CWE-119" ;
    icsa:hasCVE cve-res:CVE-2012-4704,
        cve-res:CVE-2012-4705,
        cve-res:CVE-2012-4706,
        cve-res:CVE-2012-4707,
        cve-res:CVE-2012-4708 ;
    icsa:hasCWE cwe-res:CWE-118,
        cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Gateway-Server" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "3S CODESYS products affected: Gateway-Server prior to ver. 2.3.9.27." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-050-01A" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2013 .

icsa-res:ICSA-13-053-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-053-01" ;
    dcterms:issued "2013-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV Uncontroller Resource Consumption Vulnerability" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2012-4703" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2012-4703 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DeltaV SE3006 SD Plus Controller Version 11.3.1 and earlier | DeltaV VE3005 Controller MD Hardware Version 10.3.1 and earlier | DeltaV VE3005 Controller MD Hardware Version 11.3.1 and earlier | DeltaV VE3006 Controller MD PLUS Hardware Version 10.3.1 and earlier | and DeltaV VE3006 Controller MD PLUS Hardware Version 11.3.1 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-053-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2013 .

icsa-res:ICSA-13-053-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-13-053-02A" ;
    dcterms:issued "2013-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell EBI, SymmetrE, and ComfortPoint Open Manager Station (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2013-0108" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-0108 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EBI, SymmetrE, and ComfortPoint Open Manager Station" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Honeywell versions: EBI R310 | R400.2 | R410.1 | R410.2 | SymmetrE R310 | R410.1 | R410.2 | CPO-M R100." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-053-02A" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2013 .

icsa-res:ICSA-13-067-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-067-01" ;
    dcterms:issued "2013-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "InduSoft Advantech Studio Directory Traversal" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-1627" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2013-1627 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Advantech Studio" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Advantech Studio V7.0 and previous and Indusoft Studio V7.0 and previous." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-067-01" ;
    icsa:vendor "Advantech, InduSoft" ;
    icsa:year 2013 .

icsa-res:ICSA-13-067-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-067-02" ;
    dcterms:issued "2013-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Invensys Wonderware Win-XML Exporter Improper Input Validation Vulnerability" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Nuclear Reactors; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-4710" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2012-4710 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware Win-XML Exporter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Win-XML Exporter Version 1522 | 148 | 0 | 0 and possibly earlier versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-067-02" ;
    icsa:vendor "Invensys" ;
    icsa:year 2013 .

icsa-res:ICSA-13-077-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-13-077-01B" ;
    dcterms:issued "2013-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PLCs Vulnerabilities (Update B)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-0663; CVE-2013-0664" ;
    icsa:cweNumber "CWE-352; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2013-0663,
        cve-res:CVE-2013-0664 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLCs" ;
    icsa:productDistribution "China, India, Russia, United States, Europe" ;
    icsa:productsAffected "Modicon M340 PLC modules Quantum PLC modules and Premium PLC modules." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-077-01B" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2013 .

icsa-res:ICSA-13-079-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-079-01" ;
    dcterms:issued "2013-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schweitzer Engineering Laboratories AcSELerator Improper Authorization Vulnerability" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-0665" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2013-0665 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AcSELerator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SEL AcSELerator QuickSet versions older than Version 5.12.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-079-01" ;
    icsa:vendor "Schweitzer Engineering Laboratories" ;
    icsa:year 2013 .

icsa-res:ICSA-13-079-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-079-02" ;
    dcterms:issued "2013-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC 7.0 SP3 Multiple Vulnerabilities" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-0675; CVE-2013-0674; CVE-2013-0679; CVE-2013-0677; CVE-2013-0676; CVE-2013-0678" ;
    icsa:cweNumber "CWE-119; CWE-23; CWE-311; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2013-0674,
        cve-res:CVE-2013-0675,
        cve-res:CVE-2013-0676,
        cve-res:CVE-2013-0677,
        cve-res:CVE-2013-0678,
        cve-res:CVE-2013-0679 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-23,
        cwe-res:CWE-285,
        cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinCC 7.0 SP3" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "WinCC 7.0 SP3 Update 1 and below. Note: As WinCC is part of SIMATIC PCS7 - the SIMATIC PCS 7 Web Server is also affected by these vulnerabilities." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-079-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-079-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-079-03" ;
    dcterms:issued "2013-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC TIA Portal Vulnerabilities" ;
    icsa:CVSSScore "4.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2011-4515; CVE-2013-0671; CVE-2013-0669; CVE-2013-0667; CVE-2013-0672; CVE-2013-0668; CVE-2013-0670" ;
    icsa:cweNumber "CWE-79; CWE-20; CWE-113; CWE-425" ;
    icsa:hasCVE cve-res:CVE-2011-4515,
        cve-res:CVE-2013-0667,
        cve-res:CVE-2013-0668,
        cve-res:CVE-2013-0669,
        cve-res:CVE-2013-0670,
        cve-res:CVE-2013-0671,
        cve-res:CVE-2013-0672 ;
    icsa:hasCWE cwe-res:CWE-113,
        cwe-res:CWE-20,
        cwe-res:CWE-425,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinCC TIA Portal" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "WinCC (TIA Portal) V11 (all versions)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-079-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-084-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-084-01" ;
    dcterms:issued "2013-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens CP 1604 and CP 1616 Improper Access Control" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2013-0659" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2013-0659 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CP 1604 and CP 1616" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "and CP 1604 and CP 1616 Onboard card of SIMANTIC IPCs (versions prior to 2.5.2).; CP 1604 and CP 1604 Microbox package (versions prior to 2.5.2)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-084-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-091-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-091-01" ;
    dcterms:issued "2013-04-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wind River VxWorks SSH and Web Server and General Electric D20MX (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-0713; CVE-2013-0716; CVE-2013-0715; CVE-2013-0711; CVE-2013-0714" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-0711,
        cve-res:CVE-2013-0713,
        cve-res:CVE-2013-0714,
        cve-res:CVE-2013-0715,
        cve-res:CVE-2013-0716 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VxWorks SSH and Web Server and General Electric D20MX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Web Server & CLI vulnerabilities: VxWorks Versions 5.5 through 6.9 and SSH vulnerabilities: VxWorks Versions 6.5 through 6.9 |GE reports the vulnerabilities affect the following D20MX versions: D20MX v1.0-1.6.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-091-01" ;
    icsa:vendor "Wind River, GE" ;
    icsa:year 2013 .

icsa-res:ICSA-13-095-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-095-01" ;
    dcterms:issued "2013-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cogent Real-Time Systems Vulnerabilities" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commerical Facilities; Chemical; Energy; Finance Services" ;
    icsa:cveNumber "CVE-2013-0680; CVE-2013-0681; CVE-2013-0682; CVE-2013-0683" ;
    icsa:cweNumber "CWE-755; CWE-20; CWE-763" ;
    icsa:hasCVE cve-res:CVE-2013-0680,
        cve-res:CVE-2013-0681,
        cve-res:CVE-2013-0682,
        cve-res:CVE-2013-0683 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-755,
        cwe-res:CWE-763 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Real-Time Systems" ;
    icsa:productDistribution "Canada, United Kingdom, United States" ;
    icsa:productsAffected "Cogent Real-Time Systems affect the following versions: Cogent DataHub Version 7.2.2 and earlier OPC DataHub Version 6.4.21 and earlier Cascade DataHub for Windows Version 6.4.21 and earlier DataSim and DataPid demonstration clients for Cogent DataHub V7.2.2 DataSim and DataPid demonstration clients for OPC DataHub and Cascade DataHub V6.4.21 and DataHub QuickTrend Version 7.2.2 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-095-01" ;
    icsa:vendor "Cogent Real-Time Systems Inc" ;
    icsa:year 2013 .

icsa-res:ICSA-13-095-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-13-095-02A" ;
    dcterms:issued "2013-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk and RSLinx Vulnerabilities (Update A)" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Chemical; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2807; CVE-2012-4695; CVE-2013-2805; CVE-2012-4713; CVE-2012-4714; CVE-2013-2806" ;
    icsa:cweNumber "CWE-190; CWE-703; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2012-4695,
        cve-res:CVE-2012-4713,
        cve-res:CVE-2012-4714,
        cve-res:CVE-2013-2805,
        cve-res:CVE-2013-2806,
        cve-res:CVE-2013-2807 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-703 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk and RSLinx" ;
    icsa:productDistribution "China, France, Italy, Japan, South Korea, Netherlands, United States, South America, Europe" ;
    icsa:productsAffected "FactoryTalk Service Platform and RSLinx Enterprise product versions: CPR9 CPR9-SR1 CPR9-SR2 CPR9-SR3 CPR9-SR4 CPR9-SR5 CPR9-SR5.1 and CPR9-SR6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-095-02A" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2013 .

icsa-res:ICSA-13-098-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-098-01" ;
    dcterms:issued "2013-04-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Canary Labs Inc Trend Link Insecure ActiveX Control Method" ;
    icsa:CVSSScore "7.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical manufacturing; Energy" ;
    icsa:cveNumber "CVE-2012-3022" ;
    icsa:cweNumber "CWE-73" ;
    icsa:hasCVE cve-res:CVE-2012-3022 ;
    icsa:hasCWE cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Trend Link" ;
    icsa:productDistribution "United States, South America, Europe" ;
    icsa:productsAffected "Canary Lab Inc. products: Trend Link Versions 9.0.2.27051 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-098-01" ;
    icsa:vendor "Canary Labs, Inc." ;
    icsa:year 2013 .

icsa-res:ICSA-13-100-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-100-01" ;
    dcterms:issued "2013-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric MiCOM S1 Studio Improper Authorization Vulnerability" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-0687" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2013-0687 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MiCOM S1 Studio" ;
    icsa:productDistribution "Europe" ;
    icsa:productsAffected "MiCOM S1 Studio Software - all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-100-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2013 .

icsa-res:ICSA-13-106-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-106-01" ;
    dcterms:issued "2013-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "MatrikonOPC Multiple Product Vulnerabilities" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2013-0666; CVE-2013-0673" ;
    icsa:cweNumber "CWE-388; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2013-0666,
        cve-res:CVE-2013-0673 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-388 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MatrikonOPC A&E Historian | MatrikonOPC Security Gateway" ;
    icsa:productDistribution "Canada, United Kingdom, United States" ;
    icsa:productsAffected "MatrikonOPC A&E Historian Version 1.0.0.0 and MatrikonOPC Security Gateway Version 1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-106-01" ;
    icsa:vendor "MatrikonOPC" ;
    icsa:year 2013 .

icsa-res:ICSA-13-113-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-113-01" ;
    dcterms:issued "2013-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wonderware Information Server Vulnerabilities" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-0686; CVE-2013-0684; CVE-2013-0685; CVE-2013-0688" ;
    icsa:cweNumber "CWE-79; CWE-20; CWE-89; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2013-0684,
        cve-res:CVE-2013-0685,
        cve-res:CVE-2013-0686,
        cve-res:CVE-2013-0688 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-400,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware Information Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WIS 4.0 SP1SP1 and 4.5- Portal and WIS 5.0- Portal." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-113-01" ;
    icsa:vendor "Invensys" ;
    icsa:year 2013 .

icsa-res:ICSA-13-116-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-116-01" ;
    dcterms:issued "2013-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Galil RIO-47100 Improper Input Validation" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Defense Industrial Base; Energy" ;
    icsa:cveNumber "CVE-2013-0699" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-0699 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RIO-47100" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "RIO-47100 PLC." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-116-01" ;
    icsa:vendor "Galil" ;
    icsa:year 2013 .

icsa-res:ICSA-13-136-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-136-01" ;
    dcterms:issued "2013-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "TURCK BL20 and BL67 Programmable Gateway Hard-Coded User Accounts" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2012-4697" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2012-4697 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BL20 and BL67 Programmable Gateway" ;
    icsa:productDistribution "United Kingdom, United States, South America, Asia, Europe" ;
    icsa:productsAffected "BL20 Programmable Gateway - all versions - and BL67 Programmable Gateway - all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-136-01" ;
    icsa:vendor "TURCK" ;
    icsa:year 2013 .

icsa-res:ICSA-13-140-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-140-01" ;
    dcterms:issued "2013-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Automation MX Component V3 ActiveX Vulnerability" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2013-3075" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2013-3075 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MX Component V3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi MX Component Version 3 trial software. Mitsubishi Electric Automation MX Component Version 3 - Other Mitsubishi products that may be based on the same code - CitectFacilities v7.10 and previous versions - Release Date: July 2009 and CitectSCADA v7.0 and previous versions - Release Date: August 2007.CitectFacilities and CitectSCADA only distributed a trial version of Mitsubishi MX Component Version 3 as complimentary software which is not installed by default. It is not licensed by Schneider Electric." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-140-01" ;
    icsa:vendor "Mitsubishi Electric Automation" ;
    icsa:year 2013 .

icsa-res:ICSA-13-142-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-142-01" ;
    dcterms:issued "2013-05-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S CODESYS Gateway Use After Free" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical manufacturing; Energy" ;
    icsa:cveNumber "CVE-2013-2781" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2013-2781 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS Gateway; Version 2.3.9.27. This product is also used in many products sold by other vendors. Control systems vendors should review their products - identify those that incorporate the affected software and take appropriate steps to update their products and notify customers." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-142-01" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2013 .

icsa-res:ICSA-13-149-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-149-01" ;
    dcterms:issued "2013-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE Privilege Escalation Vulnerabilities (Update A)" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Transportation Systems;: Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-3633; CVE-2013-3634" ;
    icsa:cweNumber "CWE-264; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2013-3633,
        cve-res:CVE-2013-3634 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SCALANCE: SCALANCE X-200 switch family (incl. SIPLUS NET variants): versions prior to v4.5.0 SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): versions prior to v5.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-149-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-161-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-161-01" ;
    dcterms:issued "2013-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "IOServer DNP3 Improper Input Validation" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; oil and gas; Government Facilities" ;
    icsa:cveNumber "CVE-2013-2783" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2783 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DNP3" ;
    icsa:productDistribution "Australia, Canada, New Zealand, United States, South America, Asia, Europe" ;
    icsa:productsAffected "IOServer product affected: Supported drivers v1.0.19.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-161-01" ;
    icsa:vendor "IOServer" ;
    icsa:year 2013 .

icsa-res:ICSA-13-169-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-169-01" ;
    dcterms:issued "2013-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Scalance X200 IRT Multiple Vulnerabilities" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-3633; CVE-2013-3634" ;
    icsa:cweNumber "CWE-264" ;
    icsa:hasCVE cve-res:CVE-2013-3633,
        cve-res:CVE-2013-3634 ;
    icsa:hasCWE cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Scalance X200 IRT" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SCALANCE X204 IRT versions < V5.1.0 SCALANCE X204 IRT PRO versions < V5.1.0 SCALANCE X202-2 IRT versions < V5.1.0 SCALANCE X202-2P IRT versions < V5.1.0 SCALANCE X202-2P IRT PRO versions < V5.1.0 SCALANCE X201-3P IRT versions < V5.1.0 SCALANCE X201-3P IRT PRO versions < V5.1.0 SCALANCE X200-4P IRT versions < V5.1.0 SCALANCE XF204 IRT versions < V5.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-169-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-169-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-169-02" ;
    dcterms:issued "2013-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC 7.2 Multiple Vulnerabilities" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-3958; CVE-2013-3957; CVE-2013-3959" ;
    icsa:cweNumber "CWE-798; CWE-89; CWE-425" ;
    icsa:hasCVE cve-res:CVE-2013-3957,
        cve-res:CVE-2013-3958,
        cve-res:CVE-2013-3959 ;
    icsa:hasCWE cwe-res:CWE-425,
        cwe-res:CWE-798,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinCC 7.2" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "Siemens products affected: WinCC 7.2 and earlier and SIMATIC PCS7 V8.0 SP1 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-169-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-169-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-169-03" ;
    dcterms:issued "2013-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS Permissions, Privileges, and Access Controls" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical sectors; Energy" ;
    icsa:cveNumber "CVE-2013-3927" ;
    icsa:cweNumber "CWE-264" ;
    icsa:hasCVE cve-res:CVE-2013-3927 ;
    icsa:hasCWE cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "COMOS 9.2: all versions < v092_Upd06_Patch010 (9.2.0.6.10) and COMOS 10.0: all versions < V100_SP03_Patch004 (10.0.3.0.4)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-169-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-170-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-170-01" ;
    dcterms:issued "2013-06-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy HMI/SCADA CIMPLICITY WebView Improper Input Validation" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2013-2785" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2785 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy HMI/SCADA CIMPLICITY WebView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy HMI/SCADA - CIMPLICITY: Version 4.01 to 8.2 and Proficy Process Systems with CIMPLICITY." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-170-01" ;
    icsa:vendor "GE" ;
    icsa:year 2013 .

icsa-res:ICSA-13-184-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-184-01" ;
    dcterms:issued "2013-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Alstom Grid S1 Agile Improper Authorization" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Dams; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2013-2786" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2013-2786 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Grid S1 Agile" ;
    icsa:productDistribution "Brazil, Canada, France, United Kingdom, India, Italy, Russia, Saudi Arabia, Singapore, United States" ;
    icsa:productsAffected "MiCOM S1 Agile Software - all versions up to and including v1.0.2 and Legacy MiCOM S1 Studio Software - all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-184-01" ;
    icsa:vendor "Alstom" ;
    icsa:year 2013 .

icsa-res:ICSA-13-184-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-184-02" ;
    dcterms:issued "2013-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Monroe Electronics DASDEC Compromised Root SSH Key" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2013-0137" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2013-0137 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DASDEC" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Monroe Electronics products affected: DASDEC-IDASDEC-II." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-184-02" ;
    icsa:vendor "Monroe Electronics" ;
    icsa:year 2013 .

icsa-res:ICSA-13-189-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-189-01" ;
    dcterms:issued "2013-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "QNX Multiple Vulnerabilities" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Defense Industrial Base; Energy; Nuclear Facilities; Transportation Systems; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2013-2688; CVE-2013-2687" ;
    icsa:cweNumber "CWE-121; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2013-2687,
        cve-res:CVE-2013-2688 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Phrelay | Phwindows | Phditto" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Phrelay (all versions) |Phwindows (all versions) |Phditto (all versions)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-189-01" ;
    icsa:vendor "QNX" ;
    icsa:year 2013 .

icsa-res:ICSA-13-189-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-189-02" ;
    dcterms:issued "2013-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Triangle Research Nano 10 PLC Denial of Service" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2784" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2784 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nano 10 PLC" ;
    icsa:productDistribution "Australia, Canada, South Korea, Singapore, United States" ;
    icsa:productsAffected "Tri Inc. Nano-10 PLC firmware versions affected: All firmware versions prior to r81." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-189-02" ;
    icsa:vendor "Triangle Research International, Inc." ;
    icsa:year 2013 .

icsa-res:ICSA-13-213-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-213-01" ;
    dcterms:issued "2013-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Scalance W-7xx Product Family Multiple Vulnerabilities" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2013-4651; CVE-2013-4652" ;
    icsa:cweNumber "CWE-320; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2013-4651,
        cve-res:CVE-2013-4652 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-320 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Scalance W-7xx Product Family" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "W746-1PRO; W747-1RR | SCALANCE W784-1 W784-1RR | SCALANCE W786-1PRO W786-2PRO W786-3PRO W786-2RR | SCALANCE W788-1PRO W788-2PRO W788-1RR W788-2RR. Alternately - the Affected Products may be identified by using their MLFB. Products with the following MLFBs are affected: 6GK5 7xx-xAxx0-xAx0 6GK5 7xx-xBxx0-xAx0 and 6GK5 746-1AA60-4BA0.; Firmware Version V4.5.4 and earlier are affected for the following Siemens Scalance W-7xx product family supporting IEEE 802.11a/b/g: SCALANCE W744-1 W746-1 W747-1 | SCALANCE W744-1PRO" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-213-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-213-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-213-02" ;
    dcterms:issued "2013-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC TIA Portal Vulnerabilities" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-4911; CVE-2013-4912" ;
    icsa:cweNumber "CWE-352; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2013-4911,
        cve-res:CVE-2013-4912 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinCC TIA Portal" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "WinCC (TIA Portal) V11: all versions | WinCC (TIA Portal) V12: all versions < V12 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-213-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-213-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-213-03" ;
    dcterms:issued "2013-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "IOServer Master Station Improper Input Validation" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; oil and gas; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2790" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2790 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Master Station" ;
    icsa:productDistribution "Austria, Australia, Brazil, Canada, China, Czech Republic, Germany, France, United Kingdom, India, Italy, South Korea, Netherlands, New Zealand, Singapore, South Africa, Africa" ;
    icsa:productsAffected "IOServer's Beta2041.exe and IOServer's versions older than driver19.exe." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-213-03" ;
    icsa:vendor "IOServer" ;
    icsa:year 2013 .

icsa-res:ICSA-13-213-04A a icsa:ICSA ;
    dcterms:identifier "ICSA-13-213-04A" ;
    dcterms:issued "2013-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-10-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "MatrikonOPC SCADA DNP3 Master Station Improper Input Validation" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2013-2791" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2791 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA DNP3 Master Station" ;
    icsa:productDistribution "Australia, Brazil, Canada, Costa Rica, Germany, Spain, United Kingdom, India, Norway, Portugal, Russia, Singapore, United States" ;
    icsa:productsAffected "MatrikonOPC SCADA DNP3 OPC Server 1.2.0 and above." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-213-04A" ;
    icsa:vendor "MatrikonOPC" ;
    icsa:year 2013 .

icsa-res:ICSA-13-217-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-217-01" ;
    dcterms:issued "2013-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "MOXA Weak Entropy in DSA Keys Vulnerability" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-3039" ;
    icsa:cweNumber "CWE-331" ;
    icsa:hasCVE cve-res:CVE-2012-3039 ;
    icsa:hasCWE cwe-res:CWE-331 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DSA Keys" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa OnCell Gateway models (before firmware version 1.4) are affected: G3111 G3151 G3211 and G3251." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-217-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2013 .

icsa-res:ICSA-13-217-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-217-02" ;
    dcterms:issued "2013-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Vijeo Citect, CitectSCADA, PowerLogic SCADA Vulnerability" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2013-2796" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2013-2796 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vijeo Citect, CitectSCADA, PowerLogic SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric Vijeo Citect Version 7.20 and all previous versions | CitectSCADA Version 7.20 and all previous versions and· PowerLogic SCADA Version 7.20 and all previous 6 versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-217-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2013 .

icsa-res:ICSA-13-219-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-219-01" ;
    dcterms:issued "2013-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schweitzer Engineering Laboratories Improper Input Validation" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-2792; CVE-2013-2798" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2792,
        cve-res:CVE-2013-2798 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SEL-3530 SEL-3505 SEL-2241" ;
    icsa:productDistribution "United States, North America, Asia, Europe" ;
    icsa:productsAffected "SEL products affected: SEL-3530-R100 -V0-Z001001-D20090915 through SEL-3530- SEL-3530-R123-V0-Z002001· SEL-3530-4-R107-V0-Z001001-D20100818 through SEL-3530-4-R123-V0-Z002001-D20130117· SEL-3505-R119-V0-Z001001-D20120720 through SEL-3505-R123-V0-Z002001-D20130117· SEL-2241-R113-V0-Z001001-D20110721 through SEL-2241-R123-V0-Z002001-D20130117." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-219-01" ;
    icsa:vendor "Schweitzer Engineering Laboratories" ;
    icsa:year 2013 .

icsa-res:ICSA-13-225-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-225-01" ;
    dcterms:issued "2013-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Cross-Site Scripting" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2013-2299" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2013-2299 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan" ;
    icsa:productsAffected "Advantech WebAccess 7.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-225-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2013 .

icsa-res:ICSA-13-225-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-225-02" ;
    dcterms:issued "2013-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft Multiple Vulnerabilities" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-2800; CVE-2013-2801" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2013-2800,
        cve-res:CVE-2013-2801 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OSIsoft PI Interfaces" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "OSIsoft PI Interfaces affected: All versions of the PI Interface for IEEE C37.118 prior to Version 1.0.6.158." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-225-02" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2013 .

icsa-res:ICSA-13-226-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-226-01" ;
    dcterms:issued "2013-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Kepware Technologies Improper Input Validation Vulnerability" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; oil and gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2789" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2789 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kepware Technologies' DNP Master Driver | KEPServerEX Communicaitons Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Kepware Technologies' DNP Master Driver for the KEPServerEX Communicaitons Platform (Version v5.11.250.0)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-226-01" ;
    icsa:vendor "Kepware Technologies" ;
    icsa:year 2013 .

icsa-res:ICSA-13-231-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-13-231-01B" ;
    dcterms:issued "2013-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sixnet Universal Protocol Undocumented Function Codes (Update B)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Financial Services; Transportation Systems" ;
    icsa:cveNumber "CVE-2013-2802" ;
    icsa:cweNumber "CWE-912" ;
    icsa:hasCVE cve-res:CVE-2013-2802 ;
    icsa:hasCWE cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Universal Protocol" ;
    icsa:productDistribution "North America, Asia, Europe" ;
    icsa:productsAffected "Versions older than UDR 2.0 and RTU firmware older than Version 4.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-231-01B" ;
    icsa:vendor "Sixnet" ;
    icsa:year 2013 .

icsa-res:ICSA-13-233-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-233-01" ;
    dcterms:issued "2013-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS Privilege Escalation Vulnerability" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2013-4943" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2013-4943 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Germany, Asia, Europe" ;
    icsa:productsAffected "All COMOS versions prior to 9.1COMOS 9.1: all versions prior to LyraUpdate458 (Update 458)COMOS 9.2: all versions prior to V092_Upd06_Patch037 (9.2.0.6.37)COMOS 10.0: all versions prior to V100_SP03_Patch019 (10.0.3.0.19)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-233-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-234-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-234-01" ;
    dcterms:issued "2013-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Trio J-Series Radio Encryption" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2782" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2013-2782 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Trio J-Series Radio" ;
    icsa:productDistribution "Australia, Brazil, United Kingdom, United States, Europe" ;
    icsa:productsAffected "V3.6.1; Electric Trio J-Series Radio versions running Firmware Versions V3.6.0; and V3.6.3 are affected:TBURJR900-00002DH0TBURJR900-01002DH0TBURJR900-05002DH0TBURJR900-06002DH0TBURJR900-00002EH0TBURJR900-01002EH0TBURJR900-05002EH0TBURJR900-06002EH0.; V3.6.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-234-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2013 .

icsa-res:ICSA-13-234-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-234-02" ;
    dcterms:issued "2013-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Top Server OPC Improper Input Validation Vulnerability" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2804" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2804 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Top Server OPC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DNP Master Driver for the TOP Server OPC Server (Version 5.11.250.0) and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-234-02" ;
    icsa:vendor "Software Toolbox" ;
    icsa:year 2013 .

icsa-res:ICSA-13-240-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-240-01" ;
    dcterms:issued "2013-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Triangle MicroWorks Improper Input Validation" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2793; CVE-2013-2794" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2793,
        cve-res:CVE-2013-2794 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroWorks" ;
    icsa:productDistribution "Australia, New Zealand, United States, South America, Asia, Europe" ;
    icsa:productsAffected "SCADA Data Gateway v2.50.0309 through v3.00.0616 DNP3 .NET Protocol components v3.06.0.171 through v3.15.0.369 DNP3 ANSI C source code libraries v3.06.0000 through v3.15.0000." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-240-01" ;
    icsa:vendor "Triangle MicroWorks" ;
    icsa:year 2013 .

icsa-res:ICSA-13-248-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-248-01" ;
    dcterms:issued "2013-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ProSoft Technology RadioLinx ControlScape PRNG Vulnerability" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2803" ;
    icsa:cweNumber "CWE-338" ;
    icsa:hasCVE cve-res:CVE-2013-2803 ;
    icsa:hasCWE cwe-res:CWE-338 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RadioLinx ControlScape PRNG" ;
    icsa:productDistribution "Asia, Europe" ;
    icsa:productsAffected "RadioLinx ControlScape versions prior to version FH v6.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-248-01" ;
    icsa:vendor "ProSoft Technology" ;
    icsa:year 2013 .

icsa-res:ICSA-13-252-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-252-01" ;
    dcterms:issued "2013-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "SUBNET Solutions Inc. SubSTATION Server DNP3 Outstation Improper Input Validation" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-2788" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2788 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SubSTATION Server DNP3 Outstation" ;
    icsa:productDistribution "Canada" ;
    icsa:productsAffected "SubSTATION Server v2.7.0033 and SubSTATION Server v2.8.0106." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-252-01" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2013 .

icsa-res:ICSA-13-254-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-254-01" ;
    dcterms:issued "2013-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-200 Web Hijack Vulnerability" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2013-5709" ;
    icsa:cweNumber "CWE-331" ;
    icsa:hasCVE cve-res:CVE-2013-5709 ;
    icsa:hasCWE cwe-res:CWE-331 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X-200" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SCALANCE X-200 switch family with firmware versions prior to V5.0.0. Alternatively the following products may be identified by using their Machine-Readable Product Designation (MLFB). Poducts with the following MLFBs are affected: 6GK5224-0BA00-2AA36GK5216-0BA00-2AA36GK5212-2BB00-2AA36GK5212-2BC00-2AA36GK5208-0BA10-2AA36GK5206-1BB10-2AA36GK5206-1BC10-2AA36GK5204-2BB10-2AA36GK5204-2BC10-2AA36GK5208-0HA10-2AA66GK5204-0BA00-2AF26GK5208-0BA00-2AF26GK5206-1BC00-2AF26GK5204-2BC00-2AF26GK5204-2BB10-2CA2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-254-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-259-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-13-259-01B" ;
    dcterms:issued "2013-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson ROC800 Multiple Vulnerabilities (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas" ;
    icsa:cveNumber "CVE-2013-2810; CVE-2013-0689; CVE-2013-0694; CVE-2013-0692; CVE-2018-14793" ;
    icsa:cweNumber "CWE-294; CWE-912; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2013-0689,
        cve-res:CVE-2013-0692,
        cve-res:CVE-2013-0694,
        cve-res:CVE-2013-2810,
        cve-res:CVE-2018-14793 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-798,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ROC800" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Emerson Process Management RTUs are affected: ROC800 Version 3.50 and prior DL8000 Version 2.30 and prior andROC800L Version 1.20 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-259-01B" ;
    icsa:vendor "Emerson" ;
    icsa:year 2013 .

icsa-res:ICSA-13-274-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-274-01" ;
    dcterms:issued "2013-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-200 Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2013-5944" ;
    icsa:cweNumber "CWE-592" ;
    icsa:hasCVE cve-res:CVE-2013-5944 ;
    icsa:hasCWE cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X-200" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SCALANCE X-200 MLFBs: 6GK5224-0BA00-2A." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-274-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-276-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-276-01" ;
    dcterms:issued "2013-10-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Invensys Wonderware InTouch Improper Input Validation Vulnerability" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-4709" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2012-4709 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware InTouch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "InTouch HMI 2012 R2 and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-276-01" ;
    icsa:vendor "Invensys" ;
    icsa:year 2013 .

icsa-res:ICSA-13-277-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-277-01" ;
    dcterms:issued "2013-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Xper Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2013-2808" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2013-2808 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Xper" ;
    icsa:productDistribution "United States, North America, South America, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "Xper Information Management versions are affected: Note: the following products are only affected if the XperConnect Broker is used in line. Xper Information Management Physiomonitoring 5 system components - Xper Information Management Vascular Monitoring 5 system components and Xper Information Management (Flex Cardio product line) servers and workstations." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-277-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2013 .

icsa-res:ICSA-13-282-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-13-282-01A" ;
    dcterms:issued "2013-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Alstom e-Terracontrol DNP3 Master Improper Input Validation (Update A)" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-2818; CVE-2013-2787" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2787,
        cve-res:CVE-2013-2818 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "e-Terracontrol DNP3 Master" ;
    icsa:productDistribution "France, Asia, Europe" ;
    icsa:productsAffected "e-terracontrol; and 3.7.; Version 3.5; 3.6" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-282-01A" ;
    icsa:vendor "Alstom" ;
    icsa:year 2013 .

icsa-res:ICSA-13-289-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-289-01" ;
    dcterms:issued "2013-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cisco ASA and FWSM Security Advisories" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2013-3415; CVE-2013-5508; CVE-2013-5507" ;
    icsa:cweNumber "CWE-20; CWE-399; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2013-3415,
        cve-res:CVE-2013-5507,
        cve-res:CVE-2013-5508 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-264,
        cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ASA and FWSM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Cisco Firewall Services Module (FWSM) software for Cisco Catalyst 6500 Series switches and Cisco 7600 Series routers." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-289-01" ;
    icsa:vendor "Cisco" ;
    icsa:year 2013 .

icsa-res:ICSA-13-291-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-13-291-01B" ;
    dcterms:issued "2013-10-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "DNP3 Implementation Vulnerability (Update B)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DNP3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Alstrom | Catapult Software | Cooper Power Systems | Cooper Power Systems/Cybectec | Elecsys | GE | IOServer | Kepware Technologies | MatrikonOPC | NovaTech | OSISoft | Schneider Electric | Schweitzer Engineering Laboratories | Software Toolbox | SUBNET Solutions | Triangle MicroWorks products." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-291-01B" ;
    icsa:vendor "Other" ;
    icsa:year 2013 .

icsa-res:ICSA-13-295-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-295-01" ;
    dcterms:issued "2013-10-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingView ActiveX Vulnerabilities" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-6128; CVE-2013-6127" ;
    icsa:cweNumber "CWE-40; CWE-28" ;
    icsa:hasCVE cve-res:CVE-2013-6127,
        cve-res:CVE-2013-6128 ;
    icsa:hasCWE cwe-res:CWE-28,
        cwe-res:CWE-40 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingView" ;
    icsa:productDistribution "China, Japan, Singapore, Taiwan, United States, Europe" ;
    icsa:productsAffected "KingView versions older than Version 6.53." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-295-01" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2013 .

icsa-res:ICSA-13-297-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-297-01" ;
    dcterms:issued "2013-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Catapult Software DNP3 Driver Improper Input Validation" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "New Zealand" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2811; CVE-2013-2823" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2811,
        cve-res:CVE-2013-2823 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DNP3 Driver" ;
    icsa:productDistribution "New Zealand" ;
    icsa:productsAffected "and Proficy human-machine interface/supervisory control and data acquisition (HMI/SCADA) - iFIX or CIMPLICITY servers with the vulnerable I/O Driver installed (this includes iFIX or CIMPLICITY installations that are part of Proficy Process Systems).; Catapult Software DNP driver (\"DNP\"): Version 7.20.56" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-297-01" ;
    icsa:vendor "Catapult Software" ;
    icsa:year 2013 .

icsa-res:ICSA-13-297-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-297-02" ;
    dcterms:issued "2013-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy DNP3 Improper Input Validation" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2811; CVE-2013-2823" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2811,
        cve-res:CVE-2013-2823 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy DNP3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy human-machine interface/supervisory control and data acquisition (HMI/SCADA) DNP3 I/O Driver (\"DNP\"): Version 7.20j (Catapult v7.2.0.56) and prior versions. Proficy HMI/SCADA”iFIX or CIMPLICITY servers with the vulnerable I/O Driver installed (this includes iFIX or CIMPLICITY installations that are part of Proficy Process Systems)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-297-02" ;
    icsa:vendor "GE" ;
    icsa:year 2013 .

icsa-res:ICSA-13-329-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-329-01" ;
    dcterms:issued "2013-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Triangle Research Nano-10 PLC Improper Input Validation" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-5741" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-5741 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nano 10 PLC" ;
    icsa:productDistribution "Australia, Canada, South Korea, Singapore, United States" ;
    icsa:productsAffected "TRi Inc. Nano-10 PLC firmware versions are affected: All firmware versions prior to r82." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-329-01" ;
    icsa:vendor "Triangle Research International, Inc." ;
    icsa:year 2013 .

icsa-res:ICSA-13-337-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-337-01" ;
    dcterms:issued "2013-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Elecsys Director Gateway Improper Input Validation Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Defense Industrial Base; Emergency Services; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2825" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2825 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Director Gateway" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Elecsys Director Gateway versions: Elecsys Director DNP3 Outstation kernel Version 2.6.32.11ael1 and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-337-01" ;
    icsa:vendor "Elecsys" ;
    icsa:year 2013 .

icsa-res:ICSA-13-338-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-338-01" ;
    dcterms:issued "2013-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS S/G Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2013-6920" ;
    icsa:cweNumber "CWE-592" ;
    icsa:hasCVE cve-res:CVE-2013-6920 ;
    icsa:hasCWE cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS S/G" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SINAMICS S/G family with firmware version prior to 4.6.11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-338-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-340-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-340-01" ;
    dcterms:issued "2013-12-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "RuggedCom ROS Multiple Vulnerabilities" ;
    icsa:CVSSScore "7.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2013-6926; CVE-2013-6925" ;
    icsa:cweNumber "CWE-330; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2013-6925,
        cve-res:CVE-2013-6926 ;
    icsa:hasCWE cwe-res:CWE-330,
        cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ROS" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "Siemens RuggedCom ROS versions device with ROS firmware version prior to v3.12.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-340-01" ;
    icsa:vendor "RuggedCom" ;
    icsa:year 2013 .

icsa-res:ICSA-13-344-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-344-01" ;
    dcterms:issued "2013-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2827; CVE-2013-2826" ;
    icsa:cweNumber "CWE-538; CWE-749" ;
    icsa:hasCVE cve-res:CVE-2013-2826,
        cve-res:CVE-2013-2827 ;
    icsa:hasCWE cwe-res:CWE-538,
        cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WellinTech Products" ;
    icsa:productDistribution "China, Japan, Singapore, Taiwan, United States, Europe" ;
    icsa:productsAffected "KingSCADA 3.1 and all previous versions | KingAlarm & Event 2.0.2 and all previous versions and KingGraphic 3.1 and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-344-01" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2013 .

icsa-res:ICSA-13-346-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-346-01" ;
    dcterms:issued "2013-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cooper Power Systems Improper Input Validation Vulnerability" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-2813; CVE-2013-2816" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2813,
        cve-res:CVE-2013-2816 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SMP 4 | SMP 16 Gateways" ;
    icsa:productDistribution "Canada, United States, North America, South America" ;
    icsa:productsAffected "SMP 16 Gateway (Data Concentrator) all versions | SMP 4 Gateway (Data Concentrator) all versions and SMP 4/DP Gateway (Data Concentrator) all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-346-01" ;
    icsa:vendor "Cooper Power Systems" ;
    icsa:year 2013 .

icsa-res:ICSA-13-346-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-346-02" ;
    dcterms:issued "2013-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2013-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-2814" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2814 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cybectec DNP3 Master OPC Server" ;
    icsa:productDistribution "Canada, United States, South America" ;
    icsa:productsAffected "DNP3 Master OPC Server - all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-346-02" ;
    icsa:vendor "Cooper Power Systems" ;
    icsa:year 2013 .

icsa-res:ICSA-13-347-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-347-01" ;
    dcterms:issued "2013-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS Privilege Escalation" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2013-6840" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2013-6840 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Germany, Asia, Europe" ;
    icsa:productsAffected "All COMOS versions prior to 9.2 | COMOS 9.2: all versions prior to V092_Upd08_Patch001 (9.2.0.8.1) | COMOS 10.0: all versions prior to V100_SP03_Upd01_Patch040 (10.0.3.1.40) | COMOS 10.1: all versions prior to V101_Patch002 (10.1.0.0.2)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-347-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2013 .

icsa-res:ICSA-13-350-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-13-350-01A" ;
    dcterms:issued "2013-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2013-2824" ;
    icsa:cweNumber "CWE-248" ;
    icsa:hasCVE cve-res:CVE-2013-2824 ;
    icsa:hasCWE cwe-res:CWE-248 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CitectSCADA Products" ;
    icsa:productDistribution "France" ;
    icsa:productsAffected "Schneider Electric versions affected:StruxureWare SCADA Expert Vijeo Citect v7.40 Vijeo Citect v7.20 to v7.30SP1 CitectSCADA v7.20 to v7.30SP1 StruxureWare PowerSCADA Expert v7.30 to v7.30SR1 andPowerLogic SCADA v7.20 to v7.20SR1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-350-01A" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2013 .

icsa-res:ICSA-13-352-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-13-352-01" ;
    dcterms:issued "2013-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "NovaTech Orion DNP3 Improper Input Validation Vulnerability" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-2822; CVE-2013-2821" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2821,
        cve-res:CVE-2013-2822 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Orion DNP3" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Orion versions are affected: OrionLX DNP Master v1.27.38 and DNP Slave V1.23.10 and earlier (included in firmware releases 7.6 and earlier) andOrion5/Orion5r DNP Master V1.27.38 and DNP Slave V1.23.10 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-13-352-01" ;
    icsa:vendor "NovaTech" ;
    icsa:year 2013 .

icsa-res:ICSA-14-006-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-006-01" ;
    dcterms:issued "2014-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-6143" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-6143 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Telvent SAGE RTU DNP3" ;
    icsa:productDistribution "United States, North America, Europe" ;
    icsa:productsAffected "2013 | Telvent SAGE 3030 C3413-500-001D3_P4 (Firmware from 2010) | Telvent SAGE 3030 C3413-500-001F0_PB (Latest Firmware).; Schneider Electric versions affected: All versions released prior to December 1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-006-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-007-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-14-007-01B" ;
    dcterms:issued "2014-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B)" ;
    icsa:CVSSScore "9.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2013-2819; CVE-2013-2820" ;
    icsa:cweNumber "CWE-294; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2013-2819,
        cve-res:CVE-2013-2820 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AirLink Raven X EV-DO" ;
    icsa:productDistribution "Canada, China, France, United States, Europe" ;
    icsa:productsAffected "AirLink Raven X EV-DO Versions V4221_4.0.11.003 and V4228_4.0.11.003." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-007-01B" ;
    icsa:vendor "Sierra Wireless" ;
    icsa:year 2014 .

icsa-res:ICSA-14-008-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-008-01" ;
    dcterms:issued "2014-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-0752" ;
    icsa:cweNumber "CWE-529" ;
    icsa:hasCVE cve-res:CVE-2014-0752 ;
    icsa:hasCWE cwe-res:CWE-529 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sdn Bhd IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "IntegraXor - 4.1.4360 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-008-01" ;
    icsa:vendor "Ecava" ;
    icsa:year 2014 .

icsa-res:ICSA-14-010-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-010-01" ;
    dcterms:issued "2014-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "MatrikonOPC Improper Input Validation" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2013-2829" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2829 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC" ;
    icsa:productDistribution "Australia, Brazil, Canada, Costa Rica, Germany, Spain, United Kingdom, India, Norway, Portugal, Russia, Singapore, United States" ;
    icsa:productsAffected "MatrikonOPC SCADA DNP3 OPC Server Version 1.2.2.0 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-010-01" ;
    icsa:vendor "MatrikonOPC" ;
    icsa:year 2014 .

icsa-res:ICSA-14-014-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-014-01" ;
    dcterms:issued "2014-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric ClearSCADA Uncontrolled Resource Consumption Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-6142" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2013-6142 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ClearSCADA" ;
    icsa:productDistribution "France" ;
    icsa:productsAffected "Schneider Electric versions affected: ClearSCADA 2010 R2 (Build 71.4165) | ClearSCADA 2010 R2.1 (Build 71.4325) | ClearSCADA 2010 R3 (Build 72.4560) | ClearSCADA 2010 R3.1 (Build 72.4644) | SCADA Expert ClearSCADA 2013 R1 (Build 73.4729) | SCADA Expert ClearSCADA 2013 R1.1 (Build 73.4832) | SCADA Expert ClearSCADA 2013 R1.1a (Build 73.4903) | SCADA Expert ClearSCADA 2013 R1.2 (Build 73.4955)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-014-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-016-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-016-01" ;
    dcterms:issued "2014-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-0753" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-0753 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "IntegraXor version 4.1.4380 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-016-01" ;
    icsa:vendor "Ecava" ;
    icsa:year 2014 .

icsa-res:ICSA-14-021-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-021-01" ;
    dcterms:issued "2014-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell RSLogix 5000 Password Vulnerability" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0755" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2014-0755 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLogix 5000" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "RSLogix 5000 software versions affected: Project files (.ACD) created using RSLogix 5000 software | V7 through V20.01 and V21.0 containing password protected content." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-021-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2014 .

icsa-res:ICSA-14-023-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-023-01" ;
    dcterms:issued "2014-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy Vulnerabilities" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-0751; CVE-2014-0750" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2014-0750,
        cve-res:CVE-2014-0751 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE Intelligent Platforms products affected: Proficy HMI/SCADA - CIMPLICITY | Version 4.01 to 8.2 | Proficy Process Systems with CIMPLICITY." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-023-01" ;
    icsa:vendor "GE" ;
    icsa:year 2014 .

icsa-res:ICSA-14-030-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-030-01" ;
    dcterms:issued "2014-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S CoDeSys Runtime Toolkit NULL Pointer Dereference" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2014-0757" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2014-0757 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CoDeSys Runtime Toolkit" ;
    icsa:productDistribution "China, Germany" ;
    icsa:productsAffected "CoDeSys Runtime Toolkit versions older than Version V2.4.7.44." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-030-01" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2014 .

icsa-res:ICSA-14-035-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-035-01" ;
    dcterms:issued "2014-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC OA Multiple Vulnerabilities" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-1698; CVE-2014-1696; CVE-2014-1699; CVE-2014-1697" ;
    icsa:cweNumber "CWE-94; CWE-23; CWE-20; CWE-916" ;
    icsa:hasCVE cve-res:CVE-2014-1696,
        cve-res:CVE-2014-1697,
        cve-res:CVE-2014-1698,
        cve-res:CVE-2014-1699 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-23,
        cwe-res:CWE-916,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC OA" ;
    icsa:productDistribution "Germany, United States, Asia, Europe" ;
    icsa:productsAffected "SIMATIC WinCC OA all versions prior to 3.12 P002." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-035-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-051-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-051-01" ;
    dcterms:issued "2014-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS GENESIS32 Insecure ActiveX Control" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0758" ;
    icsa:cweNumber "CWE-749" ;
    icsa:hasCVE cve-res:CVE-2014-0758 ;
    icsa:hasCWE cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GENESIS32" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, Asia" ;
    icsa:productsAffected "ICONICS product affected: GENESIS32 versions 8.0 | 8.02 | 8.04 | 8.05." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-051-01" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2014 .

icsa-res:ICSA-14-051-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-051-02" ;
    dcterms:issued "2014-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Automation MC-WorX Suite Unsecure ActiveX Control" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2817" ;
    icsa:cweNumber "CWE-749" ;
    icsa:hasCVE cve-res:CVE-2013-2817 ;
    icsa:hasCWE cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MC-WorX Suite" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Mitsubishi Electric Automation Inc product affected: MC-WorX Suite Version 8.02." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-051-02" ;
    icsa:vendor "Mitsubishi Electric Automation" ;
    icsa:year 2014 .

icsa-res:ICSA-14-051-03B a icsa:ICSA ;
    dcterms:identifier "ICSA-14-051-03B" ;
    dcterms:issued "2014-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RuggedCom Uncontrolled Resource Consumption Vulnerability (Update B)" ;
    icsa:CVSSScore "2.6"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2014-1966" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2014-1966 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RuggedCom" ;
    icsa:productDistribution "Germany, Malaysia, United States, Asia, Europe" ;
    icsa:productsAffected "All ROS versions prior to v3.11 | ROS v3.11 (for product RS950G): all versions prior to ROS v3.11.5 | ROS v3.12: all versions prior to ROS v3.12.4 | ROS v4.0 (for product RSG2488): all versions prior to ROS v4.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-051-03B" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-051-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-051-04" ;
    dcterms:issued "2014-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "NTP Reflection Attack" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2013-521" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-521 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NTP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Products using NTP service NTP-4.2.7p25 and prior (with MONLIST support) are affected. No specific vendor is specified as this is an open source protocol." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-051-04" ;
    icsa:vendor "Other" ;
    icsa:year 2014 .

icsa-res:ICSA-14-058-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-058-01" ;
    dcterms:issued "2014-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Floating License Manager Vulnerability" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0759" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2014-0759 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Floating License Manager" ;
    icsa:productDistribution "United States, North America, Europe" ;
    icsa:productsAffected "Schneider Electric Floating License Manager Versions V1.0.0 through V1.4.0. This license manager is used in five Schneider Electric Products." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-058-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-058-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-058-02" ;
    dcterms:issued "2014-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric OFS Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0774" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-0774 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OFS" ;
    icsa:productDistribution "United States, North America, Europe" ;
    icsa:productsAffected "Schneider Electric OFS Test Client versions are affected: TLXCDSUOFS33 - V3.35 | TLXCDSTOFS33 - V3.35 | TLXCDLUOFS33 - V3.35 | TLXCDLTOFS33 - V3.35 | TLXCDLFOFS33 - V3.35." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-058-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-070-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-070-01A" ;
    dcterms:issued "2014-03-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CENTUM CS 3000 Vulnerabilities (Update A)" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2014-0781; CVE-2014-0783; CVE-2014-0782" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-0781,
        cve-res:CVE-2014-0782,
        cve-res:CVE-2014-0783 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CENTUM CS 3000" ;
    icsa:productDistribution "Japan, South America, Asia, East Asia, Europe, Africa, Middle East, Central America" ;
    icsa:productsAffected "CENTUM CS 3000 R3.09.50 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-070-01A" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2014 .

icsa-res:ICSA-14-072-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-072-01" ;
    dcterms:issued "2014-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric StruxureWare SCADA Expert ClearSCADA Parsing Vulnerability" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0779" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-0779 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "StruxureWare SCADA Expert ClearSCADA" ;
    icsa:productDistribution "France" ;
    icsa:productsAffected "SCADA Expert ClearSCADA versions affected: ClearSCADA 2010 R2 (build 71.4165) | ClearSCADA 2010 R2.1 (build 71.4325) | ClearSCADA 2010 R3 (build 72.4560) | ClearSCADA 2010 R3.1 (build 72.4644) | SCADA Expert ClearSCADA 2013 R1 (build 73.4729) | SCADA Expert ClearSCADA 2013 R1.1 (build 73.4832) | SCADA Expert ClearSCADA 2013 R1.1a (build 73.4903) | SCADA Expert ClearSCADA 2013 R1.2 (build 73.4955) |SCADA Expert ClearSCADA 2013 R2 (build 74.5094)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-072-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-073-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-073-01" ;
    dcterms:issued "2014-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 CPU Firmware Vulnerabilities" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-2246; CVE-2014-2257; CVE-2014-2247; CVE-2014-2259; CVE-2014-2248; CVE-2014-2249; CVE-2014-2255; CVE-2014-2253; CVE-2014-2251" ;
    icsa:cweNumber "CWE-404; CWE-352; CWE-80; CWE-601; CWE-331" ;
    icsa:hasCVE cve-res:CVE-2014-2246,
        cve-res:CVE-2014-2247,
        cve-res:CVE-2014-2248,
        cve-res:CVE-2014-2249,
        cve-res:CVE-2014-2251,
        cve-res:CVE-2014-2253,
        cve-res:CVE-2014-2255,
        cve-res:CVE-2014-2257,
        cve-res:CVE-2014-2259 ;
    icsa:hasCWE cwe-res:CWE-331,
        cwe-res:CWE-352,
        cwe-res:CWE-404,
        cwe-res:CWE-601,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 CPU Firmware" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SIMATIC S7-1500 versions are affected: SIMATIC S7-1500 CPU family - all versions older than V1.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-073-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-079-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-079-01" ;
    dcterms:issued "2014-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 Improper Input Validation Vulnerabilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2013-2780; CVE-2013-0700" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-0700,
        cve-res:CVE-2013-2780 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SIMATIC S7-1200 PLC versions affected: SIMATIC S7-1200 PLC family: all versions before V4.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-079-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-079-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-079-02" ;
    dcterms:issued "2014-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 Vulnerabilities" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2014-2256; CVE-2014-2252; CVE-2014-2250; CVE-2014-2258; CVE-2014-2249; CVE-2014-2254" ;
    icsa:cweNumber "CWE-404; CWE-352; CWE-331" ;
    icsa:hasCVE cve-res:CVE-2014-2249,
        cve-res:CVE-2014-2250,
        cve-res:CVE-2014-2252,
        cve-res:CVE-2014-2254,
        cve-res:CVE-2014-2256,
        cve-res:CVE-2014-2258 ;
    icsa:hasCWE cwe-res:CWE-331,
        cwe-res:CWE-352,
        cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SIMATIC S7-1200 versions are affected: SIMATIC S7-1200 CPU family - all versions prior to V4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-079-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-079-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-079-03" ;
    dcterms:issued "2014-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Vulnerabilities" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2014-0773; CVE-2014-0765; CVE-2014-0771; CVE-2014-0766; CVE-2014-0763; CVE-2014-0767; CVE-2014-0770; CVE-2014-0768; CVE-2014-0772; CVE-2014-0764" ;
    icsa:cweNumber "CWE-538; CWE-77; CWE-89; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-0763,
        cve-res:CVE-2014-0764,
        cve-res:CVE-2014-0765,
        cve-res:CVE-2014-0766,
        cve-res:CVE-2014-0767,
        cve-res:CVE-2014-0768,
        cve-res:CVE-2014-0770,
        cve-res:CVE-2014-0771,
        cve-res:CVE-2014-0772,
        cve-res:CVE-2014-0773 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-538,
        cwe-res:CWE-77,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan" ;
    icsa:productsAffected "WebAccess Version 7.1 and previous." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-079-03" ;
    icsa:vendor "Advantech" ;
    icsa:year 2014 .

icsa-res:ICSA-14-084-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-084-01" ;
    dcterms:issued "2014-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo CECX-X-(C1/M1) Controller Vulnerabilities" ;
    icsa:CVSSScore "9.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-0769; CVE-2012-6068; CVE-2014-0760; CVE-2012-6069" ;
    icsa:cweNumber "CWE-284; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2012-6068,
        cve-res:CVE-2012-6069,
        cve-res:CVE-2014-0760,
        cve-res:CVE-2014-0769 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CECX-X-(C1/M1) Controller" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-084-01" ;
    icsa:vendor "Festo" ;
    icsa:year 2014 .

icsa-res:ICSA-14-086-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-086-01" ;
    dcterms:issued "2014-03-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Serial Modbus Driver Buffer Overflow" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Government Facilities; Nuclear Reactors Materials and Waste; Transportation Systems" ;
    icsa:cveNumber "CVE-2013-0662" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2013-0662 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Serial Modbus Driver" ;
    icsa:productDistribution "China, France, United States, Europe" ;
    icsa:productsAffected "Schneider Electric products bundle the Schneider Electric Modbus Serial Driver (ModbusDrv.exe) which is started when attempting to connect to a Programmable Logic Controller (PLC) via the serial port of a personal computer: TwidoSuite Versions 2.31.04 and earlier | PowerSuite Versions 2.6 and earlier | SoMove Versions 1.7 and earlier | SoMachine Versions 2.0 | 3.0 | 3.1 | 3.0 XS |Unity Pro Versions 7.0 and earlier | UnityLoader Versions 2.3 and earlier | Concept Versions 2.6 SR7 and earlier | ModbusCommDTM sl Versions 2.1.2 and earlier | PL7 Versions 4.5 SP5 and earlier | SFT2841 Versions 14 | 13.1 and earlier | OPC Factory Server Versions 3.50 and earlier. Modbus Serial Driver versions that are affected: Windows XP 32 bit V1.10 IE v37 | Windows Vista 32 bit V2.2 IE12 | Windows 7 32 bit V2.2 IE12 | Windows 7 64 bit V3.2 IE12." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-086-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-086-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-086-01A" ;
    dcterms:issued "2014-03-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Serial Modbus Driver Buffer Overflow (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Government Facilities; Nuclear Reactors Materials and Waste; Transportation Systems" ;
    icsa:cveNumber "CVE-2013-0662" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2013-0662 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Serial Modbus Driver" ;
    icsa:productDistribution "China, France, United States, Europe" ;
    icsa:productsAffected "3.0 | 3.1 | 3.0 XS | Unity Pro Versions 7.0 and earlier | UnityLoader Versions 2.3 and earlier | Concept Versions 2.6 SR7 and earlier | ModbusCommDTM sl Versions 2.1.2 and earlier | PL7 Versions 4.5 SP5 and earlier | SFT2841 Versions 14 | 13.1 and earlier | OPC Factory Server (OFS) Versions 3.40 and earlier. Modbus Serial Driver versions that are affected: Windows XP 32 bit V1.10 IE v37 | Windows Vista 32 bit V2.2 IE12 | Windows 7 32 bit V2.2 IE12 | Windows 7 64 bit V3.2 IE12.; Schneider Electric products bundle the Schneider Electric Modbus Serial Driver (ModbusDrv.exe) which is started when attempting to connect to a Programmable Logic Controller (PLC) via the serial port of a personal computer: TwidoSuite Versions 2.31.04 and earlier | PowerSuite Versions 2.6 and earlier | SoMove Versions 1.7 and earlier | SoMachine Versions 2.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-086-01A" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-087-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-087-01A" ;
    dcterms:issued "2014-03-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens ROS Improper Input Validation (Update A)" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2014-2590" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-2590 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ROS" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "ROS v3.11 (for product RS950G): all versions prior to ROS v3.11.5 | ROS v3.12: all versions prior to ROS v3.12.4 | ROS v4.0 (for product RSG2488): all versions prior to ROS v4.1.0.; Siemens ROS versions affected: All ROS versions prior to v3.11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-087-01A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-091-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-091-01" ;
    dcterms:issued "2014-04-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor Guest Account Information Disclosure Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-0786" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2014-0786 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "IntegraXor versions prior to 4.1.4410." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-091-01" ;
    icsa:vendor "Ecava" ;
    icsa:year 2014 .

icsa-res:ICSA-14-093-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-093-01" ;
    dcterms:issued "2014-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric OPC Factory Server Buffer Overflow" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0789" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2014-0789 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC Factory Server" ;
    icsa:productDistribution "France, United States, North America" ;
    icsa:productsAffected "Schneider Electric versions of OFS: TLXCDSUOFS33 - V3.5 and previous | TLXCDSTOFS33 - V3.5 and previous | TLXCDLUOFS33 - V3.5 and previous | TLXCDLTOFS33 - V3.5 and previous | TLXCDLFOFS33 - V3.5 and previous." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-093-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-098-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-098-01" ;
    dcterms:issued "2014-04-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Interface for DNP3 Improper Input Validation" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2809; CVE-2013-2828" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2809,
        cve-res:CVE-2013-2828 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Interface for DNP3" ;
    icsa:productDistribution "North America, Asia, Europe" ;
    icsa:productsAffected "All versions of the OSIsoft PI Interface for DNP3 prior to Version 3.1.2.54 are known to be affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-098-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2014 .

icsa-res:ICSA-14-098-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-098-02" ;
    dcterms:issued "2014-04-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingSCADA Stack-Based Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0787" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-0787 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingSCADA" ;
    icsa:productDistribution "China, Japan, Singapore, Taiwan, United States, Europe" ;
    icsa:productsAffected "KingSCADA - all versions prior to v3.1.2.13." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-098-02" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2014 .

icsa-res:ICSA-14-098-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-098-03" ;
    dcterms:issued "2014-04-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Ruggedcom WIN Products BEAST Attack Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2011-3389" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2011-3389 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ruggedcom WIN Products" ;
    icsa:productDistribution "Germany, United States, Asia, Europe" ;
    icsa:productsAffected "WIN7000: all versions prior to v4.4 | WIN7200: all versions prior to v4.4 | WIN5100: all versions prior to v4.4 and WIN5200: all versions prior to v4.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-098-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-100-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-100-01" ;
    dcterms:issued "2014-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "IOServer Out of Bounds Read Vulnerability" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2014-0777" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2014-0777 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IOServer" ;
    icsa:productDistribution "Australia" ;
    icsa:productsAffected "IOServer versions affected: OPC Drivers Versions 1.0.20 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-100-01" ;
    icsa:vendor "IOServer" ;
    icsa:year 2014 .

icsa-res:ICSA-14-105-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-105-01" ;
    dcterms:issued "2014-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Progea Movicon SCADA Information Disclosure Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0778" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2014-0778 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Movicon SCADA" ;
    icsa:productDistribution "India, United States, Europe" ;
    icsa:productsAffected "Progea Movicon 11.4 prior to Build 1150." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-105-01" ;
    icsa:vendor "Progea" ;
    icsa:year 2014 .

icsa-res:ICSA-14-105-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-105-02A" ;
    dcterms:issued "2014-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Innominate mGuard OpenSSL HeartBleed Vulnerability (Update A)" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-0160" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-0160 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mGuard OpenSSL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "mGuard firmware Versions 8.0.0 and 8.0.1 | mGuard firmware versions prior to 8.0.0 whether running on Innominate - Phoenix Contact or other brands of devices are NOT affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-105-02A" ;
    icsa:vendor "Innominate" ;
    icsa:year 2014 .

icsa-res:ICSA-14-105-03B a icsa:ICSA ;
    dcterms:identifier "ICSA-14-105-03B" ;
    dcterms:issued "2014-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0160" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-0160 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products OpenSSL" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "Siemens products affected: eLAN-8.2 eLAN prior to 8.3.3 (affected when RIP is used”update available) | WinCC OA only V3.12 (always affected”update available) | S7-1500 V1.5 (affected when HTTPS active”update available) | CP1543-1 V1.1 (affected when FTPS active”update available) | APE 2.0 (affected when SSL/TLS component is used in customer implementation”update available)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-105-03B" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-107-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-107-01" ;
    dcterms:issued "2014-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Vulnerabilities" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-2733; CVE-2014-2732; CVE-2014-2731" ;
    icsa:cweNumber "CWE-94; CWE-23; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-2731,
        cve-res:CVE-2014-2732,
        cve-res:CVE-2014-2733 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-23,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA" ;
    icsa:productDistribution "Germany, United States, Asia, Europe" ;
    icsa:productsAffected "SINEMA server: all versions prior to V12 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-107-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-107-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-107-02" ;
    dcterms:issued "2014-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "InduSoft Web Studio Directory Traversal Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0780" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2014-0780 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Web Studio" ;
    icsa:productDistribution "China, France, India, Poland, Portugal, Taiwan, United States" ;
    icsa:productsAffected "Web Studio Version 7.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-107-02" ;
    icsa:vendor "InduSoft" ;
    icsa:year 2014 .

icsa-res:ICSA-14-114-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-114-01" ;
    dcterms:issued "2014-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Certec atvise scada OpenSSL Heartbleed Vulnerability" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; oil and gas; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0160" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-0160 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "atvise scada OpenSSL" ;
    icsa:productDistribution "Austria" ;
    icsa:productsAffected "Certec atvise scada Versions 2.3 and above." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-114-01" ;
    icsa:vendor "Certec EDV GmbH" ;
    icsa:year 2014 .

icsa-res:ICSA-14-114-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-114-02" ;
    dcterms:issued "2014-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 CPU Web Vulnerabilities" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2014-2909; CVE-2014-2908" ;
    icsa:cweNumber "CWE-79; CWE-113" ;
    icsa:hasCVE cve-res:CVE-2014-2908,
        cve-res:CVE-2014-2909 ;
    icsa:hasCWE cwe-res:CWE-113,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 CPU" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SIMATIC S7-1200 CPU family Versions: V2.X and V3.X." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-114-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-121-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-121-01" ;
    dcterms:issued "2014-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "AMTELCO miSecure Vulnerabilities" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-2347; CVE-2014-0357" ;
    icsa:cweNumber "CWE-200; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2014-0357,
        cve-res:CVE-2014-2347 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "miSecure" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "AMTELCO products affected: miSecureMessages - Version 6.2 (to include Android | iPhone | Blackberry mobile device applications)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-121-01" ;
    icsa:vendor "AMTELCO" ;
    icsa:year 2014 .

icsa-res:ICSA-14-126-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-126-01A" ;
    dcterms:issued "2014-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Relion 650 Series OpenSSL Vulnerability (Update A)" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-0160" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-0160 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Relion 650 Series OpenSSL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB Relion versions affected: 650 series Ver 1.3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-126-01A" ;
    icsa:vendor "ABB" ;
    icsa:year 2014 .

icsa-res:ICSA-14-128-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-128-01" ;
    dcterms:issued "2014-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digi International OpenSSL Vulnerability" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2014-0160" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-0160 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Digi International OpenSSL" ;
    icsa:productDistribution "United States, South America, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "ConnectPort LTS | ConnectPort X2e | Digi Embedded Linux 5.9 | Digi Embedded Yocto 1.4 | Wireless Vehicle Bus Adapter (WVA)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-128-01" ;
    icsa:vendor "Digi International, Inc." ;
    icsa:year 2014 .

icsa-res:ICSA-14-133-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-133-01" ;
    dcterms:issued "2014-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa Multiple Products Vulnerabilities" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2014-0781; CVE-2014-0784; CVE-2014-0783; CVE-2014-0782" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-0781,
        cve-res:CVE-2014-0782,
        cve-res:CVE-2014-0783,
        cve-res:CVE-2014-0784 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Yokogawa Multiple Products" ;
    icsa:productDistribution "Japan, South America, Asia, Europe, Africa, Middle East, Central America" ;
    icsa:productsAffected "Yokogawa products affected by all four vulnerabilities: CENTUM CS 1000 all revisions | CENTUM CS 3000 Entry Class R3.09.50 and earlier | CENTUM VP R5.03.00 and earlier | CENTUM VP Entry Class R5.03.00 and earlier | Exaopc R3.71.02 and earlier | B/M9000CS R5.05.01 and earlier | B/M9000 VP R7.03.01 and earlier. The following Yokogawa products are affected only by the first vulnerability listed below: ProSafe-RS R1.03.00 and earlier | Exapilot R3.96.00 and earlier | Exaplog R3.40.00 and earlier | Exaquantum R2.02.50 to R2.80.00 | Exasmoc R4.03.20 and earlier | Exarqe R4.03.20 and earlier | AAASuite R1.20.13 and earlier | PRM R3.11.20 and earlier | STARDOM FCN/FCJ OPC Server for Windows R3.40.01 and earlier | Field Wireless Device OPC Server R2.01.01 and earlier | DAQOPC R3.01 and earlier | FieldMate R1.03 and earlier | EJXMVTool R1.02.00 to R1.02.02 | RPO Production Supervisor VP R1.03.00 and earlier | CENTUM Long-term Trend Historian all versions | CENTUM Event Viewer Package all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-133-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2014 .

icsa-res:ICSA-14-133-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-133-02" ;
    dcterms:issued "2014-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV Vulnerabilities" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2014-2350; CVE-2014-2349" ;
    icsa:cweNumber "CWE-798; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2014-2349,
        cve-res:CVE-2014-2350 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DeltaV Versions 10.3.1 | 11.3; 11.3.1 and 12.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-133-02" ;
    icsa:vendor "Emerson" ;
    icsa:year 2014 .

icsa-res:ICSA-14-135-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-135-01" ;
    dcterms:issued "2014-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "CSWorks Software SQL Injection Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-2351" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2014-2351 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CSWork Software SQL" ;
    icsa:productDistribution "Canada, Spain, Norway, Russia" ;
    icsa:productsAffected "CSWorks Version 2.5.5050.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-135-01" ;
    icsa:vendor "CSWorks" ;
    icsa:year 2014 .

icsa-res:ICSA-14-135-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-135-02" ;
    dcterms:issued "2014-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0160" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-0160 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware Intelligence OpenSSL" ;
    icsa:productDistribution "France" ;
    icsa:productsAffected "Web Server & CLI vulnerabilities: VxWorks Versions 5.5 through 6.9 and SSH vulnerabilities: VxWorks Versions 6.5 through 6.9 |GE reports the vulnerabilities affect the following D20MX versions: D20MX v1.0-1.6.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-135-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-135-03A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-135-03A" ;
    dcterms:issued "2014-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RuggedCom ROX-based Devices Certificate Verification Vulnerability (Update A)" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2014-0092" ;
    icsa:cweNumber "CWE-310" ;
    icsa:hasCVE cve-res:CVE-2014-0092 ;
    icsa:hasCWE cwe-res:CWE-310 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RuggedCom ROX-based Devices Certificate" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "Siemens RuggedCom ROX-based devices are affected: ROX 1 prior to Version 1.16.1 | ROX 2 prior to Version 2.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-135-03A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-135-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-135-04" ;
    dcterms:issued "2014-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Unified Automation OPC SDK OpenSSL Vulnerability" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2014-0160" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-0160 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC SDK OpenSSL" ;
    icsa:productDistribution "United States, Europe" ;
    icsa:productsAffected "Unified Automation GmbH OPC UA SDK for Windows versions are affected: C++ based OPC UA SDK V1.4.0 (Windows) and ANSI C based OPC UA SDK V1.4.0 (Windows)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-135-04" ;
    icsa:vendor "Unified Automation" ;
    icsa:year 2014 .

icsa-res:ICSA-14-135-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-135-05" ;
    dcterms:issued "2014-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "OpenSSL Vulnerability" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-0160" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2014-0160 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenSSL Vulnerability" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OpenSSL Versions 1.0.1 through 1.0.1f and 1.0.2-beta1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-135-05" ;
    icsa:vendor "Other" ;
    icsa:year 2014 .

icsa-res:ICSA-14-149-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-149-01" ;
    dcterms:issued "2014-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Triangle MicroWorks Uncontrolled Resource Consumption" ;
    icsa:CVSSScore "2.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-2343; CVE-2014-2342" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2014-2342,
        cve-res:CVE-2014-2343 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Uncontrolled Resource Consumption" ;
    icsa:productDistribution "Australia, New Zealand, United States, South America, Asia, Europe" ;
    icsa:productsAffected "SCADA Data Gateway - versions prior to v3.00.0635." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-149-01" ;
    icsa:vendor "Triangle MicroWorks" ;
    icsa:year 2014 .

icsa-res:ICSA-14-149-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-149-02" ;
    dcterms:issued "2014-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cogent DataHub Vulnerabilities" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Financial Services" ;
    icsa:cveNumber "CVE-2014-2354; CVE-2014-2352; CVE-2014-2353" ;
    icsa:cweNumber "CWE-22; CWE-80; CWE-916" ;
    icsa:hasCVE cve-res:CVE-2014-2352,
        cve-res:CVE-2014-2353,
        cve-res:CVE-2014-2354 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-80,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataHub" ;
    icsa:productDistribution "Canada, United Kingdom, United States" ;
    icsa:productsAffected "DataHub versions prior to 7.3.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-149-02" ;
    icsa:vendor "Cogent Real-Time Systems Inc" ;
    icsa:year 2014 .

icsa-res:ICSA-14-154-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-154-01" ;
    dcterms:issued "2014-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "COPA-DATA Improper Input Validation" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-2346; CVE-2014-2345" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-2345,
        cve-res:CVE-2014-2346 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Improper Input Validation" ;
    icsa:productDistribution "Austria, Australia, United States, North America, South America, Asia, Europe, Africa" ;
    icsa:productsAffected "COPA-DATA products affected: zenon DNP3 NG driver (DNP3 master) - Versions 7.10 SP0 up to and including 7.11 SP0 build 10238 | zenon DNP3 Process Gateway (DNP3 outstation) - Versions 7.11 SP0 build 10238 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-154-01" ;
    icsa:vendor "COPA-DATA" ;
    icsa:year 2014 .

icsa-res:ICSA-14-156-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-156-01" ;
    dcterms:issued "2014-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "OpenSSL Releases Security Advisory" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-0224" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2014-0224 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenSSL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OpenSSL Versions 1.0.1 through 1.0.1f and 1.0.2-beta1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-156-01" ;
    icsa:vendor "Other" ;
    icsa:year 2014 .

icsa-res:ICSA-14-175-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-175-01" ;
    dcterms:issued "2014-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell FALCON XLWeb Controllers Vulnerabilities" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-3110; CVE-2014-2717" ;
    icsa:cweNumber "CWE-552; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2014-2717,
        cve-res:CVE-2014-3110 ;
    icsa:hasCWE cwe-res:CWE-552,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FALCON XLWeb Controllers" ;
    icsa:productDistribution "Europe, Middle East" ;
    icsa:productsAffected "Honeywell FALCON XLWeb controller versions affected: FALCON Linux 2.04.01 or older | FALCON XLWebExe 2.02.11 or older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-175-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2014 .

icsa-res:ICSA-14-178-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-178-01" ;
    dcterms:issued "2014-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICS Focused Malware" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Energy; Oil" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ICS Malware" ;
    icsa:productDistribution "Germany, Spain, France, Italy, United States" ;
    icsa:productsAffected "ICS Focused Malware Havex | Industrial Control System (ICS) focused malware campaign that uses multiple vectors for infection. These include phishing emails; Trojan.Karagany and the Lightsout exploit kit. Trojan.Karagany targets energy and oil sectors. OPC PAYLOAD Havex is a Remote Access Trojan (RAT) that communicates with a Command and Control (C&C) server. Affected Products: classic DCOM-based (Distributed Component Object Model) version of the Open Platform Communications (OPC) standard. The known components of the identified Havex payload do not appear to target devices using the newer OPC Unified Architecture (UA) standard. The original version of the OPC specification; trojanized update installers on at least three ICSs vendor web sites; was implemented using Microsoft's COM/DCOM (Distributed Component Object Model) technology. In 2006; redirections to compromised web sites and most recently; the OPC Foundation released a new standard; which does not use COM/DCOM. The known components of the identified HAVEX malware payload do not appear to target devices using the newer OPC UA standard.; in what are referred to as watering-hole style attacks. Software installers for these vendors were infected with malware known as the Havex Trojan (Backdoor.Oldrea); referred to as OPC Unified Architecture (UA); referred to as OPC classic" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-178-01" ;
    icsa:vendor "Other" ;
    icsa:year 2014 .

icsa-res:ICSA-14-189-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-189-01" ;
    dcterms:issued "2014-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa Centum Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2014-3888" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-3888 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Centum" ;
    icsa:productDistribution "Japan, South America, Asia, Europe, Africa, Middle East, Central America" ;
    icsa:productsAffected "CENTUM CS 1000 all revisions |CENTUM CS 3000 R3.09.50 or earlier | CENTUM CS 3000 Entry Class R3.09.50 or earlier | CENTUM VP R5.03.20 or earlier | CENTUM VP Entry Class R5.03.20 or earlier | Exaopc R3.72.00 or earlier | B/M9000CS R5.05.01 or earlier and B/M9000 VP R7.03.01 or earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-189-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2014 .

icsa-res:ICSA-14-189-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-189-02" ;
    dcterms:issued "2014-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Innominate mGuard Unauthorized Leakage of System Data" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-2356" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2014-2356 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mGuard" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Innominate mGuard firmware Versions 4.0.0 up to Version 8.0.2 | Innominate mGuard firmware Versions 7.6.4 patch release and firmware Versions 8.0.3; 8.1.0 | 8.1.1 and higher are not affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-189-02" ;
    icsa:vendor "Innominate" ;
    icsa:year 2014 .

icsa-res:ICSA-14-196-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-196-01" ;
    dcterms:issued "2014-07-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "SubSTATION Server Telegyr 8979 Master Vulnerabilities" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas" ;
    icsa:cveNumber "CVE-2014-2357" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-2357 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SubSTATION Server Telegyr 8979 Master" ;
    icsa:productDistribution "Canada, United States" ;
    icsa:productsAffected "SubSTATION Server 2 Telegyr 8979 Master Protocol - All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-196-01" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2014 .

icsa-res:ICSA-14-198-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-198-01" ;
    dcterms:issued "2014-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cogent DataHub Code Injection Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Financial Services" ;
    icsa:cveNumber "CVE-2014-3789" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2014-3789 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataHub" ;
    icsa:productDistribution "Canada, United Kingdom, United States" ;
    icsa:productsAffected "Cogent DataHub V7.3.4 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-198-01" ;
    icsa:vendor "Cogent Real-Time Systems Inc" ;
    icsa:year 2014 .

icsa-res:ICSA-14-198-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-198-02" ;
    dcterms:issued "2014-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Vulnerabilities" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2014-2365; CVE-2014-2367; CVE-2014-2368; CVE-2014-2366; CVE-2014-2364" ;
    icsa:cweNumber "CWE-316; CWE-623; CWE-284; CWE-121; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2014-2364,
        cve-res:CVE-2014-2365,
        cve-res:CVE-2014-2366,
        cve-res:CVE-2014-2367,
        cve-res:CVE-2014-2368 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-284,
        cwe-res:CWE-316,
        cwe-res:CWE-592,
        cwe-res:CWE-623 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan" ;
    icsa:productsAffected "WebAcess v7.1 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-198-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2014 .

icsa-res:ICSA-14-198-03G a icsa:ICSA ;
    dcterms:identifier "ICSA-14-198-03G" ;
    dcterms:issued "2014-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OpenSSL Vulnerabilities (Update G)" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2010-5298; CVE-2014-0198; CVE-2014-3470; CVE-2014-0224" ;
    icsa:cweNumber "CWE-119; CWE-362; CWE-310; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2010-5298,
        cve-res:CVE-2014-0198,
        cve-res:CVE-2014-0224,
        cve-res:CVE-2014-3470 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-310,
        cwe-res:CWE-362,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenSSL" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "APE (only affected if SSL/TLS component is used): APE stand-alone: All versions prior to V2.0.2 | ELAN on APE: All versions prior to V8.4.0 | CP1543-1: prior to Version 1.1.25 | ROX 1: all versions prior to V1.16.1 (only affected if Crossbow is installed) | ROX 2: all versions prior to V2.6.0 (only affected if ELAN or Crossbow is installed) | Crossbow: All versions prior to V4.2.3ELAN: All versions prior to V8.4.0S7-1500: versions prior to Version 1.6 | WinCC OA (PVSS): Version 3.12-P001-3.12-P008." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-198-03G" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-202-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-202-01A" ;
    dcterms:issued "2014-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "OleumTech WIO Family Vulnerabilities (Update A)" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-2362; CVE-2014-2360; CVE-2014-2361" ;
    icsa:cweNumber "CWE-338; CWE-20; CWE-320" ;
    icsa:hasCVE cve-res:CVE-2014-2360,
        cve-res:CVE-2014-2361,
        cve-res:CVE-2014-2362 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-320,
        cwe-res:CWE-338 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WIO Family" ;
    icsa:productDistribution "Canada, United States" ;
    icsa:productsAffected "OleumTech WIO DH2 Wireless Gateway andAll OleumTech Sensor Wireless I/O Modules versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-202-01A" ;
    icsa:vendor "OleumTech" ;
    icsa:year 2014 .

icsa-res:ICSA-14-203-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-203-01" ;
    dcterms:issued "2014-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron NS Series HMI Vulnerabilities" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-2370; CVE-2014-2369" ;
    icsa:cweNumber "CWE-79; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2014-2369,
        cve-res:CVE-2014-2370 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NS Series HMI" ;
    icsa:productDistribution "Japan" ;
    icsa:productsAffected "NS15 Version 8.1xx - 8.68x | NS12 Version 8.1xx - 8.68x | NS10 Version 8.1xx - 8.68x | NS8 Version 8.1xx - 8.68x and NS5 Version 8.1xx - 8.68x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-203-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2014 .

icsa-res:ICSA-14-205-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-205-01" ;
    dcterms:issued "2014-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Morpho Itemiser 3 Hard-Coded Credential" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Defense Industrial Base; Emergency Services" ;
    icsa:cveNumber "CVE-2014-2363" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2014-2363 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Itemiser 3" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Netherlands, United States" ;
    icsa:productsAffected "Itemiser 3 v 8.17." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-205-01" ;
    icsa:vendor "Morpho" ;
    icsa:year 2014 .

icsa-res:ICSA-14-205-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-205-02A" ;
    dcterms:issued "2014-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC Vulnerabilities (Update A)" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-4686; CVE-2014-4683; CVE-2014-4682; CVE-2014-4684; CVE-2014-4685" ;
    icsa:cweNumber "CWE-321; CWE-264; CWE-269; CWE-384; CWE-425" ;
    icsa:hasCVE cve-res:CVE-2014-4682,
        cve-res:CVE-2014-4683,
        cve-res:CVE-2014-4684,
        cve-res:CVE-2014-4685,
        cve-res:CVE-2014-4686 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-269,
        cwe-res:CWE-321,
        cwe-res:CWE-384,
        cwe-res:CWE-425 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "SIMATIC WinCC: all versions prior to Version 7.3 and SIMATIC PCS7 (as WinCC is incorporated): all versions prior to Version 8.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-205-02A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-224-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-224-01" ;
    dcterms:issued "2014-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava Integraxor SCADA Server Vulnerabilities" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-0786; CVE-2014-2375; CVE-2014-2377; CVE-2014-2376" ;
    icsa:cweNumber "CWE-89; CWE-73; CWE-526; CWE-532; CWE-269" ;
    icsa:hasCVE cve-res:CVE-2014-0786,
        cve-res:CVE-2014-2375,
        cve-res:CVE-2014-2376,
        cve-res:CVE-2014-2377 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-526,
        cwe-res:CWE-532,
        cwe-res:CWE-73,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Integraxor SCADA Server" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "IntegraXor SCADA Server v4.1.4360 (latest stable release) and earlier versions and IntegraXor SCADA Server v4.1.4392 (latest beta release) and earlier versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-224-01" ;
    icsa:vendor "Ecava" ;
    icsa:year 2014 .

icsa-res:ICSA-14-226-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-226-01" ;
    dcterms:issued "2014-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 CPU Denial of Service" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2014-5074" ;
    icsa:cweNumber "CWE-189" ;
    icsa:hasCVE cve-res:CVE-2014-5074 ;
    icsa:hasCWE cwe-res:CWE-189 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 CPU" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "Siemens SIMATIC S7-1500 CPU versions affected: SIMATIC S7-1500 CPU all versions before V1.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-226-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-238-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-238-01" ;
    dcterms:issued "2014-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "CG Automation Improper Input Validation" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-0761; CVE-2014-0762" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-0761,
        cve-res:CVE-2014-0762 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Improper Input Validation" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, United States, South America, Asia, Europe" ;
    icsa:productsAffected "CG Automation products affected: ePAQ-9410 Substation Gateway - all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-238-01" ;
    icsa:vendor "CG Automation" ;
    icsa:year 2014 .

icsa-res:ICSA-14-238-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-238-02" ;
    dcterms:issued "2014-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware Vulnerabilities" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5398; CVE-2014-5397; CVE-2014-5399; CVE-2014-2380; CVE-2014-2381" ;
    icsa:cweNumber "CWE-79; CWE-20; CWE-89; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2014-2380,
        cve-res:CVE-2014-2381,
        cve-res:CVE-2014-5397,
        cve-res:CVE-2014-5398,
        cve-res:CVE-2014-5399 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-326,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware" ;
    icsa:productDistribution "France, United States, Asia, Europe" ;
    icsa:productsAffected "Wonderware Information Server 4.0 SP1 Portal | Wonderware Information Server 4.5 Portal | Wonderware Information Server 5.0 Portal and Wonderware Information Server 5.5 Portal." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-238-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-247-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-247-01A" ;
    dcterms:issued "2014-09-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensys Networks Traffic Sensor Vulnerabilities (Update A)" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2014-2378; CVE-2014-2379" ;
    icsa:cweNumber "CWE-311; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2014-2378,
        cve-res:CVE-2014-2379 ;
    icsa:hasCWE cwe-res:CWE-311,
        cwe-res:CWE-494 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Traffic Sensor" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Sensys Networks traffic sensors: VSN240-F and VSN240-T operating with the following software versions are affected: Versions prior to VDS 2.10.1 | Versions prior to VDS 1.8.8 | Versions prior to TrafficDOT 2.10.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-247-01A" ;
    icsa:vendor "Sensys Networks" ;
    icsa:year 2014 .

icsa-res:ICSA-14-254-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-254-01" ;
    dcterms:issued "2014-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric VAMPSET Buffer Overflow" ;
    icsa:CVSSScore "4.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-5407" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-5407 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VAMPSET" ;
    icsa:productDistribution "France" ;
    icsa:productsAffected "VAMPSET v2.2.136 and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-254-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-254-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-254-02" ;
    dcterms:issued "2014-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Micrologix 1400 DNP3 DOS Vulnerability" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5410" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-5410 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Micrologix 1400 DNP3" ;
    icsa:productDistribution "China, Czech Republic, Germany, Denmark, France, Hungary, Italy, Japan, South Korea, Poland, United States, South America, Europe" ;
    icsa:productsAffected "Allen-Bradley MicroLogix 1400 controller platforms are affected: 1766-Lxxxxx Series A FRN 7 and earlier and1766-Lxxxxx Series B FRN 15.000 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-254-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2014 .

icsa-res:ICSA-14-259-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-259-01A" ;
    dcterms:issued "2014-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SCADA Expert ClearSCADA Vulnerabilities (Update A)" ;
    icsa:CVSSScore "5.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5413; CVE-2014-5411; CVE-2014-5412" ;
    icsa:cweNumber "CWE-79; CWE-310; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2014-5411,
        cve-res:CVE-2014-5412,
        cve-res:CVE-2014-5413 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-310,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA Expert ClearSCADA" ;
    icsa:productDistribution "France, United States, Asia, Europe" ;
    icsa:productsAffected "ClearSCADA 2010 R3 (build 72.4560) | ClearSCADA 2010 R3.1 (build 72.4644) | SCADA Expert ClearSCADA 2013 R1 (build 73.4729) | SCADA Expert ClearSCADA 2013 R1.1 (build 73.4832) | SCADA Expert ClearSCADA 2013 R1.1a (build 73.4903) | SCADA Expert ClearSCADA 2013 R1.2 (build 73.4955) | SCADA Expert ClearSCADA 2013 R2 (build 74.5094) | SCADA Expert ClearSCADA 2013 R2.1 (build 74.5192) | SCADA Expert ClearSCADA 2014 R1 (build 75.5210)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-259-01A" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-260-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-260-01A" ;
    dcterms:issued "2014-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CENTUM and Exaopc Vulnerability (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2014-5208" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2014-5208 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CENTUM and Exaopc" ;
    icsa:productDistribution "Japan, South America, Asia, East Asia, Europe, Africa, Middle East, Central America" ;
    icsa:productsAffected "Yokogawa CENTUM 3000 versions affected: CENTUM series with the Batch Management Packages installed | CENTUM CS 3000 (R3.09.50 or earlier) | CENTUM CS 3000 Entry Class (R3.09.50 or earlier) | CENTUM VP (R4.03.00 or earlier - R5.04.00 or earlier) | and CENTUM VP Entry Class (R4.03.00 or earlier; R5.04.00 or earlier) | The following Yokogawa Exaopc version is affected:Exaopc (R3.72.10 or earlier)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-260-01A" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2014 .

icsa-res:ICSA-14-261-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-261-01" ;
    dcterms:issued "2014-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Vulnerabilities" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2014-0987; CVE-2014-0988; CVE-2014-0989; CVE-2014-0992; CVE-2014-0986; CVE-2014-0991; CVE-2014-0990; CVE-2014-0985" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-0985,
        cve-res:CVE-2014-0986,
        cve-res:CVE-2014-0987,
        cve-res:CVE-2014-0988,
        cve-res:CVE-2014-0989,
        cve-res:CVE-2014-0990,
        cve-res:CVE-2014-0991,
        cve-res:CVE-2014-0992 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan" ;
    icsa:productsAffected "WebAccess Version 7.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-261-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2014 .

icsa-res:ICSA-14-269-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-269-01" ;
    dcterms:issued "2014-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Bash Command Injection Vulnerability (Supplement)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-6271; CVE-2014-7169" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2014-6271,
        cve-res:CVE-2014-7169 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Bash Command" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB Tropos 3000; 4000; & 7000 series routers | Indirectly affected: Ventyx NM EMS/SCADA on RHEL | Ventyx.; 6000" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-269-01" ;
    icsa:vendor "Other" ;
    icsa:year 2014 .

icsa-res:ICSA-14-269-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-14-269-01A" ;
    dcterms:issued "2014-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Bash Command Injection Vulnerability (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-6271; CVE-2014-7169" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2014-6271,
        cve-res:CVE-2014-7169 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Bash Command" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GNU bash versions 1.14 to 4.3 | Linux | BSD | UNIX distributions including but not limited to: CentOS | Debian | Mac OS X | Red Hat Enterprise | Ubuntu." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-269-01A" ;
    icsa:vendor "Other" ;
    icsa:year 2014 .

icsa-res:ICSA-14-269-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-269-02" ;
    dcterms:issued "2014-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fox DataDiode Proxy Server CSRF Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Communications; Defense Industrial Base; Government Facilities" ;
    icsa:cveNumber "CVE-2014-2358" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2014-2358 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataDiode Proxy Server" ;
    icsa:productDistribution "Netherlands" ;
    icsa:productsAffected "Fox DataDiode Appliance versions affected: All Fox DataDiode Appliance versions up to and including 1.7.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-269-02" ;
    icsa:vendor "Fox-IT" ;
    icsa:year 2014 .

icsa-res:ICSA-14-273-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-273-01" ;
    dcterms:issued "2014-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "SchneiderWEB Server Directory Traversal Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-0754" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2014-0754 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Server Directory" ;
    icsa:productDistribution "France" ;
    icsa:productsAffected "There are 22 Affected Products containing 66 affected part numbers. Please download Schneider-Electric Security Notification SEVD-14-260-01 for the affected product details." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-273-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-275-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-275-01" ;
    dcterms:issued "2014-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Meinberg Radio Clocks LANTIME M-Series XSS" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Energy; Financial Services; Transportation Systems" ;
    icsa:cveNumber "CVE-2014-5417" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2014-5417 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Radio Clocks LANTIME M-Series" ;
    icsa:productDistribution "Germany, United States, Europe" ;
    icsa:productsAffected "Meinberg Network Time Protocol (NTP) Server firmware versions affected: LANTIME M-Series models: V6.15.019 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-275-01" ;
    icsa:vendor "Meinberg" ;
    icsa:year 2014 .

icsa-res:ICSA-14-275-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-275-02" ;
    dcterms:issued "2014-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Accuenergy Acuvim II Authentication Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-2374; CVE-2014-2373" ;
    icsa:cweNumber "CWE-592; CWE-602" ;
    icsa:hasCVE cve-res:CVE-2014-2373,
        cve-res:CVE-2014-2374 ;
    icsa:hasCWE cwe-res:CWE-592,
        cwe-res:CWE-602 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Acuvim II Authentication" ;
    icsa:productDistribution "Canada, China, United States, North America" ;
    icsa:productsAffected "AXN-NET Ethernet module v.3.04." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-275-02" ;
    icsa:vendor "Accuenergy" ;
    icsa:year 2014 .

icsa-res:ICSA-14-287-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-287-01" ;
    dcterms:issued "2014-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy HMI/SCADA DNP3 Driver Input Validation" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "New Zealand" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2013-2811" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-2811 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HMI/SCADA DNP3 Driver" ;
    icsa:productDistribution "New Zealand" ;
    icsa:productsAffected "GE Intelligent Platform software affected: Specific products addressed include:iFix (all versions): Catapult v7.20.62 | CIMPLICITY 8.2 and earlier: Catapult v8.2.62 | CIMPLICITY 9.0: Catapult v9.0.62 | Proficy HMI/SCADA DNP3 I/O Driver (\"DNP): Version v7.20k (Catapult v7.20.60) and prior |Proficy HMI/SCADA - iFIX or CIMPLICITY servers with the vulnerable I/O Driver installed (this includes iFIX or CIMPLICITY installations that are part of Proficy Process Systems)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-287-01" ;
    icsa:vendor "Catapult Software, GE" ;
    icsa:year 2014 .

icsa-res:ICSA-14-288-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-288-01" ;
    dcterms:issued "2014-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "CareFusion Pyxis SupplyStation System Vulnerabilities" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-5422; CVE-2014-5423; CVE-2014-5421; CVE-2014-5420" ;
    icsa:cweNumber "CWE-798; CWE-377; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2014-5420,
        cve-res:CVE-2014-5421,
        cve-res:CVE-2014-5422,
        cve-res:CVE-2014-5423 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-377,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pyxis SupplyStation System" ;
    icsa:productDistribution "Australia, Canada, China, Germany, France, United Kingdom, India, Italy, Netherlands, United States" ;
    icsa:productsAffected "Pyxis SupplyStation system 8.1 (hardware test tool software Versions 1.0.15 and prior)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-288-01" ;
    icsa:vendor "CareFusion, Becton, Dickinson and Company (BD)" ;
    icsa:year 2014 .

icsa-res:ICSA-14-289-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-289-01" ;
    dcterms:issued "2014-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "IOServer Resource Exhaustion Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5425" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2014-5425 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IOServer" ;
    icsa:productDistribution "Australia" ;
    icsa:productsAffected "IOServer Version 1.0.20 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-289-01" ;
    icsa:vendor "IOServer" ;
    icsa:year 2014 .

icsa-res:ICSA-14-289-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-289-02" ;
    dcterms:issued "2014-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy HMI/SCADA CIMPLICITY CimView Memory Access Violation" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-2355" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-2355 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy HMI/SCADA CIMPLICITY CimView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Version 8.2 and prior.; Proficy HMI/SCADA-CIMPLICITY" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-289-02" ;
    icsa:vendor "GE" ;
    icsa:year 2014 .

icsa-res:ICSA-14-294-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-294-01" ;
    dcterms:issued "2014-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Connected Components Workbench ActiveX Component Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-5424" ;
    icsa:cweNumber "CWE-618" ;
    icsa:hasCVE cve-res:CVE-2014-5424 ;
    icsa:hasCWE cwe-res:CWE-618 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Connected Components Workbench ActiveX Component" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation CCW Version 6.01.00 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-294-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2014 .

icsa-res:ICSA-14-303-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-303-01" ;
    dcterms:issued "2014-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nordex NC2 XSS Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-5408" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2014-5408 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NC2" ;
    icsa:productDistribution "Austria, China, Germany, Spain, France, United Kingdom, Italy, Netherlands, Sweden, United States, Europe" ;
    icsa:productsAffected "Nordex Control 2 (NC2) SCADA V15 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-303-01" ;
    icsa:vendor "Nordex" ;
    icsa:year 2014 .

icsa-res:ICSA-14-303-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-303-02" ;
    dcterms:issued "2014-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Elipse SCADA DNP3 Denial of Service" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5429" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2014-5429 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA DNP3" ;
    icsa:productDistribution "Argentina, Brazil, Chile, Germany, India, Russia, Sweden, United States" ;
    icsa:productsAffected "Elipse SCADA 2.29 build 141 and prior w/ DNP3 driver | Elipse E3 versions V1.0 to V4.6 | Elipse Power systems Versions V1.0 to V4.6 | DNP 3.0 Master v3.02 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-303-02" ;
    icsa:vendor "Elipse" ;
    icsa:year 2014 .

icsa-res:ICSA-14-308-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-308-01" ;
    dcterms:issued "2014-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB RobotStudio and Test Signal Viewer DLL Hijack Vulnerability" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-5430" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2014-5430 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RobotStudio and Test Signal Viewer" ;
    icsa:productDistribution "Switzerland" ;
    icsa:productsAffected "RobotStudio Version 5.60 up to and including 5.61.01.01; and Test Signal Viewer Version 1.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-308-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2014 .

icsa-res:ICSA-14-324-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-324-01" ;
    dcterms:issued "2014-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Stack-based Buffer Overflow" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2014-8388" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-8388 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan" ;
    icsa:productsAffected "Advantech WebAccess 7.2 and previous." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-324-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2014 .

icsa-res:ICSA-14-329-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-329-01" ;
    dcterms:issued "2014-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "MatrikonOPC for DNP Unhandled C++ Exception" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2014-5426" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2014-5426 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC DNP" ;
    icsa:productDistribution "Australia, Brazil, Canada, Costa Rica, Germany, Spain, United Kingdom, India, Norway, Portugal, Russia, Singapore, United States" ;
    icsa:productsAffected "MatrikonOPC Server for DNP3 Version 1.2.3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-329-01" ;
    icsa:vendor "MatrikonOPC" ;
    icsa:year 2014 .

icsa-res:ICSA-14-329-02D a icsa:ICSA ;
    dcterms:identifier "ICSA-14-329-02D" ;
    dcterms:issued "2014-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC, PCS7, and TIA Portal Vulnerabilities (Update D)" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-8551; CVE-2014-8552" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2014-8551,
        cve-res:CVE-2014-8552 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC, PCS7, and TIA Portal" ;
    icsa:productDistribution "Germany, United States, Asia, Europe" ;
    icsa:productsAffected "SIMATIC WinCCV7.0 SP3 and earlier: All versions | V7.2: All versions prior to V7.2 Update 9 | V7.3: All versions prior to V7.3 Update 2 | SIMATIC PCS 7V7.1 SP4 and earlier: All versions | V8.0: All versions prior to V8.0 SP2 with WinCC V7.2 Update 9 | andV8.1: All versions with WinCC V7.3 prior to Update 2.TIA Portal V13 (including WinCC Professional Runtime): All versions prior to V13 Update 6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-329-02D" ;
    icsa:vendor "Siemens" ;
    icsa:year 2014 .

icsa-res:ICSA-14-343-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-343-01" ;
    dcterms:issued "2014-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa FAST/TOOLS XML External Entity" ;
    icsa:CVSSScore "2.4"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Energy; oil and gas" ;
    icsa:cveNumber "CVE-2014-7251" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2014-7251 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FAST/TOOLS XML External Entity" ;
    icsa:productDistribution "Japan, Asia, East Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "FAST/TOOLS Versions R9.01 though R9.05 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-343-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2014 .

icsa-res:ICSA-14-343-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-343-02" ;
    dcterms:issued "2014-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trihedral Engineering Limited VTScada Integer Overflow Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9192" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2014-9192 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VTScada" ;
    icsa:productDistribution "Canada, United Kingdom, United States, North America, Europe" ;
    icsa:productsAffected "VTS Version 6.5 through 9.1.19 | VTS Version 10 through 10.2.21 | VTScada Version 11.0 through 11.1.07." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-343-02" ;
    icsa:vendor "Trihedral Engineering Limited" ;
    icsa:year 2014 .

icsa-res:ICSA-14-345-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-345-01" ;
    dcterms:issued "2014-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Arbiter Systems 1094B GPS Clock Spoofing Vulnerability" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-9194" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2014-9194 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1094B GPS Clock" ;
    icsa:productDistribution "United States, South America, Europe" ;
    icsa:productsAffected "Model 1094B GPS Substation Clock." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-345-01" ;
    icsa:vendor "Arbiter Systems" ;
    icsa:year 2014 .

icsa-res:ICSA-14-350-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-350-01" ;
    dcterms:issued "2014-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric ProClima Command Injection Vulnerabilities" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2014-9188; CVE-2014-8511; CVE-2014-8514; CVE-2014-8512; CVE-2014-8513" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2014-8511,
        cve-res:CVE-2014-8512,
        cve-res:CVE-2014-8513,
        cve-res:CVE-2014-8514,
        cve-res:CVE-2014-9188 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ProClima" ;
    icsa:productDistribution "France, United States, Asia, Europe" ;
    icsa:productsAffected "ProClima Version 6.0.1 and previous." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-350-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2014 .

icsa-res:ICSA-14-350-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-350-02" ;
    dcterms:issued "2014-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys Vulnerabilities" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2014-5427; CVE-2014-5428" ;
    icsa:cweNumber "CWE-434; CWE-257" ;
    icsa:hasCVE cve-res:CVE-2014-5427,
        cve-res:CVE-2014-5428 ;
    icsa:hasCWE cwe-res:CWE-257,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, United States" ;
    icsa:productsAffected "Application and Data Server (ADS) | Extended Application and Data Server (ADX) | LonWorks Control Server 85 (LCS8520) | Network Automation Engine (NAE) 55xx-x models |Network Integration Engine (NIE) 5xxx-x models and NxE8500." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-350-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2014 .

icsa-res:ICSA-14-352-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-352-01" ;
    dcterms:issued "2014-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Experion PKS Vulnerabilities" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-9186; CVE-2014-9187; CVE-2014-5435; CVE-2014-5436; CVE-2014-9189" ;
    icsa:cweNumber "CWE-22; CWE-122; CWE-121; CWE-98; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2014-5435,
        cve-res:CVE-2014-5436,
        cve-res:CVE-2014-9186,
        cve-res:CVE-2014-9187,
        cve-res:CVE-2014-9189 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-123,
        cwe-res:CWE-22,
        cwe-res:CWE-98 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Experion PKS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Experion PKS versions affected: All supported Experion PKS R40x versions prior to Experion PKS R400.6 | All supported Experion PKS R41x versions prior to Experion PKS R410.6 | All supported Experion PKS R43x versions prior to Experion PKS R430.2 | Note - Experion PKS R311.2 is Impacted by these vulnerabilities but is no longer supported by Honeywell. Customers running Experion PKS R311.2 should upgrade to a supported version of Experion PKS." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-352-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2014 .

icsa-res:ICSA-14-352-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-14-352-02" ;
    dcterms:issued "2014-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Innominate mGuard Privilege Escalation Vulnerability" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-9193" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2014-9193 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mGuard" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Innominate mGuard firmware Version 8.1.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-352-02" ;
    icsa:vendor "Innominate" ;
    icsa:year 2014 .

icsa-res:ICSA-14-353-01-SupplementA a icsa:ICSA ;
    dcterms:identifier "ICSA-14-353-01-SupplementA" ;
    dcterms:issued "2014-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2014-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Network Time Protocol Vulnerabilities (Supplement Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors; Energy" ;
    icsa:cveNumber "CVE-2014-9294; CVE-2014-9295; CVE-2014-9293" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2014-9293,
        cve-res:CVE-2014-9294,
        cve-res:CVE-2014-9295 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Network Time Protocol (NTP)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "LANTIME M900; 2015); 2015) | Wind River System products:Please see Wind River Support Network (http://www.windriver.com/feeds/vxworks_networking_security_notice.xml) | WR Linux: VxWorks 7 VxWorks 6.9WR Linux 4.3.0.XWR Linux 5.0.1.xWR Linux 6.0.0.xWR Linux 7.0.0.x; located at www.siemens.com/cert/advisories | SINUMERIK Controllers-based Devices (Published March 05; LANTIME M200; Arbiter Systems products: Clock products using the network card | Innomoninate products: Innominate Security Technologies AG | mGuard Firmware Version 7.0 | mGuard Firmware Version 8.0 | Meinberg products: Please see Meinberg's public notification and mitigation strategies at: Meinberg Security Advisory: [MBGSA-1405] Multiple NTP Vuln (2014-12-22) - https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-1405-multiple-ntp-vulnerabilities.htm | LANTIME M3000; LANTIME M100; LANTIME M600; SYNCFIRE 1000 | Siemens products: Please see Siemens's public notification and mitigation strategies at SSA-671683 NTP Vulnerabilities in Ruggedcom ROX-based Devices (Update March 05; LANTIME M400; LANTIME M300" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-353-01-SupplementA" ;
    icsa:vendor "Other" ;
    icsa:year 2014 .

icsa-res:ICSA-14-353-01C a icsa:ICSA ;
    dcterms:identifier "ICSA-14-353-01C" ;
    dcterms:issued "2014-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Network Time Protocol Vulnerabilities (Update C)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-9293; CVE-2014-9294; CVE-2014-9295; CVE-2014-9297; CVE-2014-9298; CVE-2014-9296" ;
    icsa:cweNumber "CWE-290; CWE-331; CWE-389; CWE-121; CWE-754; CWE-338" ;
    icsa:hasCVE cve-res:CVE-2014-9293,
        cve-res:CVE-2014-9294,
        cve-res:CVE-2014-9295,
        cve-res:CVE-2014-9296,
        cve-res:CVE-2014-9297,
        cve-res:CVE-2014-9298 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-290,
        cwe-res:CWE-331,
        cwe-res:CWE-338,
        cwe-res:CWE-389,
        cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Network Time Protocol (NTP)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Products using NTP service prior to ntp-4.2.8p1 are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-14-353-01C" ;
    icsa:vendor "Other" ;
    icsa:year 2014 .

icsa-res:ICSA-15-006-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-006-01" ;
    dcterms:issued "2015-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton's Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet Vulnerability" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-9196" ;
    icsa:cweNumber "CWE-342" ;
    icsa:hasCVE cve-res:CVE-2014-9196 ;
    icsa:hasCWE cwe-res:CWE-342 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Form 6 Control and Idea/IdeaPlus Relays" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Eaton's Cooper Power Systems versions affected: All versions of Eaton's Cooper Power Series Form 6 control | Idea/IdeaPLUS relays with Ethernet with Pro View 4.0 through Pro View 5.0 software." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-006-01" ;
    icsa:vendor "Eaton'S Cooper Power Systems" ;
    icsa:year 2015 .

icsa-res:ICSA-15-008-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-008-01A" ;
    dcterms:issued "2015-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson HART DTM Vulnerability (Update A)" ;
    icsa:CVSSScore "1.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-9191" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-9191 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HART Device DTM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products using the vulnerable HART DTM library are affected: Fisher Controls DVC6000 Digital Valve Controller Rev. 2.01 | Fisher Controls International DVC2000 Digital Valve Controller Rev. 1.01 | Micro Motion 1500 Rev. 5 and 6 | Micro Motion 1700 Analog Rev. 5 and 6 | Micro Motion 1700 IS Rev. 6 | Micro Motion 1700 Rev. 5 | Micro Motion 1700IS Rev. 5 | Micro Motion 2000 Config I/O Rev. 5 | Micro Motion 2200S Rev. 1 | Micro Motion 2400S Analog Rev. 2 | 3 | and 4 | Micro Motion 2500/2700 Config I/O Rev. 5 and 6 | Micro Motion 2700 Analog Rev. 5 and 6 | Micro Motion 2700 IS Rev. 5 and 6 | Micro Motion RFT9739 Rev. 4 | Micro Motion Series 3000 Rev. 7 | Rosemount 1151 Pressure Transmitter Rev. 5 and 6 | Rosemount 2051 Pressure Transmitter Rev. 3 | 9 | and 10 | Rosemount 2088 Pressure Transmitter Rev. 3 | 9 | and 10 | Rosemount 2090 Pressure Transmitter Rev. 3 | Rosemount 248 Temperature Transmitter Rev. 2 | Rosemount 3051 Pressure Transmitter Rev. 3 | 7 | 9 | and 10 | Rosemount 3051S Advanced Diagnostics Rev. 2 and 3 | Rosemount 3051S Electronic Remote Sensors Rev. 1 | Rosemount 3051S Pressure Transmitter Rev. 7 | Rosemount 3051SMV Direct Process Variable Rev. 1 | Rosemount 3051SMV MultiVariable Mass Energy Flow Rev. 1 | Rosemount 3095M MultiVariableâžÂ¢ Mass Flow Rev. 2 | Rosemount 3100 Ultrasonic Level Transmitter Rev. 5 | Rosemount 3144P Temperature Transmitter Rev. 3 | 4 | 5 | and 6Rosemount 3300 Radar Level and Interface Transmitter Rev. 3 | Rosemount 333 Triloop Rev. 1 | Rosemount 4500 Pressure Transmitter Rev. 7 | Rosemount 4600 Pressure Transmitter Rev. 1 | Rosemount 5300 Radar Level and Interface Transmitter Rev. 1 | 2 | and 3 | Rosemount 5400 Radar Level Transmitter Rev. 1 and 2 | Rosemount 644 Temperature Transmitter Rev. 6 | 7 | 8 | and 9 | Rosemount 8712D Magnetic Flowmeter Rev. 1 | Rosemount 8712E Magnetic Flowmeter Rev. 3 | Rosemount 8712H Magnetic Flowmeter Rev. 1 | Rosemount 8732C Magnetic Flowmeter Rev. 7 | Rosemount 8732E Magnetic Flowmeter Rev. 2 | Rosemount 8800C Vortex Flowmeter Rev. 3 | Rosemount 8800D Vortex Flowmeter Rev. 1 and 2 | Rosemount Analytical 1056 Rev. 1 and 2 | Rosemount Analytical 5081A Rev. 2 | Rosemount Analytical 5081CT Rev. 1 | Rosemount Analytical 5081p Rev. 2 | Rosemount Analytical 54eA Rev. 2 | Rosemount Analytical 54eC Rev. 1 | Rosemount Analytical 54epH Rev. 2 | Rosemount Analytical OCT4000 Rev. 3 | Rosemount Analytical OCX8800 Rev. 3 | Rosemount Analytical XmtA Rev. 1 | Rosemount Analytical XmtCT Rev. 1 | Rosemount Analytical XmtpH Rev. 1 | Rosemount Metran 150 Pressure Transmitter Rev. 9 and 10 | andRosemount Metran 75 Pressure Transmitter Rev. 9 and 10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-008-01A" ;
    icsa:vendor "Emerson" ;
    icsa:year 2015 .

icsa-res:ICSA-15-008-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-008-02" ;
    dcterms:issued "2015-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9190" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-9190 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware InTouch Access Anywhere Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Wonderware InTouch Access Anywhere Server versions affected: InTouch Access Anywhere Server | Version 10.6 | InTouch Access Anywhere Server | Version 11.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-008-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-012-01C a icsa:ICSA ;
    dcterms:identifier "ICSA-15-012-01C" ;
    dcterms:issued "2015-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "CodeWrights GmbH HART Device DTM Vulnerability (Update C)" ;
    icsa:CVSSScore "1.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9191" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-9191 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HART Device DTM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Any DTM written by CodeWrights GmbH DTMStudio prior to Version 1.5.151." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-012-01C" ;
    icsa:vendor "CodeWrights GmbH" ;
    icsa:year 2015 .

icsa-res:ICSA-15-013-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-013-01" ;
    dcterms:issued "2015-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC Sm@rtClient iOS Application Authentication Vulnerabilities" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5233; CVE-2014-5231; CVE-2014-5232" ;
    icsa:cweNumber "CWE-522; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2014-5231,
        cve-res:CVE-2014-5232,
        cve-res:CVE-2014-5233 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC Sm@rtClient iOS Application" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "SIMATIC WinCC Sm@rt Client versions affected: SIMATIC WinCC Sm@rtClient: All versions prior to V1.0.2SIMATIC WinCC Sm@rtClient Lite for iOS: All versions prior to V1.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-013-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-013-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-013-02" ;
    dcterms:issued "2015-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Clorius Controls A/S ISC SCADA Insecure Java Client Web Authentication" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-9199" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2014-9199 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISC SCADA Insecure Java Client Web Authentication" ;
    icsa:productDistribution "China, Denmark, India, Russia, Singapore, United States, Europe" ;
    icsa:productsAffected "Clorius Controls A/S web server versions affected: Clorius Controls A/S Java web client including and prior to Version 01.00.0009b." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-013-02" ;
    icsa:vendor "Clorius Controls A/S" ;
    icsa:year 2015 .

icsa-res:ICSA-15-013-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-013-03" ;
    dcterms:issued "2015-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Phoenix Contact Software ProConOs and MultiProg Authentication Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-9195" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2014-9195 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Software ProConOs and MultiProg" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ProConOs all versions and MultiProg all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-013-03" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2015 .

icsa-res:ICSA-15-013-04A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-013-04A" ;
    dcterms:issued "2015-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Multilink Switch Vulnerabilities (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5419; CVE-2015-3976; CVE-2014-5418" ;
    icsa:cweNumber "CWE-79; CWE-321; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2014-5418,
        cve-res:CVE-2014-5419,
        cve-res:CVE-2015-3976 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-400,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multilink Switch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE Multilink Ethernet switch versions affected: GE Multilink ML800/1200/1600/2400 Version 4.2.1 and prior | GE Multilink ML810/3000/3100 series switch Version 5.2.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-013-04A" ;
    icsa:vendor "GE" ;
    icsa:year 2015 .

icsa-res:ICSA-15-020-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-020-01" ;
    dcterms:issued "2015-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-300/X408 Switch Family DOS Vulnerabilities" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Transportation Systems;; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-8479; CVE-2014-8478" ;
    icsa:cweNumber "CWE-730" ;
    icsa:hasCVE cve-res:CVE-2014-8478,
        cve-res:CVE-2014-8479 ;
    icsa:hasCWE cwe-res:CWE-730 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X-300/X408 Switch Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SCALANCE switches versions are affected: SCALANCE X-300 switch family: All versions prior to V4.0 | SCALANCE X408: All versions prior to V4.0. Alternatively - the affected products may be identified by using their machine-readable product designation (MLFB). A full list of the affected MLFBs can be found in Siemens Security Advisory SSA-321046." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-020-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-020-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-020-02" ;
    dcterms:issued "2015-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric ETG3000 FactoryCast HMI Gateway Vulnerabilities" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9197; CVE-2014-9198" ;
    icsa:cweNumber "CWE-306; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2014-9197,
        cve-res:CVE-2014-9198 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ETG3000 FactoryCast HMI Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ETG3000 FactoryCast HMI Gateway's versions affected: TSXETG3000 all versions |TSXETG3010 all versions |TSXETG3021 all versions | TSXETG3022 all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-020-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-022-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-022-01" ;
    dcterms:issued "2015-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 CPU Web Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2015-1048" ;
    icsa:cweNumber "CWE-601" ;
    icsa:hasCVE cve-res:CVE-2015-1048 ;
    icsa:hasCWE cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 CPU" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "Siemens SIMATIC S7-1200 CPU family versions affected: SIMATIC S7-1200 CPU family: All versions prior to V4.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-022-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-027-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-027-01" ;
    dcterms:issued "2015-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Magnetrol HART DTM Vulnerability" ;
    icsa:CVSSScore "1.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9191" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-9191 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HART DTM Vulnerability" ;
    icsa:productDistribution "Belgium, Brazil, China, United States" ;
    icsa:productsAffected "The following products using the vulnerable HART DMT library extension are affected: Eclipse Model 705 Guided Wave Radar transmitter (firmware Version 3.x) | Echotel Model 355 Ultrasonic transmitter (firmware Version 1.x) | Model R82 Pulse Burst Radar Transmitter (firmware Versions 1.x | 2.x) | Thermatel Model TA2 Thermal Mass Flowmeter (firmware Version 2.x)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-027-01" ;
    icsa:vendor "Magnetrol" ;
    icsa:year 2015 .

icsa-res:ICSA-15-027-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-027-02" ;
    dcterms:issued "2015-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Multiple Products Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2014-9200" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-9200 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Schneider Electric software platforms are installed with an affected Device Type Managers (DTMs) with an affected DLL: Unity Pro | all versions | SoMachine | all versions |SoMove | all versions |SoMove Lite | all versions. Schneider Electric DTM libraries versions affected: Modbus Communication Library | Version 2.2.6 and prior | CANopen Communication Library | Version 1.0.2 and prior | EtherNet/IP Communication Library | Version 1.0.0 and prior | EM X80 Gateway DTM (MB TCP/SL) | Advantys DTMs (OTB | STB) | KINOS DTM | SOLO DTM | Xantrex DTMs." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-027-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-029-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-029-01" ;
    dcterms:issued "2015-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell HART DTM Vulnerability" ;
    icsa:CVSSScore "1.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2014-9191" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-9191 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HART DTM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products using the vulnerable HART DMT library are affected: Honeywell STT25T HART 5 Transmitter Rev. 1 & 2 | Honeywell STT25H HART 5 Transmitter Rev. 1 & 3 | Honeywell STT25S HART 5 Transmitter Rev. 2 | Honeywell ST 3000 HART 5 Transmitter Rev. 1 | Honeywell ST 3000 HART 6 Transmitter Rev. 1 | Honeywell ST 3000 H6 Transmitter with Advanced Diagnostics Rev. 1 | Honeywell ST STT25H HART 5 Transmitter Rev. 1 | Honeywell ST STT25S HART 6 Transmitter Rev. 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-029-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2015 .

icsa-res:ICSA-15-034-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-034-01" ;
    dcterms:issued "2015-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-200IRT Switch Family User Impersonation Vulnerability" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Transportation Systems;; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-1049" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2015-1049 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X-200IRT Switch Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens versions affected: SCALANCE X-200IRT switch family: All versions prior to V5.2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-034-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-034-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-034-02" ;
    dcterms:issued "2015-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Ruggedcom WIN Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Transportation Systems;; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-1449; CVE-2015-1357; CVE-2015-1448" ;
    icsa:cweNumber "CWE-121; CWE-257; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2015-1357,
        cve-res:CVE-2015-1448,
        cve-res:CVE-2015-1449 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-257,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ruggedcom WIN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens Ruggedcom WIN versions affected: WIN51xx: all versions prior to SS4.4.4624.35WIN52xx: all versions prior to SS4.4.4624.35WIN70xx: all versions prior to BS4.4.4621.32WIN72xx: all versions prior to BS4.4.4621.32." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-034-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-036-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-036-01A" ;
    dcterms:issued "2015-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE and MACTek HART Device DTM Vulnerability (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9203" ;
    icsa:cweNumber "CWE-20; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-9203 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HART Device DTM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Products using the vulnerable HART DTM library and are affected: MACTek's Bullet DTM 1.00.0 | GE's Vector DTM 1.00.0 | GE's SVi1000 Positioner DTM 1.00.0 | GE's SVI II AP Positioner DTM 2.00.1 | GE's 12400 Level Transmitter DTM 1.00.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-036-01A" ;
    icsa:vendor "GE, MACTek" ;
    icsa:year 2015 .

icsa-res:ICSA-15-036-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-036-02" ;
    dcterms:issued "2015-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pepperl+Fuchs Hart Device DTM Vulnerability" ;
    icsa:CVSSScore "1.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-9191" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-9191 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hart Device DTM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products were developed with the vulnerable CodeWrights GmbH DTMStudio versions and are affected: DTM collection Level Control DTM 1.0.28 and prior | Barcon PPC-M / LHC-M |LHC-M51 / PPC-M51 |LHCR-51 / LHCS-51 |LUC-M |LUC-M V4.XX |Pulscon LTC | Pulscon LTC V4.XX.DTM Collection CorrTran DTM Version 1.4.128.8 and prior for the following: CorrTran MV CMCM | CorrTran AQUA CMCA." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-036-02" ;
    icsa:vendor "PEPPERL+FUCHS" ;
    icsa:year 2015 .

icsa-res:ICSA-15-041-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-041-01" ;
    dcterms:issued "2015-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech EKI-1200 Buffer Overflow" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2014-8385" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2014-8385 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EKI-1200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Advantech versions affected: EKI-1200 product line." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-041-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2015 .

icsa-res:ICSA-15-041-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-041-02" ;
    dcterms:issued "2015-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Hydran M2 Predictable TCP Initial Sequence Vulnerability" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-5409" ;
    icsa:cweNumber "CWE-343" ;
    icsa:hasCVE cve-res:CVE-2014-5409 ;
    icsa:hasCWE cwe-res:CWE-343 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hydran M2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE Digital Energy versions affected: Hydran M2 - containing the 17046 Ethernet option and released prior to October 2014." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-041-02" ;
    icsa:vendor "GE" ;
    icsa:year 2015 .

icsa-res:ICSA-15-048-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-048-01" ;
    dcterms:issued "2015-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities" ;
    icsa:CVSSScore "2.4"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-1355; CVE-2015-1356" ;
    icsa:cweNumber "CWE-916; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2015-1355,
        cve-res:CVE-2015-1356 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC TIA Portal" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Siemens product versions affected: SIMATIC STEP 7 TIA Portal: All versions prior to V13 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-048-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-048-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-048-02" ;
    dcterms:issued "2015-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC TIA Portal Vulnerabilities" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-4686; CVE-2015-1358" ;
    icsa:cweNumber "CWE-321; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2014-4686,
        cve-res:CVE-2015-1358 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC TIA Portal" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Siemens product versions affected: SIMATIC WinCC TIA Portal: All versions prior to V13 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-048-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-048-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-048-03" ;
    dcterms:issued "2015-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa HART Device DTM Vulnerability" ;
    icsa:CVSSScore "1.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Nuclear Reactors Materials and Waste; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9191" ;
    icsa:cweNumber "CWE-20; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2014-9191 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HART Device DTM" ;
    icsa:productDistribution "North America, Asia, East Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "The Yokogawa HART Device DTM used by the following devices are affected: ADMAG AE Series Magnetic Flowmeters (AE/AE14) Rev.1 & 2 | ADMAG SE Series Magnetic Flowmeters (SE/SE14) Rev.1 & 2 | AM11 Magnetic Flowmeter Remote Converter Rev.1 | AXFA11 Magnetic Flowmeter Remote Converter Rev.1 | ADMAG AXF Series Magnetic Flowmeters (AXF/AXFA14) Rev.1 | ADMAG AXR Two-wire Magnetic Flowmeters Rev.1 & 2 | digitalYEWFLO Vortex Flowmeter Rev.1 | 2 | 3 | & 4 | Dpharp EJA /EJA-A Series Pressure Transmitters/Differential PressureTransmitters Rev.1 | 2 | & 3 | Dpharp EJX Series Pressure Transmitters/Differential PressureTransmitters Rev.1 | 2 | & 3 | EJX Multivariable Transmitters (EJX910A/EJX930A) Rev.1 & 2 | Rotameter Rev.1 | Coriolis Mass Flowmeters- ROTAMASS 3-Series (RCCT3x/RCCF31) Rev.1 | 2 | & 3 | Coriolis Mass Flowmeters (CF11) Rev.1 | Differential Pressure Transmitters Rev.1 | YEWFLO Vortex Flowmeter Rev.1 & 2 | YT200 Temperature Transmitters Rev.1 | YTA110/YTA310/YTA320 Temperature Transmitters Rev.1 | 2 | & 3 | YTA70 Temperature Transmitters Rev.1 | AV550G Rev.1 | DO202 Rev.1 | ISC202 Rev.1 | ISC450 Rev.1 & 2 | PH150 Rev.1 & 2 | PH202 Rev.1 | PH450 Rev.1 & 2 | SC150 Rev.1 & 2 | SC202 Rev.1 | SC450Rev.1 & 2 | ZR202 Rev.1 | andZR402 Rev.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-048-03" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2015 .

icsa-res:ICSA-15-050-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-050-01A" ;
    dcterms:issued "2015-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities (Update A)" ;
    icsa:CVSSScore "3.9"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-1601; CVE-2015-1602" ;
    icsa:cweNumber "CWE-916; CWE-300" ;
    icsa:hasCVE cve-res:CVE-2015-1601,
        cve-res:CVE-2015-1602 ;
    icsa:hasCWE cwe-res:CWE-300,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC TIA Portal" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Siemens products affect versions of SIMATIC STEP 7 (TIA Portal): SIMATIC STEP 7 (TIA Portal) V13: All versions prior to V13 SP1 Upd1 | SIMATIC STEP 7 (TIA Portal) V12: All versions prior to V12 SP1 Upd5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-050-01A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-055-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-055-01" ;
    dcterms:issued "2015-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Software Toolbox Top Server Resource Exhaustion Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Information Technology; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5425" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2014-5425 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Top Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "software Toolbox Top Server versions affected: software Toolbox Top Server Versions 5.16 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-055-01" ;
    icsa:vendor "Software Toolbox" ;
    icsa:year 2015 .

icsa-res:ICSA-15-055-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-055-02" ;
    dcterms:issued "2015-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Kepware Resource Exhaustion Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Communications; Critical Manufacturing; Energy; Food and Agriculture; Information Technology; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5425" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2014-5425 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kepware Technologies" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Kepware Technologies' DNP Master Driver for the KEPServerEX Communications Platform Versions 5.16.728.0 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-055-02" ;
    icsa:vendor "Kepware Technologies" ;
    icsa:year 2015 .

icsa-res:ICSA-15-055-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-055-03" ;
    dcterms:issued "2015-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Invensys Positioner Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "5.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9206" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-9206 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Invensys Positioner" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric product versions affected: DTM Version 3.1.6 | all previous versions used with SRD 960 | SRD 991 Control Valve Positioners." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-055-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-057-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-057-01" ;
    dcterms:issued "2015-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Network Vision IntraVue Code Injection Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-0977" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2015-0977 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntraVue" ;
    icsa:productDistribution "North America, Europe" ;
    icsa:productsAffected "IntraVue software versions affected: IntraVue | all Windows versions prior to Version 2.3.0a14." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-057-01" ;
    icsa:vendor "Network Vision" ;
    icsa:year 2015 .

icsa-res:ICSA-15-062-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-062-01" ;
    dcterms:issued "2015-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "MICROSYS PROMOTIC Stack Buffer Overflow" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9205" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-9205 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PROMOTIC" ;
    icsa:productDistribution "Bulgaria, Hungary, Poland, Romania, Serbia, Slovenia" ;
    icsa:productsAffected "PROMOTIC versions affected: PROMOTIC versions prior to stable 8.2.19 | PROMOTIC versions prior to development 8.3.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-062-01" ;
    icsa:vendor "MICROSYS" ;
    icsa:year 2015 .

icsa-res:ICSA-15-062-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-062-02" ;
    dcterms:issued "2015-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk DLL Hijacking Vulnerabilities" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9209" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2014-9209 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FactoryTalk software versions affected: FactoryTalk Services Platform and all versions prior to 2.71.00 | FactoryTalk View Studio Version 8.00.00 and all versions prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-062-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2015 .

icsa-res:ICSA-15-064-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-064-01A" ;
    dcterms:issued "2015-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A)" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-0235" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2015-0235 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC HMI Basic | SINUMERIK | Ruggedcom APE" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "SINUMERIK | SIMATIC HMI Basic versions affected: SINUMERIK 808D | 828D | 840D sl | all versions up to 4.7 | SIMATIC HMI Basic Panels 2nd Generation. Ruggedcom APE versions are not vulnerable in their default configuration but can become exploitable depending on components installed in the user configuration: Ruggedcom APE: APE1402-XX | APE1402-C01 | APE1404-XX | APE1404-C01 | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-064-01A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-064-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-064-02A" ;
    dcterms:issued "2015-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A)" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-1594" ;
    icsa:cweNumber "CWE-226" ;
    icsa:hasCVE cve-res:CVE-2015-1594 ;
    icsa:hasCWE cwe-res:CWE-226 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens product versions affected: SIMATIC ProSave: All versions prior to V13 SP1SIMOTION Scout: All versions prior to V4.4STARTER: All versions prior to V4.4 HF3SIMATIC CFC: All versions prior to V8.0 SP4CFC V8.0 SP4: All versions prior to V8.0 SP4 Upd 9CFC V8.1: All versions prior to V8.1 Upd1 | SIMATIC STEP 7 V5.5: All versions prior to V5.5 SP1STEP 7 V5.5 SP1: All versions prior to V5.5 SP1 HF2STEP 7 V5.5 SP2: All versions prior to V5.5 SP2 HF7STEP 7 V5.5 SP36: All versions prior to V5.5 SP3 HF10STEP 7 V5.5 SP4: All versions prior to V5.5 SP4 HF4SIMATIC PCS 7 (as STEP 7 | CFC incorporated): All versions prior to V8.0 SP2PCS 7 V8.0 SP2: All versions prior to V8.0 SP2 with STEP 7 V5.5 SP3 HF10 | CFC V8.0 SP4 Upd9 PCS 7 V8.1: All versions prior to V8.1 with STEP 7 SP4 HF4 | CFC V8.1 Upd1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-064-02A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-064-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-064-03" ;
    dcterms:issued "2015-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SPC Controller Series Denial-of-Service Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-9369" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2014-9369 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SPC Controller Series" ;
    icsa:productDistribution "Germany, Peru" ;
    icsa:productsAffected "SPC Controllers versions affected: SPC4000 series: All versions prior to V3.6.0 |SPC5000 series: All versions prior to V3.6.0 | SPC6000 series: All versions prior to V3.6.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-064-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-064-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-064-04" ;
    dcterms:issued "2015-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-300 CPU Denial-of-Service Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-2177" ;
    icsa:cweNumber "CWE-404" ;
    icsa:hasCVE cve-res:CVE-2015-2177 ;
    icsa:hasCWE cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-300 CPU" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "SIMATIC S7-300 CPUs versions affected: SIMATIC S7-300 CPU family: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-064-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-064-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-064-05" ;
    dcterms:issued "2015-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SPCanywhere App Vulnerabilities" ;
    icsa:CVSSScore "4.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2015-1595; CVE-2015-1598; CVE-2015-1599; CVE-2015-1596; CVE-2015-1597" ;
    icsa:cweNumber "CWE-212; CWE-257; CWE-288; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2015-1595,
        cve-res:CVE-2015-1596,
        cve-res:CVE-2015-1597,
        cve-res:CVE-2015-1598,
        cve-res:CVE-2015-1599 ;
    icsa:hasCWE cwe-res:CWE-212,
        cwe-res:CWE-257,
        cwe-res:CWE-288,
        cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SPCanywhere App" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SPCanywhere versions affected: SPCanywhere Android Application: All versions | SPCanywhere iOS Application: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-064-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-069-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-069-01" ;
    dcterms:issued "2015-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cimon CmnView DLL Hijacking Vulnerability" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9207" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2014-9207 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CmnView" ;
    icsa:productDistribution "South Korea, United States, Asia" ;
    icsa:productsAffected "CIMON CmnView.exe application versions affected: CmnView Version 2.14.0.1 | CmnView Version 3.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-069-01" ;
    icsa:vendor "CIMON, Inc." ;
    icsa:year 2015 .

icsa-res:ICSA-15-069-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-069-02" ;
    dcterms:issued "2015-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB HART Device DTM Vulnerability" ;
    icsa:CVSSScore "1.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-9191" ;
    icsa:cweNumber "CWE-20; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2014-9191 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HART Device DTM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products using the vulnerable HART Device DTM library are affected: ABB Third-Party Device Type Library | Version 1.17 and prior: 800xA¾Device Management HART. Freelance ABB Third-Party HART DTMLibrary - Version 1.4.178.214 and prior: Freelance 800F. S Plus Melody ABB Third-Party HART DTMLibrary - Version 1.4.175.185 and prior: Symphony Plus with Composer Melody | S+Engineering for Melody | Composer Field." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-069-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2015 .

icsa-res:ICSA-15-069-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-069-03" ;
    dcterms:issued "2015-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "SCADA Engine BACnet OPC Server Vulnerabilities" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2015-0981; CVE-2015-0979; CVE-2015-0980" ;
    icsa:cweNumber "CWE-122; CWE-20; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2015-0979,
        cve-res:CVE-2015-0980,
        cve-res:CVE-2015-0981 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-20,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BACnet OPC Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "BACnet OPC Server versions affected: OPC Server prior to and including Version 2.1.359.22." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-069-03" ;
    icsa:vendor "SCADA Engine" ;
    icsa:year 2015 .

icsa-res:ICSA-15-069-04A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-069-04A" ;
    dcterms:issued "2015-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Elipse E3 Process Control Vulnerability (Update A)" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2015-0978" ;
    icsa:cweNumber "CWE-114" ;
    icsa:hasCVE cve-res:CVE-2015-0978 ;
    icsa:hasCWE cwe-res:CWE-114 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "E3 Process Control" ;
    icsa:productDistribution "Argentina, Brazil, Chile, Germany, India, Russia, Sweden, United States" ;
    icsa:productsAffected "Elipse E3 versions affected: Elipse E3 | Versions 4.5.232-4.6.161 |EQATEC.Analytics.Monitor.Win32_vc100.dll (32-bit) | EQATEC.Analytics.Monitor.Win32_vc100-x64.dll (64-bit)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-069-04A" ;
    icsa:vendor "Elipse" ;
    icsa:year 2015 .

icsa-res:ICSA-15-071-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-071-01" ;
    dcterms:issued "2015-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2015-0982" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2015-0982 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pelco DS-NVs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Pelco DS-NVs versions affected: Pelco DS-NVs | Version 7.6.32 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-071-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-076-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-076-01" ;
    dcterms:issued "2015-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "XZERES 442SR Wind Turbine Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-0985" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2015-0985 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "442SR Wind Turbine" ;
    icsa:productDistribution "United Kingdom, Italy, Japan, Myanmar, Philippines, United States, Vietnam" ;
    icsa:productsAffected "XZERES product versions affected: 442SR Wind Turbine." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-076-01" ;
    icsa:vendor "XZERES" ;
    icsa:year 2015 .

icsa-res:ICSA-15-076-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-076-02" ;
    dcterms:issued "2015-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell XL Web Controller Directory Traversal Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-0984" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2015-0984 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XL Web Controller" ;
    icsa:productDistribution "United Kingdom, Europe, Middle East" ;
    icsa:productsAffected "XLWeb controller versions affected: XL1000C50 EXCEL WEB 52 I/O |XL1000C100 EXCEL WEB 104 I/O |XL1000C500 EXCEL WEB 300 I/O |XL1000C1000 EXCEL WEB 600 I/O |XL1000C50U EXCEL WEB 52 I/O UUKL |XL1000C100U EXCEL WEB 104 I/O UUKL |XL1000C500U EXCEL WEB 300 I/O UUKL | XL1000C1000U EXCEL WEB 600 I/O UUKL." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-076-02" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2015 .

icsa-res:ICSA-15-085-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-085-01A" ;
    dcterms:issued "2015-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities (Update A)" ;
    icsa:CVSSScore "4.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Information Technology" ;
    icsa:cveNumber "CVE-2015-0997; CVE-2015-0996; CVE-2015-0998; CVE-2015-0999" ;
    icsa:cweNumber "CWE-798; CWE-319; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2015-0996,
        cve-res:CVE-2015-0997,
        cve-res:CVE-2015-0998,
        cve-res:CVE-2015-0999 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-319,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InduSoft Web Studio and InTouch Machine Edition 2014" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric product versions affected: InduSoft Web Studio | Version 7.1.3.2 | all previous versions | InTouch Machine Edition 2014 | version 7.1.3.2 | all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-085-01A" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-090-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-090-01" ;
    dcterms:issued "2015-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition Vulnerabilities" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-0993; CVE-2015-0995; CVE-2015-0976; CVE-2015-0991; CVE-2015-0992; CVE-2015-0994" ;
    icsa:cweNumber "CWE-209; CWE-79; CWE-922; CWE-613; CWE-916; CWE-255" ;
    icsa:hasCVE cve-res:CVE-2015-0976,
        cve-res:CVE-2015-0991,
        cve-res:CVE-2015-0992,
        cve-res:CVE-2015-0993,
        cve-res:CVE-2015-0994,
        cve-res:CVE-2015-0995 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-255,
        cwe-res:CWE-613,
        cwe-res:CWE-79,
        cwe-res:CWE-916,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ignition" ;
    icsa:productDistribution "Australia, South America, Asia, Europe" ;
    icsa:productsAffected "Inductive Automation product versions affected: Inductive Automation Ignition 7.7.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-090-01" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2015 .

icsa-res:ICSA-15-090-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-090-02" ;
    dcterms:issued "2015-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor DLL Vulnerabilities" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-0990" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2015-0990 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "SCADA Servers versions affected: IntegraXor SCADA Server prior to Version 4.2.4488." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-090-02" ;
    icsa:vendor "Ecava" ;
    icsa:year 2015 .

icsa-res:ICSA-15-090-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-090-03" ;
    dcterms:issued "2015-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hospira MedNet Vulnerabilities" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-5403; CVE-2014-5401; CVE-2014-5405" ;
    icsa:cweNumber "CWE-94; CWE-260; CWE-321; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2014-5401,
        cve-res:CVE-2014-5403,
        cve-res:CVE-2014-5405 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-260,
        cwe-res:CWE-321,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MedNet" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MedNet software versions affected: MedNet software Version 5.8 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-090-03" ;
    icsa:vendor "Hospira" ;
    icsa:year 2015 .

icsa-res:ICSA-15-092-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-092-01" ;
    dcterms:issued "2015-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric VAMPSET Software Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-8390" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-8390 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VAMPSET Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric affected products versions of VAMPSET: VAMPSET software | V2.2.145 | all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-092-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-097-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-097-01" ;
    dcterms:issued "2015-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa VPort ActiveX SDK Plus Stack-Based Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Emergency Services; Energy; Financial Services; Government Facilities; Healthcare and Public Health; Information Technology; Nuclear Reactors Materials and Waste; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-0986" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2015-0986 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VPort ActiveX SDK Plus" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa VPort ActiveX SDK (all versions prior to Version 2.8) versions affected: MxNVR-MO4 Series | VPort 26A-1MP Series | VPort 351 | VPort 354 | VPort 36-1MP Series | VPort 364A Series | VPort 451 | VPort 461 | VPort 56-2MP Series | VPort P06-1MP-M12 | VPort P06HC-1MP-M12 Series | VPort P16-1MP-M12 Series | VPort P16-1MP-M12-IR Series." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-097-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2015 .

icsa-res:ICSA-15-099-01E a icsa:ICSA ;
    dcterms:identifier "ICSA-15-099-01E" ;
    dcterms:issued "2015-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC HMI Devices Vulnerabilities (Update E)" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-2822; CVE-2015-1601; CVE-2015-2823" ;
    icsa:cweNumber "CWE-836; CWE-300; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2015-1601,
        cve-res:CVE-2015-2822,
        cve-res:CVE-2015-2823 ;
    icsa:hasCWE cwe-res:CWE-300,
        cwe-res:CWE-400,
        cwe-res:CWE-836 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC HMI Devices" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Siemens SIMATIC products: SIMATIC HMI Basic Panels 2nd Generation: V13: All versions < WinCC (TIA Portal) V13 SP1 Upd2 SIMATIC HMI Comfort Panels:V12: All versions < WinCC (TIA Portal) V12 SP1 Upd5V13: All versions < WinCC (TIA Portal) V13 SP1 Upd2 SIMATIC WinCC Runtime Advanced: V12: All versions < WinCC Runtime Advanced V12 SP1 Upd5V13: All versions < WinCC Runtime Advanced V13 SP1 Upd2 SIMATIC WinCC Runtime Professional: V13: All versions < WinCC (TIA Portal) V13 SP1 Upd2 SIMATIC HMI Basic Panels 1st Generation (WinCC TIA Portal): V12: All versions < WinCC (TIA Portal) V12 SP1 Upd5 V13: All versions < WinCC (TIA Portal) V13 SP1 Upd4 SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal): V12: All versions < WinCC (TIA Portal) V12 SP1 Upd5V13: All versions < WinCC (TIA Portal) V13 SP1 Upd4 SIMATIC HMI Multi Panels (WinCC TIA Portal):V12: All versions < WinCC (TIA Portal) V12 SP1 Upd5V13: All versions < WinCC (TIA Portal) V13 SP1 Upd4 SIMATIC NET PC-Software V12 and V13: SIMATIC NET PC-Software V12: All versions < V12 SP2 HF3 SIMATIC NET PC-Software V13: All versions < V13 HF1 SIMATIC WinCC V7.X: All versions prior to V7.2V7.2: All version < V7.2 Upd11V7.3: All versions < V7.3 Upd4 and SIMATIC PCS 7: All versions prior to V8.1 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-099-01E" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-111-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-111-01" ;
    dcterms:issued "2015-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson AMS Device Manager SQL Injection Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; oil and gas" ;
    icsa:cveNumber "CVE-2015-1008" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2015-1008 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AMS Device Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Emerson affected product: AMS Device Manager | V12.5 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-111-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2015 .

icsa-res:ICSA-15-111-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-111-02" ;
    dcterms:issued "2015-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLinx Classic Vulnerability" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-9204" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-9204 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLinx Classic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RSLinx Classic versions affected: RSLinx Classic and all versions prior to Version 3.73.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-111-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2015 .

icsa-res:ICSA-15-120-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-120-01" ;
    dcterms:issued "2015-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Opto 22 Multiple Product Vulnerabilities" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2015-1007; CVE-2015-1006" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2015-1006,
        cve-res:CVE-2015-1007 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Products" ;
    icsa:productDistribution "North America" ;
    icsa:productsAffected "Opto 22 products versions affected: PAC Project Professional and versions prior to Version R9.4006 |PAC Project Basic and versions prior to Version R9.4006 |PAC Dplay Basic and versions prior to Version R9.4f |PAC Dplay Professional and versions prior to Version R9.4f |OptoOPCServer and versions prior to Version R9.4c | OptoDataLink | Version R9.4d and prior versions that were installed by PAC Project installer and versions prior to Version R9.4006. Opto 22 that contain the Stack-buffer overflow vulnerability in OPCTest.exe: PAC Project Professional and versions prior to Version R9.4008 |PAC Project Basic and versions prior to Version R9.4008 |PAC Dplay Basic and versions prior to Version R9.4g |PAC Dplay Professional and versions prior to Version R9.4g |OptoOPCServer | Version R9.4c and prior versions that were installed by PAC Project installer and versions prior to Version R9.4008 | OptoDataLink | Version R9.4d and prior versions that were installed by PAC Project installer and versions prior to Version R9.4008." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-120-01" ;
    icsa:vendor "Opto 22" ;
    icsa:year 2015 .

icsa-res:ICSA-15-125-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-15-125-01B" ;
    dcterms:issued "2015-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hospira LifeCare PCA Infusion System Vulnerabilities (Update B)" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2015-3958; CVE-2015-3957; CVE-2014-5406; CVE-2015-3955; CVE-2015-1012; CVE-2015-3459; CVE-2015-1011" ;
    icsa:cweNumber "CWE-320; CWE-121; CWE-285; CWE-312; CWE-259; CWE-345; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2014-5406,
        cve-res:CVE-2015-1011,
        cve-res:CVE-2015-1012,
        cve-res:CVE-2015-3459,
        cve-res:CVE-2015-3955,
        cve-res:CVE-2015-3957,
        cve-res:CVE-2015-3958 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-259,
        cwe-res:CWE-285,
        cwe-res:CWE-312,
        cwe-res:CWE-320,
        cwe-res:CWE-345,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LifeCare PCA Infusion System" ;
    icsa:productDistribution "Canada, United States" ;
    icsa:productsAffected "LifeC PCA Infusion System | Version 5.0 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-125-01B" ;
    icsa:vendor "Hospira" ;
    icsa:year 2015 .

icsa-res:ICSA-15-132-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-132-01" ;
    dcterms:issued "2015-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI AF Incorrect Default Permissions Vulnerability" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2015-1013" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2015-1013 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI AF" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSoft versions affected: PI AF 2.6 new installs |PI AF 2.7 upgrade | PI SQL for AF 2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-132-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2015 .

icsa-res:ICSA-15-132-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-132-02" ;
    dcterms:issued "2015-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSView32 Weak Encryption Algorithm on Passwords" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-1010" ;
    icsa:cweNumber "CWE-257" ;
    icsa:hasCVE cve-res:CVE-2015-1010 ;
    icsa:hasCWE cwe-res:CWE-257 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSView32" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RSView32 versions affected: RSView32 - 7.60.00 (CPR9 SR4) and all prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-132-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2015 .

icsa-res:ICSA-15-141-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-141-01A" ;
    dcterms:issued "2015-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric OFS Server Vulnerability (Update A)" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-1014" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2015-1014 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OFS Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OPC Factory Server versions affected: OPC Factory Server (OSF) Version 3.5 and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-141-01A" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-146-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-146-01" ;
    dcterms:issued "2015-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-3938" ;
    icsa:cweNumber "CWE-233" ;
    icsa:hasCVE cve-res:CVE-2015-3938 ;
    icsa:hasCWE cwe-res:CWE-233 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC FX-Series Controllers" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "MELSEC FX-series versions affected: MELSEC FX3G Series PLCs." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-146-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-148-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-148-01" ;
    dcterms:issued "2015-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "IDS RTU 850 Directory Traversal Vulnerability" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-3939" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2015-3939 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU 850" ;
    icsa:productDistribution "Czech Republic, Iran, Morocco, Romania, Switzerland" ;
    icsa:productsAffected "IDS communications modules in the IDS 850 family versions affected: NC854 | NC856." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-148-01" ;
    icsa:vendor "IDS" ;
    icsa:year 2015 .

icsa-res:ICSA-15-153-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-153-01" ;
    dcterms:issued "2015-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Beckwith Electric TCP Initial Sequence Vulnerability" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2014-9201" ;
    icsa:cweNumber "CWE-342" ;
    icsa:hasCVE cve-res:CVE-2014-9201 ;
    icsa:hasCWE cwe-res:CWE-342 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TCP Initial Sequence" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "M-6200 Digital Voltage Regulator Control | firmware versions prior to Version D-0198V04.07.00 | M-6200A Digital Voltage Regulator Control | firmware versions prior to Version D-0228V02.01.07 | M-2001D Digital Tapchanger Control | firmware versions prior to Version D-0214V01.10.04 | M-6283A Three Phase Digital Capacitor Bank Control | firmware versions prior to Version D-0346V03.00.02 | M-6280A Digital Capacitor Bank Control | firmware versions prior to Version D-0254V03.05.05 | M-6280 Digital Capacitor Bank Control | all firmware versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-153-01" ;
    icsa:vendor "Beckwith Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-153-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-153-02" ;
    dcterms:issued "2015-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa SoftCMS Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2015-1000" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2015-1000 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoftCMS" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa's SoftCMS versions affected: SoftCMS | Version 1.2 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-153-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2015 .

icsa-res:ICSA-15-155-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-155-01" ;
    dcterms:issued "2015-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "XZERES 442SR Wind Turbine CSRF Vulnerability" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-3950" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2015-3950 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "442SR Wind Turbine" ;
    icsa:productDistribution "United Kingdom, Italy, Japan, Myanmar, Philippines, Vietnam" ;
    icsa:productsAffected "XZERES product versions affected: 442SR Wind Turbine." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-155-01" ;
    icsa:vendor "XZERES" ;
    icsa:year 2015 .

icsa-res:ICSA-15-160-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-160-01A" ;
    dcterms:issued "2015-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Nuclear Reactors; Materials; and Waste; Transportation Systems;; Water and Wastewater" ;
    icsa:cveNumber "CVE-2012-4716" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2012-4716 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "702W" ;
    icsa:productDistribution "Canada, China, United Kingdom, India, Switzerland" ;
    icsa:productsAffected "N-Tron 702-W Industrial Wireless Access Point | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-160-01A" ;
    icsa:vendor "N-Tron" ;
    icsa:year 2015 .

icsa-res:ICSA-15-160-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-160-02" ;
    dcterms:issued "2015-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sinapsi eSolar Light Plaintext Passwords Vulnerability" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-3949" ;
    icsa:cweNumber "CWE-256" ;
    icsa:hasCVE cve-res:CVE-2015-3949 ;
    icsa:hasCWE cwe-res:CWE-256 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "eSolar Light" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Sinapsi eSolar Light versions affected: Sinapsi eSolar Light firmware versions prior to 2.0.3970_schsl_2.2.85." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-160-02" ;
    icsa:vendor "Sinapsi" ;
    icsa:year 2015 .

icsa-res:ICSA-15-161-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-161-01" ;
    dcterms:issued "2015-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hospira Plum A+ and Symbiq Infusion Systems Vulnerabilities" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2015-3954; CVE-2015-3958; CVE-2015-3956; CVE-2015-3957; CVE-2015-3953; CVE-2015-3955; CVE-2015-3952" ;
    icsa:cweNumber "CWE-320; CWE-121; CWE-285; CWE-312; CWE-259; CWE-345; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2015-3952,
        cve-res:CVE-2015-3953,
        cve-res:CVE-2015-3954,
        cve-res:CVE-2015-3955,
        cve-res:CVE-2015-3956,
        cve-res:CVE-2015-3957,
        cve-res:CVE-2015-3958 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-259,
        cwe-res:CWE-285,
        cwe-res:CWE-312,
        cwe-res:CWE-320,
        cwe-res:CWE-345,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Plum A+ and Symbiq Infusion Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hospira product versions affected: Plum A+ Infusion System | Version 13.4 and prior versions |Plum A+3 Infusion System | Version 13.6 and prior versions | Symbiq Infusion System |a Version 3.13 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-161-01" ;
    icsa:vendor "Hospira" ;
    icsa:year 2015 .

icsa-res:ICSA-15-162-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-162-01A" ;
    dcterms:issued "2015-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "RLE Nova-Wind Turbine HMI Unsecure Credentials Vulnerability (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-3951" ;
    icsa:cweNumber "CWE-256" ;
    icsa:hasCVE cve-res:CVE-2015-3951 ;
    icsa:hasCWE cwe-res:CWE-256 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Turbine HMI" ;
    icsa:productDistribution "Germany, United Kingdom, India, Sweden, United States" ;
    icsa:productsAffected "RLE International GmbH product versions affected: Nova-Wind Turbine HMI" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-162-01A" ;
    icsa:vendor "RLE Nova-Wind" ;
    icsa:year 2015 .

icsa-res:ICSA-15-167-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-167-01" ;
    dcterms:issued "2015-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "GarrettCom Magnum Series Devices Vulnerabilities" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Defense Industrial Base; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-3959; CVE-2015-3961; CVE-2015-3960; CVE-2015-3942" ;
    icsa:cweNumber "CWE-798; CWE-79; CWE-472" ;
    icsa:hasCVE cve-res:CVE-2015-3942,
        cve-res:CVE-2015-3959,
        cve-res:CVE-2015-3960,
        cve-res:CVE-2015-3961 ;
    icsa:hasCWE cwe-res:CWE-472,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Magnum Series Devices" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "GarrettCom versions affected: Magnum 6K product line and all versions prior to 4.5.6 | Magnum 10K product line and all versions prior to 4.5.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-167-01" ;
    icsa:vendor "GarrettCom" ;
    icsa:year 2015 .

icsa-res:ICSA-15-169-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-15-169-01B" ;
    dcterms:issued "2015-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B)" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Healthcare and Public Health; Transportation Systems;; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-3963" ;
    icsa:cweNumber "CWE-343" ;
    icsa:hasCVE cve-res:CVE-2015-3963 ;
    icsa:hasCWE cwe-res:CWE-343 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VXWorks" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "VxWorks version affected: Wind River VxWorks | Version 7 | released prior to February 13 | 2015 | Wind River VxWorks | Version 6.9 releases prior to Version 6.9.4.4 | Wind River VxWorks | Version 6.8 releases prior to Version 6.8.3 | Wind River VxWorks | Version 6.7 releases prior to Version 6.7.1.1 | and Wind River VxWorks | Version 6.6 and prior versions but NOT to include Version 5.5.1 with PNE2.2 and Version 6.0 through Version 6.4.The following versions of VxWorks Cert are affected: Wind River VxWorks Cert | Version 6.6.3 | Wind River VxWorks Cert | Version 6.6.4 | and Wind River VxWorks Cert | Version 6.6.4.1. The following versions of VxWorks 653 are affected: Wind River VxWorks 653 Platform/Platform for Safety Critical ARINC 653 | Version 3.0 | Wind River VxWorks 653 Platform/Platform for Safety Critical ARINC 653 | Version 2.5 |Wind River VxWorks 653 Platform/Platform for Safety Critical ARINC 653 | Version 2.4 | Wind River VxWorks 653 Platform/Platform for Safety Critical ARINC 653 | Version 2.3 | and Wind River VxWorks 653 Platform/Platform for Safety Critical ARINC 653 | Version 2.2. Wind River's VxWorks is widely used in ICS-related devices. The following Schneider Electric SAGE RTUs which use CPU card C3412 are affected: Schneider Electric SAGE 1210 RTU | Schneider Electric SAGE 1230 RTU | Schneider Electric SAGE 1250 RTU | Schneider Electric SAGE 2200 RTU. The following Schneider Electric SAGE RTUs which use CPU card C3413 are affected: Schneider Electric SAGE 1310 RTU |Schneider Electric SAGE 1330 RTU | Schneider Electric SAGE 1350 RTU | Schneider Electric SAGE 2300 RTU | and Schneider Electric SAGE 3030 RTU.The following Schneider Electric SAGE RTUs | which use CPU card C3414 LX-800 with firmware versions prior to C3414-500-S02J2 are affected:Schneider Electric SAGE 1410 RTU |Schneider Electric SAGE 1430 RTU | Schneider Electric SAGE 1450 RTU |Schneider Electric SAGE 2400 RTU | Schneider Electric SAGE 3030 Magnum RTU | and Schneider Electric SAGE LANDAC2 Upgrade Kit." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-169-01B" ;
    icsa:vendor "Wind River" ;
    icsa:year 2015 .

icsa-res:ICSA-15-169-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-169-02" ;
    dcterms:issued "2015-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware System Platform Vulnerabilities" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-3940" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2015-3940 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware System Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric version versions affected: Wonderware System Platform 2014 R2 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-169-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-174-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-174-01" ;
    dcterms:issued "2015-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hospira Symbiq Infusion System Vulnerability" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2015-3965" ;
    icsa:cweNumber "CWE-749" ;
    icsa:hasCVE cve-res:CVE-2015-3965 ;
    icsa:hasCWE cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Symbiq Infusion System" ;
    icsa:productDistribution "Canada, United States" ;
    icsa:productsAffected "Symbiq Infusion System versions affected: Symbiq Infusion System | Version 3.13 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-174-01" ;
    icsa:vendor "Hospira" ;
    icsa:year 2015 .

icsa-res:ICSA-15-176-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-176-01" ;
    dcterms:issued "2015-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Climatix BACnet/IP Communication Module Cross-site Scripting Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2015-4174" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2015-4174 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Climatix BACnet/IP Communication Module" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Siemens affected version: Climatix BACnet/IP communication module: All versions prior to V10.34." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-176-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-176-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-176-02" ;
    dcterms:issued "2015-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "PACTware Exceptional Conditions Vulnerability" ;
    icsa:CVSSScore "1.2"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2015-0989" ;
    icsa:cweNumber "CWE-703" ;
    icsa:hasCVE cve-res:CVE-2015-0989 ;
    icsa:hasCWE cwe-res:CWE-703 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PACTware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PACTw versions affected: PACTw Version 4.1 | Service Pack 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-176-02" ;
    icsa:vendor "PACTware Consortium" ;
    icsa:year 2015 .

icsa-res:ICSA-15-181-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-181-01" ;
    dcterms:issued "2015-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter SIGMA Spectrum Infusion System Vulnerabilities" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-5432; CVE-2014-5433; CVE-2014-5434; CVE-2014-5431" ;
    icsa:cweNumber "CWE-259; CWE-592; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2014-5431,
        cve-res:CVE-2014-5432,
        cve-res:CVE-2014-5433,
        cve-res:CVE-2014-5434 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-312,
        cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIGMA Spectrum Infusion System" ;
    icsa:productDistribution "Australia, Canada, China, Germany, France, United Kingdom, India, Italy, United States" ;
    icsa:productsAffected "SIGMA Spectrum Infusion System versions affected: SIGMA Spectrum Infusion System | Version 6.05 (model 35700BAX) with wireless battery module (WBM) | Version 16. The WBM a st |-alone component that provides network connectivity to the pump." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-181-01" ;
    icsa:vendor "Baxter" ;
    icsa:year 2015 .

icsa-res:ICSA-15-181-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-181-02A" ;
    dcterms:issued "2015-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "SMA Solar Technology AG Sunny WebBox Hard-Coded Account Vulnerability (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-3964" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2015-3964 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sunny WebBox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Sunny WebBox versions affected: Sunny WebBox - All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-181-02A" ;
    icsa:vendor "SMA Solar Technology AG" ;
    icsa:year 2015 .

icsa-res:ICSA-15-195-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-195-01" ;
    dcterms:issued "2015-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM MIC Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-5386" ;
    icsa:cweNumber "CWE-592" ;
    icsa:hasCVE cve-res:CVE-2015-5386 ;
    icsa:hasCWE cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM MIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SICAM MIC: SICAM MIC: All versions prior to V2404." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-195-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-202-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-202-01" ;
    dcterms:issued "2015-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC Denial-of-Service Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-5374" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2015-5374 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC" ;
    icsa:productDistribution "Germany, Russia" ;
    icsa:productsAffected "Siemens product versions affected: SIPROTEC 4 | SIPROTEC Compact product families. All devices that include the EN100 Ethernet module version V4.24 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-202-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-202-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-202-02" ;
    dcterms:issued "2015-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Sm@rtClient Password Storage Vulnerability" ;
    icsa:CVSSScore "2.1"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-5084" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2015-5084 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sm@rtClient" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SIMATIC WinCC Sm@rtClient: SIMATIC WinCC Sm@rtClient for Android: All versions prior to V01.00.01.00 | SIMATIC WinCC Sm@rtClient Lite for Android: All versions prior to V01.00.01.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-202-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-202-03B a icsa:ICSA ;
    dcterms:identifier "ICSA-15-202-03B" ;
    dcterms:issued "2015-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS and ROX-based Devices TLS POODLE Vulnerability (Update B)" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public; Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2015-5537" ;
    icsa:cweNumber "CWE-310" ;
    icsa:hasCVE cve-res:CVE-2015-5537 ;
    icsa:hasCWE cwe-res:CWE-310 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROS and ROX-based Devices TLS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens RUGGEDCOM ROS versions affected: RUGGEDCOM devices with ROS: All firmware versions prior to v4.2.0 | RUGGEDCOM devices with ROX II: All firmware versions prior to v2.9.0.Note - ROX I devices not affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-202-03B" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-211-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-211-01" ;
    dcterms:issued "2015-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Password Storage Vulnerability" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Information Technology" ;
    icsa:cveNumber "CVE-2015-1009" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2015-1009 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InduSoft Web Studio and InTouch Machine Edition 2014" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric affected products: InduSoft Web Studio | Version 7.1.3.4 and all previous versions. InTouch Machine Edition 2014 | Version 7.1 Service Pack 3 | Patch 4 and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-211-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-223-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-223-01" ;
    dcterms:issued "2015-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IMT25 DTM Vulnerability" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-3977" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2015-3977 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IMT25 DTM" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Schneider Electric IMT25 Magnetic Flow DTM versions affected: IMT25 Magnetic Flow DTM | Version 1.500.000 and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-223-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-225-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-225-01" ;
    dcterms:issued "2015-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Data Archive Server Vulnerabilities" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-200; CWE-250; CWE-20; CWE-384; CWE-476; CWE-400" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-250,
        cwe-res:CWE-384,
        cwe-res:CWE-400,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Data Archive Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSoft versions affected: All versions of the PI Data Archive prior to Version 3.4.395.64." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-225-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2015 .

icsa-res:ICSA-15-232-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-232-01" ;
    dcterms:issued "2015-08-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Everest Software PeakHMI Pointer Dereference Vulnerabilities" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2015-6454" ;
    icsa:cweNumber "CWE-822" ;
    icsa:hasCVE cve-res:CVE-2015-6454 ;
    icsa:hasCWE cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PeakHMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Everest software LLC versions affected: of PeakHMI: PeakHMI versions prior to 8.7.0.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-232-01" ;
    icsa:vendor "Everest Software LLC" ;
    icsa:year 2015 .

icsa-res:ICSA-15-237-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-237-01" ;
    dcterms:issued "2015-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Endress+Hauser HART Device DTM Vulnerability" ;
    icsa:CVSSScore "1.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2014-9191" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2014-9191 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HART Device DTM" ;
    icsa:productDistribution "Germany, Switzerland" ;
    icsa:productsAffected "The following products use the vulnerable HART DTM library and are affected:Cerabar M / PMx 4x / V1.0 ... 1.2 Cerabar M 5x / PMx 5x / V1.00.xx Cerabar S / PMx 7x / HART / FW 2.20.zz / Dev.Rev. 22 Cerabar S / PMx 7x / V01.00 Cerabar S / PMx 7x / V02.00 Cerabar S / PMx 7x / V02.10.xx Cerabar S / PMx x3x / V1.x Cerabar S / PMx x3x / V2.x Cerabar S / PMx x3x / V3.x Cerabar S / PMx x3x / V5.0 Cerabar S / PMx x3x / V7.1 Deltabar / FMD 7x / HART / FW 1.00.zz / Dev.Rev. 1Deltabar M 5x / PMD 55 / V1.00.xxDeltabar S / xMD 7x / HART / FW 2.20.zz / Dev.Rev. 22Deltabar S / xMD 7x / V01.00 Deltabar S / xMD 7x / V02.00 Deltabar S / xMD 7x / V02.10.xx Deltabar S / xMD x3x / V1.x Deltabar S / xMD x3x / V2.x Deltabar S / xMD x3x / V5.0 Deltabar S / xMD x3x / V7.1 Deltapilot M 5x / FMB 5x / V1.00.xx Deltapilot S / DB 5x / V1.x Deltapilot S / DB 5x / V2.0 Deltapilot S / FMB 70 / HART / FW 2.20.zz / Dev.Rev. 22 Deltapilot S / FMB 70 / V02.10.xx Gammapilot M / FMG 60 / HART / FW 1.04.zz / Dev.Rev. 3 Gammapilot M / FMG 60 / V01.xx Gammapilot M / FMG 60 / V02.xx iTemp / TMT 122 / V1.1 iTemp / TMT 142 / V1.03.00 iTemp / TMT 162 / V1.00.00 ... 1.02.00 iTemp / TMT 162 / V1.03.00 iTemp / TMT 182 / V1.1 iTEMP / TMT82 / HART / FW 1.00.zz / Dev.Rev. 1 Levelflex / FMP 2xx / V2.0 ... 2.1 Levelflex M / FMP 40 / V2.00 Levelflex M / FMP 4x / V4.xx Levelflex M Int / FMP 4x I / V1.08 Liquicap M / FMI 5x / 1.00.xx Liquicap M / FMI 5x / 1.03.xx Liquiline Cond / CM 42 / HART / FW 2.01.zz / Dev.Rev. 1 Liquiline M / CM44x / FW 1.02.zz / Dev.Rev. 1 Liquiline M Cci / CM 42 / HART / FW 13.06.zz / Dev.Rev. 10 Liquiline M Cci / CM 42 / HART / FW 13.07.zz / Dev.Rev. 11 Liquiline M Cci / CM 42 / V13.01.xx Liquiline M Cci / CM 42 / V13.04.07 Liquiline M Cci / CM 42 / V13.05.xx Liquiline M DO / CM 42 / HART / FW 20.04.zz / Dev.Rev. 17 Liquiline M DO / CM 42 / HART / FW 20.05.zz / Dev.Rev. 18 Liquiline M DO / CM 42 / V20.02.07Liquiline M DO / CM 42 / V20.02.xxLiquiline M DO / CM 42 / V20.03.xxLiquiline M pH-ORP / CM 42 / HART / FW 10.06.zz / Dev.Rev. 0D Liquiline M pH-ORP / CM 42 / HART / FW 10.07.zz / Dev.Rev. 0E Liquiline M pH-ORP / CM 42 / V10.02.xx Liquiline M pH-ORP / CM 42 / V10.04.07 Liquiline M pH-ORP / CM 42 / V10.04.xx Liquiline M pH-ORP / CM 42 / V10.05.xx Liquiline Oxygen / CM 42 / HART / FW 2.01.zz / Dev.Rev. 1Liquiline pHORP / CM 42 / HART / FW 2.01.zz / Dev.Rev. 1 Liquiport / CSPxx / HART / FW 01.02.zz / Dev.Rev.1 Liquistation / CSFxx / HART / FW 01.02.zz / Dev.Rev.1 Liquisys M Chlorine / CCM 2x3 / V2.30 Liquisys M Chlorine / CCM 2x3 / V2.35 Liquisys M Cond. C / CLM 2x3 / V2.30 Liquisys M Cond. I / CLM 2x3 / V2.30 Liquisys M DO / COM 2x3 / V2.40 Liquisys M PH / CPM 2x3 / V2.50 Liquisys M Turbidity / CUM 2x3 / V2.40 Micropilot I / FMR 13x / V1.4Micropilot I / FMR 13x / V1.5Micropilot I / FMR 13x / V2.0Micropilot I / FMR 13x / V2.1Micropilot II / FMR 23x / V2.0 Micropilot M / FMR 25x / V1.00 Micropilot M / FMR 25x / V4.xx Micropilot M / FMR 25x / V5.xx Micropilot M / FMR 2xx / V1.02 Micropilot M / FMR 2xx / V2.00 Micropilot M / FMR 2xx / V4.xx Micropilot S / FMR 53x / V1.02 Micropilot S / FMR 53x / V2.00 Micropilot S / FMR 53x / V3.00 Micropilot S / FMR 540 / V01.01.xx Multicap / FEC 12 / V1.0 ... 1.2 Mycom S Cond. C / CLM 153 / V1.20 Mycom S Cond. I / CLM 153 / V1.20 Mycom S PH / CPM 153 / V2.30 Mypro Cond. C / CLx 431 / V2.05 Mypro Cond. I / CLx 431 / V2.10 Mypro PH / CPM 431 / V2.02 Nivotester / FTC625 / V1.2 Omnigrad / TMD 832 / V1.1 ... 1.3 Omnigrad / TMD 833 / V1.0 ... 1.1 Omnigrad / TMD 842 / V1.1 ... 1.3 Promag / 10 / V1.00.00 ... V1.00.02 Promag / 10 / V1.01.00 Promag / 10 / V1.02.00 Promag / 10 / V1.03.00 Promag / 23 / V2.00.00 ... 2.01.00 Promag / 23 / V2.02.00 ... 2.03.00 Promag / 33 / V2.04.00 Promag / 35 S / V2.04.00 Promag / 39 / V2.04.00 Promag / 50 / HART / FW 2.04.zz / Dev.Rev. 9 Promag / 50 / V1.02.0x Promag / 50 / V1.04.0x Promag / 50 / V1.06.0x Promag / 50 / V2.00.00 Promag / 50 / V2.01.xx Promag / 50 / V2.02.xx Promag / 50 / V2.03.xx Promag / 51 / HART / FW 2.04.zz / Dev.Rev. 9 Promag / 51 / V1.04.0xPromag / 51 / V1.06.0xPromag / 51 / V2.00.0xPromag / 51 / V2.01.xxPromag / 51 / V2.02.xxPromag / 51 / V2.03.xxPromag / 53 / HART / FW 2.03.zz / Dev.Rev. 8 Promag / 53 / HART / FW 2.07.zz / Dev.Rev. 9 .Promag / 53 / V1.02.0xPromag / 53 / V1.04.0xPromag / 53 / V1.06.00Promag / 53 / V2.00.00Promag / 53 / V2.01.xxPromag / 53 / V2.02.xxPromag / 55 / HART / FW 1.03.zz / Dev.Rev. 4Promag / 55 / V1.00.xxPromag / 55 / V1.01.xxPromag / 55 / V1.02.xxPromass / 40 / V1.02.0x Promass / 40 / V1.04.0x Promass / 40 / V1.05.0x Promass / 40 / V1.06.0x Promass / 40 / V2.00.0x Promass / 40 / V2.01.0x Promass / 40 / V2.02.0x Promass / 40 / V3.01.0x Promass / 60 / V3.01.xx Promass / 60 / V3.02.xx Promass / 60 / V3.03.01 Promass / 63 / V2.02.xx Promass / 63 / V3.00.00 Promass / 63 / V3.02.00 Promass / 63 / V3.03.01 Promass / 80 / V1.02.0x Promass / 80 / V1.04.0x Promass / 80 / V1.05.0x Promass / 80 / V1.06.0x Promass / 80 / V2.00.0x Promass / 80 / V2.01.0x Promass / 80 / V2.02.0x Promass / 80 / V3.01.0x Promass / 83 / HART / FW 3.07.zz / Dev.Rev. 0A Promass / 83 / V1.02.0x Promass / 83 / V1.04.0x Promass / 83 / V1.05.0x Promass / 83 / V1.06.0x Promass / 83 / V2.00.0x Promass / 83 / V2.01.0x Promass / 83 / V2.02.0x Promass / 83 / V3.01.0x Promass / 84 / V2.00.0x Promass / 84 / V2.01.0x Promass / 84 / V2.02.0x Promass / 84 / V3.01.0x Proservo / NMS 530 / V1.0 Prosonic / FMU 860 / V2.1 Prosonic / FMU 860 / V2.2 ... 2.3 Prosonic / FMU 861 / V2.1 Prosonic / FMU 861 / V2.2 ... 2.3 Prosonic / FMU 862 / V2.1 Prosonic / FMU 862 / V2.2 ... 2.3 Prosonic Flow / 90 / V1.04.0x Prosonic Flow / 90 / V1.06.0x Prosonic Flow / 90 / V2.00.0x Prosonic Flow / 90 / V2.01.0x Prosonic Flow / 91 / HART / FW 1.02.zz / Dev.Rev. 3 Prosonic Flow / 91 / V1.00.xx Prosonic Flow / 91 / V1.01.xx Prosonic Flow / 92 / HART / FW 1.01.zz / Dev.Rev. 2 Prosonic Flow / 92 / V1.00.xxProsonic Flow / 93 / HART / FW 2.03.zz / Dev.Rev. 8 Prosonic Flow / 93 / V1.04.0xProsonic Flow / 93 / V1.05.0xProsonic Flow / 93 / V1.06.0xProsonic Flow / 93 / V2.00.0xProsonic Flow / 93 / V2.01.0xProsonic Flow / 93 / V2.02.0xProsonic Flow / DMU93 / V1.00.00 Prosonic Flow / DMU93 / V1.01.00 Prosonic M / FMU 4x / V2.00 Prosonic M / FMU 4x / V4.xx Prosonic S / FMU 90 / V2.00.xx Prosonic S / FMU 90 / V2.01.xx Prosonic S / FMU 9x / V01.00.xx Prosonic T / FMU x3x / V2.1 ... 2.2 Prothermo / NMT 539(1) / V1.0 Prothermo / NMT 539(2) / V1.0Prothermo / NMT539(1) / HART / FW 1.5z / Dev.Rev. 5 Prothermo / NMT539(2) / HART / FW 1.5z / Dev.Rev. 5 Prowirl / 70 / ... V1.1.01 Prowirl / 72 / HART / FW 1.06.zz / Dev.Rev. 7 Prowirl / 72 / V1.00.00 ... V1.01.01 Prowirl / 72 / V1.02.00 Prowirl / 72 / V1.03.00 Prowirl / 72 / V1.04.00 Prowirl / 72 / V1.05.00 Prowirl / 73 / HART / FW 1.06.zz / Dev.Rev. 7 Prowirl / 73 / V1.00.0xProwirl / 73 / V1.01.0xProwirl / 73 / V1.02.0xProwirl / 73 / V1.03.0xProwirl / 73 / V1.04.0xProwirl / 73 / V1.05.0xProwirl / 77 / ... V1.0.06 Smartec S / CLD 132 / V1.11 Tank Side Monitor / NRF 590 / V2.04.xx t-mass / 65 / V1.00.xxt-mass / 65 / V1.01.xxt-mass / 70 / V2.0 Waterpilot 2x / FMX 21 / V1.00.xx." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-237-01" ;
    icsa:vendor "Endress+Hauser" ;
    icsa:year 2015 .

icsa-res:ICSA-15-237-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-237-02" ;
    dcterms:issued "2015-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "EasyIO-30P-SF Hard-Coded Credential Vulnerability" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-3974" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2015-3974 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EasyIO-30P-SF" ;
    icsa:productDistribution "India, Malaysia, Asia, Europe" ;
    icsa:productsAffected "EasyIO-30P-SF controllers versions affected: All EasyIO-30P-SF controllers running firmware prior to build v0.5.21 | All EasyIO-30P-SF controllers running firmware prior to build v2.0.5.21. The controller are used in a number of Direct Digital Control (DDC) controller associated with DDC systems from many users worldwide." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-237-02" ;
    icsa:vendor "EasyIO" ;
    icsa:year 2015 .

icsa-res:ICSA-15-237-02-Supplement a icsa:ICSA ;
    dcterms:identifier "ICSA-15-237-02-Supplement" ;
    dcterms:issued "2015-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Supplement to ICSA-15-237-02 EasyIO-30P-SF Hard-Coded Credential Vulnerability" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2015-3974" ;
    icsa:cweNumber "CWE-255" ;
    icsa:hasCVE cve-res:CVE-2015-3974 ;
    icsa:hasCWE cwe-res:CWE-255 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EasyIO-30P-SF" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OEM Manufactures Accutrol LLC-Accutrol EASY IO-30P-SF45-AC7100." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-237-02-Supplement" ;
    icsa:vendor "EasyIO" ;
    icsa:year 2015 .

icsa-res:ICSA-15-239-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-239-01" ;
    dcterms:issued "2015-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa SoftCMS Buffer Overflow Vulnerabilities" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2015-6458; CVE-2015-6457" ;
    icsa:cweNumber "CWE-122; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2015-6457,
        cve-res:CVE-2015-6458 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoftCMS" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa's SoftCMS versions affected: SoftCMS | Version 1.3 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-239-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2015 .

icsa-res:ICSA-15-239-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-239-02" ;
    dcterms:issued "2015-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 CSRF Vulnerability" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2015-5698" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2015-5698 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected product versions of SIMATIC S7-1200: SIMATIC S7-1200 CPU family: All versions prior to V4.1.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-239-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-239-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-239-03" ;
    dcterms:issued "2015-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Innominate mGuard VPN Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2015-3966" ;
    icsa:cweNumber "CWE-272" ;
    icsa:hasCVE cve-res:CVE-2015-3966 ;
    icsa:hasCWE cwe-res:CWE-272 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mGuard VPN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "mGuard versions affected: Innominate mGuard firmware | Version 8.0.0 to Version8.1.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-239-03" ;
    icsa:vendor "Innominate" ;
    icsa:year 2015 .

icsa-res:ICSA-15-244-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-244-01" ;
    dcterms:issued "2015-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS IP Forwarding Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2015-6675" ;
    icsa:cweNumber "CWE-441" ;
    icsa:hasCVE cve-res:CVE-2015-6675 ;
    icsa:hasCWE cwe-res:CWE-441 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected product versions of RUGGEDCOM ROS: All versions between 3.8.0 and 4.2.0. ROS on the following versions are affected: RMC products: RP110 and RS950G." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-244-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-246-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-246-01" ;
    dcterms:issued "2015-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cogent DataHub Code Injection Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Financial Services" ;
    icsa:cveNumber "CVE-2014-3789" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2014-3789 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataHub" ;
    icsa:productDistribution "Canada, United Kingdom, United States" ;
    icsa:productsAffected "Cogent DataHub versions affected: Cogent DataHub | Version 7.3.8 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-246-01" ;
    icsa:vendor "Cogent Real-Time Systems Inc" ;
    icsa:year 2015 .

icsa-res:ICSA-15-246-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-246-02" ;
    dcterms:issued "2015-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon PLC Vulnerabilities" ;
    icsa:CVSSScore "3.2"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Nuclear Reactors Materials and Waste; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-6462" ;
    icsa:cweNumber "CWE-79; CWE-98" ;
    icsa:hasCVE cve-res:CVE-2015-6462 ;
    icsa:hasCWE cwe-res:CWE-79,
        cwe-res:CWE-98 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon PLC" ;
    icsa:productDistribution "China, India, Russia, United States, Europe" ;
    icsa:productsAffected "Schneider Electric affected products versions of Modicon PLC: BMXNOC0401 |BMXNOE0100 |BMXNOE0110 |BMXNOE0110H |BMXNOR0200H |BMXP342020 |BMXP342020H |BMXP342030 |BMXP3420302 |BMXP3420302H | BMXP342030H." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-246-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-246-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-246-03" ;
    dcterms:issued "2015-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa Industrial Managed Switch Vulnerabilities" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Emergency Services; Energy; Food and Agriculture; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-6465; CVE-2015-6464; CVE-2015-6466" ;
    icsa:cweNumber "CWE-79; CWE-269; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2015-6464,
        cve-res:CVE-2015-6465,
        cve-res:CVE-2015-6466 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-400,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Managed Switch" ;
    icsa:productDistribution "Argentina, Brazil, Chile, China, Germany, France, United Kingdom, India, Peru, Russia, Taiwan, United States, Europe" ;
    icsa:productsAffected "Moxa switches versions affected: Moxa EDS-405A/EDS-408A series managed Ethernet switches firmware Version V3.4 build 14031419 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-246-03" ;
    icsa:vendor "Moxa" ;
    icsa:year 2015 .

icsa-res:ICSA-15-251-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-251-01A" ;
    dcterms:issued "2015-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Buffer Overflow Vulnerability (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2014-9208" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-9208 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WebAccess versions affected: WebAccess | Version 8.0 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-251-01A" ;
    icsa:vendor "Advantech" ;
    icsa:year 2015 .

icsa-res:ICSA-15-253-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-253-01" ;
    dcterms:issued "2015-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa Multiple Products Buffer Overflow Vulnerabilities" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2015-5626; CVE-2015-5627; CVE-2015-5628" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2015-5626,
        cve-res:CVE-2015-5627,
        cve-res:CVE-2015-5628 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Products" ;
    icsa:productDistribution "Asia, East Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "Yokogawa versions affected: CENTUM series: CENTUM CS 1000 (R3.08.70 or earlier) |CENTUM CS 3000 (R3.09.50 or earlier) |CENTUM CS 3000 Entry (R3.09.50 or earlier) |CENTUM VP (R5.04.20 or earlier) |CENTUM VP Entry (R5.04.20 or earlier) |ProSafe-RS (R3.02.10 or earlier) |Exaopc (R3.72.00 or earlier) |Exaquantum (R2.85.00 or earlier) |Exaquantum/Batch (R2.50.30 or earlier) |Exapilot (R3.96.10 or earlier) |Exaplog (R3.40.00 or earlier) |Exasmoc (R4.03.20 or earlier) |Exarqe (R4.03.20 or earlier) |Field Wireless Device OPC Server (R2.01.02 or earlier) |PRM (R3.12.00 or earlier) |STARDOM VDS (R7.30.01 or earlier) |STARDOM OPC Server for Windows (R3.40 or earlier) |FAST/TOOLS (R10.01 or earlier) |B/M9000CS (R5.05.01 or earlier) |B/M9000 VP (R7.03.04 or earlier) | FieldMate (R1.01 or R1.02)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-253-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2015 .

icsa-res:ICSA-15-258-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-258-01" ;
    dcterms:issued "2015-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2015-3962" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2015-3962 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "StruxureWare Building Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric affected products versions of StruxureW Building Expert: StruxureW Building Expert | multi-purpose management device (MPM) versions prior to 2.15." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-258-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-258-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-258-02" ;
    dcterms:issued "2015-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "CODESYS Gateway Server (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2015-6460" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2015-6460 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Gateway Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a connection management server; The following versions of CODESYS Gateway Server; are affected: --------- Begin Update A Part 1 of 2 --------- CODESYS Gateway Server: Version 2.3.9.33 and prior --------- End Update A Part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-258-02" ;
    icsa:vendor "CODESYS GmbH" ;
    icsa:year 2015 .

icsa-res:ICSA-15-258-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-258-03" ;
    dcterms:issued "2015-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE MDS PulseNET Vulnerabilities" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-6459; CVE-2015-6456" ;
    icsa:cweNumber "CWE-798; CWE-23" ;
    icsa:hasCVE cve-res:CVE-2015-6456,
        cve-res:CVE-2015-6459 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MDS PulseNET" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE versions affected: MDS PulseNET Enterpre | Version 3.1.3 | all prior versions | MDS PulseNET | Version 3.1.3 | all prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-258-03" ;
    icsa:vendor "GE" ;
    icsa:year 2015 .

icsa-res:ICSA-15-258-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-258-04" ;
    dcterms:issued "2015-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Stack-Based Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2014-9202" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2014-9202 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WebAccess versions affected: WebAccess Version 8.0 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-258-04" ;
    icsa:vendor "Advantech" ;
    icsa:year 2015 .

icsa-res:ICSA-15-260-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-260-01" ;
    dcterms:issued "2015-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Harman-Kardon Uconnect Vulnerability" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2015-5611" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2015-5611 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Uconnect" ;
    icsa:productDistribution "United States, North America, Europe" ;
    icsa:productsAffected "UConnect 8.4AN/RA3/RA4 infotainment systems versions affected: 2013-2015 Ram 1500/2500/3500/4500/5500 |2013-2015 Dodge Viper |2014/15 Jeep Cherokee/Gr | Cherokee |2014/15 Dodge Durango |2015 Chrysler 200/300 |2015 Dodge Challenger |2015 Dodge Charger | 2015 Jeep Renegade." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-260-01" ;
    icsa:vendor "Harman-Kardon, Fiat-Chrysler Automobile US LLC" ;
    icsa:year 2015 .

icsa-res:ICSA-15-265-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-265-01" ;
    dcterms:issued "2015-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Resource Data Management Privilege Escalation Vulnerability" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Healthcare and Public Health; Information Technology" ;
    icsa:cveNumber "CVE-2015-6470; CVE-2015-6468" ;
    icsa:cweNumber "CWE-269; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2015-6468,
        cve-res:CVE-2015-6470 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Data Manager" ;
    icsa:productDistribution "United Kingdom, United States, Asia" ;
    icsa:productsAffected "Resource Data Management versions affected: Data Manager - Versions prior to 2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-265-01" ;
    icsa:vendor "Resource Data Management" ;
    icsa:year 2015 .

icsa-res:ICSA-15-265-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-265-02" ;
    dcterms:issued "2015-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "IBC Solar ServeMaster Source Code Vulnerability" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-6469; CVE-2015-6474; CVE-2015-6475" ;
    icsa:cweNumber "CWE-79; CWE-256; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2015-6469,
        cve-res:CVE-2015-6474,
        cve-res:CVE-2015-6475 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-256,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ServeMaster" ;
    icsa:productDistribution "Austria, China, Czech Republic, Germany, Spain, France, United Kingdom, India, Italy, Japan, Malaysia, Netherlands, Poland, Portuga,l Romania, Turkey, Asia, Europe" ;
    icsa:productsAffected "IBC Solar ServeMaster TLP+ | Danfoss TLX Pro+." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-265-02" ;
    icsa:vendor "IBC Solar" ;
    icsa:year 2015 .

icsa-res:ICSA-15-265-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-265-03" ;
    dcterms:issued "2015-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Janitza UMG Power Quality Measuring Products Vulnerabilities" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-3968; CVE-2015-3972; CVE-2015-3969; CVE-2015-3970; CVE-2015-3967; CVE-2015-3973; CVE-2015-3971" ;
    icsa:cweNumber "CWE-352; CWE-200; CWE-79; CWE-521; CWE-330; CWE-215; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2015-3967,
        cve-res:CVE-2015-3968,
        cve-res:CVE-2015-3969,
        cve-res:CVE-2015-3970,
        cve-res:CVE-2015-3971,
        cve-res:CVE-2015-3972,
        cve-res:CVE-2015-3973 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-215,
        cwe-res:CWE-259,
        cwe-res:CWE-330,
        cwe-res:CWE-352,
        cwe-res:CWE-521,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UMG Power Quality Measuring Products" ;
    icsa:productDistribution "Asia, Europe" ;
    icsa:productsAffected "Janitza versions affected: UMG 508 |UMG 509 |UMG 511 |UMG 604 | UMG 605." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-265-03" ;
    icsa:vendor "Janitza" ;
    icsa:year 2015 .

icsa-res:ICSA-15-267-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-267-01" ;
    dcterms:issued "2015-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Endress+Hauser Fieldcare/CodeWrights HART Comm DTM XML Injection Vulnerability" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-6463" ;
    icsa:cweNumber "CWE-91" ;
    icsa:hasCVE cve-res:CVE-2015-6463 ;
    icsa:hasCWE cwe-res:CWE-91 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Fieldcare/CodeWrights HART Comm DTM" ;
    icsa:productDistribution "Germany, Switzerland" ;
    icsa:productsAffected "All HART DTM components relying on Fieldcare and a CodeWrights HART Comm DTM are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-267-01" ;
    icsa:vendor "Endress+Hauser, CodeWrights GmbH" ;
    icsa:year 2015 .

icsa-res:ICSA-15-272-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-272-01" ;
    dcterms:issued "2015-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Experion PKS Directory Traversal Vulnerability" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2007-6483" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2007-6483 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Experion PKS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Honeywell Experion PKS software releases versions affected: Release 310.x | below" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-272-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2015 .

icsa-res:ICSA-15-274-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-274-01" ;
    dcterms:issued "2015-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron Multiple Product Vulnerabilities" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2015-1015; CVE-2015-0988; CVE-2015-0987" ;
    icsa:cweNumber "CWE-319; CWE-257" ;
    icsa:hasCVE cve-res:CVE-2015-0987,
        cve-res:CVE-2015-0988,
        cve-res:CVE-2015-1015 ;
    icsa:hasCWE cwe-res:CWE-257,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Omron Corporation versions affected: CX-Programmer software and versions prior to Version 9.6 |CJ2M Series PLC and versions prior to Version 2.1 | CJ2H Series PLC and versions prior to Version 1.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-274-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2015 .

icsa-res:ICSA-15-274-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-274-02A" ;
    dcterms:issued "2015-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Israel" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2015-6478; CVE-2015-7939; CVE-2015-7905" ;
    icsa:cweNumber "CWE-94; CWE-623" ;
    icsa:hasCVE cve-res:CVE-2015-6478,
        cve-res:CVE-2015-7905,
        cve-res:CVE-2015-7939 ;
    icsa:hasCWE cwe-res:CWE-623,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VisiLogic OPLC IDE" ;
    icsa:productDistribution "Israel, United States" ;
    icsa:productsAffected "Unitronics versions affected: Unitronics ViLogic OPLC IDE Version 9.8.0.00 and previous." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-274-02A" ;
    icsa:vendor "Unitronics" ;
    icsa:year 2015 .

icsa-res:ICSA-15-286-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-286-01" ;
    dcterms:issued "2015-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nordex NC2 XSS Vulnerability" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-6477" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2015-6477 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NC2" ;
    icsa:productDistribution "China, Germany, United States, Europe" ;
    icsa:productsAffected "Nordex NC2 versions affected: Nordex Control 2 (NC2) SCADA V16 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-286-01" ;
    icsa:vendor "Nordex" ;
    icsa:year 2015 .

icsa-res:ICSA-15-288-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-288-01" ;
    dcterms:issued "2015-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S CODESYS Runtime Toolkit Null Pointer Dereference Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2015-6482" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2015-6482 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Runtime Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS software versions affected: CODESYS Runtime Toolkit and versions prior to Version 2.4.7.48." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-288-01" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2015 .

icsa-res:ICSA-15-293-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-293-01" ;
    dcterms:issued "2015-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "IniNet Solutions embeddedWebServer Cleartext Storage Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2015-1005" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2015-1005 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "embeddedWebServer" ;
    icsa:productDistribution "Switzerland, Europe" ;
    icsa:productsAffected "eWebServer versions affected: IniNet Solutions GmbH's eWebServer for Windows CE and versions prior to Version 2.02.IniNet Solutions GmbH's eWebServer a third-party software that are used in industrial control system devices. The IniNet Solutions GmbH's eWebServer - known to be used in Baumuller: Baumuller Box PC bmaXX PCC BMP-03-0000 | firmware Version 2015-03-11_PCC-03_v1.6 |Baumuller Box PC bmaXX PCC BMP-03-120R | firmware Version 2015-03-11_PCC-03_v1.6 | Baumuller Box PC bmaXX PCC BMP-03-150R | firmware Version 2015-03-11_PCC-03_v1.6. The IniNet Solutions GmbH's eWebServer - known to be compatible with Beckhoff: Beckhoff Embedded PC | series CX1010 |Beckhoff Embedded PC | series CX1020 |Beckhoff Embedded PC | series CX1030 |Beckhoff Embedded PC | series CX2000 |Beckhoff Embedded PC | series CX5100 |Beckhoff Embedded PC | series CX5000 |Beckhoff Embedded PC | series CX9000 |Beckhoff Embedded PC | series CX9010 |Beckhoff CX9020 | Basic CPU module | Beckhoff Embedded PC CX8090." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-293-01" ;
    icsa:vendor "IniNet Solutions GmbH" ;
    icsa:year 2015 .

icsa-res:ICSA-15-293-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-293-02" ;
    dcterms:issued "2015-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "IniNet Solutions SCADA Web Server Vulnerabilities" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2015-1003; CVE-2015-1002; CVE-2015-1001" ;
    icsa:cweNumber "CWE-177; CWE-22; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2015-1001,
        cve-res:CVE-2015-1002,
        cve-res:CVE-2015-1003 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-177,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA Web Server" ;
    icsa:productDistribution "Europe" ;
    icsa:productsAffected "SCADA Web Server versions affected: IniNet Solutions GmbH's SCADA Web Server and versions prior to Version 2.02. IniNet Solutions GmbH's SCADA Web Server a third-party softwareare that used in industrial control system devices. The IniNet Solutions GmbH's SCADA Web Server - known to be compatible with Beckhoff: Beckhoff Embedded PC | series CX1010 |Beckhoff Embedded PC | series CX1020 |Beckhoff Embedded PC | series CX1030 |Beckhoff Embedded PC | series CX2000 |Beckhoff Embedded PC | series CX5100 | Beckhoff Embedded PC | series CX5000." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-293-02" ;
    icsa:vendor "IniNet Solutions GmbH" ;
    icsa:year 2015 .

icsa-res:ICSA-15-293-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-293-03" ;
    dcterms:issued "2015-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S CODESYS Gateway Null Pointer Exception Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2015-6484" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2015-6484 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Gateway Server versions affected: CODESYS Gateway Server | Version 2.3.9.47 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-293-03" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2015 .

icsa-res:ICSA-15-295-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-295-01" ;
    dcterms:issued "2015-10-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton's Cooper Devices Improper Ethernet Frame Padding Vulnerability" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-6471" ;
    icsa:cweNumber "CWE-226" ;
    icsa:hasCVE cve-res:CVE-2015-6471 ;
    icsa:hasCWE cwe-res:CWE-226 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cooper Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Eaton's Cooper Power Systems versions affected: Previous versions of Eaton's Cooper Power Series Form 6 control | Idea/IdeaPLUS relays with Ethernet using Pro View 4.0 through Pro View 5.0 firmware versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-295-01" ;
    icsa:vendor "Eaton" ;
    icsa:year 2015 .

icsa-res:ICSA-15-300-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-300-01" ;
    dcterms:issued "2015-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RuggedCom Improper Ethernet Frame Padding Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2015-7836" ;
    icsa:cweNumber "CWE-226" ;
    icsa:hasCVE cve-res:CVE-2015-7836 ;
    icsa:hasCWE cwe-res:CWE-226 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RuggedCom" ;
    icsa:productDistribution "Germany, Georgia" ;
    icsa:productsAffected "Siemens product versions affected: ROS: all versions prior to 4.2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-300-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-300-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-300-02A" ;
    dcterms:issued "2015-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Infinite Automation Systems Mango Automation Vulnerabilities (Update A)" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2015-7900; CVE-2015-7904; CVE-2015-7902; CVE-2015-6493; CVE-2015-6494; CVE-2015-7901; CVE-2015-7903" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-89; CWE-79; CWE-204; CWE-215; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2015-6493,
        cve-res:CVE-2015-6494,
        cve-res:CVE-2015-7900,
        cve-res:CVE-2015-7901,
        cve-res:CVE-2015-7902,
        cve-res:CVE-2015-7903,
        cve-res:CVE-2015-7904 ;
    icsa:hasCWE cwe-res:CWE-204,
        cwe-res:CWE-215,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mango Automation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mango Automation versions affected: Mango Automation Version 2.5.0 through Version 2.6.0 beta (builds prior to 430) | Mango Automation versions prior to Version 2.7.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-300-02A" ;
    icsa:vendor "Infinite Automation Systems" ;
    icsa:year 2015 .

icsa-res:ICSA-15-300-03A a icsa:ICSA ;
    dcterms:identifier "ICSA-15-300-03A" ;
    dcterms:issued "2015-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Micrologix 1100 and 1400 PLC Systems Vulnerabilities (Update A)" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-6491; CVE-2015-6492; CVE-2015-6488; CVE-2015-6490; CVE-2015-6486" ;
    icsa:cweNumber "CWE-434; CWE-89; CWE-79; CWE-121; CWE-119" ;
    icsa:hasCVE cve-res:CVE-2015-6486,
        cve-res:CVE-2015-6488,
        cve-res:CVE-2015-6490,
        cve-res:CVE-2015-6491,
        cve-res:CVE-2015-6492 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-434,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Micrologix 1100 and 1400 PLC Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Allen-Bradley MicroLogix 1100 controller platforms versions affected: 1763-L16AWA | Series B | Version 14.000 and prior versions |1763-L16BBB | Series B | Version 14.000 and prior versions |1763-L16BWA | Series B | Version 14.000 and prior versions |1763-L16DWD | Series B | Version 14.000 and prior versions |1763-L16AWA | Series A | Version 14.000 and prior versions |1763-L16BBB | Series A | Version 14.000 and prior versions |1763-L16BWA | Series A | Version 14.000 and prior versions | 1763-L16DWD | Series A | Version 14.000 and prior versions. Allen-Bradley MicroLogix 1400 controller platforms versions affected: 1766-L32AWA | Series B | Version 15.002 and prior versions |1766-L32AWAA | Series B | Version 15.002 and prior versions |1766-L32BWA | Series B | Version 15.002 and prior versions |1766-L32BWAA | Series B | Version 15.002 and prior versions |1766-L32BXB | Series B | Version 15.002 and prior versions |1766-L32BXBA | Series B | Version 15.002 and prior versions |1766-L32AWA | Series A | Version 15.002 and prior versions |1766-L32AWAA | Series A | Version 15.002 and prior versions |1766-LK32BWA | Series A | Version 15.002 and prior versions |1766-L32BWAA | Series A | Version 15.002 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-300-03A" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2015 .

icsa-res:ICSA-15-309-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-309-01" ;
    dcterms:issued "2015-11-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech EKI Hard-coded SSH Keys Vulnerability" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2015-6476" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2015-6476 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EKI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EKI-136* product line prior to firmware version 1.27 |EKI-132* product line prior to firmware version 1.98 | EKI-122*-BE product line prior to firmware version 1.65." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-309-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2015 .

icsa-res:ICSA-15-309-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-309-02" ;
    dcterms:issued "2015-11-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Midas Gas Detector Vulnerabilities" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7908; CVE-2015-7907" ;
    icsa:cweNumber "CWE-22; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2015-7907,
        cve-res:CVE-2015-7908 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Midas Gas Detector" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Midas versions affected: Midas | Version 1.13b1 and prior versions |Midas Black | Version 2.13b1 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-309-02" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2015 .

icsa-res:ICSA-15-321-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-321-01" ;
    dcterms:issued "2015-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Exemys Web Server Bypass Vulnerability" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Argentina" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Financial Services; Healthcare and Public Health; Information Technology" ;
    icsa:cveNumber "CVE-2015-7910" ;
    icsa:cweNumber "CWE-592" ;
    icsa:hasCVE cve-res:CVE-2015-7910 ;
    icsa:hasCWE cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Web Server" ;
    icsa:productDistribution "Argentina, Canada, United States, South America, Asia, Europe" ;
    icsa:productsAffected "Exemys product versions affected: Exemys Telemetry Web Server." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-321-01" ;
    icsa:vendor "Exemys" ;
    icsa:year 2015 .

icsa-res:ICSA-15-323-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-323-01" ;
    dcterms:issued "2015-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tibbo AggreGate Platform Vulnerabilities" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Healthcare and Public Health; Transportation Systems;; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7913; CVE-2015-7912" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2015-7912,
        cve-res:CVE-2015-7913 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AggreGate Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AggreGate Platform versions affected: AggreGate Platform Version 5.21.02 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-323-01" ;
    icsa:vendor "Tibbo" ;
    icsa:year 2015 .

icsa-res:ICSA-15-328-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-328-01" ;
    dcterms:issued "2015-11-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa OnCell Central Manager Vulnerabilities" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2015-6481; CVE-2015-6480" ;
    icsa:cweNumber "CWE-798; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2015-6480,
        cve-res:CVE-2015-6481 ;
    icsa:hasCWE cwe-res:CWE-592,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OnCell Central Manager" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa OnCell Central Manager Software versions affected: OnCell Central Manager Software prior to version 2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-328-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2015 .

icsa-res:ICSA-15-335-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-335-01" ;
    dcterms:issued "2015-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Saia Burgess Controls PCD Controller Hard-coded Password Vulnerability" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2015-7911" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2015-7911 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PCD Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Saia Burgess Controls affected: Saia PCD Controllers: PCD1.M0xx0/M2xx0 | PCD2.M5xx0 | PCD3.Mxxx0 | PCD3.Mxx60 | PCD7.D4xxxT5F | PCD7.D4xxV | PCD7.D4xxD | PCD7.D4xxWTPF versions prior to 1.24.50 | PCD3.T665 | PCD3.T666 versions prior to 1.24.41 | PCD7.D4xxxT5F versions prior to 1.24.50 | PCD7.D4xxV VGA MB Panels versions prior to 1.24.50 | PCD7.D4xxD SVGA MB Panels versions prior to 1.24.50 | | PCD7.D4xxWTPF WVGA MB Panels versions prior to 1.24.50." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-335-01" ;
    icsa:vendor "Saia Burgess Controls" ;
    icsa:year 2015 .

icsa-res:ICSA-15-335-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-335-02" ;
    dcterms:issued "2015-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric ProClima ActiveX Control Vulnerabilities" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2015-7918" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2015-7918 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ProClima ActiveX" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Schneider Electric affected versions of ProClima: Version 6.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-335-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-335-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-335-03" ;
    dcterms:issued "2015-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2015-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Communication Processor Vulnerability (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2015-8214" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2015-8214 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Communication Processor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens Communication Processor modules in affect the following versions of Siemens' SIMATIC S7-300/S7-400 CPUs: SIMATIC NET CP 342-5 (incl. SIPLUS variants): All versions SIMATIC CP 343-1 Advanced (incl. SIPLUS variants): All firmware versions prior to v3.0.44 | SIMATIC CP 343-1 Lean (incl. SIPLUS variants): All firmware versions prior to v3.1.1 | SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants): All versions prior to v3.1.1 SIMATIC NET CP 443-1 Advanced (incl. SIPLUS variants): All versions prior to v3.2.9 SIMATIC NET CP 443-1 Standard (incl. SIPLUS variants): All versions prior to v3.2.9 SIMATIC NET CP 443-5 Basic (incl. SIPLUS variants): All versions SIMATIC NET CP 443-5 Extended: All versions TIM 3V-IE / TIM 3V-IE Advanced (incl. SIPLUS NET variants): All versions prior to v2.6.0 TIM 3V-IE DNP3 (incl. SIPLUS NET variants): All versions prior to v3.1.0 TIM 4R-IE (incl. SIPLUS NET variants): All versions prior to v2.6.0 TIM 4R-IE DNP3 (incl. SIPLUS NET variants): All versions prior to v3.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-335-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-15-337-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-337-01" ;
    dcterms:issued "2015-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "SearchBlox File Exfiltration Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2015-7919" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2015-7919 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SearchBlox" ;
    icsa:productDistribution "United States, Europe" ;
    icsa:productsAffected "SearchBlox version affected: SearchBlox Version 8.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-337-01" ;
    icsa:vendor "SearchBlox" ;
    icsa:year 2015 .

icsa-res:ICSA-15-337-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-337-02" ;
    dcterms:issued "2015-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hospira Multiple Products Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2015-7909" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2015-7909 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "LifeCare PCA Infusion System | Version 5.07 running CE Version 1.0 or earlier - released prior to July 2009 | Plum A+ Infusion System - Version 13.40 running CE - Version 1.0 or earlier - released prior to March 2009 | Plum A+3 Infusion System - Version 13.40 running CE Version 1.0 or earlier - released prior to March 2009." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-337-02" ;
    icsa:vendor "Hospira" ;
    icsa:year 2015 .

icsa-res:ICSA-15-337-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-337-03" ;
    dcterms:issued "2015-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pacom 1000 CCU GMS System Cryptographic Implementation Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Financial Services; Government Facilities; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-3260" ;
    icsa:cweNumber "CWE-310" ;
    icsa:hasCVE cve-res:CVE-2014-3260 ;
    icsa:hasCWE cwe-res:CWE-310 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1000 CCU GMS System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Pacom GMS systems affected: Pacom 1000 CCU | RTU." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-337-03" ;
    icsa:vendor "Pacom" ;
    icsa:year 2015 .

icsa-res:ICSA-15-342-01C a icsa:ICSA ;
    dcterms:identifier "ICSA-15-342-01C" ;
    dcterms:issued "2015-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-2287" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2016-2287 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "442SR Wind Turbine" ;
    icsa:productDistribution "United Kingdom, Italy, Japan, Myanmar, Philippines, Vietnam" ;
    icsa:productsAffected "XZERES product affected: 442SR Wind Turbine." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-342-01C" ;
    icsa:vendor "XZERES" ;
    icsa:year 2015 .

icsa-res:ICSA-15-342-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-342-02" ;
    dcterms:issued "2015-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "LOYTEC Router Information Exposure Vulnerability" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2015-7906" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2015-7906 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOYTEC routers" ;
    icsa:productDistribution "Germany, France" ;
    icsa:productsAffected "LOYTEC routers affected: LIP-3ECTB Version 6.0.1 |LINX-100 |LVIS-3E100 | LIP-ME201" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-342-02" ;
    icsa:vendor "LOYTEC electronics GmbH" ;
    icsa:year 2015 .

icsa-res:ICSA-15-344-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-15-344-01B" ;
    dcterms:issued "2015-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech EKI Vulnerabilities (Update B)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2014-6271; CVE-2015-7938; CVE-2012-2152; CVE-2014-0160" ;
    icsa:cweNumber "CWE-119; CWE-78; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2012-2152,
        cve-res:CVE-2014-0160,
        cve-res:CVE-2014-6271,
        cve-res:CVE-2015-7938 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-592,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EKI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Advantech reports that the vulnerability affects the following products: EKI-132x platform devices." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-344-01B" ;
    icsa:vendor "Advantech" ;
    icsa:year 2015 .

icsa-res:ICSA-15-344-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-344-02" ;
    dcterms:issued "2015-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Open Automation Software OPC Systems NET DLL Hijacking Vulnerability" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7917" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2015-7917 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC Systems NET" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "OPC Systems .NET versions are affected: OPC Systems.NET Version 8.00.0023 and previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-344-02" ;
    icsa:vendor "Open Automation Software" ;
    icsa:year 2015 .

icsa-res:ICSA-15-349-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-349-01" ;
    dcterms:issued "2015-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Adcon Telemetry A840 Vulnerabilities" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7932; CVE-2015-7934; CVE-2015-7930; CVE-2015-7931" ;
    icsa:cweNumber "CWE-798; CWE-319; CWE-200; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2015-7930,
        cve-res:CVE-2015-7931,
        cve-res:CVE-2015-7932,
        cve-res:CVE-2015-7934 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-287,
        cwe-res:CWE-319,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "A840" ;
    icsa:productDistribution "United States, Europe" ;
    icsa:productsAffected "Adcon Telemetry product is affected: A840 Telemetry Gateway Base Station - all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-349-01" ;
    icsa:vendor "Adcon Telemetry" ;
    icsa:year 2015 .

icsa-res:ICSA-15-351-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-351-01" ;
    dcterms:issued "2015-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M340 Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Defense Industrial Base; Energy; Government Facilities; Nuclear Reactors Materials and Waste; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7937" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2015-7937 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon M340" ;
    icsa:productDistribution "China, India, Russia, United States, Europe" ;
    icsa:productsAffected "Schneider Electric Modicon M340 PLC products: BMXNOC0401 | BMXNOE0100 | BMXNOE0100H | BMXNOE0110 | BMXNOE0110H | BMXNOR0200 | BMXNOR0200H | BMXP342020 | BMXP342020H | BMXP342030 | BMXP3420302 | BMXP3420302H | BMXPRA0100." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-351-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2015 .

icsa-res:ICSA-15-351-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-351-02" ;
    dcterms:issued "2015-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Motorola MOSCAD SCADA IP Gateway Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7936; CVE-2015-7935" ;
    icsa:cweNumber "CWE-352; CWE-98" ;
    icsa:hasCVE cve-res:CVE-2015-7935,
        cve-res:CVE-2015-7936 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-98 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MOSCAD SCADA IP Gateway" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "MOSCAD IP Gateway versions are affected: MOSCAD IP Gateway - all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-351-02" ;
    icsa:vendor "Motorola Solutions" ;
    icsa:year 2015 .

icsa-res:ICSA-15-351-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-351-03" ;
    dcterms:issued "2015-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "eWON Vulnerabilities" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Belgium" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7925; CVE-2015-7928; CVE-2015-7929; CVE-2015-7927; CVE-2015-7924; CVE-2015-7926" ;
    icsa:cweNumber "CWE-352; CWE-79; CWE-274; CWE-613; CWE-598; CWE-255" ;
    icsa:hasCVE cve-res:CVE-2015-7924,
        cve-res:CVE-2015-7925,
        cve-res:CVE-2015-7926,
        cve-res:CVE-2015-7927,
        cve-res:CVE-2015-7928,
        cve-res:CVE-2015-7929 ;
    icsa:hasCWE cwe-res:CWE-255,
        cwe-res:CWE-274,
        cwe-res:CWE-352,
        cwe-res:CWE-598,
        cwe-res:CWE-613,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "eWON" ;
    icsa:productDistribution "Japan, United States" ;
    icsa:productsAffected "eWON router firmware versions are affected: eWON firmware versions prior to 10.1s0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-351-03" ;
    icsa:vendor "eWON sa" ;
    icsa:year 2015 .

icsa-res:ICSA-15-356-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-15-356-01" ;
    dcterms:issued "2015-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX-based Devices NTP Vulnerabilities" ;
    icsa:CVSSScore "4.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2015-7704; CVE-2015-5300; CVE-2015-7855; CVE-2015-7871" ;
    icsa:cweNumber "CWE-20; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2015-5300,
        cve-res:CVE-2015-7704,
        cve-res:CVE-2015-7855,
        cve-res:CVE-2015-7871 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX-based Devices NTP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens RUGGEDCOM ROX versions affected when NTP service is activated: ROX II: All versions prior to 2.9.0 | ROX I: All versions.The NTP service is deactivated on ROX I and ROX II-based devices by default." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-15-356-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2015 .

icsa-res:ICSA-16-014-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-014-01" ;
    dcterms:issued "2016-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Vulnerabilities" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2015-3946; CVE-2016-0851; CVE-2015-3943; CVE-2015-3947; CVE-2016-0858; CVE-2016-0852; CVE-2016-0854; CVE-2016-0855; CVE-2016-0859; CVE-2016-0860; CVE-2016-0853; CVE-2016-0857; CVE-2016-0856; CVE-2015-6467; CVE-2015-3948" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-680; CWE-788; CWE-89; CWE-352; CWE-122; CWE-79; CWE-284; CWE-20; CWE-362; CWE-121; CWE-73; CWE-312; CWE-119" ;
    icsa:hasCVE cve-res:CVE-2015-3943,
        cve-res:CVE-2015-3946,
        cve-res:CVE-2015-3947,
        cve-res:CVE-2015-3948,
        cve-res:CVE-2015-6467,
        cve-res:CVE-2016-0851,
        cve-res:CVE-2016-0852,
        cve-res:CVE-2016-0853,
        cve-res:CVE-2016-0854,
        cve-res:CVE-2016-0855,
        cve-res:CVE-2016-0856,
        cve-res:CVE-2016-0857,
        cve-res:CVE-2016-0858,
        cve-res:CVE-2016-0859,
        cve-res:CVE-2016-0860 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-312,
        cwe-res:CWE-352,
        cwe-res:CWE-362,
        cwe-res:CWE-434,
        cwe-res:CWE-680,
        cwe-res:CWE-73,
        cwe-res:CWE-788,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Advantech affected versions of WebAccess: WebAccess Version 8.0 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-014-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2016 .

icsa-res:ICSA-16-019-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-019-01" ;
    dcterms:issued "2016-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OZW672 and OZW772 XSS Vulnerability" ;
    icsa:CVSSScore "4.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-1488" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2016-1488 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OZW672 and OZW772 XSS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected products: OZW672: All versions prior to V6.00OZW772: All versions prior to V6.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-019-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-021-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-021-01" ;
    dcterms:issued "2016-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "CAREL PlantVisor Enhanced Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2015-0867" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2015-0867 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PlantVisor Enhanced" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CAREL versions: PlantVisorEnhanced." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-021-01" ;
    icsa:vendor "CAREL" ;
    icsa:year 2016 .

icsa-res:ICSA-16-026-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-026-01" ;
    dcterms:issued "2016-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "MICROSYS PROMOTIC Memory Corruption Vulnerability" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-0869" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2016-0869 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PROMOTIC" ;
    icsa:productDistribution "Bulgaria, Hungary, Poland, Romania, Serbia, Slovenia" ;
    icsa:productsAffected "ProductsMICROSYS versions of PROMOTIC affected: PROMOTIC versions prior to version 8.3.11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-026-01" ;
    icsa:vendor "MICROSYS" ;
    icsa:year 2016 .

icsa-res:ICSA-16-026-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-026-02" ;
    dcterms:issued "2016-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix 1100 PLC Overflow Vulnerability" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-0868" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-0868 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix 1100 PLC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Allen-Bradley MicroLogix 1100 controller platforms are affected: 1763-L16AWA | Series B | Version 15.000 and prior versions | 1763-L16BBB | Series B | Version 15.000 and prior versions | 1763-L16BWA | Series B | Version 15.000 and prior versions | 1763-L16DWD | Series B | Version 15.000 and prior versions |1763-L16AWA | Series A | Version 15.000 and prior versions | 1763-L16BBB | Series A | Version 15.000 and prior versions | 1763-L16BWA | Series A | Version 15.000 and prior versions | 1763-L16DWD | Series A | Version 15.000 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-026-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-028-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-028-01A" ;
    dcterms:issued "2016-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Westermo Industrial Switch Hard-coded Certificate Vulnerability (Update A)" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7923" ;
    icsa:cweNumber "CWE-255" ;
    icsa:hasCVE cve-res:CVE-2015-7923 ;
    icsa:hasCWE cwe-res:CWE-255 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Switch" ;
    icsa:productDistribution "Austria, Belgium, China, Germany, France, United Kingdom, Sweden, Switzerland, Singapore, Taiwan, United States" ;
    icsa:productsAffected "Westermo Products are affected: WeOS versions older than Version 4.19.0 (indication | subject to change).This software is used within the following Westermo Product Lines: Falcon |Lynx |Wolverine |Corazon |Viper | Redfox series." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-028-01A" ;
    icsa:vendor "Westermo" ;
    icsa:year 2016 .

icsa-res:ICSA-16-033-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-033-01" ;
    dcterms:issued "2016-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sauter moduWeb Vision Vulnerabilities" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2015-7915; CVE-2015-7916; CVE-2015-7914" ;
    icsa:cweNumber "CWE-79; CWE-319; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2015-7914,
        cve-res:CVE-2015-7915,
        cve-res:CVE-2015-7916 ;
    icsa:hasCWE cwe-res:CWE-311,
        cwe-res:CWE-319,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "moduWeb Vision" ;
    icsa:productDistribution "Switzerland, United States, Asia, Europe" ;
    icsa:productsAffected "Sauter moduWeb Vision applications affected: EY-WS505F0x0 moduWeb Vision Versions prior to 1.6.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-033-01" ;
    icsa:vendor "SAUTER Controls" ;
    icsa:year 2016 .

icsa-res:ICSA-16-033-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-033-02" ;
    dcterms:issued "2016-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE SNMP/Web Interface Vulnerabilities" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2016-0861; CVE-2016-0862" ;
    icsa:cweNumber "CWE-77; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2016-0861,
        cve-res:CVE-2016-0862 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SNMP/Web Interface" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SNMP/Web Interface adapter versions affected: SNMP/Web Interface adapter | firmware versions prior to Version 4.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-033-02" ;
    icsa:vendor "GE" ;
    icsa:year 2016 .

icsa-res:ICSA-16-040-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-040-01" ;
    dcterms:issued "2016-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tollgrade SmartGrid Sensor Management System Software Vulnerabilities" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-0864; CVE-2016-0863; CVE-2016-0865; CVE-2016-0866" ;
    icsa:cweNumber "CWE-79; CWE-352; CWE-200; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2016-0863,
        cve-res:CVE-2016-0864,
        cve-res:CVE-2016-0865,
        cve-res:CVE-2016-0866 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-352,
        cwe-res:CWE-522,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SmartGrid Sensor Management System Software" ;
    icsa:productDistribution "Germany, United Kingdom, United States, North America, South America, Europe" ;
    icsa:productsAffected "LightHouse SMS Software versions affected: Version 4.1.0 Build 16 | Versions older than Version 5.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-040-01" ;
    icsa:vendor "Tollgrade Communications, Inc." ;
    icsa:year 2016 .

icsa-res:ICSA-16-040-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-040-02" ;
    dcterms:issued "2016-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 CPU Vulnerabilities" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2016-2200; CVE-2016-2201" ;
    icsa:cweNumber "CWE-691; CWE-340" ;
    icsa:hasCVE cve-res:CVE-2016-2200,
        cve-res:CVE-2016-2201 ;
    icsa:hasCWE cwe-res:CWE-340,
        cwe-res:CWE-691 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 CPU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SIMATIC S7-1500 CPU versions affected: Siemens SIMATIC S7-1500 CPU family | versions prior to Version 1.8.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-040-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-042-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-042-01A" ;
    dcterms:issued "2016-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa EDR-G903 Secure Router Vulnerabilities (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Emergency Services; Energy" ;
    icsa:cveNumber "CVE-2016-0876; CVE-2016-0878; CVE-2016-0879; CVE-2016-0875; CVE-2016-0877" ;
    icsa:cweNumber "CWE-401; CWE-264; CWE-284; CWE-256; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2016-0875,
        cve-res:CVE-2016-0876,
        cve-res:CVE-2016-0877,
        cve-res:CVE-2016-0878,
        cve-res:CVE-2016-0879 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-264,
        cwe-res:CWE-284,
        cwe-res:CWE-400,
        cwe-res:CWE-401 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EDR-G903 Secure Router" ;
    icsa:productDistribution "Argentina, Brazil, Chile, China, Germany, France, United Kingdom, India, Peru, Russia, Taiwan, United States, Europe" ;
    icsa:productsAffected "Moxa Secure Routers affected: EDR-G903 Versions V3.4.11 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-042-01A" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-049-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-049-01" ;
    dcterms:issued "2016-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "B+B SmartWorx VESP211 Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-2275" ;
    icsa:cweNumber "CWE-603" ;
    icsa:hasCVE cve-res:CVE-2016-2275 ;
    icsa:hasCWE cwe-res:CWE-603 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VESP211" ;
    icsa:productDistribution "Czech Republic, Ireland, Taiwan, North America, South America, Europe" ;
    icsa:productsAffected "VESP211 serial servers affected: Model: VESP211-EU Firmware Version: 1.7.2 | Model: VESP211-232 Firmware Version: 1.7.2 | Model: VESP211-232 Firmware Version: 1.5.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-049-01" ;
    icsa:vendor "B+B SmartWorx" ;
    icsa:year 2016 .

icsa-res:ICSA-16-049-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-049-02A" ;
    dcterms:issued "2016-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "AMX Multiple Products Credential Management Vulnerabilities (Update A)" ;
    icsa:CVSSScore "7.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2015-8362; CVE-2016-1984" ;
    icsa:cweNumber "CWE-255" ;
    icsa:hasCVE cve-res:CVE-2015-8362,
        cve-res:CVE-2016-1984 ;
    icsa:hasCWE cwe-res:CWE-255 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AMX Multiple Products Credential Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AMX multimedia devices affected by vulnerability CVE-2015-8362: NX-1200 | NX-2200 | NX-3200 | NX-4200 NetLinx Controller | versions prior to Version 1.4.65 |Massio ControlPads MCP-10x | versions prior to Version 1.4.65 |Enova DVX-x2xx | versions prior to Version 1.4.65 |DVX-31xxHD-SP (-T) | versions prior Version 4.8.331 |DVX-21xxHD-SP (-T) | versions prior Version 4.8.331 |DVX-2100HD-SP-T Master | versions prior to Version 4.1.420 (Hotfix firmware version) |Enova DGX 100 NX Series Master | versions prior to Version 1.4.72 (Hotfix firmware version) |Enova DGX 8/16/32/64 NX Series Master | versions prior to Version 1.4.72 (Hotfix firmware version) |Enova DGX 8/16/32/64 NI Series Master | versions prior to Version 4.2.397 (Hotfix firmware version) |NI-700 | NI-900 Master Controllers (64M RAM) | versions prior to Version 4.1.419 |NI-700 | NI-900 Master Controllers (32M RAM) | versions prior to Version 3.60.456 (Hotfix firmware version) |NI-2100 | NI-3100 | NI-4100 | NI-2100 with ICSNet | NI-3100 with ICSNet | NI-3100/256 |NI-3100/256 with ICSNet | NI-4100/256 | versions prior to Version 4.1.419 |NI-3101-SIG Master Controller | versions prior to Version 4.1.419 |NI-2000 | NI-3000 | NI-4000 | versions prior to Version 3.60.456 (Hotfix firmware version) | ME260/64 Duet | versions prior to Version 3.60.456 (Hotfix firmware version). The following AMX multimedia devices are affected by vulnerability CVE-2016-1984: NX-1200 | NX-2200 | NX-3200 | NX-4200 NetLinx Controller | Version 1.4.65 and Version 1.4.66 (Hotfix firmware version) |Massio ControlPads MCP-10x | Version 1.4.65 and Version 1.4.66 (Hotfix firmware version) |Enova DVX-x2xx | Version 1.4.65 and Version 1.4.72 (Hotfix firmware version) |Enova DGX 100 NX Series Master | Version 1.4.72 (Hotfix firmware version) | Enova DGX 8/16/32/64 NX Series Master | Version 1.4.72 (Hotfix firmware version)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-049-02A" ;
    icsa:vendor "AMX, Harman" ;
    icsa:year 2016 .

icsa-res:ICSA-16-056-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-056-01" ;
    dcterms:issued "2016-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Integrated Architecture Builder Access Violation Memory Error" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2277" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2016-2277 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Integrated Architecture Builder" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IAB versions affected: Integrated Architecture Builder | Versions 9.6.0.7 and earlier | Integrated Architecture Builder | Versions 9.7.0.0 and 9.7.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-056-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-061-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-061-01" ;
    dcterms:issued "2016-03-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Building Operation Automation Server Vulnerability" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-2278" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2016-2278 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Building Operation Automation Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric affected products: StruxureWare Building Operations line: Automation Server | V1.7.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-061-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-061-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-061-02" ;
    dcterms:issued "2016-03-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley CompactLogix Reflective Cross-Site Scripting Vulnerability (Update A)" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2279" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2016-2279 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley CompactLogix Reflective" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation affected versions of the Allen Bradley CompactLogix controller platform: 1769-L16ER-BB1B | Version 27.011 and prior | 1769-L18ER-BB1B | Version 27.011 and prior | 1769-L18ERM-BB1B | Version 27.011 and prior | 1769-L24ER-QB1B | Version 27.011 and prior | 1769-L24ER-QBFC1B | Version 27.011 and prior | 1769-L27ERM-QBFC1B | Version 27.011 and prior | 1769-L30ER | Version 27.011 and prior | 1769-L30ERM | Version 27.011 and prior | 1769-L30ER-NSE | Version 27.011 and prior | 1769-L33ER | Version 27.011 and prior | 1769-L33ERM | Version 27.011 and prior | 1769-L36ERM | Version 27.011 and prior | 1769-L23E-QB1B | Version 20.018 and prior (discontinued as of June 2016) | 1769-L23E-QBFC1B | Version 20.018 and prior (discontinued as of June 2016) |1756-EN2F | Series A | all versions | Series B | all versions |1756-EN2T | Series A | all versions | Series B | all versions | Series C | all versions | Series D | Version 10.007 and prior | 1756-EN2TR | Series A | all versions | Series B | all versions |1756-EN3TR | Series A | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-061-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-061-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-061-03" ;
    dcterms:issued "2016-03-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton Lighting Systems EG2 Web Control Authentication Bypass Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2016-2272; CVE-2016-0871" ;
    icsa:cweNumber "CWE-565; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2016-0871,
        cve-res:CVE-2016-2272 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-565 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lighting Systems EG2 Web Control" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Eaton Lighting Systems versions: EG2 Web Control V4.04P and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-061-03" ;
    icsa:vendor "Eaton" ;
    icsa:year 2016 .

icsa-res:ICSA-16-063-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-063-01" ;
    dcterms:issued "2016-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa ioLogik E2200 Series Weak Authentication Practices" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2016-2282; CVE-2016-2283" ;
    icsa:cweNumber "CWE-522; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2016-2282,
        cve-res:CVE-2016-2283 ;
    icsa:hasCWE cwe-res:CWE-326,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ioLogik E2200 Series" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa affected versions of ioLogik: ioLogik E2200 series | versions prior to 3.12 | ioAdmin Configuration Utility | versions prior to 3.18." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-063-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-070-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-070-01" ;
    dcterms:issued "2016-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Telvent RTU Improper Ethernet Frame Padding Vulnerability" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-6485" ;
    icsa:cweNumber "CWE-226" ;
    icsa:hasCVE cve-res:CVE-2015-6485 ;
    icsa:hasCWE cwe-res:CWE-226 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Telvent RTU" ;
    icsa:productDistribution "North America, Europe" ;
    icsa:productsAffected "Schneider Electric Telvent RTUs affected products: Sage 3030M | with firmware prior to C3414-500-S02J2; Sage 1410 | with firmware prior to C3414-500-S02J2; Sage1430 | with firmware prior to C3414-500-S02J2; Sage 1450 | with firmware prior to C3414-500-S02J2; Land AC II-2 | with firmware prior to C3414-500-S02J2; Sage 2300 | with firmware prior to C3413-500-S01; and Sage 2400 | with firmware prior to C3414-500-S02J2 (released March 2015.)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-070-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-070-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-070-02A" ;
    dcterms:issued "2016-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Uniformance PHD Denial Of Service (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2280" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-2280 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Uniformance PHD" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Honeywell versions: Uniformance PHD | versions prior to R310.1.1.2; Uniformance PHD | versions prior to R320.1.0.2; and Uniformance PHD | versions prior to R321.1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-070-02A" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2016 .

icsa-res:ICSA-16-075-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-075-01" ;
    dcterms:issued "2016-03-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 CPU Protection Mechanism Failure" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2016-2846" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2016-2846 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 CPU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected SIMATIC products: SIMATIC S7-1200 CPU family: All versions prior to V4.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-075-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-077-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-077-01A" ;
    dcterms:issued "2016-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Panel Builder 800 DLL Hijacking Vulnerability (Update A)" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2016-2281" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2016-2281 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Panel Builder 800 DLL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB product affected: Panel Builder 800 Version 5.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-077-01A" ;
    icsa:vendor "ABB" ;
    icsa:year 2016 .

icsa-res:ICSA-16-082-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-082-01A" ;
    dcterms:issued "2016-03-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens APOGEE Insight Incorrect File Permissions Vulnerability (Update A)" ;
    icsa:CVSSScore "3.4"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-3155" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2016-3155 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APOGEE Insight" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected product: APOGEE Insight: All versions prior to 3.15." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-082-01A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-084-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-084-01" ;
    dcterms:issued "2016-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cogent DataHub Elevation of Privilege Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Financial Services" ;
    icsa:cveNumber "CVE-2016-2288" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2016-2288 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataHub" ;
    icsa:productDistribution "United Kingdom, United States" ;
    icsa:productsAffected "Cogent affected products: Cogent DataHub version 7.3.9 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-084-01" ;
    icsa:vendor "Cogent Real-Time Systems Inc" ;
    icsa:year 2016 .

icsa-res:ICSA-16-091-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-091-01" ;
    dcterms:issued "2016-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS WebHMI Directory Traversal Vulnerability" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2289" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2016-2289 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebHMI" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "ICONICS product affected: WebHMI Version 9 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-091-01" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2016 .

icsa-res:ICSA-16-096-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-096-01" ;
    dcterms:issued "2016-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pro-face GP-Pro EX HMI Vulnerabilities" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2290; CVE-2016-2291; CVE-2016-7921; CVE-2016-2292" ;
    icsa:cweNumber "CWE-122; CWE-121; CWE-798; CWE-125; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2016-2290,
        cve-res:CVE-2016-2291,
        cve-res:CVE-2016-2292,
        cve-res:CVE-2016-7921 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-592,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro-face GP-Pro EX HMI" ;
    icsa:productDistribution "Australia, India, Asia, Europe, Worldwide" ;
    icsa:productsAffected "Pro-face affected versions of GP-Pro EX: Models: EX-ED | PFXEXEDV | PFXEXEDLS | PFXEXGRPLS; and Versions: 1.00 to Ver. 4.0.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-096-01" ;
    icsa:vendor "Pro-face, Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-103-01C a icsa:ICSA ;
    dcterms:identifier "ICSA-16-103-01C" ;
    dcterms:issued "2016-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products glibc Library Vulnerability (Update C)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Energy; Food and Agriculture; Government Facilities; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7547" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2015-7547 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products glibc Library" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected products: ROX II: V2.3.0-V2.9.0 (inclusive) |APE (Linux): All versions | SINEMA Remote Connect: All versions prior to Version 1.2 | SCALANCE M-800/S615: All versions prior to version 4.02 | Basic RT V13: All versions prior to V13 SP1 Update 9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-103-01C" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-103-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-103-02" ;
    dcterms:issued "2016-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE S613 Denial-of-Service Vulnerability" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Defense Industrial Base; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-3963" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2016-3963 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE S613" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SCALANCE versions affected: SCALANCE S613 (MLFB: 6GK5613-0BA00-2AA3): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-103-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-103-03C a icsa:ICSA ;
    dcterms:identifier "ICSA-16-103-03C" ;
    dcterms:issued "2016-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products DROWN Vulnerability (Update C)" ;
    icsa:CVSSScore "4.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-0800" ;
    icsa:cweNumber "CWE-310" ;
    icsa:hasCVE cve-res:CVE-2016-0800 ;
    icsa:hasCWE cwe-res:CWE-310 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products DROWN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected products: SCALANCE X300 family: All versions prior to V4.1.0 | SCALANCE X414: All versions prior to V3.10.2 | SCALANCE X200 IRT family: All versions prior to V5.3.0 | SCALANCE X200 RNA family: All versions prior to V3.2.5 | SCALANCE X200 family: All versions prior to V5.2.2 | ROX I: All versions not using the mitigations listed in SSA-327980." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-103-03C" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-105-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-105-01" ;
    dcterms:issued "2016-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sierra Wireless ACEmanager Information Exposure Vulnerability" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-6479" ;
    icsa:cweNumber "CWE-538" ;
    icsa:hasCVE cve-res:CVE-2015-6479 ;
    icsa:hasCWE cwe-res:CWE-538 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ACEmanager" ;
    icsa:productDistribution "Canada, China, France, United States, Europe" ;
    icsa:productsAffected "Sierra Wireless versions affected: LS300 running ALEOS 4.4.2 and earlier | GX400 running ALEOS 4.4.2 and earlier | GX440 running ALEOS 4.4.2 and earlier | ES440 running ALEOS 4.4.2 and earlier | GX450 running ALEOS 4.4.2 and earlier | ES450 running ALEOS 4.4.2 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-105-01" ;
    icsa:vendor "Sierra Wireless" ;
    icsa:year 2016 .

icsa-res:ICSA-16-105-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-105-02" ;
    dcterms:issued "2016-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Accuenergy Acuvim II Series AXM-NET Module Vulnerabilities" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-2293; CVE-2016-2294" ;
    icsa:cweNumber "CWE-256; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2016-2293,
        cve-res:CVE-2016-2294 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Acuvim II Series AXM-NET Module" ;
    icsa:productDistribution "Canada, China, United States, North America" ;
    icsa:productsAffected "Accuenergy versions affected: Acuvim II NET Firmware | Version 3.08Acuvim IIR NET Firmware | Version 3.08." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-105-02" ;
    icsa:vendor "Accuenergy" ;
    icsa:year 2016 .

icsa-res:ICSA-16-105-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-105-03" ;
    dcterms:issued "2016-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor Vulnerabilities" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2301; CVE-2016-2306; CVE-2016-2299; CVE-2016-2305; CVE-2016-2303; CVE-2016-2302; CVE-2016-2304; CVE-2016-2300" ;
    icsa:cweNumber "CWE-87; CWE-113; CWE-89; CWE-200; CWE-79; CWE-285; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2016-2299,
        cve-res:CVE-2016-2300,
        cve-res:CVE-2016-2301,
        cve-res:CVE-2016-2302,
        cve-res:CVE-2016-2303,
        cve-res:CVE-2016-2304,
        cve-res:CVE-2016-2305,
        cve-res:CVE-2016-2306 ;
    icsa:hasCWE cwe-res:CWE-113,
        cwe-res:CWE-200,
        cwe-res:CWE-285,
        cwe-res:CWE-319,
        cwe-res:CWE-79,
        cwe-res:CWE-87,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "Ecava IntegraXor versions affected: IntegraXor | versions prior to Version 5.0 | build 4522." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-105-03" ;
    icsa:vendor "Ecava" ;
    icsa:year 2016 .

icsa-res:ICSA-16-126-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-126-01" ;
    dcterms:issued "2016-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "KMC Controls Conquest BACnet Router Vulnerabilities" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-4494; CVE-2016-4495" ;
    icsa:cweNumber "CWE-306; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2016-4494,
        cve-res:CVE-2016-4495 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Conquest BACnet Router" ;
    icsa:productDistribution "United States, Asia, Southeast Asia, Middle East" ;
    icsa:productsAffected "KMC Controls products affected: BAC-5051E routers | firmware versions prior to E0.2.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-126-01" ;
    icsa:vendor "KMC Controls" ;
    icsa:year 2016 .

icsa-res:ICSA-16-131-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-131-01" ;
    dcterms:issued "2016-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Panasonic FPWIN Pro Vulnerabilities" ;
    icsa:CVSSScore "4.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2016-4498; CVE-2016-4497; CVE-2016-4499; CVE-2016-4496" ;
    icsa:cweNumber "CWE-122; CWE-843; CWE-787; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2016-4496,
        cve-res:CVE-2016-4497,
        cve-res:CVE-2016-4498,
        cve-res:CVE-2016-4499 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-787,
        cwe-res:CWE-824,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FPWIN Pro" ;
    icsa:productDistribution "North America, Asia, Europe" ;
    icsa:productsAffected "Panasonic affected products: FPWIN Pro version 5.x | FPWIN Pro version 6.x | FPWIN Pro version 7.122 and prior.Software releases 5.x have reached end-of-support. Users are advised to migrate to a supported release. Software releases 6.x are end-of-sales since April 2015 and will reach end-of-support in September 2016. Users using 6.x releases are advised to plan for an upgrade to the supported software release." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-131-01" ;
    icsa:vendor "Panasonic, Panasonic Electric Works Europe AG" ;
    icsa:year 2016 .

icsa-res:ICSA-16-133-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-133-01A" ;
    dcterms:issued "2016-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Meteocontrol WEB'log Vulnerabilities (Update A)" ;
    icsa:CVSSScore "9.5"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2296; CVE-2016-2297; CVE-2016-2298; CVE-2016-4504" ;
    icsa:cweNumber "CWE-284; CWE-553; CWE-352; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2016-2296,
        cve-res:CVE-2016-2297,
        cve-res:CVE-2016-2298,
        cve-res:CVE-2016-4504 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-352,
        cwe-res:CWE-553 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WEB'log" ;
    icsa:productDistribution "China, Germany, Spain, France, Israel, Italy, Switzerland, United States, Europe" ;
    icsa:productsAffected "WEB'log products are affected: Basic 100 all versions | Light all versions | Pro all versions | Pro Unlimited all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-133-01A" ;
    icsa:vendor "Meteocontrol" ;
    icsa:year 2016 .

icsa-res:ICSA-16-138-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-138-01A" ;
    dcterms:issued "2016-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "IRZ RUH2 3G Firmware Overwrite Vulnerability (Update A)" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Russia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Financial Services; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2016-2309" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2016-2309 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUH2 3G Firmware" ;
    icsa:productDistribution "Belgium, China, Spain, France, Iran, Italy, Kazakhstan, Russia, Switzerland, Ukraine, Europe, Eastern Europe" ;
    icsa:productsAffected "iRZ product affected: RUH2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-138-01A" ;
    icsa:vendor "iRZ" ;
    icsa:year 2016 .

icsa-res:ICSA-16-140-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-140-01A" ;
    dcterms:issued "2016-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Resource Data Management Intuitive 650 TDB Controller Vulnerabilities (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2016-4505; CVE-2016-4506" ;
    icsa:cweNumber "CWE-269; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2016-4505,
        cve-res:CVE-2016-4506 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intuitive 650 TDB Controller" ;
    icsa:productDistribution "United Kingdom, United States, Asia" ;
    icsa:productsAffected "Intuitive 650 TDB Controller versions affected: Intuitive 650 TDB Controller Version 2.1 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-140-01A" ;
    icsa:vendor "Resource Data Management" ;
    icsa:year 2016 .

icsa-res:ICSA-16-140-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-140-02" ;
    dcterms:issued "2016-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC Information Disclosure Vulnerabilities (Update B)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-4785; CVE-2016-4784" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2016-4784,
        cve-res:CVE-2016-4785 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected products: EN100 Ethernet module included in SIPROTEC 4 V4.26 or earlier | EN100 Ethernet module included in SIPROTEC Compact: V4.26 or earlier | SIPROTEC Compact model 7SJ80 with Ethernet Service Interface on Port A: Firmware V4.75 or earlier | SIPROTEC Compact models 7RW80 | 7SJ81 | 7SK81 with Ethernet Service Interface on Port A: All firmware versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-140-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-145-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-145-01A" ;
    dcterms:issued "2016-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MiiNePort Vulnerabilities (Update A)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-2285; CVE-2016-2286; CVE-2016-2295" ;
    icsa:cweNumber "CWE-255; CWE-352; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2016-2285,
        cve-res:CVE-2016-2286,
        cve-res:CVE-2016-2295 ;
    icsa:hasCWE cwe-res:CWE-255,
        cwe-res:CWE-312,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MiiNePort" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "MiiNePort versions affected: MiiNePort_E1_7080 Firmware Version 1.1.10 Build 09120714 | MiiNePort_E1_4641 Firmware Version 1.1.10 Build 09120714 | MiiNePort_E2_1242 Firmware Version 1.1 Build 10080614 | MiiNePort_E2_4561 Firmware Version 1.1 Build 10080614 | MiiNePort E3 Firmware Version 1.0 Build 11071409." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-145-01A" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-147-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-16-147-01B" ;
    dcterms:issued "2016-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Environmental Systems Corporation Data Controllers Vulnerabilities (Update B)" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-4501; CVE-2016-4502" ;
    icsa:cweNumber "CWE-264; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2016-4501,
        cve-res:CVE-2016-4502 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Data Controllers" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "ESC 8832 Data Controller versions affected: ESC 8832 Version 3.02 and earlier versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-147-01B" ;
    icsa:vendor "Environmental Systems Corporation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-147-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-147-02" ;
    dcterms:issued "2016-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sixnet BT Series Hard-coded Credentials Vulnerability" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Financial Services; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-4521" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2016-4521 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sixnet BT Series" ;
    icsa:productDistribution "North America, Asia, Europe" ;
    icsa:productsAffected "Sixnet affected products: Sixnet BT-5xxx and BT-6xxx series M2M cellular routers versions prior to 3.8.21." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-147-02" ;
    icsa:vendor "Sixnet" ;
    icsa:year 2016 .

icsa-res:ICSA-16-147-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-147-03" ;
    dcterms:issued "2016-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Black Box AlertWerks ServSensor Credential Management Vulnerability" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-2311" ;
    icsa:cweNumber "CWE-255" ;
    icsa:hasCVE cve-res:CVE-2016-2311 ;
    icsa:hasCWE cwe-res:CWE-255 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AlertWerks ServSensor Credential Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AlertWerks ServSensor versions affected: Black Box's AlertWerks ServSensor | model numbers EME105A | EME106A | EME108A-R2 | EME109A-R2 | EME110A-R2 | firmware versions prior to Version SP473; Black Box's AlertWerks ServSensor Junior | model numbers EME102A-R2 | EME103A-R2 | EME104A-R2 | firmware versions prior to Version SP473; Black Box's AlertWerks ServSensor Junior with PoE | model numbers EME152A | EME153A | EME154A | EME155A | EME158A | firmware versions prior to Version SP473; and Black Box's AlertWerks ServSensor Contact | model numbers EME111A-20-R2 | EME111A-60-R2 | EME112A-20-R2 | EME112A-60-R2 | EME113A-20-R2 | EME113A-60-R2 | firmware versions prior to Version SP473." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-147-03" ;
    icsa:vendor "Black Box" ;
    icsa:year 2016 .

icsa-res:ICSA-16-152-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-152-01" ;
    dcterms:issued "2016-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa UC 7408-LX-Plus Firmware Overwrite Vulnerability" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Emergency Services; Energy; Food and Agriculture; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-4500" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2016-4500 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UC 7408-LX-Plus Firmware" ;
    icsa:productDistribution "Argentina, Brazil, Chile, China, Germany, France, United Kingdom, India, Peru, Russia, Taiwan, United States, Europe" ;
    icsa:productsAffected "Moxa UC-7408 versions affected: UC-7408 LX-Plus all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-152-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-152-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-152-02" ;
    dcterms:issued "2016-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB PCM600 Vulnerabilities" ;
    icsa:CVSSScore "3.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-4511; CVE-2016-4524; CVE-2016-4527; CVE-2016-4516" ;
    icsa:cweNumber "CWE-916; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2016-4511,
        cve-res:CVE-2016-4516,
        cve-res:CVE-2016-4524,
        cve-res:CVE-2016-4527 ;
    icsa:hasCWE cwe-res:CWE-522,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PCM600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB affected products: PCM600 up to and including Version 2.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-152-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2016 .

icsa-res:ICSA-16-154-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-154-01" ;
    dcterms:issued "2016-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE MultiLink Series Hard-coded Credential Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2310" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2016-2310 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MultiLink Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MultiLink products affected: GE ML800 Switch | firmware versions prior to Version 5.5.0 | GE ML810 Switch | firmware versions prior to Version 5.5.0k | GE ML1200 Switch | firmware versions prior to Version 5.5.0 | GE ML1600 Switch | firmware versions prior to Version 5.5.0 | GE ML2400 Switch | firmware versions prior to Version 5.5.0 | GE ML3000 Switch | firmware versions prior to Version 5.5.0k | GE ML3100 Switch | firmware versions prior to Version 5.5.0k." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-154-01" ;
    icsa:vendor "GE" ;
    icsa:year 2016 .

icsa-res:ICSA-16-159-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-159-01" ;
    dcterms:issued "2016-06-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trihedral Engineering Limited VTScada Vulnerabilities" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-4510; CVE-2016-4532; CVE-2016-4523" ;
    icsa:cweNumber "CWE-22; CWE-125; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2016-4510,
        cve-res:CVE-2016-4523,
        cve-res:CVE-2016-4532 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-22,
        cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VTScada" ;
    icsa:productDistribution "Canada, United Kingdom, United States, North America, Europe" ;
    icsa:productsAffected "Trihedral Engineering Ltd. affected product: VTScada versions after Version 8 and before Version 11.2.02. These vulnerabilities only apply to the WAP interface (typically Port 9201/TCP/IP). Only a small fraction of the installed base of VTScada uses this legacy feature." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-159-01" ;
    icsa:vendor "Trihedral Engineering Limited" ;
    icsa:year 2016 .

icsa-res:ICSA-16-161-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-161-01" ;
    dcterms:issued "2016-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-300 Denial-of-Service Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-3949" ;
    icsa:cweNumber "CWE-664" ;
    icsa:hasCVE cve-res:CVE-2016-3949 ;
    icsa:hasCWE cwe-res:CWE-664 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-300" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected products: SIMATIC S7-300 CPUs with Profinet support: All versions prior to V3.2.12 | SIMATIC S7-300 CPUs without Profinet support: All versions prior to V3.3.12." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-161-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-161-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-161-02" ;
    dcterms:issued "2016-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC Flexible Weakly Protected Credentials Vulnerability" ;
    icsa:CVSSScore "3.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-1358" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2015-1358 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC Flexible" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens product versions of SIMATIC WinCC flexible: All versions prior to SP3 Up7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-161-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-166-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-166-01" ;
    dcterms:issued "2016-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI SQL Data Access Server Input Validation Vulnerability" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-4530" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2016-4530 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI SQL Data Access Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of PI SQL Data Access Server prior to the 2016 (1.5) release are included only with: PI JDBC Driver 2015 (1.4.1.404) and earlier | PI ODBC Driver 2015 (3.5.403) and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-166-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2016 .

icsa-res:ICSA-16-166-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-166-02" ;
    dcterms:issued "2016-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI AF Server Input Validation Vulnerability" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-4518" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2016-4518 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI AF Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSIsoft affected products: PI AF Server prior to 2016 | versions prior to 2.8.0The issue exists in a component that ships with the PI AF Server. This component is used by other OSIsoft applications but is not normally used by user applications or users of the PI AF SDK or PI System Explorer. This component can be safely disabled following defensive measures without impacting other PI AF Server functionality with the condition that none of the listed OSIsoft applications are also being used." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-166-02" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2016 .

icsa-res:ICSA-16-168-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-168-01" ;
    dcterms:issued "2016-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa PT-7728 Series Switch Improper Authorization Vulnerability" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Emergency Services; Energy; Food and Agriculture; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-4514" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2016-4514 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PT-7728 Series Switch" ;
    icsa:productDistribution "Argentina, Brazil, Chile, China, Germany, France, United Kingdom, India, Peru, Russia, Taiwan, United States, Europe" ;
    icsa:productsAffected "Moxa Industrial Ethernet Switches affected: PT-7728 Series Version 3.4 build 15081113." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-168-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-173-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-173-01A" ;
    dcterms:issued "2016-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess ActiveX Vulnerabilities (Update A)" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2016-4525; CVE-2016-4528; CVE-2016-5810" ;
    icsa:cweNumber "CWE-200; CWE-120; CWE-623" ;
    icsa:hasCVE cve-res:CVE-2016-4525,
        cve-res:CVE-2016-4528,
        cve-res:CVE-2016-5810 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-200,
        cwe-res:CWE-623 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess ActiveX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Advantech versions of WebAccess: WebAccess versions prior to 8.1_20160519." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-173-01A" ;
    icsa:vendor "Advantech" ;
    icsa:year 2016 .

icsa-res:ICSA-16-173-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-173-02" ;
    dcterms:issued "2016-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerLogic PM8ECC Cross-site Scripting Vulnerability" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-4513" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2016-4513 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerLogic PM8ECC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric versions of PowerLogic PM8ECC: PowerLogic PM8ECC | firmware versions prior to Version 2.651." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-173-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-173-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-173-03" ;
    dcterms:issued "2016-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk EnergyMetrix Vulnerabilities" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-4531; CVE-2016-4522" ;
    icsa:cweNumber "CWE-89; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2016-4522,
        cve-res:CVE-2016-4531 ;
    icsa:hasCWE cwe-res:CWE-613,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk EnergyMetrix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FactoryTalk EnergyMetrix versions affected: FactoryTalk EnergyMetrix | Version 2.10.00 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-173-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-175-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-175-01" ;
    dcterms:issued "2016-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley Stratix 5400 and 5410 Packet Corruption Vulnerability" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-1399" ;
    icsa:cweNumber "CWE-399" ;
    icsa:hasCVE cve-res:CVE-2016-1399 ;
    icsa:hasCWE cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley Stratix 5400 and 5410" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation - Allen-Bradley Stratix industrial switches are affected: Allen-Bradley Stratix 5400 Industrial Ethernet Switch | firmware Versions 15.2(2)EA1 | 15.2(2)EA2 | Allen-Bradley Stratix 5410 Industrial Distribution Switch | firmware Versions 15.2(2)EB." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-175-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-175-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-175-02" ;
    dcterms:issued "2016-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Unitronics VisiLogic OPLC IDE vlp File Parsing Stack Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Israel" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-4519" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-4519 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VisiLogic OPLC IDE vlp File Parsing" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Unitronics versions of VisiLogic: Visilogic prior to Version 9.8.30." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-175-02" ;
    icsa:vendor "Unitronics" ;
    icsa:year 2016 .

icsa-res:ICSA-16-175-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-175-03" ;
    dcterms:issued "2016-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Meinberg NTP Time Server Vulnerabilities" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Defense Industrial Base; Energy; Financial Services; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-3962; CVE-2016-3988; CVE-2016-3989" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-3962,
        cve-res:CVE-2016-3988,
        cve-res:CVE-2016-3989 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NTP Time Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Meinberg products affected: IMS-LANTIME M3000 Version 6.0 and earlier | IMS-LANTIME M1000 Version 6.0 and earlier | IMS-LANTIME M500 Version 6.0 and earlier | LANTIME M900 Version 6.0 and earlier | LANTIME M600 Version 6.0 and earlier | LANTIME M400 Version 6.0 and earlier |LANTIME M300 Version 6.0 and earlier | LANTIME M200 Version 6.0 and earlier | LANTIME M100 Version 6.0 and earlier | SyncFire 1100 Version 6.0 and earlier | LCES Version 6.0 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-175-03" ;
    icsa:vendor "Meinberg" ;
    icsa:year 2016 .

icsa-res:ICSA-16-182-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-182-01" ;
    dcterms:issued "2016-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton ELCSoft Programming Software Memory Vulnerabilities" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-4512; CVE-2016-4509" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-4509,
        cve-res:CVE-2016-4512 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ELCSoft Programming Software Memory" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ELCSoft programming software versions affected: ELCSoft Version 2.4.01 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-182-01" ;
    icsa:vendor "Eaton" ;
    icsa:year 2016 .

icsa-res:ICSA-16-182-02B a icsa:ICSA ;
    dcterms:identifier "ICSA-16-182-02B" ;
    dcterms:issued "2016-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM PAS Information Disclosure Vulnerabilities (Update B)" ;
    icsa:CVSSScore "2.4"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-5848; CVE-2016-5849" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2016-5848,
        cve-res:CVE-2016-5849 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM PAS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SICAM PAS versions affected: SICAM PAS | versions older than Version 8.08." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-182-02B" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-187-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-187-01" ;
    dcterms:issued "2016-07-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rexroth Bosch BLADEcontrol-WebVIS Vulnerabilities" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-4508; CVE-2016-4507" ;
    icsa:cweNumber "CWE-79; CWE-564" ;
    icsa:hasCVE cve-res:CVE-2016-4507,
        cve-res:CVE-2016-4508 ;
    icsa:hasCWE cwe-res:CWE-564,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BLADEcontrol-WebVIS" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, United States" ;
    icsa:productsAffected "BLADEcontrol-WebVIS versions affected: BLADEcontrol-WebVIS | Version 3.0.2 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-187-01" ;
    icsa:vendor "Bosch Rexroth" ;
    icsa:year 2016 .

icsa-res:ICSA-16-189-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-189-01" ;
    dcterms:issued "2016-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON LeviStudio Buffer Overflow Vulnerabilities" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2016-4533; CVE-2016-5781" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-4533,
        cve-res:CVE-2016-5781 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LeviStudio" ;
    icsa:productDistribution "China, Asia" ;
    icsa:productsAffected "LeviStudio versions affected: LeviStudio | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-189-01" ;
    icsa:vendor "WECON" ;
    icsa:year 2016 .

icsa-res:ICSA-16-189-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-189-02" ;
    dcterms:issued "2016-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa Device Server Web Console Authorization Bypass Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2016-4503" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2016-4503 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Device Server Web Console" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Device Server Web Console 5232-N versions affected: Device Server Web Console 5232-N | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-189-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-194-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-194-01" ;
    dcterms:issued "2016-07-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tollgrade Smart Grid EMS LightHouse Vulnerabilities" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-5797; CVE-2016-5790; CVE-2016-5807" ;
    icsa:cweNumber "CWE-209; CWE-306; CWE-425" ;
    icsa:hasCVE cve-res:CVE-2016-5790,
        cve-res:CVE-2016-5797,
        cve-res:CVE-2016-5807 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-306,
        cwe-res:CWE-425 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Smart Grid EMS LightHouse" ;
    icsa:productDistribution "Germany, United Kingdom, United States, North America, South America, Europe" ;
    icsa:productsAffected "Versions of LightHouse SMS Software: LightHouse SMS | versions prior to Version 5.1 | Patch 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-194-01" ;
    icsa:vendor "Tollgrade Communications, Inc." ;
    icsa:year 2016 .

icsa-res:ICSA-16-194-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-194-02" ;
    dcterms:issued "2016-07-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy HMI SCADA CIMPLICITY Privilege Management Vulnerability" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-5787" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2016-5787 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy HMI SCADA CIMPLICITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy HMI/SCADA-CIMPLICITY versions affected: CIMPLICITY Version 8.2 | SIM 26 or earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-194-02" ;
    icsa:vendor "GE" ;
    icsa:year 2016 .

icsa-res:ICSA-16-196-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-196-01" ;
    dcterms:issued "2016-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Pelco Digital Sentry Video Management System Vulnerability" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-4520" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2016-4520 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pelco Digital Sentry Video Management System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Pelco Digital Sentry Video Management System versions affected: Pelco Digital Sentry Video Management System | versions prior to Version 7.13." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-196-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-196-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-196-02" ;
    dcterms:issued "2016-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MGate Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Emergency Services; Energy; Food and Agriculture; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-5804" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2016-5804 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mgate" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, South America, Europe" ;
    icsa:productsAffected "Moxa affected products: MGate MB3180 | versions prior to v1.8 | MGate MB3280 | versions prior to v2.7 | MGate MB3480 | versions prior to v2.6 | MGate MB3170 | versions prior to v2.5 | MGate MB3270 | versions prior to v2.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-196-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-196-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-196-03" ;
    dcterms:issued "2016-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SoMachine HVAC Unsafe ActiveX Control Vulnerability" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-4529" ;
    icsa:cweNumber "CWE-623" ;
    icsa:hasCVE cve-res:CVE-2016-4529 ;
    icsa:hasCWE cwe-res:CWE-623 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoMachine HVAC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric affected products: SoMachine HVAC-Application Version 2.0.2 and previous." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-196-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-208-01C a icsa:ICSA ;
    dcterms:identifier "ICSA-16-208-01C" ;
    dcterms:issued "2016-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC, PCS 7, and WinCC Runtime Professional Vulnerabilities (Update C)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-5743; CVE-2016-5744" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2016-5743,
        cve-res:CVE-2016-5744 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC, PCS 7, and WinCC Runtime Professional" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected products: SIMATIC WinCC: V7.0 SP 2: All versions prior to V7.0 SP2 Update 12 | V7.0 SP 3: All versions prior to V7.0 SP3 Update 8 | V7.2: All versions prior to 7.2 Update 13 | V7.3: All versions prior to 7.3 Update 10 | V7.4: All versions prior to 7.4 Update 1SIMATIC PCS 7 (WinCC | Batch | Route Control | OPEN PCS 7): V7.1 SP4: all versions prior toV7.1 SP4 with WinCC V7.0 SP2 Update 12 | V8.0: All versions prior to V8.0 SP2 with WinCC V7.2 Update 13 | V8.1: All versions prior to 8.1 SP1 with WinCC V7.3 Update 10 | V8.2: All versions prior to 8.2 with WinCC V7.4 Update 1 | SIMATIC WinCC Runtime Professional: All versions prior to V13 SP 1 Update 9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-208-01C" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-208-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-208-02" ;
    dcterms:issued "2016-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC NET PC-Software Denial-of-Service Vulnerability" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2016-5874" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2016-5874 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC NET PC-Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected SIMATIC products: SIMATIC NET PC-Software: All versions prior to V13 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-208-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-208-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-208-03" ;
    dcterms:issued "2016-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server Cross-site Scripting Vulnerability" ;
    icsa:CVSSScore "4.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-6204" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2016-6204 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Germany, United States, Asia, Europe" ;
    icsa:productsAffected "SINEMA Remote Connect Server versions affected: SINEMA Remote Connect Server | all versions prior to Version 1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-208-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-215-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-215-01" ;
    dcterms:issued "2016-08-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa SoftCMS SQL Injection Vulnerability" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-5792" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2016-5792 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoftCMS" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa affected products: SoftCMS versions prior to Version 1.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-215-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-215-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-215-02A" ;
    dcterms:issued "2016-08-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-6486" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2016-6486 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected products: SINEMA Server: All versions prior to V13 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-215-02A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-224-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-224-01" ;
    dcterms:issued "2016-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix 1400 SNMP Credentials Vulnerability" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-5645" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2016-5645 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix 1400 SNMP Credentials" ;
    icsa:productDistribution "China, Czech Republic, Germany, Denmark, France, Hungary, Italy, Japan, South Korea, Poland, United States, South America, Europe" ;
    icsa:productsAffected "Rockwell Automation affected products: 1766-L32BWA |1766-L32AWA |1766-L32BXB |1766-L32BWAA |1766-L32AWAA | 1766-L32BXBA." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-224-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-224-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-224-02A" ;
    dcterms:issued "2016-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLogix 500 and RSLogix Micro File Parser Buffer Overflow Vulnerability (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-5814" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2016-5814 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLogix 500 and RSLogix Micro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation affected products: RSLogix Micro Starter Lite | Version 10.00.00 or prior; RSLogix Micro Developer | Version 10.00.00 or prior; RSLogix 500 Starter Edition | Version 10.00.00 or prior; RSLogix 500 Stand ard Edition | Version 10.00.00 or prior; and RSLogix 500 Professional Edition | Version 10.00.00 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-224-02A" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-231-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-231-01" ;
    dcterms:issued "2016-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Locus Energy LGate Command Injection Vulnerability" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2016-5817" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2016-5817 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WebAccess versions affected: Navis WebAccess | all versions released prior to August 10 | 2016." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-231-01" ;
    icsa:vendor "Navis" ;
    icsa:year 2016 .

icsa-res:ICSA-16-236-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-236-01A" ;
    dcterms:issued "2016-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa OnCell Vulnerabilities (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-5799; CVE-2016-5812; CVE-2016-5819" ;
    icsa:cweNumber "CWE-79; CWE-256; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2016-5799,
        cve-res:CVE-2016-5812,
        cve-res:CVE-2016-5819 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-307,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OnCell" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa affected products: OnCell G3100V2 Series | editions prior to Version 2.8 | OnCell G3111/G3151/G3211/G3251 Series | editions prior to Version 1.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-236-01A" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-250-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-250-01" ;
    dcterms:issued "2016-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-7112; CVE-2016-7114; CVE-2016-7113" ;
    icsa:cweNumber "CWE-400; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2016-7112,
        cve-res:CVE-2016-7113,
        cve-res:CVE-2016-7114 ;
    icsa:hasCWE cwe-res:CWE-400,
        cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 4 and SIPROTEC Compact" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected products: EN100 Ethernet module (as optional for SIPROTEC 4 and SIPROTEC Compact): All versions prior to V4.29." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-250-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-252-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-252-01" ;
    dcterms:issued "2016-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Bently Nevada 3500/22M Improper Authorization Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2016-5788" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2016-5788 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Bently Nevada 3500/22M" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE Bently Nevada 3500/22M firmware versions affected: GE Bently Nevada 3500/22M (USB version) | all versions prior to firmware Version 5.0 | GE Bently Nevada 3500/22M (serial version) | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-252-01" ;
    icsa:vendor "GE" ;
    icsa:year 2016 .

icsa-res:ICSA-16-259-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-259-01" ;
    dcterms:issued "2016-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa STARDOM Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2016-4860" ;
    icsa:cweNumber "CWE-592" ;
    icsa:hasCVE cve-res:CVE-2016-4860 ;
    icsa:hasCWE cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "STARDOM" ;
    icsa:productDistribution "Asia, East Asia, Europe, Africa, Middle East, Worldwide" ;
    icsa:productsAffected "Yokogawa affected products: STARDOM FCN/FCJ controller (from Version R1.01 to R4.01)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-259-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-259-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-259-02" ;
    dcterms:issued "2016-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB DataManagerPro Credential Management Vulnerability" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-4526" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2016-4526 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataManagerPro Credential Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB versions of DataManagerPro: DataManagerPro | all versions: 1.0.0 to 1.7.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-259-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2016 .

icsa-res:ICSA-16-259-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-259-03" ;
    dcterms:issued "2016-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trane Tracer SC Sensitive Information Exposure Vulnerability" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-0870" ;
    icsa:cweNumber "CWE-668" ;
    icsa:hasCVE cve-res:CVE-2016-0870 ;
    icsa:hasCWE cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tracer SC Sensitive" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Tracer SC versions affected: Versions 4.2.1134 and below." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-259-03" ;
    icsa:vendor "Trane U.S. Inc." ;
    icsa:year 2016 .

icsa-res:ICSA-16-264-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-264-01" ;
    dcterms:issued "2016-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa Active OPC Server Unquoted Service Path Escalation Vulnerability" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-5793" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2016-5793 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Active OPC Server" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa affected products: Active OPC Server versions older than Version 2.4.19." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-264-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-271-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-271-01" ;
    dcterms:issued "2016-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE M-800/S615 Web Vulnerability" ;
    icsa:CVSSScore "4.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-7090" ;
    icsa:cweNumber "CWE-614" ;
    icsa:hasCVE cve-res:CVE-2016-7090 ;
    icsa:hasCWE cwe-res:CWE-614 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE M-800/S615 Web" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens affected products: SCALANCE M-800/S615: All versions before V4.02." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-271-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-273-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-273-01" ;
    dcterms:issued "2016-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "American Auto-Matrix Front-End Solutions Vulnerabilities" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2308; CVE-2016-2307" ;
    icsa:cweNumber "CWE-256; CWE-98" ;
    icsa:hasCVE cve-res:CVE-2016-2307,
        cve-res:CVE-2016-2308 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-98 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Front-End Solutions" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Building Automation Front-End Solutions versions affected: Aspect-Nexus Building Automation Front-End Solutions application versions prior to 3.0.0Aspect-Matrix Building Automation Front-End Solutions application all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-273-01" ;
    icsa:vendor "American Auto-Matrix" ;
    icsa:year 2016 .

icsa-res:ICSA-16-278-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-278-01" ;
    dcterms:issued "2016-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "INDAS Web SCADA Path Traversal Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Serbia" ;
    icsa:criticalInfrastructureSector "Communications; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-8343" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2016-8343 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Web SCADA" ;
    icsa:productDistribution "Serbia" ;
    icsa:productsAffected "INDAS Web SCADA versions affected: Web SCADA | versions prior to Version 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-278-01" ;
    icsa:vendor "INDAS" ;
    icsa:year 2016 .

icsa-res:ICSA-16-278-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-278-02" ;
    dcterms:issued "2016-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Beckhoff Embedded PC Images and TwinCAT Components Vulnerabilities" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2014-5415; CVE-2014-5414" ;
    icsa:cweNumber "CWE-749; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2014-5414,
        cve-res:CVE-2014-5415 ;
    icsa:hasCWE cwe-res:CWE-307,
        cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Embedded PC Images and TwinCAT Components" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Beckhoff affected products: All Beckhoff Embedded PC Images with a creation date prior to October 22 2014 | All TwinCAT Components featuring Automation Device Specification (ADS) communication." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-278-02" ;
    icsa:vendor "Beckhoff Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-287-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-287-01" ;
    dcterms:issued "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Web API 2015 R2 Service Account Permissions Vulnerability" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-8353" ;
    icsa:cweNumber "CWE-264" ;
    icsa:hasCVE cve-res:CVE-2016-8353 ;
    icsa:hasCWE cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Web API 2015 R2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSIsoft versions of PI Web API: PI Web API 2015 R2 (Version 1.5.1)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-287-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2016 .

icsa-res:ICSA-16-287-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-287-02" ;
    dcterms:issued "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Automation License Manager Vulnerabilities" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2016-8565; CVE-2016-8563; CVE-2016-8564" ;
    icsa:cweNumber "CWE-22; CWE-89; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2016-8563,
        cve-res:CVE-2016-8564,
        cve-res:CVE-2016-8565 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-400,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens versions of ALM: All versions prior to V5.3 SP3 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-287-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-287-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-287-03" ;
    dcterms:issued "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 (TIA Portal) Information Disclosure Vulnerabilities" ;
    icsa:CVSSScore "2.5"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-7960; CVE-2016-7959" ;
    icsa:cweNumber "CWE-310; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2016-7959,
        cve-res:CVE-2016-7960 ;
    icsa:hasCWE cwe-res:CWE-310,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC STEP 7 (TIA Portal)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens versions of SIMATIC STEP 7 (TIA Portal): SIMATIC STEP 7 (TIA Portal): All versions prior to V14" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-287-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-287-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-287-04" ;
    dcterms:issued "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix Denial-of-Service and Memory Leak Vulnerabilities" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-6393; CVE-2016-6382; CVE-2016-6380; CVE-2016-6385" ;
    icsa:cweNumber "CWE-209; CWE-20; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2016-6380,
        cve-res:CVE-2016-6382,
        cve-res:CVE-2016-6385,
        cve-res:CVE-2016-6393 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-209,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation Allen-Bradley Stratix industrial switches are affected: Allen-Bradley Stratix 5400 Industrial Ethernet Switches versions 15.2(4)EA3 and earlier |Allen-Bradley Stratix 5410 Industrial Distribution Switches versions 15.2(4)EA3 and earlier |Allen-Bradley Stratix 5700 Industrial Managed Ethernet Switches versions 15.2(4)EA3 and earlier |Allen-Bradley Stratix 8000 Modular Managed Ethernet Switches versions 15.2(4)EA3 and earlier | Allen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches versions 15.2(4)EA3 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-287-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-287-05A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-287-05A" ;
    dcterms:issued "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa ioLogik E1200 Series Vulnerabilities (Update A)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2016-8372; CVE-2016-8359; CVE-2016-8350; CVE-2016-8379" ;
    icsa:cweNumber "CWE-79; CWE-352; CWE-522; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2016-8350,
        cve-res:CVE-2016-8359,
        cve-res:CVE-2016-8372,
        cve-res:CVE-2016-8379 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-521,
        cwe-res:CWE-522,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ioLogik E1200 Series" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa affected products: ioLogik E1210 | firmware Version V2.4 and prior | ioLogik E1211 | firmware Version V2.3 and prior | ioLogik E1212 | firmware Version V2.4 and prior | ioLogik E1213 | firmware Version V2.5 and prior | ioLogik E1214 | firmware Version V2.4 and prior | ioLogik E1240 | firmware Version V2.3 and prior | ioLogik E1241 | firmware Version V2.4 and prior | ioLogik E1242 | firmware Version V2.4 and prior | ioLogik E1260 | firmware Version V2.4 and prior | ioLogik E1262 | firmware Version V2.4 and prior | ioLogik E2210 | firmware versions prior to V3.13 | ioLogik E2212 | firmware versions prior to V3.14 | ioLogik E2214 | firmware versions prior to V3.12 | ioLogik E2240 | firmware versions prior to V3.12 | ioLogik E2242 | firmware versions prior to V3.12 | ioLogik E2260 | firmware versions prior to V3.13 | ioLogik E2262 | firmware versions prior to V3.12." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-287-05A" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-287-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-287-06" ;
    dcterms:issued "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation Designer Memory Corruption Vulnerabilities" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2016-5796; CVE-2016-5800; CVE-2016-5798" ;
    icsa:cweNumber "CWE-119; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-5796,
        cve-res:CVE-2016-5798,
        cve-res:CVE-2016-5800 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation Designer" ;
    icsa:productDistribution "Australia, China, Czech Republic, Germany, France, United Kingdom, India, Italy, Netherlands, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "FATEK Automation products are affected: Automation PM Designer V3 Version 2.1.2.2 | Automation FV Designer Version 1.2.8.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-287-06" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-287-07A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-287-07A" ;
    dcterms:issued "2016-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Kabona AB WDC Vulnerabilities (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-0872; CVE-2016-8347; CVE-2016-8376; CVE-2016-8356" ;
    icsa:cweNumber "CWE-79; CWE-256; CWE-307; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2016-0872,
        cve-res:CVE-2016-8347,
        cve-res:CVE-2016-8356,
        cve-res:CVE-2016-8376 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-307,
        cwe-res:CWE-601,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WDC" ;
    icsa:productDistribution "Canada, United Kingdom, Sweden, Europe" ;
    icsa:productsAffected "WebDatorCentral versions affected: All WDC versions prior to Version 3.4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-287-07A" ;
    icsa:vendor "Kabona AB" ;
    icsa:year 2016 .

icsa-res:ICSA-16-292-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-292-01" ;
    dcterms:issued "2016-10-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-10-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerLogic PM8ECC Hard-coded Password Vulnerability" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-5818" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2016-5818 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerLogic PM8ECC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PowerLogic PM8ECC versions affected: PM8ECC Version 2.651 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-292-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-294-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-294-01" ;
    dcterms:issued "2016-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa EDR-810 Industrial Secure Router Privilege Escalation Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-8346" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2016-8346 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EDR-810 Industrial Secure Router" ;
    icsa:productDistribution "Argentina, Brazil, Chile, China, Germany, France, United Kingdom, India, Peru, Russia, Taiwan, United States, Europe" ;
    icsa:productsAffected "EDR-810 versions affected: EDR-810 using firmware versions prior to V3.13." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-294-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-299-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-299-01" ;
    dcterms:issued "2016-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM RTU Devices Denial-of-Service Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-7987" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2016-7987 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM RTU Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens versions of SICAM: ETA4 firmware (all versions prior to Revision 08) of the SM-2558 extension module for: SICAM AK |SICAM TM 1703 |SICAM BC 1703 | SICAM AK 3ETA2 firmware (Revision 11.01 and earlier) of the SM-2556 extension module for: SICAM AK |SICAM TM | SICAM BC." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-299-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-301-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-301-01" ;
    dcterms:issued "2016-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Experion PKS Improper Input Validation Vulnerability" ;
    icsa:CVSSScore "3.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-8344" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2016-8344 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Experion PKS" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "Experion PKS versions affected: Experion PKS | Release 3xx and prior |Experion PKS | Release 400 |Experion PKS | Release 410 |Experion PKS | Release 430 | Experion PKS | Release 431." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-301-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2016 .

icsa-res:ICSA-16-306-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-306-01" ;
    dcterms:issued "2016-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric ConneXium Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-8352" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-8352 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ConneXium" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ConneXium firewalls versions affected: TCSEFEC23F3F20 all versions |TCSEFEC23F3F21 all versions |TCSEFEC23FCF20 all versions |TCSEFEC23FCF21 all versions | TCSEFEC2CF3F20 all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-306-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-306-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-306-02" ;
    dcterms:issued "2016-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "IBHsoftec S7-SoftPLC CPX43 Heap-based Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-8364" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2016-8364 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "S7-SoftPLC CPX43" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "IBHsoftec versions of S7-SoftPLC: S7-SoftPLC versions prior to 4.12b." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-306-02" ;
    icsa:vendor "IBHsoftec GmbH" ;
    icsa:year 2016 .

icsa-res:ICSA-16-306-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-306-03" ;
    dcterms:issued "2016-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Unity PRO Control Flow Management Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2016-8354" ;
    icsa:cweNumber "CWE-691" ;
    icsa:hasCVE cve-res:CVE-2016-8354 ;
    icsa:hasCWE cwe-res:CWE-691 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Unity PRO Control Flow Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric versions of Unity PRO: Unity PRO | all versions prior to V11.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-306-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-308-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-308-01" ;
    dcterms:issued "2016-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa OnCell Security Vulnerabilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-8363; CVE-2016-8362" ;
    icsa:cweNumber "CWE-264; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2016-8362,
        cve-res:CVE-2016-8363 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OnCell Security" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa OnCell versions affected: OnCellG3470A-LTE | AWK-1131A/3131A/4131A Series | AWK-3191 Series | AWK-5232/6232 Series | AWK-1121/1127 Series | WAC-1001 V2 Series | WAC-2004 Series | AWK-3121-M12-RTG Series | AWK-3131-M12-RCC Series | AWK-5232-M12-RCC Series | TAP-6226 Series | AWK-3121/4121 Series | AWK-3131/4131 Series | AWK-5222/6222 Series." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-308-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-308-02B a icsa:ICSA ;
    dcterms:identifier "ICSA-16-308-02B" ;
    dcterms:issued "2016-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2016-8367; CVE-2016-8374" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2016-8367,
        cve-res:CVE-2016-8374 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Magelis HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric versions of Magelis HMI: Magelis GTO Advanced Optimum Panels | all versions |Magelis GTU Universal Panel | all versions |Magelis STO5xx and STU Small panels | all versions |Magelis XBT GH Advanced Hand -held Panels | all versions |Magelis XBT GK Advanced Touchscreen Panels with Keyboard | all versions |Magelis XBT GT Advanced Touchscreen Panels | all versions | Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-308-02B" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-308-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-308-03" ;
    dcterms:issued "2016-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IONXXXX Series Power Meter Vulnerabilities" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-5815; CVE-2016-5809" ;
    icsa:cweNumber "CWE-284; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2016-5809,
        cve-res:CVE-2016-5815 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IONXXXX Series Power Meter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IONXXXX series power meter versions affected: ION73XX series |ION75XX series |ION76XX series |ION8650 series |ION8800 series | PM5XXX series." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-308-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-313-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-313-01" ;
    dcterms:issued "2016-11-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Phoenix Contact ILC PLC Authentication Vulnerabilities" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-8366; CVE-2016-8371; CVE-2016-8380" ;
    icsa:cweNumber "CWE-592; CWE-312; CWE-767" ;
    icsa:hasCVE cve-res:CVE-2016-8366,
        cve-res:CVE-2016-8371,
        cve-res:CVE-2016-8380 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-592,
        cwe-res:CWE-767 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ILC PLC" ;
    icsa:productDistribution "Germany, North America, Asia, Europe" ;
    icsa:productsAffected "Phoenix Contact versions of ILC PLCs: All ILC 1xx PLCs." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-313-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2016 .

icsa-res:ICSA-16-313-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-313-02" ;
    dcterms:issued "2016-11-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-7165" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2016-7165 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens Primary Setup Tool (PST): All versions prior to v4.2 HF1 SIMATIC IT Production Suite: All versions prior to v7.0 SP1 HFX 2 SIMATIC NET PC-Software: All versions prior to v14 SIMATIC PCS 7 v7.1 and earlier versions SIMATIC PCS 7 v8.0: All versions SIMATIC PCS 7 v8.1: All versions SIMATIC PCS 7 v8.2: All versions prior to v8.2 SP1 SIMATIC STEP 7 (TIA Portal) v13: All versions prior to v13 SP2 SIMATIC STEP 7 v5.X: All versions prior to v5.5 SP4 HF11 | SIMATIC WinAC RTX (F) 2010 SP2: All versions prior to SIMATIC WinAC RTX 2010 SP3 | SIMATIC WinCC (TIA Portal) Basic | Comfort | Advanced: All versions prior to v14 SIMATIC WinCC (TIA Portal) Professional v13: All versions prior to v13 SP2 SIMATIC WinCC (TIA Portal) Professional v14: All versions prior to v14 SP1 SIMATIC WinCC Runtime Professional v13: All versions prior to v13 SP2 SIMATIC WinCC Runtime Professional v14: All versions prior to v14 SP1 SIMATIC WinCC v7.0 SP2 and earlier versions prior to v7.0 SP2 Update 12 SIMATIC WinCC v7.0 SP3: All versions prior to v7.0 SP3 Update 8 SIMATIC WinCC v7.2: All versions prior to v7.2 Update 14 SIMATIC WinCC v7.3: All versions prior to v7.3 Update 11 SIMATIC WinCC v7.4: All versions prior to v7.4 SP1 SIMIT: All versions prior to v9.0 SP1 SINEMA Remote Connect Client: All versions prior to v1.0 SP3 SINEMA Server: All versions prior to v13 SP2 SOFTNET Security Client v5.0: All versions Security Configuration Tool (SCT): All versions prior to v4.3 HF1 TeleControl Server Basic: All versions prior to v3.0 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-313-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-313-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-313-03" ;
    dcterms:issued "2016-11-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI System Incomplete Model of Endpoint Features Vulnerability" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-8365" ;
    icsa:cweNumber "CWE-437" ;
    icsa:hasCVE cve-res:CVE-2016-8365 ;
    icsa:hasCWE cwe-res:CWE-437 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI System Incomplete Model of Endpoint Features" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PI System software versions affected: Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016 | Version 2.8.0 |Applications using PI Software Development Kit (SDK) versions prior to PI SDK 2016 | Version 1.4.6 |PI Buffer Subsystem | versions prior to and including | Version 4.4 | PI Data Archive versions prior to PI Data Archive 2015 | Version 3.4.395.64." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-313-03" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2016 .

icsa-res:ICSA-16-315-01B a icsa:ICSA ;
    dcterms:identifier "ICSA-16-315-01B" ;
    dcterms:issued "2016-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-01-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "CA Unified Infrastructure Management Directory Traversal Vulnerability (Update B)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2016-5803" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2016-5803 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Unified Infrastructure Management" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Japan, South Korea, Netherlands, United States, Asia, Europe" ;
    icsa:productsAffected "Unified Infrastructure Management versions affected: Unified Infrastructure Management Version 8.47 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-315-01B" ;
    icsa:vendor "CA Technologies" ;
    icsa:year 2016 .

icsa-res:ICSA-16-320-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-320-01" ;
    dcterms:issued "2016-11-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Lynxspring JENEsys BAS Bridge Vulnerabilities" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-8378; CVE-2016-8357; CVE-2016-8361; CVE-2016-8369" ;
    icsa:cweNumber "CWE-306; CWE-352; CWE-522; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2016-8357,
        cve-res:CVE-2016-8361,
        cve-res:CVE-2016-8369,
        cve-res:CVE-2016-8378 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-306,
        cwe-res:CWE-352,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JENEsys BAS Bridge" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "BAS Bridge versions affected: BAS Bridge versions 1.1.8 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-320-01" ;
    icsa:vendor "Lynxspring" ;
    icsa:year 2016 .

icsa-res:ICSA-16-322-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-322-01" ;
    dcterms:issued "2016-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Vanderbilt Industries Siemens IP CCTV Cameras Vulnerability" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2016-9155" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2016-9155 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IP CCTV Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of Siemens-branded IP cameras built by Vanderbilt Industries: CCMW3025: All versions prior to 1.41_SP18_S1 | CVMW3025-IR: All versions prior to 1.41_SP18_S1 | CFMW3025: All versions prior to 1.41_SP18_S1 | CCPW3025: All versions prior to 0.1.73_S1 | CCPW5025: All versions prior to 0.1.73_S1 | CCMD3025-DN18: All versions prior to v1.394_S1 | CCID1445-DN18: All versions prior to v2635 | CCID1445-DN28: All versions prior to v2635 | CCID1445-DN36: All versions prior to v2635 | CFIS1425: All versions prior to v2635 |CCIS1425: All versions prior to v2635 | CFMS2025: All versions prior to v2635 |CCMS2025: All versions prior to v2635 | CVMS2025-IR: All versions prior to v2635 |CFMW1025: All versions prior to v2635 | CCMW1025: All versions prior to v2635." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-322-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-322-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-322-02" ;
    dcterms:issued "2016-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa SoftCMS Vulnerabilities" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-9333; CVE-2016-9332; CVE-2016-8360" ;
    icsa:cweNumber "CWE-20; CWE-89; CWE-415" ;
    icsa:hasCVE cve-res:CVE-2016-8360,
        cve-res:CVE-2016-9332,
        cve-res:CVE-2016-9333 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-415,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoftCMS" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa versions of SoftCMS: SoftCMS versions prior to Version 1.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-322-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-327-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-327-01" ;
    dcterms:issued "2016-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CP 1543-1 (Update A)" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-8561; CVE-2016-8562" ;
    icsa:cweNumber "CWE-269; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2016-8561,
        cve-res:CVE-2016-8562 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP 1543-1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following versions of the SIMATIC CP 1543-1 communication processor: Update A SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0): All versions prior to v2.0.28 SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0): All versions prior to v2.0.28 End Update A" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-327-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-327-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-327-02" ;
    dcterms:issued "2016-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs Vulnerabilities (Update B)" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2016-8672; CVE-2016-8673" ;
    icsa:cweNumber "CWE-345; CWE-614" ;
    icsa:hasCVE cve-res:CVE-2016-8672,
        cve-res:CVE-2016-8673 ;
    icsa:hasCWE cwe-res:CWE-345,
        cwe-res:CWE-614 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant): All versions prior to v3.0.53 SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant): All versions prior to v3.2.17 SIMATIC S7-300 CPU family (incl. SIPLUS NET variant): All firmware versions SIMATIC S7-400 CPU family (incl. SIPLUS NET variant): All firmware versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-327-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-334-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-334-01" ;
    dcterms:issued "2016-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson Liebert SiteScan XML External Entity Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-8348" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2016-8348 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Liebert SiteScan XML External Entity" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Liebert SiteScan versions affected: SiteScan Web Version 6.5 | prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-334-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2016 .

icsa-res:ICSA-16-334-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-334-02" ;
    dcterms:issued "2016-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV Easy Security Management Application Vulnerability" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2016-9345" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2016-9345 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV Easy Security Management Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Emerson DeltaV Easy Security Management application which is present on the following systems: DeltaV V12.3 |DeltaV V12.3.1 | DeltaV V13.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-334-02" ;
    icsa:vendor "Emerson" ;
    icsa:year 2016 .

icsa-res:ICSA-16-334-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-334-03" ;
    dcterms:issued "2016-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV Wireless I/O Card Open SSH Port Vulnerability" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2016-9347" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2016-9347 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV Wireless I/O Card Open SSH Port" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Emerson products affected: SE4801T0X Redundant Wireless I/O Card V13.3 | SE4801T1X Simplex Wireless I/O Card V13.3Note: The DeltaV system is not susceptible to this vulnerability except for the products and versions listed above." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-334-03" ;
    icsa:vendor "Emerson" ;
    icsa:year 2016 .

icsa-res:ICSA-16-336-01A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-336-01A" ;
    dcterms:issued "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM PAS Vulnerabilities (Update A)" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-8566; CVE-2016-9156; CVE-2016-8567; CVE-2016-9157" ;
    icsa:cweNumber "CWE-552; CWE-633; CWE-257; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2016-8566,
        cve-res:CVE-2016-8567,
        cve-res:CVE-2016-9156,
        cve-res:CVE-2016-9157 ;
    icsa:hasCWE cwe-res:CWE-257,
        cwe-res:CWE-552,
        cwe-res:CWE-633,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM PAS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SICAM PAS versions affected: SICAM PAS: All versions prior to 8.09." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-336-01A" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-336-02A a icsa:ICSA ;
    dcterms:identifier "ICSA-16-336-02A" ;
    dcterms:issued "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa NPort Device Vulnerabilities (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2016-9369; CVE-2016-9361; CVE-2016-9348; CVE-2016-9363; CVE-2016-9367; CVE-2016-9371; CVE-2016-9365; CVE-2016-9366" ;
    icsa:cweNumber "CWE-352; CWE-307; CWE-120; CWE-79; CWE-264; CWE-255; CWE-256; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2016-9348,
        cve-res:CVE-2016-9361,
        cve-res:CVE-2016-9363,
        cve-res:CVE-2016-9365,
        cve-res:CVE-2016-9366,
        cve-res:CVE-2016-9367,
        cve-res:CVE-2016-9369,
        cve-res:CVE-2016-9371 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-255,
        cwe-res:CWE-256,
        cwe-res:CWE-264,
        cwe-res:CWE-307,
        cwe-res:CWE-352,
        cwe-res:CWE-400,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NPort Device" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States" ;
    icsa:productsAffected "Moxa versions of NPort affected: NPort 5110 versions prior to 2.7 | NPort 5130/5150 Series versions prior to 3.7 | NPort 5200 Series versions prior to 2.9 | NPort 5400 Series versions prior to 3.12 | NPort 5600 Series versions prior to 3.8 | NPort 5100A Series & NPort P5150A versions prior to 1.4 | NPort 5200A Series versions prior to 1.4 | NPort 5150AI-M12 Series versions prior to 1.3 | NPort 5250AI-M12 Series versions prior to 1.3 | NPort 5450AI-M12 Series versions prior to 1.3 | NPort 5600-8-DT Series versions prior to 2.5 | NPort 5600-8-DTL Series versions prior to 2.5 | NPort IA5450A versions prior to v1.4 | NPort 6000 series versions prior to 1.16 | NPort 6110 series all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-336-02A" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-336-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-336-03" ;
    dcterms:issued "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module Vulnerabilities" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2016-8368; CVE-2016-8370" ;
    icsa:cweNumber "CWE-327; CWE-412" ;
    icsa:hasCVE cve-res:CVE-2016-8368,
        cve-res:CVE-2016-8370 ;
    icsa:hasCWE cwe-res:CWE-327,
        cwe-res:CWE-412 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-Q Series Ethernet Interface Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MELSEC-Q series versions affected: QJ71E71-100 | all versions |QJ71E71-B5 | all versions | QJ71E71-B2 | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-336-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2016 .

icsa-res:ICSA-16-336-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-336-04" ;
    dcterms:issued "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech SUSIAccess Server Vulnerabilities" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2016-9351; CVE-2016-9349; CVE-2016-9353" ;
    icsa:cweNumber "CWE-22; CWE-200; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2016-9349,
        cve-res:CVE-2016-9351,
        cve-res:CVE-2016-9353 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SUSIAccess Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SUSIAccess Server versions affected: SUISAccess Server Version 3.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-336-04" ;
    icsa:vendor "Advantech" ;
    icsa:year 2016 .

icsa-res:ICSA-16-336-05B a icsa:ICSA ;
    dcterms:identifier "ICSA-16-336-05B" ;
    dcterms:issued "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian Vulnerability (Update B)" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-9360" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2016-9360 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions |Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions and Proficy Historian Version 6.0 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-336-05B" ;
    icsa:vendor "GE" ;
    icsa:year 2016 .

icsa-res:ICSA-16-336-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-336-06" ;
    dcterms:issued "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix 1100 and 1400 Vulnerabilities" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-9334; CVE-2016-9338" ;
    icsa:cweNumber "CWE-732; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2016-9334,
        cve-res:CVE-2016-9338 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix 1100 and 1400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Allen-Bradley MicroLogix 1100 controller versions affected: 1763-L16AWA | Series A and B | Version 14.000 and prior versions; 1763-L16BBB | Series A and B | Version 14.000 and prior versions; 1763-L16BWA | Series A and B | Version 14.000 and prior versions; and 1763-L16DWD | Series A and B | Version 14.000 and prior versions.The following Allen-Bradley MicroLogix 1400 controller versions affected: 1766-L32AWA | Series A and B | Version 15.004 and prior versions; 1766-L32BWA | Series A and B | Version 15.004 and prior versions; 1766-L32BWAA | Series A and B | Version 15.004 and prior versions; 1766-L32BXB | Series A and B | Version 15.004 and prior versions; 1766-L32BXBA | Series A and B | Version 15.004 and prior versions; and 1766-L32AWAA | Series A and B | Version 15.004 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-336-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-341-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-341-01" ;
    dcterms:issued "2016-12-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tesla Gateway ECU Vulnerability" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2016-9337" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2016-9337 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Gateway ECU" ;
    icsa:productDistribution "Japan, Netherlands, United States, Asia, Europe" ;
    icsa:productsAffected "Vehicle firmware build versions affected: All firmware versions before version 7.1 (2.36.31) with web browser functionality enabled." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-341-01" ;
    icsa:vendor "Tesla" ;
    icsa:year 2016 .

icsa-res:ICSA-16-343-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-343-01" ;
    dcterms:issued "2016-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MiiNePort Session Hijack Vulnerabilities" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-9344; CVE-2016-9346" ;
    icsa:cweNumber "CWE-264; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2016-9344,
        cve-res:CVE-2016-9346 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MiiNePort" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "Moxa affected versions of MiiNePort: MiiNePort E1 versions prior to 1.8 |MiiNePort E2 versions prior to 1.4 | MiiNePort E3 versions prior to 1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-343-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-343-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-343-02" ;
    dcterms:issued "2016-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sauter NovaWeb Web HMI Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2016-5782" ;
    icsa:cweNumber "CWE-784" ;
    icsa:hasCVE cve-res:CVE-2016-5782 ;
    icsa:hasCWE cwe-res:CWE-784 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NovaWeb Web HMI" ;
    icsa:productDistribution "Germany, Switzerland, Europe" ;
    icsa:productsAffected "NovaWeb versions affected: NovaWeb web HMI | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-343-02" ;
    icsa:vendor "SAUTER Controls" ;
    icsa:year 2016 .

icsa-res:ICSA-16-343-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-343-03" ;
    dcterms:issued "2016-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Adcon Telemetry A850 Telemetry Gateway Base Station Vulnerabilities" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2274" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2016-2274 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "A850 Telemetry Gateway Base Station" ;
    icsa:productDistribution "Austria, Germany, United States, Europe" ;
    icsa:productsAffected "A850 Telemetry Gateway Base Station versions affected: A850 Telemetry Gateway Base Station | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-343-03" ;
    icsa:vendor "Adcon Telemetry" ;
    icsa:year 2016 .

icsa-res:ICSA-16-343-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-343-04" ;
    dcterms:issued "2016-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "INTERSCHALT VDR G4e Path Traversal Vulnerability" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2016-9339" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2016-9339 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VDR G4e" ;
    icsa:productDistribution "China, Germany, United States, Asia, Europe" ;
    icsa:productsAffected "INTERSCHALT versions of VDR G4e: Versions 5.220 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-343-04" ;
    icsa:vendor "INTERSCHALT" ;
    icsa:year 2016 .

icsa-res:ICSA-16-343-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-343-05" ;
    dcterms:issued "2016-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix5000 Programmable Automation Controller Buffer Overflow Vulnerability (Update B)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-9343" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-9343 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Logix5000 Programmable Automation Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Firmware versions for the Logix5000 Controller product line are affected | excluding all firmware versions prior to Version 16.00 | which are not affected: FRN 16.00PowerFlex 700S drives with Phase II control and the embedded DriveLogix 5730 controller option installed (v16.020 through v16.022) | ControlLogix 5560 controllers (v16.020 through v16.022) |ControlLogix L55 controllers (v16.020 through v16.022) |ControlLogix 5560 Redundant controllers (all versions ) |GuardLogix 5560 controllers (all versions) |FlexLogix L34 controllers (all versions) |1769 CompactLogix L23x controllers (all versions) |1769 CompactLogix L3x controllers (v16.020 through v16.023) | 1768 CompactLogix L4x controllers | (v16.020 through v16.025).FRN 17.00PowerFlex 700S drives with Phase II control and the embedded DriveLogix 5730 controller option installed (v17.003 and v17.004) |SoftLogix 5800 controllers (all versions) |ControlLogix 5560 controllers (all versions) |GuardLogix 5560 controllers (all versions) |1769 CompactLogix L23x controllers (all versions) |1769 CompactLogix L3x controllers (all versions) | 1768 CompactLogix L4x controllers (all versions).FRN 18.00SoftLogix 5800 controllers (all versions) |RSLogix Emulate 5000 (all versions) |ControlLogix 5560 controllers (all versions) |ControlLogix 5570 controllers (all versions) | GuardLogix 5560 controllers (all versions) |1769 CompactLogix L23x controllers (all versions) | 1769 CompactLogix L3x controllers (all versions) |1768 CompactLogix L4x controllers (all versions) | 1768 Compact GuardLogix L4xS (all versions). FRN 19.00 SoftLogix 5800 controllers (all versions) | RSLogix Emulate 5000 (all versions) | ControlLogix 5560 controllers (all versions) | ControlLogix 5570 controllers (all versions) | ControlLogix 5560 Redundant controllers (all versions) | GuardLogix 5560 controllers (all versions) | 1769 CompactLogix L23x controllers (all versions) | 1769 CompactLogix L3x controllers (all versions) | 1768 CompactLogix L4x controllers (all versions) | 1768 Compact GuardLogix L4xS controllers (all versions). FRN 20.00 SoftLogix 5800 controllers (all versions) |RSLogix Emulate 5000 (all versions) |ControlLogix 5560 controllers (v20.010 through v20.013) |ControlLogix 5570 controllers (v20.010 through v20.013) | ControlLogix 5560 Redundant controllers (v20.050 through v20.055) | ControlLogix 5570 Redundant controllers (v20.050 through v20.055) | GuardLogix 5560 controllers (v20.010 through v20.017) | GuardLogix 5570 controllers (v20.010 through v20.017) | 1769 CompactLogix L23x controllers (v20.010 through v20.013) | 1769 CompactLogix L3x controllers (v20.010 through v20.013) | 1769 CompactLogix 5370 L1 controllers (v20.010 through v20.013) | 1769 CompactLogix 5370 L2 controllers (v20.010 through v20.013) | 1769 CompactLogix 5370 L3 controllers (v20.010 through v20.013) |1768 CompactLogix L4x controllers (v20.011 through v20.016) | 1768 Compact GuardLogix L4xS controllers (v20.011 through v20.013). FRN 21.00 SoftLogix 5800 controllers (all versions) | RSLogix Emulate 5000 (all versions) | ControlLogix 5570 controllers (all versions) | ControlLogix 5570 Redundant controllers (all versions) | GuardLogix 5570 controllers (all versions) | 1769 CompactLogix 5370 L1 controllers (all versions) | 1769 CompactLogix 5370 L2 controllers (all versions) | 1769 CompactLogix 5370 L3 controllers (all versions).4.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-343-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-348-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-348-01" ;
    dcterms:issued "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Visonic PowerLink2 Vulnerabilities" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Israel" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-5813; CVE-2016-5811" ;
    icsa:cweNumber "CWE-79; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2016-5811,
        cve-res:CVE-2016-5813 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerLink2" ;
    icsa:productDistribution "Australia, China, Germany, Denmark, Spain, United Kingdom, Israel, Poland, Singapore, United States, Asia, Europe" ;
    icsa:productsAffected "PowerLink2 versions affected: All versions prior to October 2016 firmware release." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-348-01" ;
    icsa:vendor "Visonic" ;
    icsa:year 2016 .

icsa-res:ICSA-16-348-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-348-02" ;
    dcterms:issued "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa DACenter Vulnerabilities" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-9354; CVE-2016-9356" ;
    icsa:cweNumber "CWE-428; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2016-9354,
        cve-res:CVE-2016-9356 ;
    icsa:hasCWE cwe-res:CWE-400,
        cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DACenter" ;
    icsa:productDistribution "Brazil, China, Germany, France, United Kingdom, India, Russia, Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "DACenter: Versions 1.4 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-348-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2016 .

icsa-res:ICSA-16-348-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-348-03" ;
    dcterms:issued "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics WPLSoft, ISPSoft, and PMSoft Vulnerabilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2016-5805; CVE-2016-5802" ;
    icsa:cweNumber "CWE-122; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2016-5802,
        cve-res:CVE-2016-5805 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WPLSoft, ISPSoft, and PMSoft" ;
    icsa:productDistribution "Brazil, China, India, Japan, South Korea, Singapore, Taiwan, Europe" ;
    icsa:productsAffected "Delta Electronics products and versions affected: WPLSoft | Versions prior to V2.42.11 |ISPSoft | Versions prior to 3.02.11 | PMSoft | Versions prior to 2.10.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-348-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2016 .

icsa-res:ICSA-16-348-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-348-04" ;
    dcterms:issued "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC and SIMATIC PCS 7 ActiveX Vulnerability" ;
    icsa:CVSSScore "4.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-9160" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2016-9160 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC and SIMATIC PCS 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens versions of SIMATIC: SIMATIC WinCC: All versions prior to SIMATIC WinCC V7.2 | SIMATIC PCS 7: All versions prior to SIMATIC PCS 7 V8.0 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-348-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-348-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-348-05" ;
    dcterms:issued "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens S7-300/400 PLC Vulnerabilities (Update E)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-9158; CVE-2016-9159" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2016-9158,
        cve-res:CVE-2016-9159 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "S7-300/400 PLC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) all versions SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) all versions SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) all versions SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) all versions (only affected by CVE-2016-9159)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-348-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-350-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-350-01" ;
    dcterms:issued "2016-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation PLC WinProladder Stack-Based Buffer Overflow Vulnerability" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2016-8377" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2016-8377 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation PLC WinProladder" ;
    icsa:productDistribution "Taiwan, Asia, Europe" ;
    icsa:productsAffected "PLC WinProladder version affected: PLC WinProladder Version 3.11 Build 14701." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-350-01" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2016 .

icsa-res:ICSA-16-350-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-350-02" ;
    dcterms:issued "2016-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "OmniMetrix OmniView Vulnerabilities" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2016-5786; CVE-2016-5801" ;
    icsa:cweNumber "CWE-319; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2016-5786,
        cve-res:CVE-2016-5801 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OmniView" ;
    icsa:productDistribution "United States, South America, Asia, Europe" ;
    icsa:productsAffected "OmniView versions: Version 1.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-350-02" ;
    icsa:vendor "OmniMetrix" ;
    icsa:year 2016 .

icsa-res:ICSA-16-355-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-355-01" ;
    dcterms:issued "2016-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo PX Web Module Insufficient Entropy Vulnerability" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-9154" ;
    icsa:cweNumber "CWE-332" ;
    icsa:hasCVE cve-res:CVE-2016-9154 ;
    icsa:hasCWE cwe-res:CWE-332 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo PX Web Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Desigo PX Web modules and versions: Desigo PX Web modules PXA40-W0 | PXA40-W1 | PXA40-W2 for Desigo PX automation controllers PXC00-E.D | PXC50-E.D | PXC100-E.D | PXC200-E.D: All firmware versions prior to V6.00.046 | Desigo PX Web modules PXA30-W0 | PXA30-W1 | PXA30-W2 for Desigo PX automation controllers PXC00-U | PXC64-U | PXC128-U: All firmware versions prior to V6.00.046." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-355-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2016 .

icsa-res:ICSA-16-357-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-357-01" ;
    dcterms:issued "2016-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fidelix FX-20 Series Controllers Path Traversal Vulnerability" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Finland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-9364" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2016-9364 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FX-20 Series Controllers" ;
    icsa:productDistribution "Finland, Europe" ;
    icsa:productsAffected "FX-20 series controllers: FX-20 series controllers | versions prior to 11.50.19." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-357-01" ;
    icsa:vendor "Fidelix" ;
    icsa:year 2016 .

icsa-res:ICSA-16-357-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-16-357-02" ;
    dcterms:issued "2016-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO Ethernet Web-based Management Authentication Bypass Vulnerability" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2016-9362" ;
    icsa:cweNumber "CWE-592" ;
    icsa:hasCVE cve-res:CVE-2016-9362 ;
    icsa:hasCWE cwe-res:CWE-592 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ethernet Web-based Management" ;
    icsa:productDistribution "China, Germany, India, Poland, Switzerland" ;
    icsa:productsAffected "WAGO 750-8202/PFC200 prior to FW04 (released August 2015) |WAGO 750-881 prior to FW09 (released August 2016) | WAGO 0758-0874-0000-0111." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-16-357-02" ;
    icsa:vendor "WAGO" ;
    icsa:year 2016 .

icsa-res:ICSA-17-010-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-010-01" ;
    dcterms:issued "2017-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Coresight and PI Web API (Update A)" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2017-5153" ;
    icsa:cweNumber "CWE-533" ;
    icsa:hasCVE cve-res:CVE-2017-5153 ;
    icsa:hasCWE cwe-res:CWE-533 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Coresight and PI Web API" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "OSIsoft reports that the vulnerability affects the following versions: PI Coresight 2016 R2 and earlier versions and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-010-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2017 .

icsa-res:ICSA-17-012-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-012-01" ;
    dcterms:issued "2017-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2017-5152; CVE-2017-5154" ;
    icsa:cweNumber "CWE-89; CWE-592" ;
    icsa:hasCVE cve-res:CVE-2017-5152,
        cve-res:CVE-2017-5154 ;
    icsa:hasCWE cwe-res:CWE-592,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan" ;
    icsa:productsAffected "The following WebAccess version is affected: WebAccess Version 8.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-012-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2017 .

icsa-res:ICSA-17-012-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-012-02" ;
    dcterms:issued "2017-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "VideoInsight Web Client" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2017-5151" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2017-5151 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Web Client" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Web Client versions are affected: Web Client Version 6.3.5.11 and previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-012-02" ;
    icsa:vendor "VideoInsight" ;
    icsa:year 2017 .

icsa-res:ICSA-17-012-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-012-03" ;
    dcterms:issued "2017-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Carlo Gavazzi VMU-C EM and VMU-C PV" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-5145; CVE-2017-5144; CVE-2017-5146" ;
    icsa:cweNumber "CWE-284; CWE-352; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2017-5144,
        cve-res:CVE-2017-5145,
        cve-res:CVE-2017-5146 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VMU-C EM and VMU-C PV" ;
    icsa:productDistribution "Canada, Italy, United States, Asia, Europe" ;
    icsa:productsAffected "ProductsCarlo Gavazzi reports that the vulnerabilities affect the following versions: VMU-C EM prior to firmware Version A11_U05 and VMU-C PV prior to firmware Version A17." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-012-03" ;
    icsa:vendor "Carlo Gavazzi" ;
    icsa:year 2017 .

icsa-res:ICSA-17-017-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-017-01" ;
    dcterms:issued "2017-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT mGuard" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-5159" ;
    icsa:cweNumber "CWE-99" ;
    icsa:hasCVE cve-res:CVE-2017-5159 ;
    icsa:hasCWE cwe-res:CWE-99 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mGuard" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PHOENIX CONTACT reports that the vulnerability affects the following mGuard products: Only devices that have been updated to Version 8.4.0 are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-017-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2017 .

icsa-res:ICSA-17-019-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-019-01" ;
    dcterms:issued "2017-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric homeLYnk Controller (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-5157; CVE-2017-7689" ;
    icsa:cweNumber "CWE-79; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2017-5157,
        cve-res:CVE-2017-7689 ;
    icsa:hasCWE cwe-res:CWE-77,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "homeLYnk Controller" ;
    icsa:productDistribution "France, United States" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerability affects the following products: homeLYnk Controller | LSS100100 all versions prior to V1.5.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-019-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-024-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-024-01" ;
    dcterms:issued "2017-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware Historian" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-5155" ;
    icsa:cweNumber "CWE-255" ;
    icsa:hasCVE cve-res:CVE-2017-5155 ;
    icsa:hasCWE cwe-res:CWE-255 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware Historian" ;
    icsa:productDistribution "France" ;
    icsa:productsAffected "The following Wonderware Historian versions are affected: Wonderware Historian 2014 R2 SP1 P01 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-024-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-026-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-026-01" ;
    dcterms:issued "2017-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton ePDU Path Traversal Vulnerability" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-9357" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2016-9357 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ePDU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2015 | EMAxxx prior to January 31; 2014.; 2014 | EMAAxx prior to January 31; ePDU Products are past end-of-life (EoL) and is no longer supported | Eaton has provided defense-in-depth mitigation instructions to protect devices that are still in use.This vulnerability could be exploited remotely. Eaton reports that the vulnerability affects the following products: EAMxxx prior to June 30; 2014 and ESWAxx prior to January 31; 2014 | EAMAxx prior to January 31" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-026-01" ;
    icsa:vendor "Eaton" ;
    icsa:year 2017 .

icsa-res:ICSA-17-026-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-026-02" ;
    dcterms:issued "2017-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Belden Hirschmann GECKO (Update A)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2017-5163; CVE-2017-6038; CVE-2017-6040; CVE-2017-6036" ;
    icsa:cweNumber "CWE-22; CWE-352; CWE-200; CWE-918" ;
    icsa:hasCVE cve-res:CVE-2017-5163,
        cve-res:CVE-2017-6036,
        cve-res:CVE-2017-6038,
        cve-res:CVE-2017-6040 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-352,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hirschmann GECKO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following GECKO switch versions are affected: Hirschmann GECKO Lite Managed switch | Version 2.0.00 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-026-02" ;
    icsa:vendor "Belden" ;
    icsa:year 2017 .

icsa-res:ICSA-17-031-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-031-01" ;
    dcterms:issued "2017-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "BINOM3 Electric Power Quality Meter (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Russia" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-5166; CVE-2017-5167; CVE-2017-5164; CVE-2017-5162; CVE-2017-5165" ;
    icsa:cweNumber "CWE-352; CWE-200; CWE-79; CWE-284; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2017-5162,
        cve-res:CVE-2017-5164,
        cve-res:CVE-2017-5165,
        cve-res:CVE-2017-5166,
        cve-res:CVE-2017-5167 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-259,
        cwe-res:CWE-284,
        cwe-res:CWE-352,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Electric Power Quality Meter" ;
    icsa:productDistribution "Russia" ;
    icsa:productsAffected "The following BINOM3 power meters are affected: Universal multifunctional electric power quality meter." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-031-01" ;
    icsa:vendor "BINOM3" ;
    icsa:year 2017 .

icsa-res:ICSA-17-031-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-031-02" ;
    dcterms:issued "2017-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-8341" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2016-8341 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "The following IntegraXor version is affected: IntegraXor Version 5.0.413.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-031-02" ;
    icsa:vendor "Ecava" ;
    icsa:year 2017 .

icsa-res:ICSA-17-033-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-033-01" ;
    dcterms:issued "2017-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell XL Web II Controller Vulnerabilities" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-5140; CVE-2017-5143; CVE-2017-5139; CVE-2017-5141; CVE-2017-5142" ;
    icsa:cweNumber "CWE-23; CWE-269; CWE-384; CWE-256; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2017-5139,
        cve-res:CVE-2017-5140,
        cve-res:CVE-2017-5141,
        cve-res:CVE-2017-5142,
        cve-res:CVE-2017-5143 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-256,
        cwe-res:CWE-269,
        cwe-res:CWE-384,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XL Web II Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following XL Web II controller versions are affected: XL1000C500 XLWebExe-2-01-00 and prior and XLWeb 500 XLWebExe-1-02-08 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-033-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2017 .

icsa-res:ICSA-17-038-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-038-01" ;
    dcterms:issued "2017-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sielco Sistemi Winlog SCADA Software" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-5161" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-5161 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Winlog SCADA Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Sielco Sistemi products are affected: Winlog Lite SCADA Software | versions prior to Version 3.02.01 and Winlog Pro SCADA Software | versions prior to Version 3.02.01" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-038-01" ;
    icsa:vendor "Sielco Sistemi" ;
    icsa:year 2017 .

icsa-res:ICSA-17-040-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-040-01" ;
    dcterms:issued "2017-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hanwha Techwin Smart Security Manager" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-5169; CVE-2017-5168" ;
    icsa:cweNumber "CWE-22; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2017-5168,
        cve-res:CVE-2017-5169 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Smart Security Manager" ;
    icsa:productDistribution "South Korea Korea" ;
    icsa:productsAffected "The following Smart Security Manager - software management platform | versions are affected: Smart Security Manager Versions 1.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-040-01" ;
    icsa:vendor "Hanwha Techwin" ;
    icsa:year 2017 .

icsa-res:ICSA-17-045-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-045-01" ;
    dcterms:issued "2017-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-5175" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-5175 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan, United States, Europe" ;
    icsa:productsAffected "The following WebAccess HMI versions are affected: Advantech WebAccess Versions 8.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-045-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2017 .

icsa-res:ICSA-17-045-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-045-02" ;
    dcterms:issued "2017-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Geutebruck IP Cameras" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-5173; CVE-2017-5174" ;
    icsa:cweNumber "CWE-78; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2017-5173,
        cve-res:CVE-2017-5174 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IP Cameras" ;
    icsa:productDistribution "Australia, Germany, United States, Europe" ;
    icsa:productsAffected "The following Geutebruck G-Cam IP camera version is affected: G-Cam/EFD-2250 Version 1.11.0.12." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-045-02" ;
    icsa:vendor "Geutebruck" ;
    icsa:year 2017 .

icsa-res:ICSA-17-045-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-045-03" ;
    dcterms:issued "2017-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Authentication Bypass (Update D)" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-2684" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-2684 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following software applications used for central user administration: SIMATIC Logon: All versions prior to v1.5 SP3 Update 2. The following products include affected versions of SIMATIC Logon: SIMATIC WinCC: All versions prior to v7.4 SP1 | SIMATIC WinCC Runtime Professional: All versions prior to v14 SP1 | SIMATIC PCS 7: All versions prior to v8.2 SP1 | SIMATIC PDM: All versions prior to v9.1 and SIMATIC IT: All versions prior to v7.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-045-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-047-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-047-01" ;
    dcterms:issued "2017-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Connected Components Workbench" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Defense Industrial Base; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2017-5176" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-5176 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Connected Components Workbench" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Connected Components Workbench (CCW) - software configuration platform versions are affected: Connected Components Workbench - Developer Edition | v9.01.00 and earlier.9328-CCWDEVENE | 9328-CCWDEVZHE | 9328-CCWDEVFRE | 9328-CCWDEVITE | 9328-CCWDEVDEE | 9328-CCWDEVESE and 9328-CCWDEVPTE.Connected Components Workbench - Free Standard Edition (All Supported Languages) | v9.01.00 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-047-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-047-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-047-02" ;
    dcterms:issued "2017-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Activation" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6015" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2017-6015 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Activation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FactoryTalk Activation - component of FactoryTalk Services Platform are affected: FactoryTalk Activation Service | Version 4.00.02 and prior versions.FactoryTalk Activation is used in the following Rockwell Automation products: Arena | Emonitor | FactoryTalk AssetCentre | FactoryTalk Batch | FactoryTalk EnergyMetrix | FactoryTalk eProcedure | FactoryTalk Gateway | FactoryTalk Historian Site Edition (SE) | FactoryTalk Historian Classic | FactoryTalk Information Server | FactoryTalk Metrics | FactoryTalk Transaction Manager | FactoryTalk VantagePoint | FactoryTalk View Machine Edition (ME) | FactoryTalk View Site Edition (SE) | FactoryTalk ViewPoint | RSFieldBus | RSLinx Classic | RSLogix 500 | RSLogix 5000 | RSLogix 5 | RSLogix Emulate 5000 | RSNetWorx | RSView32 | SoftLogix 5800 | Studio 5000 Architect | Studio 5000 Logix Designer | Studio 5000 View Designer and Studio 5000 Logix Emulate." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-047-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-054-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-054-01" ;
    dcterms:issued "2017-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "VIPA Controls WinPLC7" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-5177" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-5177 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinPLC7" ;
    icsa:productDistribution "Australia, Germany, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "The following versions of WinPLC7 - PLC programming software are affected: WinPLC Versions 5.0.45.5921 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-054-01" ;
    icsa:vendor "VIPA Controls" ;
    icsa:year 2017 .

icsa-res:ICSA-17-054-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-054-02" ;
    dcterms:issued "2017-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Red Lion Controls Sixnet-Managed Industrial Switches, AutomationDirect STRIDE-Managed Ethernet Switches Vulnerability" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2016-9335" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2016-9335 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sixnet-Managed Industrial Switches, AutomationDirect STRIDE-Managed Ethernet Switches" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Red Lion Controls Sixnet-Managed Industrial Switches are affected: Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and prior.The following AutomationDirect STRIDE-Managed Ethernet Switch models which are manufactured by Red Lion Controls are affected: Stride-Managed Ethernet Switches running firmware Version 5.0.190 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-054-02" ;
    icsa:vendor "Red Lion Controls, AutomationDirect" ;
    icsa:year 2017 .

icsa-res:ICSA-17-054-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-054-03" ;
    dcterms:issued "2017-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M340 PLC (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Defense Industrial Base; Energy; Government Facilities; Nuclear Reactors Materials and Waste; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6017" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-6017 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon M340 PLC" ;
    icsa:productDistribution "China, France, India, Russia, United States" ;
    icsa:productsAffected "Schneider Electric reports the vulnerability affects the following products: M340 CPUs with firmware prior to v2.9 | M580 CPUs with firmware prior to v2.3 | Quantum CPUs with firmware prior to v3.52 | Premium CPUs all versions | M1E CPUs all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-054-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-059-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-059-01" ;
    dcterms:issued "2017-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM NMS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-2683; CVE-2017-2682" ;
    icsa:cweNumber "CWE-79; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2017-2682,
        cve-res:CVE-2017-2683 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following RUGGEDCOM monitoring products: RUGGEDCOM NMS: All versions prior to V2.1.0 (Windows and Linux)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-059-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-061-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-061-01" ;
    dcterms:issued "2017-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton xComfort Ethernet Communication Interface" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-9368" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2016-9368 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "xComfort Ethernet Communication Interface" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of xComfort Ethernet Communication Interface (ECI) - building automation system are affected: xComfort ECI Versions 1.07 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-061-01" ;
    icsa:vendor "Eaton" ;
    icsa:year 2017 .

icsa-res:ICSA-17-061-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-061-02" ;
    dcterms:issued "2017-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Conext ComBox" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-6019" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-6019 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Conext ComBox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerability affects the following Conext ComBox solar battery monitor: Conext ComBox - model 865-1058: all firmware versions prior to V3.03 BN 830." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-061-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-061-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-061-03" ;
    dcterms:issued "2017-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK Integrate and SINUMERIK Operate" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-2685" ;
    icsa:cweNumber "CWE-300" ;
    icsa:hasCVE cve-res:CVE-2017-2685 ;
    icsa:hasCWE cwe-res:CWE-300 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK Integrate and SINUMERIK Operate" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following SINUMERIK Integrate and Operate product suite versions: SINUMERIK Integrate Access MyMachine/Ethernet withAMM Service Engineer Client (ActiveX): All versions. SINUMERIK Integrate Access MyMachine/Ethernet and Analyze MyCondition withSINUMERIK Integrate Operate Client: All versions between 2.0.3.00.016 (including) and 2.0.6 (excluding) and All versions between 3.0.4.00.032 (including) and 3.0.6 (excluding).Affected SINUMERIK Integrate Operate clients are included in the following Operate releases: All versions between V4.5 SP6 (including) and V4.5 SP6 Hotfix 8 (excluding) and All versions between V4.7 SP2 Hotfix 1 (including) and V4.7 SP4 (excluding)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-061-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-066-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-066-01" ;
    dcterms:issued "2017-03-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware Intelligence" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-5178" ;
    icsa:cweNumber "CWE-255" ;
    icsa:hasCVE cve-res:CVE-2017-5178 ;
    icsa:hasCWE cwe-res:CWE-255 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware Intelligence" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Wonderware Intelligence - operations management software are affected: Tableau Server/Desktop Versions 7.0 to 10.1.3 included in Wonderware Intelligence Versions 2014R3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-066-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-068-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-068-01" ;
    dcterms:issued "2017-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric ClearSCADA" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-6021" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-6021 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ClearSCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ClearSCADA - server and communications driver processes are affected: All supported versions including: ClearSCADA 2014 R1 (build 75.5210) and prior | ClearSCADA 2014 R1.1 (build 75.5387) and prior | ClearSCADA 2015 R1 (build 76.5648) and prior | ClearSCADA 2015 R2 (build 77.5882) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-068-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-073-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-073-01" ;
    dcterms:issued "2017-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation PLC Ethernet Module" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-6023" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-6023 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation PLC Ethernet Module" ;
    icsa:productDistribution "Taiwan, Asia, Europe" ;
    icsa:productsAffected "The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215 | CBE versions prior to V3.6 Build 170215 | CM55E versions prior to V3.6 Build 170215 and CM25E versions prior to V3.6 Build 170215." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-073-01" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-075-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-075-01" ;
    dcterms:issued "2017-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6016" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2017-6016 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA" ;
    icsa:productDistribution "Brazil, South America" ;
    icsa:productsAffected "2017.; The following versions of LAquis SCADA - industrial automation software are affected: LAquis SCADA software | Versions 4.1 and prior versions released before January 20" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-075-01" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2017 .

icsa-res:ICSA-17-082-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-082-01" ;
    dcterms:issued "2017-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6020" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2017-6020 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA" ;
    icsa:productDistribution "Brazil, South America" ;
    icsa:productsAffected "The following versions of LAquis SCADA - industrial automation software are affected: LAquis SCADA software | versions prior to version 4.1.0.3237." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-082-01" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2017 .

icsa-res:ICSA-17-087-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-087-01" ;
    dcterms:issued "2017-03-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX I" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-2688; CVE-2017-2686; CVE-2017-2687; CVE-2017-2689; CVE-2017-6864" ;
    icsa:cweNumber "CWE-79; CWE-352; CWE-80; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2017-2686,
        cve-res:CVE-2017-2687,
        cve-res:CVE-2017-2688,
        cve-res:CVE-2017-2689,
        cve-res:CVE-2017-6864 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-352,
        cwe-res:CWE-79,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX I" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following RUGGEDCOM VPN endpoints and firewall devices: RUGGEDCOM ROX I: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-087-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-087-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-087-02" ;
    dcterms:issued "2017-03-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS Web Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-6025; CVE-2017-6027" ;
    icsa:cweNumber "CWE-434; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-6025,
        cve-res:CVE-2017-6027 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CODESYS Web Server - part of the CODESYS WebVisu web browser visualization software are affected: CODESYS Web Server Versions 2.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-087-02" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2017 .

icsa-res:ICSA-17-089-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-089-01" ;
    dcterms:issued "2017-03-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware InTouch Access Anywhere" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-5160; CVE-2017-5156; CVE-2017-5158" ;
    icsa:cweNumber "CWE-352; CWE-200; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2017-5156,
        cve-res:CVE-2017-5158,
        cve-res:CVE-2017-5160 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-326,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware InTouch Access Anywhere" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Wonderware InTouch Access Anywhere versions are affected: Wonderware InTouch Access Anywhere | version 11.5.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-089-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-089-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-089-02" ;
    dcterms:issued "2017-03-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon PLCs" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6028; CVE-2017-6030; CVE-2017-6026" ;
    icsa:cweNumber "CWE-343; CWE-522; CWE-330" ;
    icsa:hasCVE cve-res:CVE-2017-6026,
        cve-res:CVE-2017-6028,
        cve-res:CVE-2017-6030 ;
    icsa:hasCWE cwe-res:CWE-330,
        cwe-res:CWE-343,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon PLCs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Modicon M221 | M241 and M251 programmable logic controllers (PLCs) are affected by a predictable value range from previous values vulnerability: Modicon M221 | firmware versions prior to Version 1.5.0.0 | Modicon M241 | firmware versions prior to Version 4.0.5.11 and Modicon M251 | firmware versions prior to Version 4.0.5.11.The following versions of the Modicon M241 and M251 PLCs are affected by a use of insufficiently random values vulnerability: Modicon M241 | firmware versions prior to Version 4.0.5.11 and Modicon M251 | firmware versions prior to Version 4.0.5.11.The following versions of the Modicon M241 and M251 PLCs are affected by an insufficiently protected credentials vulnerability: Modicon M241 all firmware versions and Modicon M251 all firmware versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-089-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-094-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-094-01" ;
    dcterms:issued "2017-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Interactive Graphical SCADA System Software" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-6033" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-6033 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Interactive Graphical SCADA System Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerability affects the following IGSS HMI desktop application: IGSS Software | Version 12 and previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-094-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-094-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-094-02" ;
    dcterms:issued "2017-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Marel Food Processing Systems (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Iceland" ;
    icsa:criticalInfrastructureSector "Food and Agriculture" ;
    icsa:cveNumber "CVE-2017-6041; CVE-2017-9626; CVE-2016-9358" ;
    icsa:cweNumber "CWE-284; CWE-434; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2016-9358,
        cve-res:CVE-2017-6041,
        cve-res:CVE-2017-9626 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-284,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Food Processing Systems" ;
    icsa:productDistribution "Iceland, United States, South America, Asia, Europe" ;
    icsa:productsAffected "The following Marel food processing products are affected: All M3000 terminal-based products contain hard-coded password and unrestricted file upload vulnerabilities: Graders using M3000 terminal | Portioning Machines using M3000 terminal | Flowline systems using M3000 terminal | Packing systems using M3000 terminal | SensorX machines using M3000 terminal | Target Batchers using M3000 terminal and SpeedBatchers using M3000 terminal.All devices operating the Pluto platform contain an access control vulnerability: Graders using Pluto platform | Portioning Machines using Pluto platform | Flowline systems using Pluto platform | Packing systems using Pluto platform | SensorX machines using Pluto platform | Target Batchers using Pluto platform and SpeedBatchers using Pluto platform." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-094-02" ;
    icsa:vendor "Marel" ;
    icsa:year 2017 .

icsa-res:ICSA-17-094-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-094-03" ;
    dcterms:issued "2017-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley Stratix and Allen-Bradley ArmorStratix" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-3881" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-3881 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley Stratix and Allen-Bradley ArmorStratix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Allen-Bradley Stratix and ArmorStratix Industrial Ethernet and Distribution switches are affected: Allen-Bradley Stratix 5400 Industrial Ethernet Switches all Versions 15.2(5)EA.fc4 and earlier allen-Bradley Stratix 5410 Industrial Distribution Switches all Versions 15.2(5)EA.fc4 and earlier allen-Bradley Stratix 5700 and ArmorStratix 5700 Industrial Managed Ethernet Switches all Versions 15.2(5)EA.fc4 and earlier allen-Bradley Stratix 8000 Modular Managed Industrial Ethernet Switches all Versions 15.2(5)EA.fc4 and earlier and Allen-Bradley Stratix 8300 Modular Managed Industrial Ethernet Switches all Versions 15.2(4a)EA5 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-094-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-094-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-094-04" ;
    dcterms:issued "2017-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix 5900" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-7704; CVE-2015-0288; CVE-2010-5298; CVE-2015-0291; CVE-2015-7852; CVE-2016-6384; CVE-2015-0290; CVE-2016-6380; CVE-2015-0285; CVE-2014-3470; CVE-2015-7692; CVE-2014-2111; CVE-2014-3360; CVE-2015-7853; CVE-2014-3354; CVE-2015-7854; CVE-2014-0198; CVE-2016-6393; CVE-2016-6415; CVE-2015-0207; CVE-2015-0293; CVE-2015-7851; CVE-2014-3361; CVE-2015-7849; CVE-2015-0643; CVE-2014-2108; CVE-2016-1344; CVE-2015-1799; CVE-2014-3355; CVE-2016-1350; CVE-2015-7701; CVE-2015-0209; CVE-2014-0195; CVE-2015-7703; CVE-2015-1798; CVE-2015-7691; CVE-2014-0221; CVE-2014-0224; CVE-2014-0076; CVE-2015-0292; CVE-2015-7871; CVE-2014-3299; CVE-2014-2106; CVE-2014-2112; CVE-2014-2109; CVE-2014-3359; CVE-2015-0287; CVE-2016-6381; CVE-2015-7855; CVE-2015-0289; CVE-2015-7705; CVE-2015-7702; CVE-2015-7850; CVE-2015-0646; CVE-2014-2113; CVE-2014-3566; CVE-2015-7848; CVE-2015-0642; CVE-2016-6382; CVE-2015-1787; CVE-2016-1409" ;
    icsa:cweNumber "CWE-22; CWE-200; CWE-287; CWE-310; CWE-264; CWE-20; CWE-190; CWE-362; CWE-189; CWE-119; CWE-399; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2010-5298,
        cve-res:CVE-2014-0076,
        cve-res:CVE-2014-0195,
        cve-res:CVE-2014-0198,
        cve-res:CVE-2014-0221,
        cve-res:CVE-2014-0224,
        cve-res:CVE-2014-2106,
        cve-res:CVE-2014-2108,
        cve-res:CVE-2014-2109,
        cve-res:CVE-2014-2111,
        cve-res:CVE-2014-2112,
        cve-res:CVE-2014-2113,
        cve-res:CVE-2014-3299,
        cve-res:CVE-2014-3354,
        cve-res:CVE-2014-3355,
        cve-res:CVE-2014-3359,
        cve-res:CVE-2014-3360,
        cve-res:CVE-2014-3361,
        cve-res:CVE-2014-3470,
        cve-res:CVE-2014-3566,
        cve-res:CVE-2015-0207,
        cve-res:CVE-2015-0209,
        cve-res:CVE-2015-0285,
        cve-res:CVE-2015-0287,
        cve-res:CVE-2015-0288,
        cve-res:CVE-2015-0289,
        cve-res:CVE-2015-0290,
        cve-res:CVE-2015-0291,
        cve-res:CVE-2015-0292,
        cve-res:CVE-2015-0293,
        cve-res:CVE-2015-0642,
        cve-res:CVE-2015-0643,
        cve-res:CVE-2015-0646,
        cve-res:CVE-2015-1787,
        cve-res:CVE-2015-1798,
        cve-res:CVE-2015-1799,
        cve-res:CVE-2015-7691,
        cve-res:CVE-2015-7692,
        cve-res:CVE-2015-7701,
        cve-res:CVE-2015-7702,
        cve-res:CVE-2015-7703,
        cve-res:CVE-2015-7704,
        cve-res:CVE-2015-7705,
        cve-res:CVE-2015-7848,
        cve-res:CVE-2015-7849,
        cve-res:CVE-2015-7850,
        cve-res:CVE-2015-7851,
        cve-res:CVE-2015-7852,
        cve-res:CVE-2015-7853,
        cve-res:CVE-2015-7854,
        cve-res:CVE-2015-7855,
        cve-res:CVE-2015-7871,
        cve-res:CVE-2016-1344,
        cve-res:CVE-2016-1350,
        cve-res:CVE-2016-1409,
        cve-res:CVE-2016-6380,
        cve-res:CVE-2016-6381,
        cve-res:CVE-2016-6382,
        cve-res:CVE-2016-6384,
        cve-res:CVE-2016-6393,
        cve-res:CVE-2016-6415 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-189,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-264,
        cwe-res:CWE-287,
        cwe-res:CWE-310,
        cwe-res:CWE-362,
        cwe-res:CWE-399,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix 5900" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that these vulnerabilities affect the following Stratix 5900 Services Routers: Stratix 5900 all Versions prior to 15.6.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-094-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-094-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-094-05" ;
    dcterms:issued "2017-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix 5580 and CompactLogix 5380" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Transportation" ;
    icsa:cveNumber "CVE-2017-6024" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-6024 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix 5580 and CompactLogix 5380" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ControlLogix 5580 and CompactLogix 5380 - programmable automation controllers are affected: ControlLogix 5580 controllers V28.011 | V28.012 and V28.013 | ControlLogix 5580 controllers V29.011 | CompactLogix 5380 controllers V28.011 and CompactLogix 5380 controllers V29.011." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-094-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-096-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-096-01" ;
    dcterms:issued "2017-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Certec EDV GmbH atvise scada (Update A)" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-6029; CVE-2017-6031" ;
    icsa:cweNumber "CWE-79; CWE-644" ;
    icsa:hasCVE cve-res:CVE-2017-6029,
        cve-res:CVE-2017-6031 ;
    icsa:hasCWE cwe-res:CWE-644,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "atvise scada" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of atvise scada - human machine interface configuration platform are affected: atvise scada prior to Version 3.0 without the vendor built-in security mechanism activated." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-096-01" ;
    icsa:vendor "Certec EDV GmbH" ;
    icsa:year 2017 .

icsa-res:ICSA-17-101-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-101-01" ;
    dcterms:issued "2017-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Modbus Protocol" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Nuclear Reactors Materials and Waste; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6034; CVE-2017-6032" ;
    icsa:cweNumber "CWE-294; CWE-657" ;
    icsa:hasCVE cve-res:CVE-2017-6032,
        cve-res:CVE-2017-6034 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-657 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Modbus Protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Modicon Modbus protocol - used with the Modicon family of programmable logic controllers (PLCs) are affected: Modicon Modbus protocol all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-101-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-103-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-103-01" ;
    dcterms:issued "2017-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wecon Technologies LEVI Studio HMI Editor" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-6037; CVE-2017-6035" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-6035,
        cve-res:CVE-2017-6037 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Technologies LEVI Studio HMI Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LEVI Studio HMI Editor - HMI programming software are affected: LEVI Studio HMI Editor all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-103-01" ;
    icsa:vendor "WECON" ;
    icsa:year 2017 .

icsa-res:ICSA-17-103-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-103-02" ;
    dcterms:issued "2017-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M221 PLCs and SoMachine Basic (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-7574; CVE-2017-7575" ;
    icsa:cweNumber "CWE-321; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2017-7574,
        cve-res:CVE-2017-7575 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon M221 PLCs and SoMachine Basic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that these vulnerabilities affect the following PLCs and tools for configuring and developing automation machinery: All Modicon M221 PLCs with firmware version up to v1.5.0.1 and associated SoMachine Basic software (up to v1.5)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-103-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-115-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-115-01" ;
    dcterms:issued "2017-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "BLF-Tech LLC VisualView HMI" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6051" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-6051 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VisualView HMI" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following VisualView HMI versions are affected: VisualView HMI Version 9.9.14.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-115-01" ;
    icsa:vendor "BLF-Tech LLC" ;
    icsa:year 2017 .

icsa-res:ICSA-17-115-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-115-02" ;
    dcterms:issued "2017-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sierra Wireless AirLink Raven XE and XT" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-6042; CVE-2017-6044; CVE-2017-6046" ;
    icsa:cweNumber "CWE-352; CWE-522; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2017-6042,
        cve-res:CVE-2017-6044,
        cve-res:CVE-2017-6046 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-352,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AirLink Raven XE and XT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Sierra Wireless gateways are affected: AirLink Raven XE all versions prior to 4.0.14 and AirLink Raven XT all versions prior to 4.0.11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-115-02" ;
    icsa:vendor "Sierra Wireless" ;
    icsa:year 2017 .

icsa-res:ICSA-17-115-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-115-03" ;
    dcterms:issued "2017-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hyundai Motor America Blue Link" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2017-6052; CVE-2017-6054" ;
    icsa:cweNumber "CWE-321; CWE-300" ;
    icsa:hasCVE cve-res:CVE-2017-6052,
        cve-res:CVE-2017-6054 ;
    icsa:hasCWE cwe-res:CWE-300,
        cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Blue Link" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of Blue Link - a mobile application for Hyundai vehicle management are affected: Blue Link Version 3.9.5 and Blue Link Version 3.9.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-115-03" ;
    icsa:vendor "Hyundai Motor America" ;
    icsa:year 2017 .

icsa-res:ICSA-17-115-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-115-04" ;
    dcterms:issued "2017-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-7903; CVE-2017-7899; CVE-2017-7898; CVE-2017-7901; CVE-2017-7902" ;
    icsa:cweNumber "CWE-343; CWE-200; CWE-307; CWE-323; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2017-7898,
        cve-res:CVE-2017-7899,
        cve-res:CVE-2017-7901,
        cve-res:CVE-2017-7902,
        cve-res:CVE-2017-7903 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-307,
        cwe-res:CWE-323,
        cwe-res:CWE-343,
        cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley MicroLogix 1100 and 1400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Allen-Bradley MicroLogix 1100 programmable-logic controller are affected: 1763-L16AWA | Series A and B | Version 16.00 and prior versions;1763-L16BBB | Series A and B | Version 16.00 and prior versions;1763-L16BWA | Series A and B | Version 16.00 and prior versions; and1763-L16DWD | Series A and B | Version 16.00 and prior versions.The following versions of the Allen-Bradley MicroLogix 1400 programmable logic controller are affected: 1766-L32AWA | Series A and B | Version 16.00 and prior versions;1766-L32BWA | Series A and B | Version 16.00 and prior versions;1766-L32BWAA | Series A and B | Version 16.00 and prior versions;1766-L32BXB | Series A and B | Version 16.00 and prior versions;1766-L32BXBA | Series A and B | Version 16.00 and prior versions; and1766-L32AWAA | Series A and B | Version 16.00 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-115-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-117-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-117-01" ;
    dcterms:issued "2017-04-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Multilin SR, UR, and URplus Protective Relays (Update B)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-7905" ;
    icsa:cweNumber "CWE-261" ;
    icsa:hasCVE cve-res:CVE-2017-7905 ;
    icsa:hasCWE cwe-res:CWE-261 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multilin SR, UR, and URplus Protective Relays" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Multilin SR protective relays are affected: 750 Feeder Protection Relay | firmware versions prior to Version 7.47 | 760 Feeder Protection Relay | firmware versions prior to Version 7.47 | 469 Motor Protection Relay | firmware versions prior to Version 5.23 | 489 Generator Protection Relay | firmware versions prior to Version 4.06 | 745 Transformer Protection Relay | firmware versions prior to Version 5.23 and 369 Motor Protection Relay | firmware versions prior to Version 3.63.The following versions of the Multilin Universal Relay (UR) and URplus relay families are affected: Universal Relay | firmware Version 6.02 (excluding Version 5.83 | Version 5.92 and all subsequent minor releases) and URplus (D90 | C90 | B95) all versions.GE has identified additional legacy products that are affected: MM300 Motor Management Relay | firmware versions prior to Version 1.71 | MM200 Motor Management System | firmware versions prior to Version 1.25 | MX350 Relay | firmware versions prior to Version 1.27 | RPTCS | firmware versions prior to Version 1.29 | 350 Feeder Protection Relay | firmware versions prior to Version 2.30 | 345 Transformer Protection Relay | firmware versions prior to Version 2.30 | 339 Motor Protection Relay | firmware versions prior to Version 2.30 and T1000 Switch | firmware versions prior to Version 03A02." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-117-01" ;
    icsa:vendor "GE" ;
    icsa:year 2017 .

icsa-res:ICSA-17-122-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-122-01" ;
    dcterms:issued "2017-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware Historian Client" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-7907" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2017-7907 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware Historian Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Wonderware Historian Client - analysis and reporting software are affected: Wonderware Historian Client 2014 R2 SP1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-122-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-122-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-122-02" ;
    dcterms:issued "2017-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "CyberVision Kaa IoT Platform" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Food and Agriculture; Healthcare and Public Health; Information Technology" ;
    icsa:cveNumber "CVE-2017-7911" ;
    icsa:cweNumber "CWE-485" ;
    icsa:hasCVE cve-res:CVE-2017-7911 ;
    icsa:hasCWE cwe-res:CWE-485 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kaa IoT Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Kaa IoT Platform - middleware platform is affected: Kaa IoT Platform | Version 0.7.4 and possibly other versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-122-02" ;
    icsa:vendor "CyberVision" ;
    icsa:year 2017 .

icsa-res:ICSA-17-122-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-122-03" ;
    dcterms:issued "2017-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech B+B SmartWorx MESR901" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-7909" ;
    icsa:cweNumber "CWE-603" ;
    icsa:hasCVE cve-res:CVE-2017-7909 ;
    icsa:hasCWE cwe-res:CWE-603 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MESR901" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MESR901 - Modbus gateway are affected: MESR901 firmware versions 1.5.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-122-03" ;
    icsa:vendor "Advantech B+B SmartWorx" ;
    icsa:year 2017 .

icsa-res:ICSA-17-124-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-124-01" ;
    dcterms:issued "2017-05-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hikvision Cameras" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-7921; CVE-2017-7923" ;
    icsa:cweNumber "CWE-260; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-7921,
        cve-res:CVE-2017-7923 ;
    icsa:hasCWE cwe-res:CWE-260,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hikvision reports that the following cameras and versions are affected: DS-2CD2xx2F-I SeriesV5.2.0 build 140721 to V5.4.0 build 160530DS-2CD2xx0F-I SeriesV5.2.0 build 140721 to V5.4.0 Build 160401DS-2CD2xx2FWD SeriesV5.3.1 build 150410 to V5.4.4 Build 161125DS- 2CD4x2xFWD SeriesV5.2.0 build 140721 to V5.4.0 Build 160414DS-2CD4xx5 SeriesV5.2.0 build 140721 to V5.4.0 Build 160421DS-2DFx SeriesV5.2.0 build 140805 to V5.4.5 Build 160928DS-2CD63xx SeriesV5.0.9 build 140305 to V5.3.5 Build 160106." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-124-01" ;
    icsa:vendor "Hikvision" ;
    icsa:year 2017 .

icsa-res:ICSA-17-124-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-124-02" ;
    dcterms:issued "2017-05-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Financial Services; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-7925; CVE-2017-7927" ;
    icsa:cweNumber "CWE-836; CWE-260" ;
    icsa:hasCVE cve-res:CVE-2017-7925,
        cve-res:CVE-2017-7927 ;
    icsa:hasCWE cwe-res:CWE-260,
        cwe-res:CWE-836 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Digital Video Recorders and IP Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Dahua Technology Co. Ltd (Dahua) network cameras are affected: DH-IPC-HDBW23A0RN-ZS | DH-IPC-HDBW13A0SN | DH-IPC-HDW1XXX | DH-IPC-HDW2XXX | DH-IPC-HDW4XXX | DH-IPC-HFW1XXX | DH-IPC-HFW2XXX | DH-IPC-HFW4XXX | DH-SD6CXX | DHanVR1XXX | DH-HCVR4XXX and DH-HCVR5XXX.The following Dahua Digital Video Recorders (DVRs) are affected: DHI-HCVR51A04HE-S3 | DHI-HCVR51A08HE-S3 and DHI-HCVR58A32S-S2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-124-02" ;
    icsa:vendor "Dahua Technology Co., Ltd" ;
    icsa:year 2017 .

icsa-res:ICSA-17-124-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-124-03" ;
    dcterms:issued "2017-05-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-7929" ;
    icsa:cweNumber "CWE-36" ;
    icsa:hasCVE cve-res:CVE-2017-7929 ;
    icsa:hasCWE cwe-res:CWE-36 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan, United States, Europe" ;
    icsa:productsAffected "The following WebAccess versions are affected: WebAccess Version 8.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-124-03" ;
    icsa:vendor "Advantech" ;
    icsa:year 2017 .

icsa-res:ICSA-17-129-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-129-01" ;
    dcterms:issued "2017-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens devices using the PROFINET Discovery and Configuration Protocol (Update K)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6865" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-6865 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "devices using the PROFINET Discovery and Configuration Protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following products using the PROFINET DCP: SIMATIC WinCC (TIA Portal) v13: All versions prior to v13 SP2 and v14: All versions prior to v14 SP1 | SIMATIC STEP 7 (TIA Portal) v13: All versions prior to v13 SP2 and v14: All versions prior to v14 SP1 | SIMATIC STEP 7 v5.X: All versions prior to v5.6STEP 7 - Micro/WIN SMART: All versions prior to v2.3SMART PC Access v2.3 | SIMATIC Automation Tool: All versions prior to v3.0 | SIMATIC WinCCv7.2 and prior: All versionsv7.3: All versions prior to v7.3 Update 15v7.4: All versions prior to v7.4 SP1 Upd1 | SIMATIC PCS 7 v8.1: All versions | SIMATIC PCS 7 v8.2: All versions prior to v8.2 SP1 | SIMATIC NET PC-Software: All versions prior to v14 SP1 | Primary Setup Tool (PST): All versions prior to v4.2 HF1Security Configuration Tool (SCT): All versions prior to v5.0SINEMA Server: All versions prior to v14. SINAUT ST7CC: All versions installed in conjunction with SIMATIC WinCC prior to v7.3 Update 15. SINAUT ST7CC: All versions | SIMATIC WinAC RTX 2010 SP2: All versions | SIMATIC WinAC RTX F 2010 SP2: All versions | SINUMERIK 808D Programming Tool: All versions prior to v4.7 SP4 HF2 and SIMATIC WinCC flexible 2008: All versions prior to flexible 2008 SP5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-129-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-129-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-129-02" ;
    dcterms:issued "2017-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PROFINET DCP (Update U)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2017-2680; CVE-2017-2681" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-2680,
        cve-res:CVE-2017-2681 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Devices using the PROFINET Discovery and Configuration Protocol (DCP)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "8DO; XR-500 families: All versions prior to v6.1 SIMATIC CM 1542-1: All versions prior to v2.0 SIMATIC CM 1542SP-1: All versions prior to v1.0.15 SIMATIC CP 343-1 (incl. SIPLUS variants): All versions prior to v3.1.3 SIMATIC CP 343-1 Advanced (incl. SIPLUS variants): All versions SIMATIC CP 343-1 Lean (incl. SIPLUS variants): All versions prior to v3.1.3 SIMATIC CP 443-1 (incl. SIPLUS variants): All versions prior to v3.2.17 SIMATIC CP 443-1 Advanced (incl. SIPLUS variants): All versions prior to v3.2.17 SIMATIC CP 443-1 OPC-UA: All versions SIMATIC CP 1243-1 (incl. SIPLUS variants): All versions prior to v2.1.82 SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants): All versions SIMATIC CP 1243-1 IEC (incl. SIPLUS variants): All versions SIMATIC CP 1243-1 IRC (incl. SIPLUS variants): All versions prior to v2.1.82 SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants): All versions prior to v1.0.15 SIMATIC CP 1543-1 (incl. SIPLUS variants): All versions prior to v2.1 SIMATIC CP 1543SP-1 (incl. SIPLUS variants): All versions prior to v1.0.15 SIMATIC CP 1604: All versions prior to v2.7 SIMATIC CP 1616: All versions prior to v2.7 SIMATIC DK-16xx PN IO: All versions prior to v2.7 SIMATIC ET 200AL: All versions prior to v1.0.2 SIMATIC ET200ecoPN; DC24V; DC24V/0; HMI Multi Panels; 6ES7142-6BR00-0BB0; 16DI; except IM155-6 PN ST and IM155-6 PN HF): All versions SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants): All versions prior to v4.2.0 SIMATIC ET200SP IM155-6 PN HS (incl. SIPLUS variants): All versions prior to v4.0.1 SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants): All versions prior to v4.1.0 SIMATIC HMI Comfort Panels; 6ES7148-6JD00-0AB0 and 6ES7148-6JG00-0BB0): All versions SIMATIC ET200pro: All versions SIMATIC HMI Comfort Panels; 8DI; 6ES7142-6BG00-0BB0; DC24V/1; 5A; 4xM12 (6ES7142-6BF50-0AB0): All versions SIMATIC ET200ecoPN; Siemens reports these vulnerabilities affect the following products using PROFINET DCP: Development/Evaluation Kits DK Standard Ethernet Controller: All versions prior to v4.1.1 Patch04 Development/Evaluation Kits for PROFINET IO EK-ERTEC 200: All versions prior to v4.2.1 Patch03 Development/Evaluation Kits for PROFINET IO EK-ERTEC 200P: All versions prior to v4.4.0 Patch01 IE/AS-i Link PN IO: All versions IE/PB-Link: All versions prior to v3.0 SCALANCE M-800 / S615: All versions prior to v04.03 SCALANCE W700: All versions prior to v6.1 SCALANCE X408: All versions prior to v4.1.0 SCALANCE X414: All versions prior to v3.10.2 SCALANCE X-200 switch family (incl. SIPLUS NET variants): All versions prior to v5.2.2 SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): All versions prior to v5.4.0 SCALANCE X-300 switch family (incl. SIPLUS NET variants): All versions prior to v4.1.0 SCALANCE XM-400; XR-500: All versions prior to v6.1 SIMATIC DK-16xx PN IO: All versions prior to v2.7 SIMATIC ET 200AL: All versions prior to v1.0.2 SIMATIC ET200M (incl. SIPLUS variants): All versions SIMATIC ET200MP IM155-5 PN BA (incl. SIPLUS variants): All versions prior to v4.0.1 SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants): All versions prior to v4.2 SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants): All versions prior to v4.1 SIMATIC ET200S (incl. SIPLUS variants): All versions. SIMATIC ET200SP (incl. SIPLUS variants; 8xM12 (6ES7141-6BG00-0AB0): All versions SIMATIC ET200ecoPN; 8AI RTD/TC 8xM12 (6ES7144-6KD50-0AB0): All versions SIMATIC ET200ecoPN; 8xM12 (6ES7142-6BG00-0AB0): All versions SIMATIC ET200ecoPN; Siemens reports that these vulnerabilities affect the following products using PROFINET DCP: Development/Evaluation Kits DK Standard Ethernet Controller: All versions prior to v4.1.1 Patch04 Development/Evaluation Kits EK-ERTEC 200P PN IO: All versions prior to v4.4.0 Patch01 Development/Evaluation Kits EK-ERTEC 200 PN IO: All versions prior to v4.2.1 Patch03 IE/AS-i Link PN IO: All versions IE/PB-Link: All versions prior to v3.0 SCALANCE M-800; 8xM12 (6ES7142-6BH00-0AB0): All versions SIMATIC ET200ecoPN: IO-Link Master (6ES7148-6JA00-0AB0): All versions SIMATIC ET200M (incl. SIPLUS variants): All versions SIMATIC ET200MP IM155-5 PN BA (incl. SIPLUS variants): All versions prior to v4.0.1 SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants): All versions prior to v4.2 SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants): All versions prior to v4.1 SIMATIC ET200pro: All versions SIMATIC ET200S (incl. SIPLUS variants): All versions SIMATIC ET200SP (incl. SIPLUS variants; 6S7143-6BH00-0BB0; 6ES7141-6BH00-0BB0; 8xM12 (6ES7142-6BR00-0AB0): All versions SIMATIC ET200ecoPN; 8xM12 (6ES7147-6BG00-0AB0): All versions SIMATIC ET200ecoPN; S615: All versions prior to v04.03 SCALANCE W700: All versions prior to v6.1 SCALANCE X408: All versions prior to v4.1.0 SCALANCE X414: All versions prior to v3.10.2 SCALANCE X-200 switch family (incl. SIPLUS NET variants): All versions prior to v5.2.2 SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): All versions prior to v5.4.0 SCALANCE X-300 switch family (incl. SIPLUS NET variants): All versions prior to v4.1.0 SCALANCE XM-400; 3A; 8AI; 4 U/I; 4 RTD/TC 8xM12 (6ES7144-6KD00-0AB0): All versions SIMATIC ET200ecoPN; DC24V/2A; 6ES7146-6FF00-0AB0; 8xM12 (6ES7141-6BH00-0AB0): All versions SIMATIC ET200ecoPN; HMI Mobile Panels (incl. SIPLUS variants): All versions prior to v15.1 SIMATIC MV400 family: All versions prior to v7.0.6 SIMATIC PN/PN Coupler (incl. SIPLUS NET variants): All versions prior to v4.0 SIMATIC RF650R: All versions prior to v3.0 SIMATIC RF680R: All versions prior to v3.0 SIMATIC RF685R: All versions prior to v3.0 SIMATIC S7-200 SMART: All versions prior to v2.3 SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v3.X.14 SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants): All versions prior to v6.0.7 SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants): All versions prior to v6.0.6 SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants): All versions prior to v7.0.2 SIMATIC S7-410 CPU family (incl. SIPLUS variants): All versions prior to v8.2 SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to v4.2.1 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v2.1 SIMATIC S7-1500 Software Controller (incl. F): All versions prior to v2.1 SIMATIC TDC CP51M1: All versions prior to v1.1.8 SIMATIC TDC CPU555: All versions prior to v1.1.1 SIMATIC Teleservice Adapter IE Advanced: All versions SIMATIC Teleservice Adapter IE Basic: All versions SIMATIC Teleservice Adapter IE Standard: All versions SIMATIC WinAC RTX (F) 2010: All versions prior to SIMATIC WinAC RTX 2010 SP3 SIMOCODE pro V PN (incl. SIPLUS variants): All versions prior to v2.0.0 SIMOTION (incl. SIPLUS variants): All versions prior to v4.5 HF1 SINAMICS DCM w. PN: All versions prior to v1.4 SP1 HF5 SINAMICS DCP w. PN: All versions prior to v1.2 HF1 SINAMICS G110M w. PN: All versions prior to v4.7 SP6 HF3 SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants): All versions prior to v4.7 SP6 HF3 SINAMICS G130 v4.7 w. PN: All versions prior to v4.7 HF27 SINAMICS G130 v4.8 w. PN: All versions prior to v4.8 HF4 SINAMICS G150 v4.7 w. PN: v4.7: All versions prior to v4.7 HF27 SINAMICS G150 v4.8 w. PN: All versions prior to v4.8 HF4 SINAMICS S110 w. PN: All versions prior to V4.4 SP3 HF5 SINAMICS S120 prior to v4.7 w. PN (incl. SIPLUS variants): All versions prior to v4.7 SINAMICS S120 v4.7 SP1 w. PN (incl. SIPLUS variants): All versions SINAMICS S120 v4.7 w. PN (incl. SIPLUS variants): All versions prior to v4.7 HF27 SINAMICS S120 v4.8 w. PN (incl. SIPLUS variants): All versions prior to v4.8 HF4 SINAMICS S150 v4.7 w. PN: All versions prior to v4.7 HF27 SINAMICS S150 v4.8 w. PN: All versions prior to v4.8 HF4 SINAMICS V90 w. PN: All versions prior to v1.01 SINUMERIK 828D v4.5 and prior: All versions prior to v4.5 SP6 HF2 SINUMERIK 828D v4.7: All versions prior to v4.7 SP4 HF1 SINUMERIK 840D sl v4.5 and prior: All versions prior to v4.5 SP6 HF2 SINUMERIK 840D sl v4.7: All versions prior to v4.7 SP4 HF1 SIRIUS ACT 3SU1 interface module PROFINET: All versions prior to v1.1.0 SIRIUS Motor Starter M200D PROFINET: All versions SIRIUS Soft Starter 3RW44 PN: All versions SITOP PSU8600 PROFINET: All versions prior to v1.2.0 SITOP UPS1600 PROFINET (incl. SIPLUS variants): All versions prior to v2.2.0 Softnet PROFINET IO for PC-based Windows systems: All versions prior to v14 SP1.; 8 DIO; 4xM12 (6ES7141-6BF00-0AB0): All versions SIMATIC ET200ecoPN; except IM155-6 PN ST and IM155-6 PN HF): All versions SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants): All versions prior to v4.2.0 SIMATIC ET200SP IM155-6 PN HS (incl. SIPLUS variants): All versions prior to v4.0.1 SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants): All versions prior to v4.1.0. SIMATIC ET200ecoPN (except 6ES7141-6BG00-0BB0; 16DO DC24V/1; 4AO U/I 4xM12 (6ES7145-6HD00-0AB0): All versions SIMATIC ET200ecoPN; HMI Mobile Panels (incl. SIPLUS variants): All versions prior to V15.1 SIMATIC MV400 family: All versions prior to v7.0.6 SIMATIC NET CM 1542-1: All versions prior to v2.0 SIMATIC NET CM 1542SP-1: All versions prior to v1.0.15 SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants): All versions SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants): All versions prior to v3.1.3 SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants): All versions prior to v3.1.3 SIMATIC NET CP 443-1 Advanced (incl. SIPLUS variants): All versions prior to v3.2.17 SIMATIC NET CP 443-1 OPC-UA: All versions SIMATIC NET CP 443-1 Standard (incl. SIPLUS variants): All versions prior to v3.2.17 SIMATIC NET CP 1243-1 (incl. SIPLUS variants): All versions prior to v2.1.82 SIMATIC NET CP 1243-1 DNP3 (incl. SIPLUS variants): All versions SIMATIC NET CP 1243-1 IEC (incl. SIPLUS variants): All versions SIMATIC NET CP 1243-1 IRC (incl. SIPLUS variants): All versions prior to v2.1.82 SIMATIC NET CP 1542SP-1 IRC (incl. SIPLUS variants): All versions prior to v1.0.15 SIMATIC NET CP 1543-1 (incl. SIPLUS variants): All versions prior to v2.1 SIMATIC NET CP 1543SP-1 (incl. SIPLUS variants): All versions prior to v1.0.15 SIMATIC NET CP 1604: All versions prior to v2.7 SIMATIC NET CP 1616: All versions prior to v2.7 SIMATIC PN/PN Coupler (incl. SIPLUS NET variants): All versions prior to v4.0 SIMATIC RF650R: All versions prior to v3.0 SIMATIC RF680R: All versions prior to v3.0 SIMATIC RF685R: All versions prior to v3.0 SIMATIC S7-200 SMART: All versions prior to v2.3 SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v3.X.14 SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants): All versions prior to v6.0.7 SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants): All versions prior to v6.0.6 SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants): All versions prior to v7.0.2 SIMATIC S7-410 CPU family (incl. SIPLUS variants): All versions prior to v8.2 SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to v4.2.1 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v2.1 SIMATIC S7-1500 Software Controller (incl. F): All versions prior to v2.1 SIMATIC TDC CP51M1: All versions prior to v1.1.8 SIMATIC TDC CPU555: All versions prior to v1.1.1 SIMATIC Teleservice Adapter IE Advanced: All versions SIMATIC Teleservice Adapter IE Basic: All versions SIMATIC Teleservice Adapter IE Standard: All versions SIMATIC WinAC RTX (F) 2010: All versions prior to SIMATIC WinAC RTX 2010 SP3 SIMOCODE pro V PN (incl. SIPLUS variants): All versions prior to v2.0.0 SIMOTION (incl. SIPLUS variants): All versions prior to v4.5 HF1 SINAMICS DCM w. PN: All versions prior to v1.4 SP1 HF5 SINAMICS DCP w. PN: All versions prior to v1.2 HF1 SINAMICS G110M w. PN: All versions prior to v4.7 SP6 HF3 SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants): All versions prior to v4.7 SP6 HF3 SINAMICS G130 v4.7 w. PN: All versions prior to v4.7 HF27 SINAMICS G130 v4.8 w. PN: All versions prior to v4.8 HF4 SINAMICS G150 v4.7 w. PN: v4.7: All versions prior to v4.7 HF27 SINAMICS G150 v4.8 w. PN: All versions prior to v4.8 HF4 SINAMICS S110 w. PN: All versions prior to V4.4 SP3 HF5 SINAMICS S120 v4.7 SP1 w. PN (incl. SIPLUS variants): All versions SINAMICS S120 v4.7 w. PN (incl. SIPLUS variants): All versions prior to v4.7 HF27 SINAMICS S120 v4.8 w. PN (incl. SIPLUS variants): All versions prior to v4.8 HF4 SINAMICS S120 prior to v4.7 w. PN (incl. SIPLUS variants): All versions prior to v4.7 SINAMICS S150 v4.7 w. PN: All versions prior to v4.7 HF27 SINAMICS S150 v4.8 w. PN: All versions prior to v4.8 HF4 SINAMICS V90 w. PN: All versions prior to v1.01 SINUMERIK 828D v4.5 and prior: All versions prior to v4.5 SP6 HF2 SINUMERIK 828D v4.7: All versions prior to v4.7 SP4 HF1 SINUMERIK 840D sl v4.5 and prior: All versions prior to v4.5 SP6 HF2 SINUMERIK 840D sl v4.7: All versions prior to v4.7 SP4 HF1 SIRIUS ACT 3SU1 interface module PROFINET: All versions prior to v1.1.0 SIRIUS Motor Starter M200D PROFINET: All versions SIRIUS Soft Starter 3RW44 PN: All versions SITOP PSU8600 PROFINET: All versions prior to v1.2.0 SITOP UPS1600 PROFINET (incl. SIPLUS variants): All versions prior to v2.2.0 Softnet PROFINET IO for PC-based Windows systems: All versions prior to v14 SP1.; 4xM12 (6ES7142-6BF00-0AB0): All versions SIMATIC ET200ecoPN; 8 DO" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-129-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-129-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-129-03" ;
    dcterms:issued "2017-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC and SIMATIC WinCC Runtime Professional" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6867" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-6867 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC and SIMATIC WinCC Runtime Professional" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following versions of SIMATIC WinCC | SIMATIC WinCC (TIA Portal) and SIMATIC WinCC Runtime Professional: SIMATIC WinCC: V7.3: All versions prior to V7.3 Update 11 and V7.4: All versions prior to V7.4 SP1.SIMATIC WinCC Runtime Professional: V13: All versions prior to V13 SP2 and V14: All versions prior to V14 SP1.SIMATIC WinCC (TIA Portal) Professional: V13: All versions prior to V13 SP2 and V14: All versions prior to V14 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-129-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-131-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-131-01" ;
    dcterms:issued "2017-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT mGuard" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-7935; CVE-2017-7937" ;
    icsa:cweNumber "CWE-400; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-7935,
        cve-res:CVE-2017-7937 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mGuard" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of mGuard - network device are affected: mGuard firmware versions 8.3.0 to 8.4.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-131-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2017 .

icsa-res:ICSA-17-131-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-131-02" ;
    dcterms:issued "2017-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Satel Iberia SenNet Data Logger and Electricity Meters" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Spain" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2017-6048" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2017-6048 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SenNet Data Logger and Electricity Meters" ;
    icsa:productDistribution "Spain, Europe" ;
    icsa:productsAffected "The following versions of SenNet Data Logger and Electricity Meters - monitoring platforms are affected: SenNet Optimal DataLogger V5.37c-1.43c and prior | SenNet Solar Datalogger V5.03-1.56a and prior and SenNet Multitask Meter V5.21a-1.18b and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-131-02" ;
    icsa:vendor "Satel Iberia" ;
    icsa:year 2017 .

icsa-res:ICSA-17-136-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-136-01" ;
    dcterms:issued "2017-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Detcon SiteWatch Gateway" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6047; CVE-2017-6049" ;
    icsa:cweNumber "CWE-256; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-6047,
        cve-res:CVE-2017-6049 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiteWatch Gateway" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "The following versions of Detcon SiteWatch Gateway - Ethernet Notification System are affected: All SiteWatch Gateway versions are affected.Detcon reports Cellular versions not impacted." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-136-01" ;
    icsa:vendor "Detcon" ;
    icsa:year 2017 .

icsa-res:ICSA-17-136-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-136-02" ;
    dcterms:issued "2017-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SoMachine HVAC" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Nuclear Reactors Materials and Waste; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-7965; CVE-2017-7966" ;
    icsa:cweNumber "CWE-427; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-7965,
        cve-res:CVE-2017-7966 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoMachine HVAC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of SoMachine HVAC - PLC programming software is affected: SoMachine HVAC Versions 2.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-136-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-136-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-136-03" ;
    dcterms:issued "2017-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hanwha Techwin SRN-4000" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-7912" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2017-7912 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SRN-4000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SRN-4000 - network video management platform are affected: SRN-4000 firmware versions prior to SRN4000_v2.16_170401." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-136-03" ;
    icsa:vendor "Hanwha Techwin" ;
    icsa:year 2017 .

icsa-res:ICSA-17-136-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-136-04" ;
    dcterms:issued "2017-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric VAMPSET" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-7967" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-7967 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VAMPSET" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerability affects the following VAMPSET setting and configuration software products: VAMPSET | versions prior to v2.2.189." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-136-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-138-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-138-01" ;
    dcterms:issued "2017-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Miele Professional PG 85 Series" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-7240" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2017-7240 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PG 85 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Miele Professional reports that the following versions of the PG 85 product series - large capacity cleaner and disinfector and their embedded webservers are affected: PG8527 | version 2.02 | 2.51 | 2.52 and 2.54PG8528 | version 2.02 | 2.51 | 2.52 and 2.54PG8535 | version 1.00 and 1.04PG8536 | version 1.10 and 1.14" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-138-01" ;
    icsa:vendor "Miele Professional" ;
    icsa:year 2017 .

icsa-res:ICSA-17-138-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-138-02" ;
    dcterms:issued "2017-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware InduSoft Web Studio" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-7968" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2017-7968 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware InduSoft Web Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Schneider Electric's Wondeware InduSoft Web Studio are affected: Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-138-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-138-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-138-03" ;
    dcterms:issued "2017-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix 1100 Controllers" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-7924" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-7924 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix 1100 Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MicroLogix 1100 controllers are affected: 1763-L16BWA | 1763-L16AWA | 1763-L16BBB and 1763-L16DWD." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-138-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-143-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-143-01" ;
    dcterms:issued "2017-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa OnCell" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-7913; CVE-2017-7917; CVE-2017-7915" ;
    icsa:cweNumber "CWE-352; CWE-256; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2017-7913,
        cve-res:CVE-2017-7915,
        cve-res:CVE-2017-7917 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-307,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OnCell" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OnCell - high-speed industrial-grade IP gateway are affected: OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions | OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions | OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions | OnCell 5104-HSDPA | OnCell 5104-HSPA and OnCell 5004-HSPA." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-143-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2017 .

icsa-res:ICSA-17-150-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-150-01" ;
    dcterms:issued "2017-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Automated Logic Corporation ALC WebCTRL, Liebert SiteScan, Carrier i-VU" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-5795" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2016-5795 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ALC WebCTRL, Liebert SiteScan, Carrier i-VU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ALC web-based building automation applications are affected: Liebert SiteScan Web Version 6.5 and prior; ALC WebCTRL Version 6.5 and prior; andCarrier i-Vu Version 6.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-150-01" ;
    icsa:vendor "Automated Logic" ;
    icsa:year 2017 .

icsa-res:ICSA-17-152-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-152-01" ;
    dcterms:issued "2017-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Energy; Government Facilities; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-6039" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2017-6039 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerAgent SC3 Site Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Phoenix Broadband Technologies LLC reports that the following versions of PowerAgent SC3 - remote battery monitoring system (BMS) are affected: PowerAgent SC3 BMS all versions prior to v6.87" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-152-01" ;
    icsa:vendor "Phoenix Broadband Technologies LLC" ;
    icsa:year 2017 .

icsa-res:ICSA-17-152-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-152-02" ;
    dcterms:issued "2017-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "NXP i.MX Product Family" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-7936; CVE-2017-7932" ;
    icsa:cweNumber "CWE-295; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-7932,
        cve-res:CVE-2017-7936 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "i.MX Product Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following i.MX Devices - used on logic boards are affected: Devices affected by the Stack Buffer Overflow vulnerability: i.MX 50 | i.MX 53 | i.MX 6ULL | i.MX 6UltraLite | i.MX 6SoloLite | i.MX 6Solo | i.MX 6DualLite | i.MX 6SoloX | i.MX 6Dual | i.MX 6Quad | i.MX 6DualPlus | i.MX 6QuadPlus | Vybrid VF3xx | Vybrid VF5xx and Vybrid VF6xxDevices Affected by the Improper Certificate Validation Vulnerability: i.MX 28i.MX 50 | i.MX 53 | i.MX 7Soloi.MX 7DualVybrid VF3xx | Vybrid VF5xx | Vybrid VF6xx | i.MX 6ULL | i.MX 6UltraLite | i.MX 6SoloLite | i.MX 6Solo | i.MX 6DualLite | i.MX 6SoloX | i.MX 6Dual | i.MX 6Quad | i.MX 6DualPlus and i.MX 6QuadPlus" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-152-02" ;
    icsa:vendor "NXP Semiconductors" ;
    icsa:year 2017 .

icsa-res:ICSA-17-157-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-157-01" ;
    dcterms:issued "2017-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PanelView Plus 6 700-1500" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-7914" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2017-7914 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PanelView Plus 6 700-1500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PanelView Plus 6 700-1500 - graphic terminals and logic module products are affected: 6.00.04 | 6.00.05 | 6.00.42 | 6.00-20140306 | 6.10.20121012 | 6.10-20140122 | 7.00-20121012 | 7.00-20130108 | 7.00-20130325 | 7.00-20130619 | 7.00-20140128 | 7.00-20140310 | 7.00-20140429 | 7.00-20140621 | 7.00-20140729 | 7.00-20141022 | 8.00-20140730 and 8.00-20141023Additionally | Rockwell Automation reports that graphic terminals running OS 2.31 or greater are not affected by this vulnerability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-157-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-157-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-157-02" ;
    dcterms:issued "2017-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digital Canal Structural Wind Analysis" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-7910" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-7910 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wind Analysis" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of Wind Analysis - structural engineering software platform are affected: Wind Analysis versions 9.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-157-02" ;
    icsa:vendor "Digital Canal Structural" ;
    icsa:year 2017 .

icsa-res:ICSA-17-164-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-164-01" ;
    dcterms:issued "2017-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trihedral Engineering Limited VTScada" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6053; CVE-2017-6043; CVE-2017-6045" ;
    icsa:cweNumber "CWE-79; CWE-548; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-6043,
        cve-res:CVE-2017-6045,
        cve-res:CVE-2017-6053 ;
    icsa:hasCWE cwe-res:CWE-400,
        cwe-res:CWE-548,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VTScada" ;
    icsa:productDistribution "Canada, North America, Europe" ;
    icsa:productsAffected "The following versions of VTScada an HMI SCADA software are affected: VTScada Versions prior to 11.2.26" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-164-01" ;
    icsa:vendor "Trihedral Engineering Limited" ;
    icsa:year 2017 .

icsa-res:ICSA-17-164-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-164-02" ;
    dcterms:issued "2017-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Server 2017" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2017-7930; CVE-2017-7934" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-7930,
        cve-res:CVE-2017-7934 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Server 2017" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSIsoft reports that the vulnerabilities affect the following PI Server products: PI Data Archive versions prior to 2017." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-164-02" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2017 .

icsa-res:ICSA-17-164-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-164-03" ;
    dcterms:issued "2017-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Web API 2017" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2017-7926" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2017-7926 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Web API 2017" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSIsoft reports that the vulnerability affects the following PI Web API products: PI Web API versions prior to 2017 (1.9.0)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-164-03" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2017 .

icsa-res:ICSA-17-166-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-166-01" ;
    dcterms:issued "2017-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cambium Networks ePMP" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2017-7922; CVE-2017-7918" ;
    icsa:cweNumber "CWE-284; CWE-269" ;
    icsa:hasCVE cve-res:CVE-2017-7918,
        cve-res:CVE-2017-7922 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ePMP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Cambium reports that the vulnerabilities affect the following ePMP Network Access Control products: ePMP All Models." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-166-01" ;
    icsa:vendor "Cambium Networks" ;
    icsa:year 2017 .

icsa-res:ICSA-17-171-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-171-01" ;
    dcterms:issued "2017-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6050" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2017-6050 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "The following versions of IntegraXor - web SCADA/HMI solution are affected: IntegraXor Versions 5.2.1231.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-171-01" ;
    icsa:vendor "Ecava" ;
    icsa:year 2017 .

icsa-res:ICSA-17-173-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-173-01" ;
    dcterms:issued "2017-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CP 44x-1 Redundant Network Access Modules" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2017-6868" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-6868 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP 44x-1 Redundant Network Access Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the SIMATIC CP 44x-1 RNA which connect SIMATIC S7-400 CPUs to Industrial Ethernet are affected: SIMATIC CP 44x-1 RNA all versions prior to Versions 1.4.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-173-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-173-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-173-02" ;
    dcterms:issued "2017-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens XHQ" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-6866" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2017-6866 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XHQ" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following versions of the XHQ operations intelligence product line: XHQ 4: All versions prior to V4.7.1.3XHQ 5: All versions prior to V5.0.0.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-173-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-178-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-178-01" ;
    dcterms:issued "2017-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Newport XPS-Cx, XPS-Qx" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-7919" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-7919 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XPS-Cx, XPS-Qx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of XPS-Cx and XPS-Qx - universal motion controller are affected: XPS-Cx all versions and XPS-Qx all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-178-01" ;
    icsa:vendor "Newport" ;
    icsa:year 2017 .

icsa-res:ICSA-17-180-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-180-01" ;
    dcterms:issued "2017-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320 (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-5689" ;
    icsa:cweNumber "CWE-264" ;
    icsa:hasCVE cve-res:CVE-2017-5689 ;
    icsa:hasCWE cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects Siemens Industrial products which use Intel processors (Intel Core i5 | Intel Core i7 and Intel XEON): SIMATIC Industrial PCs | SINUMERIK Panel Control Unit (PCU) | SIMOTION P320. Please see Siemens Security Advisory SSA-874235 for the full list of affected versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-180-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-180-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-180-02" ;
    dcterms:issued "2017-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric U.motion Builder (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-7973; CVE-2017-7974; CVE-2017-9960; CVE-2017-9958; CVE-2017-9957; CVE-2017-9959; CVE-2017-9956" ;
    icsa:cweNumber "CWE-94; CWE-22; CWE-89; CWE-287; CWE-209; CWE-730; CWE-284; CWE-20; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2017-7973,
        cve-res:CVE-2017-7974,
        cve-res:CVE-2017-9956,
        cve-res:CVE-2017-9957,
        cve-res:CVE-2017-9958,
        cve-res:CVE-2017-9959,
        cve-res:CVE-2017-9960 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-209,
        cwe-res:CWE-22,
        cwe-res:CWE-259,
        cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-730,
        cwe-res:CWE-89,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "U.motion Builder" ;
    icsa:productDistribution "France, United States, Asia, Europe" ;
    icsa:productsAffected "The following U.motion Builder Software versions are affected: U.motion Builder Versions 1.2.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-180-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-180-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-180-03" ;
    dcterms:issued "2017-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Viewport for Web Office Portal" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-6869" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-6869 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Viewport for Web Office Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following ViewPort for Web Office Portal products: ViewPort for Web Office Portal: versions prior to revision number 1453." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-180-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-187-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-187-01" ;
    dcterms:issued "2017-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OZW672 and OZW772" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-6872; CVE-2017-6873" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2017-6872,
        cve-res:CVE-2017-6873 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OZW672 and OZW772" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following OZW672 and OZW772 devices for monitoring building controller devices: OZW672: All versions and OZW772: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-187-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-187-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-187-02" ;
    dcterms:issued "2017-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Reyrolle" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-7112; CVE-2016-7114; CVE-2016-4785; CVE-2016-4784; CVE-2016-7113" ;
    icsa:cweNumber "CWE-862; CWE-20; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2016-4784,
        cve-res:CVE-2016-4785,
        cve-res:CVE-2016-7112,
        cve-res:CVE-2016-7113,
        cve-res:CVE-2016-7114 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Reyrolle" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following Reyrolle integration | control | measurement and automation products: EN100 Ethernet modules as optional for Reyrolle: All versions prior to V4.29.01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-187-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-187-03F a icsa:ICSA ;
    dcterms:identifier "ICSA-17-187-03F" ;
    dcterms:issued "2017-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-7112; CVE-2016-7114; CVE-2016-4785; CVE-2016-4784; CVE-2015-5374; CVE-2016-7113" ;
    icsa:cweNumber "CWE-862; CWE-20; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2015-5374,
        cve-res:CVE-2016-4784,
        cve-res:CVE-2016-4785,
        cve-res:CVE-2016-7112,
        cve-res:CVE-2016-7113,
        cve-res:CVE-2016-7114 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 4 and SIPROTEC Compact" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following SIPROTEC 4 and SIPROTEC Compact protection | control | measurement and automation devices: Firmware variants for EN100 Ethernet modules as options for SIPROTEC 4 and SIPROTEC Compact: Firmware variant PROFINET IO: All versions prior to V1.04.01 | Firmware variant Modbus TCP: All versions prior to V1.11.00 | Firmware variant DNP3 TCP: All versions prior to V1.03 and Firmware variant IEC 104: All versions prior to V1.21EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80: All firmware versions prior to V1.02.02SIPROTEC 7SJ686: All versions prior to V4.87 | SIPROTEC 7UT686: All versions prior to V4.02 | SIPROTEC 7SD686: All versions prior V4.05 | SIPROTEC 7SJ66: All versions prior to V4.30Please note that not all of the devices above are affected by all of these vulnerabilities. Please see Siemens Security Advisory SSA-323211 for more detailed information." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-187-03F" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-187-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-187-04" ;
    dcterms:issued "2017-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wonderware ArchestrA Logger" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture;Government Facilities; Nuclear Reactors Materials and Waste; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-9627; CVE-2017-9631; CVE-2017-9629" ;
    icsa:cweNumber "CWE-121; CWE-476; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-9627,
        cve-res:CVE-2017-9629,
        cve-res:CVE-2017-9631 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-400,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware ArchestrA Logger" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following versions of Wonderware ArchestrA Logger - logging software are affected: Wonderware ArchestrA Logger | versions 2017.426.2307.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-187-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-187-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-187-05" ;
    dcterms:issued "2017-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Ampla MES" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-9637; CVE-2017-9635" ;
    icsa:cweNumber "CWE-319; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2017-9635,
        cve-res:CVE-2017-9637 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ampla MES" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerability affects the following Ampla Manufacturing Execution System (MES) operational efficiency products: Ampla MES versions 6.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-187-05" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-192-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-192-01" ;
    dcterms:issued "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Logon" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-9938" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2017-9938 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Logon" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following SIMATIC Logon products: SIMATIC Logon: All versions prior to V1.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-192-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-192-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-192-02" ;
    dcterms:issued "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric V-Server" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-9639" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2017-9639 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "V-Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of V-Server - data collection and management service are affected: V-Server Version 3.3.22.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-192-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-192-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-192-03" ;
    dcterms:issued "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB VSN300 WiFi Logger Card" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-7916; CVE-2017-7920" ;
    icsa:cweNumber "CWE-264; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-7916,
        cve-res:CVE-2017-7920 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VSN300 WiFi Logger Card" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of VSN300 WiFi Logger Card - device for solar system monitoring are affected: VSN300 WiFi Logger Card versions 1.8.15 and prior. VSN300 WiFi Logger Card for React versions 2.1.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-192-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2017 .

icsa-res:ICSA-17-192-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-192-04" ;
    dcterms:issued "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Coresight" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2017-9641" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2017-9641 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Coresight" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSIsoft reports that the vulnerability affects the following PI Coresight products: PI Coresight 2016 R2 and earlier versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-192-04" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2017 .

icsa-res:ICSA-17-192-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-192-05" ;
    dcterms:issued "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI ProcessBook and PI ActiveView" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI ProcessBook and PI ActiveView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSIsoft reports that the vulnerability affects the following PI products: PI ProcessBook 2015 R2 (3.6.0) and earlier and PI ActiveView 2015 R2 (3.6.0) and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-192-05" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2017 .

icsa-res:ICSA-17-192-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-192-06" ;
    dcterms:issued "2017-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-7928" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2017-7928 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SEL-3620 and SEL-3622" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SEL-3620 and SEL-3622 an Ethernet Security Gateway are affected: Security Gateway Versions R202 and | R203 | R203-V1 | R203-V2 and | R204 | R204-V1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-192-06" ;
    icsa:vendor "Schweitzer Engineering Laboratories" ;
    icsa:year 2017 .

icsa-res:ICSA-17-194-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-194-01" ;
    dcterms:issued "2017-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass integrated" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-9940; CVE-2017-9939; CVE-2017-9941; CVE-2017-9942" ;
    icsa:cweNumber "CWE-269; CWE-257; CWE-300; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-9939,
        cve-res:CVE-2017-9940,
        cve-res:CVE-2017-9941,
        cve-res:CVE-2017-9942 ;
    icsa:hasCWE cwe-res:CWE-257,
        cwe-res:CWE-269,
        cwe-res:CWE-287,
        cwe-res:CWE-300 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass integrated" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following SiPass integrated access control system: SiPass integrated: All versions prior to V2.70." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-194-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-194-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-194-03" ;
    dcterms:issued "2017-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Sm@rtClient Android App" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6871; CVE-2017-6870" ;
    icsa:cweNumber "CWE-300; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2017-6870,
        cve-res:CVE-2017-6871 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-300 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Sm@rtClient Android App" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following SIMATIC Sm@rtClient Android apps for remote operation and monitoring of SIMATIC HMI systems: SIMATIC WinCC Sm@rtClient for Android: All versions prior to V1.0.2.2 | SIMATIC WinCC Sm@rtClient Lite for Android: All versions prior to V1.0.2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-194-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-201-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-201-01" ;
    dcterms:issued "2017-07-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerSCADA Anywhere and Citect Anywhere" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-7972; CVE-2017-7970; CVE-2017-7971; CVE-2017-7969" ;
    icsa:cweNumber "CWE-298; CWE-352; CWE-200; CWE-146" ;
    icsa:hasCVE cve-res:CVE-2017-7969,
        cve-res:CVE-2017-7970,
        cve-res:CVE-2017-7971,
        cve-res:CVE-2017-7972 ;
    icsa:hasCWE cwe-res:CWE-146,
        cwe-res:CWE-200,
        cwe-res:CWE-298,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerSCADA Anywhere and Citect Anywhere" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerabilities affect the following versions of PowerSCADA Anywhere and Citect Anywhere mobile extensions: Version 1.0 of PowerSCADA Anywhere redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 | Citect Anywhere version 1.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-201-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-208-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-208-01" ;
    dcterms:issued "2017-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Continental AG Infineon S-Gold 2 (PMB 8876)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2017-9647; CVE-2017-9633" ;
    icsa:cweNumber "CWE-119; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-9633,
        cve-res:CVE-2017-9647 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Infineon S-Gold 2 (PMB 8876)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All telematics control modules (TCUs) built by Continental AG that contain the S-Gold 2 (PMB 8876) cellular baseband chipset are affected. The S-Gold 2 (PMB 8876) is found in the following vehicles: BMW several models produced between 2009-2010 Ford - program to update 2G modems has been active since 2016 and impact is restricted to the limited number of P-HEV vehicles equipped with this older technology that remain in service.Infiniti 2013 JX35 Infiniti 2014-2016 QX60 Infiniti 2014-2016 QX60 Hybrid Infiniti 2014-2015 QX50 Infiniti 2014-2015 QX50 Hybrid Infiniti 2013 M37/M56 Infiniti 2014-2016 Q70 Infiniti 2014-2016 Q70L Infiniti 2015-2016 Q70 Hybrid Infiniti 2013 QX56 Infiniti 2014-2016 QX 80 Nissan 2011-2015 Leaf." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-208-01" ;
    icsa:vendor "Continental AG" ;
    icsa:year 2017 .

icsa-res:ICSA-17-208-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-208-02" ;
    dcterms:issued "2017-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mirion Technologies Telemetry Enabled Devices" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Nuclear Reactors; Materials; and Waste" ;
    icsa:cveNumber "CVE-2017-9649; CVE-2017-9645" ;
    icsa:cweNumber "CWE-321; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2017-9645,
        cve-res:CVE-2017-9649 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Telemetry Enabled Devices" ;
    icsa:productDistribution "United States, Europe" ;
    icsa:productsAffected "The following telemetry enabled devices are affected: DMC 3000 Transmitter Module | iPam Transmitter f/DMC 2000 | RDS-31 iTX and variants (incl. RSD31-AM Package) | DRM-1/2 and variants (incl. Solar PWR Package) | DRM and RDS Based Boundary Monitors | External Transmitters | Telepole II and MESH Repeater." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-208-02" ;
    icsa:vendor "Mirion Technologies" ;
    icsa:year 2017 .

icsa-res:ICSA-17-208-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-208-03" ;
    dcterms:issued "2017-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-9632; CVE-2017-9630" ;
    icsa:cweNumber "CWE-311; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-9630,
        cve-res:CVE-2017-9632 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LaserWash, Laser Jet and ProTouch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LaserWash | Laser Jet and ProTouch | in-bay automatic car wash systems are affected: LaserWash G5 and G5 S Series all versions | LaserWash M5 all versions | LaserWash 360 and 360 Plus all versions | LaserWash AutoXpress and AutoExpress Plus all versions | LaserJet all versions | ProTouch Tandem all versions | ProTouch ICON all versions and ProTouch AutoGloss all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-208-03" ;
    icsa:vendor "PDQ Manufacturing, Inc." ;
    icsa:year 2017 .

icsa-res:ICSA-17-208-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-208-04" ;
    dcterms:issued "2017-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley Stratix and ArmorStratix" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6741; CVE-2017-6740; CVE-2017-6736; CVE-2017-6739; CVE-2017-6742; CVE-2017-6737; CVE-2017-6744; CVE-2017-6738; CVE-2017-6743" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2017-6736,
        cve-res:CVE-2017-6737,
        cve-res:CVE-2017-6738,
        cve-res:CVE-2017-6739,
        cve-res:CVE-2017-6740,
        cve-res:CVE-2017-6741,
        cve-res:CVE-2017-6742,
        cve-res:CVE-2017-6743,
        cve-res:CVE-2017-6744 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley Stratix and ArmorStratix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Allen-Bradley Stratix and ArmorStratix switches are affected: All Versions 15.2(5)EA.fc4 and earlierAllen-Bradley Stratix 5400 Industrial Ethernet SwitchesAllen-Bradley Stratix 5410 Industrial Distribution SwitchesAllen-Bradley Stratix 5700 and ArmorStratixâžÂ¢ 5700 Industrial Managed Ethernet SwitchesAllen-Bradley Stratix 8000 Modular Managed Ethernet SwitchesAll Versions 15.6(3)M1 and earlierAllen-Bradley Stratix 5900 Services RouterAll Versions 15.2(4)EA and earlierStratix 8300 Modular Managed Ethernet Switches" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-208-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-213-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-213-01" ;
    dcterms:issued "2017-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Europe B.V. E-Designer" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-9634; CVE-2017-9636; CVE-2017-9638" ;
    icsa:cweNumber "CWE-122; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-9634,
        cve-res:CVE-2017-9636,
        cve-res:CVE-2017-9638 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "E-Designer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of E-Designer - Mitsubishi Electric Europe B.V. product to program HMIs for E1000 products is affected: E-Designer | Version 7.52 Build 344." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-213-01" ;
    icsa:vendor "Mitsubishi Electric Europe B.V." ;
    icsa:year 2017 .

icsa-res:ICSA-17-213-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-213-02" ;
    dcterms:issued "2017-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Trio TView" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Trio TView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Schneider Electric Trio TView - management and diagnostics software are affected: Trio TView Software | TBUMPROG-TVIEW | Version 3.27.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-213-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-215-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-215-01" ;
    dcterms:issued "2017-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Pro-face GP-Pro EX" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-9961" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-9961 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro-face GP-Pro EX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Pro-face GP-Pro EX software an HMI management platform are affected: GP Pro EX version 4.07.000" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-215-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-220-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-220-01" ;
    dcterms:issued "2017-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Integrator" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2017-9655; CVE-2017-9653" ;
    icsa:cweNumber "CWE-79; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2017-9653,
        cve-res:CVE-2017-9655 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Integrator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI Integrator - data management platform are affected: PI Integrator for SAP HANA 2016 | PI Integrator for Business Analytics 2016 - Data Warehouse (All Editions) | PI Integrator for Business Analytics 2016 - Business Intelligence (All Editions) | PI Integrator for Business Analytics and SAP HANA SQL Utility 2016 and PI Integrator for Microsoft Azure 2016." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-220-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2017 .

icsa-res:ICSA-17-220-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-220-02" ;
    dcterms:issued "2017-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa SoftNVR-IA Live Viewer" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2017-5170" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-5170 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoftNVR-IA Live Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SoftNVR-IA Live Viewer - video surveillance software designed for industrial automation systems are affected: SoftNVR-IA Live Viewer | Version 3.30.3122 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-220-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2017 .

icsa-res:ICSA-17-222-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-222-01" ;
    dcterms:issued "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "SIMPlight SCADA Software" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Russia" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Healthcare and Public Health; Nuclear Reactors Materials and Waste" ;
    icsa:cveNumber "CVE-2017-9661" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-9661 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA Software" ;
    icsa:productDistribution "Russia" ;
    icsa:productsAffected "The following versions of SIMPlight SCADA software | software for building management systems and automated facilities are affected: SCADA Software version 4.3.0.27 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-222-01" ;
    icsa:vendor "SIMPlight" ;
    icsa:year 2017 .

icsa-res:ICSA-17-222-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-222-02" ;
    dcterms:issued "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Solar Controls Heating Control Downloader (HCDownloader)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-9646" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-9646 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Heating Control Downloader (HCDownloader)" ;
    icsa:productDistribution "Czech Republic" ;
    icsa:productsAffected "The following versions of Solar Controls' Heating Control Downloader (HCDownloader) are affected: HCDownloader | Version 1.0.1.15 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-222-02" ;
    icsa:vendor "Solar Controls" ;
    icsa:year 2017 .

icsa-res:ICSA-17-222-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-222-03" ;
    dcterms:issued "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Solar Controls WATTConfig M Software" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-9648" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-9648 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WATTConfig M Software" ;
    icsa:productDistribution "Czech Republic" ;
    icsa:productsAffected "The following versions of Solar Controls' WATTConfig M Software for Windows 2.5.10 for M SSR/MAX PLCs are affected: WATTConfig M Software | Version 2.5.10.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-222-03" ;
    icsa:vendor "Solar Controls" ;
    icsa:year 2017 .

icsa-res:ICSA-17-222-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-222-04" ;
    dcterms:issued "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Monitouch V-SFT" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-9662; CVE-2017-9659; CVE-2017-9660" ;
    icsa:cweNumber "CWE-122; CWE-269; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-9659,
        cve-res:CVE-2017-9660,
        cve-res:CVE-2017-9662 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Monitouch V-SFT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Monitouch V-SFT - screen configuration software are affected: Monitouch V-SFT | versions prior to Version 5.4.43.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-222-04" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-222-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-222-05" ;
    dcterms:issued "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB SREA-01 and SREA-50" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-9664" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2017-9664 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SREA-01 and SREA-50" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the vulnerability affects the following SREA-01 and SREA-50 legacy remote monitoring tools and Ethernet adapters: SREA-01 revisions A | B | C: application versions up to 3.31.5 and SREA-50 revision A: application versions up to 3.32.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-222-05" ;
    icsa:vendor "ABB" ;
    icsa:year 2017 .

icsa-res:ICSA-17-227-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-227-01" ;
    dcterms:issued "2017-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebOP" ;
    icsa:CVSSScore "4.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-12705" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2017-12705 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebOP" ;
    icsa:productDistribution "Taiwan, North America, Asia, East Asia" ;
    icsa:productsAffected "Researchers report that all versions of Advantech WebOP operator panels are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-227-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2017 .

icsa-res:ICSA-17-234-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-234-01" ;
    dcterms:issued "2017-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Automated Logic Corporation WebCTRL, i-VU, SiteScan" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-9644; CVE-2017-9640; CVE-2017-9650" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-428" ;
    icsa:hasCVE cve-res:CVE-2017-9640,
        cve-res:CVE-2017-9644,
        cve-res:CVE-2017-9650 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-428,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebCTRL, i-VU, SiteScan" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of WebCTRL | i-Vu | SiteScan Web | building automation platforms are affected: ALC WebCTRL | i-Vu | SiteScan Web 6.5 and prior -LC WebCTRL | SiteScan Web 6.1 and prior -LC WebCTRL | i-Vu 6.0 and prior -LC WebCTRL | i-Vu | SiteScan Web 5.5 and prior and ALC WebCTRL | i-Vu | SiteScan Web 5.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-234-01" ;
    icsa:vendor "Automated Logic" ;
    icsa:year 2017 .

icsa-res:ICSA-17-234-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-234-02" ;
    dcterms:issued "2017-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "SpiderControl SCADA MicroBrowser" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-12707" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-12707 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA MicroBrowser" ;
    icsa:productDistribution "Switzerland, Europe" ;
    icsa:productsAffected "The following versions of SCADA MicroBrowser - software management platform are affected: SCADA MicroBrowser Versions 1.6.30.144 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-234-02" ;
    icsa:vendor "SpiderControl" ;
    icsa:year 2017 .

icsa-res:ICSA-17-234-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-234-03" ;
    dcterms:issued "2017-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "SpiderControl SCADA Web Server" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-12694" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2017-12694 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA Web Server" ;
    icsa:productDistribution "Switzerland, Europe" ;
    icsa:productsAffected "The following versions of SpiderControl SCADA Web Server - software management platform are affected: SCADA Web Server" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-234-03" ;
    icsa:vendor "SpiderControl" ;
    icsa:year 2017 .

icsa-res:ICSA-17-234-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-234-04" ;
    dcterms:issued "2017-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "General Motors and Shanghai OnStar (SOS) iOS Client" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2017-12697; CVE-2017-9663; CVE-2017-12695" ;
    icsa:cweNumber "CWE-287; CWE-300; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2017-12695,
        cve-res:CVE-2017-12697,
        cve-res:CVE-2017-9663 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-300,
        cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OnStar (SOS) iOS Client" ;
    icsa:productDistribution "United States, North America, Asia" ;
    icsa:productsAffected "The following version of Shanghai OnStar iOS Client - vehicle management mobile application is affected: Shanghai OnStar iOS Client Version 7.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-234-04" ;
    icsa:vendor "General Motors (GM), Shanghai OnStar" ;
    icsa:year 2017 .

icsa-res:ICSA-17-234-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-234-05" ;
    dcterms:issued "2017-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Saia Burgess Controls PCD Controllers" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2017-9628" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2017-9628 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PCD Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ProductsSaia Burgess Controls reports that the vulnerability affects the following PCD Controllers: PCD firmware versions prior to 1.28.16 or 1.24.69." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-234-05" ;
    icsa:vendor "Saia Burgess Controls" ;
    icsa:year 2017 .

icsa-res:ICSA-17-236-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-236-01" ;
    dcterms:issued "2017-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-12703; CVE-2016-5816; CVE-2017-12709" ;
    icsa:cweNumber "CWE-798; CWE-352; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2016-5816,
        cve-res:CVE-2017-12703,
        cve-res:CVE-2017-12709 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-352,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MRD-305-DIN, MRD-315, MRD-355, and MRD-455" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Westermo router models and firmware versions are affected: MRD-305-DIN versions older than 1.7.5.0 and MRD-315 | MRD-355 | MRD-455 versions older than 1.7.5.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-236-01" ;
    icsa:vendor "Westermo" ;
    icsa:year 2017 .

icsa-res:ICSA-17-241-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-241-01" ;
    dcterms:issued "2017-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "AzeoTech DAQFactory" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-5147; CVE-2017-12699" ;
    icsa:cweNumber "CWE-427; CWE-276" ;
    icsa:hasCVE cve-res:CVE-2017-12699,
        cve-res:CVE-2017-5147 ;
    icsa:hasCWE cwe-res:CWE-276,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DAQFactory" ;
    icsa:productDistribution "United States, Europe" ;
    icsa:productsAffected "AzeoTech reports that the vulnerabilities affect the following versions of DAQFactory HMI: DAQFactory versions prior to 17.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-241-01" ;
    icsa:vendor "AzeoTech" ;
    icsa:year 2017 .

icsa-res:ICSA-17-241-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-241-02" ;
    dcterms:issued "2017-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-12717; CVE-2017-12708; CVE-2017-12713; CVE-2017-12698; CVE-2017-12711; CVE-2017-12704; CVE-2017-12710; CVE-2017-12706; CVE-2017-12702" ;
    icsa:cweNumber "CWE-732; CWE-89; CWE-134; CWE-287; CWE-122; CWE-427; CWE-121; CWE-119; CWE-266" ;
    icsa:hasCVE cve-res:CVE-2017-12698,
        cve-res:CVE-2017-12702,
        cve-res:CVE-2017-12704,
        cve-res:CVE-2017-12706,
        cve-res:CVE-2017-12708,
        cve-res:CVE-2017-12710,
        cve-res:CVE-2017-12711,
        cve-res:CVE-2017-12713,
        cve-res:CVE-2017-12717 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-134,
        cwe-res:CWE-266,
        cwe-res:CWE-287,
        cwe-res:CWE-427,
        cwe-res:CWE-732,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan, United States, Asia, East Asia, Europe" ;
    icsa:productsAffected "The following versions of WebAccess an HMI platform are affected: WebAccess versions prior to V8.2_20170817." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-241-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2017 .

icsa-res:ICSA-17-243-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-243-01" ;
    dcterms:issued "2017-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OPC UA Protocol Stack Discovery Service (Update E)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-12069" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2017-12069 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following industrial products; v8.1 SIMATIC WinCC: All versions prior to v7.2 SIMATIC WinCC Runtime Professional v13: All versions SIMATIC WinCC Runtime Professional v14: All versions prior to v14 SP1 End Update E.; which use the Discovery Service of the OPC UA protocol stack by the OPC foundation: SIMATIC IT Production Suite: Versions between v6.5 and v7.1 Update E SIMATIC NET PC Software 14: All versions prior to v14 SP1 Update 14 SIMATIC PCS 7: Versions v8.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-243-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-243-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-243-02" ;
    dcterms:issued "2017-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-12735; CVE-2017-12734" ;
    icsa:cweNumber "CWE-522; CWE-300" ;
    icsa:hasCVE cve-res:CVE-2017-12734,
        cve-res:CVE-2017-12735 ;
    icsa:hasCWE cwe-res:CWE-300,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO!" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerabilities affect the following LOGO! devices: LOGO! 8 BM (incl. SIPLUS variants): All versions prior to v1.81.2 LOGO! 8 BM (incl. SIPLUS variants): All versions prior to v8.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-243-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-243-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-243-03" ;
    dcterms:issued "2017-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens 7KM PAC Switched Ethernet" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-9945" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-9945 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "7KM PAC Switched Ethernet" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following 7KM PAC Switched Ethernet PROFINET expansion modules: 7KM PAC Switched Ethernet PROFINET expansion module: All versions prior to V2.1.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-243-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-243-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-243-04" ;
    dcterms:issued "2017-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-12731; CVE-2017-12733" ;
    icsa:cweNumber "CWE-306; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2017-12731,
        cve-res:CVE-2017-12733 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiteSentinel Integra and SiteSentinel iSite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ProductsOPW Fuel Management Systems (OPW) reports that the vulnerabilities affect SiteSentinel Integra 100 | SiteSentinel Integra 500 and SiteSentinel iSite ATG consoles with the following software versions: Older than V175 | V175-V189 | V191-V195 and V16Q3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-243-04" ;
    icsa:vendor "OPW Fuel Management Systems" ;
    icsa:year 2017 .

icsa-res:ICSA-17-243-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-243-05" ;
    dcterms:issued "2017-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa SoftCMS Live Viewer" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2017-12729" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2017-12729 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoftCMS Live Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SoftCMS Live Viewer - video surveillance software designed for industrial automation systems are affected: SoftCMS Live Viewer | Version 1.6 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-243-05" ;
    icsa:vendor "Moxa" ;
    icsa:year 2017 .

icsa-res:ICSA-17-250-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-250-01" ;
    dcterms:issued "2017-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "SpiderControl SCADA Web Server" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-12728" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2017-12728 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA Web Server" ;
    icsa:productDistribution "Switzerland, Europe" ;
    icsa:productsAffected "The following versions of SCADA Web Server - software management platform are affected: SCADA Web Server Version 2.02.0007 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-250-01" ;
    icsa:vendor "SpiderControl" ;
    icsa:year 2017 .

icsa-res:ICSA-17-250-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-250-02" ;
    dcterms:issued "2017-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT, Innominate Security Technologies mGuard Firmware" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2013-6466" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2013-6466 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mGuard Firmware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of mGuard firmware versions 8.0.0 to 8.5.1 - running on these mGuard Network Security Appliances are affected: FL MGUARD RS4000 TX/TX VPN | FL MGUARD GT/GT | FL MGUARD GT/GT VPN | FL MGUARD RS4000 TX/TX | FL MGUARD SMART2 VPN | FL MGUARD SMART2 | FL MGUARD RS2000 TX/TX VPN | FL MGUARD DELTA TX/TX | FL MGUARD DELTA TX/TX VPN | FL MGUARD PCI4000 | FL MGUARD PCI4000 VPN | FL MGUARD PCIE4000 VPN | FL MGUARD RS2005 TX VPN | FL MGUARD RS4004 TX/DTX | FL MGUARD RS4004 TX/DTX VPN | FL MGUARD RS4000 TX/TX-P | FL MGUARD RS4000 TX/TX VPN-M | FL MGUARD CENTERPORT | FL MGUARD RS | FL MGUARD RS VPN ANALOG | TC MGUARD RS2000 3G VPN | TC MGUARD RS4000 3G VPN | TC MGUARD RS2000 4G VPN and TC MGUARD RS4000 4G VPN." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-250-02" ;
    icsa:vendor "PHOENIX CONTACT, Innominate Security Technologies" ;
    icsa:year 2017 .

icsa-res:ICSA-17-255-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-255-01" ;
    dcterms:issued "2017-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-12730" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2017-12730 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "myPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of myPRO an HMI/SCADA management platform are affected: myPRO Versions 7.0.26 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-255-01" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2017 .

icsa-res:ICSA-17-257-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-257-01" ;
    dcterms:issued "2017-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "LOYTEC LVIS-3ME" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-13998; CVE-2017-13994; CVE-2017-13992; CVE-2017-13996" ;
    icsa:cweNumber "CWE-23; CWE-79; CWE-522; CWE-331" ;
    icsa:hasCVE cve-res:CVE-2017-13992,
        cve-res:CVE-2017-13994,
        cve-res:CVE-2017-13996,
        cve-res:CVE-2017-13998 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-331,
        cwe-res:CWE-522,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LVIS-3ME" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LVIS-3ME an HMI Touch Panel are affected: LVIS-3ME versions prior to 6.2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-257-01" ;
    icsa:vendor "LOYTEC electronics GmbH" ;
    icsa:year 2017 .

icsa-res:ICSA-17-262-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-262-01" ;
    dcterms:issued "2017-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT mGuard Device Manager" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2017-10115; CVE-2017-10053; CVE-2017-10135; CVE-2017-10116; CVE-2017-10108; CVE-2017-10176; CVE-2017-10198; CVE-2017-10078; CVE-2017-10102; CVE-2017-10118" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2017-10053,
        cve-res:CVE-2017-10078,
        cve-res:CVE-2017-10102,
        cve-res:CVE-2017-10108,
        cve-res:CVE-2017-10115,
        cve-res:CVE-2017-10116,
        cve-res:CVE-2017-10118,
        cve-res:CVE-2017-10135,
        cve-res:CVE-2017-10176,
        cve-res:CVE-2017-10198 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mGuard Device Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of mGuard Device Manager - device management software for mGuard devices are affected: mGuard Device Manager 1.8.0 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-262-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2017 .

icsa-res:ICSA-17-264-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-264-01" ;
    dcterms:issued "2017-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric InduSoft Web Studio, InTouch Machine Edition" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-13997" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2017-13997 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InduSoft Web Studio, InTouch Machine Edition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerability affects the following InduSoft Web Studio products: InduSoft Web Studio v8.0 SP2 or prior and InTouch Machine Edition v8.0 SP2 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-264-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-264-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-264-02" ;
    dcterms:issued "2017-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ctek, Inc. SkyRouter" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-14000" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-14000 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SkyRouter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SkyRouter - wireless and automation solution are affected: SkyRouter Series 4200 and 4400 all versions prior to V6.00.11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-264-02" ;
    icsa:vendor "Ctek, Inc." ;
    icsa:year 2017 .

icsa-res:ICSA-17-264-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-264-03" ;
    dcterms:issued "2017-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digium Asterisk GUI" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-14001" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2017-14001 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Asterisk GUI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Asterisk GUI - framework for configuring graphical user interfaces are affected: Asterisk GUI 2.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-264-03" ;
    icsa:vendor "Digium, Inc." ;
    icsa:year 2017 .

icsa-res:ICSA-17-264-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-264-04" ;
    dcterms:issued "2017-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "iniNet Solutions GmbH SCADA Webserver" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-13995" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-13995 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA Webserver" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of iniNet Solutions GmbH's SCADA Webserver - third-party web-based server software are affected: iniNet Webserver all versions prior to V2.02.0100." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-264-04" ;
    icsa:vendor "iniNet Solutions GmbH" ;
    icsa:year 2017 .

icsa-res:ICSA-17-271-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-271-01" ;
    dcterms:issued "2017-09-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Ruggedcom ROS, SCALANCE (Update B)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-12736" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2017-12736 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ruggedcom ROS, SCALANCE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following devices using the Ruggedcom Discovery Protocol (RCDP): RUGGEDCOM ROS for RSL910 devices: All versions prior to ROS v5.0.1 | RUGGEDCOM ROS for all other devices: All versions prior to ROS v4.3.4 | SCALANCE XB-200/XC-200/XP-200/XR300-WG: All versions between v3.0 and v3.0.2 | SCALANCE XR-500/XM-400: All versions between v6.1 and 6.1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-271-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-278-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-278-01" ;
    dcterms:issued "2017-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE CIMPLICITY (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-12732" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-12732 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CIMPLICITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CIMPLICITY an HMI/SCADA management platform are affected: CIMPLICITY Versions 9.0 and prior. From CIMPLICITY 6.1 forward - users have been advised that S90 drivers were no longer supported and an alternate tool was provided. CIMPLICITY 9.5 removed the drivers from the product." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-278-01" ;
    icsa:vendor "GE" ;
    icsa:year 2017 .

icsa-res:ICSA-17-278-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-278-02" ;
    dcterms:issued "2017-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens 7KT PAC1200 Data Manager" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-9944" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2017-9944 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "7KT PAC1200 Data Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following versions of the 7KT PAC1200 data manager (7KT1260) from the SENTRON portfolio: 7KT PAC1200 data manager: All versions prior to V2.03." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-278-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-283-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-283-01" ;
    dcterms:issued "2017-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "LAVA Computer MFG Inc. Ether-Serial Link" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-14003" ;
    icsa:cweNumber "CWE-290" ;
    icsa:hasCVE cve-res:CVE-2017-14003 ;
    icsa:hasCWE cwe-res:CWE-290 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ether-Serial Link" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LAVA Computer MFG Inc.'s Ether-Serial Links (ESL) are affected: All ESLs running firmware versions 6.01.00/29.03.2007 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-283-01" ;
    icsa:vendor "LAVA Computer MFG Inc." ;
    icsa:year 2017 .

icsa-res:ICSA-17-283-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-283-02" ;
    dcterms:issued "2017-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "JanTek JTC-200" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2016-5791; CVE-2016-5789" ;
    icsa:cweNumber "CWE-352; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2016-5789,
        cve-res:CVE-2016-5791 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JTC-200" ;
    icsa:productDistribution "Taiwan, Asia, Europe" ;
    icsa:productsAffected "The following versions of JTC-200 - TCP/IP converter are affected: JTC-200 all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-283-02" ;
    icsa:vendor "JanTek" ;
    icsa:year 2017 .

icsa-res:ICSA-17-285-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-285-01" ;
    dcterms:issued "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "ProMinent MultiFLEX M10a Controller" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2017-14005; CVE-2017-14011; CVE-2017-14007; CVE-2017-14009; CVE-2017-14013" ;
    icsa:cweNumber "CWE-352; CWE-200; CWE-613; CWE-620; CWE-602" ;
    icsa:hasCVE cve-res:CVE-2017-14005,
        cve-res:CVE-2017-14007,
        cve-res:CVE-2017-14009,
        cve-res:CVE-2017-14011,
        cve-res:CVE-2017-14013 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-352,
        cwe-res:CWE-602,
        cwe-res:CWE-613,
        cwe-res:CWE-620 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MultiFLEX M10a Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MultiFLEX Controller - water treatment controller are affected: All versions of MultiFLEX M10a Controller web interface." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-285-01" ;
    icsa:vendor "ProMinent" ;
    icsa:year 2017 .

icsa-res:ICSA-17-285-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-285-02" ;
    dcterms:issued "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON Technology Co., Ltd. LeviStudio HMI Editor" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-13999" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-13999 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Technology Co., Ltd. LeviStudio HMI Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LEVI Studio HMI Editor an HMI programming software product are affected: LEVI Studio HMI Editor v1.8.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-285-02" ;
    icsa:vendor "WECON" ;
    icsa:year 2017 .

icsa-res:ICSA-17-285-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-285-03" ;
    dcterms:issued "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Envitech Ltd. EnviDAS Ultimate" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Israel" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-9625" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-9625 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EnviDAS Ultimate" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of EnviDAS Ultimate - web application for environmental monitoring are affected: EnviDAS Ultimate Versions prior to v1.0.0.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-285-03" ;
    icsa:vendor "Envitech Ltd." ;
    icsa:year 2017 .

icsa-res:ICSA-17-285-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-285-04" ;
    dcterms:issued "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "NXP Semiconductors MQX RTOS (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-12718; CVE-2017-12722" ;
    icsa:cweNumber "CWE-125; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2017-12718,
        cve-res:CVE-2017-12722 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MQX RTOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MQX Real-Time Operating System (RTOS) are used in NXP's ColdFire microcontrollers | Kinetis microcontrollers | i.MX processors and Vybrid processors which are affected by the vulnerabilities listed below.Versions susceptible to Classic Buffer Overflow Vulnerability: MQX RTOS | Version 5.0 and prior versions and Versions susceptible to Out-of-Bounds Read Vulnerability: MQX RTOS | Version 4.1 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-285-04" ;
    icsa:vendor "NXP Semiconductors" ;
    icsa:year 2017 .

icsa-res:ICSA-17-285-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-285-05" ;
    dcterms:issued "2017-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens BACnet Field Panels (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-9947; CVE-2017-9946" ;
    icsa:cweNumber "CWE-22; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2017-9946,
        cve-res:CVE-2017-9947 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BACnet Field Panels" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following BACnet field panels: --------- Begin Update A Part 1 of 3 --------- APOGEE PXC Compact (BACnet): All versions prior to v3.5 APOGEE PXC Compact (P2 Ethernet): All versions APOGEE PXC Modular (BACnet): All versions prior to v3.5 APOGEE PXC Modular (P2 Ethernet): All versions TALON TC Compact (BACnet): All versions prior to v3.5 TALON TC Modular (BACnet): All versions prior to v3.5 --------- End Update A Part 1 of 3 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-285-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-290-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-290-01" ;
    dcterms:issued "2017-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Progea Movicon SCADA/HMI" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-14019; CVE-2017-14017" ;
    icsa:cweNumber "CWE-427; CWE-428" ;
    icsa:hasCVE cve-res:CVE-2017-14017,
        cve-res:CVE-2017-14019 ;
    icsa:hasCWE cwe-res:CWE-427,
        cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Movicon SCADA/HMI" ;
    icsa:productDistribution "India, Italy, United States, Europe" ;
    icsa:productsAffected "The following versions of Movicon HMI an HMI software platform are affected: Movicon Version 11.5.1181 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-290-01" ;
    icsa:vendor "Progea" ;
    icsa:year 2017 .

icsa-res:ICSA-17-292-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-292-01" ;
    dcterms:issued "2017-10-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "SpiderControl MicroBrowser" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-14010" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-14010 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroBrowser" ;
    icsa:productDistribution "Switzerland, Europe" ;
    icsa:productsAffected "The following versions of SpiderControl MicroBrowser - touch panel operating system are affected: MicroBrowser Windows XP | Vista 7 | 8 and 10 | Versions 1.6.30.144 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-292-01" ;
    icsa:vendor "SpiderControl" ;
    icsa:year 2017 .

icsa-res:ICSA-17-299-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-299-01" ;
    dcterms:issued "2017-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Korenix JetNet" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing ;Transportation" ;
    icsa:cveNumber "CVE-2017-14027; CVE-2017-14021" ;
    icsa:cweNumber "CWE-798; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2017-14021,
        cve-res:CVE-2017-14027 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JetNet" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of JetNet an Ethernet switch are affected: JetNet5018G version 1.4 | JetNet5310G version 1.4a | JetNet5428G-2G-2FX version 1.4 | JetNet5628G-R version 1.4 | JetNet5628G version 1.4 | JetNet5728G-24P version 1.4 | JetNet5828G version 1.1d | JetNet6710G-HVDC version 1.1e and JetNet6710G version 1.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-299-01" ;
    icsa:vendor "Korenix" ;
    icsa:year 2017 .

icsa-res:ICSA-17-299-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-299-02" ;
    dcterms:issued "2017-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix 5100 (Update A)" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-13082" ;
    icsa:cweNumber "CWE-323" ;
    icsa:hasCVE cve-res:CVE-2017-13082 ;
    icsa:hasCWE cwe-res:CWE-323 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix 5100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the vulnerability affects the following wireless access point/workgroup bridge products: Stratix 5100 Version 15.3(3) JC1 and earlier.4.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-299-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-304-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-304-01" ;
    dcterms:issued "2017-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB FOX515T" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2017-14025" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-14025 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FOX515T" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FOX515T - communication interface are affected: FOX515T release 1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-304-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2017 .

icsa-res:ICSA-17-304-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-304-02" ;
    dcterms:issued "2017-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trihedral Engineering Limited VTScada" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-14031; CVE-2017-14029" ;
    icsa:cweNumber "CWE-284; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-14029,
        cve-res:CVE-2017-14031 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VTScada" ;
    icsa:productDistribution "Canada, North America, Europe" ;
    icsa:productsAffected "Trihedral Engineering Limited reports that the vulnerability affects the following versions of the VTScada HMI and SCADA software: VTScada 11.3.03 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-304-02" ;
    icsa:vendor "Trihedral Engineering Limited" ;
    icsa:year 2017 .

icsa-res:ICSA-17-306-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-306-01" ;
    dcterms:issued "2017-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC PCS 7 (Update A)" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-6867" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-6867 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC PCS 7 - distributed control system are affected: v8.1 all versions prior to v8.1 SP1 with WinCC v7.3 Upd 13 and v8.2 all versions prior to v8.2 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-306-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-306-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-306-02" ;
    dcterms:issued "2017-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-14016; CVE-2017-12719" ;
    icsa:cweNumber "CWE-121; CWE-822" ;
    icsa:hasCVE cve-res:CVE-2017-12719,
        cve-res:CVE-2017-14016 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan, United States, Asia, East Asia, Europe" ;
    icsa:productsAffected "The following versions of WebAccess an HMI platform are affected: WebAccess versions prior to V8.2_20170817." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-306-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2017 .

icsa-res:ICSA-17-313-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-313-01" ;
    dcterms:issued "2017-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect CLICK, C-More, C-More Micro, Do-more Designer, GS Drives, SL-Soft SOLO, DirectSOFT (Update B)" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2017-14020" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2017-14020 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CLICK, C-More, C-More Micro, Do-more Designer, GS Drives, SL-Soft SOLO, DirectSOFT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following AutomationDirect products are affected: CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior | C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior | C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior | Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior | GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior and SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior. DirectSOFT Programming Software Versions 6.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-313-01" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2017 .

icsa-res:ICSA-17-313-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-313-02" ;
    dcterms:issued "2017-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric InduSoft Web Studio and InTouch Machine Edition" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-14024" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-14024 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InduSoft Web Studio and InTouch Machine Edition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of InduSoft Web Studio and InTouch Machine Edition an HMI are affected: InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-313-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-17-318-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-318-01" ;
    dcterms:issued "2017-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-13077; CVE-2017-13084; CVE-2017-13081; CVE-2017-13087; CVE-2017-13079; CVE-2017-13086; CVE-2017-13082; CVE-2017-13088; CVE-2017-13080; CVE-2017-13078" ;
    icsa:cweNumber "CWE-254" ;
    icsa:hasCVE cve-res:CVE-2017-13077,
        cve-res:CVE-2017-13078,
        cve-res:CVE-2017-13079,
        cve-res:CVE-2017-13080,
        cve-res:CVE-2017-13081,
        cve-res:CVE-2017-13082,
        cve-res:CVE-2017-13084,
        cve-res:CVE-2017-13086,
        cve-res:CVE-2017-13087,
        cve-res:CVE-2017-13088 ;
    icsa:hasCWE cwe-res:CWE-254 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the key reinstallation attacks (KRACK) potentially affect the following Siemens industrial products: RUGGEDCOM RS9xxW: All versions | RUGGEDCOM RX1400 with WLAN interface: All versions prior to v2.11.2 | SCALANCE W-700 (IEEE 802.11a/b/g): All versions | SCALANCE W-700 (IEEE 802.11n): All versions prior to v6.2.1 | SCALANCE W1750D: All versions prior to v6.5.1.5-4.3.1.8 | SCALANCE WLC711: All versions prior to v9.21.19.003 | SCALANCE WLC712: All versions prior to v9.21.19.003 | SIMATIC ET200 PRO IM154-6 PN IWLAN: All versions | SIMATIC IWLAN-PB/LINK: All versions | SIMATIC Mobile Panel 277(F) IWLAN: All versions. SINAMICS v20 Smart Access Module: All versions prior to v01.03.01. SIMATIC RF350M: All versions with Summit Client Utility prior to v22.3.5.16 | SIMATIC RF650M: All versions with Summit Client Utility prior to v22.3.5.164.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-318-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-318-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-318-02" ;
    dcterms:issued "2017-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB TropOS (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-13077; CVE-2017-13084; CVE-2017-13081; CVE-2017-13087; CVE-2017-13079; CVE-2017-13086; CVE-2017-13082; CVE-2017-13088; CVE-2017-13080; CVE-2017-13078" ;
    icsa:cweNumber "CWE-254" ;
    icsa:hasCVE cve-res:CVE-2017-13077,
        cve-res:CVE-2017-13078,
        cve-res:CVE-2017-13079,
        cve-res:CVE-2017-13080,
        cve-res:CVE-2017-13081,
        cve-res:CVE-2017-13082,
        cve-res:CVE-2017-13084,
        cve-res:CVE-2017-13086,
        cve-res:CVE-2017-13087,
        cve-res:CVE-2017-13088 ;
    icsa:hasCWE cwe-res:CWE-254 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TropOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the key reinstallation attacks (KRACK) potentially affect all TropOS broadband mesh routers and bridges operating on Mesh OS release 8.5.2 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-318-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2017 .

icsa-res:ICSA-17-320-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-320-01" ;
    dcterms:issued "2017-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa NPort 5110, 5130, and 5150" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams; Energy; Transportation" ;
    icsa:cveNumber "CVE-2017-16719; CVE-2017-14028; CVE-2017-16715" ;
    icsa:cweNumber "CWE-74; CWE-200; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-14028,
        cve-res:CVE-2017-16715,
        cve-res:CVE-2017-16719 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-400,
        cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NPort 5110, 5130, and 5150" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of NPort - serial network interface are affected: NPort 5110 Version 2.2 | NPort 5110 Version 2.4 | NPort 5110 Version 2.6 | NPort 5110 Version 2.7 | NPort 5130 Version 3.7 and prior and NPort 5150 Version 3.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-320-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2017 .

icsa-res:ICSA-17-320-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-320-02" ;
    dcterms:issued "2017-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-12738; CVE-2017-12737; CVE-2017-12739" ;
    icsa:cweNumber "CWE-94; CWE-79; CWE-306" ;
    icsa:hasCVE cve-res:CVE-2017-12737,
        cve-res:CVE-2017-12738,
        cve-res:CVE-2017-12739 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-79,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following SICAM products: SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00 | ERAC00 | ETA2 | ETLS00 | MODi00 | DNPi00: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-320-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-325-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-325-01" ;
    dcterms:issued "2017-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2017-13077; CVE-2017-13078; CVE-2017-13080" ;
    icsa:cweNumber "CWE-323" ;
    icsa:hasCVE cve-res:CVE-2017-13077,
        cve-res:CVE-2017-13078,
        cve-res:CVE-2017-13080 ;
    icsa:hasCWE cwe-res:CWE-323 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WLAN Capable Devices using the WPA2 Protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PHOENIX CONTACT reports that these vulnerabilities affect all versions of the following WLAN capable devices using the WPA2 Protocol: BL2 BPC | BL2 PPC | FL COMSERVER WLAN 232/422/485 | FL WLAN 110x | FL WLAN 210x | FL WLAN 510x | FL WLAN 230 AP 802-11 | FL WLAN 24 AP 802-11 | FL WLAN 24 DAP 802-11 | FL WLAN 24 EC 802-11 | FL WLAN EPA | FL WLAN SPA | ITC 8113 | RAD-80211-XD | RAD-WHG/WLAN-XD | TPC 6013 | VMT 30xx | VMT 50xx and VMT 70xx." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-325-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2017 .

icsa-res:ICSA-17-332-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-332-01" ;
    dcterms:issued "2017-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-14496; CVE-2017-14495; CVE-2017-13704; CVE-2017-14491" ;
    icsa:cweNumber "CWE-119; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-13704,
        cve-res:CVE-2017-14491,
        cve-res:CVE-2017-14495,
        cve-res:CVE-2017-14496 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D, M800, and S615" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCALANCE | network interfaces are affected: SCALANCE W1750D: All versions prior to v 6.5.1.5 | SCALANCE M800/S615: All versions prior to v5.0. RUGGEDCOM RM1224 all versions prior to v5.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-332-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-334-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-334-01" ;
    dcterms:issued "2017-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SWT3000" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-7112; CVE-2016-7114; CVE-2016-4785; CVE-2016-4784; CVE-2016-7113" ;
    icsa:cweNumber "CWE-20; CWE-288; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2016-4784,
        cve-res:CVE-2016-4785,
        cve-res:CVE-2016-7112,
        cve-res:CVE-2016-7113,
        cve-res:CVE-2016-7114 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SWT3000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following SWT 3000 Teleprotection system products: EN100 for SWT3000 (iSWT3000): IEC 61850 firmware: All versions prior to V4.29.01 TPOP firmware: All versions prior to V01.01.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-334-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-334-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-334-02" ;
    dcterms:issued "2017-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "GEOVAP Reliance SCADA" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-16721" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2017-16721 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Reliance SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Reliance SCADA - software management platforms are affected: Reliance SCADA Version 4.7.3 Update 2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-334-02" ;
    icsa:vendor "GEOVAP" ;
    icsa:year 2017 .

icsa-res:ICSA-17-339-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-339-01" ;
    dcterms:issued "2017-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products (Update S)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-12741" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-12741 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "6ES7146-6FF00-0AB0; 6ES7142-6BG00-0BB0; Siemens reports the vulnerability affects the following industrial products: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller: All versions prior to v4.1.1 Patch 05 Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P: All versions prior to v4.5 Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200: All versions prior to v4.5 SIMATIC Compact Field Unit: All versions SIMATIC ET 200AL: All versions SIMATIC ET 200M (incl. SIPLUS variants): All versions SIMATIC ET 200MP IM155-5 PN BA (incl. SIPLUS variants): All versions prior to v4.0.2 SIMATIC ET 200MP IM155-5 PN HF (incl. SIPLUS variants): All versions prior to v4.2 SIMATIC ET 200MP IM155-5 PN ST (incl. SIPLUS variants): All versions prior to v4.1 SIMATIC ET 200S (incl. SIPLUS variants): All versions SIMATIC ET 200SP IM 155-6 PN BA (incl. SIPLUS variants): All versions SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants): All versions prior to v1.1.0 SIMATIC ET 200SP IM 155-6 PN HF (incl. SIPLUS variants): All versions prior to v4.2.0. SIMATIC ET 200SP IM 155-6 PN HS (incl. SIPLUS variants): All versions prior to v4.0.1. SIMATIC ET 200SP IM 155-6 PN ST (incl. SIPLUS variants): All versions SIMATIC ET 200ecoPN: All versions: (except 6ES7141-6BG00-0BB0; 6ES7142-6BR00-0BB0; 6S7143-6BH00-0BB0; 6ES7148-6JD00-0AB0 and 6ES7148-6JG00-0BB0) SIMATIC ET 200pro: All versions SIMATIC PN/PN Coupler (incl. SIPLUS NET variants): All versions prior to v4.2.0 SIMATIC S7-200 Smart: All versions prior to v2.03.01 SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v3.X.16 SIMATIC S7-400 H v6 CPU family and below (incl. SIPLUS variants): All versions prior to v6.0.8 SIMATIC S7-400 PN/DP v6 CPU family and below (incl. SIPLUS variants): All versions prior to v6.0.6 SIMATIC S7-400 PN/DP v7 CPU family (incl. SIPLUS variants): All versions prior to v7.0.2 SIMATIC S7-410 v8 CPU family (incl. SIPLUS variants): All versions prior to v8.2.1 SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to v4.2.3 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v2.0 SIMATIC S7-1500 Software Controller: All versions prior to v2.0 SIMATIC TDC CP51M1: All versions prior to v1.1.8 SIMATIC TDC CPU555: All versions prior to v1.1.1 SIMATIC WinAC RTX (F) 2010: All versions prior to SP3 SIMOCODE pro V PN (incl. SIPLUS variants): All versions prior to v2.1.1 SIMOTION C: All versions prior to v5.1 HF1 SIMOTION D (incl. SIPLUS variants): All versions prior to v5.1 HF1 SIMOTION P v4.4 and v4.5: All versions prior to v4.5 HF5 SIMOTION P v5: All versions prior to v5.1 HF1 SINAMICS DCM w. PN: All versions prior to v1.4 SP1 HF6 SINAMICS DCP w. PN: All versions prior to v1.2 HF2 SINAMICS G110M w. PN: All versions prior to v4.7 SP9 HF1 SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants): All versions prior to v4.7 SP9 HF1 SINAMICS G130 v4.7 w. PN: All versions prior to v4.7 HF29 SINAMICS G130 v4.8 w. PN: All versions prior to v4.8 HF4 SINAMICS G150 v4.7 w. PN: All versions prior to v4.7 HF29 SINAMICS G150 v4.8 w. PN: All versions prior to v4.8 HF4 SINAMICS S110 w. PN: All versions prior to v4.4 SP3 HF6 SINAMICS S120 v4.7 SP1 w. PN (incl. SIPLUS variants): All versions SINAMICS S120 v4.7 w. PN (incl. SIPLUS variants): All versions prior to v4.7 HF29 SINAMICS S120 v4.8 w. PN: All versions prior to v4.8 HF5 SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants): All versions prior to V4.7 SINAMICS S150 V4.7 w. PN: All versions prior to v4.7 HF29 SINAMICS S150 V4.8 w. PN:All versions prior to v4.8 HF4 SINAMICS v90 w. PN: All versions prior to v1.02 SINUMERIK 840D sl: All versions prior to 4.8 SP3 SIRIUS Soft starter 3RW44 PN: All versions.; 6ES7141-6BH00-0BB0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-339-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-341-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-341-01" ;
    dcterms:issued "2017-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Xiongmai Technology IP Cameras and DVRs" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Unknown" ;
    icsa:cveNumber "CVE-2017-16725" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-16725 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Technology IP Cameras and DVRs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Xiongmai Technology IP cameras and DVRs are affected: All IP Cameras and DVRs using the NetSurveillance Web interface." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-341-01" ;
    icsa:vendor "Xiongmai" ;
    icsa:year 2017 .

icsa-res:ICSA-17-341-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-341-02" ;
    dcterms:issued "2017-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Alarms and Events" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-14022" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-14022 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Alarms and Events" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FactoryTalk Alarms and Events - component of the Factory Talk Services Platform are affected: FactoryTalk Alarms and Events | Version 2.90 and earlier FactoryTalk Alarms and Events is used in the following Rockwell Automation products: FactoryTalk Services (RSLinx Enterprise) all versions. FactoryTalk View SE | versions 5.00 and later. Studio 5000 Logix Designer | versions 24 and later." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-341-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2017 .

icsa-res:ICSA-17-341-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-341-03" ;
    dcterms:issued "2017-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT FL COMSERVER, FL COM SERVER, and PSI-MODEM/ETH" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2017-16723" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2017-16723 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FL COMSERVER, FL COM SERVER, and PSI-MODEM/ETH" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following models running firmware versions prior to 1.99 | 2.20 or 2.40 of FL COMSERVER | FL COM SERVER and PSI-MODEM/ETH | industrial networking equipment are affected: FL COMSERVER BASIC 232/422/485 | FL COMSERVER UNI 232/422/485 | FL COMSERVER BAS 232/422/485-T | FL COMSERVER UNI 232/422/485-T | FL COM SERVER RS232 | FL COM SERVER RS485 and PSI-MODEM/ETH." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-341-03" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2017 .

icsa-res:ICSA-17-353-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-353-01" ;
    dcterms:issued "2017-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Ellipse" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-16731" ;
    icsa:cweNumber "CWE-523" ;
    icsa:hasCVE cve-res:CVE-2017-16731 ;
    icsa:hasCWE cwe-res:CWE-523 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ellipse" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the vulnerability affects Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-353-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2017 .

icsa-res:ICSA-17-353-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-353-02" ;
    dcterms:issued "2017-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2017-13077; CVE-2017-13081; CVE-2017-13087; CVE-2017-13079; CVE-2017-13086; CVE-2017-13082; CVE-2017-13088; CVE-2017-13080; CVE-2017-13078" ;
    icsa:cweNumber "CWE-323; CWE-330" ;
    icsa:hasCVE cve-res:CVE-2017-13077,
        cve-res:CVE-2017-13078,
        cve-res:CVE-2017-13079,
        cve-res:CVE-2017-13080,
        cve-res:CVE-2017-13081,
        cve-res:CVE-2017-13082,
        cve-res:CVE-2017-13086,
        cve-res:CVE-2017-13087,
        cve-res:CVE-2017-13088 ;
    icsa:hasCWE cwe-res:CWE-323,
        cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WLAN Capable Devices using the WPA2 Protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PEPPERL+FUCHS/ecom instruments reports that these vulnerabilities affect all versions of the following WLAN capable devices using the WPA2 Protocol: Tab-Ex 01 | Ex-Handy 09 | Ex-Handy 209 | Smart-Ex 01 | Smart-Ex 201 | Pad-Ex 01 | i.roc Ci70-Ex | CK70A-ATEX | CK71A-ATEX | CN70A-ATEX and CN70E-ATEX." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-353-02" ;
    icsa:vendor "PEPPERL+FUCHS, ecom instrument" ;
    icsa:year 2017 .

icsa-res:ICSA-17-353-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-353-03" ;
    dcterms:issued "2017-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ecava IntegraXor" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Malaysia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-16735; CVE-2017-16733" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2017-16733,
        cve-res:CVE-2017-16735 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntegraXor" ;
    icsa:productDistribution "Australia, Canada, Estonia, United Kingdom, Malaysia, Poland, United States" ;
    icsa:productsAffected "The following version of IntegraXor - web SCADA/HMI solution is affected: Ecava IntegraXor v 6.1.1030.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-353-03" ;
    icsa:vendor "Ecava" ;
    icsa:year 2017 .

icsa-res:ICSA-17-353-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-353-04" ;
    dcterms:issued "2017-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! Soft Comfort" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-12740" ;
    icsa:cweNumber "CWE-494" ;
    icsa:hasCVE cve-res:CVE-2017-12740 ;
    icsa:hasCWE cwe-res:CWE-494 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! Soft Comfort" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following LOGO! Soft Comfort engineering software products: LOGO! Soft Comfort: All versions prior to V8.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-353-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSA-17-353-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-353-05" ;
    dcterms:issued "2017-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON Technology Co., Ltd. LeviStudio HMI Editor" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-16717" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2017-16717 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Technology Co., Ltd. LeviStudio HMI Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of LeviStudio HMI an HMI editor are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-353-05" ;
    icsa:vendor "WECON" ;
    icsa:year 2017 .

icsa-res:ICSA-17-355-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-355-01" ;
    dcterms:issued "2017-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa NPort W2150A and W2250A" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2017-16727" ;
    icsa:cweNumber "CWE-255" ;
    icsa:hasCVE cve-res:CVE-2017-16727 ;
    icsa:hasCWE cwe-res:CWE-255 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NPort W2150A and W2250A" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of NPort - serial network interface are affected: NPort W2150A Versions prior to 1.11 and NPort W2250A Versions prior to 1.11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-355-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2017 .

icsa-res:ICSA-17-355-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-17-355-02" ;
    dcterms:issued "2017-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Pelco VideoXpert Enterprise" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-9965; CVE-2017-9964; CVE-2017-9966" ;
    icsa:cweNumber "CWE-284; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2017-9964,
        cve-res:CVE-2017-9965,
        cve-res:CVE-2017-9966 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pelco VideoXpert Enterprise" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerabilities affect the following Pelco VideoXpert Enterprise products: Pelco VideoXpert Enterprise all versions prior to 2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-17-355-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2017 .

icsa-res:ICSA-18-004-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-004-01" ;
    dcterms:issued "2018-01-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics Delta Industrial Automation Screen Editor" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-16751; CVE-2017-16745; CVE-2017-16747; CVE-2017-16749" ;
    icsa:cweNumber "CWE-416; CWE-843; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-16745,
        cve-res:CVE-2017-16747,
        cve-res:CVE-2017-16749,
        cve-res:CVE-2017-16751 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-416,
        cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Industrial Automation Screen Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Industrial Automation Screen Editor - graphical user interface (GUI) are affected: Delta Industrial Automation Screen Editor | Version 2.00.23.00 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-004-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-004-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-004-02" ;
    dcterms:issued "2018-01-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess (Update A)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-16753; CVE-2017-16720; CVE-2017-16724; CVE-2017-16716; CVE-2017-16736; CVE-2017-16732; CVE-2017-16728" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-89; CWE-822; CWE-416; CWE-20; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-16716,
        cve-res:CVE-2017-16720,
        cve-res:CVE-2017-16724,
        cve-res:CVE-2017-16728,
        cve-res:CVE-2017-16732,
        cve-res:CVE-2017-16736,
        cve-res:CVE-2017-16753 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-416,
        cwe-res:CWE-434,
        cwe-res:CWE-822,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan, United States, Asia, East Asia, Europe" ;
    icsa:productsAffected "Advantech reports the vulnerabilities affect the following WebAccess products: WebAccess versions prior to 8.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-004-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2018 .

icsa-res:ICSA-18-009-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-009-01" ;
    dcterms:issued "2018-01-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-16740" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2017-16740 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley MicroLogix 1400 Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MicroLogix 1400 Controllers - PLC are affected: MicroLogix 1400 Controllers | Series B and C Versions 21.002 and earlier Rockwell Automation reports that the following catalogs are affected: 1766-L32AWA1766-L32AWAA1766-L32BWA1766-L32BWAA1766-L32BXB1766-L32BXBA." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-009-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-011-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-011-01" ;
    dcterms:issued "2018-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON Technology Co., Ltd. LeviStudio HMI Editor" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-16737; CVE-2017-16739" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-16737,
        cve-res:CVE-2017-16739 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Technology Co., Ltd. LeviStudio HMI Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LEVI Studio HMI Editor - HMI programming software product are affected: LEVI Studio HMI Editor v1.8.29 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-011-01" ;
    icsa:vendor "WECON" ;
    icsa:year 2018 .

icsa-res:ICSA-18-011-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-011-02" ;
    dcterms:issued "2018-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MXview" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2017-14030" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2017-14030 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MXview" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MXview - network management software are affected: MXview v2.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-011-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2018 .

icsa-res:ICSA-18-011-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-011-03" ;
    dcterms:issued "2018-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT FL SWITCH" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2017-16741; CVE-2017-16743" ;
    icsa:cweNumber "CWE-200; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2017-16741,
        cve-res:CVE-2017-16743 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FL SWITCH" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All FL SWITCH 3xxx | 4xxx and 48xxx Series products running firmware Version 1.0 to 1.32 are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-011-03" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2018 .

icsa-res:ICSA-18-018-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-018-01" ;
    dcterms:issued "2018-01-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC Add-On (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-11498; CVE-2017-12818; CVE-2017-12819; CVE-2017-11497; CVE-2017-12822; CVE-2017-12820; CVE-2017-11496; CVE-2017-12821" ;
    icsa:cweNumber "CWE-254; CWE-284; CWE-20; CWE-121; CWE-119" ;
    icsa:hasCVE cve-res:CVE-2017-11496,
        cve-res:CVE-2017-11497,
        cve-res:CVE-2017-11498,
        cve-res:CVE-2017-12818,
        cve-res:CVE-2017-12819,
        cve-res:CVE-2017-12820,
        cve-res:CVE-2017-12821,
        cve-res:CVE-2017-12822 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-20,
        cwe-res:CWE-254,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC Add-On" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following versions of SIMATIC WinCC Add-On: SIMATIC WinCC Add-On Historian CONNECT ALARM all versions prior to and including v5.x | SIMATIC WinCC Add-On PI CONNECT ALARM all versions prior to and including v2.x | SIMATIC WinCC Add-On PI CONNECT AUDIT TRAIL all versions prior to and including v1.x | SIMATIC WinCC Add-On PM-AGENT all versions prior to and including v5.x | SIMATIC WinCC Add-On PM-ANALYZE all versions prior to and including v7.x | SIMATIC WinCC Add-On PM-CONTROL all versions prior to and including v10.x | SIMATIC WinCC Add-On PM-MAINT all versions prior to and including v9.x | SIMATIC WinCC Add-On PM-OPEN EXPORT all versions prior to and including v7.x | SIMATIC WinCC Add-On PM-OPEN HOST-S all versions prior to and including v7.x | SIMATIC WinCC Add-On PM-OPEN IMPORT all versions prior to and including v6.x | SIMATIC WinCC Add-On PM-OPEN PI all versions prior to and including v7.x | SIMATIC WinCC Add-On PM-OPEN PV02 all versions prior to and including v1.x | SIMATIC WinCC Add-On PM-OPEN TCP/IP all versions prior to and including v8.x | SIMATIC WinCC Add-On PM-QUALITY all versions prior to and including v9.x | SIMATIC WinCC Add-On SICEMENT IT MIS all versions prior to and including v7.x andSIMATIC WinCC Add-On SIPAPER IT MIS all versions prior to and including v7.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-018-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-023-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-023-01" ;
    dcterms:issued "2018-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-5443; CVE-2018-5445" ;
    icsa:cweNumber "CWE-22; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2018-5443,
        cve-res:CVE-2018-5445 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "Taiwan, United States, Asia, East Asia, Europe" ;
    icsa:productsAffected "The following versions of WebAccess/SCADA - SCADA software platform are affected: WebAccess/SCADA versions prior to V8.2_20170817." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-023-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2018 .

icsa-res:ICSA-18-023-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-023-02" ;
    dcterms:issued "2018-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-2680" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-2680 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that this vulnerability affects the following products using PROFINET DCP: SIMATIC CP 1242-7 GPRS v2: All versions prior to v2.1.82 | SIMATIC CP 1243-7 LTE EU/US: All versions prior to v2.1.82 | SIMATIC CP 1243-8: All versions prior to v2.1.82 | SIMATIC CP 1626: All versions prior to v1.1 | Extension Unit 12\" PROFINET: All versions prior to v01.01.01 | Extension Unit 15\" PROFINET: All versions prior to v01.01.01 | Extension Unit 19\" PROFINET: All versions prior to v01.01.01 andExtension Unit 22\" PROFINET: All versions prior to v01.01.01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-023-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-025-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-025-01" ;
    dcterms:issued "2018-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nari PCS-9611 (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-5447" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-5447 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PCS-9611" ;
    icsa:productDistribution "China, Asia" ;
    icsa:productsAffected "All versions of the PCS-9611 relay - control and monitoring unit are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-025-01" ;
    icsa:vendor "Nari" ;
    icsa:year 2018 .

icsa-res:ICSA-18-025-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-025-02" ;
    dcterms:issued "2018-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo PXC (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2018-4834" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-4834 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo PXC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects all versions prior to v4.10.111 | v5.00.171 | v5.10.069 and v6.00.204 of the following products: Desigo Automation Controllers Compact PXC12/22/36-E.D | Desigo Automation Controllers Modular PXC00/50/100/200-E.D | Desigo Automation Controllers PXC00/64/128-U with Web module | Desigo Automation Controllers for Integration PXC001-E.D andDesigo Operator Unit PXM20-E." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-025-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-030-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-030-01" ;
    dcterms:issued "2018-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT mGuard" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2018-5441" ;
    icsa:cweNumber "CWE-354" ;
    icsa:hasCVE cve-res:CVE-2018-5441 ;
    icsa:hasCWE cwe-res:CWE-354 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mGuard" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of mGuard - network device are affected: mGuard firmware versions 7.2 to 8.6.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-030-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2018 .

icsa-res:ICSA-18-030-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-030-02" ;
    dcterms:issued "2018-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TeleControl Server Basic" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-4837; CVE-2018-4835; CVE-2018-4836" ;
    icsa:cweNumber "CWE-288; CWE-400; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2018-4835,
        cve-res:CVE-2018-4836,
        cve-res:CVE-2018-4837 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-288,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TeleControl Server Basic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of TeleControl Server Basic - monitoring platform are affected: TeleControl Server Basic versions prior to V3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-030-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-032-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-032-01" ;
    dcterms:issued "2018-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric V-Server VPR" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-5442" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-5442 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "V-Server VPR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of V-Server VPR - data collection and management service are affected: V-Server VPR 4.0.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-032-01" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-032-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-032-02" ;
    dcterms:issued "2018-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS Web Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-5440" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-5440 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3 | or as part of the CODESYS runtime system running prior to Version V1.1.9.19 are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-032-02" ;
    icsa:vendor "3S-Smart Software Solutions GmbH" ;
    icsa:year 2018 .

icsa-res:ICSA-18-032-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-032-03" ;
    dcterms:issued "2018-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Gemalto Sentinel License Manager" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Communications; Financial Services; Government Facilities; Healthcare and Public Health; Information Technology" ;
    icsa:cveNumber "CVE-2017-11498; CVE-2017-12818; CVE-2017-11497; CVE-2017-12822; CVE-2017-12820; CVE-2017-11496; CVE-2017-12821" ;
    icsa:cweNumber "CWE-284; CWE-122; CWE-121; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2017-11496,
        cve-res:CVE-2017-11497,
        cve-res:CVE-2017-11498,
        cve-res:CVE-2017-12818,
        cve-res:CVE-2017-12820,
        cve-res:CVE-2017-12821,
        cve-res:CVE-2017-12822 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-284,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sentinel License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Sentinel License Manger services are affected: All HASP SRM | Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.55" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-032-03" ;
    icsa:vendor "Gemalto" ;
    icsa:year 2018 .

icsa-res:ICSA-18-044-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-044-01" ;
    dcterms:issued "2018-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO PFC200 Series" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-5459" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-5459 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PFC200 Series" ;
    icsa:productDistribution "China, Germany, India, Poland, Switzerland, United States" ;
    icsa:productsAffected "The following 3S CoDeSys Runtime versions of the PFC200 Series are affected: CoDeSys Version 2.3.XCoDeSys Version 2.4.XThe affected CoDeSys Runtime version is part of WAGO PFC200 Firmware prior to 02.07.07(10) | affected PFC200 devices: 750-8202 |750-8202/025-000 |750-8202/025-001 |750-8202/025-002 |750-8202/040-001 |750-8203 |750-8203/025-000 |750-8204 |750-8204/025-000 |750-8206 |750-8206/025-000 |750-8206/025-001 |750-8207 |750-8207/025-000 |750-8207/025-001 |750-8208 and750-8208/025-000." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-044-01" ;
    icsa:vendor "WAGO" ;
    icsa:year 2018 .

icsa-res:ICSA-18-044-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-044-02" ;
    dcterms:issued "2018-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS SCADA Software" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-9967" ;
    icsa:cweNumber "CWE-815" ;
    icsa:hasCVE cve-res:CVE-2017-9967 ;
    icsa:hasCWE cwe-res:CWE-815 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS SCADA Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerability affects the following IGSS SCADA Software products: IGSS SCADA Software V12 and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-044-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-046-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-046-01" ;
    dcterms:issued "2018-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nortek Linear eMerge E3 Series" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2018-5439" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2018-5439 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Linear eMerge E3 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Linear eMerge - access control interface versions are affected: Linear eMerge E3 series Versions V0.32-07e and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-046-01" ;
    icsa:vendor "Nortek" ;
    icsa:year 2018 .

icsa-res:ICSA-18-046-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-046-02" ;
    dcterms:issued "2018-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE D60 Line Distance Relay" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-5473; CVE-2018-5475" ;
    icsa:cweNumber "CWE-119; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-5473,
        cve-res:CVE-2018-5475 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "D60 Line Distance Relay" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the D60 Line Distance Relay are affected: D60 devices running firmware Version 7.11 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-046-02" ;
    icsa:vendor "GE" ;
    icsa:year 2018 .

icsa-res:ICSA-18-046-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-046-03" ;
    dcterms:issued "2018-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS Mobile" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-9969; CVE-2017-9968" ;
    icsa:cweNumber "CWE-295; CWE-256" ;
    icsa:hasCVE cve-res:CVE-2017-9968,
        cve-res:CVE-2017-9969 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS Mobile" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerabilities affect the following IGSS Mobile products: IGSS Mobile for Android | version 3.01 and all versions prior andIGSS Mobile for iOS | version 3.01 and all versions prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-046-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-046-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-046-04" ;
    dcterms:issued "2018-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric StruxureOn Gateway" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-9970" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2017-9970 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "StruxureOn Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerability affects the following versions of StruxureOn Gateway - software management platform: StruxureOn Gateway | all versions prior to 1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-046-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-051-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-051-01" ;
    dcterms:issued "2018-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB netCADOPS Web Application" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-5477" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2018-5477 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "netCADOPS Web Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of netCADOPS Web Application - web interface are affected: netCADOPS Web Application Version 3.4 and prior | NetCADOPS Web Application Version 7.1 and prior | NetCADOPS Web Application Version 7.2x and prior | netCADOPS Web Application Version 8.0 and prior and netCADOPS Web Application Version 8.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-051-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2018 .

icsa-res:ICSA-18-058-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-058-01" ;
    dcterms:issued "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Industrial PCs (Update A)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-15361" ;
    icsa:cweNumber "CWE-310" ;
    icsa:hasCVE cve-res:CVE-2017-15361 ;
    icsa:hasCWE cwe-res:CWE-310 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Industrial PCs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following versions of SIMATIC Industrial PCs using a version of Infineon's Trusted Platform Module (TPM): SIMATIC Field-PG M5 all versions prior to v22.01.04 | SIMATIC IPC227E all versions prior to v20.01.10 | SIMATIC IPC277E all versions prior to v20.01.10 | SIMATIC IPC427E all versions prior to v21.01.07 | SIMATIC IPC477E all versions prior to v21.01.07 | SIMATIC IPC547G all versions prior to R1.21.0 and SIMATIC ITP1000 all versions prior to v23.01.03." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-058-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-058-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-058-02" ;
    dcterms:issued "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics WPLSoft" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-7494; CVE-2018-7509; CVE-2018-7507" ;
    icsa:cweNumber "CWE-122; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-7494,
        cve-res:CVE-2018-7507,
        cve-res:CVE-2018-7509 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WPLSoft" ;
    icsa:productDistribution "Taiwan, United States, Asia, Europe" ;
    icsa:productsAffected "The following versions of WPLSoft - PLC programming software are affected: WPLSoft | Versions 2.45.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-058-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-058-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-058-03" ;
    dcterms:issued "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson ControlWave Micro Process Automation Controller" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-5452" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-5452 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlWave Micro Process Automation Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ControlWave Micro firmware - family of SCADA RTUs | PLCs | PACs and flow computers are affected: ControlWave Micro [ProConOS v.4.01.280] - firmware: CWM v.05.78.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-058-03" ;
    icsa:vendor "Emerson" ;
    icsa:year 2018 .

icsa-res:ICSA-18-060-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-060-01" ;
    dcterms:issued "2018-03-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-5707; CVE-2017-5708; CVE-2017-5712; CVE-2017-5710; CVE-2017-5705; CVE-2017-5706; CVE-2017-5709" ;
    icsa:cweNumber "CWE-121; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2017-5705,
        cve-res:CVE-2017-5706,
        cve-res:CVE-2017-5707,
        cve-res:CVE-2017-5708,
        cve-res:CVE-2017-5709,
        cve-res:CVE-2017-5710,
        cve-res:CVE-2017-5712 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SIMOTION, and SINUMERIK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following Industrial PCs and BIOS versions: SIMATIC Field-PG M3: ME prior to V6.2.61.3535 | SIMATIC Field-PG M4: BIOS prior to V18.01.06 | SIMATIC Field-PG M5: BIOS prior to V22.01.04 | SIMATIC HMI IPC677C: ME prior to V6.2.61.3535 | SIMATIC IPC427D: BIOS prior to V17.0?.10 | SIMATIC IPC427E: BIOS prior to V21.01.07 | SIMATIC IPC477D: BIOS prior to V17.0?.10 | SIMATIC IPC477D PRO: BIOS prior to V17.0?.10 | SIMATIC IPC477E: BIOS prior to V21.01.07 | SIMATIC IPC547D: ME prior to V7.1.91.3272 | SIMATIC IPC547E: ME prior to V9.1.41.3024 | SIMATIC IPC547G: ME prior to V11.8.50.3425 and BIOS prior to R1.21.0 | SIMATIC IPC627C: ME prior to V6.2.61.3535 | SIMATIC IPC627D: ME prior to V9.1.41.3024 | SIMATIC IPC647C: ME prior to V6.2.61.3535 | SIMATIC IPC647D: ME prior to V9.1.41.3024 | SIMATIC IPC677D: ME prior to V9.1.41.3024 | SIMATIC IPC827C: ME prior to V6.2.61.3535 | SIMATIC IPC827D: ME prior to V9.1.41.3024 | SIMATIC IPC847C: ME prior to V6.2.61.3535 | SIMATIC IPC847D: ME prior to V9.1.41.3024 | SIMATIC ITP1000: BIOS prior to V23.01.03 | SINUMERIK PCU50.5-C | WIN7: ME prior to V6.2.61.3535 | SINUMERIK PCU50.5-C | WINXP: ME prior to V6.2.61.3535 | SINUMERIK PCU50.5-P | WIN7: ME prior to V6.2.61.3535 | SINUMERIK PCU50.5-P | WINXP: ME prior to V6.2.61.3535 andSIMOTION P320-4S: BIOS prior to S17.02.06.83.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-060-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-060-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-060-02" ;
    dcterms:issued "2018-03-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa OnCell G3100-HSPA Series" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-5453; CVE-2018-5449; CVE-2018-5455" ;
    icsa:cweNumber "CWE-130; CWE-565; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2018-5449,
        cve-res:CVE-2018-5453,
        cve-res:CVE-2018-5455 ;
    icsa:hasCWE cwe-res:CWE-130,
        cwe-res:CWE-476,
        cwe-res:CWE-565 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OnCell G3100-HSPA Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OnCell - high-speed industrial-grade IP gateway are affected: OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-060-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2018 .

icsa-res:ICSA-18-060-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-060-03" ;
    dcterms:issued "2018-03-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics Delta Industrial Automation DOPSoft" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-5476" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-5476 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Industrial Automation DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Delta Industrial Automation DOPSoft - human machine interface (HMI) | is affected: Delta Industrial Automation DOPSoft | Version 4.00.01 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-060-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-065-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-065-01" ;
    dcterms:issued "2018-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hirschmann Automation and Control GmbH Classic Platform Switches" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-5469; CVE-2018-5467; CVE-2018-5461; CVE-2018-5471; CVE-2018-5465" ;
    icsa:cweNumber "CWE-307; CWE-326; CWE-598; CWE-384; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2018-5461,
        cve-res:CVE-2018-5465,
        cve-res:CVE-2018-5467,
        cve-res:CVE-2018-5469,
        cve-res:CVE-2018-5471 ;
    icsa:hasCWE cwe-res:CWE-307,
        cwe-res:CWE-319,
        cwe-res:CWE-326,
        cwe-res:CWE-384,
        cwe-res:CWE-598 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Classic Platform Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hirschmann reports that the vulnerabilities affect the following Classic Platform Switches products: RS all versions | RSR all versions | RSB all versions | MACH100 all versions | MACH1000 all versions | MACH4000 all versions | MS all versions and OCTOPUS all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-065-01" ;
    icsa:vendor "Hirschmann Automation and Control GmbH" ;
    icsa:year 2018 .

icsa-res:ICSA-18-065-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-065-02" ;
    dcterms:issued "2018-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SoMove Software and DTM Software Components" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-7239" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2018-7239 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoMove Software and DTM Software Components" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the vulnerability affects the following SoMove software and DTM software components: SoMove software | versions prior to 2.6.2ATV320 DTM | versions prior to 1.1.6ATV340 DTM | versions prior to 1.2.3ATV6xx DTM | versions prior to 1.8.0ATV9xx DTM | versions prior to 1.3.5AltivarDtm Library | versions prior to 12.7.0ATV32 DTMATV71 DTMATV61 DTMATV LIFT DTMATV31/312 DTMATV212 DTMATV12 DTM." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-065-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-065-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-065-03" ;
    dcterms:issued "2018-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton ELCSoft" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-7511" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-7511 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ELCSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ELCSoft is programming software for all Eaton ELC programmable logic controllers. The ELC programmable logic controllers are not affected by this vulnerability. The following versions of ELCSoft are affected: ELCSoft Versions 2.04.02 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-065-03" ;
    icsa:vendor "Eaton" ;
    icsa:year 2018 .

icsa-res:ICSA-18-067-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-067-01" ;
    dcterms:issued "2018-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-4840; CVE-2018-4839" ;
    icsa:cweNumber "CWE-306; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2018-4839,
        cve-res:CVE-2018-4840 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following products: DIGSI 4: All versions prior to v4.92 | EN100 Ethernet module IEC 61850 variant: All versions prior to v4.30 | EN100 Ethernet module PROFINET IO variant: All versions | EN100 Ethernet module Modbus TCP variant: All versions | EN100 Ethernet module DNP3 variant: All versions | EN100 Ethernet module IEC 104 variant: All versions | SIPROTEC Compact 7SJ80: All versions prior to v4.77. Only affected by CVE-2018-4839 | SIPROTEC Compact 7SK80: All versions prior to v4.77. Only affected by CVE-2018-4839 | SIPROTEC 4 7SJ61 | 7SJ62 and 7SJ64: All versions prior to v4.96. Only affected by CVE-2018-4839 | SIPROTEC 4 7SJ66: All versions prior to v4.30. Only affected by CVE-2018-4839 | SIPROTEC 4 7SD80: All versions prior to v4.70. Only affected by CVE-2018-4839 |Other SIPROTEC Compact relays: All versions. Only affected by CVE-2018-4839 andOther SIPROTEC 4 relays: All versions. Only affected by CVE-2018-4839." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-067-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-067-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-067-02" ;
    dcterms:issued "2018-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-4838" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2018-4838 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following EN100 Ethernet module products: EN100 Ethernet module IEC 61850 variant: All versions prior to V4.30 | EN100 Ethernet module PROFINET IO variant: All versions | EN100 Ethernet module Modbus TCP variant: All versions | EN100 Ethernet module DNP3 variant: All versions prior to v1.04 andEN100 Ethernet module IEC 104 variant: All versions prior to v1.22." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-067-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-072-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-072-01" ;
    dcterms:issued "2018-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Supervisor (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-7513; CVE-2018-7525; CVE-2018-7515; CVE-2018-7517; CVE-2018-7521; CVE-2018-7523; CVE-2018-7519" ;
    icsa:cweNumber "CWE-415; CWE-824; CWE-822; CWE-122; CWE-416; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-7513,
        cve-res:CVE-2018-7515,
        cve-res:CVE-2018-7517,
        cve-res:CVE-2018-7519,
        cve-res:CVE-2018-7521,
        cve-res:CVE-2018-7523,
        cve-res:CVE-2018-7525 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-787,
        cwe-res:CWE-822,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Supervisor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CX-Supervisor are affected: Versions 3.40 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-072-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2018 .

icsa-res:ICSA-18-072-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-072-02" ;
    dcterms:issued "2018-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Data Archive" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-7531; CVE-2018-7529; CVE-2018-7533" ;
    icsa:cweNumber "CWE-502; CWE-20; CWE-276" ;
    icsa:hasCVE cve-res:CVE-2018-7529,
        cve-res:CVE-2018-7531,
        cve-res:CVE-2018-7533 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-276,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Data Archive" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI Data Archive - data storage solution are affected: PI Data Archive versions 2017 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-072-02" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2018 .

icsa-res:ICSA-18-072-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-072-03" ;
    dcterms:issued "2018-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Vision" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-7496; CVE-2018-7504" ;
    icsa:cweNumber "CWE-200; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2018-7496,
        cve-res:CVE-2018-7504 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Vision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI Vision - data visualization framework are affected: PI Vision versions 2017 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-072-03" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2018 .

icsa-res:ICSA-18-072-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-072-04" ;
    dcterms:issued "2018-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Web API" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-7508; CVE-2018-7500" ;
    icsa:cweNumber "CWE-79; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2018-7500,
        cve-res:CVE-2018-7508 ;
    icsa:hasCWE cwe-res:CWE-264,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Web API" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSIsoft reports that the vulnerabilities affect the following PI Web API products: PI Web API versions 2017 R2 and priorNOTE: Not all configurations of PI Web API listed above are affected. Please see the OSIsoft alerts referenced in the Mitigation section." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-072-04" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2018 .

icsa-res:ICSA-18-079-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-079-01" ;
    dcterms:issued "2018-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Geutebruck IP Cameras" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Financial Services" ;
    icsa:cveNumber "CVE-2018-7516; CVE-2018-7520; CVE-2018-7524; CVE-2018-7512; CVE-2018-7528; CVE-2018-7532" ;
    icsa:cweNumber "CWE-352; CWE-89; CWE-287; CWE-79; CWE-284; CWE-918" ;
    icsa:hasCVE cve-res:CVE-2018-7512,
        cve-res:CVE-2018-7516,
        cve-res:CVE-2018-7520,
        cve-res:CVE-2018-7524,
        cve-res:CVE-2018-7528,
        cve-res:CVE-2018-7532 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-352,
        cwe-res:CWE-79,
        cwe-res:CWE-89,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IP Cameras" ;
    icsa:productDistribution "Australia, Germany, United States, Europe" ;
    icsa:productsAffected "Geutebruck reports that the vulnerabilities affect the following IP cameras: G-Cam/EFD-2250 (part n° 5.02024) firmware version 1.12.0.4 andTopline TopFD-2125 (part n° 5.02820) firmware version 3.15.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-079-01" ;
    icsa:vendor "Geutebruck" ;
    icsa:year 2018 .

icsa-res:ICSA-18-079-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-079-02" ;
    dcterms:issued "2018-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-4843" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-4843 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SINUMERIK, and PROFINET IO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following products: SIMATIC CP 343-1 Advanced: All versions | SIMATIC CP 343-1 Standard: All versions | SIMATIC CP 443-1 Advanced: All versions | SIMATIC CP 443-1 Standard: All versions | SIMATIC S7-1500 Software Controller incl. F: All versions prior to v1.7.0 | SIMATIC S7-1500 incl. F: All versions prior to v1.7.0 | SIMATIC S7-300 incl. F and T: All versions prior to v3.X.16 | SIMATIC S7-400 H v6: All versions prior to v6.0.9 | SIMATIC S7-400 PN/DP v6 incl. F: All versions prior to v6.0.7 | SIMATIC S7-400 PN/DP v7 incl. F: All versions | SIMATIC S7-410: All versions prior to v8.1 | SIMATIC WinAC RTX (F) 2010: All versions prior to SP3 | SINUMERIK 828D: All versions prior to v4.7 SP6 | HF1 Softnet PROFINET IO for PC-based Windows systems: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-079-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-081-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-081-01" ;
    dcterms:issued "2018-03-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC OA UI Mobile App" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-4844" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2018-4844 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC OA UI Mobile App" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that this vulnerability affects the following products: SIMATIC WinCC OA UI for Android: All versions prior to V3.15.10 and SIMATIC WinCC OA UI for IOS: All versions prior to V3.15.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-081-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-081-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-081-02" ;
    dcterms:issued "2018-03-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Beckhoff TwinCAT" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-7502" ;
    icsa:cweNumber "CWE-822" ;
    icsa:hasCVE cve-res:CVE-2018-7502 ;
    icsa:hasCWE cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TwinCAT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Beckhoff reports that the vulnerability affects the following TwinCAT PLC products: TwinCAT 3.1 Build 4022.4 or prior |TwinCAT 2.11 R3 2259 or prior andTwinCAT 3.1 C++ / Matlab (TC1210/TC1220/TC1300/TC1320)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-081-02" ;
    icsa:vendor "Beckhoff Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-086-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-086-01" ;
    dcterms:issued "2018-03-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-7240; CVE-2018-7241; CVE-2018-7242" ;
    icsa:cweNumber "CWE-798; CWE-327; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-7240,
        cve-res:CVE-2018-7241,
        cve-res:CVE-2018-7242 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-327,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Modicon PLCs are affected: Modicon Premium all versions | Modicon Quantum all versions | Modicon M340 all versions and Modicon X80 RTU (BMXNOR0200H) all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-086-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-088-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-088-01" ;
    dcterms:issued "2018-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO 750 Series" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-8836" ;
    icsa:cweNumber "CWE-404" ;
    icsa:hasCVE cve-res:CVE-2018-8836 ;
    icsa:hasCWE cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "750 Series" ;
    icsa:productDistribution "China, Germany, India, Poland, Switzerland, United States" ;
    icsa:productsAffected "The following versions of 750 series PLC are affected: 750-880 firmware version 10 and prior | 750-881 firmware version 10 and prior | 750-852 firmware version 10 and prior | 750-882 firmware version 10 and prior | 750-885 firmware version 10 and prior | 750-831 firmware version 10 and prior | 750-889 firmware version 10 and prior and 750-829 firmware version 10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-088-01" ;
    icsa:vendor "WAGO" ;
    icsa:year 2018 .

icsa-res:ICSA-18-088-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-088-02" ;
    dcterms:issued "2018-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIM 1531 IRC" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2018-4841" ;
    icsa:cweNumber "CWE-303" ;
    icsa:hasCVE cve-res:CVE-2018-4841 ;
    icsa:hasCWE cwe-res:CWE-303 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIM 1531 IRC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following TIM 1531 IRC communications modules: TIM 1531 IRC | all versions prior to v1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-088-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-088-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-088-03" ;
    dcterms:issued "2018-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update G)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-4832" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-4832 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following SIMATIC products: OpenPCS 7 v7.1 and earlier |OpenPCS 7 v8.0: All versions prior to 8.2 SP1 |OpenPCS 7 v8.1: All versions prior to v8.1 Upd5 |OpenPCS 7 v8.2: All versions |OpenPCS 7 v9.0: All versions prior to v9.0 Upd1 | SIMATIC BATCH v7.1 and earlier | SIMATIC BATCH v8.0: All versions prior to v8.0 SP1 Upd21 | SIMATIC BATCH v8.1: All versions prior to v8.1 SP1 Upd16 | SIMATIC BATCH v8.2: All versions prior to v8.2 Upd10 | SIMATIC BATCH v9.0: All versions prior to v9.0 SP1 | SIMATIC NET PC-Software: All versions prior to v15 SP1 | SIMATIC PCS 7 v7.1 and earlier | SIMATIC PCS 7 v8.0: All versions | SIMATIC PCS 7 v8.1: All versions | SIMATIC PCS 7 v9.0: All versions prior to v9.0 SP1 | SIMATIC Route Control v7.1 and earlier | SIMATIC Route Control v8.0: All versions | SIMATIC Route Control v8.1: All versions | SIMATIC PCS 7 v8.2: All versions prior to v8.2 SP1 | SIMATIC Route Control v8.2: All versions | SIMATIC Route Control v9.0: All versions prior to v9.0 Upd1 | SIMATIC WinCC Runtime Professional v13: All versions prior to v13 SP2 Upd2 | SIMATIC WinCC Runtime Professional v14: All versions prior to v14 SP1 Upd5 | SIMATIC WinCC 7.2 and earlier: All versions prior to WinCC 7.2 Upd 15 | SIMATIC WinCC 7.3: All versions prior to WinCC 7.3 Upd16 and SIMATIC WinCC 7.4: All versions prior to v7.4 SP1 Upd 4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-088-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-093-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-093-01" ;
    dcterms:issued "2018-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Building Technologies Products (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2017-11498; CVE-2017-12818; CVE-2017-12819; CVE-2017-11497; CVE-2017-12822; CVE-2017-12820; CVE-2017-11496; CVE-2017-12821" ;
    icsa:cweNumber "CWE-776; CWE-254; CWE-122; CWE-284; CWE-121; CWE-119; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2017-11496,
        cve-res:CVE-2017-11497,
        cve-res:CVE-2017-11498,
        cve-res:CVE-2017-12818,
        cve-res:CVE-2017-12819,
        cve-res:CVE-2017-12820,
        cve-res:CVE-2017-12821,
        cve-res:CVE-2017-12822 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-254,
        cwe-res:CWE-284,
        cwe-res:CWE-476,
        cwe-res:CWE-776 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Building Technologies Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens License Management System (LMS) which includes a vulnerable version of Gemalto Sentinel LDK RTE is used by the following Siemens products and solutions: License Management System (LMS) All versions prior to V2.1 SP3(2.1.670) | Annual Shading V1.0.4 and 1.1 | Desigo ABT Versions | MP1.1 Build 845 | MP1.15 Build 360 | MP1.16 Build 055 | MP1.2 Build 850 | MP1.2.1 Build 318 | MP2.1 Build 965 | Desigo CC Versions | MP1.1 | MP2.0 | MP2.1 | MP3.0 | Desigo Configuration Manager (DCM) V6.10.140 | Desigo XWP | V5.00.204 | V5.00.260 | V5.10.142 | V5.10.212 | V6.00.184 | V6.00.342 | V6.10.172 | SiteIQ Analytics | V1.1 | V1.2 | V1.3 | Siveillance Identity V1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-093-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-095-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-095-01" ;
    dcterms:issued "2018-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-12092; CVE-2017-12089; CVE-2017-12090; CVE-2017-12093; CVE-2017-12088" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-12088,
        cve-res:CVE-2017-12089,
        cve-res:CVE-2017-12090,
        cve-res:CVE-2017-12092,
        cve-res:CVE-2017-12093 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MicroLogix Controllers - PLC (Programmable Logic Controller) are affected: MicroLogix 1400 Versions FRN 21.003 and prior and MicroLogix 1100 Versions FRN 16.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-095-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-095-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-095-02" ;
    dcterms:issued "2018-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MXview" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2018-7506" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2018-7506 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MXview" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MXview | network management software are affected: MXview versions 2.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-095-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2018 .

icsa-res:ICSA-18-095-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-095-03" ;
    dcterms:issued "2018-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-5463" ;
    icsa:cweNumber "CWE-703" ;
    icsa:hasCVE cve-res:CVE-2018-5463 ;
    icsa:hasCWE cwe-res:CWE-703 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA" ;
    icsa:productDistribution "Brazil, South America" ;
    icsa:productsAffected "The following versions of LAquis SCADA - industrial automation software are affected: LAquis SCADA software versions 4.1.0.3391 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-095-03" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2018 .

icsa-res:ICSA-18-100-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-100-01" ;
    dcterms:issued "2018-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "ATI Systems Emergency Mass Notification Systems" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Defense Industrial Base; Emergency Services; Government Facilities; Nuclear Reactors Materials and Waste" ;
    icsa:cveNumber "CVE-2018-8862; CVE-2018-8864" ;
    icsa:cweNumber "CWE-311; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-8862,
        cve-res:CVE-2018-8864 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Emergency Mass Notification Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ATI's Emergency Mass Notification Systems devices are affected: HPSS16HPSS32MHPSS andALERT4000." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-100-01" ;
    icsa:vendor "ATI Systems" ;
    icsa:year 2018 .

icsa-res:ICSA-18-100-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-100-02" ;
    dcterms:issued "2018-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-One" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-7514; CVE-2018-7530; CVE-2018-8834" ;
    icsa:cweNumber "CWE-122; CWE-843; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-7514,
        cve-res:CVE-2018-7530,
        cve-res:CVE-2018-8834 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-One" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CX-One are affected: CX-One Versions 4.42 and prior | including the following applications: CX-FLnet versions 1.00 and prior | CX-Protocol versions 1.992 and prior | CX-Programmer versions 9.65 and prior | CX-Server versions 5.0.22 and prior | Network Configurator versions 3.63 and prior andSwitch Box Utility versions 1.68 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-100-02" ;
    icsa:vendor "Omron" ;
    icsa:year 2018 .

icsa-res:ICSA-18-102-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-102-01" ;
    dcterms:issued "2018-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CENTUM and Exaopc" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2018-8838" ;
    icsa:cweNumber "CWE-264" ;
    icsa:hasCVE cve-res:CVE-2018-8838 ;
    icsa:hasCWE cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CENTUM and Exaopc" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Yokogawa products are affected: CENTUM seriesCENTUM CS 1000 all versions | CENTUM CS 3000 versions R3.09.50 and prior | CENTUM CS 3000 Small versions R3.09.50 and prior | CENTUM VP versions R6.03.10 and prior | CENTUM VP Small versions R6.03.10 and prior | CENTUM VP Basic versions R6.03.10 and prior.Exaopc versions R3.75.00 and prior |B/M9000 CS all versions andB/M9000 VP versions R8.01.01 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-102-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2018 .

icsa-res:ICSA-18-102-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-102-02" ;
    dcterms:issued "2018-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Activation Manager (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-13754; CVE-2015-8277" ;
    icsa:cweNumber "CWE-119; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2015-8277,
        cve-res:CVE-2017-13754 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Activation Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports these vulnerabilities affect licensing management software in the following FactoryTalk Activation Manager products: FactoryTalk Activation Manager v4.00 and v4.01 Ships with Wibu-Systems CodeMeter v6.50b and earlier | FactoryTalk Activation Manager v4.00 and earlier Ships with FlexNet Publisher v11.11.1.1 and earlier.The following products require FactoryTalk Activation Manager to store and keep track of Rockwell Automation software products and activation files. Users who recognize products from the following list are using FactoryTalk Activation Manager: ArenaEmonitorFactoryTalk AssetCentreFactoryTalk BatchFactoryTalk EnergyMetrixFactoryTalk eProcedureFactoryTalk GatewayFactoryTalk Historian ClassicFactoryTalk Historian Site Edition (SE)FactoryTalk Information ServerFactoryTalk MetricsFactoryTalk Transaction ManagerFactoryTalk VantagePointFactoryTalk View Machine Edition (ME)FactoryTalk View Site Edition (SE)FactoryTalk ViewPointRSFieldBusRSLinx ClassicRSLogix 500RSLogix 5000RSLogix5RSLogix Emulate 5000RSNetWorxRSView32SoftLogix 5800Studio 5000 ArchitectStudio 5000 Logix DesignerStudio 5000 Logix EmulateStudio 5000 View Designer." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-102-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-107-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-107-01" ;
    dcterms:issued "2018-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric InduSoft Web Studio and InTouch Machine Edition" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-8840" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-8840 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InduSoft Web Studio and InTouch Machine Edition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of InduSoft Web Studio and InTouch Machine Edition - HMI are affected: InduSoft Web Studio v8.1 and prior versions and InTouch Machine Edition 2017 v8.1 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-107-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-107-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-107-02" ;
    dcterms:issued "2018-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Triconex Tricon (Update B)" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-8872; CVE-2018-7522" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2018-7522,
        cve-res:CVE-2018-8872 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Triconex Tricon" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Triconex Tricon - Safety Instrumented System are affected: MP Model 3008 firmware versions 10.0-10.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-107-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-107-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-107-03" ;
    dcterms:issued "2018-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix Services Router" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-0175; CVE-2018-0151; CVE-2018-0158" ;
    icsa:cweNumber "CWE-119; CWE-20; CWE-134" ;
    icsa:hasCVE cve-res:CVE-2018-0151,
        cve-res:CVE-2018-0158,
        cve-res:CVE-2018-0175 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-134,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix Services Router" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Allen-Bradley Stratix Services Router use a vulnerable version of Cisco IOS or IOS XE: Allen-Bradley Stratix 5900 Services Router | version 15.6.3M1 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-107-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-107-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-107-04" ;
    dcterms:issued "2018-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix and ArmorStratix Switches" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-0156; CVE-2018-0158; CVE-2018-0173; CVE-2018-0167; CVE-2018-0172; CVE-2018-0174; CVE-2018-0171; CVE-2018-0175" ;
    icsa:cweNumber "CWE-119; CWE-20; CWE-399; CWE-134" ;
    icsa:hasCVE cve-res:CVE-2018-0156,
        cve-res:CVE-2018-0158,
        cve-res:CVE-2018-0167,
        cve-res:CVE-2018-0171,
        cve-res:CVE-2018-0172,
        cve-res:CVE-2018-0173,
        cve-res:CVE-2018-0174,
        cve-res:CVE-2018-0175 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-134,
        cwe-res:CWE-20,
        cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix and ArmorStratix Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Allen-Bradley Stratix and ArmorStratix Switches use a vulnerable version of Cisco IOS or IOS XE: Allen-Bradley Stratix 5400 Industrial Ethernet Switches | versions 15.2(6)E0a and earlier; Allen-Bradley Stratix 5410 Industrial Distribution Switches | versions 15.2(6)E0a and earlier; Allen-Bradley Stratix 5700 Industrial Managed Ethernet Switches | versions 15.2(6)E0a and earlier; Allen-Bradley Stratix 8000 Modular Managed Ethernet Switches | versions 15.2(6)E0a and earlier; Allen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments | versions 15.2(6)E0a and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-107-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-107-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-107-05" ;
    dcterms:issued "2018-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix Industrial Managed Ethernet Switch" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-0156; CVE-2018-0155; CVE-2018-0173; CVE-2018-0167; CVE-2018-0172; CVE-2018-0174; CVE-2018-0171; CVE-2018-0175" ;
    icsa:cweNumber "CWE-388; CWE-134; CWE-20; CWE-119; CWE-399" ;
    icsa:hasCVE cve-res:CVE-2018-0155,
        cve-res:CVE-2018-0156,
        cve-res:CVE-2018-0167,
        cve-res:CVE-2018-0171,
        cve-res:CVE-2018-0172,
        cve-res:CVE-2018-0173,
        cve-res:CVE-2018-0174,
        cve-res:CVE-2018-0175 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-134,
        cwe-res:CWE-20,
        cwe-res:CWE-388,
        cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix Industrial Managed Ethernet Switch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Allen-Bradley Stratix Industrial Managed Ethernet Switch use a vulnerable version of Cisco IOS or IOS XE: Allen-Bradley Stratix 8300 Industrial Managed Ethernet Switches | versions 15.2(4a)EA5 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-107-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-109-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-109-01" ;
    dcterms:issued "2018-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC OA Operator IOS App (Update A)" ;
    icsa:CVSSScore "4.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-4847" ;
    icsa:cweNumber "CWE-538" ;
    icsa:hasCVE cve-res:CVE-2018-4847 ;
    icsa:hasCWE cwe-res:CWE-538 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC OA Operator IOS App" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following product: SIMATIC WinCC OA Operator iOS App: All versions prior to v1.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-109-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-114-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-114-01" ;
    dcterms:issued "2018-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Vecna VGo Robot (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2018-8866; CVE-2018-8860; CVE-2018-17933; CVE-2018-17931; CVE-2018-8858" ;
    icsa:cweNumber "CWE-284; CWE-78; CWE-285; CWE-319; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2018-17931,
        cve-res:CVE-2018-17933,
        cve-res:CVE-2018-8858,
        cve-res:CVE-2018-8860,
        cve-res:CVE-2018-8866 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-285,
        cwe-res:CWE-319,
        cwe-res:CWE-522,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VGo Robot" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of VGo Robot - remote controlled robot are affected: VGo Robot: Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-114-01" ;
    icsa:vendor "Vecna" ;
    icsa:year 2018 .

icsa-res:ICSA-18-114-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-114-02" ;
    dcterms:issued "2018-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Intel 2G Modem" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2018-3624" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2018-3624 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "2G Modem" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products use the vulnerable Intel modem with 2G capability and ETWS enabled: Intel XMM71xxIntel XMM72xxIntel XMM73xxIntel XMM74xxSofia 3GSofia 3G-RSofia 3G-R WVersions that support 2G and the ETWS feature delivered to system manufactures prior to the disclosure of CVE-2018-3624 may be affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-114-02" ;
    icsa:vendor "Intel Corporation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-114-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-114-03" ;
    dcterms:issued "2018-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess HMI Designer" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-8833; CVE-2018-8835; CVE-2018-8837" ;
    icsa:cweNumber "CWE-122; CWE-787; CWE-415" ;
    icsa:hasCVE cve-res:CVE-2018-8833,
        cve-res:CVE-2018-8835,
        cve-res:CVE-2018-8837 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-415,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess HMI Designer" ;
    icsa:productDistribution "Taiwan, United States, Asia, East Asia, Europe" ;
    icsa:productsAffected "The following version of Advantech WebAccess HMI Designer - Human Machine Interface (HMI) Runtime Development Software is affected: Advantech WebAccess HMI Designer | Version 2.1.7.32 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-114-03" ;
    icsa:vendor "Advantech" ;
    icsa:year 2018 .

icsa-res:ICSA-18-116-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-116-01" ;
    dcterms:issued "2018-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics PMSoft" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-8839" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-8839 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PMSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PMSoft - software development tool for motion controllers are affected: PMSoft v 2.10 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-116-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-116-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-116-02" ;
    dcterms:issued "2018-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON Technology Co., Ltd. LeviStudio HMI Editor and PI Studio HMI Project Programmer" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-7527" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-7527 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Technology Co., Ltd. LeviStudio HMI Editor and PI Studio HMI Project Programmer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2017 and prior.; The following versions of LEVI Studio HMI Editor and PI Studio HMI Project Programmer - HMI programming software products are affected: WECON LeviStudioU Version 1.10 part of Wecon LeviStudioU 1.8.29 and prior andPI Studio HMI Project Programmer Build: November 11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-116-02" ;
    icsa:vendor "WECON" ;
    icsa:year 2018 .

icsa-res:ICSA-18-123-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-123-01" ;
    dcterms:issued "2018-05-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Lantech IDS 2102" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams" ;
    icsa:cveNumber "CVE-2018-8869; CVE-2018-8865" ;
    icsa:cweNumber "CWE-20; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-8865,
        cve-res:CVE-2018-8869 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IDS 2102" ;
    icsa:productDistribution "Australia, China, Taiwan, North America, Europe" ;
    icsa:productsAffected "The following versions of IDS 2102 - Ethernet device server are affected: IDS 2102 versions 2.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-123-01" ;
    icsa:vendor "Lantech" ;
    icsa:year 2018 .

icsa-res:ICSA-18-128-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-128-01" ;
    dcterms:issued "2018-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Medium Voltage SINAMICS Products (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-2680; CVE-2017-12741" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-12741,
        cve-res:CVE-2017-2680 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Medium Voltage SINAMICS Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that these vulnerabilities affect the following products: SINAMICS GH150 V4.7 w. PROFINET: All versions prior to V4.7 SP5 HF7 | SINAMICS GL150 V4.7 w. PROFINET: All versions prior to V4.8 SP2 | SINAMICS GM150 V4.7 w. PROFINET: All versions prior to V4.8 SP2 | SINAMICS SL150 V4.7.0 w. PROFINET: All versions prior to V4.7 HF30 | SINAMICS SL150 V4.7.4 w. PROFINET: All versions prior to V4.8 SP2 | SINAMICS SL150 V4.7.5 w. PROFINET: All versions prior to V4.8 SP2 | SINAMICS SM120 V4.7 w. PROFINET: All versions prior to V4.8 SP2 and SINAMICS GM150 v4.7 w. PROFINET: All versions prior to v4.7 HF31 and SIMOTION D4xx v4.4 for SINAMICS SM150i-2 w. PROFINET: All versions prior to v4.4 HF26." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-128-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-128-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-128-02" ;
    dcterms:issued "2018-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance VMS (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-7891" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2018-7891 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance VMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siveillance VMS - IP video management software are affected: Siveillance VMS 2016 R1 | all versions prior to V10.0a | Siveillance VMS 2016 R2 | all versions prior to V10.1a | Siveillance VMS 2016 R3 | all versions prior to V10.2b | Siveillance VMS 2017 R1 | all versions prior to V11.1a | Siveillance VMS 2017 R2 | all versions prior to V11.2a and Siveillance VMS 2018 R1 | all versions prior to V12.1a." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-128-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-128-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-128-03" ;
    dcterms:issued "2018-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance VMS Video Mobile App" ;
    icsa:CVSSScore "4.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2018-4849" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2018-4849 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance VMS Video Mobile App" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following Siveillance VMS Video Mobile Apps: Siveillance VMS Video for Android | all versions prior to V12.1a (2018 R1) and Siveillance VMS Video for iOS: all versions prior to V12.1a (2018 R1)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-128-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-130-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-130-01" ;
    dcterms:issued "2018-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "MatrikonOPC Explorer" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2018-8714" ;
    icsa:cweNumber "CWE-552" ;
    icsa:hasCVE cve-res:CVE-2018-8714 ;
    icsa:hasCWE cwe-res:CWE-552 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Explorer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "According to MatrikonOPC the following product is affected: MatrikonOPC Explorer | Versions 5.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-130-01" ;
    icsa:vendor "MatrikonOPC" ;
    icsa:year 2018 .

icsa-res:ICSA-18-130-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-130-02" ;
    dcterms:issued "2018-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-8843" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2018-8843 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arena" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Arena - simulation software for manufacturing are affected: Arena versions 15.10.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-130-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-135-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-135-01" ;
    dcterms:issued "2018-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-8845; CVE-2018-7497; CVE-2018-7501; CVE-2018-8841; CVE-2018-7503; CVE-2018-7495; CVE-2018-10589; CVE-2018-10590; CVE-2018-7505; CVE-2018-7499; CVE-2018-10591" ;
    icsa:cweNumber "CWE-22; CWE-89; CWE-822; CWE-122; CWE-264; CWE-121; CWE-73; CWE-346; CWE-269; CWE-548" ;
    icsa:hasCVE cve-res:CVE-2018-10589,
        cve-res:CVE-2018-10590,
        cve-res:CVE-2018-10591,
        cve-res:CVE-2018-7495,
        cve-res:CVE-2018-7497,
        cve-res:CVE-2018-7499,
        cve-res:CVE-2018-7501,
        cve-res:CVE-2018-7503,
        cve-res:CVE-2018-7505,
        cve-res:CVE-2018-8841,
        cve-res:CVE-2018-8845 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-22,
        cwe-res:CWE-264,
        cwe-res:CWE-269,
        cwe-res:CWE-346,
        cwe-res:CWE-548,
        cwe-res:CWE-73,
        cwe-res:CWE-822,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan, United States, Asia, East Asia, Europe" ;
    icsa:productsAffected "The following versions of WebAccess products are affected: WebAccess versions V8.2_20170817 and prior | WebAccess versions V8.3.0 and prior | WebAccess Dashboard versions V.2.0.15 and prior | WebAccess Scada Node versions prior to 8.3.1 | WebAccess/NMS 2.0.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-135-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2018 .

icsa-res:ICSA-18-137-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-137-01" ;
    dcterms:issued "2018-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE PACSystems CPE305/310, CPE330, CPE400, RSTi-EP CPE 100, CPU320/CRU320, RXi" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-8867" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-8867 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PACSystems CPE305/310, CPE330, CPE400, RSTi-EP CPE 100, CPU320/CRU320, RXi" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PACSystems - industrial Internet controller are affected: PACSystems RX3i CPE305/310 version 9.20 and prior | RX3i CPE330 version 9.21 and prior | RX3i CPE 400 version 9.30 and prior | PACSystems RSTi-EP CPE 100 all versions and PACSystems CPU320/CRU320 and RXi all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-137-01" ;
    icsa:vendor "GE" ;
    icsa:year 2018 .

icsa-res:ICSA-18-137-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-137-02" ;
    dcterms:issued "2018-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx Series" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2018-10730; CVE-2018-10729; CVE-2018-10731; CVE-2018-10728" ;
    icsa:cweNumber "CWE-77; CWE-200; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-10728,
        cve-res:CVE-2018-10729,
        cve-res:CVE-2018-10730,
        cve-res:CVE-2018-10731 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-200,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FL SWITCH 3xxx/4xxx/48xx Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All FL SWITCH 3xxx | 4xxx and 48xxx Series products running firmware Version 1.0 to 1.32 are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-137-02" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2018 .

icsa-res:ICSA-18-137-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-137-03" ;
    dcterms:issued "2018-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-400 CPU (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-4850" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-4850 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-400 CPU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC S7-400 - CPU used for process controls are affected: SIMATIC S7-400 (incl. F) CPU all hardware versions prior to - including | hardware v4.0 | SIMATIC S7-400 (incl. F) CPU hardware v5.0 with firmware versions prior to v5.2 and SIMATIC S7-400H CPU all hardware versions prior to v4.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-137-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-137-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-137-04" ;
    dcterms:issued "2018-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics Delta Industrial Automation TPEditor (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-8871" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2018-8871 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Industrial Automation TPEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Industrial Automation TPEditor - programming software for Delta text panels operating on Windows are affected: Delta Industrial Automation TPEditor | Version 1.89 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-137-04" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-142-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-142-01" ;
    dcterms:issued "2018-05-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Martem TELEM-GW6/GWM (Update B)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Estonia" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-10609; CVE-2018-10603; CVE-2018-10605; CVE-2018-10607" ;
    icsa:cweNumber "CWE-306; CWE-79; CWE-276; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-10603,
        cve-res:CVE-2018-10605,
        cve-res:CVE-2018-10607,
        cve-res:CVE-2018-10609 ;
    icsa:hasCWE cwe-res:CWE-276,
        cwe-res:CWE-306,
        cwe-res:CWE-400,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TELEM-GW6/GWM" ;
    icsa:productDistribution "Estonia, Finland, Lithuania, Latvia" ;
    icsa:productsAffected "The following TELEM products with insecure configurations are affected: GW6 versions prior to 2.0.87-4018403-k4 and GWM versions prior to 2.0.87-4018403-k4. Not all versions are affected by all vulnerabilities." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-142-01" ;
    icsa:vendor "Martem" ;
    icsa:year 2018 .

icsa-res:ICSA-18-144-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-144-01" ;
    dcterms:issued "2018-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Floating License Manager" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2177; CVE-2017-5571; CVE-2016-10395" ;
    icsa:cweNumber "CWE-119; CWE-122; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2016-10395,
        cve-res:CVE-2016-2177,
        cve-res:CVE-2017-5571 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-122,
        cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Floating License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products use the vulnerable Schneider Electric Floating License Manager - license management platform: SCADA Expert Vijeo Citect / CitectSCADA Version 7.30 | 7.40 | CitectSCADA Version 2015 | 2016 | Vijeo Historian/CitectHistorian Version 4.40 | 4.50 | CitectHistorian Version 2016 | Citect Anywhere | PlantStruxure PES V4.3 SP1 and prior and EcoStruxure Modicon Builder V3.0 and prior. The following products are only affected by CVE-2016-10395: EcoStruxure Power Monitoring Expert 8.2 (Standard | DC | HC Editions) | StruxureWare Power Monitoring Expert 8.1 (Standard | DC | HC Editions) | StruxureWare Power Monitoring Expert 8.0 (Standard | DC | HC | Buildings Editions) | StruxureWare Power Monitoring Expert 7.2.x | Energy Expert 1.x (formerly Power Manager) and EcoStruxure Power SCADA Operations 8.x (formerly PowerSCADA Expert) (Only with Advanced Reports and Dashboards Module)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-144-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-151-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-151-01" ;
    dcterms:issued "2018-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation DOPSoft" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-10617; CVE-2018-10623; CVE-2018-10621" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-10617,
        cve-res:CVE-2018-10621,
        cve-res:CVE-2018-10623 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DOPSoft - Human Machine Interface (HMI) editing software are affected: DOPSoft Version 4.00.04 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-151-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-151-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-151-02" ;
    dcterms:issued "2018-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE MDS PulseNET and MDS PulseNET Enterprise" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-10615; CVE-2018-10611; CVE-2018-10613" ;
    icsa:cweNumber "CWE-23; CWE-611; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-10611,
        cve-res:CVE-2018-10613,
        cve-res:CVE-2018-10615 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-287,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MDS PulseNET and MDS PulseNET Enterprise" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE reports that the vulnerabilities affect the following MDS PulseNET products: PulseNET Version." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-151-02" ;
    icsa:vendor "GE" ;
    icsa:year 2018 .

icsa-res:ICSA-18-151-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-151-03" ;
    dcterms:issued "2018-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa STARDOM Controllers (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2018-17902; CVE-2018-17900; CVE-2018-17898; CVE-2018-10592; CVE-2018-17896" ;
    icsa:cweNumber "CWE-79; CWE-798; CWE-384; CWE-522; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-10592,
        cve-res:CVE-2018-17896,
        cve-res:CVE-2018-17898,
        cve-res:CVE-2018-17900,
        cve-res:CVE-2018-17902 ;
    icsa:hasCWE cwe-res:CWE-384,
        cwe-res:CWE-400,
        cwe-res:CWE-522,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "STARDOM Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Yokogawa reports the vulnerability affects the following STARDOM Controller products: FCJ (R4.02 and prior) | FCN-100 (R4.02 and prior) | FCN-RTU (R4.02 and prior) | FCN-500 (R4.02 and prior) | FCJ (R4.10 and prior) | FCN-100 (R4.10 and prior) | FCN-RTU (R4.10 and prior) and FCN-500 (R4.10 and prior)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-151-03" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2018 .

icsa-res:ICSA-18-156-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-156-01" ;
    dcterms:issued "2018-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB IP Gateway" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2017-7931; CVE-2017-7906; CVE-2017-7933" ;
    icsa:cweNumber "CWE-352; CWE-256; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-7906,
        cve-res:CVE-2017-7931,
        cve-res:CVE-2017-7933 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-287,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IP Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of IP Gateway - building management system are affected. The IP Gateway is available under two brands; ABB and Busch-Jaeger. Busch-Jaeger Elektro GmbH is part of the ABB Group. IP Gateway Versions 3.39 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-156-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2018 .

icsa-res:ICSA-18-158-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-158-01" ;
    dcterms:issued "2018-06-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-10619" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2018-10619 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLinx Classic and FactoryTalk Linx Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of RSLinx Classic - software platform that allows Logix5000 Programmable Automation Controllers to connect to a wide variety of Rockwell Software applications and FactoryTalk Linx Gateway - software that provides an Open Platform Communications (OPC) Unified Architecture (UA) server interface to allow the delivery of information from Rockwell Software applications to Allen-Bradley controllers are affected: RSLinx Classic Versions 3.90.01 and prior andFactoryTalk Linx Gateway Versions 3.90.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-158-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-163-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-163-01" ;
    dcterms:issued "2018-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric U.motion Builder" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-7787; CVE-2018-7784; CVE-2018-7785; CVE-2018-7786" ;
    icsa:cweNumber "CWE-79; CWE-20; CWE-78; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-7784,
        cve-res:CVE-2018-7785,
        cve-res:CVE-2018-7786,
        cve-res:CVE-2018-7787 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-20,
        cwe-res:CWE-78,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "U.motion Builder" ;
    icsa:productDistribution "France, United States, Asia, Europe" ;
    icsa:productsAffected "The following U.motion Builder Software versions are affected: U.motion Builder versions prior to 1.3.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-163-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-163-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-163-02" ;
    dcterms:issued "2018-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X Switches (Update B)" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-4842; CVE-2018-4848" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2018-4842,
        cve-res:CVE-2018-4848 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerabilities affects the following SCALANCE X switch products: SCALANCE X-200 switch family (incl. SIPLUS NET variants): All versions prior to v5.2.3 (only affected by CVE-2018-4848) SCALANCE X-200 IRT switch family (incl. SIPLUS NET variants): All versions prior to v5.4.1 SCALANCE X300 switch family (incl. SIPLUS NET variants): All versions prior to v4.1.3 --------- Begin Update B Part 1 of 2 --------- SCALANCE X-200RNA switch family: All versions prior to v3.2.7 --------- End Update B Part 1 of 2 ---------" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-163-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-165-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-165-01" ;
    dcterms:issued "2018-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-4833" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2018-4833 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following products: RFID 181-EIP: All versions RUGGEDCOM Win: v4.4 | v4.5 | v5.0 and v5.1 SCALANCE X-200 switch family (incl. SIPLUS NET variants): All versions prior to v5.2.3 SCALANCE X-200 IRT switch family (incl. SIPLUS NET variants): All versions prior to v5.4.1 SCALANCE X-200RNA: All versions prior to v3.2.6 SCALANCE X-300 switch family (incl. SIPLUS NET variants): All versions prior to v4.1.3 SCALANCE X408: All versions prior to v4.1.3 SCALANCE X414: All versions SIMATIC RF182C: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-165-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-172-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-172-01" ;
    dcterms:issued "2018-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics Delta Industrial Automation COMMGR" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-10594" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-10594 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Industrial Automation COMMGR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Industrial Automation COMMGR - communication management software and accompanying PLC simulators are affected: COMMGR Version 1.08 and prior. DVPSimulator EH2 | EH3 | ES2 | SE | SS2AHSIM_5x0 | AHSIM_5x1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-172-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-172-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-172-02" ;
    dcterms:issued "2018-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley CompactLogix and Compact GuardLogix (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-9312" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-9312 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley CompactLogix and Compact GuardLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "According to Rockwell Automation | the following products are affected: Allen-Bradley CompactLogix 5370 L1 controllers | Versions 30.014 and prior | Allen-Bradley CompactLogix 5370 L2 controllers | Versions 30.014 and prior | Allen-Bradley CompactLogix 5370 L3 controllers | Versions 30.014 and prior | Allen-Bradley Armor CompactLogix 5370 L3 controllers | Versions 30.014 and prior | Allen-Bradley Compact GuardLogix 5370 controllers | Versions 30.014 and prior and Allen-Bradley Armor Compact GuardLogix 5370 controllers | Versions 30.014 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-172-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-184-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-184-01" ;
    dcterms:issued "2018-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley Stratix 5950" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-0240; CVE-2018-0227; CVE-2018-0231; CVE-2018-0296; CVE-2018-0228" ;
    icsa:cweNumber "CWE-20; CWE-29; CWE-295; CWE-399; CWE-39" ;
    icsa:hasCVE cve-res:CVE-2018-0227,
        cve-res:CVE-2018-0228,
        cve-res:CVE-2018-0231,
        cve-res:CVE-2018-0240,
        cve-res:CVE-2018-0296 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-29,
        cwe-res:CWE-295,
        cwe-res:CWE-39,
        cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley Stratix 5950" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The Allen-Bradley Stratix 5950 uses the Cisco Systems Inc. - Adaptive Security Appliance (ASA) as its central operating system. Cisco has released advisories disclosing multiple vulnerabilities in the ASA software.The following Allen-Bradley Stratix 5950 Security Appliances - running the Cisco ASA v9.6.2 and earlier are affected: 1783-SAD4T0SBK9 |1783-SAD4T0SPK9 |1783-SAD2T2SBK9 and 1783-SAD2T2SPK9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-184-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-191-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-191-01" ;
    dcterms:issued "2018-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Universal Robots Robot Controllers" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-10635; CVE-2018-10633" ;
    icsa:cweNumber "CWE-306; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2018-10633,
        cve-res:CVE-2018-10635 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Robot Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of robot controllers are affected: CB 3.1 | SW Version 3.4.5-100." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-191-01" ;
    icsa:vendor "Universal Robots" ;
    icsa:year 2018 .

icsa-res:ICSA-18-191-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-191-02" ;
    dcterms:issued "2018-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schweitzer Engineering Laboratories, Inc. Compass and AcSELerator Architect" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-10604; CVE-2018-10608; CVE-2018-10600" ;
    icsa:cweNumber "CWE-276; CWE-611; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-10600,
        cve-res:CVE-2018-10604,
        cve-res:CVE-2018-10608 ;
    icsa:hasCWE cwe-res:CWE-276,
        cwe-res:CWE-400,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Compass and AcSELerator Architect" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from SEL are affected. Not all products are affected by all vulnerabilities.Compass Version 3.0.5.1 and prior and AcSELerator Architect Version 2.2.24.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-191-02" ;
    icsa:vendor "Schweitzer Engineering Laboratories" ;
    icsa:year 2018 .

icsa-res:ICSA-18-191-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-191-03" ;
    dcterms:issued "2018-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tridium Niagara" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-16744; CVE-2017-16748" ;
    icsa:cweNumber "CWE-22; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-16744,
        cve-res:CVE-2017-16748 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Niagara" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Tridum Niagara are affected while running on the Microsoft Windows operating system: Niagara AX Framework Version 3.8 and prior and Niagara 4 Framework Versions 4.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-191-03" ;
    icsa:vendor "Tridium" ;
    icsa:year 2018 .

icsa-res:ICSA-18-193-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-193-01" ;
    dcterms:issued "2018-07-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton 9000X Drive" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-8847" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-8847 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "9000X Drive" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Eaton 9000X Drive is affected: 9000X Drive | Versions 2.0.29 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-193-01" ;
    icsa:vendor "Eaton" ;
    icsa:year 2018 .

icsa-res:ICSA-18-198-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-198-01" ;
    dcterms:issued "2018-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Panel Builder 800" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-10616" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-10616 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Panel Builder 800" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Panel Builder 800 - engineering tool for the process panels included in the product suite Panel 800 are affected: Panel Builder 800 | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-198-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2018 .

icsa-res:ICSA-18-198-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-198-02" ;
    dcterms:issued "2018-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO e!DISPLAY Web-Based-Management" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-12981; CVE-2018-12979; CVE-2018-12980" ;
    icsa:cweNumber "CWE-434; CWE-79; CWE-732" ;
    icsa:hasCVE cve-res:CVE-2018-12979,
        cve-res:CVE-2018-12980,
        cve-res:CVE-2018-12981 ;
    icsa:hasCWE cwe-res:CWE-434,
        cwe-res:CWE-732,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "e!DISPLAY Web-Based-Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of WAGO e!DISPLAY - HMI running firmware FW 01 are affected: 762-3000 | 762-3001 | 762-3002 and 762-3003." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-198-02" ;
    icsa:vendor "WAGO" ;
    icsa:year 2018 .

icsa-res:ICSA-18-198-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-198-03" ;
    dcterms:issued "2018-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "PEPPERL+FUCHS VisuNet RM, VisuNet PC, and Box Thin Client" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2018-0886" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-0886 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VisuNet RM, VisuNet PC, and Box Thin Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following PEPPERL+FUCHS product families are affected: VisuNet RM All models | VisuNet PC All models andBTC All models." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-198-03" ;
    icsa:vendor "PEPPERL+FUCHS" ;
    icsa:year 2018 .

icsa-res:ICSA-18-200-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-200-01" ;
    dcterms:issued "2018-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA InduSoft Web Studio and InTouch Machine Edition" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-10620" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-10620 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InduSoft Web Studio and InTouch Machine Edition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of InduSoft Web Studio and InTouch Machine Edition - HMI are affected: InduSoft Web Studio v8.1 and v8.1SP1 and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-200-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2018 .

icsa-res:ICSA-18-200-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-200-02" ;
    dcterms:issued "2018-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA InTouch" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-10628" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-10628 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InTouch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of AVEVA InTouch - HMI Platform are affected: InTouch 2014 R2 SP1 and prior | InTouch 2017 | InTouch 2017 Update 1 and InTouch 2017 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-200-02" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2018 .

icsa-res:ICSA-18-200-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-200-03" ;
    dcterms:issued "2018-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Echelon SmartServer 1, SmartServer 2, SmartServer 3, i.LON 100, i.LON 600 (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2018-8855; CVE-2018-8859; CVE-2018-8851; CVE-2018-10627" ;
    icsa:cweNumber "CWE-256; CWE-319; CWE-200; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2018-10627,
        cve-res:CVE-2018-8851,
        cve-res:CVE-2018-8855,
        cve-res:CVE-2018-8859 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-256,
        cwe-res:CWE-288,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SmartServer 1, SmartServer 2, SmartServer 3, i.LON 100, i.LON 600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Smart Server and i.LON products which are network devices are affected: SmartServer 1 all versions | SmartServer 2 all versions prior to release 4.11.007 | i.LON 100 all versions and i.LON 600 all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-200-03" ;
    icsa:vendor "Echelon" ;
    icsa:year 2018 .

icsa-res:ICSA-18-200-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-200-04" ;
    dcterms:issued "2018-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa NPort 5210 5230 5232" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2018-10632" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-10632 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NPort 5210 5230 5232" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of NPort - serial network interface are affected: NPort 5210 | 5230 and 5232 Versions 2.9 build 17030709 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-200-04" ;
    icsa:vendor "Moxa" ;
    icsa:year 2018 .

icsa-res:ICSA-18-212-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-212-01" ;
    dcterms:issued "2018-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Davolink DVW-3200N" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2018-10618" ;
    icsa:cweNumber "CWE-916" ;
    icsa:hasCVE cve-res:CVE-2018-10618 ;
    icsa:hasCWE cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DVW-3200N" ;
    icsa:productDistribution "South Korea, Asia, Europe" ;
    icsa:productsAffected "The following versions of DVW-3200N - networking switch are affected: DVW-3200N all version prior to Version 1.00.06." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-212-01" ;
    icsa:vendor "Davolink" ;
    icsa:year 2018 .

icsa-res:ICSA-18-212-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-212-02" ;
    dcterms:issued "2018-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys and BCPro" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-10624" ;
    icsa:cweNumber "CWE-209" ;
    icsa:hasCVE cve-res:CVE-2018-10624 ;
    icsa:hasCWE cwe-res:CWE-209 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys and BCPro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports that the vulnerability affects the following products: Metasys System | Versions 8.0 and prior andBCPro (BCM) | all versions prior to 3.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-212-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2018 .

icsa-res:ICSA-18-212-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-212-03" ;
    dcterms:issued "2018-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON LeviStudioU (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-10614; CVE-2018-10602; CVE-2018-10606; CVE-2018-10610" ;
    icsa:cweNumber "CWE-122; CWE-611; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-10602,
        cve-res:CVE-2018-10606,
        cve-res:CVE-2018-10610,
        cve-res:CVE-2018-10614 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-611,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LeviStudioU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "According to Zero Day Initiative (ZDI) the following product and versions are affected: LeviStudioU | Versions 1.8.29 and 1.8.44." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-212-03" ;
    icsa:vendor "WECON" ;
    icsa:year 2018 .

icsa-res:ICSA-18-212-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-212-04" ;
    dcterms:issued "2018-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA InTouch Access Anywhere" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-9251" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2015-9251 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InTouch Access Anywhere" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of InTouch Access Anywhere - remote access software - use the vulnerable jQuery library: 2017 Update 2 and prior. Vulnerable versions of jQuery are those prior to Version 3.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-212-04" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2018 .

icsa-res:ICSA-18-212-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-212-05" ;
    dcterms:issued "2018-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Wonderware License Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2015-8277" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2015-8277 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware License Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Wonderware License Server use the vulnerable Flexara Imgrd (Versions 11.13.1.1 and prior): Wonderware License Server v4.0.13100 and prior. Only users with the Counted Licenses feature with \"ArchestrAServer.lic\" in Wonderware License Server are affected. Wonderware License Server is delivered by: Wonderware Information Server 4.0 SP1 and prior and Historian Client 2014 R4 SP2 P02 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-212-05" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2018 .

icsa-res:ICSA-18-219-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-219-01" ;
    dcterms:issued "2018-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft and ScreenEditor" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-10636; CVE-2018-10598" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-10598,
        cve-res:CVE-2018-10636 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft and ScreenEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "According to Delta Electronics the following products are affected: CNCSoft Version 1.00.83 and prior and the accompanying ScreenEditor Version 1.00.54." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-219-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-221-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-221-01" ;
    dcterms:issued "2018-08-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Crestron TSW-X60 and MC3" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2018-11229; CVE-2018-13341; CVE-2018-10630; CVE-2018-11228" ;
    icsa:cweNumber "CWE-284; CWE-78; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2018-10630,
        cve-res:CVE-2018-11228,
        cve-res:CVE-2018-11229,
        cve-res:CVE-2018-13341 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-522,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TSW-X60 and MC3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and versions are affected: TSW-X60 | all versions prior to 2.001.0037.001; and MC3 | all versions prior to 1.502.0047.001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-221-01" ;
    icsa:vendor "Crestron" ;
    icsa:year 2018 .

icsa-res:ICSA-18-221-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-221-02" ;
    dcterms:issued "2018-08-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "NetComm Wireless 4G LTE Light Industrial M2M Router" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2018-14783; CVE-2018-14782; CVE-2018-14785; CVE-2018-14784" ;
    icsa:cweNumber "CWE-79; CWE-352; CWE-200; CWE-548" ;
    icsa:hasCVE cve-res:CVE-2018-14782,
        cve-res:CVE-2018-14783,
        cve-res:CVE-2018-14784,
        cve-res:CVE-2018-14785 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-352,
        cwe-res:CWE-548,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "4G LTE Light Industrial M2M Router" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the 4G LTE Light Industrial M2M Router (NWL-25) - cellular router are affected: 4G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-221-02" ;
    icsa:vendor "NetComm Wireless" ;
    icsa:year 2018 .

icsa-res:ICSA-18-226-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-226-01" ;
    dcterms:issued "2018-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 and SIMATIC WinCC (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-11453; CVE-2018-11454" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2018-11453,
        cve-res:CVE-2018-11454 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC STEP 7 and SIMATIC WinCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following SIMATIC STEP 7 products: SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) v10 | v11 | v12: All versions | SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) v13: All versions prior to v13 SP2 Update 2 | SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) v14: All versions < v14 SP1 Update 6 and SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) v15: All versions < v15 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-226-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-226-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-226-02" ;
    dcterms:issued "2018-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OpenSSL Vulnerability in Industrial Products (Update E)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-3737" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2017-3737 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenSSL in Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and SINUMERIK Integrate Operate Client as part of Sinumerik Integrate Product suite: All versions prior to and including v2.0.11 / v3.0.11.; Siemens reports that the vulnerability affects the following industrial products: MindConnect IoT2040: All versions prior to v03.01 | MindConnect Nano (IPC227D): All versions prior to v03.01 | SIMATIC ET 200SP Open Controller CPU 1515SP PC: All versions prior to v2.1.6 | SIMATIC HMI WinCC Flexible: All versions prior to v15.1 | SIMATIC IPC DiagMonitor: All versions prior to v5.0.3 | SIMATIC IPC DiagBase: All versions prior to v2.1.1.0 | SIMATIC S7-1200: All versions prior to v4.2.3SIMATIC STEP 7 (TIA Portal) v13: All versions prior to v13 SP2 Update 2 | SIMATIC STEP 7 (TIA Portal) v14: All versionsSIMATIC STEP 7 (TIA Portal) v15: All versions prior to v15 SP2 Update 2 | SIMATIC WinCC (TIA Portal) v13: All versions prior to v13 SP2 Update 2 | SIMATIC WinCC (TIA Portal) v14: All versions prior to v14 SP1 Update 6 | SIMATIC WinCC (TIA Portal) v15: All versions prior to v15 SP2 Update 2 | SIMATIC S7-1500: All versions prior to v2.5.2 | SIMATIC S7-1500 Software Controller: All versions prior to v2.6 | SIMATIC WinCC OA v3.14: All versions | SIMATIC WinCC OA v3.15: All versions | SIMATIC WinCC OA v3.16: All versions | SINUMERIK Integrate Access MyMachine service engineer client as part of Sinumerik Integrate Product suite: All versions prior to and including v4.1.7" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-226-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-226-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-226-03" ;
    dcterms:issued "2018-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Automation License Manager" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-11455; CVE-2018-11456" ;
    icsa:cweNumber "CWE-23; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-11455,
        cve-res:CVE-2018-11456 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "According to Siemens the following products are affected: Automation License Manager 5: All versions prior to 5.3.4.4 and Automation License Manager 6: All versions prior to 6.0.1 (only affected by CVE-2018-11455)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-226-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-228-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-228-01" ;
    dcterms:issued "2018-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV DCS Workstations" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2018-14791; CVE-2018-14797; CVE-2018-14795; CVE-2018-14793" ;
    icsa:cweNumber "CWE-23; CWE-269; CWE-121; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2018-14791,
        cve-res:CVE-2018-14793,
        cve-res:CVE-2018-14795,
        cve-res:CVE-2018-14797 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-23,
        cwe-res:CWE-269,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV DCS Workstations" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DeltaV - Distributed Control System (DCS) are affected: DeltaV: v11.3.1 | v12.3.1 | v13.3.0 | v13.3.1 | R5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-228-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2018 .

icsa-res:ICSA-18-233-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-233-01" ;
    dcterms:issued "2018-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa iDefine, STARDOM, ASTPLANNER, and TriFellows" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2018-0651" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-0651 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iDefine, STARDOM, ASTPLANNER, and TriFellows" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "According to Yokogawa the following products are affected: ASTPLANNER: R15.01 and prior | iDefine for ProSafe-RS: R1.16.3 and prior | STARDOM: VDS R7.50 and prior and FCN/FCJ Simulator R4.20 and prior and TriFellows: Version 5.04 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-233-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2018 .

icsa-res:ICSA-18-240-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-240-01" ;
    dcterms:issued "2018-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M221" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2018-7791; CVE-2018-7792; CVE-2018-7790" ;
    icsa:cweNumber "CWE-199; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2018-7790,
        cve-res:CVE-2018-7791,
        cve-res:CVE-2018-7792 ;
    icsa:hasCWE cwe-res:CWE-199,
        cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon M221" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the vulnerabilities affect the following Modicon M221 products: Modicon M221 | all references | all versions prior to firmware v1.6.2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-240-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-240-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-240-02" ;
    dcterms:issued "2018-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M221" ;
    icsa:CVSSScore "4.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2018-7789" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2018-7789 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon M221" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Modicon M221 - programmable logic controller (PLC) are affected: Modicon M221 all references and versions prior to firmware v1.6.2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-240-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-240-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-240-03" ;
    dcterms:issued "2018-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerLogic PM5560" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-7795" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2018-7795 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerLogic PM5560" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PowerLogic PM5560 - power management system are affected: PowerLogic PM5560 all versions prior to firmware Version 2.5.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-240-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-240-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-240-04" ;
    dcterms:issued "2018-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB eSOMS (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Defense Industrial Base; Energy" ;
    icsa:cveNumber "CVE-2018-14805" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-14805 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "eSOMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of ABB eSOMS - electronic shift operations management system is affected: eSOMS Version 6.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-240-04" ;
    icsa:vendor "ABB" ;
    icsa:year 2018 .

icsa-res:ICSA-18-242-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-242-01" ;
    dcterms:issued "2018-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips e-Alert Unit" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-8846; CVE-2018-8854; CVE-2018-8848; CVE-2018-8856; CVE-2018-8852; CVE-2018-8850; CVE-2018-8842; CVE-2018-8844; CVE-2018-14803" ;
    icsa:cweNumber "CWE-352; CWE-200; CWE-79; CWE-276; CWE-20; CWE-798; CWE-384; CWE-319; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-14803,
        cve-res:CVE-2018-8842,
        cve-res:CVE-2018-8844,
        cve-res:CVE-2018-8846,
        cve-res:CVE-2018-8848,
        cve-res:CVE-2018-8850,
        cve-res:CVE-2018-8852,
        cve-res:CVE-2018-8854,
        cve-res:CVE-2018-8856 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-276,
        cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-384,
        cwe-res:CWE-400,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "e-Alert Unit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Philips e-Alert versions are affected: Version R2.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-242-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSA-18-247-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-247-01" ;
    dcterms:issued "2018-09-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Opto 22 PAC Control Basic and PAC Control Professional" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-14807" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-14807 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PAC Control Basic and PAC Control Professional" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PAC Control - control programing software are affected: PAC Control Basic Versions R10.0a and prior and PAC Control Professional Versions R10.0a and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-247-01" ;
    icsa:vendor "Opto 22" ;
    icsa:year 2018 .

icsa-res:ICSA-18-249-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-249-01" ;
    dcterms:issued "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ice Qube Thermal Management Center" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-16714; CVE-2017-14026" ;
    icsa:cweNumber "CWE-256; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-14026,
        cve-res:CVE-2017-16714 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Thermal Management Center" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Thermal Management Center - environmental software management platform are affected: Thermal Management Center | all versions prior to 4.13." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-249-01" ;
    icsa:vendor "Ice Qube" ;
    icsa:year 2018 .

icsa-res:ICSA-18-254-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-254-01" ;
    dcterms:issued "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric V-Server" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-14819; CVE-2018-14815; CVE-2018-14809; CVE-2018-14817; CVE-2018-14813; CVE-2018-14811; CVE-2018-14823" ;
    icsa:cweNumber "CWE-822; CWE-416; CWE-122; CWE-191; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-14809,
        cve-res:CVE-2018-14811,
        cve-res:CVE-2018-14813,
        cve-res:CVE-2018-14815,
        cve-res:CVE-2018-14817,
        cve-res:CVE-2018-14819,
        cve-res:CVE-2018-14823 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-191,
        cwe-res:CWE-416,
        cwe-res:CWE-787,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "V-Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of V-Server - data collection and management service are affected: V-Server 4.0.3.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-254-01" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-254-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-254-02" ;
    dcterms:issued "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric V-Server Lite" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-10637" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2018-10637 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "V-Server Lite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of V-Server Lite - data collection and management service are affected: V-Server Lite 4.0.3.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-254-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-254-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-254-03" ;
    dcterms:issued "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TD Keypad Designer" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13806" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2018-13806 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TD Keypad Designer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "According to Siemens the following products are affected: TD Keypad Designer: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-254-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-254-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-254-04" ;
    dcterms:issued "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC OA" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13799" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2018-13799 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC OA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC WinCC OA - client-server HMI are affected: SIMATIC WinCC OA Version 3.14 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-254-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-254-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-254-05" ;
    dcterms:issued "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X Switches" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13807" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-13807 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCALANCE X Switches which are used to connect industrial components like programmable logic controllers (PLCs) or human machine interfaces (HMIs) are affected: SCALANCE X300: All versions prior to 4.0.0 | SCALANCE X408: All versions prior to 4.0.0 and SCALANCE X414: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-254-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-256-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-256-01" ;
    dcterms:issued "2018-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Mobile Computers with Android Operating Systems" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-14825" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2018-14825 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mobile Computers with Android Operating Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Honeywell Mobile Computers (hand-held computers) are affected: CT60 running Android OS 7.1 | CN80 running Android OS 7.1 | CT40 running Android OS 7.1 | CK75 running Android OS 6.0 | CN75 running Android OS 6.0 | CN75e running Android OS 6.0 | CT50 running Android OS 6.0 | D75e running Android OS 6.0 | CT50 running Android OS 4.4 | D75e running Android OS 4.4 | CN51 running Android OS 6.0 | EDA50k running Android 4.4 | EDA50 running Android OS 7.1 | EDA50k running Android OS 7.1 | EDA70 running Android OS 7.1 | EDA60k running Android OS 7.1 andEDA51 running Android OS 8.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-256-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2018 .

icsa-res:ICSA-18-261-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-261-01" ;
    dcterms:issued "2018-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON PLC Editor" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-14792" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-14792 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of PLC Editor - ladder logic software are reported to be affected: 1.3.3U. Additional versions may also be vulnerable." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-261-01" ;
    icsa:vendor "WECON" ;
    icsa:year 2018 .

icsa-res:ICSA-18-263-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-263-01" ;
    dcterms:issued "2018-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tec4Data SmartCooler" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2018-14796" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2018-14796 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SmartCooler" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SmartCooler - cooling appliance are affected: SmartCooler | all versions prior to firmware 180806." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-263-01" ;
    icsa:vendor "Tec4Data" ;
    icsa:year 2018 .

icsa-res:ICSA-18-263-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-263-02" ;
    dcterms:issued "2018-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLinx Classic" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-14827; CVE-2018-14821; CVE-2018-14829" ;
    icsa:cweNumber "CWE-122; CWE-121; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-14821,
        cve-res:CVE-2018-14827,
        cve-res:CVE-2018-14829 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLinx Classic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of RSLinx Classic - software platform that allows Logix5000 Programmable Automation Controllers to connect to a wide variety of Rockwell Software applications are affected: RSLinx Classic Versions 4.00.01 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-263-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-270-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-270-01" ;
    dcterms:issued "2018-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson AMS Device Manager" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2018-14808; CVE-2018-14804" ;
    icsa:cweNumber "CWE-284; CWE-269" ;
    icsa:hasCVE cve-res:CVE-2018-14804,
        cve-res:CVE-2018-14808 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AMS Device Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of AMS Device Manager - Asset Management System are affected: AMS Device Manager: v12.0 to v13.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-270-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2018 .

icsa-res:ICSA-18-270-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-270-02" ;
    dcterms:issued "2018-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Alpha5 Smart Loader (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-14794; CVE-2018-14788" ;
    icsa:cweNumber "CWE-122; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2018-14788,
        cve-res:CVE-2018-14794 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alpha5 Smart Loader" ;
    icsa:productDistribution "Japan, Asia, Europe" ;
    icsa:productsAffected "The following versions of Alpha5 Smart Loader - servo drive are affected: Alpha5 Smart Loader Versions 3.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-270-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-270-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-270-03" ;
    dcterms:issued "2018-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric FRENIC Devices (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2018-14802; CVE-2018-14790; CVE-2018-14798" ;
    icsa:cweNumber "CWE-125; CWE-121; CWE-126" ;
    icsa:hasCVE cve-res:CVE-2018-14790,
        cve-res:CVE-2018-14798,
        cve-res:CVE-2018-14802 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-126 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FRENIC Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FRENIC Loader | FRENIC-Mini (C1) | FRENIC-Mini (C2) | FRENIC-Eco | FRENIC-Multi | FRENIC-MEGA | FRENIC-Ace | HVAC drive devices are affected: FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1) | FRENIC-Mini (C2) | FRENIC-Eco | FRENIC-Multi | FRENIC-MEGA | FRENIC-Ace." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-270-03" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-270-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-270-04" ;
    dcterms:issued "2018-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics Delta Industrial Automation PMSoft" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-14824" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-14824 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Industrial Automation PMSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Industrial Automation PMSoft - software development tool for motion controllers are affected: Delta Industrial Automation PMSoft v2.11 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-270-04" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-275-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-275-01" ;
    dcterms:issued "2018-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics ISPSoft" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-14800" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-14800 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ISPSoft - PLC program development tool are affected: ISPSoft Version 3.0.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-275-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-275-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-275-02" ;
    dcterms:issued "2018-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Communicator" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2017-7908" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2017-7908 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Communicator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Communicator - application for programming and monitoring supported metering devices are affected: Third party product Gigasoft | v5 and prior included in Communicator 3.15 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-275-02" ;
    icsa:vendor "GE" ;
    icsa:year 2018 .

icsa-res:ICSA-18-275-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-275-03" ;
    dcterms:issued "2018-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Entes EMG 12" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Turkey" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-14826; CVE-2018-14822" ;
    icsa:cweNumber "CWE-598; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-14822,
        cve-res:CVE-2018-14826 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-598 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EMG 12" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of EMG 12 - Ethernet Modbus Gateway are affected: EMG12 Ethernet Modbus Gateway Firmware Version 2.57 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-275-03" ;
    icsa:vendor "Entes" ;
    icsa:year 2018 .

icsa-res:ICSA-18-277-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-277-01" ;
    dcterms:issued "2018-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON PI Studio (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-17889; CVE-2018-14814; CVE-2018-14818; CVE-2018-14810" ;
    icsa:cweNumber "CWE-611; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-14810,
        cve-res:CVE-2018-14814,
        cve-res:CVE-2018-14818,
        cve-res:CVE-2018-17889 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-611,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI Studio - HMI project programmer are affected: PI Studio HMI: Versions 4.1.9 and prior | PI Studio Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-277-01" ;
    icsa:vendor "WECON" ;
    icsa:year 2018 .

icsa-res:ICSA-18-282-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-282-01" ;
    dcterms:issued "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE iFix" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-17925" ;
    icsa:cweNumber "CWE-623" ;
    icsa:hasCVE cve-res:CVE-2018-17925 ;
    icsa:hasCWE cwe-res:CWE-623 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iFix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE reports this vulnerability in a Gigasoft component affects the following iFix HMI products: iFIX 2.0 - 5.0 | iFIX 5.1 | iFIX 5.5 and iFIX 5.8 Gigasoft components older than Version 8.0 are likely to be used in other products from other vendors also." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-282-01" ;
    icsa:vendor "GE" ;
    icsa:year 2018 .

icsa-res:ICSA-18-282-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-282-02" ;
    dcterms:issued "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-13099" ;
    icsa:cweNumber "CWE-310" ;
    icsa:hasCVE cve-res:CVE-2017-13099 ;
    icsa:hasCWE cwe-res:CWE-310 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following SCALANCE W1750D products: SCALANCE W1750D: All versions prior to v8.3.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-282-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-282-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-282-03" ;
    dcterms:issued "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens ROX II" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-13801; CVE-2018-13802" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2018-13801,
        cve-res:CVE-2018-13802 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ROX II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following ROX II products: ROX II: All versions prior to v2.12.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-282-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-282-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-282-04" ;
    dcterms:issued "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 CPU Family Version 4" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13800" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2018-13800 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 CPU Family Version 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following SIMATIC S7-1200 CPU products: SIMATIC S7-1200 CPU Family Version 4: All versions prior to 4.2.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-282-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-282-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-282-05" ;
    dcterms:issued "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP OpenController (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13805" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-13805 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP OpenController" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that this vulnerability affects the following products and versions: Simatic S7-1500 (incl. F) | all versions prior to v2.5 down to and including v2.0 | Simatic S7-1500 Software Controller all versions prior to v2.5 down to and including v2.0 | Simatic ET 200SP Open Controller all versions prior to v2.5 down to and including v2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-282-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-282-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-282-06" ;
    dcterms:issued "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-17917; CVE-2018-17919; CVE-2018-17915" ;
    icsa:cweNumber "CWE-341; CWE-912; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2018-17915,
        cve-res:CVE-2018-17917,
        cve-res:CVE-2018-17919 ;
    icsa:hasCWE cwe-res:CWE-311,
        cwe-res:CWE-341,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XMeye P2P Cloud Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All products using XMeye P2P Cloud Server are affected. Hangzhou Xiongmai Technology Co. Ltd acts primarily as an Original Equipment Manufacturer (OEM) and sells few - if any Xiongmai-branded products. Various vendors sell branded devices with Hangzhou Xiongmai Technology Co. Ltd hardware/firmware inside. Use the following methods to check the hardware/firmware: Check if the product documentation/specifications mention the \"XMEye\" feature.Access the err.htm page on the device (http: //<Camera IP Address>/err.htm). Xiongmai or XMeye will be referenced." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-282-06" ;
    icsa:vendor "Hangzhou Xiongmai Technology Co., Ltd" ;
    icsa:year 2018 .

icsa-res:ICSA-18-282-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-282-07" ;
    dcterms:issued "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Energy Savings Estimator" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-14812" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2018-14812 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Energy Savings Estimator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Fuji Electric Smart Security Manager - software management platform are affected: Fuji Electric Energy Savings Estimator Versions V.1.0.2.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-282-07" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-284-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-284-01" ;
    dcterms:issued "2018-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "NUUO NVRmini2 and NVRsolo" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Financial Services; Government Facilities; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-1150; CVE-2018-1149" ;
    icsa:cweNumber "CWE-489; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-1149,
        cve-res:CVE-2018-1150 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NVRmini2 and NVRsolo" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Nuuo NVRmini2 and NVRsolo - network video recorders are affected: All Versions 3.8.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-284-01" ;
    icsa:vendor "NUUO" ;
    icsa:year 2018 .

icsa-res:ICSA-18-284-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-284-02" ;
    dcterms:issued "2018-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "NUUO CMS (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Financial Services; Government Facilities; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-17892; CVE-2018-17888; CVE-2018-17934; CVE-2018-17894; CVE-2018-18982; CVE-2018-17936; CVE-2018-17890" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-732; CWE-89; CWE-477; CWE-330; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2018-17888,
        cve-res:CVE-2018-17890,
        cve-res:CVE-2018-17892,
        cve-res:CVE-2018-17894,
        cve-res:CVE-2018-17934,
        cve-res:CVE-2018-17936,
        cve-res:CVE-2018-18982 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-330,
        cwe-res:CWE-434,
        cwe-res:CWE-477,
        cwe-res:CWE-732,
        cwe-res:CWE-798,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of NUUO CMS - central software management platform are affected: CMS Versions 3.1 and prior. CMS Versions 3.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-284-02" ;
    icsa:vendor "NUUO" ;
    icsa:year 2018 .

icsa-res:ICSA-18-284-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-284-03" ;
    dcterms:issued "2018-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation TPEditor" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-17929; CVE-2018-17927" ;
    icsa:cweNumber "CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-17927,
        cve-res:CVE-2018-17929 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TPEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Industrial Automation TPEditor - programming software for Delta text panels operating on Windows are affected: TPEditor Versions 1.90 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-284-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2018 .

icsa-res:ICSA-18-289-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-289-01" ;
    dcterms:issued "2018-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-17899; CVE-2018-17893; CVE-2018-17895; CVE-2018-17897; CVE-2018-17901; CVE-2018-17911" ;
    icsa:cweNumber "CWE-22; CWE-680; CWE-822; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-17893,
        cve-res:CVE-2018-17895,
        cve-res:CVE-2018-17897,
        cve-res:CVE-2018-17899,
        cve-res:CVE-2018-17901,
        cve-res:CVE-2018-17911 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-22,
        cwe-res:CWE-680,
        cwe-res:CWE-787,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA" ;
    icsa:productDistribution "Brazil, South America" ;
    icsa:productsAffected "The following versions of LAquis SCADA - industrial automation software are affected: Smart Security Manager Versions 4.1.0.3870 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-289-01" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2018 .

icsa-res:ICSA-18-290-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-290-01" ;
    dcterms:issued "2018-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Supervisor (Update A)" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-17907; CVE-2018-17913; CVE-2018-17905; CVE-2018-17909" ;
    icsa:cweNumber "CWE-119; CWE-416; CWE-125; CWE-704" ;
    icsa:hasCVE cve-res:CVE-2018-17905,
        cve-res:CVE-2018-17907,
        cve-res:CVE-2018-17909,
        cve-res:CVE-2018-17913 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-704 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Supervisor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CX-Supervisor are affected: CX-Supervisor Versions 3.4.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-290-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2018 .

icsa-res:ICSA-18-296-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-296-01" ;
    dcterms:issued "2018-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-14828; CVE-2018-14816; CVE-2018-14806; CVE-2018-14820" ;
    icsa:cweNumber "CWE-22; CWE-269; CWE-73; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-14806,
        cve-res:CVE-2018-14816,
        cve-res:CVE-2018-14820,
        cve-res:CVE-2018-14828 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-22,
        cwe-res:CWE-269,
        cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan, United States, Asia, East Asia, Europe" ;
    icsa:productsAffected "The following versions of WebAccess are affected: WebAccess Versions 8.3.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-296-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2018 .

icsa-res:ICSA-18-296-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-296-02" ;
    dcterms:issued "2018-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "GAIN Electronic Co. Ltd SAGA1-L Series" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2018-17921; CVE-2018-17923; CVE-2018-17903" ;
    icsa:cweNumber "CWE-294; CWE-284; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-17903,
        cve-res:CVE-2018-17921,
        cve-res:CVE-2018-17923 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SAGA1-L Series" ;
    icsa:productDistribution "Taiwan, United States" ;
    icsa:productsAffected "According to GAIN Electronic Co. Ltd - the following product is affected: SAGA1-L8B: All firmware versions prior to A0.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-296-02" ;
    icsa:vendor "GAIN Electronic Co. Ltd" ;
    icsa:year 2018 .

icsa-res:ICSA-18-296-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-296-03" ;
    dcterms:issued "2018-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Telecrane F25 Series" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-17935" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2018-17935 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "F25 Series" ;
    icsa:productDistribution "Taiwan, United States" ;
    icsa:productsAffected "The following versions of Telecrane remote controls are affected: F25 Series all versions prior to 00.0A." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-296-03" ;
    icsa:vendor "Telecrane" ;
    icsa:year 2018 .

icsa-res:ICSA-18-298-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-298-01" ;
    dcterms:issued "2018-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "GEOVAP Reliance 4 SCADA/HMI" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-17904" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2018-17904 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Reliance 4 SCADA/HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Reliance 4 SCADA/HMI - SCADA/HMI system designed for the monitoring and control of industrial processes and for building automation are affected: Reliance SCADA Version 4.7.3 Update 3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-298-01" ;
    icsa:vendor "GEOVAP" ;
    icsa:year 2018 .

icsa-res:ICSA-18-298-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-298-02" ;
    dcterms:issued "2018-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-17908; CVE-2018-17910" ;
    icsa:cweNumber "CWE-284; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-17908,
        cve-res:CVE-2018-17910 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Taiwan, United States, Asia, East Asia, Europe" ;
    icsa:productsAffected "The following versions of WebAccess are affected: WebAccess Versions 8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-298-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2018 .

icsa-res:ICSA-18-303-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-303-01" ;
    dcterms:issued "2018-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "PEPPERL+FUCHS CT50-Ex" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2018-14825" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2018-14825 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CT50-Ex" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the CT50-Ex ecom mobile computer are affected: CT50-Ex running Android OS v4.4 and v6.0. The original manufacturer was Honeywell." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-303-01" ;
    icsa:vendor "PEPPERL+FUCHS" ;
    icsa:year 2018 .

icsa-res:ICSA-18-305-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-305-01" ;
    dcterms:issued "2018-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA InduSoft Web Studio and InTouch Edge HMI (formerly InTouch Machine Edition)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-17916; CVE-2018-17914" ;
    icsa:cweNumber "CWE-258; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-17914,
        cve-res:CVE-2018-17916 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-258 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InduSoft Web Studio and InTouch Edge HMI (formerly InTouch Machine Edition)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA reports that these vulnerabilities affect the following products: InduSoft Web Studio versions prior to 8.1 SP2 andInTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-305-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2018 .

icsa-res:ICSA-18-305-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-305-02" ;
    dcterms:issued "2018-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Software Update (SESU) (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-7799" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2018-7799 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Software Update" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the vulnerability affects the following Software Update products: Schneider Electric Software Update (SESU) | all versions prior to v2.2.0. For a list of products that can optionally install the software - please see Schneider Electric's security notice SEVD-2018-298-01 available at the following location: https: //www.schneider-electric.com/en/download/document/SEVD-2018-298-01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-305-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-305-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-305-03" ;
    dcterms:issued "2018-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Circontrol CirCarLife" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Spain" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2018-17922; CVE-2018-17918" ;
    icsa:cweNumber "CWE-522; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2018-17918,
        cve-res:CVE-2018-17922 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CirCarLife" ;
    icsa:productDistribution "Spain, Netherlands, Asia, Europe" ;
    icsa:productsAffected "The following versions of CirCarLife - electric vehicle charging station are affected: CirCarLife all versions prior to 4.3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-305-03" ;
    icsa:vendor "Circontrol" ;
    icsa:year 2018 .

icsa-res:ICSA-18-305-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-305-04" ;
    dcterms:issued "2018-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fr. Sauter AG CASE Suite" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-17912" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2018-17912 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CASE Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CASE Suite are affected: CASE Suite Versions 3.10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-305-04" ;
    icsa:vendor "Fr. Sauter AG" ;
    icsa:year 2018 .

icsa-res:ICSA-18-310-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-310-01" ;
    dcterms:issued "2018-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "gpsd Open Source Project" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Open-source" ;
    icsa:criticalInfrastructureSector "Communications; Defense Industrial Base; Emergency Services; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-17937" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-17937 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "gpsd Open Source" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of gpsd and microjson - an open-source GPS framework are affected: gpsd | Versions 2.90 to 3.17 microjson Versions 1.0 to 1.3. As reported on the gpsd website - gpsd can be found in many mobile embedded systems such as Android phones | drones | robot submarines | driverless cars | manned aircraft | marine navigation systems and military vehicles. Google has been contacted regarding this vulnerability. They have examined it and believe the vulnerability does not apply to Android." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-310-01" ;
    icsa:vendor "gpsd Open Source Project" ;
    icsa:year 2018 .

icsa-res:ICSA-18-310-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-310-02" ;
    dcterms:issued "2018-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-17924" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2018-17924 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the vulnerability affects the following PLC products: MicroLogix 1400 Controllers Series A | all versions Series B | v21.003 and earlier Series C | v21.003 and earlier1756 ControlLogix EtherNet/IP Communications Modules1756-ENBT | all versions1756-EWEB Series A | all versions Series B | all versions1756-EN2F Series A | all versions Series B | all versions Series C | v10.10 and earlier1756-EN2T Series A | all versions Series B | all versions Series C | all versions Series D | v10.10 and earlier1756-EN2TRSeries A | all versions Series B | all versions Series C | v10.10 and earlier1756-EN3TR Series A | all versions Series B | v10.10 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-310-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-317-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-317-01" ;
    dcterms:issued "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC" ;
    icsa:CVSSScore "4.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-4858" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2018-4858 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens products are affected: IEC 61850 system configurator all versions prior to v5.80 | DIGSI 5 (affected as IEC 61850 system configurator is incorporated) all versions prior to v7.80 | DIGSI 4 all versions prior to v4.93 | SICAM PAS/PQS all versions prior to v8.11 | SICAM PQ Analyzer all versions prior to v3.11 and SICAM SCC all versions prior to v9.02 HF3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-317-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-317-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-317-02" ;
    dcterms:issued "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens S7-400 CPUs (Update A)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-16556" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-16556 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "S7-400 CPUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "--------- Begin Update A Part 1 of 3 -------- S7-400H v6; S7-400H v4.5 and below all versions; Siemens reports that the vulnerabilities affect the following SIMATIC S7-400 products: S7-400 v6 (including F) and below all versions; all versions prior to v6.0.9 --------- End Update A Part 1 of 3 ---------- S7-410 all versions prior to v8.2.1.; S7-400 PN/DP v7 (including F) all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-317-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-317-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-317-03" ;
    dcterms:issued "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Panels and SIMATIC WinCC (TIA Portal)" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13814" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2018-13814 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Panels and SIMATIC WinCC (TIA Portal)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following versions of SIMATIC Panel software and SIMATIC WinCC (TIA Portal): SIMATIC HMI Comfort Panels 4\" - 22\": All versions prior to v14 | SIMATIC HMI Comfort Outdoor Panels 7\" and 15\": All versions prior to v14 | SIMATIC HMI KTP Mobile Panels KTP400F | KTP700 | KTP700F | KTP900 und KTP900F: All versions prior to v14 | SIMATIC WinCC Runtime Advanced: All versions prior to v14 | SIMATIC WinCC Runtime Professional: All versions prior to v14 | SIMATIC WinCC (TIA Portal): All versions prior to v14 andSIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-317-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-317-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-317-04" ;
    dcterms:issued "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE S" ;
    icsa:CVSSScore "4.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-16555" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2018-16555 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE S" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following SCALANCE S products are affected: SCALANCE S602: All versions prior to v4.0.1.1 | SCALANCE S612: All versions prior to v4.0.1.1 | SCALANCE S623: All versions prior to v4.0.1.1 andSCALANCE S627-2M: All versions prior to v4.0.1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-317-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-317-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-317-05" ;
    dcterms:issued "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7 (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13815" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-13815 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following SIMATIC S7 products are affected: SIMATIC S7-1200: All versions prior to v4.3 and SIMATIC S7-1500: All versions prior to 2.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-317-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-317-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-317-06" ;
    dcterms:issued "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 (TIA Portal)" ;
    icsa:CVSSScore "4.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13811" ;
    icsa:cweNumber "CWE-256" ;
    icsa:hasCVE cve-res:CVE-2018-13811 ;
    icsa:hasCWE cwe-res:CWE-256 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC STEP 7 (TIA Portal)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following SIMATIC STEP 7 product is affected: SIMATIC STEP 7 (TIA Portal): All versions prior to 15.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-317-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-317-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-317-07" ;
    dcterms:issued "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC IT Production Suite" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13804" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-13804 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC IT Production Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following products: SIMATIC IT LMS all versions | SIMATIC IT Production Suite: Versions 7.1 prior to Version 7.1 Upd3 and SIMATIC IT UA Discrete Manufacturing versions prior to Version 2.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-317-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-317-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-317-08" ;
    dcterms:issued "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Panels" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-13813; CVE-2018-13812" ;
    icsa:cweNumber "CWE-22; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2018-13812,
        cve-res:CVE-2018-13813 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Panels" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following SIMATIC products affected: SIMATIC HMI Comfort Panels 4\"-22\" all versions prior to v15 Update 4 | SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" all versions prior to v15 Update 4 | SIMATIC HMI KTP Mobile Panels all versions prior to v15 Update 4 KTP400F | KTP700 | KTP700F | KTP900 and KTP900F | SIMATIC WinCC Runtime Advanced all versions prior to v15 Update 4 | SIMATIC WinCC Runtime Professional all versions prior to v15 Update 4 | SIMATIC WinCC (TIA Portal) all versions prior to v15 Update 4 and SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-317-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-324-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-324-01" ;
    dcterms:issued "2018-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Teledyne DALSA Sherlock" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-17930" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-17930 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sherlock" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Sherlock - machine vision software interface are affected: Sherlock Version 7.2.7.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-324-01" ;
    icsa:vendor "Teledyne DALSA" ;
    icsa:year 2018 .

icsa-res:ICSA-18-324-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-324-02" ;
    dcterms:issued "2018-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M221" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2018-7798" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2018-7798 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon M221" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the vulnerability affects the following Modicon products: Modicon M221 | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-324-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-331-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-331-01" ;
    dcterms:issued "2018-11-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Vijeo Citect and Citect SCADA" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-7799" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2018-7799 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vijeo Citect and Citect SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA reports that a vulnerability in Schneider Electric Software Update utility versions prior to v2.2.0 affects the following AVEVA products: Vijeo Citect v7.40 |Vijeo Citect 2015 | Citect SCADA v7.40 | Citect SCADA 2015 andCitect SCADA 2016." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-331-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2018 .

icsa-res:ICSA-18-331-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-331-02" ;
    dcterms:issued "2018-11-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Services Platform" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-18981" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2018-18981 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Services Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FactoryTalk Services Platform - services-oriented architecture platform are affected: FactoryTalk Services Platform | v2.90 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-331-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-333-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-333-01" ;
    dcterms:issued "2018-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "INVT Electric VT-Designer" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-18983; CVE-2018-18987" ;
    icsa:cweNumber "CWE-502; CWE-122" ;
    icsa:hasCVE cve-res:CVE-2018-18983,
        cve-res:CVE-2018-18987 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VT-Designer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ZDI reports the following versions of VT-Designer are affected: VT-Designer 2.1.7.31. Other versions could also be affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-333-01" ;
    icsa:vendor "INVT Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-333-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-333-02" ;
    dcterms:issued "2018-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tridium Niagara Enterprise Security, Niagara AX, and Niagara 4" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Government Facilities; Information Technology" ;
    icsa:cveNumber "CVE-2018-18985" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2018-18985 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Niagara Enterprise Security, Niagara AX, and Niagara 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Tridium products are affected: Niagara Enterprise Security 2.3u1 | all versions prior to 2.3.118.6 | Niagara AX 3.8u4 | all versions prior to 3.8.401.1 | Niagara 4.4u2 | all versions prior to 4.4.93.40.2 and Niagara 4.6 | all versions prior to 4.6.96.28.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-333-02" ;
    icsa:vendor "Tridium" ;
    icsa:year 2018 .

icsa-res:ICSA-18-338-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-338-01" ;
    dcterms:issued "2018-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-One" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-18993" ;
    icsa:cweNumber "CWE-416; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-18993 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-One" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CX-One Versions 4.42 and prior - including the following applications: CX-Programmer Versions 9.66 and prior andCX-Server Versions 5.0.23 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-338-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2018 .

icsa-res:ICSA-18-338-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-338-02" ;
    dcterms:issued "2018-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "SpiderControl SCADA WebServer" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-18991" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2018-18991 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA WebServer" ;
    icsa:productDistribution "Switzerland, Europe" ;
    icsa:productsAffected "The following versions of SCADA WebServer - software management platform are affected: SCADA WebServer: versions prior to 2.03.0001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-338-02" ;
    icsa:vendor "SpiderControl" ;
    icsa:year 2018 .

icsa-res:ICSA-18-340-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-340-01" ;
    dcterms:issued "2018-12-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy GDS" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-15362" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2018-15362 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy GDS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of GE Cimplicity ship with the affected GDS service: Cimplicity 9.0 R2 | Cimplicity 9.5 andCimplicity 10.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-340-01" ;
    icsa:vendor "GE" ;
    icsa:year 2018 .

icsa-res:ICSA-18-345-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-345-01" ;
    dcterms:issued "2018-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS PERFECT HARMONY GH180" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-6690" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2018-6690 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS PERFECT HARMONY GH180" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens has analyzed the vulnerability and has determined this vulnerability applies to the following HMIs: SINAMICS PERFECT HARMONY GH180 Drives: Serial numbers beginning MLFB 6SR32 with option A30 (HMIs 12 inch or larger) SINAMICS PERFECT HARMONY GH180 Drives: Serial numbers beginning MLFB 6SR42 with option A30 (HMIs 12 inch or larger) SINAMICS PERFECT HARMONY GH180 Drives: Serial numbers beginning MLFB 6SR52 with option A30 (HMIs 12 inch or larger | SINAMICS PERFECT HARMONY GH180 Drives: Serial numbers beginning MLFB 6SR325 (High Availability) SINAMICS PERFECT HARMONY GH180 Drives: Serial numbers beginning MLFB 6SR32 with option A30 (HMIs 12 inch or larger) where the HMI is operating under Microsoft Windows XP SINAMICS PERFECT HARMONY GH180 Drives: Serial numbers beginning MLFB 6SR42 with option A30 (HMIs 12 inch or larger) where the HMI is operating under Microsoft Windows XP SINAMICS PERFECT HARMONY GH180 Drives: Serial numbers beginning MLFB 6SR52 with option A30 (HMIs 12 inch or larger) where the HMI is operating under Microsoft Windows XP SINAMICS PERFECT HARMONY GH180 Drives: Serial numbers beginning MLFB 6SR325 (High Availability) where the HMI is operating under Microsoft Windows." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-345-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-345-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-345-02" ;
    dcterms:issued "2018-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK Controllers (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-11464; CVE-2018-11463; CVE-2018-11458; CVE-2018-11461; CVE-2018-11459; CVE-2018-11457; CVE-2018-11465; CVE-2018-11466; CVE-2018-11462; CVE-2018-11460" ;
    icsa:cweNumber "CWE-122; CWE-264; CWE-248; CWE-190; CWE-121; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2018-11457,
        cve-res:CVE-2018-11458,
        cve-res:CVE-2018-11459,
        cve-res:CVE-2018-11460,
        cve-res:CVE-2018-11461,
        cve-res:CVE-2018-11462,
        cve-res:CVE-2018-11463,
        cve-res:CVE-2018-11464,
        cve-res:CVE-2018-11465,
        cve-res:CVE-2018-11466 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-190,
        cwe-res:CWE-248,
        cwe-res:CWE-264,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerabilities affect the following versions of the SINUMERIK CNC controllers: SINUMERIK 808D v4.7 all versions prior to v4.91 | SINUMERIK 808D v4.8 all versions prior to v4.91 | SINUMERIK 828D v4.7 all versions prior to v4.7 SP6 HF1 | SINUMERIK 840D sl v4.7 all versions prior to v4.7 SP6 HF5 and SINUMERIK 840D sl v4.8 all versions prior to v4.8 SP3 | Some products are not affected by all of the vulnerabilities. Please see Siemens advisory SSA-170881 for additional details." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-345-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-347-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-347-01" ;
    dcterms:issued "2018-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric GUIcon Eurotherm" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-7814; CVE-2018-7815; CVE-2018-7813" ;
    icsa:cweNumber "CWE-843; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2018-7813,
        cve-res:CVE-2018-7814,
        cve-res:CVE-2018-7815 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GUIcon Eurotherm" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following product is affected: Eurotherm by Schneider Electric GUIcon Version 2.0 (Gold Build 683.0)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-347-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-18-347-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-347-02" ;
    dcterms:issued "2018-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-11451; CVE-2018-11452" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-11451,
        cve-res:CVE-2018-11452 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EN100 Ethernet Communication Module and SIPROTEC 5 Relays" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerabilities affect the following versions of the EN100 Ethernet Communication Module and SIPROTEC 5 relays: Firmware variant IEC 61850 for EN100 Ethernet module: All versions prior to v4.33 | Firmware variant PROFINET IO for EN100 Ethernet module: All versions | Firmware variant Modbus TCP for EN100 Ethernet module: All versions | Firmware variant DNP3 TCP for EN100 Ethernet module: All versions | Firmware variant IEC104 for EN100 Ethernet module: All versions prior to v1.22 | Firmware variant IEC104 for EN100 Ethernet module: All versions | SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules: All versions prior to v7.80 | SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules: All versions prior to v7.58 | Some products are only affected by one of the two vulnerabilities. Please see Siemens advisory SSA-635129 for additional details." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-347-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-347-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-347-03" ;
    dcterms:issued "2018-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Geutebruck GmbH E2 Series IP Cameras" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Financial Services; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-19007" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2018-19007 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GmbH E2 Series IP Cameras" ;
    icsa:productDistribution "Australia, Germany, United States, Europe" ;
    icsa:productsAffected "Geutebruck reports the vulnerability affect the following IP cameras: E2 series cameras running firmware versions prior to 1.12.0.25." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-347-03" ;
    icsa:vendor "Geutebruck" ;
    icsa:year 2018 .

icsa-res:ICSA-18-347-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-347-04" ;
    dcterms:issued "2018-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-19003" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2018-19003 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mark VIe, EX2100e, EX2100e_Reg, and LS2100e" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Mark Vie - distributed control system and associated products are affected: Mark VIe Versions 03.03.28C to 05.02.04C | EX2100e All versions prior to v04.09.00C | EX2100e_Reg All versions prior to v04.09.00C and LS2100e All versions prior to v04.09.00C." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-347-04" ;
    icsa:vendor "GE" ;
    icsa:year 2018 .

icsa-res:ICSA-18-352-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-352-01" ;
    dcterms:issued "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB GATE-E2" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-18995; CVE-2018-18997" ;
    icsa:cweNumber "CWE-306; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2018-18995,
        cve-res:CVE-2018-18997 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GATE-E2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Gateway Ethernet devices used in Pluto Safety PLC systems are affected: GATE-E1 (EOL 2013) andGATE-E2 (EOL OCT 2018)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-352-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2018 .

icsa-res:ICSA-18-352-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-352-02" ;
    dcterms:issued "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-18999" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-18999 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "Taiwan, United States, Asia, East Asia, Europe" ;
    icsa:productsAffected "The following versions of WebAccess/SCADA - SCADA software platform are affected: WebAccess/SCADA Version 8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-352-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2018 .

icsa-res:ICSA-18-352-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-352-03" ;
    dcterms:issued "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS Control V3 Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-10612" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2018-10612 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Control V3 Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "3S-Smart Software Solutions GmbH reports the vulnerability affects all variants of CODESYS Control V3 products containing the CmpSecureChannel or CmpUserMgr components prior to Version 3.5.14.0 of the following products - regardless of the CPU type or operating system: Control for BeagleBone | CODESYS Control for BeagleBone | CODESYS Control for emPC-A/iMX6 | CODESYS Control for IOT2000 | CODESYS Control for Linux | CODESYS Control for PFC100 | CODESYS Control for PFC200 | CODESYS Control for Raspberry Pi | CODESYS Control RTE V3 | CODESYS Control RTE V3 (for Beckhoff CX) | CODESYS Control Win V3 (also part of the CODESYS setup) | CODESYS V3 Simulation Runtime (part of the CODESYS Development System) | CODESYS Control V3 Runtime System Toolkit and CODESYS HMI V3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-352-03" ;
    icsa:vendor "3S-Smart Software Solutions GmbH" ;
    icsa:year 2018 .

icsa-res:ICSA-18-352-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-352-04" ;
    dcterms:issued "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS V3 Products" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-20026; CVE-2018-20025" ;
    icsa:cweNumber "CWE-923; CWE-330" ;
    icsa:hasCVE cve-res:CVE-2018-20025,
        cve-res:CVE-2018-20026 ;
    icsa:hasCWE cwe-res:CWE-330,
        cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS V3 Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "3S-Smart Software Solutions GmbH reports these vulnerabilities affect the following CODESYS V3 products: CODESYS Control for BeagleBone | CODESYS Control for emPC-A/iMX6 | CODESYS Control for IOT2000 | CODESYS Control for Linux | CODESYS Control for PFC100 | CODESYS Control for PFC200 | CODESYS Control for Raspberry Pi | CODESYS Control RTE V3 | CODESYS Control RTE V3 (for Beckhoff CX) | CODESYS Control Win V3 (also part of the CODESYS Development System setup) | CODESYS Control V3 Runtime System Toolkit | CODESYS V3 Embedded Target Visu Toolkit | CODESYS V3 Remote Target Visu Toolkit | CODESYS V3 Safety SIL2 | CODESYS Gateway V3 | CODESYS HMI V3 | CODESYS OPC Server V3 | CODESYS PLC Handler SDK | CODESYS V3 Development System andCODESYS V3 Simulation Runtime (part of the CODESYS Development System)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-352-04" ;
    icsa:vendor "3S-Smart Software Solutions GmbH" ;
    icsa:year 2018 .

icsa-res:ICSA-18-352-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-352-05" ;
    dcterms:issued "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIM 1531 IRC Modules" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13816" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2018-13816 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIM 1531 IRC Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of TIM 1531 IRC - communication module for SIMATIC S7-1500 | S7-400 and S7-300 with SINAUT ST7 are affected: TIM 1531 IRC all versions prior to 2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-352-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2018 .

icsa-res:ICSA-18-352-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-352-06" ;
    dcterms:issued "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB CMS-770" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-17928" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-17928 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CMS-770" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CMS-770 from ABB and Busch-Jaeger brands are affected: CMS-770: Software Versions 1.7.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-352-06" ;
    icsa:vendor "ABB" ;
    icsa:year 2018 .

icsa-res:ICSA-18-352-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-352-07" ;
    dcterms:issued "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB M2M ETHERNET" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-17926" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-17926 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "M2M ETHERNET" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of M2M ETHERNET - network analyzer are affected: M2M ETHERNET: FW Versions 2.22 and prior | ETH-FW Versions 1.01 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-352-07" ;
    icsa:vendor "ABB" ;
    icsa:year 2018 .

icsa-res:ICSA-18-354-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-354-01" ;
    dcterms:issued "2018-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-19005" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-19005 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Cscape - Control System Application programming software are affected: Cscape Version 9.80.75.3 SP3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-354-01" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2018 .

icsa-res:ICSA-18-354-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-18-354-02" ;
    dcterms:issued "2018-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-7797" ;
    icsa:cweNumber "CWE-601" ;
    icsa:hasCVE cve-res:CVE-2018-7797 ;
    icsa:hasCWE cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of EcoStruxure - IoT-enabled architecture and platform are affected: EcoStruxure Power Monitoring Expert (PME) Version 8.2 (all editions) | EcoStruxure Energy Expert 1.3 (formerly Power Manager) | EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module | EcoStruxure Power Monitoring Expert (PME) Version 9.0 | EcoStruxure Energy Expert Version 2.0 andEcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-18-354-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2018 .

icsa-res:ICSA-19-003-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-003-01" ;
    dcterms:issued "2019-01-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Pro-face GP-Pro EX" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-7832" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-7832 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro-face GP-Pro EX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric products affected: Pro-face GP-Pro EX Version 4.08 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-003-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-003-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-003-02" ;
    dcterms:issued "2019-01-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa Vnet/IP Open Communication Driver" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2018-16196" ;
    icsa:cweNumber "CWE-399" ;
    icsa:hasCVE cve-res:CVE-2018-16196 ;
    icsa:hasCWE cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vnet/IP Open Communication Driver" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Equipment and versions utilizing Yokogawa Vnt/IP Open communications driver affected: CENTUM CS 3000 (R3.05.00 - R3.09.50); CENTUM CS 3000 Entry Class (R3.05.00 - R3.09.50); CENTUM VP (R4.01.00 - R6.03.10); CENTUM VP Entry Class (R4.01.00 - R6.03.10); Exaopc (R3.10.00 - R3.75.00); PRM (R2.06.00 - R3.31.00); ProSafe-RS (R1.02.00 - R4.02.00); FAST/TOOLS (R9.02.00 - R10.02.00); and B/M9000 VP (R6.03.01 - R8.01.90)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-003-02" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2019 .

icsa-res:ICSA-19-003-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-003-03" ;
    dcterms:issued "2019-01-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hetronic Nova-M" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-19023" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2018-19023 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nova-M" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hetronic Nova-M - remote control transmitter and receiver versions affected: Transmitters: Nova-M: all versions prior to r161; Receivers:ES-CAN-HL: all versions prior to Main r1864; Estop_v24; BMS-HL: all versions prior to Main r1175; Estop_v24; MLC: all versions prior to Main r1600; Estop_v24; andDC Mobile: all versions prior to Main r515; Estop_v24." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-003-03" ;
    icsa:vendor "Hetronic" ;
    icsa:year 2019 .

icsa-res:ICSA-19-008-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-008-01" ;
    dcterms:issued "2019-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Zelio Soft 2" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-7817" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2018-7817 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Zelio Soft 2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric products affected: Zelio Soft 2 Versions 5.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-008-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-008-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-008-02" ;
    dcterms:issued "2019-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IIoT Monitor (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-7839; CVE-2018-7837; CVE-2018-7835; CVE-2018-7836" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-611; CWE-310" ;
    icsa:hasCVE cve-res:CVE-2018-7835,
        cve-res:CVE-2018-7836,
        cve-res:CVE-2018-7837,
        cve-res:CVE-2018-7839 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-310,
        cwe-res:CWE-434,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IIoT Monitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric IIoT Monitor - monitoring platform - versions affected: Versions 3.1.38 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-008-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-010-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-010-01" ;
    dcterms:issued "2019-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-19021" ;
    icsa:cweNumber "CWE-307" ;
    icsa:hasCVE cve-res:CVE-2018-19021 ;
    icsa:hasCWE cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "R5.1; R6 and prior.; DeltaV Distributed Control System (DCS) Workations versions affected: DeltaV DCS Versions 11.3.1; 11.3.2; 14.3; 13.3.1; 12.3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-010-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2019 .

icsa-res:ICSA-19-010-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-010-02" ;
    dcterms:issued "2019-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-One CX-Protocol" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-19027" ;
    icsa:cweNumber "CWE-843" ;
    icsa:hasCVE cve-res:CVE-2018-19027 ;
    icsa:hasCWE cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-One CX-Protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Omron CX-One Versions 4.50 and prior - including the following are affected: CX-Protocol Versions 2.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-010-02" ;
    icsa:vendor "Omron" ;
    icsa:year 2019 .

icsa-res:ICSA-19-010-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-010-03" ;
    dcterms:issued "2019-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pilz PNOZmulti Configurator" ;
    icsa:CVSSScore "3.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-19009" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2018-19009 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PNOZmulti Configurator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Pilz PNOZmulti Configurator - safety circuit configuration tool versions affected: all versions prior to 10.9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-010-03" ;
    icsa:vendor "Pilz" ;
    icsa:year 2019 .

icsa-res:ICSA-19-015-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-015-01" ;
    dcterms:issued "2019-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-19004; CVE-2018-18990; CVE-2018-18988; CVE-2018-18998; CVE-2018-19029; CVE-2018-18996; CVE-2018-18992; CVE-2018-19002; CVE-2018-18986; CVE-2018-18994; CVE-2018-19000" ;
    icsa:cweNumber "CWE-94; CWE-822; CWE-787; CWE-23; CWE-20; CWE-74; CWE-288; CWE-798; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-18986,
        cve-res:CVE-2018-18988,
        cve-res:CVE-2018-18990,
        cve-res:CVE-2018-18992,
        cve-res:CVE-2018-18994,
        cve-res:CVE-2018-18996,
        cve-res:CVE-2018-18998,
        cve-res:CVE-2018-19000,
        cve-res:CVE-2018-19002,
        cve-res:CVE-2018-19004,
        cve-res:CVE-2018-19029 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-20,
        cwe-res:CWE-23,
        cwe-res:CWE-288,
        cwe-res:CWE-74,
        cwe-res:CWE-787,
        cwe-res:CWE-798,
        cwe-res:CWE-822,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "LAquis SCADA - industrial automation software versions affected: SCADA 4.1.0.3870." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-015-01" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2019 .

icsa-res:ICSA-19-017-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-017-01" ;
    dcterms:issued "2019-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Supervisor (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-19019; CVE-2018-19013; CVE-2018-19017; CVE-2018-19011; CVE-2018-19018; CVE-2018-19020; CVE-2018-19015" ;
    icsa:cweNumber "CWE-94; CWE-824; CWE-416; CWE-77; CWE-843; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-19011,
        cve-res:CVE-2018-19013,
        cve-res:CVE-2018-19015,
        cve-res:CVE-2018-19017,
        cve-res:CVE-2018-19018,
        cve-res:CVE-2018-19019,
        cve-res:CVE-2018-19020 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-77,
        cwe-res:CWE-824,
        cwe-res:CWE-843,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Supervisor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Omron product and versions affected: CX-Supervisor: Versions 3.42 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-017-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2019 .

icsa-res:ICSA-19-017-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-017-02" ;
    dcterms:issued "2019-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB CP400 Panel Builder TextEditor 2.0" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-19008" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-19008 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CP400 Panel Builder TextEditor 2.0" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB CP400PB - Panel Builder for CP405 and CP408 versions affected: Versions 2.0.7.05 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-017-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2019 .

icsa-res:ICSA-19-017-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-017-03" ;
    dcterms:issued "2019-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "ControlByWeb X-320M" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2018-18882; CVE-2018-18881" ;
    icsa:cweNumber "CWE-79; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-18881,
        cve-res:CVE-2018-18882 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "X-320M" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ControlByWeb X-320M - web-enabled weather station - versions affected: X-320M-I firmware revision v1.05 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-017-03" ;
    icsa:vendor "ControlByWeb" ;
    icsa:year 2019 .

icsa-res:ICSA-19-022-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-022-01" ;
    dcterms:issued "2019-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Facility Explorer" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-16744; CVE-2017-16748" ;
    icsa:cweNumber "CWE-22; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-16744,
        cve-res:CVE-2017-16748 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Facility Explorer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Facility Explorer leverages Tridium Niagara technology and the following versions are affected: Versions 14.x prior to 14.4u1; andVersions 6.x prior to 6.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-022-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2019 .

icsa-res:ICSA-19-024-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-024-01" ;
    dcterms:issued "2019-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6521; CVE-2019-6519; CVE-2019-6523" ;
    icsa:cweNumber "CWE-89; CWE-288; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2019-6519,
        cve-res:CVE-2019-6521,
        cve-res:CVE-2019-6523 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-288,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "WebAccess/SCADA Version 8.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-024-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2019 .

icsa-res:ICSA-19-024-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-024-02" ;
    dcterms:issued "2019-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT FL SWITCH" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2017-3735; CVE-2018-13993; CVE-2018-13991; CVE-2018-13990; CVE-2018-13994; CVE-2018-13992" ;
    icsa:cweNumber "CWE-352; CWE-307; CWE-922; CWE-119; CWE-319; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-3735,
        cve-res:CVE-2018-13990,
        cve-res:CVE-2018-13991,
        cve-res:CVE-2018-13992,
        cve-res:CVE-2018-13993,
        cve-res:CVE-2018-13994 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-307,
        cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-400,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FL SWITCH" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Phoenix Contact versions affected: FL SWITCH 3xxx; 4xxx and 48xx versions prior to Version 1.35." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-024-02" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2019 .

icsa-res:ICSA-19-029-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-029-01" ;
    dcterms:issued "2019-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa License Manager Service" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2019-5909" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2019-5909 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "License Manager Service" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Equipment and versions utilizing Yokogawa License Manager Services affected: CENTUM VP (R5.01.00 - R6.06.00); CENTUM VP Entry Class (R5.01.00 - R6.06.00); ProSafe-RS (R3.01.00 - R4.04.00); PRM (R4.01.00 - R4.02.00); andB/M9000 VP (R7.01.01 - R8.02.03)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-029-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2019 .

icsa-res:ICSA-19-029-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-029-02" ;
    dcterms:issued "2019-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-Q Series PLCs (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-6535" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-6535 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-Q series PLCs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following MELSEC-Q series PLCs are affected: Q03/04/06/13/26UDVCPU: serial number 20081 and prior Q04/06/13/26UDPVCPU: serial number 20081 and prior Q03UDECPU; Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-029-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-029-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-029-03" ;
    dcterms:issued "2019-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Wonderware System Platform" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6525" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2019-6525 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wonderware System Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Wonderware System Platform - unifying supervisory platform versions affected: Wonderware System Platform 2017 Update 2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-029-03" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2019 .

icsa-res:ICSA-19-031-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-031-01" ;
    dcterms:issued "2019-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EVLink Parking" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2018-7800; CVE-2018-7801; CVE-2018-7802" ;
    icsa:cweNumber "CWE-94; CWE-89; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2018-7800,
        cve-res:CVE-2018-7801,
        cve-res:CVE-2018-7802 ;
    icsa:hasCWE cwe-res:CWE-798,
        cwe-res:CWE-89,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EVLink Parking" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of EVLink Parking - electric vehicle charging station - affected: EVLink Parking Versions 3.2.0-12_v1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-031-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-031-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-031-02" ;
    dcterms:issued "2019-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "IDenticard PremiSys (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-3907; CVE-2019-3908; CVE-2019-3906" ;
    icsa:cweNumber "CWE-798; CWE-259; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2019-3906,
        cve-res:CVE-2019-3907,
        cve-res:CVE-2019-3908 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-326,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PremiSys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of IDenticard PremiSys - access control system -affected: PremiSys all versions prior to 4.2CVE-2019-3906 was resolved in Version 4.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-031-02" ;
    icsa:vendor "IDenticard" ;
    icsa:year 2019 .

icsa-res:ICSA-19-036-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-036-01" ;
    dcterms:issued "2019-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA InduSoft Web Studio and InTouch Edge HMI" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6545; CVE-2019-6543" ;
    icsa:cweNumber "CWE-306; CWE-99" ;
    icsa:hasCVE cve-res:CVE-2019-6543,
        cve-res:CVE-2019-6545 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-99 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InduSoft Web Studio and InTouch Edge HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of AVEVA products are affected: InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-036-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2019 .

icsa-res:ICSA-19-036-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-036-02" ;
    dcterms:issued "2019-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation EtherNet/IP Web Server Modules" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-19016" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-19016 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EtherNet/IP Web Server Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of EtherNet/IP web server module - a web server module - affected: 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier; andCompactLogix 1768-EWEB Version 2.005 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-036-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-036-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-036-03" ;
    dcterms:issued "2019-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON LeviStudioU (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6541; CVE-2019-6537; CVE-2019-6539" ;
    icsa:cweNumber "CWE-119; CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-6537,
        cve-res:CVE-2019-6539,
        cve-res:CVE-2019-6541 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LeviStudioU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WECON products affected: LeviStudioU Versions 1.8.69 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-036-03" ;
    icsa:vendor "WECON" ;
    icsa:year 2019 .

icsa-res:ICSA-19-036-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-036-04" ;
    dcterms:issued "2019-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 CPU" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-16558; CVE-2018-16559" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-16558,
        cve-res:CVE-2018-16559 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 CPU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens products affected: SIMATIC S7-1500 CPU all versions v1.8.5 and prior and SIMATIC S7-1500 CPU all versions prior to v2.5 down to and including v2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-036-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-036-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-036-05" ;
    dcterms:issued "2019-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Kunbus PR100088 Modbus Gateway (Update B)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2019-6529; CVE-2019-6533; CVE-2019-6527; CVE-2019-6531; CVE-2019-6549" ;
    icsa:cweNumber "CWE-287; CWE-306; CWE-20; CWE-312; CWE-598" ;
    icsa:hasCVE cve-res:CVE-2019-6527,
        cve-res:CVE-2019-6529,
        cve-res:CVE-2019-6531,
        cve-res:CVE-2019-6533,
        cve-res:CVE-2019-6549 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-306,
        cwe-res:CWE-312,
        cwe-res:CWE-598 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PR100088 Modbus Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PR100088 Modbus gateway: All versions prior to Release R02 (or Software Version 1.1.13166)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-036-05" ;
    icsa:vendor "Kunbus" ;
    icsa:year 2019 .

icsa-res:ICSA-19-038-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-038-01" ;
    dcterms:issued "2019-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM A8000 RTU Series" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-13798" ;
    icsa:cweNumber "CWE-248" ;
    icsa:hasCVE cve-res:CVE-2018-13798 ;
    icsa:hasCWE cwe-res:CWE-248 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM A8000 RTU Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SICAM A8000 RTU - telecontrol and automation device - products affected: SICAM A8000 CP-8000 versions prior to v14; SICAM A8000 CP-802X versions prior to v14; and SICAM A8000 CP-8050 versions prior to v2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-038-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-038-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-038-02" ;
    dcterms:issued "2019-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens EN100 Ethernet Module" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-11451; CVE-2018-11452" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-11451,
        cve-res:CVE-2018-11452 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EN100 Ethernet Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of EN100 Ethernet module; a communication module for SWT 3000 management platform - affected: Firmware variant IEC 61850 for EN100 Ethernet module version prior to 4.33." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-038-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-043-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-043-01" ;
    dcterms:issued "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Vision" ;
    icsa:CVSSScore "4.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-19006" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2018-19006 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Vision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and PI Vision 2017 R2.; OSIsoft PI Vision - process visualization tool - versions affected: PI Vision 2017" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-043-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2019 .

icsa-res:ICSA-19-043-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-043-02" ;
    dcterms:issued "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-16563" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-16563 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EN100 Ethernet Communication Module and SIPROTEC 5 Relays" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of the Siemens EN100 Ethernet communications module and SIPROTEC 5 relays affected: Firmware variant IEC 61850 for EN100 Ethernet module: All versions prior to v4.35 | Firmware variant MODBUS TCP for EN100 Ethernet module: All versions | Firmware variant DNP3 TCP for EN100 Ethernet module: All versions | Firmware variant IEC104 for EN100 Ethernet module: All versions | Firmware variant Profinet IO for EN100 Ethernet module: All versions | SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules: All versions prior to v7.82 | SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules: All versions prior to v7.58." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-043-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-043-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-043-03" ;
    dcterms:issued "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "WIBU SYSTEMS AG WibuKey Digital Rights Management (Update D)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Financial Services; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-3989; CVE-2018-3990; CVE-2018-3991" ;
    icsa:cweNumber "CWE-122; CWE-200; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2018-3989,
        cve-res:CVE-2018-3990,
        cve-res:CVE-2018-3991 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-200,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WIBU SYSTEMS AG WibuKey Digital Rights Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SIMATIC WinCC OA:3.14: All versions prior to vP0253.15: All versions prior to vP0183.16: All versions prior to vP007. Siemens SISHIP EMCS; Siemens products affected: WibuKey Digital Rights Management (DRM): Siemens SICAM 230: All Versions 7.20 and prior; IPMS: All versions. | COPA-DATA zenon products: All Versions 7.20 and prior (7.50 and 7.60 may also be affected if WibuKey was installed manually) COPA-DATA straton workbench: All Versions 9.2 and prior | Sprecher Automation SPRECON-V460 products: All Versions 7.20 and prior (7.50 and 7.60 may also be affected if WibuKey was installed manually) | Phoenix Contact MEVIEW3: All versions prior to 3.14.25 and 3.15.18.; IMAC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-043-03" ;
    icsa:vendor "Wibu-Systems AG" ;
    icsa:year 2019 .

icsa-res:ICSA-19-043-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-043-04" ;
    dcterms:issued "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-300 CPU" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-16561" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-16561 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-300 CPU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens products affected: SIMATIC S7-300 CPUs: All versions prior to v3.X.16." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-043-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-043-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-043-05" ;
    dcterms:issued "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Intel Active Management Technology of SIMATIC IPCs" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-3616; CVE-2018-3658; CVE-2018-3657" ;
    icsa:cweNumber "CWE-119; CWE-399; CWE-310" ;
    icsa:hasCVE cve-res:CVE-2018-3616,
        cve-res:CVE-2018-3657,
        cve-res:CVE-2018-3658 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-310,
        cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intel Active Management Technology of SIMATIC IPCs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens products affected: SIMATIC FieldPG M5: All versions prior to v22.01.06; SIMATIC IPC427E: All versions prior to v21.01.09; SIMATIC IPC477E: All versions prior to v21.01.09; SIMATIC IPC547E: All versions prior to R1.30.0; SIMATIC IPC547G: All versions prior to R1.23.0; SIMATIC IPC627D: All versions prior to v19.02.11; SIMATIC IPC647D: All versions prior to v19.01.14; SIMATIC IPC677D: All versions prior to v19.02.11; SIMATIC IPC827D: All versions prior to v19.02.11; SIMATIC IPC847D: All versions prior to v19.01.14; and SIMATIC ITP1000: All versions prior to v23.01.04." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-043-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-043-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-043-06" ;
    dcterms:issued "2019-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens CP1604 and CP1616 (Update A)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-13810; CVE-2018-13808; CVE-2018-13809" ;
    icsa:cweNumber "CWE-79; CWE-352; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2018-13808,
        cve-res:CVE-2018-13809,
        cve-res:CVE-2018-13810 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CP1604 and CP1616" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens products affected: CP 1604 and 1616: All versions prior to v2.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-043-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-045-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-045-01" ;
    dcterms:issued "2019-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pangea Communications Internet FAX ATA" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communication; Information Technology" ;
    icsa:cveNumber "CVE-2019-6551" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2019-6551 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Internet FAX ATA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Pangea Internet FAX ATA - Analog Telephone Adapter - versions affected: Internet FAX ATA Version 3.1.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-045-01" ;
    icsa:vendor "Pangea Communications" ;
    icsa:year 2019 .

icsa-res:ICSA-19-050-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-050-01" ;
    dcterms:issued "2019-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Intel Data Center Manager SDK" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2019-0111; CVE-2019-0104; CVE-2019-0109; CVE-2019-0112; CVE-2019-0105; CVE-2019-0103; CVE-2019-0102; CVE-2019-0108; CVE-2019-0106; CVE-2019-0110; CVE-2019-0107" ;
    icsa:cweNumber "CWE-691; CWE-320; CWE-287; CWE-275; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2019-0102,
        cve-res:CVE-2019-0103,
        cve-res:CVE-2019-0104,
        cve-res:CVE-2019-0105,
        cve-res:CVE-2019-0106,
        cve-res:CVE-2019-0107,
        cve-res:CVE-2019-0108,
        cve-res:CVE-2019-0109,
        cve-res:CVE-2019-0110,
        cve-res:CVE-2019-0111,
        cve-res:CVE-2019-0112 ;
    icsa:hasCWE cwe-res:CWE-275,
        cwe-res:CWE-287,
        cwe-res:CWE-320,
        cwe-res:CWE-691,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Data Center Manager SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Intel product affected: Intel Data Center Manager SDK prior to Version 5.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-050-01" ;
    icsa:vendor "Intel" ;
    icsa:year 2019 .

icsa-res:ICSA-19-050-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-050-02" ;
    dcterms:issued "2019-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation CNCSoft" ;
    icsa:CVSSScore "4.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-6547" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-6547 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Industrial Automation CNCSoft versions affected: CNCSoft ScreenEditor Version 1.00.84 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-050-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2019 .

icsa-res:ICSA-19-050-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-050-03" ;
    dcterms:issued "2019-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-6555" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-6555 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Horner Automation Cscap - control system application programming software versions affected: Cscape 9.80 SP4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-050-03" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-050-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-050-04" ;
    dcterms:issued "2019-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley PowerMonitor 1000 (Update A)" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-19615; CVE-2018-19616" ;
    icsa:cweNumber "CWE-79; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2018-19615,
        cve-res:CVE-2018-19616 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley PowerMonitor 1000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation - Allen-Bradley PowerMonitor 1000 - monitoring platform versions affected: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-050-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-057-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-057-01" ;
    dcterms:issued "2019-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa IKS, EDS (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2019-6563; CVE-2019-6561; CVE-2019-6565; CVE-2019-6518; CVE-2019-6559; CVE-2019-6522; CVE-2019-6524; CVE-2019-6520; CVE-2019-6526; CVE-2019-6557" ;
    icsa:cweNumber "CWE-352; CWE-307; CWE-120; CWE-341; CWE-79; CWE-284; CWE-311; CWE-256; CWE-125; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-6518,
        cve-res:CVE-2019-6520,
        cve-res:CVE-2019-6522,
        cve-res:CVE-2019-6524,
        cve-res:CVE-2019-6526,
        cve-res:CVE-2019-6557,
        cve-res:CVE-2019-6559,
        cve-res:CVE-2019-6561,
        cve-res:CVE-2019-6563,
        cve-res:CVE-2019-6565 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-256,
        cwe-res:CWE-284,
        cwe-res:CWE-307,
        cwe-res:CWE-311,
        cwe-res:CWE-341,
        cwe-res:CWE-352,
        cwe-res:CWE-400,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IKS, EDS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IKS-G6824A series Version 5.6 and prior EDS-405A series Version 3.8 and prior EDS-408A series Version 3.8 and prior EDS-510A series Version 3.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-057-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2019 .

icsa-res:ICSA-19-059-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-059-01" ;
    dcterms:issued "2019-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "PSI GridConnect Telecontrol" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-6528" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2019-6528 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Telecontrol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PSI GridConnect products affected: Telecontrol Gateway 3G Versions 4.2.21; 5.0.27; 6.0.16 and prior; Telecontrol Gateway XS-MU Versions 4.2.21; 6.0.16 and prior;Smart Telecontrol Unit TCG Versions 5.0.27; 5.1.19; 6.0.16 and prior; and IEC104 Security Proxy Version 2.2.10 and prior.; 6.0.16 and prior; Telecontrol Gateway VM Versions 4.2.21" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-059-01" ;
    icsa:vendor "PSI GridConnect GmbH (formerly known as PSI Nentec GmbH)" ;
    icsa:year 2019 .

icsa-res:ICSA-19-064-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-064-01" ;
    dcterms:issued "2019-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLinx Classic" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6553" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-6553 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLinx Classic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation RSLinx Classic - PLC communications software versions affected: RSLinx Classic Versions 4.10.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-064-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-073-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-073-01" ;
    dcterms:issued "2019-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA ELS Files" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6536" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2019-6536 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA ELS Files" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "Laquis SCADA - industrial automation software version affected: SCADA 4.1.0.4150." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-073-01" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2019 .

icsa-res:ICSA-19-073-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-073-02" ;
    dcterms:issued "2019-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Gemalto Sentinel UltraPro" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Communications; Financial Services; Government Facilities; Healthcare and Public Health; Information Technology" ;
    icsa:cveNumber "CVE-2019-6534" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2019-6534 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sentinel UltraPro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Sentinel UltraPro encryption keys affected: Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0; 1.3.1; and 1.3.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-073-02" ;
    icsa:vendor "Gemalto" ;
    icsa:year 2019 .

icsa-res:ICSA-19-073-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-073-03" ;
    dcterms:issued "2019-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "PEPPERL+FUCHS WirelessHART-Gateways" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2018-16059" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2018-16059 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WirelessHART-Gateways" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PEPPERL+FUCHS products affected: all WHA-GW-* products." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-073-03" ;
    icsa:vendor "PEPPERL+FUCHS" ;
    icsa:year 2019 .

icsa-res:ICSA-19-078-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-078-01" ;
    dcterms:issued "2019-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA InduSoft Web Studio and InTouch Edge HMI" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6534" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2019-6534 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InduSoft Web Studio and InTouch Edge HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA InduSoft Web Studio and InTouch Edge HMI versions affected: InduSoft Web Studio versions prior to v8.1 SP3 | InTouch Edge HMI versions prior to 2017 Update 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-078-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2019 .

icsa-res:ICSA-19-078-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-078-02" ;
    dcterms:issued "2019-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Columbia Weather Systems MicroServer" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2018-18879; CVE-2018-18877; CVE-2018-18878; CVE-2018-18875; CVE-2018-18880; CVE-2018-18876" ;
    icsa:cweNumber "CWE-94; CWE-22; CWE-287; CWE-79; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-18875,
        cve-res:CVE-2018-18876,
        cve-res:CVE-2018-18877,
        cve-res:CVE-2018-18878,
        cve-res:CVE-2018-18879,
        cve-res:CVE-2018-18880 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-287,
        cwe-res:CWE-79,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroServer" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Weather MicroServer - weather monitoring system - affected: Weather MicroServer firmware Version MS_2.6.9900 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-078-02" ;
    icsa:vendor "Columbia Weather Systems" ;
    icsa:year 2019 .

icsa-res:ICSA-19-085-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-085-01" ;
    dcterms:issued "2019-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X (Update D)" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6569" ;
    icsa:cweNumber "CWE-440" ;
    icsa:hasCVE cve-res:CVE-2019-6569 ;
    icsa:hasCWE cwe-res:CWE-440 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ports on front)(6GK5324-4GG00-4ER2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5324-0GG10-3HR2): All versions prior to v4.1.3 SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2): All versions prior to v4.1.3 SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2): All versions prior to v4.1.3 SCALANCE XR324WG (24 x FE; coated) (6GK5307-2FD00-2GA3): All versions prior to v4.1.3 SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3): All versions prior to v4.1.3 SCALANCE X307-2 EEC (2x 230V; DC 24V) (6GK5328-4SS00-2AR3): All versions prior to v4.1 SIPLUS NET SCALANCE X308-2 (6AG1308-2FL10-4AA3): All versions prior to v4.1.3 SIPLUS NET SCALANCE XC206-2 (6AG1206-2BB00-7AC2): All versions prior to v4.1 SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2): All versions prior to v4.1 SIPLUS NET SCALANCE XC208 (6AG1208-0BA00-7AC2): All versions prior to v4.1 SIPLUS NET SCALANCE XC216-4C (6AG1216-4BS00-7AC2): All versions prior to v4.1.; ports on front)(6GK5324-4GG00-3ER2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG10-1JR2): All versions prior to V4.1.3 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-4GG00-1ER2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (24V; ports on front) (6GK5324-4QG00-1AR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE (24V; ports on rear) (6GK5324-4QG00-1HR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE (230V; DC24V) (6GK5328-4FS00-2RR3): All versions prior to v4.1 SCALANCE XR328-4C WG (28xGE; ports on front) (6GK5324-4GG10-2ER2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-4GG00-2ER2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (2x 24V; coated) (6GK5307-2FD00-1GA3): All versions prior to v4.1.3 SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3): All versions prior to v4.1.3 SCALANCE X307-2 EEC (230V; coated) (6GK5302-7GD00-1GA3): All versions prior to v4.1.3 SCALANCE X302-7 EEC (230V) (6GK5302-7GD00-3EA3): All versions prior to v4.1.3 SCALANCE X302-7 EEC (230V; ports on front)(6GK5324-4GG10-4ER2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG00-1JR2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (24V; ports on front) (6GK5324-0GG00-1AR2): All versions prior to v4.1.3 SCALANCE XR324-12M (24V; AC 230V) (6GK5328-4SS00-3AR3): All versions prior to v4.1 SCALANCE XR328-4C WG (28xGE; ports on rear) (6GK5 324-4QG10-3HR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE (230V; ports on rear) (6GK5324-4GG10-2JR2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5 324-4QG10-1HR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE (24V; DC 24V) (6GK5324-0BA00-2AR3): All versions prior to v4.1 SCALANCE XR328-4C WG (24xFE; coated) (6GK5302-7GD00-2GA3): All versions prior to v4.1.3 SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3): All versions prior to v4.1.3 SCALANCE X302-7 EEC (2x 230V; ports on front) (6GK5324-4QG00-3AR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE (230V; coated) (6GK5307-2FD00-4GA3): All versions prior to v4.1.3 SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3): All versions prior to v4.1.3 SCALANCE X307-2 EEC (24V; ports on rear) (6GK5324-4GG00-3JR2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5 324-4QG10-1AR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE (24V; ports on front) (6GK5324-4QG00-1CR2): All versions prior to v4.1.3 SCALANCE XR324-12M (24V; ports on front) (6GK5324-0GG10-1AR2): All versions prior to v4.1.3 SCALANCE XR324-12M (24V; 24V) (6GK5328-4FS00-2AR3): All versions prior to v4.1 SCALANCE XR328-4C WG (24xFE; ports on front) (6GK5324-0GG00-3AR2): All versions prior to v4.1.3 SCALANCE XR324-12M (230V; ports on front) (6GK5324-4GG10-1ER2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-0GG00-3HR2): All versions prior to v4.1.3 SCALANCE XR324-12M (230V; coated) (6GK5302-7GD00-3GA3): All versions prior to v4.1.3 SCALANCE X304-2FE (6GK5304-2BD00-2AA3): All versions prior to v4.1.3 SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3): All versions prior to v4.1.3 SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3): All versions prior to v4.1.3 SCALANCE X307-2 EEC (2x 24V; ports on front) (6GK5 324-4QG10-1CR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE TS (24V; ports on front) (6GK5 324-4QG10-3AR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE (230V; ports on rear) (6GK5324-0GG10-1HR2): All versions prior to v4.1.3 SCALANCE XR324-12M (230V; coated) (6GK5302-7GD00-4GA3): All versions prior to v4.1.3 SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3): All versions prior to v4.1.3 SCALANCE X302-7 EEC (24V; ports on rear) (6GK5324-4GG00-2JR2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (2x 24V; ports on rear)(6GK5324-4GG00-4JR2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG10-3JR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE (24V; 4XGE; ports on rear) (6GK5324-0GG00-1HR2): All versions prior to v4.1.3 SCALANCE XR324-12M (24V; ports on rear) (6GK5324-4QG00-3HR2): All versions prior to v4.1.3 SCALANCE XR324-4M PoE TS (24V; ports on front)(6GK5324-4GG10-3ER2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; AC230V) (6GK5328-4FS00-3AR3): All versions prior to v4.1 SCALANCE XR328-4C WG (24xFE; 4xGE; The following SCALANCE products are affected: SCALANCE X204-2 (6GK5204-2BB10-2AA3): All versions SCALANCE X204-2FM (6GK5204-2BB11-2AA3): All versions SCALANCE X204-2LD (6GK5204-2BC10-2AA3): All versions SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2): All versions SCALANCE X204-2TS (6GK5204-2BB10-2CA2): All versions SCALANCE X206-1 (6GK5206-1BB10-2AA3): All versions SCALANCE X206-1LD (6GK5206-1BC10-2AA3): All versions SCALANCE X208 (6GK5208-0BA10-2AA3): All versions SCALANCE X208PRO (6GK5208-0HA10-2AA6): All versions SCALANCE X212-2 (6GK5212-2BB00-2AA3): All versions SCALANCE X212-2LD (6GK5212-2BC00-2AA3): All versions SCALANCE X216 (6GK5216-0BA00-2AA3): All versions SCALANCE X224 (6GK5224-0BA00-2AA3): All versions SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3): All versions prior to v4.1.3 SCALANCE X302-7 EEC (2x 24V; AC230V) (6GK5328-4FS00-3RR3): All versions prior to v4.1 SCALANCE XR328-4C WG (24XFE; coated) (6GK5307-2FD00-3GA3): All versions prior to v4.1.3 SCALANCE X307-3 (6GK5307-3BL00-2AA3): All versions prior to v4.1.3 SCALANCE X307-3 (6GK5307-3BL10-2AA3): All versions prior to v4.1.3 SCALANCE X307-3LD (6GK5307-3BM00-2AA3): All versions prior to v4.1.3 SCALANCE X307-3LD (6GK5307-3BM10-2AA3): All versions prior to v4.1.3 SCALANCE X308-2 (6GK5308-2FL00-2AA3): All versions prior to v4.1.3 SCALANCE X308-2 (6GK5308-2FL10-2AA3): All versions prior to v4.1.3 SCALANCE X308-2LD (6GK5308-2FM00-2AA3): All versions prior to v4.1.3 SCALANCE X308-2LD (6GK5308-2FM10-2AA3): All versions prior to v4.1.3 SCALANCE X308-2LH (6GK5308-2FN00-2AA3): All versions prior to v4.1.3 SCALANCE X308-2LH (6GK5308-2FN10-2AA3): All versions prior to v4.1.3 SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3): All versions prior to v4.1.3 SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3): All versions prior to v4.1.3 SCALANCE X308-2M (6GK5308-2GG00-2AA2): All versions prior to v4.1.3 SCALANCE X308-2M (6GK5308-2GG10-2AA2): All versions prior to v4.1.3 SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2): All versions prior to v4.1.3 SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2): All versions prior to v4.1.3 SCALANCE X308-2M TS (6GK5308-2GG00-2CA2): All versions prior to v4.1.3 SCALANCE X308-2M TS (6GK5308-2GG10-2CA2): All versions prior to v4.1.3 SCALANCE X310 (6GK5310-0FA00-2AA3): All versions prior to v4.1.3 SCALANCE X310 (6GK5310-0FA10-2AA3): All versions prior to v4.1.3 SCALANCE X310FE (6GK5310-0BA00-2AA3): All versions prior to v4.1.3 SCALANCE X310FE (6GK5310-0BA10-2AA3): All versions prior to v4.1.3 SCALANCE X320-1 FE (6GK5320-1BD00-2AA3): All versions prior to v4.1.3 SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3): All versions prior to v4.1.3 SCALANCE X408-2 (6GK5408-2FD00-2AA2): All versions prior to v4.1.3 SCALANCE XB205-3 (SC) (6GK5205-3BD00-2AB2): All versions prior to v4.1 SCALANCE XB205-3 (SC) (6GK5205-3BD00-2TB2): All versions prior to v4.1 SCALANCE XB205-3 (ST/BFOC) (6GK5205-3BB00-2AB2): All versions prior to v4.1 SCALANCE XB205-3 (ST/BFOC) (6GK5205-3BB00-2TB2): All versions prior to v4.1 SCALANCE XB205-3LD (6GK5205-3BF00-2AB2): All versions prior to v4.1 SCALANCE XB205-3LD (6GK5205-3BF00-2TB2): All versions prior to v4.1 SCALANCE XB208 (6GK5208-0BA00-2AB2): All versions prior to v4.1 SCALANCE XB208 (6GK5208-0BA00-2TB2): All versions prior to v4.1 SCALANCE XB213-3 (SC) (6GK5213-3BD00-2AB2): All versions prior to v4.1 SCALANCE XB213-3 (SC) (6GK5213-3BD00-2TB2): All versions prior to v4.1 SCALANCE XB213-3 (ST/BFOC) (6GK5213-3BB00-2AB2): All versions prior to v4.1 SCALANCE XB213-3 (ST/BFOC) (6GK5213-3BB00-2TB2): All versions prior to v4.1 SCALANCE XB213-3LD (6GK5213-3BF00-2AB2): All versions prior to v4.1 SCALANCE XB213-3LD (6GK5213-3BF00-2TB2): All versions prior to v4.1 SCALANCE XB216 (6GK5216-0BA00-2AB2): All versions prior to v4.1 SCALANCE XB216 (6GK5216-0BA00-2TB2): All versions prior to v4.1 SCALANCE XC206-2 (SC) (6GK5206-2BD00-2AC2): All versions prior to v4.1 SCALANCE XC206-2 (ST/BFOC) (6GK5206-2BB00-2AC2): All versions prior to v4.1 SCALANCE XC206-2SFP (6GK5206-2BS00-2AC2): All versions prior to v4.1 SCALANCE XC206-2SFP EEC (6GK5206-2BS00-2FC2): All versions prior to v4.1 SCALANCE XC206-2SFP G (6GK5206-2GS00-2AC2): All versions prior to v4.1 SCALANCE XC206-2SFP G (6GK5206-2GS00-2TC2): All versions prior to v4.1 SCALANCE XC206-2SFP G EEC (6GK5206-2GS00-2FC2): All versions prior to v4.1 SCALANCE XC208 (6GK5208-0BA00-2AC2): All versions prior to v4.1 SCALANCE XC208EEC (6GK5208-0BA00-2FC2): All versions prior to v4.1 SCALANCE XC208G (6GK5208-0GA00-2AC2): All versions prior to v4.1 SCALANCE XC208G (6GK5208-0GA00-2TC2): All versions prior to v4.1 SCALANCE XC208G EEC (6GK5208-0GA00-2FC2): All versions prior to v4.1 SCALANCE XC216 (6GK5216-0BA00-2AC2): All versions prior to v4.1 SCALANCE XC216-4C (6GK5216-4BS00-2AC2): All versions prior to v4.1 SCALANCE XC216-4C G (6GK5216-4GS00-2AC2): All versions prior to v4.1 SCALANCE XC216-4C G (EIP Def.) (6GK5216-4GS00-2TC2): All versions prior to v4.1 SCALANCE XC216-4C G EEC (6GK5216-4GS00-2FC2): All versions prior to v4.1 SCALANCE XC216EEC (6GK5216-0BA00-2FC2): All versions prior to v4.1 SCALANCE XC224 (6GK5224-0BA00-2AC2): All versions prior to v4.1 SCALANCE XC224-4C G (6GK5224-4GS00-2AC2): All versions prior to v4.1 SCALANCE XC224-4C G (EIP Def.) (6GK5224-4GS00-2TC2): All versions prior to v4.1 SCALANCE XC224-4C G EEC (6GK5224-4GS00-2FC2): All versions prior to v4.1 SCALANCE XF204 (6GK5204-0BA00-2AF2): All versions SCALANCE XF204 (6GK5204-0BA00-2GF2): All versions prior to v4.1 SCALANCE XF204 DNA (6GK5204-0BA00-2YF2): All versions prior to v4.1 SCALANCE XF204-2 (6GK5204-2BC00-2AF2): All versions SCALANCE XF204-2BA (6GK5204-2AA00-2GF2): All versions prior to v4.1 SCALANCE XF204-2BA DNA (6GK5204-2AA00-2YF2): All versions prior to v4.1 SCALANCE XF206-1 (6GK5206-1BC00-2AF2): All versions SCALANCE XF208 (6GK5208-0BA00-2AF2): All versions SCALANCE XP208 (6GK5208-0HA00-2AS6): All versions prior to v4.1 SCALANCE XP208 (6GK5208-0HA00-2TS6): All versions prior to v4.1 SCALANCE XP208EEC (6GK5208-0HA00-2ES6): All versions prior to v4.1 SCALANCE XP208PoE EEC (6GK5208-0UA00-5ES6): All versions prior to v4.1 SCALANCE XP216 (6GK5216-0HA00-2AS6): All versions prior to v4.1 SCALANCE XP216 (6GK5216-0HA00-2TS6): All versions prior to v4.1 SCALANCE XP216EEC (6GK5216-0HA00-2ES6): All versions prior to v4.1 SCALANCE XP216POE EEC (6GK5216-0UA00-5ES6): All versions prior to v4.1 SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-0GG10-3AR2): All versions prior to v4.1.3 SCALANCE XR324-12M (230V; AC 230V) (6GK5324-0BA00-3AR3): All versions prior to v4.1 SCALANCE XR324WG (24 X FE; ports on rear)(6GK5324-4GG10-4JR2): All versions prior to v4.1.3 SCALANCE XR324-4M EEC (24V" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-085-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-085-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-085-02" ;
    dcterms:issued "2019-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT RAD-80211-XD" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2019-9743" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2019-9743 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RAD-80211-XD" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Phoenix Contact products affected: RAD-80211-XD (2885728) and RAD-80211-XD/HP-BUS (2900047)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-085-02" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2019 .

icsa-res:ICSA-19-085-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-085-03" ;
    dcterms:issued "2019-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "ENTTEC Lighting Controllers" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-6542" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2019-6542 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lighting Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "NTTEC products and versions affected: Datagate MK2 all firmware prior to 70044_update_05032019-482 | Storm 24 all firmware prior to 70050_update_05032019-482 and Pixelator all firmware prior to 70060_update_05032019-482." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-085-03" ;
    icsa:vendor "ENTTEC" ;
    icsa:year 2019 .

icsa-res:ICSA-19-087-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-087-01" ;
    dcterms:issued "2019-03-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PowerFlex 525 AC Drives" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-19282" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-19282 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerFlex 525 AC Drives" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PowerFlex 525 AC Drives with embedded EtherNet/IP and Safety Versions 5.001 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-087-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-092-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-092-01" ;
    dcterms:issued "2019-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6550; CVE-2019-6552; CVE-2019-6554" ;
    icsa:cweNumber "CWE-284; CWE-77; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-6550,
        cve-res:CVE-2019-6552,
        cve-res:CVE-2019-6554 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-284,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "WebAccess/SCADA Versions 8.3.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-092-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2019 .

icsa-res:ICSA-19-094-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-094-01" ;
    dcterms:issued "2019-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Programmer" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-6556" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2019-6556 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Programmer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of CX-Programmer within CX-One affected: CX-Programmer v9.70 and prior | Common Components January 2019 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-094-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2019 .

icsa-res:ICSA-19-094-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-094-02" ;
    dcterms:issued "2019-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix 5400/5410/5700 and ArmorStratix 5700" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-15377" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-15377 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix 5400/5410/5700 and ArmorStratix 5700" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation Stratix Industrial Switches affected by this vulnerability in the Cisco Open Plug-n-Play agent: Allen-Bradley Stratix 5400: All versions prior to 15.2(6)E2a | Allen-Bradley Stratix 5410: All versions prior to 15.2(6)E2a | Allen-Bradley Stratix 5700: All versions prior to 15.2(6)E2a | Allen-Bradley Armor Stratix 5700: All versions prior to 15.2(6)E2a." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-094-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-094-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-094-03" ;
    dcterms:issued "2019-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-0473; CVE-2018-0466; CVE-2018-0470; CVE-2018-15373; CVE-2018-0467" ;
    icsa:cweNumber "CWE-20; CWE-399" ;
    icsa:hasCVE cve-res:CVE-2018-0466,
        cve-res:CVE-2018-0467,
        cve-res:CVE-2018-0470,
        cve-res:CVE-2018-0473,
        cve-res:CVE-2018-15373 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Allen-Bradley Stratix 5400 versions affected: All versions 15.2(6)E0a and prior | Allen-Bradley Stratix 5410: All versions 15.2(6)E0a and prior | Allen-Bradley Stratix 5700: All versions 15.2(6)E0a and prior | Allen-Bradley Armor Stratix 5700: All versions 15.2(6)E0a and prior | Allen-Bradley Stratix 8000: All versions 15.2(6)E0a and prior | Allen-Bradley Stratix 8300: All versions prior to 15.2(4)EA7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-094-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-094-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-094-04" ;
    dcterms:issued "2019-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix 5950" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-0472" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-0472 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix 5950" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Allen-Bradley Stratix 5950 security appliance products affected by the vulnerability in the Cisco IPsec driver code: 1783-SAD4T0SBK9 | 1783-SAD4T0SPK9 | 1783-SAD2T2SBK9 | 1783-SAD2T2SPK9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-094-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-099-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-099-01" ;
    dcterms:issued "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMOCODE pro V EIP" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2017-12741" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-12741 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMOCODE pro V EIP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens versions of SIMOCODE pro V EIP - motor management system for low-voltage motors affected: SIMOCODE pro V EIP all versions prior to v1.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-099-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-099-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-099-02" ;
    dcterms:issued "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power 4.7" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6579" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2019-6579 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Spectrum Power 4.7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of Spectrum Power - system that provides basic components for SCADA communications and data modeling for control and monitoring systems - versions affected: Spectrum Power 4 with Web Office Portal." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-099-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-099-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-099-03" ;
    dcterms:issued "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products with OPC UA (Update H)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6575" ;
    icsa:cweNumber "CWE-248" ;
    icsa:hasCVE cve-res:CVE-2019-6575 ;
    icsa:hasCWE cwe-res:CWE-248 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SINEC-NMS, SINEMA, SINEMURIK Industrial Control Products with OPC UA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KTP900; KTP700F; and prior to v2.6.1 SIMATIC S7-1500 Software Controller: all versions between v2.5 (including) and v2.7 (excluding) SIMATIC WinCC OA: all versions prior to v3.15-P018 SIMATIC WinCC Runtime Advanced: all versions prior to v15.1 Upd 4 SINEC-NMS: all versions prior to v1.0 SP1 SINEMA Server: all versions prior to v14 SP2 SINUMERIK OPC UA Server: all versions prior to v2.1 --------- Begin Update H Part 1 of 2 --------- TeleControl Server Basic: all versions prior to v3.1.1 --------- End Update H Part 1 of 2 ---------.; The following Siemens industrial products are affected: SIMATIC CP443-1 OPC UA (including SIPLUS NET variants): all versions SIMATIC ET 200 Open Controller CPU 1515SP PC2 (including SIPLUS variants): all versions prior to v2.7 SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (including SIPLUS variants): all versions prior to v15.1 Upd 4 SIMATIC HMI Comfort Panels 4\" 22\" (including SIPLUS variants): all versions prior to v15.1 Upd 4 SIMATIC HMI KTP Mobile Panels KTP400F; v2.5 and newer; KTP700; KTP900F (including SIPLUS variants): all versions prior to v15.1 Upd 4 SIMATIC IPC DiagMonitor: all versions prior to v5.1.3 SIMATIC NET PC Software v13: all versions SIMATIC NET PC Software v14: all versions prior to v14 SP1 Update 14 SIMATIC NET PC Software v15: all versions SIMATIC RF188C: all versions prior to v1.1.0 SIMATIC RF600R: all versions prior to v3.2.1 SIMATIC S7-1500 CPU Family (including related ET200 CPUs and SIPLUS variants): all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-099-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-099-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-099-04" ;
    dcterms:issued "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect (Update A)" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-3823; CVE-2018-14618; CVE-2019-6570; CVE-2019-3822; CVE-2018-16890" ;
    icsa:cweNumber "CWE-131; CWE-125; CWE-121; CWE-280" ;
    icsa:hasCVE cve-res:CVE-2018-14618,
        cve-res:CVE-2018-16890,
        cve-res:CVE-2019-3822,
        cve-res:CVE-2019-3823,
        cve-res:CVE-2019-6570 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-131,
        cwe-res:CWE-280 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SINEMA Remote Connect Client; all versions prior to v2.0 HF1 SINEMA Remote Connect Server; all versions prior to v2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-099-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-099-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-099-05" ;
    dcterms:issued "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX II" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2018-5380; CVE-2018-5381; CVE-2018-5379" ;
    icsa:cweNumber "CWE-125; CWE-415; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-5379,
        cve-res:CVE-2018-5380,
        cve-res:CVE-2018-5381 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-400,
        cwe-res:CWE-415 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens RUGGEDCOM products affected: RUGGEDCOM ROX II: All versions prior to v2.13.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-099-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-099-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-099-06" ;
    dcterms:issued "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update I)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6568" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-6568 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CP, SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KTP700; KTP700F; SIMATIC CP 1616 and CP 1604: All versions SIMATIC CP443-1 (incl. SIPLUS NET variants): All versions SIMATIC CP443-1 Advanced (incl. SIPLUS NET variants): All versions SIMATIC CP443-1 OPC UA (incl. SIPLUS NET variants): All versions SIMATIC CP343-1 Advanced (incl. SIPLUS NET variants): All versions SIMATIC ET 200 SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): All versions prior to v2.1.6 SIMATIC ET 200 SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions prior to v2.7 SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants): All versions prior to v15.1 Upd 4 SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants): All versions prior to v15.1 Upd 4 SIMATIC HMI KTP Mobile Panels KTP400F; KTP900 and KTP900F (incl. SIPLUS variants): All versions prior to v 15.1 Upd 4 SIMATIC IPC DiagMonitor: All versions SIMATIC RF182C: All versions SIMATIC RF185C: All versions prior to v1.10 SIMATIC RF186C: All versions prior to v1.10 SIMATIC RF188C: All versions prior to v1.10 SIMATIC RF600 family: All versions prior to v3.2.1 SIMATIC RF181-EIP: All versions SIMATIC S7-1500 Software Controller: All versions prior to v2.7 SIMATIC Teleservice Adapter IE Advanced: All versions SIMATIC Teleservice Adapter IE Basic: All versions SIMATIC Teleservice Adapter IE Standard: All versions SIMATIC WinAC RTX (F) 2010: All versions prior to SP3 SIMATIC S7-1500 CPU Family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v2.6.1 SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v3.X.16 SIMATIC S7-400 PN/DP v6 and below CPU family (incl. SIPLUS variants): All versions SIMATIC S7-400 PN/DP v7 CPU family (incl. SIPLUS variants): All versions SIMATIC S7-PLCSIM Advanced: All versions prior to v2.0 SP1 UPD1 SIMATIC WinCC Runtime Advanced: All versions prior to v15.1 Upd 4 SIMOCODE pro VPN (incl. SIPLUS variants): All versions prior to v2.1.3. SIMOCODE pro V EIP (incl. SIPLUS variants): All versions prior to 1.1.3 SIMATIC Teleservice Adapter IE Advanced: All versions SIMATIC Teleservice Adapter IE Basic: All versions SIMATIC Teleservice Adapter IE Standard: All versions. SINAMICS S120 v4.6 Control Unit (incl. SIPLUS variants): All versions prior to v5.2 SINAMICS S120 v4.7 Control Unit (incl. SIPLUS variants): All versions SINAMICS S120 v4.7 SP1 Control Unit (incl. SIPLUS variants): All versions prior to v5.2 SINAMICS S120 v4.8 Control Unit (incl. SIPLUS variants): All versions prior to v4.8 HF6 SINAMICS S120 v5.1 Control Unit (incl. SIPLUS variants): All versions SINAMICS S120 v5.1 SP1 Control Unit (incl. SIPLUS variants): All versions prior to v5.1 SP1 HF4 SINAMICS G130 v4.6 Control Unit: All versions prior to v5.2 SINAMICS G130 v4.7 Control Unit: All versions prior to v5.2 SINAMICS G130 v4.7 SP1 Control Unit: All versions prior to v5.2 SINAMICS G130 v4.8 Control Unit: All versions prior to v4.8 HF6 SINAMICS G130 v5.1 Control Unit: All versions SINAMICS G130 v5.1 SP1 Control Unit: All versions prior to v5.1 SP1 HF4 SINAMICS G150 v4.6 Control Unit: All versions prior to v5.2 SINAMICS G150 v4.7 Control Unit: All versions SINAMICS G150 v4.7 SP1 Control Unit: All versions prior to v5.2 SINAMICS G150 v4.8 Control Unit: All versions prior to v4.8 HF6 SINAMICS G150 v5.1 Control Unit: All versions SINAMICS G150 v5.1 SP1 Control Unit: All versions prior to v5.1 SP1 HF4 SINAMICS S150 v4.6 Control Unit: All versions prior to v5.2 SINAMICS S150 v4.7 Control Unit: All versions SINAMICS S150 v4.7 SP1 Control Unit: All versions prior to v5.2 SINAMICS S150 v4.8 Control Unit: All versions prior to v4.8 HF6 SINAMICS S150 v5.1 Control Unit: All versions SINAMICS S150 v5.1 SP1 Control Unit: All versions prior to v5.1 SP1 HF4 SINAMICS S210 v5.1 Control Unit: All versions SINAMICS S210 v5.1 SP1 Control Unit: All versions SITOP Manager: All versions prior to v1.1 SITOP UPS1600 (incl. SIPLUS variants): All versions prior to v2.3 RFID 181EIP: All versions SITOP PSU8600: All versions prior to v1.5 TIM 1531 IRC (incl. SIPLUS NET variants): All versions prior to v2 SIMATIC IPC DiagMonitor: All versions prior to v5.1.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-099-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-106-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-106-01" ;
    dcterms:issued "2019-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation CNCSoft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10947; CVE-2019-10949; CVE-2019-10951" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-10947,
        cve-res:CVE-2019-10949,
        cve-res:CVE-2019-10951 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Industrial Automation CNCSoft affected: CNCSoft ScreenEditor Version 1.00.88 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-106-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2019 .

icsa-res:ICSA-19-106-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-106-02" ;
    dcterms:issued "2019-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO Series 750-88x and 750-87x" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2019-10712" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-10712 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Series 750-88x and 750-87x" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WAGO versions of Series 750-88x and 750-87x - programmable logic controllers affected: Series 750-88x750-330 firmware versions prior to FW14750-352 firmware versions prior to FW14 750-829 firmware versions prior to FW14750-831 firmware versions prior to FW14750-852 firmware versions prior to FW14 750-880 firmware versions prior to FW14 750-881 firmware versions prior to FW14 750-882 firmware versions prior to FW14 750-884 firmware versions prior to FW14 750-885 firmware versions prior to FW14 750-889 firmware versions prior to FW14 Series 750-87x750-830 firmware versions prior to FW06 750-849 firmware versions prior to FW08 750-871 firmware versions prior to FW11 750-872 firmware versions prior to FW07 750-873 firmware versions prior to FW07." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-106-02" ;
    icsa:vendor "WAGO" ;
    icsa:year 2019 .

icsa-res:ICSA-19-106-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-106-03" ;
    dcterms:issued "2019-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "PLC Cycle Time Influences (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Dams; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10953" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-10953 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC Cycle Time Influences" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WAGO 750-889 Controller KNX IP | WAGO 750-8100 Controller PFC100 | WAGO 750-880 Controller ETH | WAGO 750-831 Controller BACnet/IP; Schneider Modicon M221; Siemens 6ES7211-1AE40-0XB0 Simatic S7-1211 | Siemens 6ES7314-6EH04-0AB0 Simatic S7-314 | Siemens 6ED1052-1CC01-0BA8 Logo! 8; ABB 1SAP120600R0071 PM554-TP-ETH; Phoenix Contact 2700974 ILC 151 ETH | Phoenix Contact ILC 191 ETH 2TX" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-106-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2019 .

icsa-res:ICSA-19-113-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-113-01" ;
    dcterms:issued "2019-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix 1400 and CompactLogix 5370 Controllers" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10955" ;
    icsa:cweNumber "CWE-601" ;
    icsa:hasCVE cve-res:CVE-2019-10955 ;
    icsa:hasCWE cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix 1400 and CompactLogix 5370 Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "v15.002 and earlier | MicroLogix 1100 Controllers v14.00 and earlier | CompactLogix 5370 L1 controllers v30.014 and earlier | CompactLogix 5370 L2 controllers v30.014 and earlier | CompactLogix 5370 L3 controllers (includes CompactLogix GuardLogix controllers) v30.014 and earlier.; Rockwell Automation products affected: MicroLogix 1400 ControllersSeries A - All Versions Series B" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-113-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-120-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-120-01" ;
    dcterms:issued "2019-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation CompactLogix 5370 (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10954; CVE-2019-10952" ;
    icsa:cweNumber "CWE-121; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-10952,
        cve-res:CVE-2019-10954 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CompactLogix 5370" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "--------- Begin Update A Part 1 of 1 --------- Rockwell Automation reports these vulnerabilities affect the following CompactLogix 5370 programmable automation controllers: CompactLogix 5370 L1 controllers: versions 20 - 30 and earlier CompactLogix 5370 L2 controllers: versions 20 - 30 and earlier CompactLogix 5370 L3 controllers: versions 20 - 30 and earlier Compact GuardLogix 5370 controllers: versions 20 - 30 and earlier Armor Compact GuardLogix 5370 controllers: versions 20 - 30 and earlier --------- End Update A Part 1 of 1 -------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-120-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-122-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-122-01" ;
    dcterms:issued "2019-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Orpak SiteOmat" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Israel" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2017-14854" ;
    icsa:cweNumber "CWE-94; CWE-89; CWE-79; CWE-121; CWE-311; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2017-14854 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-311,
        cwe-res:CWE-79,
        cwe-res:CWE-798,
        cwe-res:CWE-89,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiteOmat" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SiteOmat - software for fuel station management versions affected: SiteOmat versions prior to 6.4.414.122 only are vulnerable to stack-based buffer overflow CVE-2017-14854 and Code Injection CVE-2017-14853SiteOmat Versions prior to 6.4.414.084." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-122-01" ;
    icsa:vendor "Orpak" ;
    icsa:year 2019 .

icsa-res:ICSA-19-122-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-122-02" ;
    dcterms:issued "2019-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Communicator" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-6566; CVE-2019-6548; CVE-2019-6564; CVE-2019-6544; CVE-2019-6546" ;
    icsa:cweNumber "CWE-284; CWE-427; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-6544,
        cve-res:CVE-2019-6546,
        cve-res:CVE-2019-6548,
        cve-res:CVE-2019-6564,
        cve-res:CVE-2019-6566 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-427,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Communicator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE Communicator components - all versions prior to 4.0.517 are affected: Communicator Installer | Communicator Application | Communicator PostGreSQL | Communicator MeterManager | Communicator WISE Uninstaller." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-122-02" ;
    icsa:vendor "GE" ;
    icsa:year 2019 .

icsa-res:ICSA-19-122-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-122-03" ;
    dcterms:issued "2019-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sierra Wireless AirLink ALEOS (Update B)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Emergency Services; Energy; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-4069; CVE-2018-4067; CVE-2018-4062; CVE-2018-4061; CVE-2018-4066; CVE-2018-4063; CVE-2018-4065" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-200; CWE-79; CWE-78; CWE-311; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2018-4061,
        cve-res:CVE-2018-4062,
        cve-res:CVE-2018-4063,
        cve-res:CVE-2018-4065,
        cve-res:CVE-2018-4066,
        cve-res:CVE-2018-4067,
        cve-res:CVE-2018-4069 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-311,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AirLink ALEOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GX400; LX40; RV50; MP70E; AirLink ALEOS versions and products: LS300; RV50X; GX440; and LX60: All versions prior to 4.12; and ES440: All versions prior to 4.4.9. GX450 and ES450: All versions prior to 4.9.4 MP70" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-122-03" ;
    icsa:vendor "Sierra Wireless" ;
    icsa:year 2019 .

icsa-res:ICSA-19-134-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-134-01" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron Network Configurator for DeviceNet (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10971" ;
    icsa:cweNumber "CWE-426" ;
    icsa:hasCVE cve-res:CVE-2019-10971 ;
    icsa:hasCWE cwe-res:CWE-426 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Network Configurator for DeviceNet" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Network Configurator for DeviceNet Safety 3.41 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-134-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2019 .

icsa-res:ICSA-19-134-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-134-02" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC and SIMATIC PCS 7" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10922" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2019-10922 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC and SIMATIC PCS 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemen SIMATIC prodcts affected: SIMATIC PCS 7 v8.0 and earlier | SIMATIC PCS 7 v8.1 and newer (if \"Encrypted Communication\" is disabled) | SIMATIC WinCC v7.2 and earlier | SIMATIC WinCC v7.3 and newer (if \"Encrypted Communication\" is disabled)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-134-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-134-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-134-03" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! Soft Comfort (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2019-10924" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2019-10924 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! Soft Comfort" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "LOGO! Soft Comfort: All versions prior to v8.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-134-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-134-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-134-04" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! 8 BM (Update A)" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2019-10919; CVE-2019-10921; CVE-2019-10920" ;
    icsa:cweNumber "CWE-306; CWE-231; CWE-256" ;
    icsa:hasCVE cve-res:CVE-2019-10919,
        cve-res:CVE-2019-10920,
        cve-res:CVE-2019-10921 ;
    icsa:hasCWE cwe-res:CWE-231,
        cwe-res:CWE-256,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO!8 BM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens LOGO! 8 BM: All versions prior to 8.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-134-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-134-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-134-05" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS PERFECT HARMONY GH180 Drives NXG I and NXG II" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6578" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-6578 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS PERFECT HARMONY GH180 Drives NXG I and NXG II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "6SR3. . . -; MLFBs: 6SR2. . . -; 6SR4. . . -: All versions with option G28SINAMICS PERFECT HARMONY GH180 with NXG II control; Siemens SINAMICS PERFECT HARMONY products affected: SINAMICS PERFECT HARMONY GH180 with NXG I control; 6SR4. . . -: All versions with option G28." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-134-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-134-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-134-06" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS PERFECT HARMONY GH180 Fieldbus Network" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6574" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-6574 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS PERFECT HARMONY GH180 Fieldbus Network" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "G22; 6SR3. . . -; G31; G43 or G46.; MLFBs: 6SR2. . . -; G32; Siemens SINAMICS PERFECT HARMONY products affected: SINAMICS PERFECT HARMONY GH180 with NXG I control; 6SR4. . . -: All versions with option G21; G38; G28; G26; G43 or G46SINAMICS PERFECT HARMONY GH180 with NXG II control; G23" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-134-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-134-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-134-07" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-7083; CVE-2018-7082; CVE-2018-7064; CVE-2018-16417; CVE-2018-7084" ;
    icsa:cweNumber "CWE-200; CWE-79; CWE-77; CWE-20; CWE-7" ;
    icsa:hasCVE cve-res:CVE-2018-16417,
        cve-res:CVE-2018-7064,
        cve-res:CVE-2018-7082,
        cve-res:CVE-2018-7083,
        cve-res:CVE-2018-7084 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-7,
        cwe-res:CWE-77,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SCALANCE W1750D - direct access point versions affected: W1750D: All versions prior to 8.4.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-134-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-134-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-134-08" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC PCS7, WinCC, TIA Portal (Update D)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10916; CVE-2019-10918; CVE-2019-10917" ;
    icsa:cweNumber "CWE-749; CWE-89; CWE-248" ;
    icsa:hasCVE cve-res:CVE-2019-10916,
        cve-res:CVE-2019-10917,
        cve-res:CVE-2019-10918 ;
    icsa:hasCWE cwe-res:CWE-248,
        cwe-res:CWE-749,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS7, WinCC, TIA Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SIMATIC products affected: SIMATIC WinCC (TIA Portal v14): all versions prior to v14 SP1 Upd 9 SIMATIC WinCC (TIA Portal v15): all versions prior to v15.1 Upd 3 SIMATIC WinCC Runtime Professional v14: all versions prior to v14.1 Upd 8 SIMATIC WinCC Runtime Professional v15: all versions prior to v15.1 Upd 3. SIMATIC PCS7 v8.0 and earlier: all versions SIMATIC PCS7 v8.1: all versions prior to v8.1 with WinCC v7.3 Upd 19 SIMATIC PCS7 v8.2: all versions prior to v8.2 SP1 with WinCC v7.4 SP1 Upd 11 SIMATIC PCS7 v9.0: all versions prior to v9.0 SP2 with WinCC v7.4 SP1 Upd 11 SIMATIC WinCC (TIA Portal) v13: all versions SIMATIC WinCC Runtime Professional v13: all versions SIMATIC WinCC v7.2 and earlier: all versions SIMATIC WinCC v7.3: all versions prior to v7.3 Upd 19 SIMATIC WinCC v7.4: all versions prior to v7.4 with WinCC v7.4 SP1 Upd 11 SIMATIC WinCC v7.5: all versions prior to v7.5 Upd 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-134-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-134-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-134-09" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Panels and WinCC (TIA Portal)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6572; CVE-2019-6577; CVE-2019-6576" ;
    icsa:cweNumber "CWE-798; CWE-79; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2019-6572,
        cve-res:CVE-2019-6576,
        cve-res:CVE-2019-6577 ;
    icsa:hasCWE cwe-res:CWE-522,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Panels and WinCC (TIA Portal)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KTP900; KTP700F; SIMATIC HMI Comfort Panels; 7\" & 15\"; all versions prior to v15.1 Update 1SIMATIC HMI KTP Mobile Panels KTP400F; KTP900F; all versions prior to v15.1 Update 1SIMATIC WinCC Runtime Advanced; all versions prior to v15.1 Update 1SIMATIC WinCC Runtime Professional; all versions prior to v15.1 Update 1SIMATIC WinCC (TIA Portal); all versions prior to v15.1 Update 1SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel); all versions.; KTP700; 4\" - 22\"; all versions prior to v15.1 Update 1SIMATIC HMI Comfort Outdoor Panels" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-134-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-136-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-136-01" ;
    dcterms:issued "2019-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Controllers" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-6821" ;
    icsa:cweNumber "CWE-330" ;
    icsa:hasCVE cve-res:CVE-2019-6821 ;
    icsa:hasCWE cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Modicon products affected: Modicon M580 firmware versions prior to Version 2.30Modicon M340 firmware | all versionsModicon Premium | all firmware versions | Modicon Quantum | all firmware versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-136-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-136-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-136-02" ;
    dcterms:issued "2019-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Alpha7 PC Loader" ;
    icsa:CVSSScore "3.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10975" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-10975 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alpha7 PC Loader" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Alpha7 PC Loader Versions 1.1 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-136-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-141-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-141-01" ;
    dcterms:issued "2019-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Computrols CBAS Web" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-10846; CVE-2019-10848; CVE-2019-10855; CVE-2019-10854; CVE-2019-10851; CVE-2019-10847; CVE-2019-10849; CVE-2019-10852; CVE-2019-10853" ;
    icsa:cweNumber "CWE-540; CWE-352; CWE-89; CWE-79; CWE-77; CWE-321; CWE-326; CWE-288; CWE-203" ;
    icsa:hasCVE cve-res:CVE-2019-10846,
        cve-res:CVE-2019-10847,
        cve-res:CVE-2019-10848,
        cve-res:CVE-2019-10849,
        cve-res:CVE-2019-10851,
        cve-res:CVE-2019-10852,
        cve-res:CVE-2019-10853,
        cve-res:CVE-2019-10854,
        cve-res:CVE-2019-10855 ;
    icsa:hasCWE cwe-res:CWE-203,
        cwe-res:CWE-288,
        cwe-res:CWE-321,
        cwe-res:CWE-326,
        cwe-res:CWE-352,
        cwe-res:CWE-540,
        cwe-res:CWE-77,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CBAS Web" ;
    icsa:productDistribution "North America" ;
    icsa:productsAffected "All versions of CBAS Web - a Web Building Management System (BMS) - prior to the following versions are affected: 19.0.1 | 18.0.1 | 15.0.1 | 14.0.1 | 8.0.7 | 7.2.1-Beta | 6.9.2 | 4.8.2 | 3.15.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-141-01" ;
    icsa:vendor "Computrols" ;
    icsa:year 2019 .

icsa-res:ICSA-19-141-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-141-02" ;
    dcterms:issued "2019-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-Q Series Ethernet Module" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10977" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-10977 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-Q Series Ethernet Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MELSEC-Q series Ethernet module affected: QJ71E71-100 serial number 20121 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-141-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-148-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-148-01" ;
    dcterms:issued "2019-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson Ovation OCR400 Controller" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10967; CVE-2019-10965" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-10965,
        cve-res:CVE-2019-10967 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ovation OCR400 Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Emerson Ovation OCR400 - process control devices - affected versions: Emerson Ovation OCR400 Controller running Ovation Version 3.3.1 or earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-148-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2019 .

icsa-res:ICSA-19-150-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-150-01" ;
    dcterms:issued "2019-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Vijeo Citect and CitectSCADA" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-10981" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2019-10981 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vijeo Citect and CitectSCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Vijeo Citect and CitectSCADA - Supervisory Control and Data Acquistions (SCADA) software versions affected: Vijeo Citect 7.30 and 7.40 CitectSCADA 7.30 and 7.40." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-150-01" ;
    icsa:vendor "AVEVA, Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-155-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-155-01" ;
    dcterms:issued "2019-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT PLCNext AXC F 2152" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-10998; CVE-2018-7559; CVE-2019-10997" ;
    icsa:cweNumber "CWE-284; CWE-300; CWE-320" ;
    icsa:hasCVE cve-res:CVE-2018-7559,
        cve-res:CVE-2019-10997,
        cve-res:CVE-2019-10998 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-300,
        cwe-res:CWE-320 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLCNext AXC F 2152" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Phoenix Contact firmware versions 1.x for PLCNext AXC F2152 products affected: AXC F 2152: article number 2404267AXC F 2152: article number 1046568 (Starterkit)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-155-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2019 .

icsa-res:ICSA-19-155-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-155-02" ;
    dcterms:issued "2019-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT FL NAT SMx" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2019-9744" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2019-9744 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FL NAT SMx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Phoenix Contact FL NAT SMx industrial Ethernet switches versions affected: FL NAT SMN 8TX-M (2702443)FL NAT SMN 8TX-M-DMG (2989352)FL NAT SMN 8TX (2989365)FL NAT SMCS 8TX (2989378)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-155-02" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2019 .

icsa-res:ICSA-19-155-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-155-03" ;
    dcterms:issued "2019-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Geutebruck G-Cam and G-Code" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Financial Services; Government Facilities; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2019-10958; CVE-2019-10957; CVE-2019-10956" ;
    icsa:cweNumber "CWE-79; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2019-10956,
        cve-res:CVE-2019-10957,
        cve-res:CVE-2019-10958 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "G-Cam and G-Code" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Geutebruck Encoder and E2 Series Camera versions and models affected: G-Code: All versions 1.12.0.25 and priorEEC-2xxxG-Cam: All versions 1.12.0.25 and priorEBC-21xxEFD-22xxETHC-22xxEWPC-22xx." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-155-03" ;
    icsa:vendor "Geutebruck" ;
    icsa:year 2019 .

icsa-res:ICSA-19-157-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-157-01" ;
    dcterms:issued "2019-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Optergy Proton Enterprise Building Management System" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2019-7279; CVE-2019-7276; CVE-2019-7272; CVE-2019-7274; CVE-2019-7273; CVE-2019-7275; CVE-2019-7277; CVE-2019-7278" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-912; CWE-200; CWE-798; CWE-749; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2019-7272,
        cve-res:CVE-2019-7273,
        cve-res:CVE-2019-7274,
        cve-res:CVE-2019-7275,
        cve-res:CVE-2019-7276,
        cve-res:CVE-2019-7277,
        cve-res:CVE-2019-7278,
        cve-res:CVE-2019-7279 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-601,
        cwe-res:CWE-749,
        cwe-res:CWE-798,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proton Enterprise Building Management System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proton/Enterprise Building Management Systems versions affected: Versions 2.3.0a and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-157-01" ;
    icsa:vendor "Optergy" ;
    icsa:year 2019 .

icsa-res:ICSA-19-157-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-157-02" ;
    dcterms:issued "2019-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Panasonic Control FPWIN Pro" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2019-6532; CVE-2019-6530" ;
    icsa:cweNumber "CWE-122; CWE-843" ;
    icsa:hasCVE cve-res:CVE-2019-6530,
        cve-res:CVE-2019-6532 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Control FPWIN Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FPWIN Pro - PLC programming software versions affected: Version 7.3.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-157-02" ;
    icsa:vendor "Panasonic" ;
    icsa:year 2019 .

icsa-res:ICSA-19-162-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-162-01" ;
    dcterms:issued "2019-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance VMS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-6580; CVE-2019-6582; CVE-2019-6581" ;
    icsa:cweNumber "CWE-286; CWE-862; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2019-6580,
        cve-res:CVE-2019-6581,
        cve-res:CVE-2019-6582 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-286,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance VMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens Siveillance VMS versions affected: 2017 R2 all versions prior to v11.2a2018 R1 all versions prior to v12.1a2018 R2 all versions prior to v12.2a2018 R3 all versions prior to v12.3a2019 R1 all versions prior to v13.1a." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-162-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-162-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-162-02" ;
    dcterms:issued "2019-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Ident MV440 Family (Update A)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10926; CVE-2019-10925" ;
    icsa:cweNumber "CWE-269; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2019-10925,
        cve-res:CVE-2019-10926 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Ident MV420 and MV440 Families" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC MV440 family: All versions prior to v7.0.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-162-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-162-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-162-03" ;
    dcterms:issued "2019-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO!8 Devices" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2019-6584; CVE-2019-6571" ;
    icsa:cweNumber "CWE-119; CWE-384" ;
    icsa:hasCVE cve-res:CVE-2019-6571,
        cve-res:CVE-2019-6584 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-384 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO!8 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIEMENS LOGO!8 devices - used for basic small-scale automation tasks - versions affected: 6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware v1.80.xx and v1.81.xxSIEMENS LOGO!8: 6ED1052-xyy08-0BA0 FS:01 / Firmware version prior to v1.82.02." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-162-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-162-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-162-04" ;
    dcterms:issued "2019-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X (Update B)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6567" ;
    icsa:cweNumber "CWE-257" ;
    icsa:hasCVE cve-res:CVE-2019-6567 ;
    icsa:hasCWE cwe-res:CWE-257 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SCALANCE X-200 switch family (including SIPLUS NET variants): all versions prior to v5.2.4. SCALANCE X-200IRT switch family (including SIPLUS NET variants): all versions prior to v5.5.0. SCALANCE X-300 switch family (including SIPLUS NET variants): all versions prior to v4.1.3 SCALANCE X-414-3E: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-162-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-164-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-164-01" ;
    dcterms:issued "2019-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision Enterprise System Manager" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-7588" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2019-7588 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision Enterprise System Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "exacqVision ESM v5.12.2 and prior. All Microsoft Windows operating systems are affected with the exception of Microsoft Windows Server." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-164-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2019 .

icsa-res:ICSA-19-164-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-164-02" ;
    dcterms:issued "2019-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO Industrial Managed Switches 852-303, 852-1305, and 852-1505" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-12550; CVE-2019-12549" ;
    icsa:cweNumber "CWE-798; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2019-12549,
        cve-res:CVE-2019-12550 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Managed Switches 852-303, 852-1305, and 852-1505" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AGO industrial managed switches versions affected: 852-303: All versions prior to v1.2.2.S0852-1305: All versions prior to v1.1.6.S0852-1505: All versions prior to v1.1.5.S0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-164-02" ;
    icsa:vendor "WAGO" ;
    icsa:year 2019 .

icsa-res:ICSA-19-171-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-171-01" ;
    dcterms:issued "2019-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT Automation Worx Software Suite" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-12869; CVE-2019-12870; CVE-2019-12871" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2019-12869,
        cve-res:CVE-2019-12870,
        cve-res:CVE-2019-12871 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation Worx Software Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Components of Automation Worx Software Suite Version 1.86 and earlier affected: PC Worx PC Worx Express Config+." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-171-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2019 .

icsa-res:ICSA-19-178-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-178-01" ;
    dcterms:issued "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB PB610 Panel Builder 600" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-7227; CVE-2019-7225; CVE-2019-7226; CVE-2019-7232; CVE-2019-7230; CVE-2019-7231; CVE-2019-7228" ;
    icsa:cweNumber "CWE-287; CWE-23; CWE-20; CWE-121; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-7225,
        cve-res:CVE-2019-7226,
        cve-res:CVE-2019-7227,
        cve-res:CVE-2019-7228,
        cve-res:CVE-2019-7230,
        cve-res:CVE-2019-7231,
        cve-res:CVE-2019-7232 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-20,
        cwe-res:CWE-23,
        cwe-res:CWE-287,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PB610 Panel Builder 600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions 1.91 \"¦ 2.8.0.367 and prior.; PB610 Panel Builder 600 - engineering tool for designing HMI applications and the runtime for control panels - used for the operations of automation systems affected: PB610 Panel Builder 600 - order code: 1SAP500900R0101" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-178-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2019 .

icsa-res:ICSA-19-178-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-178-02" ;
    dcterms:issued "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB CP651 HMI" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10995" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-10995 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CP651 HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "revision index B1 with BSP UN30 v1.76 and prior CP661-WEB; order code: 1SAP551200R0001; order code: 1SAP576100R0001; ABB CP651 HMI products affected: CP651; revision index B1 with BSP UN30 v1.76 and prior CP651-WEB; order code: 1SAP565100R0001; revision index A0 with BSP UN30 v1.76 and prior CP661; revision index A0 with BSP UN30 v1.76 and prior CP676; revision index B1 with BSP UN30 v1.76 and prior CP665-WEB; order code: 1SAP561100R0001; order code: 1SAP561200R0001; revision index A0 with BSP UN30 v1.76 and prior.; order code: 1SAP576200R0001; revision index B1 with BSP UN30 v1.76 and prior CP676-WEB; order code: 1SAP565200R0001; order code: 1SAP551100R0001; revision index A0 with BSP UN30 v1.76 and prior CP665" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-178-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2019 .

icsa-res:ICSA-19-178-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-178-03" ;
    dcterms:issued "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB CP635 HMI" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-7225" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-7225 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CP635 HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "revision index G1 with BSP UN31 v1.76 and prior CP630; revision index G1 with BSP UN31 v1.76 and prior CP635-B; order code: 1SAP535100R2001; revision index G1 with BSP UN31 v1.76 and prior CP635-WEB; revision index G1 with BSP UN31 v1.76 and prior.; order code: 1SAP520100R4001; revision index G1 with BSP UN31 v1.76 and prior CP630-WEB; order code: 1SAP530200R0001; order code: 1SAP535200R0001; revision index G1 with BSP UN31 v1.76 and prior CP620; order code: 1SAP530100R0001; order code: 1SAP520200R0001; revision index G1 with BSP UN31 v1.76 and prior CP620-WEB; order code: 1SAP520100R0001; order code: 1SAP535100R5001; order code: 1SAP535100R0001; ABB CP635 HMI products affected: CP620; revision index G1 with BSP UN31 v1.76 and prior CP635" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-178-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2019 .

icsa-res:ICSA-19-178-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-178-04" ;
    dcterms:issued "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "SICK MSC800" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10979" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-10979 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MSC800" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MSC800 - programmable logic controller affected: all versions prior to Version 4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-178-04" ;
    icsa:vendor "SICK" ;
    icsa:year 2019 .

icsa-res:ICSA-19-178-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-178-05" ;
    dcterms:issued "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10987; CVE-2019-10985; CVE-2019-10989; CVE-2019-10983; CVE-2019-10993; CVE-2019-10991" ;
    icsa:cweNumber "CWE-22; CWE-822; CWE-122; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-10983,
        cve-res:CVE-2019-10985,
        cve-res:CVE-2019-10987,
        cve-res:CVE-2019-10989,
        cve-res:CVE-2019-10991,
        cve-res:CVE-2019-10993 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-22,
        cwe-res:CWE-787,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "WebAccess/SCADA Versions 8.3.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-178-05" ;
    icsa:vendor "Advantech" ;
    icsa:year 2019 .

icsa-res:ICSA-19-183-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-183-01" ;
    dcterms:issued "2019-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Controllers" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-6819" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2019-6819 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of Modicon Controllers - PLC and PAC controller for industrial control systems affected: Modicon M340: Firmware versions prior to v3.01 Modicon M580: Firmware versions prior to v2.80 Modicon Quantum: All firmware versions Modicon Premium: All firmware versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-183-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-183-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-183-02" ;
    dcterms:issued "2019-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Quest KACE Systems Management Appliance" ;
    icsa:CVSSScore "2.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2019-10973" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-10973 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KACE Systems Management Appliance" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KACE System Management Appliance (SMA) affected: All versions 8.0.x KACE SMA: All versions 8.1.x KACE SMA: All versions 9.0.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-183-02" ;
    icsa:vendor "Quest" ;
    icsa:year 2019 .

icsa-res:ICSA-19-190-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-190-01" ;
    dcterms:issued "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV Distributed Control System" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-11691" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2018-11691 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV Distributed Control System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of DeltaV DCS - software management platform include the Smart Switch Command Center: 11.3.x 12.3.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-190-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2019 .

icsa-res:ICSA-19-190-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-190-02" ;
    dcterms:issued "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PanelView 5510" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10970" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2019-10970 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PanelView 5510" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "v5.002; or later.; All versions manufactured before March 13; 2019; that have never been updated to v4.003" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-190-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-190-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-190-03" ;
    dcterms:issued "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Zelio Soft 2" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-6822" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2019-6822 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Zelio Soft 2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Zelio Soft 2 - program platform versions affected: Versions 5.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-190-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-190-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-190-04" ;
    dcterms:issued "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power (Update A)" ;
    icsa:CVSSScore "4.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-10933" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2019-10933 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Spectrum Power" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of Siemens Spectrum Power are affected: Spectrum Power 3 (Corporate User Interface): versions v3.11 and prior Spectrum Power 4 (Corporate User Interface): version v4.75. Spectrum Power 5 (Corporate User Interface): all versions prior to v5.50 and prior. Spectrum Power 7 (Corporate User Interface): versions v2.20 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-190-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-190-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-190-05" ;
    dcterms:issued "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5 and DIGSI 5 (Update C)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-10930; CVE-2019-10931" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-10930,
        cve-res:CVE-2019-10931 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5 and DIGSI 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIPROTEC 5 (All versions prior to v7.90) with CPU variants CP300 and CP100 and the respective Ethernet communication modules listed below: 6MD85 6MD86 6MD89 7UM85 7SA87 7SD87 7SL87 7VK87 7SA82 7SA86 7SD82 7SD86 7SL82 7SL86 7SJ86 7SK82 7SK85 7SJ82 7SJ85 7UT82 7UT85 7UT86 7UT87 7VE85 All types not listed above All versions. SIPROTEC 5: All versions prior to v8.01 7SS85 7KE85. SIPROTEC 5 with CPU variants CP200 and the respective Ethernet communication modules CVE-2019-10931: All versions prior to v7.59 CVE-2019-10930: All Versions DIGSI 5 All Versions prior to v7.90." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-190-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-192-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-192-01" ;
    dcterms:issued "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation CNCSoft ScreenEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10992; CVE-2019-10982" ;
    icsa:cweNumber "CWE-122; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-10982,
        cve-res:CVE-2019-10992 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft ScreenEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Electronics - CNCSoft ScreenEditor versions affected: Versions 1.00.89 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-192-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2019 .

icsa-res:ICSA-19-192-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-192-02" ;
    dcterms:issued "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC and PCS7 (Update C)" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10935" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2019-10935 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC and PCS7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC PCS 7 v8.0: all versions SIMATIC PCS 7 v8.1: all versions prior to v8.1 with WinCC v7.3 Upd 19 SIMATIC PCS 7 v8.2: all versions prior to v8.2 SP1 with WinCC v7.4 SP1 Upd 11 SIMATIC PCS 7 v9.0: all versions prior to v9.0 SP2 with WinCC v7.4 SP1 Upd 11 SIMATIC WinCC Professional (TIA Portal v13): all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-192-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-192-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-192-03" ;
    dcterms:issued "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Administrator (TIA Portal)" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10915" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2019-10915 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIA Administrator (TIA Portal)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "TIA Administrator versions affected: All versions prior to v1.0 SP1 Upd1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-192-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-192-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-192-04" ;
    dcterms:issued "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RF6XXR" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Transportation" ;
    icsa:cveNumber "CVE-2011-3389; CVE-2013-0169; CVE-2016-6329" ;
    icsa:cweNumber "CWE-20; CWE-310" ;
    icsa:hasCVE cve-res:CVE-2011-3389,
        cve-res:CVE-2013-0169,
        cve-res:CVE-2016-6329 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-310 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RF6XXR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions prior to 3.2.1 of the following SIMATIC RF6XXR UHF RFID products are affected: RF615R RF68XR." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-192-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-192-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-192-05" ;
    dcterms:issued "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Vijeo Citect and Citect SCADA Floating License Manager" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-20034; CVE-2018-20032; CVE-2018-20031; CVE-2018-20033" ;
    icsa:cweNumber "CWE-119; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-20031,
        cve-res:CVE-2018-20032,
        cve-res:CVE-2018-20033,
        cve-res:CVE-2018-20034 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vijeo Citect and Citect SCADA Floating License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Floating License Manager - used in Vijeo Citect and Citect SCADA - versions affected: Floating License Manager Version 2.3.0.0 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-192-05" ;
    icsa:vendor "AVEVA, Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-192-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-192-06" ;
    dcterms:issued "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Interactive Graphical SCADA System" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-6827" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2019-6827 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Interactive Graphical SCADA System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IGSS Version 14 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-192-06" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-192-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-192-07" ;
    dcterms:issued "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Floating License Manager" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-20034; CVE-2018-20032; CVE-2018-20031; CVE-2018-20033" ;
    icsa:cweNumber "CWE-119; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-20031,
        cve-res:CVE-2018-20032,
        cve-res:CVE-2018-20033,
        cve-res:CVE-2018-20034 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Floating License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Floating License Manager Version 2.3.0.0 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-192-07" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-199-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-199-01" ;
    dcterms:issued "2019-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision Server" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-7590" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2019-7590 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "exacqVision server versions affected: Versions 9.6 and 9.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-199-01" ;
    icsa:vendor "Exacq Technologies Inc (Subsidiary of Johnson Controls)" ;
    icsa:year 2019 .

icsa-res:ICSA-19-204-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-204-01" ;
    dcterms:issued "2019-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FR Configurator2" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10972; CVE-2019-10976" ;
    icsa:cweNumber "CWE-611; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-10972,
        cve-res:CVE-2019-10976 ;
    icsa:hasCWE cwe-res:CWE-400,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FR Configurator2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi FR Configurator2 - used for configuring Mitsubishi variable frequency drives versions affected: FR Configurator2 Version 1.16S and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-204-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-204-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-204-02" ;
    dcterms:issued "2019-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "NREL EnergyPlus" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-10974" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-10974 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EnergyPlus" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "EnergyPlus - Energy simulation program version affected: EnergyPlus Versions 8.6.0 and potentially prior releases." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-204-02" ;
    icsa:vendor "National Renewable Energy Laboratory (NREL)" ;
    icsa:year 2019 .

icsa-res:ICSA-19-211-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-211-01" ;
    dcterms:issued "2019-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wind River VxWorks (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-12260; CVE-2019-12263; CVE-2019-12265; CVE-2019-12257; CVE-2019-12256; CVE-2019-12262; CVE-2019-12255; CVE-2019-12264; CVE-2019-12259; CVE-2019-12258; CVE-2019-12261" ;
    icsa:cweNumber "CWE-122; CWE-88; CWE-191; CWE-362; CWE-121; CWE-119; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2019-12255,
        cve-res:CVE-2019-12256,
        cve-res:CVE-2019-12257,
        cve-res:CVE-2019-12258,
        cve-res:CVE-2019-12259,
        cve-res:CVE-2019-12260,
        cve-res:CVE-2019-12261,
        cve-res:CVE-2019-12262,
        cve-res:CVE-2019-12263,
        cve-res:CVE-2019-12264,
        cve-res:CVE-2019-12265 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-191,
        cwe-res:CWE-362,
        cwe-res:CWE-476,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VxWorks" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Vx7 SR540; Vx7 SR610) are affected by one or more of the CVE numbers detailed below. Older; which means that the TCP-related issues must be timed with the target downloading data from the network. VxWorks 653 MCE 3.x may be affected. Contact Wind River customer support (support@windriver.com) for more details. The following VxWorks products are not affected: The latest release of VxWorks; is also technically vulnerable to CVE-2019-12256. The same patches and mitigations apply to VxWorks and the bootrom network stack. However; the bootrom does not listen to TCP-ports; not DHCP. If that is true; is NOT affected by any of these CVEs VxWorks 5.3 through VxWorks 6.4 inclusive are NOT affected. VxWorks Cert versions are NOT affected. VxWorks 653 Versions 2.x and earlier are NOT affected. VxWorks 653 MCE 3.x Cert Edition and later are NOT affected.; then the defects related to those protocols do not apply in practice. Also a successful exploit of the bootrom network stack has a more difficult timing component. In typical applications; End-of-Life versions of VxWorks back to 6.5 are also affected by one or more of the CVE numbers below. All versions of the discontinued product Advanced Networking Technology (ANT) are likely affected by one or more of the CVE numbers below. The VxWorks bootrom network stack leverages the same IPnet source as VxWorks and; as a result; VxWorks 7 SR620; Wind River versions of VxWorks are affected: All versions of VxWorks under CURRENT support (6.9.4.11; the bootrom normally uses statically assigned IP-addresses" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-211-01" ;
    icsa:vendor "Wind River" ;
    icsa:year 2019 .

icsa-res:ICSA-19-211-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-211-02" ;
    dcterms:issued "2019-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Prima Systems FlexAir" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Slovenia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities; Healthcare and Public Health; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2019-7281; CVE-2019-7669; CVE-2019-7280; CVE-2019-7666; CVE-2019-9189; CVE-2019-7672; CVE-2019-7671; CVE-2019-7670; CVE-2019-7667" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-287; CWE-334; CWE-79; CWE-530; CWE-78; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-7280,
        cve-res:CVE-2019-7281,
        cve-res:CVE-2019-7666,
        cve-res:CVE-2019-7667,
        cve-res:CVE-2019-7669,
        cve-res:CVE-2019-7670,
        cve-res:CVE-2019-7671,
        cve-res:CVE-2019-7672,
        cve-res:CVE-2019-9189 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-334,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-530,
        cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FlexAir" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Prima Systems FlexAir - access control platform versions affected: Prima FlexAir Versions 2.3.38 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-211-02" ;
    icsa:vendor "Prima Systems" ;
    icsa:year 2019 .

icsa-res:ICSA-19-213-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-213-01" ;
    dcterms:issued "2019-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess HMI Designer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10961" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2019-10961 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess HMI Designer" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "Advantech WebAccess HMI Designer Version 2.1.9.23 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-213-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2019 .

icsa-res:ICSA-19-213-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-213-02" ;
    dcterms:issued "2019-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric FRENIC Loader" ;
    icsa:CVSSScore "4.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-13512" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-13512 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FRENIC Loader" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: FRENIC Loader 3.5.0.0 and prior.; an AC drive; FRENIC Loader" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-213-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-213-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-213-03" ;
    dcterms:issued "2019-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS V3" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-9012; CVE-2019-9010" ;
    icsa:cweNumber "CWE-283; CWE-789" ;
    icsa:hasCVE cve-res:CVE-2019-9010,
        cve-res:CVE-2019-9012 ;
    icsa:hasCWE cwe-res:CWE-283,
        cwe-res:CWE-789 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS V3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "regardless of the CPU type or operating system: CODESYS Control for BeagleBone CODESYS Control for emPC-A/iMX6 CODESYS Control for IOT2000 CODESYS Control for Linux CODESYS Control for PFC100 CODESYS Control for PFC200 CODESYS Control for Raspberry Pi CODESYS Control V3 Runtime System Toolkit CODESYS Gateway V3 CODESYS V3 Development System.; CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-213-03" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2019 .

icsa-res:ICSA-19-213-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-213-04" ;
    dcterms:issued "2019-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS V3 (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-9013" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2019-9013 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS V3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS Control for BeagleBone CODESYS Control for emPC-A/iMX6 CODESYS Control for IOT2000 CODESYS Control for Linux CODESYS Control for PFC100 CODESYS Control for PFC200 CODESYS Control for Raspberry Pi CODESYS Control RTE V3 CODESYS Control RTE V3 (for Beckhoff CX) CODESYS Control Win V3 (also part of the CODESYS Development System setup) CODESYS V3 Simulation Runtime (part of the CODESYS Development System) CODESYS Control V3 Runtime System Toolkit CODESYS HMI V3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-213-04" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2019 .

icsa-res:ICSA-19-213-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-213-05" ;
    dcterms:issued "2019-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena Simulation Software (Update B)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13527; CVE-2019-13519; CVE-2019-13521; CVE-2019-13511; CVE-2019-13510" ;
    icsa:cweNumber "CWE-200; CWE-824; CWE-416; CWE-843; CWE-357" ;
    icsa:hasCVE cve-res:CVE-2019-13510,
        cve-res:CVE-2019-13511,
        cve-res:CVE-2019-13519,
        cve-res:CVE-2019-13521,
        cve-res:CVE-2019-13527 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-357,
        cwe-res:CWE-416,
        cwe-res:CWE-824,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arena Simulation Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Arena Simulation - an event simulationand automation software platform affected: Arena Software for Manufacturing; Versions 16.00.00 and earlier.; Cat. 9502-Ax" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-213-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-213-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-213-06" ;
    dcterms:issued "2019-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS LAquis SCADA LQS File Parsing" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10994; CVE-2019-10980" ;
    icsa:cweNumber "CWE-843; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-10980,
        cve-res:CVE-2019-10994 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA LQS File Parsing" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "Laquis SCADA industrial automation software version affected: SCADA 4.3.1.71." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-213-06" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2019 .

icsa-res:ICSA-19-225-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-225-01" ;
    dcterms:issued "2019-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation DOPSoft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13513; CVE-2019-13514" ;
    icsa:cweNumber "CWE-416; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-13513,
        cve-res:CVE-2019-13514 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DOPSoft - Human Machine Interface editing software versions affected: Version 4.00.06.15 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-225-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2019 .

icsa-res:ICSA-19-225-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-225-02" ;
    dcterms:issued "2019-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Web API" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Government Facilities; Healthcare and Public Health; Information Technology; Metals and Mining; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-13515; CVE-2019-13516" ;
    icsa:cweNumber "CWE-532; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2019-13515,
        cve-res:CVE-2019-13516 ;
    icsa:hasCWE cwe-res:CWE-532,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Web API" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a RESTful service access layer; are affected: PI Web API 2018 and prior.; OSIsoft PI Web API" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-225-02" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2019 .

icsa-res:ICSA-19-225-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-225-03" ;
    dcterms:issued "2019-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X Switches (Update C)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2019-10942" ;
    icsa:cweNumber "CWE-410" ;
    icsa:hasCVE cve-res:CVE-2019-10942 ;
    icsa:hasCWE cwe-res:CWE-410 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCALANCE X switches are affected: SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2): All versions SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2): All versions SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3): All versions SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3): All versions SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3): All versions; SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): All versions prior to 5.5.0 SCALANCE X-200RNA: All versions.; SCALANCE X-200 switch family (incl. SIPLUS NET variants): All versions SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): All versions prior to 5.5.0. SCALANCE X-200RNA: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-225-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-227-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-227-01" ;
    dcterms:issued "2019-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-7594; CVE-2019-7593" ;
    icsa:cweNumber "CWE-323; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2019-7593,
        cve-res:CVE-2019-7594 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-323 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Metasys building automation system versions affected: versions prior to 9.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-227-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2019 .

icsa-res:ICSA-19-227-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-227-02" ;
    dcterms:issued "2019-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Alpha5 Smart Loader" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13520" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-13520 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alpha5 Smart Loader" ;
    icsa:productDistribution "Europe, Asia" ;
    icsa:productsAffected "Alpha5 Smart Loader: All versions prior to 4.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-227-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-227-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-227-03" ;
    dcterms:issued "2019-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE Products (Update A)" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10928; CVE-2019-10927" ;
    icsa:cweNumber "CWE-710" ;
    icsa:hasCVE cve-res:CVE-2019-10927,
        cve-res:CVE-2019-10928 ;
    icsa:hasCWE cwe-res:CWE-710 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SCALANCE SC-600: v2.0 SCALANCE XB-200: v4.1 (only affected by CVE-2019-10927) SCALANCE XC-200: v4.1 (only affected by CVE-2019-10927) SCALANCE XF-200BA: v4.1 (only affected by CVE-2019-10927) SCALANCE XP-200: v4.1 (only affected by CVE-2019-10927) SCALANCE XR-300WG: v4.1 (only affected by CVE-2019-10927)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-227-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-227-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-227-04" ;
    dcterms:issued "2019-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS (Update C)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-6568" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-6568 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SINAMICS GH150 v4.7 (Control Unit): All versions SINAMICS GH150 v4.8 (Control Unit): All versions prior to v4.8 SP2 HF6 SINAMICS GL150 v4.7 (Control Unit): All versions SINAMICS GL150 v4.8 (Control Unit): All versions prior to v4.8 SP2 HF7 SINAMICS GM150 v4.7 (Control Unit): All versions SINAMICS GM150 v4.8 (Control Unit): All versions prior to v4.8 SP2 HF9 SINAMICS SL150 v4.7 (Control Unit): All versions prior to v4.7 HF33. SINAMICS SL150 v4.8 (Control Unit): All versions prior to v5.2 SP2. SINAMICS SM120 v4.7 (Control Unit): All versions prior to v4.8 SP2 HF10SINAMICS SM120 v4.8 (Control Unit): All versions prior to v4.8 SP2 HF10 SINAMICS SM150 v4.8 (Control Unit): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-227-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-232-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-232-01" ;
    dcterms:issued "2019-08-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Zebra Industrial Printers" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10960" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2019-10960 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Printers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All Zebra Industrial Printers." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-232-01" ;
    icsa:vendor "Zebra" ;
    icsa:year 2019 .

icsa-res:ICSA-19-239-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-239-01" ;
    dcterms:issued "2019-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Controls enteliBUS Controllers" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2019-9569" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2019-9569 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "enteliBUS Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Controls enteliBUS - industrial control system versions affected: enteliBUS Manager firmware Versions 3.40 R5 build 571848 and prior enteliBUS Manager Touch (eBMGR-TCH) firmware Versions 3.40 R5 build 571848 and prior enteliBUS Controller (eBCON) firmware Versions 3.40 R5 build 571848 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-239-01" ;
    icsa:vendor "Delta Controls" ;
    icsa:year 2019 .

icsa-res:ICSA-19-239-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-239-02" ;
    dcterms:issued "2019-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Datalogic AV7000 Linear Barcode Scanner" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13526" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2019-13526 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AV7000 Linear Barcode Scanner" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AV7000 - linear barcode scanner versions affected: All versions prior to 4.6.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-239-02" ;
    icsa:vendor "Datalogic" ;
    icsa:year 2019 .

icsa-res:ICSA-19-246-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-246-01" ;
    dcterms:issued "2019-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "EZAutomation EZ Touch Editor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-13518" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-13518 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EZ Touch Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EZ Touch Editor - Human-Machine Interface editor version affected: Versions 2.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-246-01" ;
    icsa:vendor "EZAutomation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-246-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-246-02" ;
    dcterms:issued "2019-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "EZAutomation EZ PLC Editor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-13522" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2019-13522 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EZ PLC Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EZ PLC Editor Versions 1.8.41 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-246-02" ;
    icsa:vendor "EZAutomation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-248-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-248-01" ;
    dcterms:issued "2019-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Red Lion Controls Crimson" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10990; CVE-2019-10996; CVE-2019-10984; CVE-2019-10978" ;
    icsa:cweNumber "CWE-119; CWE-416; CWE-321; CWE-465" ;
    icsa:hasCVE cve-res:CVE-2019-10978,
        cve-res:CVE-2019-10984,
        cve-res:CVE-2019-10990,
        cve-res:CVE-2019-10996 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-321,
        cwe-res:CWE-416,
        cwe-res:CWE-465 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Crimson" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Crimson - windows configuration software versions affected: Crimson Versions 3.0 and prior Crimson Versions 3.1 prior to release 3112.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-248-01" ;
    icsa:vendor "Red Lion Controls" ;
    icsa:year 2019 .

icsa-res:ICSA-19-253-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-253-01" ;
    dcterms:issued "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics TPEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13536; CVE-2019-13540; CVE-2019-13544" ;
    icsa:cweNumber "CWE-122; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-13536,
        cve-res:CVE-2019-13540,
        cve-res:CVE-2019-13544 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TPEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of the TPEditor - programming software for Delta text panels affected: TPEditor Versions 1.94 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-253-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2019 .

icsa-res:ICSA-19-253-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-253-02" ;
    dcterms:issued "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINETPLAN" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10915" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2019-10915 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINETPLAN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SINETPLAN - automation systems planner version affected: SINETPLAN Version 2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-253-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-253-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-253-03" ;
    dcterms:issued "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products (Update R)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-11477; CVE-2019-8460; CVE-2019-11479; CVE-2019-11478" ;
    icsa:cweNumber "CWE-190; CWE-1049; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-11477,
        cve-res:CVE-2019-11478,
        cve-res:CVE-2019-11479,
        cve-res:CVE-2019-8460 ;
    icsa:hasCWE cwe-res:CWE-1049,
        cwe-res:CWE-190,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "6AG1518-4AX00-4AC0; incl. SIPLUS variant): All versions prior to v2.8.4 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0): All versions prior to v2.8.4 SIMATIC Teleservice Adapter IE Advanced: All versions SIMATIC Teleservice Adapter IE Basic: All versions SINEMA Remote Connect Server: All versions prior to v2.1 SINUMERIK 808D: All versions prior to v4.92 SINUMERIK 828D: All versions prior to v4.8 SP5 SINUMERIK 840D sl: All versions prior to v4.8 SP5 SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0): All versions prior to v2.1 SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0): All versions prior to v2.1 SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0): All versions prior to v2.2 SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0): All versions prior to v3.2 SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0): All versions prior to v3.2 SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0): All versions prior to v2.1 TIM 3V-IE (incl. SIPLUS NET variants): All versions TIM 3V-IE Advanced (incl. SIPLUS NET variants): All versions TIM 3V-IE DNP3 (incl. SIPLUS NET variants): All versions TIM 4R-IE (incl. SIPLUS NET variants): All versions TIM 4R-IE DNP3 (incl. SIPLUS NET variants): All versions TIM 1531 IRC (incl. SIPLUS NET variants): All versions prior to 2.1; Siemens reports the vulnerabilities affect the following industrial products: CloudConnect 712: All versions prior to 1.1.5 CloudConnect 712: All versions prior to 1.1.5 ROX II: All versions prior to 2.13.3 RUGGEDCOM APE 1404 Linux: All versions prior to Debian 9 Linux Image 2019-12-13 RUGGEDCOM RM1224 (6GK6108-4AM00): All versions prior to v6.2 RUGGEDCOM RX 1400 VPE Debian Linux: All versions prior to Debian 9 Linux Image 2019-12-13 RUGGEDCOM RX 1400 VPE Linux CloudConnect: All versions prior to Debian 9 Linux Image 2019-12-13 13 (only affected by CVE-2019-11479) SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions prior to v6.2 SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions prior to v6.2 SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions prior to v6.2 SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions prior to v6.2 SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions prior to v6.2 SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions prior to v6.2 SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions prior to v6.2 SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions prior to v6.2 SCALANCE M875: All versions SCALANCE M876-3 (6GK5876-3AA02-2BA2): All versions prior to v6.2 SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions prior to v6.2 SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions prior to v6.2 SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions prior to v6.2 SCALANCE S602: All versions prior to v4.1 SCALANCE S612: All versions prior to v4.1 SCALANCE S615 (6GK5615-0AA00-2AA2): All versions prior to v6.2 SCALANCE S623: All versions prior to v4.1 SCALANCE S627-2M: All versions prior to v4.1 SCALANCE SC622-2C (6GK5622-2GS00-2AC2): All versions prior to v2.0.1 SCALANCE SC632-2C (6GK5632-2GS00-2AC2): All versions prior to v2.0.1 SCALANCE SC636-2C (6GK5636-2GS00-2AC2): All versions prior to v2.0.1 SCALANCE SC642-2C (6GK5642-2GS00-2AC2): All versions prior to v2.0.1 SCALANCE SC646-2C (6GK5646-2GS00-2AC2): All versions prior to v2.0.1 SCALANCE W1750D: All versions prior to v8.6.0 SCALANCE W-700 IEEE 802.11n family: All versions prior to v6.4 SCALANCE W-1700 IEEE 802.11ac family: All versions prior to v2.0 SCALANCE WLC711: All versions SCALANCE WLC712: All versions SIMATIC CM 1542-1: All versions prior to 3.0 SIMATIC CP 343-1 Advanced (incl. SIPLUS variants): All versions Begin Update R: SIMATIC CP 442-1 RNA (6GK7442-1RX00-0XE0): All versions prior to v1.5.18 SIMATIC CP 443-1 (incl. SIPLUS variants): All versions SIMATIC CP 443-1 Advanced (incl. SIPLUS variants): All versions SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0): All versions SIMATIC CP 443-1 RNA (6GK7443-1RX00-0XE0): All versions prior to v1.5.18 End Update R SIMATIC CP 1242-7C: All versions prior to v3.2 SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0): All versions prior to v3.2 SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0): All versions prior to v3.2 SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0): All versions prior to v3.2 SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0): All versions prior to v3.2 SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0): All versions prior to v2.1 SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants): All versions prior to v2.1 SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0): All versions prior to v2.2 SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0): All versions prior to v2.1 SIMATIC CP 1623 (6GK1162-3AA00): All versions prior to v14.00.15.00_51.25.00.01 SIMATIC CP 1628 (6GK1162-8AA00): All versions prior to v17.0 SIMATIC ITC1500: All versions prior to v3.1.1.0 SIMATIC ITC1500 PRO: All versions prior to v3.1.1.0 SIMATIC ITC1900: All versions prior to v3.1.1.0 SIMATIC ITC1900 PRO: All versions prior to v3.1.1.0 SIMATIC ITC2200: All versions prior to v3.1.1.0 SIMATIC ITC2200 PRO: All versions prior to v3.1.1.0 SIMATIC MV540 H (6GF3540-0GE10): All versions prior to v2.1 SIMATIC MV540 S (6GF3540-0CD10): All versions prior to v2.1 SIMATIC MV550 H (6GF3550-0GE10): All versions prior to v2.1 SIMATIC MV550 S (6GF3550-0CD10): All versions prior to v2.1 SIMATIC MV560 U (6GF3560-0LE10): All versions prior to v2.1 SIMATIC MV560 X (6GF3560-0HE10): All versions prior to v2.1 SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0): All versions prior to v4.0 SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0): All versions prior to v4.0 SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0): All versions prior to v4.0 SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0): All versions prior to v4.0 SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0): All versions prior to v4.0 SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0): All versions prior to v4.0 SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0): All versions prior to v4.0 SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0): All versions prior to v4.0 SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0): All versions prior to v4.0 SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0): All versions prior to v4.0 SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0): All versions prior to v4.0 SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0): All versions prior to v4.0 SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0): All versions prior to v4.0 SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0): All versions prior to v4.0 SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0): All versions prior to v4.0 SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0): All versions prior to v4.0 SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0): All versions prior to v4.0 SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0): All versions prior to v4.0 SIMATIC RF185C: All versions prior to v1.3 SIMATIC RF186C: All versions prior to v1.3 SIMATIC RF186CI: All versions prior to v1.3 SIMATIC RF188C: All versions prior to v1.3 SIMATIC RF188CI: All versions prior to v1.3 SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-253-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-253-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-253-04" ;
    dcterms:issued "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens IE-WSN-PA Link WirelessHART Gateway" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-13923" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2019-13923 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IE-WSN-PA Link WirelessHART Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of IE/WSN-PA Link WirelessHART Gateway are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-253-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-253-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-253-05" ;
    dcterms:issued "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC TDC CP51M1" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10937" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-10937 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC TDC CP51M1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC TDC CP51M1 - multiprocessor automation system version affected: All versions prior to 1.1.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-253-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-253-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-253-06" ;
    dcterms:issued "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI SQL Client" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-9765" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2017-9765 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI SQL Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OSIsoft PI SQL Client - component interface that enables data access via SQL queries to the PI System affected: PI SQL Client OLEDB 2018." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-253-06" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2019 .

icsa-res:ICSA-19-255-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-255-01" ;
    dcterms:issued "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS V3 Web Server" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13548; CVE-2019-13532" ;
    icsa:cweNumber "CWE-22; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-13532,
        cve-res:CVE-2019-13548 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS V3 Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS V3 runtime systems; all versions prior to 3.5.14.10; containing the web server (CmpWebServer) affected: CODESYS Control for BeagleBone CODESYS Control for emPC-A/iMX6 CODESYS Control for IOT2000 CODESYS Control for Linux CODESYS Control for PFC100 CODESYS Control for PFC200 CODESYS Control for Raspberry Pi CODESYS Control RTE V3 CODESYS Control RTE V3 (for Beckhoff CX) CODESYS Control Win V3 (also part of the CODESYS Development System setup) CODESYS HMI V3 CODESYS Control V3 Runtime System Toolkit CODESYS V3 Embedded Target Visu Toolkit CODESYS V3 Remote Target Visu Toolkit." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-255-01" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2019 .

icsa-res:ICSA-19-255-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-255-02" ;
    dcterms:issued "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS V3 Library Manager (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13538" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2019-13538 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS V3 Library Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All 32 and 64 bit CODESYS Development System V3 versions prior to 3.5.16.0 are affected by this vulnerability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-255-02" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2019 .

icsa-res:ICSA-19-255-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-255-03" ;
    dcterms:issued "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS Control V3 Online User Management" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-9008" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2019-9008 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Control V3 Online User Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS V3 runtime systems - all versions prior to 3.5.13.0 containing the CmpUserMgr component affected: CODESYS Control for BeagleBone CODESYS Control for emPC-A/iMX6 CODESYS Control for IOT2000 CODESYS Control for PFC100 CODESYS Control for PFC200 CODESYS Control for Raspberry Pi CODESYS Control RTE V3 CODESYS Control RTE V3 (for Beckhoff CX) CODESYS Control Win V3 (also part of the CODESYS Development System setup) CODESYS V3 Simulation Runtime (part of the CODESYS Development System) CODESYS HMI V3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-255-03" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2019 .

icsa-res:ICSA-19-255-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-255-04" ;
    dcterms:issued "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS Control V3 OPC UA Server" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13542" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2019-13542 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Control V3 OPC UA Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS V3 runtime systems - all versions 3.5.11.0 to 3.5.15.0 containing the CODESYS OPC UA server supporting OPC UA Security affected: CODESYS Control for BeagleBone CODESYS Control for emPC-A/iMX6 CODESYS Control for IOT2000 CODESYS Control for Linux CODESYS Control for PFC100 CODESYS Control for PFC200 CODESYS Control for Raspberry Pi CODESYS Control RTE V3 CODESYS Control RTE V3 (for Beckhoff CX) CODESYS Control Win V3 (also part of the CODESYS Development System setup) CODESYS Control V3 Runtime System Toolkit." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-255-04" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2019 .

icsa-res:ICSA-19-255-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-255-05" ;
    dcterms:issued "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "3S-Smart Software Solutions GmbH CODESYS V3 Products Containing a CODESYS Communication Server" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-9009" ;
    icsa:cweNumber "CWE-390" ;
    icsa:hasCVE cve-res:CVE-2019-9009 ;
    icsa:hasCWE cwe-res:CWE-390 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS V3 Products Containing a CODESYS Communication Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS V3 runtime systems - all versions prior to 3.5.15.0 containing communication server for the CODESYS communication protocol affected: CODESYS Control for BeagleBone CODESYS Control for emPC-A/iMX6 CODESYS Control for IOT2000 CODESYS Control for Linux CODESYS Control for PFC100 CODESYS Control for PFC200 CODESYS Control for Raspberry Pi CODESYS Control RTE V3 CODESYS Control RTE V3 (for Beckhoff CX) CODESYS Control Win V3 (part of the CODESYS Development System setup) CODESYS Control V3 Runtime System Toolkit CODESYS V3 Safety SIL2 CODESYS Gateway V3 CODESYS HMI V3 CODESYS V3 Simulation Runtime (part of the CODESYS Development System)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-255-05" ;
    icsa:vendor "3S-Smart Software Solutions" ;
    icsa:year 2019 .

icsa-res:ICSA-19-260-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-260-01" ;
    dcterms:issued "2019-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-13552; CVE-2019-13558; CVE-2019-13556; CVE-2019-13550" ;
    icsa:cweNumber "CWE-94; CWE-77; CWE-121; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2019-13550,
        cve-res:CVE-2019-13552,
        cve-res:CVE-2019-13556,
        cve-res:CVE-2019-13558 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-285,
        cwe-res:CWE-77,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "WebAccess - HMI platform versions affected: Versions 8.4.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-260-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2019 .

icsa-res:ICSA-19-260-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-260-02" ;
    dcterms:issued "2019-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Chemical; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-13922; CVE-2019-13920; CVE-2019-34623; CVE-2019-13918" ;
    icsa:cweNumber "CWE-352; CWE-916; CWE-200; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2019-13918,
        cve-res:CVE-2019-13920,
        cve-res:CVE-2019-13922,
        cve-res:CVE-2019-34623 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-307,
        cwe-res:CWE-352,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SINEMA Remote Connect Server versions prior to 2.0 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-260-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-260-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-260-03" ;
    dcterms:issued "2019-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Performance IP Cameras and Performance NVRs" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-13523" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2019-13523 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Performance IP Cameras and Performance NVRs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of Honeywell Performance IP Series cameras and Performance Series NVRs affected: HBD3PR2 H4D3PRV3 HED3PR3 H4D3PRV2 HBD3PR1 H4W8PR2 HBW8PR2 H2W2PC1M H2W4PER3 H2W2PER3 HEW2PER3 HEW4PER3B HBW2PER1 HEW4PER2 HEW4PER2B HEW2PER2 H4W2PER2 HBW2PER2 H4W2PER3 HPW2P1 Performance Series NVRs: HEN08104 HEN08144 HEN081124 HEN16104 HEN16144 HEN16184 HEN16204 HEN162244 HEN16284 HEN16304 HEN16384 HEN32104 HEN321124 HEN32204 HEN32284 HEN322164 HEN32304 HEN32384 HEN323164 HEN64204 HEN64304 HEN643164 HEN643324 HEN643484 HEN04103 HEN04113 HEN04123 HEN08103 HEN08113 HEN08123 HEN08143 HEN16103 HEN16123 HEN16143 HEN16163 HEN04103L HEN08103L HEN16103L HEN32103L." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-260-03" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2019 .

icsa-res:ICSA-19-262-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-262-01" ;
    dcterms:issued "2019-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tridium Niagara" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Government Facilities; Information Technology" ;
    icsa:cveNumber "CVE-2019-13528; CVE-2019-8998" ;
    icsa:cweNumber "CWE-200; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2019-13528,
        cve-res:CVE-2019-8998 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Niagara" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Tridium products are affected: Niagara AX 3.8u4 (JACE 3e | JACE 6e | JACE 7 | JACE-8000) Niagara 4.4u3 (JACE 3e | JACE 6e | JACE 7 | JACE-8000) Niagara 4.7u1 (JACE-8000 | Edge 10) Niagara Windows and Linux Supervisor installations are not impacted." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-262-01" ;
    icsa:vendor "Tridium" ;
    icsa:year 2019 .

icsa-res:ICSA-19-274-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-274-01" ;
    dcterms:issued "2019-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Interpeak IPnet TCP/IP Stack (Update E)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2019-12260; CVE-2019-12263; CVE-2019-12265; CVE-2019-12257; CVE-2019-12256; CVE-2019-12262; CVE-2019-12255; CVE-2019-12264; CVE-2019-12259; CVE-2019-12258; CVE-2019-12261" ;
    icsa:cweNumber "CWE-122; CWE-191; CWE-88; CWE-362; CWE-121; CWE-119; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2019-12255,
        cve-res:CVE-2019-12256,
        cve-res:CVE-2019-12257,
        cve-res:CVE-2019-12258,
        cve-res:CVE-2019-12259,
        cve-res:CVE-2019-12260,
        cve-res:CVE-2019-12261,
        cve-res:CVE-2019-12262,
        cve-res:CVE-2019-12263,
        cve-res:CVE-2019-12264,
        cve-res:CVE-2019-12265 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-191,
        cwe-res:CWE-362,
        cwe-res:CWE-476,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OSE by ENEA, INTEGRITY RTOS by Green Hills Software, ITRON, ZebOS by IP Infusion, and VxWorks by Wind River" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Vx7 SR540; The following products of Wind River; Vx7 SR610): All versions Wind River VxWorks: All versions after 6.5 Wind River VxWorks bootrom network stack: All versions Wind River VxWorks: 653 MCE 3.x Wind River Advanced Networking Technology (ANT): All versions Wind River IPnet TCP/IP Stack: All versions (Affected by CVE-2019-12255; and CVE-2019-12264).; CVE-2019-12262; are affected: ENEA OSE: OSE4 ENEA OSE: OSE5 Green Hills Software INTEGRITY RTOS: All versions from 2003 to 2006 Wind River VxWorks under CURRENT support (6.9.4.11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-274-01" ;
    icsa:vendor "ENEA, Green Hills Software, ITRON, IP Infusion, Wind River" ;
    icsa:year 2019 .

icsa-res:ICSA-19-274-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-274-02" ;
    dcterms:issued "2019-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa Products" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2019-6008" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2019-6008 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Exaopc (R1.01.00 - R3.77.00) Exaplog (R1.10.00 - R3.40.00) Exaquantum (R1.10.00 - R3.02.00) Exaquantum/Batch (R1.01.00 - R2.50.40) Exasmoc (All Revisions) Exarqe (All Revisions) GA10 (R1.01.01 - R3.05.01) InsightSuiteAE (R1.01.00 - R1.06.00)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-274-02" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2019 .

icsa-res:ICSA-19-274-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-274-03" ;
    dcterms:issued "2019-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa EDR 810 Series" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10963; CVE-2019-10969" ;
    icsa:cweNumber "CWE-284; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-10963,
        cve-res:CVE-2019-10969 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EDR 810 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Moxa EDR 810 router version affected: All versions 5.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-274-03" ;
    icsa:vendor "Moxa" ;
    icsa:year 2019 .

icsa-res:ICSA-19-281-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-281-01" ;
    dcterms:issued "2019-10-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "SMA Solar Technology AG Sunny WebBox" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-13529" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2019-13529 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sunny WebBox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Sunny WebBox Firmware versions affected: Version 1.6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-281-01" ;
    icsa:vendor "SMA Solar Technology AG" ;
    icsa:year 2019 .

icsa-res:ICSA-19-281-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-281-02" ;
    dcterms:issued "2019-10-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Mark VIe Controller" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-13559; CVE-2019-13554" ;
    icsa:cweNumber "CWE-798; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2019-13554,
        cve-res:CVE-2019-13559 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mark VIe Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of the GE Mark VIe Controller are affected by at least one of the vulnerabilities. Some versions are affected by both. For more information contact GE." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-281-02" ;
    icsa:vendor "GE" ;
    icsa:year 2019 .

icsa-res:ICSA-19-281-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-281-03" ;
    dcterms:issued "2019-10-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinAC RTX (F) 2010 (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13921" ;
    icsa:cweNumber "CWE-410" ;
    icsa:hasCVE cve-res:CVE-2019-13921 ;
    icsa:hasCWE cwe-res:CWE-410 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinAC RTX (F) 2010" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "software controller for PC-based automation solutions; are affected: SIMATIC WinAC RTX (F) 2010 all versions prior to SP3 Update 1.; Siemens SIMATIC WinAC RTX (F) 2010" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-281-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-281-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-281-04" ;
    dcterms:issued "2019-10-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC IT UADM" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13929" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2019-13929 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC IT UADM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC IT UADM: All versions prior to 1.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-281-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-283-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-283-01" ;
    dcterms:issued "2019-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Real-Time (IRT) Devices (Update F)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-10923" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-10923 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Real-Time (IRT) Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and 6ES7148-6JG00-0BB0): All versions. SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to 3.X.17 SIMATIC S7-400 (incl. F) v6 and below CPU family (incl. SIPLUS variants): All versions SIMATIC S7-400 PN/DP v7 CPU family (incl. SIPLUS variants): All versions SIMOTION (incl. SIPLUS variants): All versions SINAMICS G120 v4.7 Control Unit (incl. SIPLUS variants): All versions prior to 4.7 SP10 HF5 SINAMICS S120 v4.7 Control Unit and CBE20 (incl. SIPLUS variants): All versions prior to 4.7 HF34 SINAMICS SL150 v4.7 (Control Unit): All versions prior to 4.7 HF33 SINAMICS SL150 v4.7 (Control Unit): All versions SINAMICS SM120 v4.7 (Control Unit): All versions SINUMERIK 828D: All versions prior to 4.8 SP5 SINUMERIK 840D sl: All versions.; 6ES7146-6FF00-0AB0; 6ES7142-6BG00-0BB0; 6ES7143-6BH00-0BB0; 6ES7142-6BR00-0BB0; Siemens CP1604/CP1616: All versions prior to 2.8 Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller: All versions prior to 4.1.1 Patch 05 EK-ERTEC 200: All versions prior to 4.5.0 Patch 01 EK-ERTEC 200P: All versions prior to 4.5.0 SCALANCE X-200IRT: All versions prior to 5.2.1 SIMATIC ET 200M: All versions SIMATIC ET 200S: All versions SIMATIC ET 200ecoPN (except 6ES7148-6JD00-0AB0 and 6ES7146-6FF00-0AB0): All versions SIMATIC ET 200pro: All versions SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0: All versions SIMATIC S7-300 CPU family (incl. F): All versions SIMATIC S7-400 (incl. F) v6 and below: All versions SIMATIC S7-400 PN/DP v7 (incl. F): All versions SIMATIC WinAC RTX (F) 2010: All versions prior to SP3 SIMOTION: All versions SINAMICS DCM: All versions prior to 1.5 HF1 SINAMICS DCP: All versions prior to 1.3 SINAMICS G110M v4.7 (Control Unit): All versions prior to 4.7 SP10 HF5 SINAMICS G120 v4.7 (Control Unit): All versions prior to 4.7 SP10 HF5 SINAMICS G130 v4.7 (Control Unit): All versions prior to 4.7 HF29 SINAMICS G150 (Control Unit): All versions prior to 4.8 SINAMICS GH150 v4.7 (Control Unit): All versions SINAMICS GL150 v4.7 (Control Unit): All versions SINAMICS GM150 v4.7 (Control Unit): All versions SINAMICS S110 (Control Unit): All versions SINAMICS S120 v4.7 (Control Unit and CBE20): All versions prior to 4.7 HF34 SINAMICS S150 (Control Unit): All versions prior to 4.8 SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): All versions prior to 5.2.1 SIMATIC ET 200M (incl. SIPLUS variants): All versions SIMATIC ET 200S (incl. SIPLUS variants): All versions SIMATIC ET 200pro (incl. SIPLUS variants): All versions. SIMATIC ET200ecoPN (except 6ES7141-6BG00-0BB0; 6ES7148-6JD00-0AB0; 6ES7141-6BH00-0BB0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-283-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-283-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-283-02" ;
    dcterms:issued "2019-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PROFINET Devices (Update L)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10936" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-10936 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PROFINET Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "8DO; 4xM12 (6ES7142-6BF50-0AB0): All versions SIMATIC ET 200ecoPN; DC24V; 4xM12 (6ES7141-6BF00-0AB0): All versions SIMATIC ET 200ecoPN; DC24V/0; 16DI; 8DI; DC24V/1; 8xM12 (6ES7142-6BG00-0AB0): All versions SIMATIC ET 200ecoPN; 5A; 8AI; 4 U/I; 4 RTD/TC 8xM12 (6ES7144-6KD00-0AB0): All versions SIMATIC ET 200ecoPN; 8xM12 (6ES7141-6BG00-0AB0): All versions SIMATIC ET 200ecoPN; 8xM12 (6ES7142-6BH00-0AB0): All versions SIMATIC ET 200ecoPN; Siemens reports the vulnerability affects the following PROFINET devices: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller: All versions EK-ERTEC 200: All version EK-ERTEC 200P: All versions prior to 4.6 Patch 01 SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants): All versions prior to 8.2.2 SIMATIC CFU PA: All versions prior to 1.2.0 SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): All versions prior to 2.0 SIMATIC ET 200AL: All versions SIMATIC ET 200M (incl. SIPLUS variants): All versions SIMATIC ET 200MP IM 155-5 PN BA (incl. SIPLUS variants): All versions prior to 4.2.3 SIMATIC ET 200MP IM 155-5 PN HF (incl. SIPLUS variants): All versions prior to 4.4.0 SIMATIC ET 200MP IM 155-5 PN ST (incl. SIPLUS variants): All versions SIMATIC ET 200S (incl. SIPLUS variants): All versions SIMATIC ET 200SP IM 155-6 PN BA (incl. SIPLUS variants): All versions SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants): All versions prior to 1.2.1 SIMATIC ET 200ecoPN; 8xM12 (6ES7147-6BG00-0AB0): All versions SIMATIC ET 200ecoPN; IO-Link Master (6ES7148-6JA00-0AB0): All versions SIMATIC ET 200SP IM 155-6 PN HF (incl. SIPLUS variants): All versions prior to 4.2.2 SIMATIC ET 200SP IM 155-6 PN HS (incl. SIPLUS variants): All versions prior to 4.0.1 SIMATIC ET 200SP IM 155-6 PN ST (incl. SIPLUS variants): All versions SIMATIC ET 200SP IM 155-6 PN/2 HF (incl. SIPLUS variants): All versions prior to 4.2.2 SIMATIC ET 200SP IM 155-6 PN/3 HF (incl. SIPLUS variants): All versions prior to 4.2.1 SIMATIC ET 200pro: All versions SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants): All versions SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants): All versions SIMATIC HMI KTP Mobile Panels: All versions SIMATIC PROFINET Driver: All versions prior to 2.1 SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to 4.4.0 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to 2.0 SIMATIC S7-1500 CPU Software Controller: All versions prior to 2.0 SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to 3.X.17 SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants): All versions prior to 6.0.9 SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants): All versions SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants): All versions SIMATIC TDC CP51M1: All versions prior to 1.1.8 SIMATIC TDC CPU555: All versions prior to 1.1.1 SIMATIC WinAC RTX (F) 2010: All versions prior to SP3 SINAMICS DCM: All versions prior to 1.5 HF1 SINAMICS DCP: All versions prior to 1.3 SINAMICS G110M v4.7 PN Control Unit: All versions prior to 4.7 SP10 HF5 SINAMICS G120 v4.7 PN Control Unit (incl. SIPLUS variants): All versions prior to 4.7 SP10 HF5 SINAMICS G130 v4.7 Control Unit: All versions prior to 4.8 SINAMICS G150 Control Unit: All versions prior to 4.8 SINAMICS GH150 v4.7 Control Unit: All versions SINAMICS GL150 v4.7 Control Unit: All versions SINAMICS GM150 v4.7 Control Unit: All versions SINAMICS S110 Control Unit: All versions SINAMICS S120 v4.7 Control Unit (incl. SIPLUS variants): All versions SINAMICS S150 Control Unit: All versions prior to 4.8 SINAMICS SL150 v4.7 Control Unit: All versions prior to 4.7 HF33 SINAMICS SM120 v4.7 Control Unit: All versions SINUMERIK 828D: All versions prior to 4.8 SP5 --------- Begin Update L Part 1 of 3 --------- SINUMERIK 840D sl: All versions prior to 4.8 SP6 --------- End Update L Part 1 of 3 --------- SIMATIC PN/PN Coupler (incl. SIPLUS NET variants): All versions prior to v4.2.1.; 4AO U/I 4xM12 (6ES7145-6HD00-0AB0): All versions SIMATIC ET 200ecoPN; 3A; DC24V/2A; 8xM12 (6ES7142-6BR00-0AB0): All versions SIMATIC ET 200ecoPN; 8 DIO; 16DO DC24V/1; 8AI RTD/TC 8xM12 (6ES7144-6KD50-0AB0): All versions SIMATIC ET 200ecoPN; 4xM12 (6ES7142-6BF00-0AB0): All versions SIMATIC ET 200ecoPN; 8xM12 (6ES7141-6BH00-0AB0): All versions SIMATIC ET 200ecoPN; 8 DO" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-283-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-290-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-290-01" ;
    dcterms:issued "2019-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Vijeo Citect and Citect SCADA (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-13537" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-13537 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vijeo Citect and Citect SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of the IEC870IP driver used in AVEVA's Vijeo Citect and Citect SCADA and Schneider Electric's Power SCADA Operation are affected: IEC870IP driver v4.14.02 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-290-01" ;
    icsa:vendor "AVEVA, Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-290-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-290-02" ;
    dcterms:issued "2019-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13545; CVE-2019-13541" ;
    icsa:cweNumber "CWE-20; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2019-13541,
        cve-res:CVE-2019-13545 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Cscape 9.90 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-290-02" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2019 .

icsa-res:ICSA-19-295-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-295-01" ;
    dcterms:issued "2019-10-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric ProClima" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-6825; CVE-2019-6823; CVE-2019-6824" ;
    icsa:cweNumber "CWE-94; CWE-427; CWE-119" ;
    icsa:hasCVE cve-res:CVE-2019-6823,
        cve-res:CVE-2019-6824,
        cve-res:CVE-2019-6825 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-427,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ProClima" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "ProClima building and automation control products: ProClima: all versions prior to 8.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-295-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-297-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-297-01" ;
    dcterms:issued "2019-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rittal Chiller SK 3232-Series" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2019-13553; CVE-2019-13549" ;
    icsa:cweNumber "CWE-306; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-13549,
        cve-res:CVE-2019-13553 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Chiller SK 3232-Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 - B1.2.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-297-01" ;
    icsa:vendor "Rittal" ;
    icsa:year 2019 .

icsa-res:ICSA-19-297-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-297-02" ;
    dcterms:issued "2019-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell IP-AK2" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-13525" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2019-13525 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IP-AK2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IP-AK2 Access Control Panel Version 1.04.07 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-297-02" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2019 .

icsa-res:ICSA-19-302-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-302-01" ;
    dcterms:issued "2019-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT Automation Worx Software Suite" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2019-16675" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-16675 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation Worx Software Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PC Worx Versions 1.86 and prior PC Worx Express Versions 1.86 and prior Config+ Versions 1.86 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-302-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2019 .

icsa-res:ICSA-19-304-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-304-01" ;
    dcterms:issued "2019-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WISE-PaaS/RMM" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy Water" ;
    icsa:cveNumber "CVE-2019-13551; CVE-2019-18227; CVE-2019-13547; CVE-2019-18229" ;
    icsa:cweNumber "CWE-22; CWE-611; CWE-89; CWE-862" ;
    icsa:hasCVE cve-res:CVE-2019-13547,
        cve-res:CVE-2019-13551,
        cve-res:CVE-2019-18227,
        cve-res:CVE-2019-18229 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-611,
        cwe-res:CWE-862,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WISE-PaaS/RMM" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "Versions of WISE-PaaS/RMM - IoT device remote monitoring and management platform are affected: WISE-PaaS/RMM Versions 3.3.29 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-304-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2019 .

icsa-res:ICSA-19-304-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-304-02" ;
    dcterms:issued "2019-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell equIP Series IP Cameras" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-18228" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-18228 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "equIP Series IP Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Honeywell equIP Series IP camera products and versions affected: H4L2GR1 2.420.HW01.33.20190812 | HBL2GR1 2.420.HW01.33.20190812 | HCL2G 2.420.HW01.33.20190812 | H4W2GR1 1.000.HW00.21.20190812 | H4W2GR2 1.000.HW00.21.20190812 H4W4GR1 1.000.HW00.21.20190812 | H3W2GR2 1.000.HW00.21.20190812 | H3W4GR1 1.000.HW00.21.20190812 | HBW2GR1 1.000.HW00.21.20190812 | HBW4GR1 1.000.HW00.21.20190812 | HBW2GR3 1.000.HW00.21.20190812 | HCW2G 1.000.HW00.21.20190812 | HCW4G 1.000.HW00.21.20190812." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-304-02" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2019 .

icsa-res:ICSA-19-304-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-304-03" ;
    dcterms:issued "2019-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell equIP and Performance Series IP Cameras" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-18230" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2019-18230 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "equIP and Performance Series IP Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "equIP Series Cameras and versions affected: H2W2GR1 1.000.0000.18.20190409 | H3W2GR1 1.000.HW00.21.20190812 | * H3W2GR1V 1.000.0000.18.20190409 | H3W2GR2 1.000.HW00.21.20190812 | H3W4GR1 1.000.HW00.21.20190812 | * H3W4GR1V 1.000.0000.18.20190409 | * H4D8GR1 2.420.HW00.9.20180510 | H4L2GR1 1.000.0000.18.20190423 | * H4L2GR1V 1.000.0000.18.20190423 | H4L6GR2 1.000.HW02.8.20190813 | H4LGGR2 1.000.HW04.3.20190813 | H4W2GR1 1.000.HW00.21.20190812 | * H4W2GR1V 1.000.0000.18.20190409 | H4W2GR2 1.000.HW00.21.20190812 | H4W4GR1 1.000.HW00.21.20190812 | * H4W4GR1V 1.000.0000.18.20190409 | * HBD8GR1 2.420.HW00.9.20180510 | HBL2GR1 2.420.HW01.33.20190812 | * HBL2GR1V 1.000.0000.18.20190423 | HBL6GR2 1.000.HW04.3.20190813 | HBL6GR2 1.000.HW02.8.20190813 | HBW2GR1 1.000.HW00.21.20190812 | * HBW2GR1V 1.000.0000.18.20190409 | HBW2GR3 1.000.HW00.21.20190812 | * HBW2GR3V 1.000.0000.18.20190409 | HBW4GR1 1.000.HW00.21.20190812 | * HBW4GR1V 1.000.0000.18.20190409 | * HCD8G 2.420.HW00.9.20180510 | HCL2G 1.000.0000.18.20190423 | * HCL2GV 1.000.0000.18.20190423 | HCW2G 1.000.HW00.21.20190812 | * HCW2GV 1.000.0000.18.20190409 | HCW4G 1.000.HW00.21.20190812 | * HDZ302D 1.000.0041.20180530 | * HDZ302DE 1.000.0041.20180530 | * HDZ302DIN 1.000.0041.20180530 | * HDZ302DIN-C1 1.000.0041.20180530 | * HDZ302DIN-S1 1.000.0041.20180530 | * HDZ302LIK 1.000.61.1.20180607 | * HDZ302LIW 1.000.61.1.20180607 | * HFD6GR1 1.000.HW00.9.20180510 | * HFD8GR1 1.000.HW00.9.20180510 | HM4L8GR1 1.000.HW02.8.20190813 | HMBL8GR1 1.000.HW02.8.20190813. Performance Series Cameras and versions affected: H4D8PR1 1.000.HW01.3.20190820 | HFD5PR1 1.000.HW01.1.20190822 | HPW2P1 1.000.HW01.3.20190820 | * HDZP304DI 1.000.HW10.5.20190812 | * HDZP252DI 1.000.HW02.3.20181109." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-304-03" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2019 .

icsa-res:ICSA-19-304-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-304-04" ;
    dcterms:issued "2019-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell equIP and Performance Series IP Cameras and Recorders" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-18226" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2019-18226 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "equIP and Performance Series IP Cameras and Recorders" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "equIP Series Cameras and version: H2W2GR1 1.000.0000.19.20190819 | H3W2GR1 1.000.HW00.21.20190812 | H3W2GR1V 1.000.0000.19.20190819 | H3W2GR2 1.000.HW00.21.20190812 | H3W4GR1 1.000.HW00.21.20190812 | H3W4GR1V 1.000.0000.19.20190819 | H4D8GR1 2.420.HW00.12.20190819 | H4L2GR1 2.420.HW01.33.20190812 | H4L2GR1V 1.000.0000.19.20190819 | H4L6GR2 1.000.HW02.8.20190813 | H4W2GR1 1.000.HW00.21.20190812 | H4W2GR1V 1.000.0000.19.20190819 | H4W2GR2 1.000.HW00.21.20190812 | H4W4GR1 1.000.HW00.21.20190812 | H4W4GR1V 1.000.0000.19.20190819 | HBD8GR1 2.420.HW00.12.20190819 | HBL2GR1 2.420.HW01.33.20190812 | HBL2GR1V 1.000.0000.19.20190819 | HBL6GR2 1.000.HW02.8.20190813 | HBW2GR1 1.000.HW00.21.20190812 | HBW2GR1V 1.000.0000.19.20190819 | HBW2GR3 1.000.HW00.21.20190812 | HBW2GR3V 1.000.0000.19.20190819 | HBW4GR1 1.000.HW00.21.20190812 | HBW4GR1V 1.000.0000.19.20190819 | HCD8G 2.420.HW00.12.20190819 | HCL2G 2.420.HW01.33.20190812 | HCL2GV 1.000.0000.19.20190819 | HCPB302 1.000.0040.3.20190820 | HCW2G 1.000.HW00.21.20190812 | HCW2GV 1.000.0000.19.20190819 | HCW4G 1.000.HW00.21.20190812 | HDZ302D 1.000.0043.6.20190820 | HDZ302DE 1.000.0043.6.20190820 | HDZ302DIN 1.000.0043.6.20190820 | HDZ302DIN-C1 1.000.0043.6.20190820 | HDZ302DIN-S1 1.000.0043.6.20190820 | HDZ302LIK 1.000.0062.3.20190816 | HDZ302LIW 1.000.0062.3.20190816 | HEPB302W01A04 1.000.0040.3.20190820 | HEPB302W01A10 1.000.0040.3.20190820 | HEPZ302W0 1.000.0039.3.20190820 | HFD6GR1 1.000.HW00.12.20190819 | HFD8GR1 1.000.HW00.12.20190819 | HM4L8GR1 1.000.HW02.8.20190813 | HMBL8GR1 1.000.HW02.8.20190813 | HSW2G1 2.460.HW00.5.R.20190827 | HSW2G1 2.460.HW00.5.R.20190827 | HSWB2G1 2.460.HW00.5.R.20190827 | HSWB2G1 2.460.HW00.5.R.20190827 | Performance Series Cameras and version: H2W2PC1M 1.000.HW01.3.20190820 | H2W2PER3 1.000.HW01.3.20190820 | H2W2PRV3 1.000.HW01.1.190813 | H2W4PER3 1.000.HW01.3.20190820 | H2W4PRV3 1.000.HW01.1.190813 H4D3PRV2 1.000.HW01.1.190814 | H4D3PRV3 1.000.HW01.1.190814 | H4D8PR1 1.000.HW01.3.20190820 | H4W2PER2 1.000.HW01.3.20190820 | H4W2PER3 1.000.HW01.3.20190820 | H4W2PRV2 1.000.HW01.1.190814 | H4W4PER2 1.000.HW01.3.20190820 | H4W4PER3 1.000.HW01.3.20190820 | H4W4PRV2 1.000.HW01.1.190814 | H4W4PRV3 1.000.HW01.1.190813 | H4W8PR2 1.000.HW01.3.20190820 | HBD2PER1 1.000.HW01.3.20190820 | HBD3PR1 1.000.HW01.1.190814 | HBD3PR2 1.000.HW01.1.190814 | HBD8PR1 1.000.HW01.3.20190820 | HBW2PER1 1.000.HW01.3.20190820 | HBW2PER2 1.000.HW01.3.20190820 | HBW2PR1 1.000.HW01.1.190813 | HBW2PR2 1.000.HW01.1.190814 | HBW4PER1 1.000.HW01.3.20190820 | HBW4PER2 1.000.HW01.3.20190820 | HBW4PR1 1.000.HW01.1.190813 | HBW4PR2 1.000.HW01.1.190814 | HBW8PR2 1.000.HW01.3.20190820 | HDZP252DI 1.000.HW02.4.20190813 | HDZP304DI 1.000.HW10.5.20190812 | HED2PER3 1.000.HW01.3.20190820 | HED3PR3 1.000.HW01.1.190814 | HED8PR1 1.000.HW01.3.20190820 | HEW2PER2 1.000.HW01.3.20190820 | HEW2PER3 1.000.HW01.3.20190820 | HEW2PR1 1.000.HW01.1.190813 | HEW2PR2 1.000.HW01.1.190814 | HEW2PRW1 1.000.HW01.1.190813 | HEW4PER2 1.000.HW01.3.20190820 | HEW4PER2B 1.000.HW01.3.20190820 | HEW4PER3 1.000.HW01.3.20190820 | HEW4PER3B 1.000.HW01.3.20190820 | HEW4PR2 1.000.HW01.1.190814 | HEW4PR3 1.000.HW01.1.190813 | HEW4PRW3 1.000.HW01.1.190813 | HFD5PR1 1.000.HW01.1.20190822 | HPW2P1 1.000.HW01.3.20190820 | Recorders and versions affected: HEN04102 2.000.HW00.0.R.20190823 | HEN04112 2.000.HW00.0.R.20190823 | HEN04122 2.000.HW00.0.R.20190823 | HEN08102 2.000.HW00.0.R.20190823 | HEN08112 2.000.HW00.0.R.20190823 | HEN08122 2.000.HW00.0.R.20190823 | HEN08142 2.000.HW00.0.R.20190823 | HEN08162 2.000.HW00.0.R.20190823 | HEN16102 2.000.HW00.0.R.20190823 | HEN16122 2.000.HW00.0.R.20190823 | HEN16142 2.000.HW00.0.R.20190823 | HEN16162 2.000.HW00.0.R.20190823 | HEN04103 3.215.00HW001.2.20190821 | HEN04113 3.215.00HW001.2.20190821 | HEN04123 3.215.00HW001.2.20190821 | HEN08103 3.215.00HW001.2.20190821 | HEN08113 3.215.00HW001.2.20190821 | HEN08123 3.215.00HW001.2.20190821 | HEN08143 3.215.00HW001.2.20190821 | HEN16103 3.215.00HW001.2.20190821 | HEN16123 3.215.00HW001.2.20190821 | HEN16143 3.215.00HW001.2.20190821 | HEN16163 3.215.00HW001.2.20190821 | HEN04103L 3.215.00HW001.2.20190821 | HEN08103L 3.215.00HW001.2.20190821 | HEN16103L 3.215.00HW001.2.20190821 | HEN32103L 3.215.00HW001.2.20190821 | HEN08104 3.215.00HW002.2.20190829 | HEN08144 3.215.00HW002.2.20190829 | HEN081124 3.215.00HW002.2.20190829 | HEN16104 3.215.00HW002.2.20190829 | HEN16144 3.215.00HW002.2.20190829 | HEN16184 3.215.00HW002.2.20190829 | HEN32104 3.215.00HW002.2.20190829 | HEN321124 3.215.00HW002.2.20190829 | HEN16204 3.215.00HW002.2.20190829 | HEN16284 3.215.00HW002.2.20190829 | HEN162244 3.215.00HW002.2.20190829 | HEN32204 3.215.00HW002.2.20190829 | HEN32284 3.215.00HW002.2.20190829 | HEN322164 3.215.00HW002.2.20190829 | HEN64204 3.215.00HW002.2.20190829 | HEN642164 3.215.00HW002.2.20190829 | HEN16304 3.215.00HW002.2.20190829 | HEN16384 3.215.00HW002.2.20190829 | HEN32304 3.215.00HW002.2.20190829 | HEN32384 3.215.00HW002.2.20190829 | HEN323164 3.215.00HW002.2.20190829 | HEN64304 3.215.00HW002.2.20190829 | HEN643164 3.215.00HW002.2.20190829 | HEN643324 3.215.00HW002.2.20190829 | HEN643484 3.215.00HW002.2.20190829 |HRHT4040 1.000.00HW001.2.190822 | HRHT4041 1.000.00HW001.2.190822 | HRHT4042 1.000.00HW001.2.190822 | HRHT4080 1.000.00HW001.2.190822 | HRHT4082 1.000.00HW001.2.190822 | HRHT4084 1.000.00HW001.2.190822 | HRHT4160 1.000.00HW001.2.190822 | HRHT4162 1.000.00HW001.2.190822 | HRHT4164 1.000.00HW001.2.190822 | HRHT4166 1.000.00HW001.2.190822 | HRHT41612 1.000.00HW001.2.190822 | HRHQ1040 1.000.00HW001.1.190822 | HRHQ1040L 1.000.00HW001.1.190822 | HRHQ1041 1.000.00HW001.1.190822 | HRHQ1080 1.000.00HW001.1.190822 | HRHQ1080L 1.000.00HW001.1.190822 | HRHQ1081 1.000.00HW001.1.190822 | HRHQ1082 1.000.00HW001.1.190822 | HRHQ1160 1.000.00HW001.1.190822 | HRHQ1161 1.000.00HW001.1.190822 | HRHQ1162 1.000.00HW001.1.190822 | HRHQ1164 1.000.00HW001.1.190822 |" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-304-04" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2019 .

icsa-res:ICSA-19-309-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-309-01" ;
    dcterms:issued "2019-11-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Supervisor" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-14333; CVE-2010-3128; CVE-2019-11769; CVE-2018-16550" ;
    icsa:cweNumber "CWE-477" ;
    icsa:hasCVE cve-res:CVE-2010-3128,
        cve-res:CVE-2018-14333,
        cve-res:CVE-2018-16550,
        cve-res:CVE-2019-11769 ;
    icsa:hasCWE cwe-res:CWE-477 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Supervisor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Full Development and Runtime Only packages of Omron's SCADA and HMI package CX-Supervisor versions affected: CX-Supervisor Versions 3.5 (12) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-309-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2019 .

icsa-res:ICSA-19-311-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-311-01" ;
    dcterms:issued "2019-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13555" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-13555 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-Q Series and MELSEC-L Series CPU Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "L26CPU-PBT: serial number 21101 and prior; L02/06/26CPU-P; Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior. [MELSEC-L Series] L02/06/26CPU; Q04/06/13/26UDPVCPU: serial number 21081 and prior; L26CPU-BT: serial number 21101 and prior; [MELSEC-Q Series] Q03/04/06/13/26UDVCPU: serial number 21081 and prior; L26CPU-BT-CM: serial number 21101 and prior.; and L02/06/26CPU-CM; and Q03UDECPU" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-311-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-311-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-311-02" ;
    dcterms:issued "2019-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric V-Server" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-18240" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2019-18240 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "V-Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "V-Server - data collection and management service versions affected: V-Server 4.0.6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-311-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-19-318-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-318-01" ;
    dcterms:issued "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mentor Nucleus Networking Module" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13939" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-13939 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mentor Nucleus Networking Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MIPS; Nucleus NET: All versions Nucleus RTOS: All versions Nucleus ReadyStart for ARM; and PPC: All versions prior to v2017.02.2 with patch \"Nucleus 2017.02.02 Nucleus NET Patch\" Nucleus SafetyCert: All versions Nucleus Source Code: All versions VSTAR: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-318-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-318-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-318-02" ;
    dcterms:issued "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens S7-1200 and S7-200 SMART CPUs (Update B)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-13945" ;
    icsa:cweNumber "CWE-749" ;
    icsa:hasCVE cve-res:CVE-2019-13945 ;
    icsa:hasCWE cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "S7-1200 and S7-200 SMART CPUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC S7-1200 CPU family v4.x (including SIPLUS variants): all versions with Function State (FS) < 11; SIMATIC S7-1200 CPU family prior to v4.x (including SIPLUS variants): all versions. SIMATIC S7-200 SMART CPU ST20 (6ES7 288-1ST20-0AA0): all versions prior to and including v2.5.0 and Function State (FS) <= 9. SIMATIC S7-200 SMART CPU ST30 (6ES7 288-1ST30-0AA0): all versions prior to and including v2.5.0 and Function State (FS) <= 9. SIMATIC S7-200 SMART CPU ST40 (6ES7 288-1ST40-0AA0): all versions prior to and including v2.5.0 and Function State (FS) <= 8. SIMATIC S7-200 SMART CPU ST60 (6ES7 288-1ST60-0AA0): all versions prior to and including v2.5.0 and Function State (FS) <= 8. SIMATIC S7-200 SMART CPU SR20 (6ES7 288-1SR20-0AA0): all versions prior to and including v2.5.0 and Function State (FS) <= 11. SIMATIC S7-200 SMART CPU SR30 (6ES7 288-1SR30-0AA0): all versions prior to and including v2.5.0 and Function State (FS) <= 10. SIMATIC S7-200 SMART CPU SR40 (6ES7 288-1SR40-0AA0): all versions prior to and including v2.5.0 and Function State (FS) <= 10. SIMATIC S7-200 SMART CPU SR60 (6ES7 288-1SR60-0AA0): all versions prior to and including v2.5.0 and Function State (FS) <= 12. SIMATIC S7-200 SMART CPU CR40 (6ES7 288-1CR40-0AA0): all versions prior to and including v2.2.2 and Function State (FS) <= 8. SIMATIC S7-200 SMART CPU CR60 (6ES7 288-1CR60-0AA0): all versions prior to and including v2.2.2 and Function State (FS) <= 10. SIMATIC S7-200 SMART CPU CR20s (6ES7 288-1CR20-0AA0): all versions prior to and including v2.3.0 and Function State (FS) <= 3. SIMATIC S7-200 SMART CPU CR30s (6ES7 288-1CR30-0AA0): all versions prior to and including v2.3.0 and Function State (FS) <= 3. SIMATIC S7-200 SMART CPU CR40s (6ES7 288-1CR40-0AA0): all versions prior to and including v2.3.0 and Function State (FS) <= 3. SIMATIC S7-200 SMART CPU CR60s (6ES7 288-1CR60-0AA0): all versions prior to and including v2.3.0 and Function State (FS) <= 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-318-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-318-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-318-03" ;
    dcterms:issued "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo PX Devices" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-13927" ;
    icsa:cweNumber "CWE-472" ;
    icsa:hasCVE cve-res:CVE-2019-13927 ;
    icsa:hasCWE cwe-res:CWE-472 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo PX Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PXC36-E.D; PXA30-W2: All firmware versions prior to V6.00.320 PXC22.1-E.D; PXC200-E.D with Desigo PX Web modules PXA40-W0; PXC128-U with Desigo PX Web modules PXA30-W0; PXC36.1-E.D with activated web server: All firmware versions prior to V6.00.320.; PXC100-E.D; PXA30-W1; PXC64-U; Desigo PX automation controllers are affected: PXC00-E.D; PXA40-W2: All firmware versions prior to V6.00.320 PXC00-U; PXA40-W1; PXC50-E.D" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-318-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-318-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-318-04" ;
    dcterms:issued "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Supervisor (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-18251" ;
    icsa:cweNumber "CWE-477" ;
    icsa:hasCVE cve-res:CVE-2019-18251 ;
    icsa:hasCWE cwe-res:CWE-477 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Supervisor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of both \"Full Development\" and \"Runtime Only\" packages of Omron's SCADA and HMI package CX-Supervisor are affected: CX-Supervisor Versions 3.5 (12) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-318-04" ;
    icsa:vendor "Omron" ;
    icsa:year 2019 .

icsa-res:ICSA-19-318-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-318-05" ;
    dcterms:issued "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Power Generation Information Manager (PGIM) and Plant Connect" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-18250" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2019-18250 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Power Generation Information Manager (PGIM) and Plant Connect" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Power Generation Information Manager (PGIM): All versions Plant Connect: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-318-05" ;
    icsa:vendor "ABB" ;
    icsa:year 2019 .

icsa-res:ICSA-19-323-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-323-01" ;
    dcterms:issued "2019-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Flexera FlexNet Publisher" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2018-20034; CVE-2018-20032; CVE-2018-20031; CVE-2018-20033" ;
    icsa:cweNumber "CWE-119; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-20031,
        cve-res:CVE-2018-20032,
        cve-res:CVE-2018-20033,
        cve-res:CVE-2018-20034 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FlexNet Publisher" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FlexNet Publisher Version 2018 R3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-323-01" ;
    icsa:vendor "Flexera" ;
    icsa:year 2019 .

icsa-res:ICSA-19-330-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-330-01" ;
    dcterms:issued "2019-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Relion 670 Series" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-18253" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2019-18253 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Relion 670 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Relion 670 series versions 1p1r26 and prior Relion 670 series versions 1.2.3.17 and prior Relion 670 series versions 2.0.0.10 and prior (RES670 2.0.0.4 and prior) Relion 670 series versions 2.1.0.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-330-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2019 .

icsa-res:ICSA-19-330-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-330-02" ;
    dcterms:issued "2019-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Relion 650 and 670 Series" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-18247" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-18247 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Relion 650 and 670 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Relion 650 series versions 1.3.0.5 and prior Relion 670 series versions 1.2.3.18 and prior Relion 670 series versions 2.0.0.11 and prior Relion 670 series versions 2.1.0.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-330-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2019 .

icsa-res:ICSA-19-337-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-337-01" ;
    dcterms:issued "2019-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Reliable Controls LicenseManager" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Government Facilities" ;
    icsa:cveNumber "CVE-2019-18245" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2019-18245 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LicenseManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RC-LicenseManager: Versions 3.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-337-01" ;
    icsa:vendor "Reliable Controls" ;
    icsa:year 2019 .

icsa-res:ICSA-19-337-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-337-02" ;
    dcterms:issued "2019-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa AWK-3121" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-10694; CVE-2018-10700; CVE-2018-10699; CVE-2018-10693; CVE-2018-10695; CVE-2018-10703; CVE-2018-10701; CVE-2018-10690; CVE-2018-10702; CVE-2018-10698; CVE-2018-10696; CVE-2018-10691; CVE-2018-10697; CVE-2018-10692" ;
    icsa:cweNumber "CWE-352; CWE-1004; CWE-79; CWE-77; CWE-284; CWE-119; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2018-10690,
        cve-res:CVE-2018-10691,
        cve-res:CVE-2018-10692,
        cve-res:CVE-2018-10693,
        cve-res:CVE-2018-10694,
        cve-res:CVE-2018-10695,
        cve-res:CVE-2018-10696,
        cve-res:CVE-2018-10697,
        cve-res:CVE-2018-10698,
        cve-res:CVE-2018-10699,
        cve-res:CVE-2018-10700,
        cve-res:CVE-2018-10701,
        cve-res:CVE-2018-10702,
        cve-res:CVE-2018-10703 ;
    icsa:hasCWE cwe-res:CWE-1004,
        cwe-res:CWE-119,
        cwe-res:CWE-284,
        cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-77,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AWK-3121" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AWK-3121: All Versions 1.14 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-337-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2019 .

icsa-res:ICSA-19-339-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-339-01" ;
    dcterms:issued "2019-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Thales DIS SafeNet Sentinel LDK License Manager Runtime" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-18232" ;
    icsa:cweNumber "CWE-59" ;
    icsa:hasCVE cve-res:CVE-2019-18232 ;
    icsa:hasCWE cwe-res:CWE-59 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SafeNet Sentinel LDK License Manager Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "all versions prior to 7.101(only Microsoft Windows versions are affected).; SafeNet Sentinel LDK License Manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-339-01" ;
    icsa:vendor "Thales DIS" ;
    icsa:year 2019 .

icsa-res:ICSA-19-339-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-339-02" ;
    dcterms:issued "2019-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Weidmueller Industrial Ethernet Switches" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2019-16673; CVE-2019-16672; CVE-2019-16671; CVE-2019-16674; CVE-2019-16670" ;
    icsa:cweNumber "CWE-307; CWE-341; CWE-311; CWE-256; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-16670,
        cve-res:CVE-2019-16671,
        cve-res:CVE-2019-16672,
        cve-res:CVE-2019-16673,
        cve-res:CVE-2019-16674 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-307,
        cwe-res:CWE-311,
        cwe-res:CWE-341,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Ethernet Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of industrial Ethernet switches are affected: IE-SW-VL05M-5TX firmware v3.6.6 Build 16102415 and prior IE-SW-VL05MT-5TX firmware v3.6.6 Build 16102415 and prior IE-SW-VL05M-3TX-2SC firmware v3.6.6 Build 16102415 and prior IE-SW-VL05MT-3TX-2SC firmware v3.6.6 Build 16102415 and prior IE-SW-VL05M-3TX-2ST firmware v3.6.6 Build 16102415 and prior IE-SW-VL05MT-3TX-2ST firmware v3.6.6 Build 16102415 and prior IE-SW-VL08MT-8TX firmware v3.5.2 Build 16102415 and prior IE-SW-VL08MT-5TX-3SC firmware v3.5.2 Build 16102415 and prior IE-SW-VL08MT-5TX-1SC-2SCS firmware v3.5.2 Build 16102415 and prior IE-SW-VL08MT-6TX-2ST firmware v3.5.2 Build 16102415 and prior IE-SW-VL08MT-6TX-2SC firmware v3.5.2 Build 16102415 and prior IE-SW-VL08MT-6TX-2SCS firmware v3.5.2 Build 16102415 and prior IE-SW-PL08M-8TX firmware v3.3.8 Build 16102416 and prior IE-SW-PL08MT-8TX firmware v3.3.8 Build 16102416 and prior IE-SW-PL08M-6TX-2SC firmware v3.3.8 Build 16102416 and prior IE-SW-PL08MT-6TX-2SC firmware v3.3.8 Build 16102416 and prior IE-SW-PL08M-6TX-2ST firmware v3.3.8 Build 16102416 and prior IE-SW-PL08MT-6TX-2ST firmware v3.3.8 Build 16102416 and prior IE-SW-PL08M-6TX-2SCS firmware v3.3.8 Build 16102416 and prior IE-SW-PL08MT-6TX-2SCS firmware v3.3.8 Build 16102416 and prior IE-SW-PL10M-3GT-7TX firmware v3.3.16 Build 16102416 and prior IE-SW-PL10MT-3GT-7TX firmware v3.3.16 Build 16102416 and prior IE-SW-PL10M-1GT-2GS-7TX firmware v3.3.16 Build 16102416 and prior IE-SW-PL10MT-1GT-2GS-7TX firmware v3.3.16 Build 16102416 and prior IE-SW-PL16M-16TX firmware v3.4.2 Build 16102416 and prior IE-SW-PL16MT-16TX firmware v3.4.2 Build 16102416 and prior IE-SW-PL16M-14TX-2SC firmware v3.4.2 Build 16102416 and prior IE-SW-PL16MT-14TX-2SC firmware v3.4.2 Build 16102416 and prior IE-SW-PL16M-14TX-2ST firmware v3.4.2 Build 16102416 and prior IE-SW-PL16MT-14TX-2ST firmware v3.4.2 Build 16102416 and prior IE-SW-PL18M-2GC-16TX firmware v3.4.4 Build 16102416 and prior IE-SW-PL18MT-2GC-16TX firmware v3.4.4 Build 16102416 and prior IE-SW-PL18M-2GC14TX2SC firmware v3.4.4 Build 16102416 and prior IE-SW-PL18MT-2GC14TX2SC firmware v3.4.4 Build 16102416 and prior IE-SW-PL18M-2GC14TX2ST firmware v3.4.4 Build 16102416 and prior IE-SW-PL18MT-2GC14TX2ST firmware v3.4.4 Build 16102416 and prior IE-SW-PL18M-2GC14TX2SCS firmware v3.4.4 Build 16102416 and prior IE-SW-PL18MT-2GC14TX2SCS firmware v3.4.4 Build 16102416 and prior IE-SW-PL09M-5GC-4GT firmware v3.3.4 Build 16102416 and prior IE-SW-PL09MT-5GC-4GT firmware v3.3.4 Build 16102416 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-339-02" ;
    icsa:vendor "Weidmueller" ;
    icsa:year 2019 .

icsa-res:ICSA-19-344-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-344-01" ;
    dcterms:issued "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W700 and W1700" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-14526" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2018-14526 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W700 and W1700" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SCALANCE W700 Versions 6.3 and prior.; SCALANCE W700 and W1700; wireless communication devices" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-344-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-344-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-344-02" ;
    dcterms:issued "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens and PKE SiNVR, SiVMS Video Server (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-18342; CVE-2019-18337; CVE-2019-18341; CVE-2019-13947; CVE-2019-18338; CVE-2019-18340; CVE-2019-18339" ;
    icsa:cweNumber "CWE-306; CWE-261" ;
    icsa:hasCVE cve-res:CVE-2019-13947,
        cve-res:CVE-2019-18337,
        cve-res:CVE-2019-18338,
        cve-res:CVE-2019-18339,
        cve-res:CVE-2019-18340,
        cve-res:CVE-2019-18341,
        cve-res:CVE-2019-18342 ;
    icsa:hasCWE cwe-res:CWE-261,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiNVR 3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SiNVR 3 Central Control Server (CCS): all versions Moved to SSA-761844 and ICSA-21-103-10 SiNVR/SiVMS Video Server: All versions prior to v5.0.0 SiNVR/SiVMS Video Server: v5.0.0 and later is affected by CVE-2019-18340." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-344-02" ;
    icsa:vendor "Siemens and PKE" ;
    icsa:year 2019 .

icsa-res:ICSA-19-344-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-344-03" ;
    dcterms:issued "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Healthcare and Public Health; Transportation Systems;" ;
    icsa:cveNumber "CVE-2018-18440; CVE-2019-13103" ;
    icsa:cweNumber "CWE-119; CWE-399" ;
    icsa:hasCVE cve-res:CVE-2018-18440,
        cve-res:CVE-2019-13103 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "--------- Begin Update A Part 1 of 2 --------- The following versions of RUGGEDCOM ROS; are affected: RUGGEDCOM ROS RMC8388: All versions with U-Boot prior to V2016.05RS09 (only affected by CVE-2018-18440) RUGGEDCOM ROS RSG900C: All versions with U-Boot prior to V2016.05RS09 (only affected by CVE-2018-18440) RUGGEDCOM ROS RSG900R: All versions with U-Boot prior to V2016.05RS09 (only affected by CVE-2018-18440) RUGGEDCOM ROS RSG907R: All versions with U-Boot prior to V2016.05RS09 (only affected by CVE-2018-18440) RUGGEDCOM ROS RSG908C: All versions with U-Boot prior to V2016.05RS09 (only affected by CVE-2018-18440) RUGGEDCOM ROS RSG909R: All versions with U-Boot prior to V2016.05RS09 (only affected by CVE-2018-18440) RUGGEDCOM ROS RSG910C: All versions with U-Boot prior to V2016.05RS09 (only affected by CVE-2018-18440) RUGGEDCOM ROS RSG920P: Versions 2016.05RS09 and later (only affected by CVE-2019-13103) RUGGEDCOM ROS RSG920P: All versions with U-Boot prior to V2016.05RS09 RUGGEDCOM ROS RSG2488: Versions 2016.05RS09 and later (only affected by CVE-2019-13103) RUGGEDCOM ROS RSG2488: All versions with U-Boot prior to V2016.05RS09 RUGGEDCOM ROS RSL910: All versions with U-Boot prior to V2016.05RS09 (only affected by CVE-2018-18440) RUGGEDCOM ROS RST2228: Versions 2016.05RS09 and later (only affected by CVE-2019-13103) RUGGEDCOM ROS RST2228: All versions with U-Boot prior to V2016.05RS09 --------- End Update A Part 1 of 2 ---------.; an ethernet switch" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-344-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-344-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-344-04" ;
    dcterms:issued "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Products (Update C)" ;
    icsa:CVSSScore "3.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10929" ;
    icsa:cweNumber "CWE-327" ;
    icsa:hasCVE cve-res:CVE-2019-10929 ;
    icsa:hasCWE cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP 1626; HMI Panel (incl. SIPLUS variants); NET PC software; STEP 7 (TIA Portal); WinCC (TIA Portal); WinCC OA; WinCC Runtime (Pro and Advanced); TIM 1531 IRC (incl. SIPLUS variant)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and including; v3.16 patch 12 SIMATIC WinCC Runtime Advanced: all versions SIMATIC WinCC Runtime Professional: all versions TIM 1531 IRC (incl. SIPLUS NET variants): all versions prior to v2.1.; The following Siemens products are affected: Update C SIMATIC CP 1626: all versions SIMATIC NET PC Software v14: all versions prior to v14 SP1 Update 14 SIMATIC NET PC Software v15: all versions End Update C. SIMATIC HMI Panel (incl. SIPLUS variants): all versions SIMATIC STEP 7 (TIA Portal): all versions prior to v16 SIMATIC WinCC (TIA Portal): all versions prior to v16 SIMATIC WinCC OA: all versions prior to; v3.15 SIMATIC WinCC OA: all versions prior to" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-344-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-344-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-344-05" ;
    dcterms:issued "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens XHQ Operations Intelligence" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-13932; CVE-2019-13930; CVE-2019-13931" ;
    icsa:cweNumber "CWE-20; CWE-352; CWE-80" ;
    icsa:hasCVE cve-res:CVE-2019-13930,
        cve-res:CVE-2019-13931,
        cve-res:CVE-2019-13932 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-352,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XHQ Operations Intelligence" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens Operations Intelligence products: XHQ: All versions prior to v6.0.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-344-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-344-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-344-06" ;
    dcterms:issued "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10929; CVE-2019-10943" ;
    icsa:cweNumber "CWE-353; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2019-10929,
        cve-res:CVE-2019-10943 ;
    icsa:hasCWE cwe-res:CWE-327,
        cwe-res:CWE-353 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 and S7-1500 CPU families" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that these vulnerabilities affect the following SIMATIC products: SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC: All versions --------- Begin Update B Part 1 of 2 --------- SIMATIC Drive Controller family: All versions (only affected by CVE-2019-10943) SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions prior to V20.8 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): Versions 20.8 and later (only affected by CVE-2019-10943) SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): All versions SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to V4.4.0 SIMATIC S7-1200 CPU family (incl. SIPLUS variants): Versions 4.4.0 and later (only affected by CVE-2019-10943) SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to V2.8.1 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): Versions 2.8.1 and later (only affected by CVE-2019-10943) SIMATIC S7-1500 Software Controller: All versions prior to V20.8 SIMATIC S7-1500 Software Controller Versions 20.8 and later (only affected by CVE-2019-10943) SIMATIC S7-PLCSIM Advanced: All versions prior to V3.0 SIMATIC S7-PLCSIM Advanced: Versions 3.0 and later (only affected by CVE-2019-10943) --------- End Update B Part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-344-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-344-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-344-07" ;
    dcterms:issued "2019-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens EN100 Ethernet Module (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-13943; CVE-2019-13942; CVE-2019-13944" ;
    icsa:cweNumber "CWE-119; CWE-79; CWE-23" ;
    icsa:hasCVE cve-res:CVE-2019-13942,
        cve-res:CVE-2019-13943,
        cve-res:CVE-2019-13944 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-23,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EN100 Ethernet Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: EN100 Ethernet module for IEC 61850: versions prior to 4.37 EN100 Ethernet module for PROFINET IO: all versions EN100 Ethernet module for Modbus TCP: all versions EN100 Ethernet module for DNP3: all versions EN100 Ethernet module for IEC104: all versions. The above EN100 modules are included in SIPROTEC 4; SIPROTEC Compact; an ethernet module; Reyrolle; Versions of EN100; and SWT3000 devices." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-344-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-346-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-346-01" ;
    dcterms:issued "2019-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech DiagAnywhere Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-18257" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-18257 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DiagAnywhere Server" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "DiagAnywhere Server Versions 3.07.11 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-346-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2019 .

icsa-res:ICSA-19-346-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-346-02" ;
    dcterms:issued "2019-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron PLC CJ and CS Series (Update B)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-18259; CVE-2019-13533; CVE-2019-18269" ;
    icsa:cweNumber "CWE-294; CWE-412; CWE-290" ;
    icsa:hasCVE cve-res:CVE-2019-13533,
        cve-res:CVE-2019-18259,
        cve-res:CVE-2019-18269 ;
    icsa:hasCWE cwe-res:CWE-290,
        cwe-res:CWE-294,
        cwe-res:CWE-412 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC CJ and CS Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Omron Programmable Logic Controllers are affected: Omron PLC CJ series; all versions Omron PLC CS series; all versions Omron PLC NX1P2 series; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-346-02" ;
    icsa:vendor "Omron" ;
    icsa:year 2019 .

icsa-res:ICSA-19-346-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-346-03" ;
    dcterms:issued "2019-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron PLC CJ, CS and NJ Series" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-18261" ;
    icsa:cweNumber "CWE-307" ;
    icsa:hasCVE cve-res:CVE-2019-18261 ;
    icsa:hasCWE cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC CJ, CS and NJ Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "all versions Omron PLC CJ series; all versions; Omron PLC CS series; all versions Omron PLC NJ series" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-346-03" ;
    icsa:vendor "Omron" ;
    icsa:year 2019 .

icsa-res:ICSA-19-351-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-351-01" ;
    dcterms:issued "2019-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE S2020/S2020G Fast Switch 61850" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation" ;
    icsa:cveNumber "CVE-2019-18267" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2019-18267 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "S2020/S2020G Fast Switch 61850" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a managed Ethernet switch version affected: Versions 07A03 and prior.; GE S2020/S2020G Fast Switch 61850" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-351-01" ;
    icsa:vendor "GE" ;
    icsa:year 2019 .

icsa-res:ICSA-19-351-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-351-02" ;
    dcterms:issued "2019-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SPPA-T3000 (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-18326; CVE-2019-18294; CVE-2019-18292; CVE-2019-18310; CVE-2019-18308; CVE-2019-18298; CVE-2019-18322; CVE-2019-18328; CVE-2019-18296; CVE-2019-18314; CVE-2019-18334; CVE-2019-18317; CVE-2019-18307; CVE-2019-18312; CVE-2019-18290; CVE-2019-18286; CVE-2019-18332; CVE-2019-18335; CVE-2019-18318; CVE-2019-18311; CVE-2019-18293; CVE-2019-18305; CVE-2019-18313; CVE-2019-18329; CVE-2019-18287; CVE-2019-18304; CVE-2019-18301; CVE-2019-18333; CVE-2019-18306; CVE-2019-18320; CVE-2019-18325; CVE-2019-18323; CVE-2019-18285; CVE-2019-18316; CVE-2019-18297; CVE-2019-18324; CVE-2019-18327; CVE-2019-18303; CVE-2019-18300; CVE-2019-18315; CVE-2019-18319; CVE-2018-4832; CVE-2019-18284; CVE-2019-18299; CVE-2019-18302; CVE-2019-18283; CVE-2019-18321; CVE-2019-18309; CVE-2019-18331; CVE-2019-18330; CVE-2019-18289; CVE-2019-18288; CVE-2019-18295; CVE-2019-18291" ;
    icsa:cweNumber "CWE-434; CWE-200; CWE-287; CWE-122; CWE-284; CWE-952; CWE-20; CWE-190; CWE-121; CWE-502; CWE-319; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-4832,
        cve-res:CVE-2019-18283,
        cve-res:CVE-2019-18284,
        cve-res:CVE-2019-18285,
        cve-res:CVE-2019-18286,
        cve-res:CVE-2019-18287,
        cve-res:CVE-2019-18288,
        cve-res:CVE-2019-18289,
        cve-res:CVE-2019-18290,
        cve-res:CVE-2019-18291,
        cve-res:CVE-2019-18292,
        cve-res:CVE-2019-18293,
        cve-res:CVE-2019-18294,
        cve-res:CVE-2019-18295,
        cve-res:CVE-2019-18296,
        cve-res:CVE-2019-18297,
        cve-res:CVE-2019-18298,
        cve-res:CVE-2019-18299,
        cve-res:CVE-2019-18300,
        cve-res:CVE-2019-18301,
        cve-res:CVE-2019-18302,
        cve-res:CVE-2019-18303,
        cve-res:CVE-2019-18304,
        cve-res:CVE-2019-18305,
        cve-res:CVE-2019-18306,
        cve-res:CVE-2019-18307,
        cve-res:CVE-2019-18308,
        cve-res:CVE-2019-18309,
        cve-res:CVE-2019-18310,
        cve-res:CVE-2019-18311,
        cve-res:CVE-2019-18312,
        cve-res:CVE-2019-18313,
        cve-res:CVE-2019-18314,
        cve-res:CVE-2019-18315,
        cve-res:CVE-2019-18316,
        cve-res:CVE-2019-18317,
        cve-res:CVE-2019-18318,
        cve-res:CVE-2019-18319,
        cve-res:CVE-2019-18320,
        cve-res:CVE-2019-18321,
        cve-res:CVE-2019-18322,
        cve-res:CVE-2019-18323,
        cve-res:CVE-2019-18324,
        cve-res:CVE-2019-18325,
        cve-res:CVE-2019-18326,
        cve-res:CVE-2019-18327,
        cve-res:CVE-2019-18328,
        cve-res:CVE-2019-18329,
        cve-res:CVE-2019-18330,
        cve-res:CVE-2019-18331,
        cve-res:CVE-2019-18332,
        cve-res:CVE-2019-18333,
        cve-res:CVE-2019-18334,
        cve-res:CVE-2019-18335 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-319,
        cwe-res:CWE-434,
        cwe-res:CWE-502,
        cwe-res:CWE-952 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SPPA-T3000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens SPPA-T3000 products: Application Server: all versions prior to Service Pack R8.2 SP2. MS3000 Migration Server: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-351-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2019 .

icsa-res:ICSA-19-353-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-353-01" ;
    dcterms:issued "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa EDS Ethernet Switches" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-19707" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-19707 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EDS Ethernet Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EDS-G508E Series: Firmware Version 6.0 and prior EDS-G512E Series: Firmware Version 6.0 and prior EDS-G516E Series: Firmware Version 6.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-353-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2019 .

icsa-res:ICSA-19-353-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-353-02" ;
    dcterms:issued "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Equinox Control Expert" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Argentina" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-18234" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2019-18234 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Control Expert" ;
    icsa:productDistribution "Argentina, Uruguay" ;
    icsa:productsAffected "all current and older versions could be affected.; Control Expert" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-353-02" ;
    icsa:vendor "Equinox" ;
    icsa:year 2019 .

icsa-res:ICSA-19-353-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-353-03" ;
    dcterms:issued "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON PLC Editor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-18236" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2019-18236 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is reported to be affected: Version 1.3.5_20190129.; a ladder logic software; Version of PLC Editor" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-353-03" ;
    icsa:vendor "WECON" ;
    icsa:year 2019 .

icsa-res:ICSA-19-353-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-19-353-04" ;
    dcterms:issued "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Reliable Controls MACH-ProWebCom/Sys" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-18249" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2019-18249 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MACH-ProWebCom/Sys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MACH-ProWebSys: All versions prior to 2.15 (Firmware versions prior to 8.26.4) MACH-ProWebCom: All versions prior to 2.15 (Firmware versions prior to 8.26.4)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-19-353-04" ;
    icsa:vendor "Reliable Controls" ;
    icsa:year 2019 .

icsa-res:ICSA-20-014-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-014-01" ;
    dcterms:issued "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE PACSystems RX3i" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Information Technology; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-13524" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-13524 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PACSystems RX3i" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Emerson reports this vulnerability affects the following GE PACSystem products and versions: CPE100: All versions prior to R9.85 CPE115: All versions prior to R9.85 CPE302: All versions prior to R9.90 CPE305: All versions prior to R9.90 CPE310: All versions prior to R9.90 CRU320: (End of Life; Upgrade to CPE330) CPE330: All versions prior to R9.90 CPE400: All versions prior to R9.90 CPL410: All versions prior to R9.90." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-014-01" ;
    icsa:vendor "GE/Emerson" ;
    icsa:year 2020 .

icsa-res:ICSA-20-014-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-014-02" ;
    dcterms:issued "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Server" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10940" ;
    icsa:cweNumber "CWE-266" ;
    icsa:hasCVE cve-res:CVE-2019-10940 ;
    icsa:hasCWE cwe-res:CWE-266 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINEMA Server - a network management software are affected: All versions prior to Version 14.0 SP2 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-014-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-014-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-014-03" ;
    dcterms:issued "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X Switches (Update B)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13933" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2019-13933 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: --------- Begin Update B Part 1 of 2 --------- SCALANCE X-200RNA (HSA): All versions prior to v3.2.7 SCALANCE X-200RNA (PRP): All versions prior to v3.2.7 SCALANCE X-200RNA EEC (HSR): All versions prior to v3.2.7 SCALANCE X-200RNA EEC (PRP): All versions prior to v3.2.7 --------- End Update B Part 1 of 2 --------- SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants): All versions prior to v4.1.3.; The following versions of SCALANCE X Switches; used to connect industrial components; are affected: SCALANCE X-200RNA (HSA): All versions SCALANCE X-200RNA (PRP): All versions SCALANCE X-200RNA EEC (HSR): All versions SCALANCE X-200RNA EEC (PRP): All versions --------- Begin Update B Part 1 of 1 --------- SCALANCE X302-7 EEC: All versions prior to v4.1.3 SCALANCE X304-2FE: All versions prior to v4.1.3 SCALANCE X306-1LD FE: All versions prior to v4.1.3 SCALANCE X307-2 EEC: All versions prior to v4.1.3 SCALANCE X307-2: All versions prior to v4.1.3 SCALANCE X307-3: All versions prior to v4.1.3 SCALANCE X307-3LD: All versions prior to v4.1.3 SCALANCE X308-2: All versions prior to v4.1.3 SCALANCE X308-2LD: All versions prior to v4.1.3 SCALANCE X308-2LH: All versions prior to v4.1.3 SCALANCE X308-2LH+: All versions prior to v4.1.3 SCALANCE X308-2M: All versions prior to v4.1.3 SCALANCE X308-2M TS: All versions prior to v4.1.3 SCALANCE X310: All versions prior to v4.1.3 SCALANCE X310FE: All versions prior to v4.1.3 SCALANCE X320-1 FE: All versions prior to v4.1.3 SCALANCE X320-1-2LD FE: All versions prior to v4.1.3 SCALANCE X408-2: All versions prior to v4.1.3 SCALANCE XR324-4M EEC: All versions prior to v4.1.3 SCALANCE XR324-4M PoE: All versions prior to v4.1.3 SCALANCE XR324-12M: All versions prior to v4.1.3 SCALANCE XR324-12M TS: All versions prior to v4.1.3 SIPLUS NET SCALANCE X308-2: All versions prior to v4.1.3 --------- End Update B Part 1 of 1 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-014-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-014-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-014-04" ;
    dcterms:issued "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS PERFECT HARMONY GH180" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-19278" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2019-19278 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS PERFECT HARMONY GH180" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINAMICS PERFECT HARMONY GH180 - a voltage converter are affected: All versions of SINAMICS PERFECT HARMONY GH180 Drives: MLFB 6SR32..-. . . ..-. . . . MLFB 6SR4. . . -. . . ..-. . . . MLFB 6SR5. . . -. . . ..-. . . .; with option A30 (HMIs 12 inches or larger) All versions of SINAMICS PERFECT HARMONY GH180 Drives: MLFB 6SR325.-. . . ..-. . . . (High Availability)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-014-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-014-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-014-05" ;
    dcterms:issued "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Portal (Update F)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10934; CVE-2019-1093" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2019-1093,
        cve-res:CVE-2019-10934 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIA Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "the Totally Integrated Automation Portal; The following versions of TIA Portal; are affected: TIA Portal v14: All versions TIA Portal v15: All versions prior to v15.1 Update 7 --------- Begin Update F Part 1 of 2 --------- TIA Portal v16: All versions prior to v16 update 6 --------- End Update F Part 1 of 2 --------- TIA Portal v17: All versions prior to v17 update 4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-014-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-014-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-014-06" ;
    dcterms:issued "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Vision" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-18244; CVE-2019-18273; CVE-2019-18271; CVE-2019-18275" ;
    icsa:cweNumber "CWE-284; CWE-79; CWE-352; CWE-532" ;
    icsa:hasCVE cve-res:CVE-2019-18244,
        cve-res:CVE-2019-18271,
        cve-res:CVE-2019-18273,
        cve-res:CVE-2019-18275 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-352,
        cwe-res:CWE-532,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Vision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI Vision - a visualization tool are affected: CVE-2019-18275 and CVE-2019-18271: All versions of PI Vision prior to 2019 CVE-2019-18273: PI Vision 2017 R2 and PI Vision 2017 R2 SP1 CVE-2019-18244: PI Vision 2017 R2; PI Vision 2017 R2 SP1; PI Vision 2019." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-014-06" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2020 .

icsa-res:ICSA-20-016-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-016-01" ;
    dcterms:issued "2020-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Controllers (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-6857; CVE-2018-7794; CVE-2019-6856" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2018-7794,
        cve-res:CVE-2019-6856,
        cve-res:CVE-2019-6857 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Modicon controllers - a PLC are affected: For CVE-2019-6857; the following Modicon controllers are affected: Modicon M580; all versions prior to v2.80 Modicon M340; all versions prior to v3.01 Modicon Premium; all versions prior to v3.20 Modicon Quantum; all versions prior to v3.60 For CVE-2019-6856 and CVE-2018-7794; the following Modicon controllers are affected: Modicon M580; all versions prior to v2.80 Modicon M340; all versions prior to v3.01 Modicon Premium; all versions prior to v3.20 Modicon Quantum; all versions prior to v3.52." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-016-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-021-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-021-01" ;
    dcterms:issued "2020-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Maxpro VMS & NVR" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-6960; CVE-2020-6959" ;
    icsa:cweNumber "CWE-502; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2020-6959,
        cve-res:CVE-2020-6960 ;
    icsa:hasCWE cwe-res:CWE-502,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Maxpro VMS & NVR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MAXPRO VMS and NVR; video management systems are affected: MAXPRO VMS: HNMSWVMS prior to Version VMS560 Build 595 T2-Patch HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-021-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2020 .

icsa-res:ICSA-20-035-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-035-01" ;
    dcterms:issued "2020-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect C-More Touch Panels" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-6969" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2020-6969 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "C-More Touch Panels" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of C-More Touch Panels - a software management platform are affected: C-More Touch Panels EA9 series: firmware versions prior to 6.53." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-035-01" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-01" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Synergy Systems & Solutions HUSKY RTU (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2019-16879; CVE-2020-7800; CVE-2019-20046; CVE-2019-20045; CVE-2020-7802; CVE-2020-7801" ;
    icsa:cweNumber "CWE-200; CWE-287; CWE-306; CWE-276; CWE-20; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2019-16879,
        cve-res:CVE-2019-20045,
        cve-res:CVE-2019-20046,
        cve-res:CVE-2020-7800,
        cve-res:CVE-2020-7801,
        cve-res:CVE-2020-7802 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-276,
        cwe-res:CWE-287,
        cwe-res:CWE-306,
        cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HUSKY RTU" ;
    icsa:productDistribution "Asia" ;
    icsa:productsAffected "The following versions of HUSKY RTU - a remote terminal unit are affected: HUSKY RTU 6049-E70; with firmware Versions 5.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-01" ;
    icsa:vendor "Synergy Systems & Solutions (SSS)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-02" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products SNMP Vulnerabilities (Update D)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2018-18065; CVE-2015-5621" ;
    icsa:cweNumber "CWE-19; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2015-5621,
        cve-res:CVE-2018-18065 ;
    icsa:hasCWE cwe-res:CWE-19,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Various SCALANCE, SIMATIC, SIPLUS products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: IE/PB LINK PN IO (including SIPLUS NET variants): All versions prior to v4.0.1 SCALANCE S602: All versions prior to v4.1 SCALANCE S612: All versions prior to v4.1 SCALANCE S623: All versions prior to v4.1 SCALANCE S627-2M: All versions prior to v4.1; SIMATIC CP 343-1 Advanced (6GK7343-1GX31-0XE0):All versions SIMATIC CP 443-1 (6GK7443-1EX30-0XE0): All versions SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0):: All versions SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0): All versions SIMATIC CP 1623 (6GK1162-3AA00): All versions prior to v14.00.15.00_51.25.00.01 SIMATIC CP 1626 (6GK1162-6AA01): All versions prior to v1.1.1 SIMATIC CP 1628(6GK1162-8AA00): All versions prior to v14.00.15.00_51.25.00.01 SIPLUS NET CP 343-1 Advanced (6AG1343-1GX31-4XE0): All versions SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0): All versions SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0): All versions; TIM 1531 IRC (including SIPLUS NET variants): All versions.; The following Siemens products are affected: IE/PB LINK PN IO (including SIPLUS NET variants): All versions prior to v4.0.1 SCALANCE S602: All versions prior to v4.1 SCALANCE S612: All versions prior to v4.1 SCALANCE S623: All versions prior to v4.1 SCALANCE S627-2M: All versions prior to v4.1; SIMATIC CP 1623: All versions prior to Version 14.00.15.00_51.25.00.01 SIMATIC CP 1626: All versions prior to v1.1.1 SIMATIC CP 1628: All versions prior to Version 14.00.15.00_51.25.00.01 SIMATIC CP 343-1 Advanced (including SIPLUS NET variants): All versions SIMATIC CP 443-1 (including SIPLUS NET variants): All versions SIMATIC CP 443-1 Advanced (including SIPLUS NET variants): All versions SIMATIC CP 443-1 OPC UA: All versions TIM 1531 IRC (including SIPLUS NET variants): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-03" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CP 1543-1" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-18217; CVE-2019-12815" ;
    icsa:cweNumber "CWE-284; CWE-835" ;
    icsa:hasCVE cve-res:CVE-2019-12815,
        cve-res:CVE-2019-18217 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP 1543-1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SIMATIC CP 1543-1; including SIPLUS NET variants are affected: All versions starting at 2.0 and prior to 2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-04" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PROFINET-IO Stack (Update H)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13946" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-13946 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PROFINET-IO Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "8DO; XF-200BA and XR-300WG: All versions prior to 3.0 SCALANCE XM-400 switch family: All versions prior to 6.0 SCALANCE XR-500 switch family: All versions prior to 6.0 SIMATIC CP 1616 and CP 1604: all versions prior to 2.8 SIMATIC CP 343-1 (incl. SIPLUS NET variants): All versions SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variants): All versions SIMATIC CP 343-1 ERPC: All versions SIMATIC CP 343-1 LEAN (incl. SIPLUS NET variants): All versions SIMATIC CP 443-1 (incl. SIPLUS NET variants): All versions SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variants): All versions SIMATIC CP 443-1 OPC UA: All versions SIMATIC ET200AL IM 157-1 PN: All versions SIMATIC ET200M IM153-4 PN IO HF (incl. SIPLUS variants): All versions SIMATIC ET200M IM153-4 PN IO ST (incl. SIPLUS variants): All versions SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants): All versions prior to 4.2.0 SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants): All versions prior to 4.1.0 SIMATIC ET200S (incl. SIPLUS variants): all versions SIMATIC ET200SP IM155-6 PN Basic (incl. SIPLUS variants): All versions SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants): All versions prior to 3.3.1 SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants): All versions prior to 4.1.0 SIMATIC ET200ecoPN (except 6ES7141-6BG00-0BB0; DC24V; DC24V/0; 6ES7142-6BR00-0BB0; Package for VxWorks: all versions SIMATIC MV400 family: all versions SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0 (incl. SIPLUS NET variant): all versions SIMATIC RF180C: all versions SIMATIC RF182C: all versions SIMATIC RF600 family: all versions prior to 3 SIMOTION C: All versions prior v4.5 SIMOTION D (incl. SIPLUS variants): All versions prior to v4.5 SIMOTION P: All versions prior to v4.5 SINAMICS DCP: all versions prior to 1.3 SOFTNET-IE PNIO: all versions --------- Begin Update H Part 1 of 2 --------- SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants): All versions prior to v4.1.4 --------- End Update H Part 1 of 2 ---------.; 16DI; 8DI; 6ES7142-6BG00-0BB0; DC24V/1; 5A; 4xM12 (6ES7142-6BF50-0AB0): All versions SIMATIC ET200ecoPN; 8xM12 (6ES7141-6BG00-0AB0): All versions SIMATIC ET200ecoPN; 8AI RTD/TC 8xM12 (6ES7144-6KD50-0AB0): All versions SIMATIC ET200ecoPN; 8xM12 (6ES7142-6BG00-0AB0): All versions SIMATIC ET200ecoPN; 8xM12 (6ES7142-6BH00-0AB0): All versions SIMATIC ET200ecoPN: IO-Link Master (6ES7148-6JA00-0AB0): All versions SCALANCE XB-200: All versions prior to v3.0 SCALANCE XC-200: All versions prior to v3.0 SCALANCE XP-200: All versions prior to v3.0 SCALANCE XF-200BA: All versions prior to v3.0 SCALANCE XR-300WG: All versions prior to v3.0 SCALANCE M-800: All versions prior to v4.3 SCALANCE S615: All versions prior to v4.3 Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller: All versions EK-ERTEC 200: All versions prior to 4.5 EK-ERTEC 200P: All versions prior to 4.6 PROFINET Driver for Controller: All versions prior to 2.1 RUGGEDCOM RM1224: All versions prior to 4.3 SCALANCE M-800 / S615: All versions prior to 4.3 SCALANCE W700 IEEE 802.11n: All versions prior to 6.0.1 SCALANCE X-200 switch family (incl. SIPLUS NET variants): All versions SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): All versions prior to 5.3 SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants): All versions SCALANCE XB-200; XC-200; 6S7143-6BH00-0BB0; 6ES7141-6BH00-0BB0; 8xM12 (6ES7142-6BR00-0AB0): All versions SIMATIC ET200ecoPN; 6ES7148-6JD00-0AB0 and 6ES7148-6JG00-0BB0): All versions SIMATIC ET200ecoPN (except 6ES7148-6JD00-0AB0 and 6ES7146-6FF00-0AB0): all versions SIMATIC ET200pro; 8xM12 (6ES7147-6BG00-0AB0): All versions SIMATIC ET200ecoPN; IM 154-3 PN HF: all versions SIMATIC ET200pro; 3A; 8AI; 4 U/I; 4 RTD/TC 8xM12 (6ES7144-6KD00-0AB0): All versions SIMATIC ET200ecoPN; Products that include the Siemens PROFINET-IO (PNIO) stack in versions prior to v06.00 are affected. Additionally; Siemens recommends other vendors of PROFINET devices check their products for vulnerable versions of the Siemens PNIO stack as part of the Siemens Development/Evaluation Kits. SIMATIC ET200ecoPN; DC24V/2A; 6ES7146-6FF00-0AB0; 8xM12 (6ES7141-6BH00-0AB0): All versions SIMATIC ET200ecoPN; 8 DIO; 4xM12 (6ES7141-6BF00-0AB0): All versions SIMATIC ET200ecoPN; 16DO DC24V/1; 4AO U/I 4xM12 (6ES7145-6HD00-0AB0): All versions SIMATIC ET200ecoPN; IM 154-4 PN HF: all versions SIMATIC IPC Support; 4xM12 (6ES7142-6BF00-0AB0): All versions SIMATIC ET200ecoPN; 8 DO; XP-200" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-05" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7 (Update B)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-13940" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-13940 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC S7 devices are affected: SIMATIC S7-1200 CPU family (incl. SIPLUS variants) all versions prior to v4.1 SIMATIC S7-300 PN/DP CPU family (incl. related ET200 CPUs and SIPLUS variants) all versions prior to V3.x.17 SIMATIC S7-400 PN/DP v6 and below CPU family (incl. SIPLUS variants) all versions SIMATIC S7-400 PN/DP v7 CPU family (incl. SIPLUS variants) all versions; SIMATIC WinAC (F) 2010 all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-06" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update G)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-1928; CVE-2019-19282" ;
    icsa:cweNumber "CWE-131" ;
    icsa:hasCVE cve-res:CVE-2019-1928,
        cve-res:CVE-2019-19282 ;
    icsa:hasCWE cwe-res:CWE-131 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS 7, SIMATIC WinCC, SIMATIC NET PC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC software are affected: OpenPCS 7 v8.1: all versions OpenPCS 7 v8.2: all versions OpenPCS 7 v9.0: all versions prior to v9.0 Upd3 SIMATIC BATCH v8.1: all versions SIMATIC BATCH v8.2: all versions SIMATIC BATCH v9.0: all versions prior to v9.0 SP1 Upd5 Update G SIMATIC NET PC Software v14: All versions prior to v14 SP1 Update 14 SIMATIC NET PC Software v15: All versions SIMATIC NET PC Software v16: All versions prior to v16 Update 1 End Update G. SIMATIC NET PC Software: all versions prior to v16 update 1 SIMATIC PCS 7 v8.1: all versions SIMATIC PCS 7 v8.2: all versions SIMATIC PCS 7 v9.0: all versions prior to v9.0 SP3 SIMATIC Route Control v8.1: all versions SIMATIC Route Control v8.2: all versions SIMATIC Route Control v9.0: all versions prior to v9.0 Upd4 SIMATIC WinCC (TIA Portal) v13: all versions prior to v13 SP2 SIMATIC WinCC (TIA Portal) v14: all versions SIMATIC WinCC (TIA Portal) v15.1: all versions prior to v15.1 Update 5 SIMATIC WinCC (TIA Portal) v16: all versions prior to v16 Update 1 SIMATIC WinCC v7.3: all versions SIMATIC WinCC v7.4: all versions prior to v7.4 SP1 Update 14 SIMATIC WinCC v7.5: all versions prior to v7.5.1 Upd1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-07" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X Switches (Update C)" ;
    icsa:CVSSScore "4.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13924" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2019-13924 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCALANCE X Switches; are affected: SCALANCE X-200 switch family (including SIPLUS NET variants): All versions prior to Version 5.2.4 SCALANCE X-200IRT switch family (including SIPLUS NET variants): All versions prior to v5.5.0 SCALANCE X-300 switch family (including X408 and SIPLUS NET variants): All versions prior to Version 4.1.3 --------- Begin Update C Part 1 of 2 --------- SCALANCE X-200RNA switch family: All versions prior to v3.2.7 --------- End Update C Part 1 of 2 --------- SCALANCE S602: All versions prior to 4.1 SCALANCE S612: All versions prior to 4.1 SCALANCE S623: All versions prior to 4.1 SCALANCE S627-2M: All versions prior to 4.1.; used to connect industrial components" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-08" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPORT MP" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2019-19277" ;
    icsa:cweNumber "CWE-778" ;
    icsa:hasCVE cve-res:CVE-2019-19277 ;
    icsa:hasCWE cwe-res:CWE-778 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPORT MP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIPORT MP: All versions prior to 3.1.4 are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-09" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OZW Web Server" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2019-13941" ;
    icsa:cweNumber "CWE-552" ;
    icsa:hasCVE cve-res:CVE-2019-13941 ;
    icsa:hasCWE cwe-res:CWE-552 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OZW Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OZW web server are affected: OZW672 and OZW772: All versions prior to 10.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-10" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE S-600 (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2019-13925; CVE-2019-13926; CVE-2019-6585" ;
    icsa:cweNumber "CWE-80; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-13925,
        cve-res:CVE-2019-13926,
        cve-res:CVE-2019-6585 ;
    icsa:hasCWE cwe-res:CWE-400,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE S-600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCALANCE S-600 are affected: SCALANCE S602; all versions v3.0 or higher and prior to v4.1 SCALANCE S612; all versions v3.0 or higher and prior to v4.1 SCALANCE S623; all versions v3.0 or higher and prior to v4.1 SCALANCE S627-2M; all versions v3.0 or higher and prior to v4.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-11" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-19281" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-19281 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC are affected: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions; SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions v2.5 or higher and lower than v20.8; SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions v2.5 or higher and lower than v2.8 SIMATIC S7-1500 Software Controller: All versions v2.5 or higher and lower than v20.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-12" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 4 and SIPROTEC Compact" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-19279" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-19279 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 4 and SIPROTEC Compact" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following SIPROTECT devices equipped with EN100 Ethernet communication modules: SIPROTEC 4; all versions SIPROTEC Compact; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-042-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-042-13" ;
    dcterms:issued "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digi ConnectPort LTS 32 MEI" ;
    icsa:CVSSScore "2.4"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Food and Agriculture; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-6973; CVE-2020-6975" ;
    icsa:cweNumber "CWE-434; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-6973,
        cve-res:CVE-2020-6975 ;
    icsa:hasCWE cwe-res:CWE-434,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ConnectPort LTS 32 MEI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ConnectPort LTS 32 MEI; which provides serial over Ethernet connectivity are affected: ConnectPort LTS 32 MEI: firmware Version 1.4.3 (82002228_K 08/09/2018); bios Version 1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-042-13" ;
    icsa:vendor "Digi International, Inc." ;
    icsa:year 2020 .

icsa-res:ICSA-20-044-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-044-01" ;
    dcterms:issued "2020-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Ethernet Serial RTU" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-6813; CVE-2019-6810; CVE-2019-6831" ;
    icsa:cweNumber "CWE-284; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2019-6810,
        cve-res:CVE-2019-6813,
        cve-res:CVE-2019-6831 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Ethernet Serial RTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports these vulnerabilities affect the following products: BMXNOR0200H Ethernet/Serial RTU module; all firmware versions The BMXNOR0200H Ethernet/Serial RTU module is part of the Modicon X80 I/O product category. Modicon X80 I/Os are a common platform of modules for Modicon M580 and M340 PLCs." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-044-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-044-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-044-02" ;
    dcterms:issued "2020-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Magelis HMI Panels" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2019-6833" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2019-6833 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Magelis HMI Panels" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Magelis HMI Panels are affected: Magelis HMIGTO series; all firmware versions Magelis HMISTO series; all firmware versions Magelis XBTGH series; all firmware versions Magelis HMIGTU series; all firmware versions Magelis HMIGTUX series; all firmware versions Magelis HMISCU series; all firmware versions Magelis HMISTU series; all firmware versions Magelis XBTGT series; all firmware versions Magelis XBTGC series; all firmware versions Magelis HMIGXO series; all firmware versions Magelis HMIGXU series; all firmware versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-044-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-049-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-049-01" ;
    dcterms:issued "2020-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell INNCOM INNControl 3" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-6968" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2020-6968 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "INNCOM INNControl 3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of INNCOM INNControl 3 - energy management platform are affected: INNControl 3; Versions 3.21 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-049-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2020 .

icsa-res:ICSA-20-049-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-049-02" ;
    dcterms:issued "2020-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson OpenEnterprise" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Chemical; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-6970" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-6970 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenEnterprise" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OpenEnterprise SCADA Server are affected: OpenEnterprise Server 2.83 is affected if Modbus or ROC Interfaces have been installed and are in use OpenEnterprise 3.1 through 3.3.3; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-049-02" ;
    icsa:vendor "Emerson" ;
    icsa:year 2020 .

icsa-res:ICSA-20-051-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-051-01" ;
    dcterms:issued "2020-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "B&R Automation Studio and Automation Runtime" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-19108" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2019-19108 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Studio and Automation Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of B&R products are affected: Automation Studio Versions 2.7; 3.0.71; 3.0.80; 3.0.81; 3.0.90; 4.0.x to 4.6.4; and 4.7.2 Automation Runtime Versions 2.96; 3.00; 3.01; 3.06; 3.07; 3.08 to 3.10; 4.00 to 4.03; 4.04 to 4.03; 4.04 to 4.63; 4.72 and above." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-051-01" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2020 .

icsa-res:ICSA-20-051-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-051-02" ;
    dcterms:issued "2020-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Diagnostics Update B" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-6967" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2020-6967 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Diagnostics" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected.; --------- Begin Update A part 1 of 2 --------- The following versions of FactoryTalk Diagnostic software; a subsystem of the FactoryTalk Services Platform; are affected: FactoryTalk Diagnostics software: Versions 2.00 to 6.11 --------- End Update A part 1 of 2 --------- All versions of FactoryTalk Diagnostics software; a subsystem of the FactoryTalk Service Platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-051-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-051-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-051-03" ;
    dcterms:issued "2020-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell NOTI-FIRE-NET Web Server (NWS-3)" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2020-6974; CVE-2020-6972" ;
    icsa:cweNumber "CWE-294; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2020-6972,
        cve-res:CVE-2020-6974 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NOTI-FIRE-NET Web Server (NWS-3)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Notifier Web Server (NWS) are affected: Version 3.50 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-051-03" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2020 .

icsa-res:ICSA-20-051-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-051-04" ;
    dcterms:issued "2020-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Auto-Maskin RP210E, DCU210E, and Marine Observer Pro (Android App)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Norway" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2019-6560; CVE-2019-6558; CVE-2018-5399; CVE-2018-5402; CVE-2018-5400; CVE-2018-5401" ;
    icsa:cweNumber "CWE-640; CWE-521; CWE-346; CWE-798; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2018-5399,
        cve-res:CVE-2018-5400,
        cve-res:CVE-2018-5401,
        cve-res:CVE-2018-5402,
        cve-res:CVE-2019-6558,
        cve-res:CVE-2019-6560 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-346,
        cwe-res:CWE-521,
        cwe-res:CWE-640,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RP210E, DCU210E, and Marine Observer Pro (Android App)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of RP210E and DCU 210 - a remote panel and digital control unit are affected: RP210E Versions 3.7 and prior DCU210E Versions 3.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-051-04" ;
    icsa:vendor "Auto-Maskin" ;
    icsa:year 2020 .

icsa-res:ICSA-20-056-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-056-01" ;
    dcterms:issued "2020-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MB3xxx Series Protocol Gateways" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-9097; CVE-2019-9101; CVE-2019-9103; CVE-2019-9098; CVE-2019-9096; CVE-2019-9095; CVE-2019-9104; CVE-2019-9099; CVE-2019-9102" ;
    icsa:cweNumber "CWE-680; CWE-352; CWE-200; CWE-941; CWE-521; CWE-121; CWE-312; CWE-319; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2019-9095,
        cve-res:CVE-2019-9096,
        cve-res:CVE-2019-9097,
        cve-res:CVE-2019-9098,
        cve-res:CVE-2019-9099,
        cve-res:CVE-2019-9101,
        cve-res:CVE-2019-9102,
        cve-res:CVE-2019-9103,
        cve-res:CVE-2019-9104 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-200,
        cwe-res:CWE-312,
        cwe-res:CWE-319,
        cwe-res:CWE-327,
        cwe-res:CWE-352,
        cwe-res:CWE-521,
        cwe-res:CWE-680,
        cwe-res:CWE-941 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MB3xxx Series Protocol Gateways" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Moxa reports these vulnerabilities affects the following protocol gateways: MB3170 series firmware; Version 4.0 or lower MB3270 series firmware; Version 4.0 or lower MB3180 series firmware; Version 2.0 or lower MB3280 series firmware; Version 3.0 or lower MB3480 series firmware; Version 3.0 or lower MB3660 series firmware; Version 2.2 or lower." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-056-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2020 .

icsa-res:ICSA-20-056-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-056-02" ;
    dcterms:issued "2020-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-18242; CVE-2019-18238; CVE-2020-7003" ;
    icsa:cweNumber "CWE-319; CWE-941; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2019-18238,
        cve-res:CVE-2019-18242,
        cve-res:CVE-2020-7003 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-319,
        cwe-res:CWE-941 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Moxa reports these vulnerabilities affects the following products: ioLogik 2500 series firmware; Version 3.0 or lower IOxpress configuration utility; Version 2.3.0 or lower." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-056-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2020 .

icsa-res:ICSA-20-056-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-056-03" ;
    dcterms:issued "2020-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa PT-7528 and PT-7828 Series Ethernet Switches" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-6987; CVE-2020-6983; CVE-2020-6989; CVE-2020-6993; CVE-2020-6985; CVE-2020-6995" ;
    icsa:cweNumber "CWE-200; CWE-321; CWE-521; CWE-121; CWE-798; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2020-6983,
        cve-res:CVE-2020-6985,
        cve-res:CVE-2020-6987,
        cve-res:CVE-2020-6989,
        cve-res:CVE-2020-6993,
        cve-res:CVE-2020-6995 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-200,
        cwe-res:CWE-321,
        cwe-res:CWE-327,
        cwe-res:CWE-521,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PT-7528 and PT-7828 Series Ethernet Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Moxa reports these vulnerabilities affect the following Ethernet switches: PT-7528 series firmware; Version 4.0 or lower PT-7828 series firmware; Version 3.9 or lower." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-056-03" ;
    icsa:vendor "Moxa" ;
    icsa:year 2020 .

icsa-res:ICSA-20-056-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-056-04" ;
    dcterms:issued "2020-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa EDS-G516E and EDS-510E Series Ethernet Switches" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7001; CVE-2020-6999; CVE-2020-7007; CVE-2020-6979; CVE-2020-6997; CVE-2020-6991; CVE-2020-6981" ;
    icsa:cweNumber "CWE-120; CWE-321; CWE-521; CWE-121; CWE-798; CWE-319; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2020-6979,
        cve-res:CVE-2020-6981,
        cve-res:CVE-2020-6991,
        cve-res:CVE-2020-6997,
        cve-res:CVE-2020-6999,
        cve-res:CVE-2020-7001,
        cve-res:CVE-2020-7007 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-319,
        cwe-res:CWE-321,
        cwe-res:CWE-327,
        cwe-res:CWE-521,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EDS-G516E and EDS-510E Series Ethernet Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Moxa reports the vulnerabilities affect the following Ethernet switches: EDS-G516E Series firmware; Version 5.2 or lower EDS-510E Series firmware; Version 5.2 or lower." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-056-04" ;
    icsa:vendor "Moxa" ;
    icsa:year 2020 .

icsa-res:ICSA-20-056-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-056-05" ;
    dcterms:issued "2020-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell WIN-PAK" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-7005; CVE-2020-6982; CVE-2020-6978" ;
    icsa:cweNumber "CWE-352; CWE-477; CWE-644" ;
    icsa:hasCVE cve-res:CVE-2020-6978,
        cve-res:CVE-2020-6982,
        cve-res:CVE-2020-7005 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-477,
        cwe-res:CWE-644 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WIN-PAK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of WIN-PAK - a monitoring platform are affected: WIN-PAK 4.7.2; Web and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-056-05" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2020 .

icsa-res:ICSA-20-063-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-063-01" ;
    dcterms:issued "2020-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson ValveLink" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Healthcare and Public Health; Nuclear Reactors Materials and Waste; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-6971" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2020-6971 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ValveLink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ValveLink digital valve controller software are affected: ValveLink; v12.0.264 to v13.4.118." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-063-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2020 .

icsa-res:ICSA-20-063-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-063-02" ;
    dcterms:issued "2020-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "PHOENIX CONTACT Emalytics Controller ILC" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2020-8768" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2020-8768 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Emalytics Controller ILC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Emalytics Controller are affected: ILC 2050 BI (Article number 2403160): all versions prior to 1.2.3 ILC 2050 BI-L (Article number 2404671): all versions prior to 1.2.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-063-02" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2020 .

icsa-res:ICSA-20-063-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-063-03" ;
    dcterms:issued "2020-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron PLC CJ Series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-6986" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-6986 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC CJ Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Omron programmable logic controllers are affected: Omron PLC CJ series; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-063-03" ;
    icsa:vendor "Omron" ;
    icsa:year 2020 .

icsa-res:ICSA-20-063-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-063-04" ;
    dcterms:issued "2020-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa AWK-3131A Series Industrial AP/Bridge/Client" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-5162; CVE-2019-5165; CVE-2019-5137; CVE-2019-5136; CVE-2019-5141; CVE-2019-5148; CVE-2019-5140; CVE-2019-5138; CVE-2019-5143; CVE-2019-5139; CVE-2019-5142; CVE-2019-5153" ;
    icsa:cweNumber "CWE-120; CWE-321; CWE-284; CWE-78; CWE-288; CWE-121; CWE-798; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-5136,
        cve-res:CVE-2019-5137,
        cve-res:CVE-2019-5138,
        cve-res:CVE-2019-5139,
        cve-res:CVE-2019-5140,
        cve-res:CVE-2019-5141,
        cve-res:CVE-2019-5142,
        cve-res:CVE-2019-5143,
        cve-res:CVE-2019-5148,
        cve-res:CVE-2019-5153,
        cve-res:CVE-2019-5162,
        cve-res:CVE-2019-5165 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-284,
        cwe-res:CWE-288,
        cwe-res:CWE-321,
        cwe-res:CWE-78,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AWK-3131A Series Industrial AP/Bridge/Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Moxa reports that the vulnerabilities affect the following versions of AWK-3131A - a wireless networking appliance: Moxa AWK-3131A firmware; Version 1.13 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-063-04" ;
    icsa:vendor "Moxa" ;
    icsa:year 2020 .

icsa-res:ICSA-20-065-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-065-01" ;
    dcterms:issued "2020-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO I/O-CHECK" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2019-5073; CVE-2019-5078; CVE-2019-5075; CVE-2019-5074; CVE-2019-5081; CVE-2019-5080; CVE-2019-5077; CVE-2019-5082; CVE-2019-5079" ;
    icsa:cweNumber "CWE-201; CWE-805; CWE-306; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2019-5073,
        cve-res:CVE-2019-5074,
        cve-res:CVE-2019-5075,
        cve-res:CVE-2019-5077,
        cve-res:CVE-2019-5078,
        cve-res:CVE-2019-5079,
        cve-res:CVE-2019-5080,
        cve-res:CVE-2019-5081,
        cve-res:CVE-2019-5082 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-201,
        cwe-res:CWE-306,
        cwe-res:CWE-805 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "I/O-CHECK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of I/O-CHECK software are affected by the listed vulnerabilities: Series PFC100 (750-81xx/xxx-xxx) Series PFC200 (750-82xx/xxx-xxx) 750-852; 750-831/xxx-xxx; 750-881; 750-880/xxx-xxx; 750-889 750-823; 750-832/xxx-xxx; 750-862; 750-890/xxx-xxx; 750-891." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-065-01" ;
    icsa:vendor "WAGO" ;
    icsa:year 2020 .

icsa-res:ICSA-20-070-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-070-01" ;
    dcterms:issued "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens and PKE SiNVR/SiVMS Video Server (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2019-19291; CVE-2019-19290; CVE-2019-19298; CVE-2019-19296; CVE-2019-19293; CVE-2019-19297; CVE-2019-19299; CVE-2019-19292; CVE-2019-19294; CVE-2019-19295" ;
    icsa:cweNumber "CWE-313; CWE-22; CWE-20; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2019-19290,
        cve-res:CVE-2019-19291,
        cve-res:CVE-2019-19292,
        cve-res:CVE-2019-19293,
        cve-res:CVE-2019-19294,
        cve-res:CVE-2019-19295,
        cve-res:CVE-2019-19296,
        cve-res:CVE-2019-19297,
        cve-res:CVE-2019-19298,
        cve-res:CVE-2019-19299 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-313,
        cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiNVR/SiVMS Video Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SiNVR/SiVMS Video Server - a video management solution are affected: SiNVR 3 Central Control Server (CCS): All versions Moved to SSA-761844 and ICSA-21-103-10 SiNVR/SiVMS Video Server: All versions prior to v5.0.0 SiNVR/SiVMS Video Server: v5.0.0 and later is affected by CVE-2019-19298 and CVE-2019-19299." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-070-01" ;
    icsa:vendor "Siemens and PKE" ;
    icsa:year 2020 .

icsa-res:ICSA-20-070-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-070-02" ;
    dcterms:issued "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-18336" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-18336 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC and SINUMERIK are affected: SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to 3.X.17; SIMATIC TDC CP51M1: All versions prior to 1.1.8 SIMATIC TDC CPU555: All versions prior to 1.1.1 SINUMERIK 840D sl: All versions prior to 4.8.6 SINUMERIK 840D sl: All versions prior to 4.94." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-070-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-070-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-070-03" ;
    dcterms:issued "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power 5" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-7579" ;
    icsa:cweNumber "CWE-80" ;
    icsa:hasCVE cve-res:CVE-2020-7579 ;
    icsa:hasCWE cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Spectrum Power 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Spectrum Power 5 grid control system are affected: Spectrum Power 5: All version prior to 5.50 HF02." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-070-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-070-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-070-04" ;
    dcterms:issued "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Kantech EntraPass" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-7589" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-7589 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EntraPass" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Kantech EntraPass security management software are affected: Corporate Edition: All versions prior to v8.10 Global Edition: All versions prior to v8.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-070-04" ;
    icsa:vendor "Kantech (Subsidiary of Johnson Controls)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-070-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-070-05" ;
    dcterms:issued "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-9044" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2020-9044 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Metasys are affected by this vulnerability: Application and Data Server (ADS; ADS-Lite): Release 10.1 and prior Extended Application and Data Server (ADX): Release 10.1 and prior Open Data Server (ODS): Release 10.1 and prior Open Application Server (OAS): Release 10.1 Network Automation Engine (NAE55 only): Releases 9.0.1; 9.0.2; 9.0.3; 9.0.5; 9.0.6 Network Integration Engine (NIE55/NIE59): Releases 9.0.1; 9.0.2; 9.0.3; 9.0.5; 9.0.6 NAE85 and NIE85: Release 10.1 and prior LonWorks Control Server (LCS): Release 10.1 and prior System Configuration Tool (SCT): Release 13.2 and prior Smoke Control Network Automation Engine (NAE55; UL 864 UUKL/ORD-C100-13 UUKLC 10th Edition Listed) Release 8.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-070-05" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2020 .

icsa-res:ICSA-20-070-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-070-06" ;
    dcterms:issued "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix Controllers and RSLogix 500 Software" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-6980; CVE-2020-6990; CVE-2020-6984; CVE-2020-6988" ;
    icsa:cweNumber "CWE-603; CWE-327; CWE-321; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2020-6980,
        cve-res:CVE-2020-6984,
        cve-res:CVE-2020-6988,
        cve-res:CVE-2020-6990 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-321,
        cwe-res:CWE-327,
        cwe-res:CWE-603 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix Controllers and RSLogix 500 Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation products are affected: MicroLogix 1400 Controllers Series B v21.001 and prior Series A; all versions MicroLogix 1100 Controller; all versions RSLogix 500 Software v12.001 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-070-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-072-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-072-01" ;
    dcterms:issued "2020-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB eSOMS" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-19002; CVE-2019-19093; CVE-2019-19003; CVE-2019-19091; CVE-2019-19000; CVE-2019-19095; CVE-2019-19094; CVE-2019-19096; CVE-2019-19097; CVE-2019-19090; CVE-2019-19089; CVE-2019-19001; CVE-2019-19092" ;
    icsa:cweNumber "CWE-89; CWE-644; CWE-200; CWE-1004; CWE-642; CWE-79; CWE-614; CWE-521; CWE-326; CWE-693; CWE-312; CWE-1021; CWE-525" ;
    icsa:hasCVE cve-res:CVE-2019-19000,
        cve-res:CVE-2019-19001,
        cve-res:CVE-2019-19002,
        cve-res:CVE-2019-19003,
        cve-res:CVE-2019-19089,
        cve-res:CVE-2019-19090,
        cve-res:CVE-2019-19091,
        cve-res:CVE-2019-19092,
        cve-res:CVE-2019-19093,
        cve-res:CVE-2019-19094,
        cve-res:CVE-2019-19095,
        cve-res:CVE-2019-19096,
        cve-res:CVE-2019-19097 ;
    icsa:hasCWE cwe-res:CWE-1004,
        cwe-res:CWE-1021,
        cwe-res:CWE-200,
        cwe-res:CWE-312,
        cwe-res:CWE-326,
        cwe-res:CWE-521,
        cwe-res:CWE-525,
        cwe-res:CWE-614,
        cwe-res:CWE-642,
        cwe-res:CWE-644,
        cwe-res:CWE-693,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "eSOMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of eSOMS are affected: eSOMS 6.02 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-072-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2020 .

icsa-res:ICSA-20-072-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-072-02" ;
    dcterms:issued "2020-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Asset Suite" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-18998" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2019-18998 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Asset Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Asset Suite are affected: Asset Suite Versions 9.6 and prior; excluding 9.4.2.6 and 9.5.3.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-072-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2020 .

icsa-res:ICSA-20-072-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-072-03" ;
    dcterms:issued "2020-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley Stratix 5950" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-1649" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2019-1649 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Allen-Bradley Stratix 5950" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Allen-Bradley Stratix 5950 Security Appliance are affected: 1783-SAD4T0SBK9 1783-SAD4T0SPK9 1783-SAD2T2SBK9 1783-SAD2T2SPK9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-072-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-077-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-077-01" ;
    dcterms:issued "2020-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics Industrial Automation CNCSoft ScreenEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-7002; CVE-2020-6976" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-6976,
        cve-res:CVE-2020-7002 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft ScreenEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CNCSoft ScreenEditor - a user interface are affected: CNCSoft ScreenEditor v1.00.96 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-077-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2020 .

icsa-res:ICSA-20-079-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-079-01" ;
    dcterms:issued "2020-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Systech NDS-5000 Terminal Server" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-7006" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-7006 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NDS-5000 Terminal Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of NDS-5000 Terminal Server - a network server are affected: NDS-5000 Terminal Server; NDS/5008 (8 Port; RJ45); firmware Version 02D.30." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-079-01" ;
    icsa:vendor "Systech Corporation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-084-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-084-01" ;
    dcterms:issued "2020-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "VISAM Automation Base (VBASE) (Update B)" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-10601; CVE-2020-7004; CVE-2020-7000; CVE-2020-10599; CVE-2020-7008" ;
    icsa:cweNumber "CWE-922; CWE-276; CWE-326; CWE-23; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-10599,
        cve-res:CVE-2020-10601,
        cve-res:CVE-2020-7000,
        cve-res:CVE-2020-7004,
        cve-res:CVE-2020-7008 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-23,
        cwe-res:CWE-276,
        cwe-res:CWE-326,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation Base (VBASE)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of VBASE - automation platform are affected: VBASE Editor; Version 11.5.0.2 VBASE Web-Remote Module." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-084-01" ;
    icsa:vendor "VISAM" ;
    icsa:year 2020 .

icsa-res:ICSA-20-084-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-084-02" ;
    dcterms:issued "2020-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS SCADA Software" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-7479; CVE-2020-7478" ;
    icsa:cweNumber "CWE-306; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2020-7478,
        cve-res:CVE-2020-7479 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS SCADA Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of IGSS are affected: Versions 14 and prior using the service IGSSupdate." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-084-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-086-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-086-01" ;
    dcterms:issued "2020-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10607" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-10607 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "The following versions of WebAccess - HMI platform are affected: WebAccess Versions 8.4.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-086-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-091-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-091-01" ;
    dcterms:issued "2020-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hirschmann Automation and Control HiOS and HiSecOS Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2020-6994" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2020-6994 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HiOS and HiSecOS Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following devices using HiOS Version 07.0.02 and lower are affected: RSP; RSPE; RSPS; RSPL; MSP; EES; EES; EESX; GRS; OS; RED The following devices using HiSecOS Version 03.2.00 and lower are affected: EAGLE20/30." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-091-01" ;
    icsa:vendor "Hirschmann Automation and Control GmbH (Division of Belden Inc)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-091-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-091-02" ;
    dcterms:issued "2020-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5527" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-5527 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MELSEC programmable controllers with MELSOFT transmission port (UDP/IP) are affected: MELSEC; iQ-R; iQ-F; Q; L; and F series; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-091-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-093-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-093-01" ;
    dcterms:issued "2020-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "B&R Automation Studio" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-19101; CVE-2019-19100; CVE-2019-19102" ;
    icsa:cweNumber "CWE-22; CWE-269; CWE-325" ;
    icsa:hasCVE cve-res:CVE-2019-19100,
        cve-res:CVE-2019-19101,
        cve-res:CVE-2019-19102 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-269,
        cwe-res:CWE-325 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "B&R Automation reports the vulnerabilities affect the following versions of Automation Studio: Automation Studio; Versions 4.0.x Automation Studio; Versions 4.1.x Automation Studio; Versions 4.2.x Automation Studio; versions prior to 4.3.11SP Automation Studio; versions prior to 4.4.9SP Automation Studio; versions prior to 4.5.4SP Automation Studio; versions prior to 4.6.3SP Automation Studio; versions prior to 4.7.2 Automation Studio; versions prior to 4.8.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-093-01" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2020 .

icsa-res:ICSA-20-098-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-098-01" ;
    dcterms:issued "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/NMS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10631; CVE-2020-10619; CVE-2020-10623; CVE-2020-10625; CVE-2020-10621; CVE-2020-10603; CVE-2020-10617; CVE-2020-10629" ;
    icsa:cweNumber "CWE-434; CWE-611; CWE-89; CWE-306; CWE-23; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2020-10603,
        cve-res:CVE-2020-10617,
        cve-res:CVE-2020-10619,
        cve-res:CVE-2020-10621,
        cve-res:CVE-2020-10623,
        cve-res:CVE-2020-10625,
        cve-res:CVE-2020-10629,
        cve-res:CVE-2020-10631 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-306,
        cwe-res:CWE-434,
        cwe-res:CWE-611,
        cwe-res:CWE-78,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/NMS" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "The following versions of WebAccess/NMS - a network management system are affected: WebAccess/NMS versions prior to 3.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-098-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-098-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-098-02" ;
    dcterms:issued "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Digital CIMPLICITY" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture Water" ;
    icsa:cveNumber "CVE-2020-6992" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2020-6992 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CIMPLICITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE Digital CIMPLICITY v10.0 and prior are affected by this vulnerability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-098-02" ;
    icsa:vendor "GE Digital" ;
    icsa:year 2020 .

icsa-res:ICSA-20-098-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-098-03" ;
    dcterms:issued "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "HMS Networks eWON Flexy and Cosy" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10633" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-10633 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "eWON Flexy and Cosy" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following eWON products are affected: eWON Flexy: All firmware versions prior to 14.1s0 eWON Cosy: All firmware versions prior to 14.1s0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-098-03" ;
    icsa:vendor "HMS Industrial Networks" ;
    icsa:year 2020 .

icsa-res:ICSA-20-098-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-098-04" ;
    dcterms:issued "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric V-Server Lite" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-10646" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2020-10646 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "V-Server Lite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of V-Server Lite - a data collection and management service are affected: V-Server Lite; all versions prior to 4.0.9.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-098-04" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-098-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-098-05" ;
    dcterms:issued "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "KUKA.Sim Pro" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-10635" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2020-10635 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sim Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KUKA.Sim Pro Version 3.1 simulation and machine-programming software is affected by this vulnerability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-098-05" ;
    icsa:vendor "KUKA" ;
    icsa:year 2020 .

icsa-res:ICSA-20-100-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-100-01" ;
    dcterms:issued "2020-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLinx Classic" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10642" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2020-10642 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLinx Classic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of RSLinx Classic PLC communications software are affected: RSLinx Versions 4.11.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-100-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-105-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-105-01" ;
    dcterms:issued "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton HMiSoft VU3" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-10637; CVE-2020-10639" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-10637,
        cve-res:CVE-2020-10639 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HMiSoft VU3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of HMiSoft VU3 - a HMI Operator Interface are affected: HMiSoft VU3 Version 3.00.23 and prior; however; the HMIVU runtimes are not impacted by these issues." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-105-01" ;
    icsa:vendor "Eaton" ;
    icsa:year 2020 .

icsa-res:ICSA-20-105-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-105-02" ;
    dcterms:issued "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Triangle MicroWorks DNP3 Outstation Libraries" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-6996" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-6996 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DNP3 Outstation Libraries" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected: 3.16.00 through 3.25.01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-105-02" ;
    icsa:vendor "Triangle MicroWorks" ;
    icsa:year 2020 .

icsa-res:ICSA-20-105-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-105-03" ;
    dcterms:issued "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Triangle MicroWorks SCADA Data Gateway" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10613; CVE-2020-10615; CVE-2020-10611" ;
    icsa:cweNumber "CWE-843; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-10611,
        cve-res:CVE-2020-10613,
        cve-res:CVE-2020-10615 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA Data Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCADA Data Gateway software are affected: 2.41.0213 through 4.0.122." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-105-03" ;
    icsa:vendor "Triangle MicroWorks" ;
    icsa:year 2020 .

icsa-res:ICSA-20-105-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-105-04" ;
    dcterms:issued "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Climatix (Update A)" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2020-7575; CVE-2020-7574" ;
    icsa:cweNumber "CWE-79; CWE-80" ;
    icsa:hasCVE cve-res:CVE-2020-7574,
        cve-res:CVE-2020-7575 ;
    icsa:hasCWE cwe-res:CWE-79,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Climatix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of the Climatix product line are affected: Climatix POL908 (BACnet/IP module); all versions; Climatix POL909 (AWM module); all versions prior to v11.32." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-105-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-105-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-105-05" ;
    dcterms:issued "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2018-5391; CVE-2018-5390" ;
    icsa:cweNumber "CWE-20; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-5390,
        cve-res:CVE-2018-5391 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM, SCALANCE, SIMATIC, SINEMA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM RM1224: All versions prior to 6.1 RUGGEDCOM ROX II: All versions prior to 2.13.3 (only affected by CVE-2018-5391) SCALANCE M-800 family: All versions prior to 6.1 SCALANCE S615: All versions prior to 6.1 SCALANCE SC-600: All versions prior to 2.0 SCALANCE W1700 IEEE 802.11ac: All versions prior to 2.0 SCALANCE W700 IEEE 802.11a/b/g/n: All versions prior to 6.4 SIMATIC CP 1242-7: All versions prior to 3.2 SIMATIC CP 1243-1 (incl. SIPLUS NET variants): All versions prior to 3.2 SIMATIC CP 1243-7 LTE EU: All versions prior to 3.2 SIMATIC CP 2243-7 LTE US: All versions prior to 3.2 SIMATIC CP 1243-8 IRC: All versions prior to 3.2 SIMATIC CP 1542SP-1: All versions prior to 2.1 SIMATIC CP 1542SP-1 IRC (incl. SIPLUS NET variants): All versions prior to 2.1 SIMATIC CP 1543-1 (incl. SIPLUS NET variants): All versions prior to 2.2 SIMATIC CP 1543SP-1 (incl. SIPLUS NET variants): All versions prior to 2.1; SIMATIC RF185C: All versions prior to v1.3 SIMATIC RF186C: All versions prior to v1.3 SIMATIC RF186CI: All versions prior to v1.3 SIMATIC RF188C: All versions prior to v1.3 SIMATIC RF188CI: All versions prior to v1.3; SINEMA Remote Connect Server: All versions newer than 1.1 and prior to 2.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-105-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-105-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-105-06" ;
    dcterms:issued "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMOTICS, Desigo, APOGEE, and TALON (Update D)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-1393; CVE-2019-13939" ;
    icsa:cweNumber "CWE-84" ;
    icsa:hasCVE cve-res:CVE-2019-1393,
        cve-res:CVE-2019-13939 ;
    icsa:hasCWE cwe-res:CWE-84 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMOTICS, Desigo, APOGEE, and TALON" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2.3x to v6.00.327 Desigo PXC22-E.D: All versions; 2.3x to v6.00.327 Desigo PXC12-E.D: All versions; 2.3x to v6.00.327 Desigo PXC200-E.D: All versions; 2.3x to v6.00.327 Desigo PXC100-E.D: All versions; 2.3x to v6.00.327 Desigo PXC128-U: All versions; 2.3x to v6.00.327 Desigo PXC001-E.D: All versions; 2.3x to v6.00.327 Desigo PXC22.1-E.D: All versions; 2.3x to v6.00.327 Desigo PXC00-U: All versions; 2.3x to v6.00.327 Desigo PXC36.1-E.D: All versions; 2.3x to v6.00.327 Desigo PXC50-E.D: All versions; Siemens reports the vulnerability affects the following products and versions: APOGEE MEC/MBC/PXC (P2): All versions prior to 2.8.2 Begin Update D: APOGEE PXC Series (P2): All versions between 2.8.2 and v2.8.19 End Update D Desigo PXC00-E.D: All versions; 2.3x to v6.00.327 SIMOTICS CONNECT 400: All versions prior to 0.3.0.330 TALON TC Series (BACnet): All versions prior to 3.5.3 APOGEE PXC Series (BACnet): All versions prior to 3.5.3.; 2.3x to v6.00.327 Desigo PXM20-E: All versions; 2.3x to v6.00.327 Desigo PXC64-U: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-105-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-105-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-105-07" ;
    dcterms:issued "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE & SIMATIC (Update E)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-1930; CVE-2019-19301" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-19301 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE, SIMATIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ports on front) (6GK5324-4GG10-3ER2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; coated) (6GK5302-7GD00-1GA3): All versions prior to v4.1.4 SCALANCE X302-7 EEC (230V) (6GK5302-7GD00-3EA3): All versions prior to v4.1.4 SCALANCE X302-7 EEC (230V; ports on rear) (6GK5324-0GG10-1HR2): All versions prior to v4.1.4 SCALANCE XR324-12M (230V; ports on front) (6GK5324-4GG00-1ER2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (24V; coated) (6GK5307-2FD00-3GA3): All versions prior to v4.1.4 SCALANCE X307-3 (6GK5307-3BL00-2AA3): All versions prior to v4.1.4 SCALANCE X307-3 (6GK5307-3BL10-2AA3): All versions prior to v4.1.4 SCALANCE X307-3LD (6GK5307-3BM00-2AA3): All versions prior to v4.1.4 SCALANCE X307-3LD (6GK5307-3BM10-2AA3): All versions prior to v4.1.4 SCALANCE X308-2 (6GK5308-2FL00-2AA3): All versions prior to v4.1.4 SCALANCE X308-2 (6GK5308-2FL10-2AA3): All versions prior to v4.1.4 SCALANCE X308-2LD (6GK5308-2FM00-2AA3): All versions prior to v4.1.4 SCALANCE X308-2LD (6GK5308-2FM10-2AA3): All versions prior to v4.1.4 SCALANCE X308-2LH (6GK5308-2FN00-2AA3): All versions prior to v4.1.4 SCALANCE X308-2LH (6GK5308-2FN10-2AA3): All versions prior to v4.1.4 SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3): All versions prior to v4.1.4 SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3): All versions prior to v4.1.4 SCALANCE X308-2M (6GK5308-2GG00-2AA2): All versions prior to v4.1.4 SCALANCE X308-2M (6GK5308-2GG10-2AA2): All versions prior to v4.1.4 SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2): All versions prior to v4.1.4 SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2): All versions prior to v4.1.4 SCALANCE X308-2M TS (6GK5308-2GG00-2CA2): All versions prior to v4.1.4 SCALANCE X308-2M TS (6GK5308-2GG10-2CA2): All versions prior to v4.1.4 SCALANCE X310 (6GK5310-0FA00-2AA3): All versions prior to v4.1.4 SCALANCE X310 (6GK5310-0FA10-2AA3): All versions prior to v4.1.4 SCALANCE X310FE (6GK5310-0BA00-2AA3): All versions prior to v4.1.4 SCALANCE X310FE (6GK5310-0BA10-2AA3): All versions prior to v4.1.4 SCALANCE X320-1 FE (6GK5320-1BD00-2AA3): All versions prior to v4.1.4 SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3): All versions prior to v4.1.4 SCALANCE X408-2 (6GK5408-2FD00-2AA2): All versions prior to v4.1.4 SCALANCE XF201-3P IRT (6GK5201-3JR00-2BA6): All versions prior to v5.5.0 SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2): All versions prior to v5.5.0 SCALANCE XF204 (6GK5204-0BA00-2AF2): All versions prior to v5.2.5 SCALANCE XF204-2 (6GK5204-2BC00-2AF2): All versions prior to v5.2.5 SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2): All versions prior to v5.5.0 SCALANCE XF204IRT (6GK5204-0BA00-2BF2): All versions prior to v5.5.0 SCALANCE XF206-1 (6GK5206-1BC00-2AF2): All versions prior to v5.2.5 SCALANCE XF208 (6GK5208-0BA00-2AF2): All versions prior to v5.2.5 SCALANCE XR324-4M EEC (2x 24V; The following versions of SCALANCE are affected: SIMATIC CP 442-1 RNA (6GK7442-1RX00-0XE0): All versions SIMATIC CP 443-1 RNA (6GK7443-1RX00- 0XE0): All versions; SCALANCE X-200 switch family (incl. SIPLUS NET variants): versions prior to v5.2.5SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): versions prior to v5.5.0 SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants): all versions The following versions of SIMATIC are affected: SIMATIC CP 443-1 (incl. SIPLUS NET variants): all versions SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variants): all versions SIMATIC RF180C: all versions SIMATIC RF182C: all versions.; ports on front) (6GK5324-0GG10-3AR2): All versions prior to v4.1.4 SCALANCE XR324-12M (230V; ports on rear) (6GK5324-0GG00-3HR2): All versions prior to v4.1.4 SCALANCE XR324-12M (230V; ports on rear) (6GK5324-4GG10-4JR2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-4QG00-1HR2): All versions prior to v4.1.4 SCALANCE XR324-4M PoE (230V; ports on front) (6GK5324-4QG00-1CR2): All versions prior to v4.1.4 SCALANCE XR324-12M (24V; ports on front) (6GK5324-0GG00-1AR2): All versions prior to v4.1.4 SCALANCE XR324-12M (24V; ports on rear) (6GK5324-4GG00-1JR2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-4QG00-3HR2): All versions prior to v4.1.4 SCALANCE XR324-4M PoE TS (24V; ports on front) (6GK5324-4GG00-4ER2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on front) (6GK5324-4QG00-1AR2): All versions prior to v4.1.4 SCALANCE XR324-4M PoE (24V; ports on front) (6GK5324-4GG10-1ER2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (24V; ports on front) (6GK5324-4GG00-3ER2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on rear) (6GK5324-0GG00-1HR2): All versions prior to v4.1.4 SCALANCE XR324-12M (24V; ports on rear) (6GK5324-4GG10-2JR2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; coated) (6GK5307-2FD00-2GA3): All versions prior to v4.1.4 SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3): All versions prior to v4.1.4 SCALANCE X307-2 EEC (2x 230V; ports on rear) (6GK5324-4GG00-4JR2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG10-3JR2): All versions prior to v4.1.4 SCALANCE XR324-4M PoE (24V; coated) (6GK5302-7GD00-4GA3): All versions prior to v4.1.4 SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3): All versions prior to v4.1.4 SCALANCE X302-7 EEC (24V; coated) (6GK5302-7GD00-3GA3): All versions prior to v4.1.4 SCALANCE X304-2FE (6GK5304-2BD00-2AA3): All versions prior to v4.1.4 SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3): All versions prior to v4.1.4 SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3): All versions prior to v4.1.4 SCALANCE X307-2 EEC (2x 24V; ports on front) (6GK5324-4GG10-2ER2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (2x 24V; coated) (6GK5307-2FD00-1GA3): All versions prior to v4.1.4 SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3): All versions prior to v4.1.4 SCALANCE X307-2 EEC (230V; ports on front) (6GK5324-4GG00-2ER2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-4GG10-4ER2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on front) (6GK5324-0GG10-1AR2): All versions prior to v4.1.4 SCALANCE XR324-12M (24V; ports on front) (6GK5324-0GG00-3AR2): All versions prior to v4.1.4 SCALANCE XR324-12M (230V; coated) (6GK5307-2FD00-4GA3): All versions prior to v4.1.4 SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3): All versions prior to v4.1.4 SCALANCE X307-2 EEC (24V; coated) (6GK5302-7GD00-2GA3): All versions prior to v4.1.4 SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3): All versions prior to v4.1.4 SCALANCE X302-7 EEC (2x 230V; ports on rear) (6GK5324-0GG10-3HR2): All versions prior to v4.1.4 SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2): All versions prior to v4.1.4 SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2): All versions prior to v4.1.4 SIMATIC CP 442-1 RNA (6GK7442-1RX00-0XE0): All versions SIMATIC CP 443-1 (6GK7443-1EX30-0XE0): All versions SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0): All versions SIMATIC CP 443-1 RNA (6GK7443-1RX00-0XE0): All versions SIMATIC RF180C (6GT2002-0JD00): All versions SIMATIC RF182C (6GT2002-0JD10): All versions SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0): All versions SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0): All versions SIPLUS NET SCALANCE X308-2 (6AG1308-2FL10-4AA3): All versions prior to v4.1.4 Begin Update H: SIMATIC CP 442-1 RNA (6GK7442-1RX00-0XE0): All versions prior to v1.5.1 SIMATIC CP 443-1 RNA (6GK7443-1RX00-0XE0): All versions prior to v1.5.18 End Update H.; ports on rear) (6GK5324-4GG10-1JR2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; Siemens reports this vulnerability affects the following products: SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3): All versions prior to v5.5.0 SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3): All versions prior to v5.5.0 SCALANCE X201-3P IRT PRO (6GK5201-3BH00-2BD2): All versions prior to v5.5.0 SCALANCE X202-2IRT (6GK5202-2BB00-2BA3): All versions prior to v5.5.0 SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3): All versions prior to v5.5.0 SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6): All versions prior to v5.5.0 SCALANCE X204-2 (6GK5204-2BB10-2AA3): All versions prior to v5.2.5 SCALANCE X204-2FM (6GK5204-2BB11-2AA3): All versions prior to v5.2.5 SCALANCE X204-2LD (6GK5204-2BC10-2AA3): All versions prior to v5.2.5 SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2): All versions prior to v5.2.5 SCALANCE X204-2TS (6GK5204-2BB10-2CA2): All versions prior to v5.2.5 SCALANCE X204IRT (6GK5204-0BA00-2BA3): All versions prior to v5.5.0 SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6): All versions prior to v5.5.0 SCALANCE X206-1 (6GK5206-1BB10-2AA3): All versions prior to v5.2.5 SCALANCE X206-1LD (6GK5206-1BC10-2AA3): All versions prior to v5.2.5 SCALANCE X208 (6GK5208-0BA10-2AA3): All versions prior to v5.2.5 SCALANCE X208PRO (6GK5208-0HA10-2AA6): All versions prior to v5.2.5 SCALANCE X212-2 (6GK5212-2BB00-2AA3): All versions prior to v5.2.5 SCALANCE X212-2LD (6GK5212-2BC00-2AA3): All versions prior to v5.2.5 SCALANCE X216 (6GK5216-0BA00-2AA3): All versions prior to v5.2.5 SCALANCE X224 (6GK5224-0BA00-2AA3): All versions prior to v5.2.5 SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3): All versions prior to v4.1.4 SCALANCE X302-7 EEC (2x 24V; ports on rear) (6GK5324-4GG00-2JR2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-4GG00-3JR2): All versions prior to v4.1.4 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-4QG00-3AR2): All versions prior to v4.1.4 SCALANCE XR324-4M PoE (230V" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-105-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-105-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-105-08" ;
    dcterms:issued "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-19300" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-19300 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KTK, SIDOOR, SIMATIC, and SINAMICS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "M12-L (6ES7141-6BG00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; M12-L (6ES7148-6JG00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; M12-L (6ES7142-6BG00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; DQ 8x24VDC/0; M12-L (6ES7143-6BH00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; CM 8x IO-Link; 5A; DI 16x24VDC; M12-L (6ES7141-6BH00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; DI 8x24VDC; DIQ 16x24VDC/2A; DQ 8x24VDC/2A; The following Siemens products are affected: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200: All Versions Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P: All Versions KTK ATE530S: All versions SIDOOR ATD430W: All versions SIDOOR ATE530S COATED: All versions SIDOOR ATE531S: All versions SIMATIC ET200AL IM157-1 PN: All versions SIMATIC ET200ecoPN; M12-L (6ES7142-6BR00-0BB0): Versions 5.1.1 and later SIMATIC ET200SP IM155-6 MF HF: All versions SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): All versions prior to 2.0 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions prior to 2.0 SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants): Versions 4.2 and later SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants): All versions SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants): Versions 4.2 and later SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants): Versions 4.2 and later SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants): Versions 4.2 and later SIMATIC MICRO-DRIVE PDC: All versions SIMATIC PN/PN Coupler (incl. SIPLUS NET variants): Versions 4.2 and later SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to 4.4.0 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to 2.0 SIMATIC S7-1500 Software Controller: All versions prior to 2.0 SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions SIMATIC S7-400 H V6 CPU family and below (incl. SIPLUS variants): All Versions SIMATIC S7-400 PN/DP V7 and below CPU family (incl. SIPLUS variants): All versions --------- Begin Update D Part 1 of 3 --------- SIMATIC S7-410 CPU family (incl. SIPLUS variants): All versions prior to 10.1.1 --------- End Update D Part 1 of 3 --------- SIMATIC TDC CP51M1: All versions SIMATIC TDC CPU555: All versions SIMATIC WinAC RTX (F) 2010: All versions SINAMICS S/G Control Unit w. PROFINET: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-105-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-105-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-105-09" ;
    dcterms:issued "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIM 3V-IE and 4R-IE Family Devices" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-10939" ;
    icsa:cweNumber "CWE-489" ;
    icsa:hasCVE cve-res:CVE-2019-10939 ;
    icsa:hasCWE cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIM 3V-IE and 4R-IE Family Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of TIM communication modules for SIMATIC S7-300 and S7-400 devices are affected: TIM 3V-IE (incl. SIPLUS NET variants): all versions prior to v2.8 TIM 3V-IE Advanced (incl. SIPLUS NET variants): all versions prior to v2.8 TIM 3V-IE DNP3 (incl. SIPLUS NET variants): all versions prior to v3.3 TIM 4R-IE (incl. SIPLUS NET variants): all versions prior to v2.8 TIM 4R-IE DNP3 (incl. SIPLUS NET variants): all versions prior to v3.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-105-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-112-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-112-01" ;
    dcterms:issued "2020-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2020-10641" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2020-10641 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ignition" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of Ignition 8 Gateway are affected if running the Perspective Module: Ignition 8 Gateway versions prior to 8.0.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-112-01" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-119-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-119-01" ;
    dcterms:issued "2020-04-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS LAquis SCADA" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10622; CVE-2020-10618" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2020-10618,
        cve-res:CVE-2020-10622 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "The following versions of LAquis SCADA are affected: LAquis SCADA Versions 4.3.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-119-01" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2020 .

icsa-res:ICSA-20-126-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-126-01" ;
    dcterms:issued "2020-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fazecast jSerialComm" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2020-10626" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2020-10626 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "jSerialComm" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of jSerialComm - a platform-independent serial communication for Java are affected: Version 2.2.2 and prior Schneider Electric reports the vulnerability affects the following EcoStruxure IT Gateway versions: Versions 1.5.x; 1.6.x; 1.7.x CISA will update this document as more mitigations are identified by affected vendors." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-126-01" ;
    icsa:vendor "Fazecast" ;
    icsa:year 2020 .

icsa-res:ICSA-20-126-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-126-02" ;
    dcterms:issued "2020-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "SAE IT-systems FW-50 Remote Telemetry Unit (RTU)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10634; CVE-2020-10630" ;
    icsa:cweNumber "CWE-22; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-10630,
        cve-res:CVE-2020-10634 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FW-50 Remote Telemetry Unit (RTU)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of FW-50 RTU - a modular telecontrol system are affected: FW-50 RTU; Series: 5 Series; CPU-type: CPU-5B; Hardware Revision: 2; CPLD Revision: 6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-126-02" ;
    icsa:vendor "SAE IT-systems GmbH & Co KG" ;
    icsa:year 2020 .

icsa-res:ICSA-20-128-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-128-01" ;
    dcterms:issued "2020-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Node" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12006; CVE-2020-12026; CVE-2020-10638; CVE-2020-12014; CVE-2020-12010; CVE-2020-12018; CVE-2020-12002; CVE-2020-12022" ;
    icsa:cweNumber "CWE-89; CWE-122; CWE-23; CWE-121; CWE-125; CWE-129" ;
    icsa:hasCVE cve-res:CVE-2020-10638,
        cve-res:CVE-2020-12002,
        cve-res:CVE-2020-12006,
        cve-res:CVE-2020-12010,
        cve-res:CVE-2020-12014,
        cve-res:CVE-2020-12018,
        cve-res:CVE-2020-12022,
        cve-res:CVE-2020-12026 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-129,
        cwe-res:CWE-23,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess Node" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "The following versions of WebAccess Node - HMI platform are affected: WebAccess Node Version 8.4.4 and prior WebAccess Node Version 9.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-128-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-133-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-133-01" ;
    dcterms:issued "2020-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton Intelligent Power Manager" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-6651; CVE-2020-6652" ;
    icsa:cweNumber "CWE-20; CWE-266" ;
    icsa:hasCVE cve-res:CVE-2020-6651,
        cve-res:CVE-2020-6652 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-266 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligent Power Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Intelligent Power Manager - a software monitoring and management platform are affected: Intelligent Power Manager v1.67 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-133-01" ;
    icsa:vendor "Eaton" ;
    icsa:year 2020 .

icsa-res:ICSA-20-133-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-133-02" ;
    dcterms:issued "2020-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI System (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-10602; CVE-2020-10643; CVE-2019-18244; CVE-2020-10614; CVE-2020-10608; CVE-2020-10604; CVE-2020-10600; CVE-2020-10610; CVE-2020-10606; CVE-2019-10768; CVE-2019-11358" ;
    icsa:cweNumber "CWE-79; CWE-276; CWE-427; CWE-20; CWE-248; CWE-532; CWE-347; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2019-10768,
        cve-res:CVE-2019-11358,
        cve-res:CVE-2019-18244,
        cve-res:CVE-2020-10600,
        cve-res:CVE-2020-10602,
        cve-res:CVE-2020-10604,
        cve-res:CVE-2020-10606,
        cve-res:CVE-2020-10608,
        cve-res:CVE-2020-10610,
        cve-res:CVE-2020-10614,
        cve-res:CVE-2020-10643 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-248,
        cwe-res:CWE-276,
        cwe-res:CWE-347,
        cwe-res:CWE-427,
        cwe-res:CWE-476,
        cwe-res:CWE-532,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI System are affected: CVE-2020-10610; CVE-2020-10608; CVE-2020-10606: Applications using PI Asset Framework (AF) Client versions prior to and including PI AF Client 2018 SP3 Patch 1; Version 2.10.7.283 Applications using PI Software Development Kit (SDK) versions prior to and including PI SDK 2018 SP1; Version 1.4.7.602 PI API for Windows Integrated Security versions prior to and including 2.0.2.5; PI API versions prior to and including 1.6.8.26 PI Buffer Subsystem versions prior to and including 4.8.0.18 PI Connector for BACnet; versions prior to and including 1.2.0.6 PI Connector for CygNet; versions prior to and including 1.4.0.17 PI Connector for DC Systems RTscada; versions prior to and including 1.2.0.42 PI Connector for Ethernet/IP; versions prior to and including 1.1.0.10 PI Connector for HART-IP; versions prior to and including 1.3.0.1 PI Connector for Ping; versions prior to and including 1.0.0.54 PI Connector for Wonderware Historian; versions prior to and including 1.5.0.88 PI Connector Relay; versions prior to and including 2.5.19.0 PI Data Archive versions prior to and including PI Data Archive 2018 SP3; Version 3.4.430.460 PI Data Collection Manager; versions prior to and including 2.5.19.0 PI Integrator for Business Analytics versions prior to and including 2018 R2 SP1; Version 2.2.0.183 PI Interface Configuration Utility (ICU) versions prior to and including 1.5.0.7 PI to OCS versions prior to and including 1.1.36.0; PI Connector for IEC 60870-5-104; versions prior to and including 1.2.2.79 PI Connector for OPC-UA; versions prior to and including 1.3.0.130 PI Connector for Siemens Simatic PCS 7; versions prior to and including 1.2.1.71 PI Connector for UFL; versions prior to and including 1.3.1.135; CVE-2020-10604; CVE-2020-10602: PI Data Archive 2018 and 2018 SP2 only CVE-2020-10600: PI Data Archive 2018 SP2 and prior versions CVE-2019-10768: PI Vision 2019 and prior PI Manual Logger 2017 R2 Patch 1 and prior RtReports Version 4.1 and prior CVE-2020-10600; CVE-2020-10614; CVE-2019-18244: PI Vision 2019 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-133-02" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2020 .

icsa-res:ICSA-20-135-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-135-01" ;
    dcterms:issued "2020-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Opto 22 SoftPAC Project" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-12046; CVE-2020-10612; CVE-2020-12042; CVE-2020-10616; CVE-2020-10620" ;
    icsa:cweNumber "CWE-427; CWE-284; CWE-73; CWE-285; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2020-10612,
        cve-res:CVE-2020-10616,
        cve-res:CVE-2020-10620,
        cve-res:CVE-2020-12042,
        cve-res:CVE-2020-12046 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-285,
        cwe-res:CWE-347,
        cwe-res:CWE-427,
        cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoftPAC Project" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Opto 22 SoftPAC Project - a virtual PLC are affected: SoftPAC Project Version 9.6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-135-01" ;
    icsa:vendor "Opto 22" ;
    icsa:year 2020 .

icsa-res:ICSA-20-135-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-135-02" ;
    dcterms:issued "2020-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson WirelessHART Gateway" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12030" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2020-12030 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WirelessHART Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Emerson reports that the vulnerability affects the following products when the VLAN feature is enabled: Wireless 1410 Gateway; revisions 4.6.43 to 4.7.84 Wireless 1420 Gateway; revisions 4.6.43 to 4.7.84 Wireless 1552WU Gateway; revisions 4.6.43 to 4.7.84 Note that this is not an issue with the WirelessHART communication protocol. Wireless field devices; Smart Wireless Field Link; AMS Wireless SNAP-ON; and AMS Wireless Configurator are unaffected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-135-02" ;
    icsa:vendor "Emerson" ;
    icsa:year 2020 .

icsa-res:ICSA-20-140-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-140-01" ;
    dcterms:issued "2020-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation EDS Subsystem" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12038; CVE-2020-12034" ;
    icsa:cweNumber "CWE-119; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2020-12034,
        cve-res:CVE-2020-12038 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EDS Subsystem" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products that utilize the EDS Subsystem (Version 28.0.1 and prior) are affected: FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00; 6.10; and 6.11 RSLinx Classic: Version 4.11.00 and prior RSNetWorx software: Version 28.00.00 and prior Studio 5000 Logix Designer software: Version 32 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-140-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-140-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-140-02" ;
    dcterms:issued "2020-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson OpenEnterprise" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Chemical; Critical Manufacturing; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10632; CVE-2020-10640; CVE-2020-10636" ;
    icsa:cweNumber "CWE-306; CWE-282; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2020-10632,
        cve-res:CVE-2020-10636,
        cve-res:CVE-2020-10640 ;
    icsa:hasCWE cwe-res:CWE-282,
        cwe-res:CWE-306,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenEnterprise" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Emerson reports that these vulnerabilities affect the following OpenEnterprise SCADA Software: OpenEnterprise: all versions through 3.3.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-140-02" ;
    icsa:vendor "Emerson" ;
    icsa:year 2020 .

icsa-res:ICSA-20-142-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-142-01" ;
    dcterms:issued "2020-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Software House C-CURE 9000 and American Dynamics victor VMS" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Financial Services; Government Facilitates; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-9045" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2020-9045 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Software House C-CURE 9000 and American Dynamics victor VMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: Software House C¢CURE 9000: Version 2.70 American Dynamics victor Video Management System: Version 5.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-142-01" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-142-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-142-02" ;
    dcterms:issued "2020-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Operator Terminal Expert" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-7496; CVE-2020-7494; CVE-2020-7495; CVE-2020-7493; CVE-2020-7497" ;
    icsa:cweNumber "CWE-22; CWE-89; CWE-88" ;
    icsa:hasCVE cve-res:CVE-2020-7493,
        cve-res:CVE-2020-7494,
        cve-res:CVE-2020-7495,
        cve-res:CVE-2020-7496,
        cve-res:CVE-2020-7497 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-88,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Operator Terminal Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports these vulnerabilities affect the following EcoStruxure products: EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-142-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-147-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-147-01" ;
    dcterms:issued "2020-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2020-12004; CVE-2020-14479; CVE-2020-1447; CVE-2020-10644; CVE-2020-12000" ;
    icsa:cweNumber "CWE-502; CWE-306" ;
    icsa:hasCVE cve-res:CVE-2020-10644,
        cve-res:CVE-2020-12000,
        cve-res:CVE-2020-12004,
        cve-res:CVE-2020-1447,
        cve-res:CVE-2020-14479 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Inductive Automation Ignition" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of Inductive Automation Ignition are affected: Inductive Automation Ignition 7 Gateway versions prior to 7.9.14 Inductive Automation Ignition 8 Gateway versions prior to 8.0.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-147-01" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-147-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-147-02" ;
    dcterms:issued "2020-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Kantech EntraPass" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-9046" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2020-9046 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EntraPass" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the vulnerability affects the following Kantech EntraPass software: Special Edition: All versions up to and including v8.22 Corporate Edition: All versions up to and including v8.22 Global Edition: All versions up to and including v8.22." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-147-02" ;
    icsa:vendor "Kantech (Subsidiary of Johnson Controls)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-154-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-154-01" ;
    dcterms:issued "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB System 800xA" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-8473; CVE-2020-8472" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2020-8472,
        cve-res:CVE-2020-8473 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "System 800xA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of System 800xA are affected: OPC Server for AC 800M: Versions 6.0 and prior Control Builder M Professional: Versions 6.1 and prior MMS Server for AC 800M: Versions 6.1 and prior Base Software for SoftControl: Versions 6.1 and prior ABB System 800xA Base: Versions 6.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-154-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2020 .

icsa-res:ICSA-20-154-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-154-02" ;
    dcterms:issued "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB System 800xA Base" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-8474" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2020-8474 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "System 800xA Base" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of System 800xA Base are affected: System 800xA Base: Versions 6.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-154-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2020 .

icsa-res:ICSA-20-154-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-154-03" ;
    dcterms:issued "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Multiple System 800xA Products" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-8485; CVE-2020-8486; CVE-2020-8489; CVE-2020-8488; CVE-2020-8487; CVE-2020-8478; CVE-2020-8484" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2020-8478,
        cve-res:CVE-2020-8484,
        cve-res:CVE-2020-8485,
        cve-res:CVE-2020-8486,
        cve-res:CVE-2020-8487,
        cve-res:CVE-2020-8488,
        cve-res:CVE-2020-8489 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple System 800xA Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of System 800xA are affected: OPC Server for AC 800M: all versions MMS Server for AC 800M: all versions Base Software for SoftControl: all versions ABB System 800xA Base: all versions 800xA for DCI: all versions 800xA for MOD 300: all versions 800xA RNRP: all versions 800xA Batch Management: all versions 800xA Information Management: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-154-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2020 .

icsa-res:ICSA-20-154-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-154-04" ;
    dcterms:issued "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Central Licensing System" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-8475; CVE-2020-8479; CVE-2020-8471; CVE-2020-8476; CVE-2020-8481" ;
    icsa:cweNumber "CWE-611; CWE-200; CWE-264; CWE-284; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-8471,
        cve-res:CVE-2020-8475,
        cve-res:CVE-2020-8476,
        cve-res:CVE-2020-8479,
        cve-res:CVE-2020-8481 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-264,
        cwe-res:CWE-284,
        cwe-res:CWE-400,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Central Licensing System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ABB CLS products and versions are affected: ABB Ability System 800xA and related system extensions: Versions 5.1; 6.0; 6.1 Compact HMI: Versions 5.1; 6.0 Control Builder Safe: Versions 1.0; 1.1; 2.0 ABB Ability Symphony Plus - S+ Operations: Versions 3.0 to 3.2 ABB Ability Symphony Plus - S+ Engineering: Versions 1.1 to 2.2 Composer Harmony: Versions 5.1; 6.0; 6.1 Composer Melody (incl. SPE for Melody 1.0 SPx): Versions 5.3; 6.1; 6.2; 6.3 Harmony OPC Server (HAOPC): Standalone Versions 6.0; 6.1; 7.0 ABB Ability System 800xA / Advant OCS Control Builder A: Versions 1.3; 1.4 Advant OCS AC 100 OPC Server: Versions 5.1; 6.0; 6.1 Composer CTK: Versions 6.1; 6.2 AdvaBuild: Versions 3.7 SP1; 3.7 SP2 OPC Server MOD 300 (non-800xA): Version 1.4 OPC Data Link: Versions 2.1; 2.2 ABB Ability Knowledge Manager: Versions 8.0; 9.0; 9.1 ABB Ability Manufacturing Operations Management: Versions 1812; 1909." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-154-04" ;
    icsa:vendor "ABB" ;
    icsa:year 2020 .

icsa-res:ICSA-20-154-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-154-05" ;
    dcterms:issued "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Grid Solutions Reason RT Clocks" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12017" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2020-12017 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Grid Solutions Reason RT Clocks" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Grid Solutions Reason RT Clocks - a source of temporal synchronization signals in different formats and protocols are affected: RT430; RT431; and RT434; all firmware versions prior to 08A05." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-154-05" ;
    icsa:vendor "GE" ;
    icsa:year 2020 .

icsa-res:ICSA-20-154-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-154-06" ;
    dcterms:issued "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "SWARCO CPU LS4000" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2020-1249; CVE-2020-12493" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2020-1249,
        cve-res:CVE-2020-12493 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SWARCO CPU LS4000" ;
    icsa:productDistribution "Europe" ;
    icsa:productsAffected "CERT VDE reports the vulnerability affects the following traffic light controller: CPU LS4000: All OS versions starting with G4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-154-06" ;
    icsa:vendor "SWARCO" ;
    icsa:year 2020 .

icsa-res:ICSA-20-161-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-161-01" ;
    dcterms:issued "2020-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Node" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12019" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-12019 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess Node" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "The following versions of WebAccess Node - HMI platform are affected: WebAccess Node Version 8.4.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-161-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-161-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-161-02" ;
    dcterms:issued "2020-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series (Update C)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2019-19291; CVE-2019-19290; CVE-2019-19298; CVE-2019-19296; CVE-2019-19293; CVE-2019-19297; CVE-2019-19299; CVE-2019-19292; CVE-2019-19294; CVE-2019-19295" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-19290,
        cve-res:CVE-2019-19291,
        cve-res:CVE-2019-19292,
        cve-res:CVE-2019-19293,
        cve-res:CVE-2019-19294,
        cve-res:CVE-2019-19295,
        cve-res:CVE-2019-19296,
        cve-res:CVE-2019-19297,
        cve-res:CVE-2019-19298,
        cve-res:CVE-2019-19299 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiNVR/SiVMS Video Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SiNVR/SiVMS Video Server - a video management solution are affected: SiNVR 3 Central Control Server (CCS): All versions Moved to SSA-761844 and ICSA-21-103-10 SiNVR/SiVMS Video Server: All versions prior to v5.0.0 SiNVR/SiVMS Video Server: v5.0.0 and later is affected by CVE-2019-19298 and CVE-2019-19299." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-161-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-161-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-161-03" ;
    dcterms:issued "2020-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! (Update A)" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7589" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2020-7589 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO!" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LOGO! are affected: LOGO!8 BM (incl. SIPLUS variants): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-161-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-161-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-161-04" ;
    dcterms:issued "2020-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update K)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-7580" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2020-7580 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC Automation Tool: All versions SIMATIC NET PC software: All versions after v16 and prior to v16 Upd3 SIMATIC PCS neo: All versions prior to v3.0 SP1 SIMATIC ProSave: All versions SIMATIC S7-1500 Software Controller: All versions prior to v21.8 SINAMICS STARTER: All versions prior to v5.4 HF2 SIMATIC STEP 7: All versions prior to v5.6 SP2 HF3 SIMATIC STEP 7 (TIA Portal) v13: All versions prior to SP2 Update 4 SIMATIC STEP 7 (TIA Portal) v14: All versions prior to v14 SP1 Update 10 SIMATIC WinCC Runtime Professional v14: All versions prior to v14 SP1 Update 10 SIMATIC STEP 7 (TIA Portal) v15: All versions prior to v15.1 Update 5 SIMATIC STEP 7 (TIA Portal) v16: All versions prior to v16 Update 2 SIMATIC WinCC OA v3.16: All versions prior to P018 SIMATIC WinCC OA v3.17: All versions prior to P003 SIMATIC WinCC Runtime Advanced: All versions prior to v16 Update 2 SIMATIC WinCC Runtime Professional v13: All versions prior to v13 SP2 Update 4 SIMATIC WinCC Runtime Professional v14: All versions SIMATIC WinCC Runtime Professional v15: All versions prior to v15.1 Update 5 SIMATIC WinCC Runtime Professional v16: All versions prior to v16 Update 2 SIMATIC WinCC v7.4: All versions prior to v7.4 SP1 Update 14 SIMATIC WinCC v7.5: All versions prior to v7.5 SP1 Update 3 SINAMICS Startdrive: All versions SINEMA Server: All versions prior to v14 SP3 SIMATIC ProSave: All versions prior to v17 SIMATIC NET PC software v14: All versions prior to v14 Update 14 SIMATIC NET PC software v15: All versions SIMATIC NET PC software v16: All versions prior to v16 Upd3 SINUMERIK ONE virtual: All versions prior to v6.14 SINUMERIK Operate: All versions prior to v6.14 SIMATIC Automation Tool: All versions prior to v4 SP2 SINEC NMS: All versions prior to v1.0 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-161-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-161-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-161-05" ;
    dcterms:issued "2020-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC, SINAMICS (Update C)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7586; CVE-2020-7585" ;
    icsa:cweNumber "CWE-122; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2020-7585,
        cve-res:CVE-2020-7586 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SINAMICS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC PCS 7: All versions including v8.2 and prior SIMATIC PCS 7 v9.0: All versions prior to 9.0 SP3; SIMATIC PDM: All versions prior to 9.2; SIMATIC STEP 7 v5.X: All versions prior to 5.6 SP2 HF3 SINAMICS STARTER (containing STEP 7 OEM version): All versions prior to 5.4 HF2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-161-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-161-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-161-06" ;
    dcterms:issued "2020-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-8276; CVE-2019-8266; CVE-2019-8267; CVE-2019-8258; CVE-2018-15361; CVE-2019-8269; CVE-2019-8271; CVE-2019-8263; CVE-2019-8272; CVE-2019-8268; CVE-2019-8275; CVE-2019-8260; CVE-2019-8280; CVE-2019-8273; CVE-2019-8262; CVE-2019-8277; CVE-2019-8270; CVE-2019-8264; CVE-2019-8261; CVE-2019-8274; CVE-2019-8265; CVE-2019-8259" ;
    icsa:cweNumber "CWE-788; CWE-122; CWE-665; CWE-170; CWE-124; CWE-121; CWE-125; CWE-193" ;
    icsa:hasCVE cve-res:CVE-2018-15361,
        cve-res:CVE-2019-8258,
        cve-res:CVE-2019-8259,
        cve-res:CVE-2019-8260,
        cve-res:CVE-2019-8261,
        cve-res:CVE-2019-8262,
        cve-res:CVE-2019-8263,
        cve-res:CVE-2019-8264,
        cve-res:CVE-2019-8265,
        cve-res:CVE-2019-8266,
        cve-res:CVE-2019-8267,
        cve-res:CVE-2019-8268,
        cve-res:CVE-2019-8269,
        cve-res:CVE-2019-8270,
        cve-res:CVE-2019-8271,
        cve-res:CVE-2019-8272,
        cve-res:CVE-2019-8273,
        cve-res:CVE-2019-8274,
        cve-res:CVE-2019-8275,
        cve-res:CVE-2019-8276,
        cve-res:CVE-2019-8277,
        cve-res:CVE-2019-8280 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-124,
        cwe-res:CWE-125,
        cwe-res:CWE-170,
        cwe-res:CWE-193,
        cwe-res:CWE-665,
        cwe-res:CWE-788 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerabilities affect the following SINUMERIK products: SINUMERIK Access MyMachine/P2P: All versions prior to 4.8 SINUMERIK PCU base Win10 software/IPC: All versions prior to 14.00 SINUMERIK PCU base Win7 software/IPC: All versions prior to 12.01 HF4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-161-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-163-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-163-01" ;
    dcterms:issued "2020-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Web API 2019" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Government Facilities; Healthcare and Public Health; Information Technology; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12021" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-12021 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Web API 2019" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI Web API are affected: PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-163-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2020 .

icsa-res:ICSA-20-163-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-163-02" ;
    dcterms:issued "2020-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Linx Software (Update A)" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12005; CVE-2020-12003; CVE-2020-12001; CVE-2020-11999" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2020-11999,
        cve-res:CVE-2020-12001,
        cve-res:CVE-2020-12003,
        cve-res:CVE-2020-12005 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Linx Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: FactoryTalk Linx Versions 6.00; 6.10; and 6.11; RSLinx Classic v4.11.00 and prior (Versions removed from the scope of this advisory); The following products that utilize FactoryTalk Linx Software are affected: Connected Components Workbench: Version 12 and prior ControlFLASH: Version 14 and later ControlFLASH Plus: Version 1 and later FactoryTalk Asset Centre: Version 9 and later FactoryTalk Linx CommDTM: Version 1 and later Studio 5000 Launcher: Version 31 and later Studio 5000 Logix Designer software: Version 32 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-163-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-168-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-168-01" ;
    dcterms:issued "2020-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Treck TCP/IP (Update I)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing; Information Technology; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-11912; CVE-2020-11907; CVE-2020-11908; CVE-2020-11905; CVE-2020-11901; CVE-2020-11896; CVE-2020-11902; CVE-2020-11910; CVE-2020-11906; CVE-2020-11899; CVE-2020-11903; CVE-2020-11913; CVE-2020-11900; CVE-2020-11898; CVE-2020-11897; CVE-2020-11904; CVE-2020-11909; CVE-2020-11914; CVE-2020-11911" ;
    icsa:cweNumber "CWE-415; CWE-170; CWE-284; CWE-20; CWE-190; CWE-130; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-11896,
        cve-res:CVE-2020-11897,
        cve-res:CVE-2020-11898,
        cve-res:CVE-2020-11899,
        cve-res:CVE-2020-11900,
        cve-res:CVE-2020-11901,
        cve-res:CVE-2020-11902,
        cve-res:CVE-2020-11903,
        cve-res:CVE-2020-11904,
        cve-res:CVE-2020-11905,
        cve-res:CVE-2020-11906,
        cve-res:CVE-2020-11907,
        cve-res:CVE-2020-11908,
        cve-res:CVE-2020-11909,
        cve-res:CVE-2020-11910,
        cve-res:CVE-2020-11911,
        cve-res:CVE-2020-11912,
        cve-res:CVE-2020-11913,
        cve-res:CVE-2020-11914 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-130,
        cwe-res:CWE-170,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-284,
        cwe-res:CWE-415 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TCP/IP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The Treck TCP/IP stack is affected; including: Treck Inc TCP/IP: IPv4 Treck Inc TCP/IP: IPv6 Treck Inc TCP/IP: UDP Treck Inc TCP/IP: DNS Treck Inc TCP/IP: DHCP Treck Inc TCP/IP: TCP Treck Inc TCP/IP: ICMPv4 Treck Inc TCP/IP: ARP." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-168-01" ;
    icsa:vendor "Treck Inc" ;
    icsa:year 2020 .

icsa-res:ICSA-20-170-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-170-01" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-9047" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2020-9047 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the vulnerability affects the following exacqVision products: exacqVision Web Service: All versions up to and including v20.06.3.0 exacqVision Enterprise Manager: All versions up to and including v20.06.4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-170-01" ;
    icsa:vendor "Exacq Technologies Inc (Subsidiary of Johnson Controls)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-170-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-170-02" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MC Works64, MC Works32" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-12011; CVE-2020-12013; CVE-2020-12007; CVE-2020-12009; CVE-2020-12015" ;
    icsa:cweNumber "CWE-502; CWE-787; CWE-94" ;
    icsa:hasCVE cve-res:CVE-2020-12007,
        cve-res:CVE-2020-12009,
        cve-res:CVE-2020-12011,
        cve-res:CVE-2020-12013,
        cve-res:CVE-2020-12015 ;
    icsa:hasCWE cwe-res:CWE-502,
        cwe-res:CWE-787,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MC Works64, MC Works32" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products versions are affected: MC Works64 Version 4.02C (10.95.208.31) and earlier; all versions MC Works32 Version 3.00A (9.50.255.02)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-170-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-170-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-170-03" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS GENESIS64, GENESIS32" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-12011; CVE-2020-12013; CVE-2020-12007; CVE-2020-12009; CVE-2020-12015" ;
    icsa:cweNumber "CWE-502; CWE-787; CWE-94" ;
    icsa:hasCVE cve-res:CVE-2020-12007,
        cve-res:CVE-2020-12009,
        cve-res:CVE-2020-12011,
        cve-res:CVE-2020-12013,
        cve-res:CVE-2020-12015 ;
    icsa:hasCWE cwe-res:CWE-502,
        cwe-res:CWE-787,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GENESIS64, GENESIS32" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products using GenBroker64; Platform Services; Workbench; FrameWorX Server; v10.96 and prior are affected: GENESIS64 Hyper Historian AnalytiX MobileHMI The following products using GenBroker32 v9.5 and prior are affected: GENESIS32 BizViz." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-170-03" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2020 .

icsa-res:ICSA-20-170-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-170-04" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Services Platform" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12033" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2020-12033 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Services Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of FactoryTalk Services Platform are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-170-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-170-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-170-05" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View SE" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12028; CVE-2020-12027; CVE-2020-12029; CVE-2020-12031" ;
    icsa:cweNumber "CWE-119; CWE-20; CWE-200; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2020-12027,
        cve-res:CVE-2020-12028,
        cve-res:CVE-2020-12029,
        cve-res:CVE-2020-12031 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View SE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of FactoryTalk View SE are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-170-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-175-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-175-01" ;
    dcterms:issued "2020-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L and FX Series CPU Modules (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5594" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2020-5594 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R, iQ-F, Q, L and FX Series CPU Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the vulnerability affects the following MELSEC products: MELSEC iQ-R; iQ-F; Q; L and FX series CPU modules; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-175-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-175-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-175-02" ;
    dcterms:issued "2020-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell ControlEdge PLC and RTU" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10628; CVE-2020-10624" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2020-10624,
        cve-res:CVE-2020-10628 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlEdge PLC and RTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ControlEdge PLC and RTU are affected: ControlEdge PLC R130.2; R140; R150; and R151 ControlEdge RTU R101; R110; R140; R150; and R151." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-175-02" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2020 .

icsa-res:ICSA-20-175-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-175-03" ;
    dcterms:issued "2020-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Device Library Wizard" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-8482" ;
    icsa:cweNumber "CWE-922" ;
    icsa:hasCVE cve-res:CVE-2020-8482 ;
    icsa:hasCWE cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Device Library Wizard" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Device Library Wizard are affected: Device Library Wizard: Versions 6.0.X; 6.0.3.1; and 6.0.3.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-175-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2020 .

icsa-res:ICSA-20-177-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-177-01" ;
    dcterms:issued "2020-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "ENTTEC Lighting Controllers (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-12776; CVE-2019-12774; CVE-2019-12777; CVE-2019-12775" ;
    icsa:cweNumber "CWE-284; CWE-79; CWE-732; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2019-12774,
        cve-res:CVE-2019-12775,
        cve-res:CVE-2019-12776,
        cve-res:CVE-2019-12777 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-321,
        cwe-res:CWE-732,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lighting Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ENTTEC reports these vulnerabilities affect firmware Version 70044_update_05032019-482 and prior for the following lighting control products: Datagate Mk2 Storm 24 Pixelator; E-Streamer Mk2 (End of Life)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-177-01" ;
    icsa:vendor "ENTTEC" ;
    icsa:year 2020 .

icsa-res:ICSA-20-177-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-177-02" ;
    dcterms:issued "2020-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell FactoryTalk Services Platform XXE" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-14478" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2020-14478 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell FactoryTalk Services Platform XXE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FactoryTalk Services Platform are affected: Versions 6.11.00 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-177-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-177-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-177-03" ;
    dcterms:issued "2020-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell FactoryTalk View SE" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-14481; CVE-2020-14480" ;
    icsa:cweNumber "CWE-261; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2020-14480,
        cve-res:CVE-2020-14481 ;
    icsa:hasCWE cwe-res:CWE-261,
        cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell FactoryTalk View SE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FactoryTalk View SE are affected: FactoryTalk View SE Versions 9.0 and earlier FactoryTalk View SE Version 10.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-177-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-182-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-182-01" ;
    dcterms:issued "2020-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation DOPSoft (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-14482; CVE-2020-10597" ;
    icsa:cweNumber "CWE-122; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-10597,
        cve-res:CVE-2020-14482 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DOPSoft - a Human Machine Interface (HMI) editing software are affected: DOPSoft Version 4.00.08.15 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-182-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2020 .

icsa-res:ICSA-20-182-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-182-02" ;
    dcterms:issued "2020-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Factory Automation Engineering Software Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-5603; CVE-2020-5602" ;
    icsa:cweNumber "CWE-611; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-5602,
        cve-res:CVE-2020-5603 ;
    icsa:hasCWE cwe-res:CWE-400,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Factory Automation Engineering Software Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Factory Automation engineering software products are affected: CPU Module Logging Configuration Tool; Versions 1.94Y and prior CW Configurator; Versions 1.010L and prior EM Software Development Kit (EM Configurator); Versions 1.010L and prior GT Designer3 (GOT2000); Versions 1.221F and prior GX LogViewer; Versions 1.96A and prior GX Works2; Versions 1.586L and prior GX Works3; Versions 1.058L and prior M_CommDTM-HART; Version 1.00A M_CommDTM-IO-Link; Versions 1.02C and prior MELFA-Works; Versions 4.3 and prior MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool; Versions 1.004E and prior MELSOFT FieldDeviceConfigurator; Versions 1.03D and prior MELSOFT iQ AppPortal; Versions 1.11M and prior MELSOFT Navigator; Versions 2.58L and prior MI Configurator; Versions 1.003D and prior Motion Control Setting; Versions 1.005F and prior MR Configurator2; Versions 1.72A and prior MT Works2; Versions 1.156N and prior RT ToolBox2; Versions 3.72A and prior RT ToolBox3; Versions 1.50C and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-182-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-184-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-184-01" ;
    dcterms:issued "2020-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nortek Linear eMerge 50P/5000P" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-7268; CVE-2019-7269; CVE-2019-7267; CVE-2019-7270; CVE-2019-7266" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-287; CWE-77; CWE-35" ;
    icsa:hasCVE cve-res:CVE-2019-7266,
        cve-res:CVE-2019-7267,
        cve-res:CVE-2019-7268,
        cve-res:CVE-2019-7269,
        cve-res:CVE-2019-7270 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-35,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Linear eMerge 50P/5000P" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Linear eMerge products are affected: Linear eMerge 50P/5000P Versions 4.6.07 (revision 79330) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-184-01" ;
    icsa:vendor "Nortek" ;
    icsa:year 2020 .

icsa-res:ICSA-20-184-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-184-02" ;
    dcterms:issued "2020-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB System 800xA Information Manager" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-8477" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-8477 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "System 800xA Information Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of System 800xA Information Manager are affected: Versions prior to 5.1 Rev E/5.1 FP4 Rev E TC6 Versions prior to 6.0.3.3 RU1 Versions prior to 6.1 RU1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-184-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2020 .

icsa-res:ICSA-20-189-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-189-01" ;
    dcterms:issued "2020-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Grundfos CIM 500" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Water" ;
    icsa:cveNumber "CVE-2020-10605; CVE-2020-10609" ;
    icsa:cweNumber "CWE-306; CWE-256" ;
    icsa:hasCVE cve-res:CVE-2020-10605,
        cve-res:CVE-2020-10609 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Grundfos CIM 500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Grundfos CIM 500 are affected: All versions prior to v06.16.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-189-01" ;
    icsa:vendor "Grundfos Pumps Corporation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-189-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-189-02" ;
    dcterms:issued "2020-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT2000 Series" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-5596; CVE-2020-5597; CVE-2020-5599; CVE-2020-5600; CVE-2020-5595; CVE-2020-5598" ;
    icsa:cweNumber "CWE-384; CWE-88; CWE-284; CWE-119; CWE-399; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2020-5595,
        cve-res:CVE-2020-5596,
        cve-res:CVE-2020-5597,
        cve-res:CVE-2020-5598,
        cve-res:CVE-2020-5599,
        cve-res:CVE-2020-5600 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-284,
        cwe-res:CWE-384,
        cwe-res:CWE-399,
        cwe-res:CWE-476,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT2000 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following models of GOT2000 CoreOS Version -Y and earlier are affected: GT27 model GT25 model GT23 model." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-189-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-191-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-191-01" ;
    dcterms:issued "2020-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Phoenix Contact Automation Worx Software Suite" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2020-12497; CVE-2020-12498" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-12497,
        cve-res:CVE-2020-12498 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation Worx Software Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following components and versions of Automation Worx Software Suite are affected: PC Worx version 1.87 and prior PC Worx Express version 1.87 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-191-01" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2020 .

icsa-res:ICSA-20-191-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-191-02" ;
    dcterms:issued "2020-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix Designer Studio 5000" ;
    icsa:CVSSScore "3.6"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-12025" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2020-12025 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Logix Designer Studio 5000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Logix Designer Studio 500 are affected: Logix Designer Studio 5000 Versions 32.00; 32.01; and 32.02." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-191-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-196-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-196-01" ;
    dcterms:issued "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech iView" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-14503; CVE-2020-14501; CVE-2020-14507; CVE-2020-14505; CVE-2020-14499; CVE-2020-14497" ;
    icsa:cweNumber "CWE-22; CWE-89; CWE-306; CWE-77; CWE-284; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2020-14497,
        cve-res:CVE-2020-14499,
        cve-res:CVE-2020-14501,
        cve-res:CVE-2020-14503,
        cve-res:CVE-2020-14505,
        cve-res:CVE-2020-14507 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-306,
        cwe-res:CWE-77,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iView" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of iView - a device management application are affected: iView Versions 5.6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-196-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-196-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-196-02" ;
    dcterms:issued "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa EDR-G902 and EDR-G903 Series Routers" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-14511" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-14511 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EDR-G902 and EDR-G903 Series Routers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Moxa Series routers are affected: EDR-G902 Series: firmware versions 5.4 and prior EDR-G903 Series: firmware versions 5.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-196-02" ;
    icsa:vendor "Moxa" ;
    icsa:year 2020 .

icsa-res:ICSA-20-196-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-196-03" ;
    dcterms:issued "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM MMU, SICAM T, and SICAM SGU" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-10041; CVE-2020-10042; CVE-2020-10037; CVE-2020-10039; CVE-2020-10044; CVE-2020-10045; CVE-2020-10038; CVE-2020-10043; CVE-2020-10040" ;
    icsa:cweNumber "CWE-120; CWE-306; CWE-79; CWE-80; CWE-294; CWE-311; CWE-916; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-10037,
        cve-res:CVE-2020-10038,
        cve-res:CVE-2020-10039,
        cve-res:CVE-2020-10040,
        cve-res:CVE-2020-10041,
        cve-res:CVE-2020-10042,
        cve-res:CVE-2020-10043,
        cve-res:CVE-2020-10044,
        cve-res:CVE-2020-10045 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-294,
        cwe-res:CWE-306,
        cwe-res:CWE-311,
        cwe-res:CWE-79,
        cwe-res:CWE-80,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM MMU, SICAM T, and SICAM SGU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SICAM MMU: All versions prior to 2.05 SICAM SGU: All versions SICAM T: All versions prior to 2.18." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-196-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-196-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-196-04" ;
    dcterms:issued "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC HMI Panels" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7592" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2020-7592 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC HMI Panels" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants): All versions SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants): All versions SIMATIC HMI Comfort Panels (incl. SIPLUS variants): All versions SIMATIC HMI KTP700F Mobile Arctic: All versions SIMATIC HMI Mobile Panels 2nd Generation: All versions SIMATIC WinCC Runtime Advanced: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-196-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-196-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-196-05" ;
    dcterms:issued "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens UMC Stack (Update H)" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-7588; CVE-2020-7587; CVE-2020-7581" ;
    icsa:cweNumber "CWE-20; CWE-428; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-7581,
        cve-res:CVE-2020-7587,
        cve-res:CVE-2020-7588 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-400,
        cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UMC Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that some of the vulnerabilities affect the following UMC components. For a complete list of which specific vulnerabilities affect each of these products; please see Siemens security advisory SSA-841348: Opcenter Execution Discrete: All versions prior to v3.2 Opcenter Execution Foundation: All versions prior to v3.2 Opcenter Execution Process: All versions prior to v3.2. Opcenter Intelligence: All versions prior to v3.3; Opcenter RD&L: v8.0 SIMATIC IT LMS: All versions SIMATIC IT Production Suite: All versions prior to v8.0. Only affected by CVE-2020-7587 and CVE-2020-7588 SIMATIC Notifier Server for Windows: All versions SIMATIC PCS neo: All versions prior to v3.0 SP1 SIMATIC STEP 7 (TIA Portal) v15: All versions prior to v15.1 update 5 SIMATIC STEP 7 (TIA Portal) v16: All versions prior to v16 Update 2 SIMOCODE ES v16: All versions prior to v16 Update 1 SIMOCODE ES v15.1: All versions prior to v15.1 Update 4 Soft Starter ES v15.1: All versions prior to v15.1 Update 3 Soft Starter ES v16: All versions prior to v16 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-196-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-196-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-196-06" ;
    dcterms:issued "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-200 SMART CPU Family" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7584" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-7584 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-200 SMART CPU Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC are affected: SIMATIC S7-200 SMART CPU family: v2.2 and later; prior to v2.5.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-196-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-196-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-196-07" ;
    dcterms:issued "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Opcenter Execution Core (Update B)" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-7576; CVE-2020-7577; CVE-2020-7578; CVE-2020-28390" ;
    icsa:cweNumber "CWE-284; CWE-79; CWE-89; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2020-28390,
        cve-res:CVE-2020-7576,
        cve-res:CVE-2020-7577,
        cve-res:CVE-2020-7578 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-522,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Opcenter Execution Core" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: Camstar Enterprise Platform: All versions. Only affected by CVE-2020-7576; CVE-2020-7577; CVE-2020-7578 Opcenter Execution Core: All versions prior to v8.2. Affected by CVE-2020-7576; CVE-2020-7577; CVE-2020-7578 Opcenter Execution Core: Version 8.2. Affected by CVE-2020-7576; CVE-2020-28390 Opcenter Execution Core: Versions 8.3. Affected by CVE-2020-28390." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-196-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-196-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-196-08" ;
    dcterms:issued "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! Web Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7593" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2020-7593 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LOGO! Web Server are affected: LOGO! 8 BM (incl. SIPLUS variants): Versions between 1.81.01 and 1.81.03 Version 1.82.01 Version 1.82.02." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-196-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-203-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-203-01" ;
    dcterms:issued "2020-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wibu-Systems CodeMeter (Update F)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-14519; CVE-2020-14513; CVE-2020-14517; CVE-2020-14509; CVE-2020-16233; CVE-2020-14515" ;
    icsa:cweNumber "CWE-404; CWE-326; CWE-20; CWE-346; CWE-805; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2020-14509,
        cve-res:CVE-2020-14513,
        cve-res:CVE-2020-14515,
        cve-res:CVE-2020-14517,
        cve-res:CVE-2020-14519,
        cve-res:CVE-2020-16233 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-326,
        cwe-res:CWE-346,
        cwe-res:CWE-347,
        cwe-res:CWE-404,
        cwe-res:CWE-805 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CodeMeter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CodeMeter Runtime - a license manager are affected: All versions prior to 7.10a are affected by CVE-2020-14509 and CVE-2020-14519 All versions prior to 7.10a are affected by CVE-2020-14517 All versions prior to 7.10 are affected by CVE-2020-16233 All versions prior to 6.81 are affected by CVE-2020-14513 All versions prior to 6.90 are affected by CVE-2020-14515 when using CmActLicense update files with CmActLicense Firm Code This license manager is used in products by many different vendors. As new instances are discovered/reported; they will be added to this list of affected products. Update: Siemens: SSA-455843 and SSA-455844." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-203-01" ;
    icsa:vendor "Wibu-Systems AG" ;
    icsa:year 2020 .

icsa-res:ICSA-20-205-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-205-01" ;
    dcterms:issued "2020-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Triconex TriStation and Tricon Communication Module" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-7491; CVE-2020-7483; CVE-2020-7486; CVE-2020-7485; CVE-2020-7484" ;
    icsa:cweNumber "CWE-284; CWE-319; CWE-912; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-7483,
        cve-res:CVE-2020-7484,
        cve-res:CVE-2020-7485,
        cve-res:CVE-2020-7486,
        cve-res:CVE-2020-7491 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-319,
        cwe-res:CWE-400,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TriStation and Tricon Communication Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric has discovered and remediated multiple vulnerabilities affecting the following legacy versions of its Triconex brand safety instrumented system: TriStation 1131; v1.0.0 to v4.9.0; v4.10.0; and 4.12.0; operating on Windows NT; Windows XP; or Windows 7. Tricon Communications Module (TCM) Models 4351; 4352; 4351A/B; and 4352A/B installed in Tricon v10.0 to v10.5.3 systems. Users of current and more recent versions of the identified firmware and software are not exposed to these specific vulnerabilities." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-205-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-210-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-210-01" ;
    dcterms:issued "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Secomea GateManager" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-14510; CVE-2020-14500; CVE-2020-14512; CVE-2020-14508" ;
    icsa:cweNumber "CWE-798; CWE-158; CWE-193; CWE-916" ;
    icsa:hasCVE cve-res:CVE-2020-14500,
        cve-res:CVE-2020-14508,
        cve-res:CVE-2020-14510,
        cve-res:CVE-2020-14512 ;
    icsa:hasCWE cwe-res:CWE-158,
        cwe-res:CWE-193,
        cwe-res:CWE-798,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GateManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of GateManager - a VPN server are affected: All versions prior to 9.2c." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-210-01" ;
    icsa:vendor "Secomea" ;
    icsa:year 2020 .

icsa-res:ICSA-20-210-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-210-02" ;
    dcterms:issued "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Softing Industrial Automation OPC" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-14524; CVE-2020-14522" ;
    icsa:cweNumber "CWE-122; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-14522,
        cve-res:CVE-2020-14524 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OPC are affected: All versions prior to the latest build of Version 4.47.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-210-02" ;
    icsa:vendor "Softing Industrial Automation GmbH" ;
    icsa:year 2020 .

icsa-res:ICSA-20-210-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-210-03" ;
    dcterms:issued "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "HMS Industrial Networks eCatcher" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-14498" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-14498 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "eCatcher" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of eCatcher - a VPN client are affected: All versions prior to 6.5.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-210-03" ;
    icsa:vendor "HMS Industrial Networks" ;
    icsa:year 2020 .

icsa-res:ICSA-20-212-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-212-01" ;
    dcterms:issued "2020-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition 8" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2020-14520" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2020-14520 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Inductive Automation Ignition 8" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of Inductive Automation Ignition are affected: Inductive Automation Ignition 8: All versions prior to 8.0.13." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-212-01" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-212-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-212-02" ;
    dcterms:issued "2020-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Factory Automation Engineering Software (Update D)" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-14496" ;
    icsa:cweNumber "CWE-275" ;
    icsa:hasCVE cve-res:CVE-2020-14496 ;
    icsa:hasCWE cwe-res:CWE-275 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric, Multiple Factory Automation Engineering Software products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions 1.592S and prior GX Works3; 3.200J and prior GT SoftGOT1000 Version3; Versions 1.22Y and prior GT Designer3 Version1 (GOT2000); Versions 3.40S and prior EZSocket; Versions 1.29F and prior Network Interface Board CC IE Field Utility; Versions 1.010L and prior MELSOFT FieldDeviceConfigurator; Versions 1.03D and prior MELSOFT Navigator; Versions 1.100E and prior GX Works2; The following products and versions are affected: CPU Module Logging Configuration Tool; Versions 1.010L and prior Data Transfer; Versions 1.004E and prior Motorizer; Versions 4.5 and prior FR Configurator2; Versions 1.70Y and prior Setting/monitoring tools for the C Controller module (SW4PVC-CCPU); versions 1.100E and prior CW Configurator; Versions 1.105K and prior MT Works2; Versions 4.19V and prior Network Interface Board CC IE Control utility; Versions 1.156N and prior MX Component; Version 1.00A M_CommDTM-IO-Link; all versions GT SoftGOT2000 Version1; Versions 1.063R and prior M_CommDTM-HART; Versions 2.62Q and prior MH11 SettingTool Version2; Versions 1.16S and prior Network Interface Board CC-Link Ver.2 Utility; Versions 3.72A and prior RT ToolBox3; Versions 1.23Z and prior Network Interface Board MNETH utility; versions 4.3 and prior --------- Begin Update D Part 1 of 2--------- MELSEC WinCPU Setting Utility; Versions 1.52E and prior RT ToolBox2; Bersions 1.235V and prior GX LogViewer; Versions 1.03D and prior MELFA-Works; Versions 1.235V and prior GT SoftGOT1000 Version3; versions 2.002C and prior MI Configurator; Versions 1.03D and prior --------- End Update D Part 1 of 2--------- MELSOFT EM Software Development Kit (EM Configurator); Versions 1.005F and prior MR Configurator2; Versions 34L and prior PX Developer; Versions 4.12N and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-212-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-212-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-212-03" ;
    dcterms:issued "2020-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Factory Automation Products Path Traversal (Update C)" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-14523" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2020-14523 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Factory Automation Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Version 1.17T and prior MELSOFT Navigator; Versions 10 and prior MELSOFT iQ AppPortal; 2.70Y and prior --------- Begin Update C Part 1 of 2 --------- MI Configurator; versions 1.004E and prior --------- End Update C Part 1 of 2 --------- MR Configurator2; Versions 1.010L and prior FR Configurator2; Versions 1.595V and prior GX Works3; The following products and versions are affected: CW Configurator; Versions 1.70Y and prior.; Version 4.20W and prior RT ToolBox3; Versions 1.22Y and prior GX Works2; Version 1.110Q and prior MT Works2; Versions 1.156N and prior MX Component; Versions 1.063R and prior MELSEC iQ-R Series Motion Module" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-212-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-212-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-212-04" ;
    dcterms:issued "2020-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Factory Automation Engineering Products (Update L)" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-14521" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2020-14521 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Factory Automation Engineering Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric MX MESInterface: <=1.21X; Mitsubishi Electric QD64D2 FB Library (Japanese): 1.00A; Mitsubishi Electric MX Sheet: <=2.15R; Mitsubishi Electric Position Board utility 2: <=3.20; Mitsubishi Electric FR Configurator SW3: vers:all/*; Mitsubishi Electric MT Works2: <=1.167Z; Mitsubishi Electric RT ToolBox3: <=1.82L; Mitsubishi Electric RT ToolBox2: <=3.73B; Mitsubishi Electric C Controller Interface Module utility: <=2.00; Mitsubishi Electric Motion Control Setting: <=1.005F; Mitsubishi Electric SLMP Data Collector: <=1.04E; Mitsubishi Electric Simple Motion Module (Positioning Control) FB Library (Other languages): <=1.04E; Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): <=4.12N; Mitsubishi Electric GT Designer3 Version1 (GOT1000): <=1.241B; Mitsubishi Electric GX Works2: <=1.601B; Mitsubishi Electric MX Component: <=4.20W; Mitsubishi Electric Simple Motion Module (Synchronous Control) FB Library (Other languages): <=1.02C; Mitsubishi Electric MR Configurator2: <=1.125F; Mitsubishi Electric GX LogViewer: <=1.100E; Mitsubishi Electric MELFA-Works: <=4.4; Mitsubishi Electric Network Interface Board CC-Link Ver.2 Utility: <=1.23Z; Mitsubishi Electric Simple Motion Module (Synchronous Control) FB Library (Japanese): <=1.02C; Mitsubishi Electric MELSOFT iQ AppPortal: <=1.17T; Mitsubishi Electric MELSOFT Navigator: <=2.74C; Mitsubishi Electric CW Configurator: <=1.010L; Mitsubishi Electric GX Developer: <=8.504A; Mitsubishi Electric QD62(E/D); Mitsubishi Electric Network Interface Board CC IE Field Utility: <=1.16S; Mitsubishi Electric QD72P3C3 FB Library (Japanese): 1.00A; Mitsubishi Electric CC-Link IE Control Network Data Collector: 1.00A; Mitsubishi Electric Data Transfer: <=3.42U; Mitsubishi Electric EZSocket: <=5.1; Mitsubishi Electric Simple Motion Module (Positioning Control) FB Library (Japanese): <=1.04E; Mitsubishi Electric MI Configurator: <=1.004E; Mitsubishi Electric MELSOFT EM Software Development Kit: <=1.015R; Mitsubishi Electric CC-Link IE Field Network Data Collector: 1.00A; Mitsubishi Electric MTConnect Data Collector: <=1.1.4.0; Mitsubishi Electric GT SoftGOT2000 Version1: <=1.241B; Mitsubishi Electric PX Developer: <=1.53F; LD62(D) FB Library (Japanese): 1.00A; Mitsubishi Electric Network Interface Board CC IE Control Utility: <=1.29F; Mitsubishi Electric Setting/monitoring tools for the C Controller module (SW3PVC-CCPU): <=3.13P; Mitsubishi Electric GT Designer2 Classic: vers:all/*; Mitsubishi Electric GT Designer3 Version1 (GOT2000): <=1.241B; Mitsubishi Electric Motorizer: <=1.005F; Mitsubishi Electric CC-Link IE TSN Data Collector: 1.00A; Mitsubishi Electric MELSEC WinCPU Setting Utility: vers:all/*; Mitsubishi Electric GT SoftGOT1000 Version3: <=3.200J; Mitsubishi Electric MELSOFT Complete Clean Up Tool: <=1.06G; Mitsubishi Electric Network Interface Board MNETH Utility: <=34L; Mitsubishi Electric M_CommDTM-IO-Link: <=1.03D; Mitsubishi Electric MX MESInterface-R: <=1.12N; Mitsubishi Electric FR Configurator2: <=1.26C; Mitsubishi Electric CPU Module Logging Configuration Tool: <=1.100E; Mitsubishi Electric GX Works3: <=1.063R" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-212-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-217-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-217-01" ;
    dcterms:issued "2020-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation CNCSoft ScreenEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-16199; CVE-2020-16201; CVE-2020-16203" ;
    icsa:cweNumber "CWE-125; CWE-121; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2020-16199,
        cve-res:CVE-2020-16201,
        cve-res:CVE-2020-16203 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft ScreenEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Industrial Automation CNCSoft ScreenEditor - HMI are affected: Industrial Automation CNCSoft ScreenEditor Versions 1.01.23 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-217-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2020 .

icsa-res:ICSA-20-219-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-219-01" ;
    dcterms:issued "2020-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trailer Power Line Communications" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2020-14514" ;
    icsa:cweNumber "CWE-201" ;
    icsa:hasCVE cve-res:CVE-2020-14514 ;
    icsa:hasCWE cwe-res:CWE-201 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Trailer Power Line Communications" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All trailer power line communications are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-219-01" ;
    icsa:vendor "Multiple Trailer and Brake Manufacturers" ;
    icsa:year 2020 .

icsa-res:ICSA-20-219-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-219-02" ;
    dcterms:issued "2020-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess HMI Designer" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-16211; CVE-2020-16207; CVE-2020-16217; CVE-2020-16213; CVE-2020-16229; CVE-2020-16215" ;
    icsa:cweNumber "CWE-415; CWE-122; CWE-787; CWE-843; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-16207,
        cve-res:CVE-2020-16211,
        cve-res:CVE-2020-16213,
        cve-res:CVE-2020-16215,
        cve-res:CVE-2020-16217,
        cve-res:CVE-2020-16229 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-415,
        cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess HMI Designer" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of Advantech WebAccess HMI Designer - a Human Machine Interface (HMI) runtime development software are affected: WebAccess HMI Designer Versions 2.1.9.31 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-219-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-219-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-219-03" ;
    dcterms:issued "2020-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Geutebruck G-Cam and G-Code" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Financial Services; Government Facilities; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-16205" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2020-16205 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "G-Cam and G-Code" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Geutebruck reports the vulnerability affects firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5 of the following Encoder and E2 Series Camera models: G-Code: EEC-2xxx G-Cam: EBC-21xx EFD-22xx ETHC-22xx EWPC-22xx." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-219-03" ;
    icsa:vendor "Geutebruck" ;
    icsa:year 2020 .

icsa-res:ICSA-20-219-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-219-04" ;
    dcterms:issued "2020-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation TPEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-16221; CVE-2020-16219; CVE-2020-16223; CVE-2020-16225; CVE-2020-16227" ;
    icsa:cweNumber "CWE-122; CWE-20; CWE-121; CWE-125; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2020-16219,
        cve-res:CVE-2020-16221,
        cve-res:CVE-2020-16223,
        cve-res:CVE-2020-16225,
        cve-res:CVE-2020-16227 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-123,
        cwe-res:CWE-125,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TPEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of TPEditor - a programming software for Delta text panels are affected: TPEditor Versions 1.97 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-219-04" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2020 .

icsa-res:ICSA-20-224-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-224-01" ;
    dcterms:issued "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CENTUM (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2020-5609; CVE-2020-5608" ;
    icsa:cweNumber "CWE-22; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2020-5608,
        cve-res:CVE-2020-5609 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CENTUM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Yokogawa reports that the vulnerability affects the following CENTUM distributed control system products: Exaopc (R3.72.00 - R3.78.00); CENTUM CS 3000 versions R3.08.10 - R3.09.50 (Including CENTUM CS 3000 Entry Class) CENTUM VP versions R4.01.00 - R6.07.00 (Including CENTUM VP Entry Class) B/M9000CS versions R5.04.01 - R5.05.01 B/M9000 VP versions R6.01.01 - R8.03.01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-224-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2020 .

icsa-res:ICSA-20-224-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-224-02" ;
    dcterms:issued "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric APC Easy UPS On-Line" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-7521; CVE-2020-7522" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2020-7521,
        cve-res:CVE-2020-7522 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APC Easy UPS On-Line" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of APC Easy UPS On-Line Software are affected: SFAPV9601 v2.0 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-224-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-224-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-224-03" ;
    dcterms:issued "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tridium Niagara" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Government Facilities; Information Technology" ;
    icsa:cveNumber "CVE-2020-14483" ;
    icsa:cweNumber "CWE-1088" ;
    icsa:hasCVE cve-res:CVE-2020-14483 ;
    icsa:hasCWE cwe-res:CWE-1088 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Niagara" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Niagara are affected: Niagara: Versions 4.6.96.28; 4.7.109.20; 4.7.110.32; 4.8.0.110 Niagara Enterprise Security: Versions 2.4.31; 2.4.45; 4.8.0.35." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-224-03" ;
    icsa:vendor "Tridium" ;
    icsa:year 2020 .

icsa-res:ICSA-20-224-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-224-04" ;
    dcterms:issued "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE, RUGGEDCOM" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-8597" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2020-8597 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE, RUGGEDCOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM RM1224: All versions prior to 6.3 SCALANCE M-800 / S615: All versions prior to 6.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-224-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-224-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-224-05" ;
    dcterms:issued "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC, SIMOTICS (Update A)" ;
    icsa:CVSSScore "3.1"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-15126" ;
    icsa:cweNumber "CWE-367" ;
    icsa:hasCVE cve-res:CVE-2019-15126 ;
    icsa:hasCWE cwe-res:CWE-367 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SIMOTICS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC RF350M: All versions SIMATIC RF650M: All versions; SIMOTICS CONNECT 400: All versions prior to 0.4.0.22." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-224-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-224-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-224-06" ;
    dcterms:issued "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo CC" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2020-10055" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2020-10055 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo CC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products and versions are affected: Desigo CC: Versions 3.x and 4.x; and Desigo CC Compact: Versions 3.x and 4.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-224-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-224-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-224-07" ;
    dcterms:issued "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Automation License Manager" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7583" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2020-7583 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Automation License Manager (ALM) - a software management platform are affected: Automation License Manager 5: All versions Automation License Manager 6: All versions prior to v6.0.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-224-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-224-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-224-08" ;
    dcterms:issued "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM A8000 RTUs" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-15781" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-15781 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM A8000 RTUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SICAM A8000 RTUs are affected: SICAM WEB firmware: all versions prior to C05.30." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-224-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-238-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-238-01" ;
    dcterms:issued "2020-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech iView" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-16245" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2020-16245 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iView" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of iView - a device management application are affected: iView Versions 5.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-238-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-238-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-238-02" ;
    dcterms:issued "2020-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson OpenEnterprise" ;
    icsa:CVSSScore "3.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-16235" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2020-16235 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenEnterprise" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Emerson reports that the vulnerability affects the following products: OpenEnterprise All versions through 3.3.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-238-02" ;
    icsa:vendor "Emerson" ;
    icsa:year 2020 .

icsa-res:ICSA-20-238-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-238-03" ;
    dcterms:issued "2020-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON LeviStudioU (Update C)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-25199; CVE-2020-25186; CVE-2020-16243" ;
    icsa:cweNumber "CWE-122; CWE-611; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-16243,
        cve-res:CVE-2020-25186,
        cve-res:CVE-2020-25199 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LeviStudioU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LeviStudioU are reported to be affected: LeviStudioU: Release Build 2019-09-21 and prior. If you have questions about the affected products; please contact WECON." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-238-03" ;
    icsa:vendor "WECON" ;
    icsa:year 2020 .

icsa-res:ICSA-20-240-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-240-01" ;
    dcterms:issued "2020-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Red Lion N-Tron 702-W, 702M12-W" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-16210; CVE-2017-16544; CVE-2020-16204; CVE-2020-16206; CVE-2020-16208" ;
    icsa:cweNumber "CWE-79; CWE-352; CWE-912; CWE-1104" ;
    icsa:hasCVE cve-res:CVE-2017-16544,
        cve-res:CVE-2020-16204,
        cve-res:CVE-2020-16206,
        cve-res:CVE-2020-16208,
        cve-res:CVE-2020-16210 ;
    icsa:hasCWE cwe-res:CWE-1104,
        cwe-res:CWE-352,
        cwe-res:CWE-79,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "N-Tron 702-W, 702M12-W" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Red Lion products are affected: N-Tron 702-W: All versions N-Tron 702M12-W: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-240-01" ;
    icsa:vendor "Red Lion Controls" ;
    icsa:year 2020 .

icsa-res:ICSA-20-245-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-245-01" ;
    dcterms:issued "2020-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Multiple Products (Update G)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-16226" ;
    icsa:cweNumber "CWE-342" ;
    icsa:hasCVE cve-res:CVE-2020-16226 ;
    icsa:hasCWE cwe-res:CWE-342 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the vulnerability affects the following products: QJ71MES96: all versions QJ71WS96: all versions Q06CCPU-V: all versions Q24DHCCPU-V: the first 5 digits of serial number 24031 and prior Q24DHCCPU-VG: the first 5 digits of serial number 24031 and prior R12CCPU-V: Version 13 and prior RD55UP06-V: Version 09 and prior RD55UP12-V: Version 01 RJ71GN11-T2: Version 11 and prior RD78G4: Version 14 and prior RD78G8: Version 14 and prior RD78G16: Version 14 and prior RD78G32: Version 14 and prior RD78G64: Version 14 and prior RD78GHV: Version 14 and prior RD78GHW: Version 14 and prior NZ2FT-MT: all versions NZ2FT-EIP: all versions Q03UDECPU: the first 5 digits of serial number 22081 and prior Q04UDEHCPU: the first 5 digits of serial number 22081 and prior Q06UDEHCPU: the first 5 digits of serial number 22081 and prior Q10UDEHCPU: the first 5 digits of serial number 22081 and prior Q13UDEHCPU: the first 5 digits of serial number 22081 and prior Q20UDEHCPU: the first 5 digits of serial number 22081 and prior Q26UDEHCPU: the first 5 digits of serial number 22081 and prior Q50UDEHCPU: the first 5 digits of serial number 22081 and prior Q100UDEHCPU: the first 5 digits of serial number 22081 and prior Q03UDVCPU: the first 5 digits of serial number 22031 and prior Q04UDVCPU: the first 5 digits of serial number 22031 and prior Q06UDVCPU: the first 5 digits of serial number 22031 and prior Q13UDVCPU: the first 5 digits of serial number 22031 and prior Q26UDVCPU: the first 5 digits of serial number 22031 and prior Q04UDPVCPU: the first 5 digits of serial number 22031 and prior Q06UDPVCPU: the first 5 digits of serial number 22031 and prior Q13UDPVCPU: the first 5 digits of serial number 22031 and prior Q26UDPVCPU: the first 5 digits of serial number 22031 and prior L02CPU(-P): the first 5 digits of serial number 22051 and prior L06CPU(-P): the first 5 digits of serial number 22051 and prior L26CPU(-P): the first 5 digits of serial number 22051 and prior L26CPU-(P)BT: the first 5 digits of serial number 22051 and prior R00CPU: Version 18 and prior R01CPU: Version 18 and prior R02CPU: Version 18 and prior R04CPU: Version 50 and prior R08CPU: Version 50 and prior R16CPU: Version 50 and prior R32CPU: Version 50 and prior R120CPU: Version 50 and prior R04ENCPU: Version 50 and prior R08ENCPU: Version 50 and prior R16ENCPU: Version 50 and prior R32ENCPU: Version 50 and prior R120ENCPU: Version 50 and prior R08SFCPU: Version 22 and prior R16SFCPU: Version 22 and prior R32SFCPU: Version 22 and prior R120SFCPU: Version 22 and prior R08PCPU: Version 24 and prior R16PCPU: Version 24 and prior R32PCPU: Version 24 and prior R120PCPU: Version 24 and prior R08PSFCPU: Version 05 and prior R16PSFCPU: Version 05 and prior R32PSFCPU: Version 05 and prior R120PSFCPU: Version 05 and prior FX5U(C)-**M*/** Serial number 17X**** or later: Version 1.210 and prior FX5U(C)-**M*/** Serial number 179**** and prior: Version 1.070 and prior FX5UC-32M*/**-TS: Version 1.210 and prior FX5UJ-**M*/**: Version 1.000 FX5-ENET: Version 1.002 and prior FX5-ENET/IP: Version 1.002 and prior FX3U-ENET-ADP: Version 1.22 and prior FX3GE-**M*/**: the first 3 digits of serial number 20X and prior FX3U-ENET: Version 1.14 and prior FX3U-ENET-L: Version 1.14 and prior FX3U-ENET-P502: Version 1.14 and prior FX5-CCLGN-MS: Version 1.000 IU1-1M20-D: all versions LE7-40GU-L screen package data: version 1.01 and prior GOT2000 Series GT21 Model: Version 01.44.000 and prior GS Series GS21 Model: Version 01.44.000 and prior GOT1000 Series GT14 Model: all versions FR-A800-E Series: production date December 2020 and prior FR-F800-E Series: production date December 2020 and prior FR-A8NCG: Production date August 2020 and prior FR-E800-EPA Series: Production date July 2020 and prior FR-E800-EPB Series: Production date July 2020 and prior Conveyor Tracking Application APR-1TR3FH (Discontinued product): all versions Conveyor Tracking Application APR-1TR6FH (Discontinued product): all versions Conveyor Tracking Application APR-1TR12FH (Discontinued product): all versions Conveyor Tracking Application APR-1TR20FH (Discontinued product): all versions Conveyor Tracking Application APR-2TR3FH (Discontinued product): all versions Conveyor Tracking Application APR-2TR6FH (Discontinued product): all versions Conveyor Tracking Application APR-2TR12FH (Discontinued product): all versions Conveyor Tracking Application APR-2TR20FH (Discontinued product): all versions MR-JE-C: all versions MR-J4-TM: all versions RJ71EN71: Version 48 and prior QJ71E71-100: the first 5 digits of serial number 21092 and prior LJ71E71-100: the first 5 digits of serial number 21092 and prior QJ71MT91: the first 5 digits of serial number 20082 and prior NZ2GACP620-60: Version 1.03D and prior NZ2GACP620-300: Version 1.03D and prior GT25-J71GN13-T2: Version 03 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-245-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-252-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-252-01" ;
    dcterms:issued "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RTLS Locating Manager" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-10050; CVE-2020-10049; CVE-2020-10051" ;
    icsa:cweNumber "CWE-276; CWE-428" ;
    icsa:hasCVE cve-res:CVE-2020-10049,
        cve-res:CVE-2020-10050,
        cve-res:CVE-2020-10051 ;
    icsa:hasCWE cwe-res:CWE-276,
        cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RTLS Locating Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following versions of SIMATIC RTLS Locating Manager: SIMATIC RTLS Locating Manager; all versions prior to v2.10.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-252-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-252-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-252-02" ;
    dcterms:issued "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-300 and S7-400 CPUs (Update C)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-15791" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2020-15791 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-300 and S7-400 CPUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following versions of SIMATIC S7-300 and S7-400 CPU families: SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions SIMATIC S7-400 CPU family (incl. SIPLUS variants): All versions SIMATIC WinAC RTX (F) 2010: All versions SINUMERIK 840D sl: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-252-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-252-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-252-03" ;
    dcterms:issued "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens License Management Utility" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2020-10056" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2020-10056 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "License Management Utility" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of License Management Utility (LMU) - a license management system are affected: LMU: All versions prior to v2.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-252-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-252-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-252-04" ;
    dcterms:issued "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power" ;
    icsa:CVSSScore "3.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-15784; CVE-2020-15790" ;
    icsa:cweNumber "CWE-548; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2020-15784,
        cve-res:CVE-2020-15790 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-548 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Spectrum Power" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Spectrum Power are affected: Spectrum Power: All versions prior to v4.70 SP8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-252-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-252-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-252-05" ;
    dcterms:issued "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Video Client" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial facilities" ;
    icsa:cveNumber "CVE-2020-15785" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2020-15785 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance Video Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siveillance Video Client - IP video management software are affected: Siveillance Video Client: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-252-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-252-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-252-06" ;
    dcterms:issued "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC HMI Products (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-15787; CVE-2020-15786" ;
    icsa:cweNumber "CWE-305; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2020-15786,
        cve-res:CVE-2020-15787 ;
    icsa:hasCWE cwe-res:CWE-305,
        cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC HMI Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2nd Generation (incl. SIPLUS variants): All versions prior to v16 are affected by CVE-2020-15786; SIMATIC HMI Comfort Panels (incl. SIPLUS variants): All versions up to and including v16 are affected by CVE-2020-15786; SIMATIC HMI Mobile Panels: All versions up to and including v16 are affected by CVE-2020-15786; SIMATIC HMI United Comfort Panels: All versions up to and including v16.; The following versions of Siemens SIMATIC HMI Products are affected: SIMATIC HMI Basic Panels" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-252-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-252-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-252-07" ;
    dcterms:issued "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products (Update F)" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical manufacturing" ;
    icsa:cveNumber "CVE-2020-0543" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2020-0543 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC Field PG M4: All versions. SIMATIC Field PG M5: All BIOS versions prior to v22.01.08 SIMATIC Field PG M6: All BIOS versions prior to v26.01.07 SIMATIC IPC3000 SMART: All versions SIMATIC IPC347E: All versions SIMATIC IPC427D (incl. SIPLUS variants): All versions SIMATIC IPC427E (incl. SIPLUS variants): All versions prior to v21.01.14 SIMATIC IPC477D: All versions SIMATIC IPC477E: All versions prior to v21.01.14 SIMATIC IPC477E Pro: All versions prior to v21.01.14. SIMATIC IPC527G: All BIOS versions prior to v1.4.0. SIMATIC IPC527G: All versions SIMATIC IPC547E: All versions SIMATIC IPC547G: All versions prior to R1.28.0 SIMATIC IPC627D: All versions SIMATIC IPC627E: All BIOS versions prior to v25.02.06 SIMATIC IPC647D: All versions SIMATIC IPC647E: All BIOS versions prior to v25.02.06 SIMATIC IPC677D: All versions SIMATIC IPC677E: All BIOS versions prior to v25.02.06 SIMATIC IPC827D: All versions SIMATIC IPC847D: All versions SIMATIC IPC847E: All BIOS versions prior to v25.02.06 SIMATIC ITP1000: All BIOS versions prior to v23.01.08 SIMOTION P320-4E: All versions SIMOTION P320-4S: All versions. Update: SIMATIC IPC3000 SMART v2: All versions prior to v1.B." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-252-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-252-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-252-08" ;
    dcterms:issued "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Polarion Subversion Webclient" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-15788; CVE-2020-15789" ;
    icsa:cweNumber "CWE-352; CWE-80" ;
    icsa:hasCVE cve-res:CVE-2020-15788,
        cve-res:CVE-2020-15789 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Polarion Subversion Webclient" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Polarion Subversion Webclient are affected: Polarion Subversion Webclient; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-252-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-254-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-254-01" ;
    dcterms:issued "2020-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Enterprise Data Management Web" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2020-13501; CVE-2020-13499; CVE-2020-13500" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2020-13499,
        cve-res:CVE-2020-13500,
        cve-res:CVE-2020-13501 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Enterprise Data Management Web" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Enterprise Data Management Web (formerly eDNA Web) - a data management platform are affected: Enterprise Data Management Web v2019 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-254-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2020 .

icsa-res:ICSA-20-254-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-254-02" ;
    dcterms:issued "2020-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation PLC WinProladder" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities" ;
    icsa:cveNumber "CVE-2020-16234" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-16234 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC WinProladder" ;
    icsa:productDistribution "Europe, Asia" ;
    icsa:productsAffected "The following versions of PLC WinProladder are affected: PLC WinProladder Version 3.28 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-254-02" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-254-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-254-03" ;
    dcterms:issued "2020-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "HMS Networks Ewon Flexy and Cosy" ;
    icsa:CVSSScore "2.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-16230" ;
    icsa:cweNumber "CWE-942" ;
    icsa:hasCVE cve-res:CVE-2020-16230 ;
    icsa:hasCWE cwe-res:CWE-942 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ewon Flexy and Cosy" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Ewon products are affected: Flexy and Cosy: All versions prior to 14.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-254-03" ;
    icsa:vendor "HMS Industrial Networks" ;
    icsa:year 2020 .

icsa-res:ICSA-20-261-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-261-01" ;
    dcterms:issued "2020-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess Node" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-16202" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2020-16202 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess Node" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of WebAccess Node - HMI platform are affected: WebAccess Node: All versions prior to 9.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-261-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-266-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-266-01" ;
    dcterms:issued "2020-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Digital APM Classic" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-16240; CVE-2020-16244" ;
    icsa:cweNumber "CWE-759; CWE-639" ;
    icsa:hasCVE cve-res:CVE-2020-16240,
        cve-res:CVE-2020-16244 ;
    icsa:hasCWE cwe-res:CWE-639,
        cwe-res:CWE-759 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APM Classic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of GE Digital APM Classic - a tool to analyze and process data are affected: APM Classic; Versions 4.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-266-01" ;
    icsa:vendor "GE Digital" ;
    icsa:year 2020 .

icsa-res:ICSA-20-266-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-266-02" ;
    dcterms:issued "2020-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Reason S20 Ethernet Switch" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-16246; CVE-2020-16242" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-16242,
        cve-res:CVE-2020-16246 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Reason S20 Ethernet Switch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Reason S20 managed Ethernet switches are affected: S2020; All firmware versions prior to 07A06 S2024; All firmware versions prior to 07A06." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-266-02" ;
    icsa:vendor "GE" ;
    icsa:year 2020 .

icsa-res:ICSA-20-273-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-273-01" ;
    dcterms:issued "2020-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "MB Connect line mbCONNECT24, mymbCONNECT24" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-24568; CVE-2020-24569; CVE-2020-24570" ;
    icsa:cweNumber "CWE-352; CWE-89; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2020-24568,
        cve-res:CVE-2020-24569,
        cve-res:CVE-2020-24570 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-77,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mbCONNECT24, mymbCONNECT24" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and versions are affected: mymbCONNECT24 v2.6.1 and prior mbCONNECT24 v2.6.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-273-01" ;
    icsa:vendor "MB Connect line" ;
    icsa:year 2020 .

icsa-res:ICSA-20-273-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-273-02" ;
    dcterms:issued "2020-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa WideField3" ;
    icsa:CVSSScore "2.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2020-16232" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2020-16232 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WideField3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Yokogawa reports that the vulnerability affects the tool for programming FA-M3 PLCs: WideField3 R1.01 - R4.03." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-273-02" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2020 .

icsa-res:ICSA-20-273-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-273-03" ;
    dcterms:issued "2020-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "B&R Automation SiteManager and GateManager" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-11643; CVE-2020-11641; CVE-2020-11642; CVE-2020-11645; CVE-2020-11644; CVE-2020-11646" ;
    icsa:cweNumber "CWE-22; CWE-200; CWE-400; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2020-11641,
        cve-res:CVE-2020-11642,
        cve-res:CVE-2020-11643,
        cve-res:CVE-2020-11644,
        cve-res:CVE-2020-11645,
        cve-res:CVE-2020-11646 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-287,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiteManager and GateManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SiteManager and GateManager are affected: SiteManager all versions prior to v9.2.620236042 GateManager 4260 and 9250 all versions prior to v9.0.20262 GateManager 8250 all versions prior to v9.2.620236042." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-273-03" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2020 .

icsa-res:ICSA-20-280-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-280-01" ;
    dcterms:issued "2020-10-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ISaGRAF5 Runtime (Update A)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-25180; CVE-2020-25184; CVE-2020-25178; CVE-2020-25182; CVE-2020-25176" ;
    icsa:cweNumber "CWE-427; CWE-321; CWE-23; CWE-256; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2020-25176,
        cve-res:CVE-2020-25178,
        cve-res:CVE-2020-25180,
        cve-res:CVE-2020-25182,
        cve-res:CVE-2020-25184 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-256,
        cwe-res:CWE-319,
        cwe-res:CWE-321,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISaGRAF5 Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are impacted by vulnerabilities in Rockwell's ISaGRAF runtime. Xylem reports that MultiSmart Gen-1 devices and MultiSmart Gen-2 devices running firmware prior to Version 3.2.0 contain a version of ISaGRAF 5.x. If ISaGRAF is enabled on those devices; all versions GE reports that GE Steam Power's ALSPA S6 MFC3000 and MFC1000 (all versions); Rockwell Automation reports these vulnerabilities affect all ISaGRAF Runtime Versions 4.x and 5.x The following Rockwell Automation products are based on ISaGRAF5 to design integrated automation solutions: AADvance Controller version 1.40 and earlier ISaGRAF Free Runtime in ISaGRAF6 Workbench Version 6.6.8 and earlier Micro800 family; a distributed control system; then they might be affected by these vulnerabilities. Other vendors may also use ISaGRAF5 in their products." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-280-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-282-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-282-01" ;
    dcterms:issued "2020-10-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C¢CURE Web Client (Update A)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-9048" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2020-9048 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "American Dynamics victor Web Client and Software House C¢CURE Web Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports that the vulnerability affects the following versions of victor Web Client and C¢CURE Web Client software: American Dynamics victor Web Client: All versions up to and including v5.4.1; Software House C¢CURE Web Client: All versions up to and including v2.80." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-282-01" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-282-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-282-02" ;
    dcterms:issued "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series (Update D)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-16850" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-16850 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a Programmable Controller; are affected: iQ-R series R00CPU: Versions \"20\" and prior iQ-R series R01CPU: Versions \"20\" and prior iQ-R series R02CPU; Versions \"20\" and prior iQ-R series R04CPU: Versions \"52\" and prior iQ-R series R08CPU: Versions \"52\" and prior iQ-R series R16CPU: Versions \"52\" and prior iQ-R series R32CPU: Versions \"52\" and prior iQ-R series R120CPU: Versions \"52\" and prior iQ-R series R04ENCPU: Versions \"52\" and prior iQ-R series R08ENCPU: Versions \"52\" and prior iQ-R series R16ENCPU: Versions \"52\" and prior iQ-R series R32ENCPU: Versions \"52\" and prior iQ-R series R120ENCPU: Versions \"52\" and prior iQ-R series R08FCPU: Versions \"22\" and prior iQ-R series R16FCPU: Versions \"22\" and prior iQ-R series R32FCPU: Versions \"22\" and prior iQ-R series R120FCPU: Versions \"22\" and prior iQ-R series R08PCPU: Versions \"25\" and prior iQ-R series R16PCPU: Versions \"25\" and prior iQ-R series R32PCPU: Versions \"25\" and prior iQ-R series R120PCPU: Versions \"25\" and prior iQ-R series R16MTCPU Operating system software: Versions \"21\" and prior iQ-R series R32MTCPU Operating system software: Versions \"21\" and prior iQ-R series R64MTCPU Operating system software: Versions \"21\" and prior.; The following versions of Mitsubishi Electric MELSEC iQ-R Series" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-282-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-287-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-287-01" ;
    dcterms:issued "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "MOXA NPort IAW5000A-I/O Series" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-25198; CVE-2020-25192; CVE-2020-25196; CVE-2020-25190; CVE-2020-25153; CVE-2020-25194" ;
    icsa:cweNumber "CWE-200; CWE-307; CWE-521; CWE-269; CWE-384; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2020-25153,
        cve-res:CVE-2020-25190,
        cve-res:CVE-2020-25192,
        cve-res:CVE-2020-25194,
        cve-res:CVE-2020-25196,
        cve-res:CVE-2020-25198 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-269,
        cwe-res:CWE-307,
        cwe-res:CWE-319,
        cwe-res:CWE-384,
        cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NPort IAW5000A-I/O Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software versions on NPort IAW5000A-I/O - integrated serial device server are affected: NPort: Firmware Version 2.1 or lower." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-287-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2020 .

icsa-res:ICSA-20-287-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-287-02" ;
    dcterms:issued "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS LAquis SCADA" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-25188" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-25188 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "The following versions of LAquis SCADA are affected: LAquis SCADA versions prior to 4.3.1.870." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-287-02" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2020 .

icsa-res:ICSA-20-287-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-287-03" ;
    dcterms:issued "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Flexera InstallShield" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-2542" ;
    icsa:cweNumber "CWE-426" ;
    icsa:hasCVE cve-res:CVE-2016-2542 ;
    icsa:hasCWE cwe-res:CWE-426 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InstallShield" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Flexera InstallShield are affected: Flexera InstallShield through 2015 SP1 Flexera InstallShield is integrated into many products sold by other companies." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-287-03" ;
    icsa:vendor "Flexera" ;
    icsa:year 2020 .

icsa-res:ICSA-20-287-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-287-04" ;
    dcterms:issued "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fieldcomm Group HART-IP and hipserver" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-16209" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-16209 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HART-IP and hipserver" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and versions are affected: HART-IP Developer kit; Release 1.0.0.0 hipserver; Release 3.6.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-287-04" ;
    icsa:vendor "Fieldcomm Group" ;
    icsa:year 2020 .

icsa-res:ICSA-20-287-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-287-05" ;
    dcterms:issued "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo Insight" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-15793; CVE-2020-15792; CVE-2020-15794" ;
    icsa:cweNumber "CWE-1021; CWE-89; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2020-15792,
        cve-res:CVE-2020-15793,
        cve-res:CVE-2020-15794 ;
    icsa:hasCWE cwe-res:CWE-1021,
        cwe-res:CWE-200,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo Insight" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Desigo Insight: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-287-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-287-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-287-06" ;
    dcterms:issued "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPORT MP" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2020-7591" ;
    icsa:cweNumber "CWE-603" ;
    icsa:hasCVE cve-res:CVE-2020-7591 ;
    icsa:hasCWE cwe-res:CWE-603 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPORT MP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIPORT MP - a system for access control and time management within the Siveillance Access Suite are affected: SIPORT MP: Versions 3.2.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-287-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-289-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-289-01" ;
    dcterms:issued "2020-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-25161" ;
    icsa:cweNumber "CWE-73" ;
    icsa:hasCVE cve-res:CVE-2020-25161 ;
    icsa:hasCWE cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of WebAccess/SCADA - a browser-based SCADA software package are affected: WebAccess/SCADA Versions 9.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-289-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-289-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-289-02" ;
    dcterms:issued "2020-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech R-SeeNet" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-25157" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2020-25157 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "R-SeeNet" ;
    icsa:productDistribution "East Asia, Europe, Middle East, South America, United States" ;
    icsa:productsAffected "The following versions of R-SeeNet - a monitoring application are affected: R-SeeNet Versions 1.5.1 through 2.4.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-289-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2020 .

icsa-res:ICSA-20-294-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-294-01" ;
    dcterms:issued "2020-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1794-AENT Flex I/O Series B" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-6085; CVE-2020-6087; CVE-2020-6086; CVE-2020-6084; CVE-2020-6083" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2020-6083,
        cve-res:CVE-2020-6084,
        cve-res:CVE-2020-6085,
        cve-res:CVE-2020-6086,
        cve-res:CVE-2020-6087 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1794-AENT Flex I/O Series B" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of 1794-AENT Flex I/O Series B - Ethernet/IP adapter are affected: 1794-AENT Flex I/O; Series B; Versions 4.003 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-294-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-294-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-294-02" ;
    dcterms:issued "2020-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-10933" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-10933 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Power Grids XMC20 Multiservice-Multiplexer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports the vulnerability affects the following XMC20 Multiservice-Multiplexer products: XMC20 R4 using COGE5 versions older than co5ne_r1h07_12.esw XMC20 R6 using COGE5 versions older than co5ne_r2d14_03.esw." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-294-02" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2020 .

icsa-res:ICSA-20-301-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-301-01" ;
    dcterms:issued "2020-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "SHUN HU Technology JUUKO Industrial Radio Remote Control" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2018-17932; CVE-2018-19025" ;
    icsa:cweNumber "CWE-294; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2018-17932,
        cve-res:CVE-2018-19025 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Radio Remote Control" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of JUUKO Industrial Radio Remote Control are affected: JUUKO K-800 and K-808: Firmware versions prior to numbers ending ...9A; ...9B; ...9C; etc. If you have any questions on what is affected; please contact SHUN HU Technology technical support." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-301-01" ;
    icsa:vendor "SHUN HU Technology Co Ltd" ;
    icsa:year 2020 .

icsa-res:ICSA-20-303-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-303-01" ;
    dcterms:issued "2020-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R, Q, and L Series (Update E)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5652" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-5652 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R, Q, and L Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports that the following MELSEC programmable controllers are affected: MELSEC iQ-R R00 CPU firmware: versions 20 and earlier MELSEC iQ-R R01 CPU firmware: versions 20 and earlier MELSEC iQ-R R02 CPU firmware: versions 20 and earlier MELSEC iQ-R R04 (EN) CPU firmware: versions 52 and earlier MELSEC iQ-R R08 (EN) CPU firmware: versions 52 and earlier MELSEC iQ-R R16 (EN) CPU firmware: versions 52 and earlier MELSEC iQ-R R32 (EN) CPU firmware: versions 52 and earlier MELSEC iQ-R R120 (EN) CPU firmware: versions 52 and earlier MELSEC iQ-R R08 SFCPU firmware: versions 22 and earlier MELSEC iQ-R R16 SFCPU firmware: versions 22 and earlier MELSEC iQ-R R32 SFCPU firmware: versions 22 and earlier MELSEC iQ-R R120 SFCPU firmware: versions 22 and earlier MELSEC iQ-R R08 PCPU firmware: versions 24 and earlier MELSEC iQ-R R16 PCPU firmware: versions 24 and earlier MELSEC iQ-R R32 PCPU firmware: versions 24 and earlier MELSEC iQ-R R120 PCPU firmware: versions 24 and earlier MELSEC iQ-R R08 PSFCPU firmware: versions 06 and earlier MELSEC iQ-R R16 PSFCPU firmware: versions 06 and earlier MELSEC iQ-R R32 PSFCPU firmware: versions 06 and earlier MELSEC iQ-R R120 PSFCPU firmware: versions 06 and earlier MELSEC iQ-R R16 MTCPU operating system software: versions 21 and earlier MELSEC iQ-R R32 MTCPU operating system software: versions 21 and earlier MELSEC iQ-R R64 MTCPU operating system software: versions 21 and earlier MELSEC Q Q03 UDECPU: the first 5 digits of serial number 22081 and earlier MELSEC Q Q04 UDEHCPU: the first 5 digits of serial number 22081 and earlier MELSEC Q Q06 UDEHCPU: the first 5 digits of serial number 22081 and earlier MELSEC Q Q10 UDEHCPU: the first 5 digits of serial number 22081 and earlier MELSEC Q Q13 UDEHCPU: the first 5 digits of serial number 22081 and earlier MELSEC Q Q20 UDEHCPU: the first 5 digits of serial number 22081 and earlier MELSEC Q Q26 UDEHCPU: the first 5 digits of serial number 22081 and earlier MELSEC Q Q50 UDEHCPU: the first 5 digits of serial number 22081 and earlier MELSEC Q Q100 UDEHCPU: the first 5 digits of serial number 22081 and earlier MELSEC Q Q03 UDVCPU: the first 5 digits of serial number 22031 and earlier MELSEC Q Q04 UDVCPU: the first 5 digits of serial number 22031 and earlier MELSEC Q Q06 UDVCPU: the first 5 digits of serial number 22031 and earlier MELSEC Q Q13 UDVCPU: the first 5 digits of serial number 22031 and earlier MELSEC Q Q26 UDVCPU: the first 5 digits of serial number 22031 and earlier MELSEC Q Q04 UDPVCPU: the first 5 digits of serial number 22031 and earlier MELSEC Q Q06 UDPVCPU: the first 5 digits of serial number 22031 and earlier MELSEC Q Q13 UDPVCPU: the first 5 digits of serial number 22031 and earlier MELSEC Q Q26 UDPVCPU: the first 5 digits of serial number 22031 and earlier MELSEC Q Q172 DCPU-S1 operating system software: versions V and earlier MELSEC Q Q173 DCPU-S1 operating system software: versions V and earlier MELSEC Q Q172 DSCPU operating system software: versions W and earlier MELSEC Q Q173 DSCPU operating system software: versions W and earlier MELSEC Q Q170 MCPU operating system software: versions V and earlier MELSEC Q Q170 MSCPU(-S1) operating system software: versions W and earlier MELSEC Q MR-MQ100 operating system software: versions E and earlier. This product is sold in limited regions. MELSEC L L02 CPU (-P): the first 5 digits of serial number 23121 and earlier MELSEC L L06 CPU (-P): the first 5 digits of serial number 23121 and earlier MELSEC L L26 CPU (-P): the first 5 digits of serial number 23121 and earlier MELSEC L L26 CPU - (P) BT: the first 5 digits of serial number 23121 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-303-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-303-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-303-02" ;
    dcterms:issued "2020-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5657; CVE-2020-5658; CVE-2020-5654; CVE-2020-5656; CVE-2020-5653; CVE-2020-5655" ;
    icsa:cweNumber "CWE-384; CWE-88; CWE-284; CWE-119; CWE-399; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2020-5653,
        cve-res:CVE-2020-5654,
        cve-res:CVE-2020-5655,
        cve-res:CVE-2020-5656,
        cve-res:CVE-2020-5657,
        cve-res:CVE-2020-5658 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-284,
        cwe-res:CWE-384,
        cwe-res:CWE-399,
        cwe-res:CWE-476,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following modules of MELSEC iQ-R Series are affected: EtherNet/IP Network Interface Module; RJ71EIP91: First 2 digits of serial number are 02 or before. PROFINET IO Controller Module; RJ71PN92: First 2 digits of serial number are 01 or before High Speed Data Logger Module; RD81DL96: First 2 digits of serial number are 08 or before MES Interface Module; RD81MES96N: First 2 digits of serial number are 04 or before OPC UA Server Module; RD81OPC96: First 2 digits of serial number are 04 or before." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-303-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-308-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-308-01" ;
    dcterms:issued "2020-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO Series 750-88x and 750-352 (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-12516" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-12516 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "750-88x and 750-352" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The firmware versions prior to FW11 of the following WAGO Series products are affected: 750-352 750-831/xxx-xxx 750-852 750-880/xxx-xxx 750-881 750-889; 750-331/xxx-xxx 750-829 750-882 750-885." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-308-01" ;
    icsa:vendor "WAGO" ;
    icsa:year 2020 .

icsa-res:ICSA-20-308-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-308-02" ;
    dcterms:issued "2020-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "NEXCOM NIO50" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-25151; CVE-2020-25155" ;
    icsa:cweNumber "CWE-20; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2020-25151,
        cve-res:CVE-2020-25155 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NIO50" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of NEXCOM NIO 50 are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-308-02" ;
    icsa:vendor "NEXCOM" ;
    icsa:year 2020 .

icsa-res:ICSA-20-308-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-308-03" ;
    dcterms:issued "2020-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "ARC Informatique PcVue (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-26869; CVE-2020-26868; CVE-2020-26867" ;
    icsa:cweNumber "CWE-502; CWE-200; CWE-767" ;
    icsa:hasCVE cve-res:CVE-2020-26867,
        cve-res:CVE-2020-26868,
        cve-res:CVE-2020-26869 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-502,
        cwe-res:CWE-767 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PcVue" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PcVue are affected: PcVue Versions 8.10 to versions prior to 12.0.17." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-308-03" ;
    icsa:vendor "ARC Informatique" ;
    icsa:year 2020 .

icsa-res:ICSA-20-310-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-310-01" ;
    dcterms:issued "2020-11-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON PLC Editor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-25177; CVE-2020-25181" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-25177,
        cve-res:CVE-2020-25181 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PLC Editor - a ladder logic software are affected: PLC Editor Versions 1.3.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-310-01" ;
    icsa:vendor "WECON" ;
    icsa:year 2020 .

icsa-res:ICSA-20-310-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-310-02" ;
    dcterms:issued "2020-11-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GT14 Model of GOT1000 Series" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5647; CVE-2020-5644; CVE-2020-5645; CVE-2020-5649; CVE-2020-5646; CVE-2020-5648" ;
    icsa:cweNumber "CWE-384; CWE-88; CWE-284; CWE-119; CWE-399; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2020-5644,
        cve-res:CVE-2020-5645,
        cve-res:CVE-2020-5646,
        cve-res:CVE-2020-5647,
        cve-res:CVE-2020-5648,
        cve-res:CVE-2020-5649 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-284,
        cwe-res:CWE-384,
        cwe-res:CWE-399,
        cwe-res:CWE-476,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GT14 Model of GOT1000 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following models of GOT1000 with CoreOS Version 05.65.00.BD and prior - a graphic operation terminal are affected: GT1455-QTBDE GT1450-QMBDE GT1450-QLBDE GT1455HS-QTBDE GT1450HS-QMBDE." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-310-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-315-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-315-01" ;
    dcterms:issued "2020-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Interface for OPC XML-DA" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2013-0006" ;
    icsa:cweNumber "CWE-189" ;
    icsa:hasCVE cve-res:CVE-2013-0006 ;
    icsa:hasCWE cwe-res:CWE-189 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Interface for OPC XML-DA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of PI Interface for OPC XML-DA prior to 1.7.3.x are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-315-01" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2020 .

icsa-res:ICSA-20-315-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-315-02" ;
    dcterms:issued "2020-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Vision" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-25163; CVE-2020-25167" ;
    icsa:cweNumber "CWE-79; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2020-25163,
        cve-res:CVE-2020-25167 ;
    icsa:hasCWE cwe-res:CWE-79,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Vision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions prior to PI Vision 2020 are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-315-02" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2020 .

icsa-res:ICSA-20-315-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-315-03" ;
    dcterms:issued "2020-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PLC Simulator for EcoStruxure Control Expert" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7538" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2020-7538 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC Simulator for EcoStruxure Control Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the vulnerability affects the following PLC simulators: PLC Simulator for EcoStruxure Control Expert; all versions PLC Simulator for Unity Pro (former name of EcoStruxure Control Expert); all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-315-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-315-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-315-04" ;
    dcterms:issued "2020-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller (Update A)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2020-1578; CVE-2020-15783" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-1578,
        cve-res:CVE-2020-15783 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-300 CPUs and SINUMERIK Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following products: SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions SINUMERIK 840D sl: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-315-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-315-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-315-05" ;
    dcterms:issued "2020-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W 1750D" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2016-2031" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2016-2031 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W 1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCALANCE are affected: SCALANCE W 1750D: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-315-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-317-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-317-01" ;
    dcterms:issued "2020-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5666" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-5666 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the vulnerability affects the following MELSEC iQ-R series CPU module products: R00/01/02 CPU Firmware versions from 05 to 19 R04/08/16/32/120(EN) CPU Firmware versions from 35 to 51." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-317-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-324-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-324-01" ;
    dcterms:issued "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Sensormatic Electronics American Dynamics victor Web Client" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-9049" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2020-9049 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "American Dynamics victor Web Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following products: All versions of victor Web Client up to and including v5.6 All versions of C¢CURE Web Client up to and including v2.90 NOTE: This does not affect the new web-based C¢CURE 9000 client that was introduced in C¢CURE 9000 v2.90." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-324-01" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-324-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-324-02" ;
    dcterms:issued "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Paradox IP150 (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-25189; CVE-2020-25185" ;
    icsa:cweNumber "CWE-121; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2020-25185,
        cve-res:CVE-2020-25189 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IP150" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Paradox IP150 are affected: --------- Begin Update A part 1 of 1 --------- Paradox IP150: All firmware versions --------- End Update A part 1 of 1 --------- Paradox IP150 firmware Version 5.02.09." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-324-02" ;
    icsa:vendor "Paradox" ;
    icsa:year 2020 .

icsa-res:ICSA-20-324-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-324-03" ;
    dcterms:issued "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Real Time Automation EtherNet/IP" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-25159" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-25159 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EtherNet/IP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of 499ES EtherNet/IP Adaptor Source Code - a TCP/IP stack are affected: All versions prior to 2.28." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-324-03" ;
    icsa:vendor "Real Time Automation (RTA)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-324-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-324-04" ;
    dcterms:issued "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Interactive Graphical SCADA System (IGSS)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-7556; CVE-2020-7554; CVE-2020-7551; CVE-2020-7555; CVE-2020-7557; CVE-2020-7558; CVE-2020-7552; CVE-2020-7550; CVE-2020-7553" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2020-7550,
        cve-res:CVE-2020-7551,
        cve-res:CVE-2020-7552,
        cve-res:CVE-2020-7553,
        cve-res:CVE-2020-7554,
        cve-res:CVE-2020-7555,
        cve-res:CVE-2020-7556,
        cve-res:CVE-2020-7557,
        cve-res:CVE-2020-7558 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Interactive Graphical SCADA System (IGSS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of IGSS are affected: IGSS Definition (Def.exe) Version 14.0.0.20247 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-324-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-324-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-324-05" ;
    dcterms:issued "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5668" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-5668 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the vulnerability affects the following MELSEC iQ-R series CPU module products: R00/01/02CPU firmware Versions 19 and earlier R04/08/16/32/120(EN)CPU firmware Versions 51 and earlier R08/16/32/120SFCPU firmware Versions 22 and earlier; R08/16/32/120PCPU firmware Versions 25 and earlier R08/16/32/120PSFCPU firmware Versions 06 and earlier; RJ71EN71 firmware Versions 47 and earlier RJ71GF11-T2 firmware Versions 47 and earlier RJ72GF15-T2 firmware Versions 07 and earlier RJ71GP21-SX firmware Versions 47 and earlier RJ71GP21S-SX firmware Versions 47 and earlier RJ71C24(-R2/R4) all versions RJ71GN11-T2 all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-324-05" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-329-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-329-01" ;
    dcterms:issued "2020-11-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Linx" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-27255; CVE-2020-27253; CVE-2020-27251" ;
    icsa:cweNumber "CWE-122; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2020-27251,
        cve-res:CVE-2020-27253,
        cve-res:CVE-2020-27255 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Linx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FactoryTalk Linx are affected: FactoryTalk Linx: Version 6.11 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-329-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2020 .

icsa-res:ICSA-20-329-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-329-02" ;
    dcterms:issued "2020-11-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-11-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric V-Server Lite" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-25171" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2020-25171 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Electric V-Server Lite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of V-Server Lite - a data collection and management service are affected: V-Server Lite; all versions prior to 3.3.24.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-329-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-336-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-336-01" ;
    dcterms:issued "2020-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD)" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7544" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2020-7544 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Operator Terminal Expert runtime (Vijeo XD)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the vulnerability affects the following EcoStruxure Operator Terminal Expert products: EcoStruxure Operator Terminal Expert Runtime 3.1 Service Pack 1A and prior installed on: Windows PC using legacy BIOS Harmony iPC (HMIG5U; HMIG5U2) using legacy BIOS NOTE: Windows PCs using UEFI are not impacted by this vulnerability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-336-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-338-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-338-01" ;
    dcterms:issued "2020-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "National Instruments CompactRIO" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-25191" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2020-25191 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CompactRIO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CompactRIO - a real-time embedded industrial controller are affected: CompactRIO: Driver versions prior to 20.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-338-01" ;
    icsa:vendor "National Instruments Corp (NI)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-01" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Multiple Embedded TCP/IP Stacks" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Open-source" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-13987; CVE-2020-17468; CVE-2020-25108; CVE-2020-24335; CVE-2020-24341; CVE-2020-17438; CVE-2020-17444; CVE-2020-24340; CVE-2020-17443; CVE-2020-13986; CVE-2020-24383; CVE-2020-17470; CVE-2020-17469; CVE-2020-17445; CVE-2020-17439; CVE-2020-17467; CVE-2020-24337; CVE-2020-24334; CVE-2020-13985; CVE-2020-25107; CVE-2020-17442; CVE-2020-17441; CVE-2020-25109; CVE-2020-13988; CVE-2020-17440; CVE-2020-25112; CVE-2020-25110; CVE-2020-13984; CVE-2020-24339; CVE-2020-17437; CVE-2020-24336; CVE-2020-24338; CVE-2020-25111" ;
    icsa:cweNumber "CWE-787; CWE-170; CWE-835; CWE-20; CWE-190; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-13984,
        cve-res:CVE-2020-13985,
        cve-res:CVE-2020-13986,
        cve-res:CVE-2020-13987,
        cve-res:CVE-2020-13988,
        cve-res:CVE-2020-17437,
        cve-res:CVE-2020-17438,
        cve-res:CVE-2020-17439,
        cve-res:CVE-2020-17440,
        cve-res:CVE-2020-17441,
        cve-res:CVE-2020-17442,
        cve-res:CVE-2020-17443,
        cve-res:CVE-2020-17444,
        cve-res:CVE-2020-17445,
        cve-res:CVE-2020-17467,
        cve-res:CVE-2020-17468,
        cve-res:CVE-2020-17469,
        cve-res:CVE-2020-17470,
        cve-res:CVE-2020-24334,
        cve-res:CVE-2020-24335,
        cve-res:CVE-2020-24336,
        cve-res:CVE-2020-24337,
        cve-res:CVE-2020-24338,
        cve-res:CVE-2020-24339,
        cve-res:CVE-2020-24340,
        cve-res:CVE-2020-24341,
        cve-res:CVE-2020-24383,
        cve-res:CVE-2020-25107,
        cve-res:CVE-2020-25108,
        cve-res:CVE-2020-25109,
        cve-res:CVE-2020-25110,
        cve-res:CVE-2020-25111,
        cve-res:CVE-2020-25112 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-170,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-787,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Embedded TCP/IP Stacks" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following are affected: uIP-Contiki-OS (end-of-life [EOL]); Version 3.0 and prior uIP-Contiki-NG; Version 4.5 and prior uIP (EOL); Version 1.0 and prior open-iscsi; Version 2.1.12 and prior picoTCP-NG; Version 1.7.0 and prior picoTCP (EOL); Version 1.7.0 and prior FNET; Version 4.6.3 Nut/Net; Version 5.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-01" ;
    icsa:vendor "Multiple (Open-source)" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-02" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT and Tension Controller (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5675" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-5675 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT and Tension Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GT21 model: GT2107-WTBD versions v01.39.000 and earlier GT2107-WTSD versions v01.39.000 and earlier GT2104-RTBD versions v01.39.000 and earlier GT2104-PMBD versions v01.39.000 and earlier GT2103-PMBD versions v01.39.000 and earlier GOT SIMPLE series; Mitsubishi Electric reports that the vulnerability affects the following human-machine interface (GOT) and Tension Controller products: GOT2000 series; GT21 model: GT2107-WTBD versions v01.39.000 and earlier GT2107-WTSD versions v01.39.000 and earlier GT2104-RTBD versions v01.39.000 and earlier GT2104-PMBD versions v01.39.000 and earlier GT2103-PMBD versions v01.39.000 and earlier GOT SIMPLE series; GS21 model: GS2110-WTBD versions v01.39.000 and earlier GS2107-WTBD versions v01.39.000 and earlier GS2110-WTBD-N versions v01.39.000 and earlier GS2107-WTBD-N versions v01.39.000 and earlier Tension Controller LE7-40GU-L All versions Refer to the user manual to determine which version is in use. The latest version of the manual is available at the Mitsubishi Electric website. Consult a Mitsubishi Electric representative for the latest version of the Tension Controller manual.; GS21 model: GS2110-WTBD versions v01.39.000 and earlier GS2107-WTBD versions v01.39.000 and earlier GS2110-WTBD-N versions v01.39.000 and earlier GS2107-WTBD-N versions v01.39.000 and earlier; Tension Controller: LE7-40GU-L Screen package data for CC-Link IEF Basic v1.00 LE7-40GU-L Screen package data for MODBUS/TCP v1.00 LE7-40GU-L Screen package data for SLMP v1.00 Refer to the user manual to determine which version is in use. The latest version of the manual of GOT is available at the Mitsubishi Electric Global Website. Contact a Mitsubishi Electric representative for the latest version of the Tension Controller manual.; Mitsubishi Electric reports that the vulnerability affects the following human-machine interface (GOT) and Tension Controller products: GOT2000 series" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-03" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Easergy T300" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7561; CVE-2020-28218; CVE-2020-28216; CVE-2020-28215; CVE-2020-28217" ;
    icsa:cweNumber "CWE-306; CWE-862; CWE-1021; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2020-28215,
        cve-res:CVE-2020-28216,
        cve-res:CVE-2020-28217,
        cve-res:CVE-2020-28218,
        cve-res:CVE-2020-7561 ;
    icsa:hasCWE cwe-res:CWE-1021,
        cwe-res:CWE-306,
        cwe-res:CWE-311,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Easergy T300" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports this vulnerability affects the following firmware versions of the Easergy T300 products: Easergy T300 with firmware Versions 2.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-04" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M221 Programmable Logic Controller" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-7567; CVE-2020-28214; CVE-2020-7565; CVE-2020-7568; CVE-2020-7566" ;
    icsa:cweNumber "CWE-200; CWE-334; CWE-326; CWE-760; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2020-28214,
        cve-res:CVE-2020-7565,
        cve-res:CVE-2020-7566,
        cve-res:CVE-2020-7567,
        cve-res:CVE-2020-7568 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-311,
        cwe-res:CWE-326,
        cwe-res:CWE-334,
        cwe-res:CWE-760 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon M221 Programmable Logic Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports these vulnerabilities affect the following Modicon products: Modicon M221: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-05" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Embedded TCP/IP Stack Vulnerabilities-AMNESIA:33 (Update C)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-13988" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2020-13988 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Embedded TCP/IP Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: SENTRON 3VA COM100/800: all versions prior to v4.2 SENTRON 3VA DSP800: all versions prior to v2.0 SENTRON PAC2200 (without MID Approval): all versions prior to v3.0.5 SENTRON PAC3200: all versions prior to v2.4.5 SENTRON PAC3200T: all versions prior to v3.0.5 SENTRON PAC4200: all versions prior to v2.0.1 SIRIUS 3RW5 communication module Modbus TCP: all versions prior to v1.1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-06" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens XHQ Operations Intelligence" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-19287; CVE-2019-19285; CVE-2019-19286; CVE-2019-19289; CVE-2019-19283; CVE-2019-19288; CVE-2019-19284" ;
    icsa:cweNumber "CWE-352; CWE-89; CWE-200; CWE-79; CWE-80; CWE-23" ;
    icsa:hasCVE cve-res:CVE-2019-19283,
        cve-res:CVE-2019-19284,
        cve-res:CVE-2019-19285,
        cve-res:CVE-2019-19286,
        cve-res:CVE-2019-19287,
        cve-res:CVE-2019-19288,
        cve-res:CVE-2019-19289 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-23,
        cwe-res:CWE-352,
        cwe-res:CWE-79,
        cwe-res:CWE-80,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XHQ Operations Intelligence" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of XHQ Operations Intelligence are affected: XHQ: All versions prior to 6.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-07" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM A8000 RTUs" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-28396" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2020-28396 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM A8000 RTUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SICAM A8000 - a remote terminal unit (RTU) are affected: SICAM A8000 CP-8000: All versions prior to Version 16 SICAM A8000 CP-8021: All versions prior to Version 16 SICAM A8000 CP-8022: All versions prior to Version 16." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-08" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Products using TightVNC (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-15680; CVE-2019-15678; CVE-2019-8287; CVE-2019-15679" ;
    icsa:cweNumber "CWE-122; CWE-120; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2019-15678,
        cve-res:CVE-2019-15679,
        cve-res:CVE-2019-15680,
        cve-res:CVE-2019-8287 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-122,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Products using TightVNC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Vulnerabilities in TightVNC (v1.X) - a remote-control software package - do not affect the following Siemens products. The previous version of this advisory stated the following products were affected: SIMATIC HMI Comfort Outdoor Panels 7\" and 15\" (including SIPLUS variants): All versions prior to Version 16 update 3 SIMATIC HMI Comfort Panel 4\" to 22\" (including SIPLUS variants): All versions prior to Version 16 update 3 SIMATIC HMI KTP Mobile Panels KTP400F; KTP700; KTP700F; KTP900 and KTP900F: All versions prior to Version 16 update 3 SIMATIC ITC1500 v3.1: All versions SIMATIC ITC1500 v3.1 PRO: All versions SIMATIC ITC1900 v3.1: All versions SIMATIC ITC1900 v3.1 Pro: All versions SIMATIC ITC2200 v3.1: All versions SIMATIC ITC2200 v3.1 PRO: All versions SIMATIC WinCC Runtime Advanced: All versions prior to Version 16 update 3 SIMATIC WinCC Runtime Professional: All version prior to Version 16 update 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-09" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Controller Web Servers" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-15796" ;
    icsa:cweNumber "CWE-248" ;
    icsa:hasCVE cve-res:CVE-2020-15796 ;
    icsa:hasCWE cwe-res:CWE-248 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Controller Web Servers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the web server of the following SIMATIC controllers: SIMATIC ET 200SP Open Controller (incl. SIPLUS variants): Version 20.8 SIMATIC S7-1500 Software Controller: Version 20.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-343-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-343-10" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! 8 BM" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-25228; CVE-2020-25230; CVE-2020-25234; CVE-2020-25229; CVE-2020-25233; CVE-2020-25231; CVE-2020-25235; CVE-2020-25232" ;
    icsa:cweNumber "CWE-306; CWE-321; CWE-327; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2020-25228,
        cve-res:CVE-2020-25229,
        cve-res:CVE-2020-25230,
        cve-res:CVE-2020-25231,
        cve-res:CVE-2020-25232,
        cve-res:CVE-2020-25233,
        cve-res:CVE-2020-25234,
        cve-res:CVE-2020-25235 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-321,
        cwe-res:CWE-327,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! 8 BM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerabilities affect the following LOGO! products: LOGO! 8 BM (incl. SIPLUS variants): All versions prior to 8.3 LOGO! Soft Comfort: All versions prior to 8.3 (only affected by CVE-2020-25231; CVE-2020-25234)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-343-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2020 .

icsa-res:ICSA-20-345-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-345-01" ;
    dcterms:issued "2020-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5665" ;
    icsa:cweNumber "CWE-703" ;
    icsa:hasCVE cve-res:CVE-2020-5665 ;
    icsa:hasCWE cwe-res:CWE-703 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports that the vulnerability affects the following MELSEC iQ-F series FX5U(C) CPU modules: FX5U(C) CPU module: firmware Version 1.060 or earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-345-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2020 .

icsa-res:ICSA-20-345-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-345-02" ;
    dcterms:issued "2020-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Host Engineering H2-ECOM100 Module" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-25195" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2020-25195 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Host Engineering H2-ECOM100 Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Host Engineering ECOM100 Module - Ethernet communications module for PLC systems are affected: H0-ECOM100 Module: Hardware Versions 6x and prior with Firmware Versions 4.0.348 and prior Hardware Version 7x with Firmware Versions 4.1.113 and prior Hardware Version 9x with Firmware Versions 5.0.149 and prior H2-ECOM100 Module: Hardware Versions 5x and prior with Firmware Versions 4.0.2148 and prior Hardware Version 8x with Firmware Versions 5.0.1043 and prior H4-ECOM100 Module: Firmware Versions 4.0.2148 and prior NOTE: Products only vulnerable if web server is enabled which is disabled by default." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-345-02" ;
    icsa:vendor "Host Engineering" ;
    icsa:year 2020 .

icsa-res:ICSA-20-352-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-352-01" ;
    dcterms:issued "2020-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson Rosemount X-STREAM" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Chemical" ;
    icsa:cveNumber "CVE-2020-27254" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2020-27254 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rosemount X-STREAM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Emerson's Rosemount X-STREAM gas analysis software are affected: X-STREAM enhanced XEGP - all revisions X-STREAM enhanced XEGK - all revisions X-STREAM enhanced XEFD - all revisions X-STREAM enhanced XEXF - all revisions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-352-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2020 .

icsa-res:ICSA-20-352-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-352-02" ;
    dcterms:issued "2020-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Kepware KEPServerEX (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-27265; CVE-2020-27267; CVE-2020-27263" ;
    icsa:cweNumber "CWE-416; CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-27263,
        cve-res:CVE-2020-27265,
        cve-res:CVE-2020-27267 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KEPServerEX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected by the vulnerabilities found in Kepware KEPServerEX - a connectivity platform: KEPServerEX: v6.0 to v6.9 ThingWorx Kepware Server: v6.8 and v6.9 ThingWorx Industrial Connectivity: All versions OPC-Aggregator: All versions. The following products may have a vulnerable component: Rockwell Automation KEPServer Enterprise: v6.6.504.0 and v6.9.572.0 GE Digital Industrial Gateway Server: v7.68.804 and v7.66 Software Toolbox TOP Server: All 6.x versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-352-02" ;
    icsa:vendor "PTC" ;
    icsa:year 2020 .

icsa-res:ICSA-20-352-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-352-03" ;
    dcterms:issued "2020-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Kepware LinkMaster" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-13535" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2020-13535 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LinkMaster" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PTC Kepware LinkMaster - a Windows application linking data between OPC servers are affected: Kepware LinkMaster Version 3.0.94.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-352-03" ;
    icsa:vendor "PTC" ;
    icsa:year 2020 .

icsa-res:ICSA-20-353-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-20-353-01" ;
    dcterms:issued "2020-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Treck TCP/IP Stack (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-25066; CVE-2020-27337; CVE-2020-27338; CVE-2020-27336" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2020-25066,
        cve-res:CVE-2020-27336,
        cve-res:CVE-2020-27337,
        cve-res:CVE-2020-27338 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Treck TCP/IP Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following components of Treck TCP/IP stack Version 6.0.1.67 and prior are affected: HTTP Server IPv6 DHCPv6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-20-353-01" ;
    icsa:vendor "Treck Inc" ;
    icsa:year 2020 .

icsa-res:ICSA-21-005-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-005-01" ;
    dcterms:issued "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Web Server on Modicon M340" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-7563; CVE-2020-7562; CVE-2020-7564" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2020-7562,
        cve-res:CVE-2020-7563,
        cve-res:CVE-2020-7564 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Web Server on Modicon M340" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports these vulnerabilities affect the following Modicon products: M340 CPUs BMX P34x; all versions M340 Communication Ethernet modules BMX NOE 0100 (H); all versions BMX NOE 0110 (H); all versions BMX NOC 0401; all versions BMX NOR 0200H; all versions Premium processors with integrated Ethernet COPRO TSXP574634; TSXP575634; TSXP576634; all versions Premium communication modules TSXETY4103; all versions TSXETY5103; all versions Quantum processors with integrated Ethernet COPRO 140CPU65xxxxx; all versions Quantum communication modules 140NOE771x1; all versions 140NOC78x00; all versions 140NOC77101; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-005-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-005-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-005-02" ;
    dcterms:issued "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Panasonic FPWIN Pro" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2020-16236" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-16236 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Panasonic FPWIN Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FPWIN Pro - programming software for all FP Series PLCs are affected: FPWIN Pro Version 7.5.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-005-02" ;
    icsa:vendor "Panasonic" ;
    icsa:year 2021 .

icsa-res:ICSA-21-005-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-005-03" ;
    dcterms:issued "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Reason RT43X Clocks" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-25193; CVE-2020-25197" ;
    icsa:cweNumber "CWE-94; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2020-25193,
        cve-res:CVE-2020-25197 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GE Reason RT43X Clocks" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE reports the vulnerabilities affect the following GNSS clocks: RT430; RT431 & RT434: All firmware versions prior to Version 08A06." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-005-03" ;
    icsa:vendor "GE" ;
    icsa:year 2021 .

icsa-res:ICSA-21-005-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-005-04" ;
    dcterms:issued "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Red Lion Crimson 3.1" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-27283; CVE-2020-27285; CVE-2020-27279" ;
    icsa:cweNumber "CWE-306; CWE-404; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2020-27279,
        cve-res:CVE-2020-27283,
        cve-res:CVE-2020-27285 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-404,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Red Lion Crimson 3.1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Crimson 3.1 for the DA10D Protocol Converter are affected: Crimson 3.1: Build versions prior to 3119.001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-005-04" ;
    icsa:vendor "Red Lion Controls" ;
    icsa:year 2021 .

icsa-res:ICSA-21-005-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-005-05" ;
    dcterms:issued "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DOPSoft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-27275; CVE-2020-27277" ;
    icsa:cweNumber "CWE-787; CWE-822" ;
    icsa:hasCVE cve-res:CVE-2020-27275,
        cve-res:CVE-2020-27277 ;
    icsa:hasCWE cwe-res:CWE-787,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DOPSoft - software that supports the DOP-100 series HMI screens are affected: DOPSoft Version 4.0.8.21 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-005-05" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-005-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-005-06" ;
    dcterms:issued "2021-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft ScreenEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-27281" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-27281 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics CNCSoft ScreenEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CNCSoft ScreenEditor are affected: CNCSoft ScreenEditor Versions 1.01.26 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-005-06" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-007-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-007-01" ;
    dcterms:issued "2021-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-10933" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-10933 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports a vulnerability exists in the libssh library included in the following products: FOX61x R1 using CESM1/CESM2: All versions prior to cesne_r1h07_12.esw FOX61x R2 using CESM1/CESM2: All versions prior to cesne_r2d14_03.esw." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-007-01" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-007-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-007-02" ;
    dcterms:issued "2021-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-One" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-27257; CVE-2020-27259; CVE-2020-27261" ;
    icsa:cweNumber "CWE-843; CWE-121; CWE-822" ;
    icsa:hasCVE cve-res:CVE-2020-27257,
        cve-res:CVE-2020-27259,
        cve-res:CVE-2020-27261 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-822,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Omron CX-One" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CX-One; an Automation Software Suite are affected: CX-One Versions 4.60 and prior; including the following applications: CX-Protocol Versions 2.02 and prior CX-Server Versions 5.0.28 and prior CX-Position Versions 2.52 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-007-02" ;
    icsa:vendor "Omron" ;
    icsa:year 2021 .

icsa-res:ICSA-21-007-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-007-03" ;
    dcterms:issued "2021-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton EASYsoft (Update A)" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-6656; CVE-2020-6655" ;
    icsa:cweNumber "CWE-843; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-6655,
        cve-res:CVE-2020-6656 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Eaton EASYsoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions 7.20 and prior of EASYsoft are affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-007-03" ;
    icsa:vendor "Eaton" ;
    icsa:year 2021 .

icsa-res:ICSA-21-007-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-007-04" ;
    dcterms:issued "2021-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-B" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-27291; CVE-2020-27293; CVE-2020-27289; CVE-2020-27287" ;
    icsa:cweNumber "CWE-822; CWE-843; CWE-787; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-27287,
        cve-res:CVE-2020-27289,
        cve-res:CVE-2020-27291,
        cve-res:CVE-2020-27293 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787,
        cwe-res:CWE-822,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics CNCSoft-B" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CNCSoft-B - software management platform are affected: CNCSoft-B Versions 1.0.0.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-007-04" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-012-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-012-01" ;
    dcterms:issued "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Build-Rapsody (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-22697; CVE-2021-22698" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2021-22697,
        cve-res:CVE-2021-22698 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Power Build-Rapsody" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Power Build-Rapsody software Versions 2.1.13 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-012-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-012-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-012-02" ;
    dcterms:issued "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X Switches (Update C)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-28391; CVE-2020-28395" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2020-28391,
        cve-res:CVE-2020-28395 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X200, X200IRT, X300" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SCALANCE X-200 switch family (incl. SIPLUS NET variants): All versions prior to v5.2.5 --------- Begin Update C Part 1 of 2 --------- SCALANCE X-200RNA switch family: All versions prior to v3.2.7 --------- End Update C Part 1 of 2 --------- SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): All versions prior to v5.5.0 SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants): All versions prior to v4.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-012-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-012-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-012-03" ;
    dcterms:issued "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2Go and Teamcenter Visualization (Update B)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-26993; CVE-2020-26980; CVE-2020-26995; CVE-2020-26996; CVE-2020-26986; CVE-2020-26991; CVE-2020-26992; CVE-2020-26994; CVE-2020-26990; CVE-2020-28383; CVE-2020-26983; CVE-2020-26982; CVE-2020-26981; CVE-2020-26984; CVE-2020-26988; CVE-2020-26989; CVE-2020-26985; CVE-2020-26987" ;
    icsa:cweNumber "CWE-611; CWE-122; CWE-787; CWE-843; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-26980,
        cve-res:CVE-2020-26981,
        cve-res:CVE-2020-26982,
        cve-res:CVE-2020-26983,
        cve-res:CVE-2020-26984,
        cve-res:CVE-2020-26985,
        cve-res:CVE-2020-26986,
        cve-res:CVE-2020-26987,
        cve-res:CVE-2020-26988,
        cve-res:CVE-2020-26989,
        cve-res:CVE-2020-26990,
        cve-res:CVE-2020-26991,
        cve-res:CVE-2020-26992,
        cve-res:CVE-2020-26993,
        cve-res:CVE-2020-26994,
        cve-res:CVE-2020-26995,
        cve-res:CVE-2020-26996,
        cve-res:CVE-2020-28383 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-611,
        cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens JT2Go and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: JT2Go: All versions prior to v13.1.0 JT2Go: Version 13.1.0. only affected by CVE-2020-26989; CVE-2020-26990; CVE-2020-26991 Teamcenter Visualization: All versions prior to v13.1.0 Teamcenter Visualization: Version 13.1.0 only affected by CVE-2020-26989; CVE-2020-26990; CVE-2020-26991." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-012-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-012-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-012-04" ;
    dcterms:issued "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-28384; CVE-2020-28382; CVE-2020-28386; CVE-2020-28383; CVE-2020-26989; CVE-2020-28381" ;
    icsa:cweNumber "CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-26989,
        cve-res:CVE-2020-28381,
        cve-res:CVE-2020-28382,
        cve-res:CVE-2020-28383,
        cve-res:CVE-2020-28384,
        cve-res:CVE-2020-28386 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Solid Edge - portfolio of software tools are affected: Solid Edge: All versions prior to SE2021MP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-012-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-012-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-012-05" ;
    dcterms:issued "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X Products (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-15799; CVE-2020-25226; CVE-2020-15800" ;
    icsa:cweNumber "CWE-306; CWE-122" ;
    icsa:hasCVE cve-res:CVE-2020-15799,
        cve-res:CVE-2020-15800,
        cve-res:CVE-2020-25226 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SCALANCE X Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that these vulnerabilities affect the following SCALANCE X products: SCALANCE X-200 switch family (incl. SIPLUS NET variants): All versions; SCALANCE X-200IRT switch family (incl. SIPLUS NET variants): All versions prior to v5.5.0 SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants): All versions prior to v4.1.0; only affected by CVE-2020-15800." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-012-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-019-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-019-01" ;
    dcterms:issued "2021-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "dnsmasq by Simon Kelley (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-25681; CVE-2020-25687; CVE-2020-25685; CVE-2020-25682; CVE-2020-25686; CVE-2020-25683; CVE-2020-25684" ;
    icsa:cweNumber "CWE-122; CWE-327; CWE-345" ;
    icsa:hasCVE cve-res:CVE-2020-25681,
        cve-res:CVE-2020-25682,
        cve-res:CVE-2020-25683,
        cve-res:CVE-2020-25684,
        cve-res:CVE-2020-25685,
        cve-res:CVE-2020-25686,
        cve-res:CVE-2020-25687 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-327,
        cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "dnsmasq by Simon Kelley" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of dnsmasq DNS and DHCP server are affected: Version 2.8.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-019-01" ;
    icsa:vendor "dnsmasq by Simon Kelley" ;
    icsa:year 2021 .

icsa-res:ICSA-21-019-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-019-02" ;
    dcterms:issued "2021-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Reolink P2P Cameras" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Hong Kong" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2020-25173; CVE-2020-25169" ;
    icsa:cweNumber "CWE-319; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2020-25169,
        cve-res:CVE-2020-25173 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Reolink P2P Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Reolink devices use P2P: RLC-4XX series RLC-5XX series RLN-X10 series." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-019-02" ;
    icsa:vendor "Reolink" ;
    icsa:year 2021 .

icsa-res:ICSA-21-021-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-021-01" ;
    dcterms:issued "2021-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics ISPSoft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-27280" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2020-27280 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics ISPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ISPSoft - PLC program development tool are affected: ISPSoft: v3.12 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-021-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-021-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-021-02" ;
    dcterms:issued "2021-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics TPEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-27284; CVE-2020-27288" ;
    icsa:cweNumber "CWE-787; CWE-822" ;
    icsa:hasCVE cve-res:CVE-2020-27284,
        cve-res:CVE-2020-27288 ;
    icsa:hasCWE cwe-res:CWE-787,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics TPEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of TPEditor - programming software for Delta text panels are affected: TPEditor: v1.98 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-021-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-021-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-021-03" ;
    dcterms:issued "2021-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell OPC UA Tunneller" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-27295; CVE-2020-27297; CVE-2020-27299; CVE-2020-27274" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-754; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-27274,
        cve-res:CVE-2020-27295,
        cve-res:CVE-2020-27297,
        cve-res:CVE-2020-27299 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-400,
        cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Honeywell OPC UA Tunneller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Honeywell reports the vulnerabilities affect the following Matrikon products: OPC UA Tunneller: All versions prior to 6.3.0.8233." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-021-03" ;
    icsa:vendor "Matrikon (Subsidiary of Honeywell)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-021-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-021-04" ;
    dcterms:issued "2021-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELFA (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20586" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-20586 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric MELFA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the vulnerability affects the following MELFA robot controllers: MELFA FR Series MELFA CR Series MELFA ASSISTA For more detailed information on affected models and firmware versions; please see the Mitsubishi Electric advisory." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-021-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-021-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-021-05" ;
    dcterms:issued "2021-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO M&M Software fdtCONTAINER (Update C)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-12525" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2020-12525 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WAGO M&M Software fdtCONTAINER" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: fdtCONTAINER component Versions between 3.5.0 and 3.5.20304.x Versions between 3.6.0 and 3.6.20304.x Versions older than 3.5 fdtCONTAINER application Versions between 4.5.0 and 4.5.20304.x Versions between 4.6.0 and 4.6.20304.x Versions older than 4.5 dtmINSPECTOR Version 3 (Based on FDT 1.2.x) There are reports indicating the following products incorporate the affected component: Emerson Rosemount Transmitter Interface Software (RTIS) SKUs: 04088-9000-0001; 4088-9000-0002; and 7000003-312 PEPPERL+FUCHS PACTware 5.0; up to and including Version 5.0.5.31 Weidmuller WI Manager up to and including Version 2.5.1; Mitsubishi Electric MELSOFT FieldDeviceConfigurator; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-021-05" ;
    icsa:vendor "M&M Software GmbH (Subsidiary of WAGO Kontakttechnik)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-026-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-026-01" ;
    dcterms:issued "2021-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Tellus Lite V-Simulator and V-Server Lite" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22641; CVE-2021-22639; CVE-2021-22655; CVE-2021-22637; CVE-2021-22653" ;
    icsa:cweNumber "CWE-824; CWE-122; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-22637,
        cve-res:CVE-2021-22639,
        cve-res:CVE-2021-22641,
        cve-res:CVE-2021-22653,
        cve-res:CVE-2021-22655 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Fuji Electric Tellus Lite V-Simulator and V-Server Lite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Fuji Electric products are affected: Tellus Lite V-Simulator: Versions prior to v4.0.10.0 V-Server Lite: Versions prior to v4.0.10.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-026-01" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-026-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-026-02" ;
    dcterms:issued "2021-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "All Bachmann M1 System Processor Modules" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-16231" ;
    icsa:cweNumber "CWE-916" ;
    icsa:hasCVE cve-res:CVE-2020-16231 ;
    icsa:hasCWE cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "All Bachmann M1 System Processor Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MX213; which include the following M1 Hardware Controllers: MX207; MP226; MPC240; CS200; MH230. This list indicates actively supported controllers. MC205; MC206; MC220; MPC293; MPC265; MH212; MPC270; MC210; MPE270; ME203; MP213; MX220; All M-Base Operating Systems and Middleware versions since MSYS v1.06.14 are affected; CPC210. This list indicates End-of-Life controllers.; MC212" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-026-02" ;
    icsa:vendor "Bachmann Electronic GmbH" ;
    icsa:year 2021 .

icsa-res:ICSA-21-028-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-028-01" ;
    dcterms:issued "2021-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-5801; CVE-2020-5802; CVE-2020-5807; CVE-2020-5806" ;
    icsa:cweNumber "CWE-703; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2020-5801,
        cve-res:CVE-2020-5802,
        cve-res:CVE-2020-5806,
        cve-res:CVE-2020-5807 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-703 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports these vulnerabilities affect the following products: FactoryTalk Linx software: Versions 6.20 and prior (CVE-2020-5806 only affects Versions 6.10; 6.11; and 6.20) FactoryTalkServices Platform: Versions 6.20 and prior (Only affected by CVE-2020-5807)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-028-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-033-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-033-01" ;
    dcterms:issued "2021-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix 1400 (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22659" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2021-22659 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation MicroLogix 1400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the vulnerability affects the following MicroLogix 1400 controllers: MicroLogix 1400; All series Version 21.6 and below." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-033-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-033-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-033-02" ;
    dcterms:issued "2021-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-15798" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2020-15798 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of these Siemens SIMATIC HMI products; which are used for operator control and monitoring of machines and plants are affected: SIMATIC HMI Comfort Panel (including SIPLUS variants): All versions before v16 Update 3a SIMATIC HMI KTP Mobile Panels: All versions before v16 Update 3a." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-033-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-035-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-035-01" ;
    dcterms:issued "2021-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Luxion KeyShot (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22643; CVE-2021-22645; CVE-2021-22649; CVE-2021-22651; CVE-2021-22647" ;
    icsa:cweNumber "CWE-22; CWE-822; CWE-787; CWE-125; CWE-357" ;
    icsa:hasCVE cve-res:CVE-2021-22643,
        cve-res:CVE-2021-22645,
        cve-res:CVE-2021-22647,
        cve-res:CVE-2021-22649,
        cve-res:CVE-2021-22651 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-22,
        cwe-res:CWE-357,
        cwe-res:CWE-787,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Luxion KeyShot" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Luxion software; 3D rendering and animation software are affected: KeyShot versions prior to 10.1 KeyShot Viewer versions prior to 10.1 KeyShot Network Rendering versions prior to 10.1 KeyVR versions prior to 10.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-035-01" ;
    icsa:vendor "Luxion" ;
    icsa:year 2021 .

icsa-res:ICSA-21-035-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-035-02" ;
    dcterms:issued "2021-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22663" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-22663 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Horner Automation Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Cscape - control system application programming software are affected: Cscape: All versions prior to 9.90 SP3.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-035-02" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-01" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Digital HMI/SCADA iFIX" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-18255; CVE-2019-18243" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2019-18243,
        cve-res:CVE-2019-18255 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GE Digital HMI/SCADA iFIX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following product is affected: HMI/SCADA iFIX: Versions 6.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-01" ;
    icsa:vendor "GE Digital" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-02" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech iView" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-22652; CVE-2021-22658; CVE-2021-22654; CVE-2021-22656" ;
    icsa:cweNumber "CWE-306; CWE-22; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2021-22652,
        cve-res:CVE-2021-22654,
        cve-res:CVE-2021-22656,
        cve-res:CVE-2021-22658 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Advantech iView" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of Advantech iView - device management application are affected: iView versions prior to v5.7.03.6112." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-03" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Server & SINEC NMS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-25237" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2020-25237 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEMA Server & SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens products are affected: SINEC NMS: All versions prior to v1.0 SP1 Update 1 SINEMA Server: All versions prior to v14.0 SP2 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-04" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX II" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-1763; CVE-2019-11745; CVE-2018-18508; CVE-2019-17007; CVE-2018-12404; CVE-2019-17006" ;
    icsa:cweNumber "CWE-787; CWE-20; CWE-295; CWE-345; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2018-12404,
        cve-res:CVE-2018-18508,
        cve-res:CVE-2019-11745,
        cve-res:CVE-2019-17006,
        cve-res:CVE-2019-17007,
        cve-res:CVE-2020-1763 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-20,
        cwe-res:CWE-295,
        cwe-res:CWE-345,
        cwe-res:CWE-476,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM ROX II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM ROX MX5000: All versions prior to v2.14.0 RUGGEDCOM ROX RX1400: All versions prior to v2.14.0 RUGGEDCOM ROX RX1500: All versions prior to v2.14.0 RUGGEDCOM ROX RX1501: All versions prior to v2.14.0 RUGGEDCOM ROX RX1510: All versions prior to v2.14.0 RUGGEDCOM ROX RX1511: All versions prior to v2.14.0 RUGGEDCOM ROX RX1512: All versions prior to v2.14.0 RUGGEDCOM ROX RX500: All versions prior to v2.14.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-05" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Administrator (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-25238" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2020-25238 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens TIA Administrator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: PCS neo (Administration Console): v3.0 TIA Portal: v15; v15.1; and v16." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-06" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2Go and Teamcenter Visualization (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-25177; CVE-2020-27005; CVE-2020-27002; CVE-2021-25178; CVE-2020-26999; CVE-2020-27008; CVE-2020-27006; CVE-2020-27004; CVE-2021-25174; CVE-2020-27007; CVE-2021-25175; CVE-2020-26998; CVE-2020-26991; CVE-2020-28383; CVE-2020-27001; CVE-2020-27003; CVE-2020-26989; CVE-2020-28394; CVE-2021-31784; CVE-2021-25176; CVE-2020-26990; CVE-2020-27000; CVE-2021-25173" ;
    icsa:cweNumber "CWE-822; CWE-787; CWE-704; CWE-789; CWE-843; CWE-121; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-26989,
        cve-res:CVE-2020-26990,
        cve-res:CVE-2020-26991,
        cve-res:CVE-2020-26998,
        cve-res:CVE-2020-26999,
        cve-res:CVE-2020-27000,
        cve-res:CVE-2020-27001,
        cve-res:CVE-2020-27002,
        cve-res:CVE-2020-27003,
        cve-res:CVE-2020-27004,
        cve-res:CVE-2020-27005,
        cve-res:CVE-2020-27006,
        cve-res:CVE-2020-27007,
        cve-res:CVE-2020-27008,
        cve-res:CVE-2020-28383,
        cve-res:CVE-2020-28394,
        cve-res:CVE-2021-25173,
        cve-res:CVE-2021-25174,
        cve-res:CVE-2021-25175,
        cve-res:CVE-2021-25176,
        cve-res:CVE-2021-25177,
        cve-res:CVE-2021-25178,
        cve-res:CVE-2021-31784 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-704,
        cwe-res:CWE-787,
        cwe-res:CWE-789,
        cwe-res:CWE-822,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens JT2Go and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: JT2Go: All versions prior to v13.1.0.1 Teamcenter Visualization: All versions prior to v13.1.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-07" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W780 and W740" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-25666" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2021-25666 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SCALANCE W780 and W740" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SCALANCE W780 and W740 (IEEE 802.11n) family: All versions prior to v6.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-08" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMARIS Configuration (Update A)" ;
    icsa:CVSSScore "4.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-28392" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2020-28392 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMARIS Configuration" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMARIS configuration - electrical planning software are affected: SIMARIS configuration: All versions prior to 4.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-09" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "SIMATIC WinCC Graphics Designer" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-10048" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2020-10048 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC Graphics Designer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects WinCC Graphics Designer used with the following DCS and SCADA products: SIMATIC PCS 7: All versions SIMATIC WinCC: All versions prior to 7.5 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-040-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-040-10" ;
    dcterms:issued "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens DIGSI 4" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-25245" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2020-25245 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens DIGSI 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: DIGSI 4: All versions prior to v4.94 SP1 HF 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-040-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-042-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-042-01" ;
    dcterms:issued "2021-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Multiple Embedded TCP/IP Stacks (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Multiple" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-27213; CVE-2020-27630; CVE-2020-28388; CVE-2020-27634; CVE-2020-27631; CVE-2020-27632; CVE-2020-27635; CVE-2020-27633; CVE-2020-27636" ;
    icsa:cweNumber "CWE-330" ;
    icsa:hasCVE cve-res:CVE-2020-27213,
        cve-res:CVE-2020-27630,
        cve-res:CVE-2020-27631,
        cve-res:CVE-2020-27632,
        cve-res:CVE-2020-27633,
        cve-res:CVE-2020-27634,
        cve-res:CVE-2020-27635,
        cve-res:CVE-2020-27636,
        cve-res:CVE-2020-28388 ;
    icsa:hasCWE cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Embedded TCP/IP Stacks" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following have been reported to be affected: Nut/Net; Version 5.1 and prior CycloneTCP; Version 1.9.6 and prior NDKTCPIP; Version 2.25 and prior FNET; Version 4.6.3 uIP-Contiki-OS (end-of-life [EOL]); Version 3.0 and prior uC/TCP-IP (EOL); Version 3.6.0 and prior uIP-Contiki-NG; Version 4.5 and prior uIP (EOL); Version 1.0 and prior picoTCP-NG; Version 1.7.0 and prior picoTCP (EOL); Version 1.7.0 and prior MPLAB Net; Version 3.6.1 and prior Nucleus NET; All versions prior to Version 5.2 Nucleus ReadyStart for ARM; MIPS; and PPC; All versions prior to Version 2012.12." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-042-01" ;
    icsa:vendor "Multiple Vendors" ;
    icsa:year 2021 .

icsa-res:ICSA-21-042-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-042-02" ;
    dcterms:issued "2021-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation DriveTools SP and Drives AOP" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-22665" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2021-22665 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation DriveTools SP and Drives AOP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the vulnerability affects the following products: DriveTools SP v5.13 and below DriveExecutive v5.13 and below Drives AOP v4.12 and below (supports Logix Versions v16-v30)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-042-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-047-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-047-01" ;
    dcterms:issued "2021-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Open Design Alliance Drawings SDK (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-25177; CVE-2021-25178; CVE-2021-25174; CVE-2021-25175; CVE-2021-31784; CVE-2021-25173; CVE-2021-25176" ;
    icsa:cweNumber "CWE-822; CWE-787; CWE-789; CWE-704; CWE-843; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-25173,
        cve-res:CVE-2021-25174,
        cve-res:CVE-2021-25175,
        cve-res:CVE-2021-25176,
        cve-res:CVE-2021-25177,
        cve-res:CVE-2021-25178,
        cve-res:CVE-2021-31784 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-704,
        cwe-res:CWE-787,
        cwe-res:CWE-789,
        cwe-res:CWE-822,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Open Design Alliance Drawings SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Drawings SDK - software development kit for DWG and DGN are affected: Drawings SDK: All versions prior to 2021.6 on all supported by ODA platforms in static configuration. Note: CVE-2021-31784 only affects this version. Drawings SDK: All versions prior to 2021.12 (Version 2021.11 is only affected by CVE-2021-25174 and CVE-2021-25173)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-047-01" ;
    icsa:vendor "Open Design Alliance" ;
    icsa:year 2021 .

icsa-res:ICSA-21-047-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-047-02" ;
    dcterms:issued "2021-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Allen-Bradley Micrologix 1100" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-6111" ;
    icsa:cweNumber "CWE-130" ;
    icsa:hasCVE cve-res:CVE-2020-6111 ;
    icsa:hasCWE cwe-res:CWE-130 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Allen-Bradley Micrologix 1100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the vulnerability affects the following Allen-Bradley MicroLogix 1100 Programmable Logic Controller: Allen-Bradley MicroLogix 1100 revision number 1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-047-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-049-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-049-01" ;
    dcterms:issued "2021-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys Reporting Engine (MRE) Web Services" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-9050" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2020-9050 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Metasys Reporting Engine (MRE) Web Services" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the vulnerability affects the following versions of Metasys Reporting Engine (MRE) Web Services: MRE - v2.0 MRE - v2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-049-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2021 .

icsa-res:ICSA-21-049-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-049-02" ;
    dcterms:issued "2021-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FA Engineering Software Products (Update H)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20587; CVE-2021-20588" ;
    icsa:cweNumber "CWE-122; CWE-130" ;
    icsa:hasCVE cve-res:CVE-2021-20587,
        cve-res:CVE-2021-20588 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-130 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FA Engineering Software Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FREQROL; Mitsubishi Electric reports these vulnerabilities affect the following FA Engineering Software Products that communicate with MELSEC; or GOT products: CPU Module Logging Configuration Tool: Version 1.112R and prior CW Configurator: Version 1.011M and prior Data Transfer: Version 3.44W and prior EZSocket: Version 5.4 and prior FR Configurator: All versions FR Configurator SW3: All versions FR Configurator2: Version 1.24A and prior GT Designer3 Version1(GOT1000): Version 1.250L and prior GT Designer3 Version1(GOT2000): Version 1.250L and prior GT SoftGOT1000 Version3: Version 3.245F and prior GT SoftGOT2000 Version1: Version 1.250L and prior GX Configurator-DP: Version 7.14Q and prior GX Configurator-QP: All versions GX Developer: Version 8.506C and prior GX Explorer: All versions GX IEC Developer: All versions GX LogViewer: Version 1.115U and prior GX RemoteService-I: All versions GX Works2: Version 1.597X and prior GX Works3: Version 1.070Y and prior iQ Monozukuri ANDON (Data Transfer): Version 1.003D and prior iQ Monozukuri Process Remote Monitoring (Data Transfer): Version 1.002C and prior M_CommDTM-HART: All versions M_CommDTM-IO-Link: Version 1.03D and prior MELFA-Works: Version 4.4 and prior MELSEC WinCPU Setting Utility: All versions MELSOFT EM Software Development Kit (EM Configurator): Version 1.015R and prior MELSOFT Navigator: Version 2.74C and prior MH11 SettingTool Version2: Version 2.004E and prior MI Configurator: Version 1.004E and prior MT Works2: Version 1.167Z and prior MX Component: Version 5.001B and prior Network Interface Board CC IE Control utility: Version 1.29F and prior Network Interface Board CC IE Field Utility: Version 1.16S and prior Network Interface Board CC-Link Ver.2 Utility: Version 1.23Z and prior Network Interface Board MNETH utility: Version 34L and prior PX Developer: Version 1.53F and prior RT ToolBox2: Version 3.73B and prior RT ToolBox3: Version 1.82L and prior Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): Version 4.12N and prior SLMP Data Collector: Version 1.04E and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-049-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-054-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-054-01" ;
    dcterms:issued "2021-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Services Platform" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-14516" ;
    icsa:cweNumber "CWE-916" ;
    icsa:hasCVE cve-res:CVE-2020-14516 ;
    icsa:hasCWE cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FactoryTalk Services Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FactoryTalk Services Platform Versions 6.10.00 and 6.11.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-054-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-054-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-054-02" ;
    dcterms:issued "2021-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech BB-ESWGP506-2SFP-T" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-22667" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2021-22667 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Advantech BB-ESWGP506-2SFP-T" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "The following Advantech products are affected: BB-ESWGP506-2SFP-T industrial ethernet switches: Versions 1.01.09 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-054-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-054-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-054-03" ;
    dcterms:issued "2021-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech Spectre RT Industrial Routers" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2016-6301; CVE-2018-20679; CVE-2016-2842; CVE-2016-0799; CVE-2019-18233; CVE-2016-6304; CVE-2015-9261; CVE-2019-18231; CVE-2019-18235" ;
    icsa:cweNumber "CWE-307; CWE-79; CWE-1103; CWE-319; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2015-9261,
        cve-res:CVE-2016-0799,
        cve-res:CVE-2016-2842,
        cve-res:CVE-2016-6301,
        cve-res:CVE-2016-6304,
        cve-res:CVE-2018-20679,
        cve-res:CVE-2019-18231,
        cve-res:CVE-2019-18233,
        cve-res:CVE-2019-18235 ;
    icsa:hasCWE cwe-res:CWE-1103,
        cwe-res:CWE-307,
        cwe-res:CWE-319,
        cwe-res:CWE-327,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Advantech Spectre RT Industrial Routers" ;
    icsa:productDistribution "East Asia, Europe, United States, South America, Middle East" ;
    icsa:productsAffected "The following versions of Advantech Spectre RT Industrial Routers are affected: Spectre RT ERT351 firmware Versions 5.1.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-054-03" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-054-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-054-04" ;
    dcterms:issued "2021-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ovarro TBox (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22648; CVE-2021-22640; CVE-2021-22646; CVE-2021-22642; CVE-2021-22644" ;
    icsa:cweNumber "CWE-94; CWE-732; CWE-321; CWE-522; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-22640,
        cve-res:CVE-2021-22642,
        cve-res:CVE-2021-22644,
        cve-res:CVE-2021-22646,
        cve-res:CVE-2021-22648 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-400,
        cwe-res:CWE-522,
        cwe-res:CWE-732,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ovarro TBox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of TBox - remote terminal unit (RTU) are affected: TBoxLT2 (All models) TBox MS-CPU32 TBox MS-CPU32-S2 TBox RM2 (All models) TBox TG2 (All models) All versions prior to TWinSoft 12.4 and Firmware 1.46." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-054-04" ;
    icsa:vendor "Ovarro" ;
    icsa:year 2021 .

icsa-res:ICSA-21-056-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-056-01" ;
    dcterms:issued "2021-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "PerFact OpenVPN-Client" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27406" ;
    icsa:cweNumber "CWE-15" ;
    icsa:hasCVE cve-res:CVE-2021-27406 ;
    icsa:hasCWE cwe-res:CWE-15 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PerFact OpenVPN-Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OpenVPN-Client are affected: OpenVPN-Client; Versions 1.4.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-056-01" ;
    icsa:vendor "PerFact" ;
    icsa:year 2021 .

icsa-res:ICSA-21-056-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-056-02" ;
    dcterms:issued "2021-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation FvDesigner" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22670; CVE-2021-22666; CVE-2021-22683; CVE-2021-22638; CVE-2021-22662" ;
    icsa:cweNumber "CWE-824; CWE-416; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-22638,
        cve-res:CVE-2021-22662,
        cve-res:CVE-2021-22666,
        cve-res:CVE-2021-22670,
        cve-res:CVE-2021-22683 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FATEK Automation FvDesigner" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FATEK Automation FvDesigner - software tool used to design and develop FATEK FV HMI series product projects are affected: FvDesigner Version 1.5.76 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-056-02" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-056-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-056-03" ;
    dcterms:issued "2021-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix Controllers (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-22681" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2021-22681 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Logix Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell software are affected: RSLogix 5000: Versions 16 through 20 Studio 5000 Logix Designer: Versions 21 and later FactoryTalk Security; part of the FactoryTalk Services Platform; if configured and deployed v2.10 and later. The following Rockwell Logix Controllers are affected: CompactLogix 1768 CompactLogix 1769 CompactLogix 5370 CompactLogix 5380 CompactLogix 5480 ControlLogix 5550 ControlLogix 5560 ControlLogix 5570 ControlLogix 5580 DriveLogix 5560 DriveLogix 5730 DriveLogix 1794-L34 Compact GuardLogix 5370 Compact GuardLogix 5380 GuardLogix 5570 GuardLogix 5580 SoftLogix 5800." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-056-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-056-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-056-04" ;
    dcterms:issued "2021-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "ProSoft Technology ICX35" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-22661" ;
    icsa:cweNumber "CWE-264" ;
    icsa:hasCVE cve-res:CVE-2021-22661 ;
    icsa:hasCWE cwe-res:CWE-264 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ProSoft Technology ICX35" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ProSoft Technology products; industrial cellular gateways are affected: ICX35-HWC-A: Versions 1.9.62 and prior ICX35-HWC-E: Versions 1.9.62 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-056-04" ;
    icsa:vendor "ProSoft Technology" ;
    icsa:year 2021 .

icsa-res:ICSA-21-061-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-061-01" ;
    dcterms:issued "2021-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids Ellipse EAM" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy Sector" ;
    icsa:cveNumber "CVE-2021-27416; CVE-2021-27414" ;
    icsa:cweNumber "CWE-79; CWE-451" ;
    icsa:hasCVE cve-res:CVE-2021-27414,
        cve-res:CVE-2021-27416 ;
    icsa:hasCWE cwe-res:CWE-451,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi ABB Power Grids Ellipse EAM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports these vulnerabilities affect the following Ellipse Enterprise Asset Management (EAM) products: Ellipse EAM versions prior to and including 9.0.25." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-061-01" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-061-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-061-02" ;
    dcterms:issued "2021-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers (Update A)" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-6998" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2020-6998 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation devices are affected: Armor Compact GuardLogix 5370 controllers; Versions 33 and prior Armor GuardLogix; Safety Controllers; Versions 33 and prior CompactLogix 5370 L1 controllers; Versions 33 and prior CompactLogix 5370 L2 controllers; Versions 33 and prior CompactLogix 5370 L3 controllers; Versions 33 and prior Compact GuardLogix 5370 controllers; Versions 33 and prior ControlLogix 5570 controllers; Versions 33 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-061-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-061-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-061-03" ;
    dcterms:issued "2021-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "MB connect line mbCONNECT24, mymbCONNECT24" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-12528; CVE-2020-35567; CVE-2020-12527; CVE-2020-35558; CVE-2020-12530; CVE-2020-35560; CVE-2020-35563; CVE-2020-35566; CVE-2020-35559; CVE-2020-35565; CVE-2020-10384; CVE-2020-35569; CVE-2020-35570; CVE-2020-12529; CVE-2020-35564; CVE-2020-35561; CVE-2020-35557; CVE-2020-35568" ;
    icsa:cweNumber "CWE-200; CWE-79; CWE-1188; CWE-98; CWE-918; CWE-798; CWE-269; CWE-601; CWE-522; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-10384,
        cve-res:CVE-2020-12527,
        cve-res:CVE-2020-12528,
        cve-res:CVE-2020-12529,
        cve-res:CVE-2020-12530,
        cve-res:CVE-2020-35557,
        cve-res:CVE-2020-35558,
        cve-res:CVE-2020-35559,
        cve-res:CVE-2020-35560,
        cve-res:CVE-2020-35561,
        cve-res:CVE-2020-35563,
        cve-res:CVE-2020-35564,
        cve-res:CVE-2020-35565,
        cve-res:CVE-2020-35566,
        cve-res:CVE-2020-35567,
        cve-res:CVE-2020-35568,
        cve-res:CVE-2020-35569,
        cve-res:CVE-2020-35570 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-200,
        cwe-res:CWE-269,
        cwe-res:CWE-400,
        cwe-res:CWE-522,
        cwe-res:CWE-601,
        cwe-res:CWE-79,
        cwe-res:CWE-798,
        cwe-res:CWE-918,
        cwe-res:CWE-98 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MB connect line mbCONNECT24, mymbCONNECT24" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and versions are affected: mymbCONNECT24 v2.6.1 and prior mbCONNECT24 v2.6.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-061-03" ;
    icsa:vendor "MB Connect line" ;
    icsa:year 2021 .

icsa-res:ICSA-21-063-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-063-01" ;
    dcterms:issued "2021-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1734-AENTR Series B and Series C" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-14502; CVE-2020-14504" ;
    icsa:cweNumber "CWE-284; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-14502,
        cve-res:CVE-2020-14504 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation 1734-AENTR Series B and Series C" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of 1734-AENTR are affected: Series B; Versions 4.001 to 4.005; and 5.011 to 5.017 Series C; Versions 6.011 and 6.012." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-063-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-063-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-063-02" ;
    dcterms:issued "2021-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Building Operation (EBO)" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-7571; CVE-2020-28210; CVE-2020-7570; CVE-2020-28209; CVE-2020-7572; CVE-2020-7569; CVE-2020-7573" ;
    icsa:cweNumber "CWE-434; CWE-611; CWE-79; CWE-428; CWE-284" ;
    icsa:hasCVE cve-res:CVE-2020-28209,
        cve-res:CVE-2020-28210,
        cve-res:CVE-2020-7569,
        cve-res:CVE-2020-7570,
        cve-res:CVE-2020-7571,
        cve-res:CVE-2020-7572,
        cve-res:CVE-2020-7573 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-428,
        cwe-res:CWE-434,
        cwe-res:CWE-611,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Building Operation (EBO)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports these vulnerabilities affect the following EcoStruxure Building Operation products: WebReports v1.9 - v3.1 WebStation v2.0 - v3.1 Enterprise Server installer v1.9 - v3.1 Enterprise Central installer v2.0 - v3.1 Note: Please see SEVD-2020-315-04 to see which vulnerabilities affect each specific product." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-063-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-01" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-PLCSIM" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-25673; CVE-2021-25675; CVE-2021-25674" ;
    icsa:cweNumber "CWE-835; CWE-476; CWE-369" ;
    icsa:hasCVE cve-res:CVE-2021-25673,
        cve-res:CVE-2021-25674,
        cve-res:CVE-2021-25675 ;
    icsa:hasCWE cwe-res:CWE-369,
        cwe-res:CWE-476,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC S7-PLCSIM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATICS S7-PLCSIM v5.4: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-02" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE and RUGGEDCOM Devices SSH (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-25676" ;
    icsa:cweNumber "CWE-307" ;
    icsa:hasCVE cve-res:CVE-2021-25676 ;
    icsa:hasCWE cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SCALANCE and RUGGEDCOM Devices SSH" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM RM1224: v6.3 SCALANCE M-800: v6.3 SCALANCE: S615: v6.3 SCALANCE SC-600: All versions from v2.1 and prior to v2.1.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-03" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE and RUGGEDCOM Devices (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-25667" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-25667 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SCALANCE and RUGGEDCOM Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM RM1224: All versions from v4.3 and prior to v4.6 SCALANCE M-800: All versions from v4.3 and prior to v4.6 SCALANCE S615: All versions from v4.3 and prior to v4.6 SCALANCE XR-300WG: All versions prior to v4.1 SCALANCE XB-200: All versions prior to v4.1 SCALANCE XC-200: All versions prior to v4.1 SCALANCE XF-200BA: All versions prior to v4.1 SCALANCE XP-200: All versions prior to v4.1; SCALANCE SC-600 Family: All versions from v2.0 and prior to v2.1.3 SCALANCE XM400: All versions prior to v6.2 SCALANCE XR500: All versions prior to v6.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-04" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-25240; CVE-2020-25239" ;
    icsa:cweNumber "CWE-863" ;
    icsa:hasCVE cve-res:CVE-2020-25239,
        cve-res:CVE-2020-25240 ;
    icsa:hasCWE cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINEMA Remote Connect Server are affected: SINEMA Remote Connect Server: All versions prior to v3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-05" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! 8 BM" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-25236" ;
    icsa:cweNumber "CWE-755" ;
    icsa:hasCVE cve-res:CVE-2020-25236 ;
    icsa:hasCWE cwe-res:CWE-755 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens LOGO! 8 BM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LOGO! 8 - programmable logic controller are affected: LOGO! 8 BM (incl. SIPLUS variants): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-06" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TCP/IP Stack Vulnerabilities-AMNESIA:33 in SENTRON PAC / 3VA Devices (Update B)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-13987; CVE-2020-17437" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2020-13987,
        cve-res:CVE-2020-17437 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SENTRON 3VA COM100/800, SENTRON 3VA DSP800, SENTRON PAC2200, SENTRON PAC3200T, SENTRON PAC3200, SENTRON PAC3220, SENTRON PAC4200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: SENTRON 3VA COM100/800: all versions prior to v4.4.1 SENTRON 3VA DSP800: all versions prior to v4.0 SENTRON PAC2200 (with CLP Approval): all versions; SENTRON PAC2200 (with MID Approval): all versions prior to v3.2.2 SENTRON PAC2200 (without MID Approval): all versions prior to v3.2.2 SENTRON PAC3200: all versions prior to v2.4.7 SENTRON PAC3200T: all versions prior to v3.2.2; SENTRON PAC3220: all versions prior to v3.2.0 SENTRON PAC4200: all versions prior to v2.3.0.; The following products are affected: SENTRON 3VA COM100/800: all versions SENTRON 3VA DSP800: all versions SENTRON PAC2200 (with CLP Approval): all versions SENTRON PAC2200 (with MID Approval): all versions SENTRON PAC2200 (without MID Approval): all versions SENTRON PAC3200: all versions prior to v2.4.7 SENTRON PAC3200T: all versions SENTRON PAC3220: all versions prior to v3.2.0 SENTRON PAC4200: all versions prior to v2.3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-07" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TCP Stack of SIMATIC MV400" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-27632; CVE-2020-25241" ;
    icsa:cweNumber "CWE-1285; CWE-330" ;
    icsa:hasCVE cve-res:CVE-2020-25241,
        cve-res:CVE-2020-27632 ;
    icsa:hasCWE cwe-res:CWE-1285,
        cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens TCP Stack of SIMATIC MV400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: SIMATIC MV400 family: All versions prior to v7.0.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-08" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Energy PLUSCONTROL 1st Gen" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-28388" ;
    icsa:cweNumber "CWE-342" ;
    icsa:hasCVE cve-res:CVE-2020-28388 ;
    icsa:hasCWE cwe-res:CWE-342 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Energy PLUSCONTROL 1st Gen" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following products: PLUSCONTROL 1st Gen: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-09" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge File Parsing" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-28385; CVE-2021-27380; CVE-2020-28387; CVE-2021-27381" ;
    icsa:cweNumber "CWE-611; CWE-787; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-28385,
        cve-res:CVE-2020-28387,
        cve-res:CVE-2021-27380,
        cve-res:CVE-2021-27381 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-611,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Solid Edge File Parsing" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Solid Edge - portfolio of software tools are affected: Solid Edge SE2020: All versions before SE2020MP13 Solid Edge SE2021: Versions SE2021MP3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-068-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-068-10" ;
    dcterms:issued "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE and SIMATIC libcurl (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-3823" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-3823 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SCALANCE and SIMATIC libcurl" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected by the third-party component libcurl: SCALANCE SC600 Family: all versions prior to v2.0 SIMATIC NET CM 1542-1: all versions; SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants): v3.0.33; v3.0.44 and v3.0.53." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-068-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-070-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-070-01" ;
    dcterms:issued "2021-03-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS SCADA Software" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-22712; CVE-2021-22710; CVE-2021-22711; CVE-2021-22709" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2021-22709,
        cve-res:CVE-2021-22710,
        cve-res:CVE-2021-22711,
        cve-res:CVE-2021-22712 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric IGSS SCADA Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and versions are affected: IGSS Definition (Def.exe) Version 15.0.0.21041 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-070-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-075-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-075-01" ;
    dcterms:issued "2021-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-27436" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-27436 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Advantech WebAccess/SCADA" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of WebAccess/SCADA - browser-based SCADA software package are affected: WebAccess/SCADA Versions 9.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-075-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-075-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-075-02" ;
    dcterms:issued "2021-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE UR family" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-27428; CVE-2016-2183; CVE-2021-27422; CVE-2021-27424; CVE-2021-27430; CVE-2021-27420; CVE-2021-27426; CVE-2021-27418; CVE-2013-2566" ;
    icsa:cweNumber "CWE-434; CWE-200; CWE-326; CWE-20; CWE-798; CWE-384; CWE-453" ;
    icsa:hasCVE cve-res:CVE-2013-2566,
        cve-res:CVE-2016-2183,
        cve-res:CVE-2021-27418,
        cve-res:CVE-2021-27420,
        cve-res:CVE-2021-27422,
        cve-res:CVE-2021-27424,
        cve-res:CVE-2021-27426,
        cve-res:CVE-2021-27428,
        cve-res:CVE-2021-27430 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-326,
        cwe-res:CWE-384,
        cwe-res:CWE-434,
        cwe-res:CWE-453,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GE UR family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE reports the vulnerabilities affect the following UR family (B30; B90; C30; C60; C70; C95; D30; D60; F35; F60; G30; G60; L30; L60; L90; M60; N60; T35; T60) of advanced protection and control relays: Vulnerabilities related to SSH Support: firmware versions 7.4x to 8.0x (CyberSentry option) Web server vulnerabilities: all firmware versions prior to version 8.1x Protection from unintended firmware upload: all firmware versions prior to 8.1x with basic security option Provisions to disable Factory Mode: all firmware versions prior to 8.1x with basic security option Access to \"Last-key pressed\" register: all firmware versions prior to 8.1x with basic security option Weakness in UR bootloader binary: all bootloader versions prior to 7.03/7.04 Please see GE publication GES-2021-004 (login required) for more information." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-075-02" ;
    icsa:vendor "GE" ;
    icsa:year 2021 .

icsa-res:ICSA-21-075-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-075-03" ;
    dcterms:issued "2021-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids AFS Series" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-9307" ;
    icsa:cweNumber "CWE-835" ;
    icsa:hasCVE cve-res:CVE-2020-9307 ;
    icsa:hasCWE cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi ABB Power Grids AFS Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports the vulnerability affects the following products in the AFS Series: AFS660/AFS665 Version 7.0.07; including the following variants: AFS660-SR AFS665-SR." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-075-03" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-077-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-077-01" ;
    dcterms:issued "2021-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Exacq Technologies exacqVision" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27656" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2021-27656 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Exacq Technologies exacqVision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the vulnerability affects the following Exacq Technologies products: exacqVision Web Service: All supported versions up to and including v20.12.02.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-077-01" ;
    icsa:vendor "Exacq Technologies Inc (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-077-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-077-02" ;
    dcterms:issued "2021-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids eSOMS" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-26845" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2021-26845 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi ABB Power Grids eSOMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports this vulnerability affects the following eSOMS products: eSOMS Version 6.0 prior to 6.0.4.2.2 eSOMS Version 6.1 prior to 6.1.4 eSOMS versions prior to 6.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-077-02" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-077-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-077-03" ;
    dcterms:issued "2021-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids eSOMS Telerik" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-18935; CVE-2014-2217; CVE-2014-4958; CVE-2019-19790" ;
    icsa:cweNumber "CWE-22; CWE-326; CWE-20; CWE-502; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2014-2217,
        cve-res:CVE-2014-4958,
        cve-res:CVE-2019-18935,
        cve-res:CVE-2019-19790 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-326,
        cwe-res:CWE-502,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi ABB Power Grids eSOMS Telerik" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports the vulnerabilities affect the following eSOMS products: eSOMS; all versions prior to 6.3 using a version of Telerik software." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-077-03" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-082-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-082-01" ;
    dcterms:issued "2021-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Weintek EasyWeb cMT" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-27444; CVE-2021-27442; CVE-2021-27446" ;
    icsa:cweNumber "CWE-284; CWE-79; CWE-94" ;
    icsa:hasCVE cve-res:CVE-2021-27442,
        cve-res:CVE-2021-27444,
        cve-res:CVE-2021-27446 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-79,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Weintek EasyWeb cMT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following models and OS versions of cMT are affected: cMT-SVR-1xx/2xx; versions prior to 20210305 cMT-G01/G02; versions prior to 20210209 cMT-G03/G04; versions prior to 20210222 cMT3071/cMT3072/cMT3090/cMT3103/cMT3151; versions prior to 20210218 cMT-HDM; versions prior to 20210204 cMT-FHD; versions prior to 20210208 cMT-CTRL01; versions prior to 20210302." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-082-01" ;
    icsa:vendor "Weintek" ;
    icsa:year 2021 .

icsa-res:ICSA-21-082-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-082-02" ;
    dcterms:issued "2021-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE MU320E" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27448; CVE-2021-27450; CVE-2021-27452" ;
    icsa:cweNumber "CWE-250; CWE-259; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2021-27448,
        cve-res:CVE-2021-27450,
        cve-res:CVE-2021-27452 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-259,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GE MU320E" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following firmware versions of MU320E are affected: All firmware versions prior to v04A00.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-082-02" ;
    icsa:vendor "GE" ;
    icsa:year 2021 .

icsa-res:ICSA-21-082-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-082-03" ;
    dcterms:issued "2021-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Reason DR60" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-27440; CVE-2021-27438; CVE-2021-27454" ;
    icsa:cweNumber "CWE-94; CWE-250; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2021-27438,
        cve-res:CVE-2021-27440,
        cve-res:CVE-2021-27454 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-259,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GE Reason DR60" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE reports these vulnerabilities affect the following Reason DR60 digital fault recorder products: DR60: All firmware versions prior to 02A04.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-082-03" ;
    icsa:vendor "GE" ;
    icsa:year 2021 .

icsa-res:ICSA-21-091-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-091-01" ;
    dcterms:issued "2021-04-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk AssetCentre" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27476; CVE-2021-27474; CVE-2021-27470; CVE-2021-27460; CVE-2021-27468; CVE-2021-27462; CVE-2021-27464; CVE-2021-27472; CVE-2021-27466" ;
    icsa:cweNumber "CWE-502; CWE-89; CWE-78; CWE-676" ;
    icsa:hasCVE cve-res:CVE-2021-27460,
        cve-res:CVE-2021-27462,
        cve-res:CVE-2021-27464,
        cve-res:CVE-2021-27466,
        cve-res:CVE-2021-27468,
        cve-res:CVE-2021-27470,
        cve-res:CVE-2021-27472,
        cve-res:CVE-2021-27474,
        cve-res:CVE-2021-27476 ;
    icsa:hasCWE cwe-res:CWE-502,
        cwe-res:CWE-676,
        cwe-res:CWE-78,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FactoryTalk AssetCentre" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports these vulnerabilities affects the following products: FactoryTalk AssetCentre; v10.00 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-091-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-096-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-096-01" ;
    dcterms:issued "2021-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Relion 670 650 SAM600IO (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-27196" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-27196 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Relion 670, 650, and SAM600-IO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2.2.2; 1.2; 1.2.3; --------- Begin Update B Part 1 of 2 --------- Hitachi Energy reports the vulnerability affects the following products with IEC 61850 interfaces: Relion 670 series: Versions 1.1; 2.2.3 Relion 670/650 series: Version 2.2.0 Relion 670/650/SAM600-IO series: Version 2.2.1 Relion 650 series: Versions 1.1; 1.3 --------- End Update B Part 1 of 2 ---------; 2.0; 2.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-096-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-098-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-098-01" ;
    dcterms:issued "2021-04-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation WinProladder" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27486" ;
    icsa:cweNumber "CWE-191" ;
    icsa:hasCVE cve-res:CVE-2021-27486 ;
    icsa:hasCWE cwe-res:CWE-191 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FATEK Automation WinProladder" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FATEK Automation WinProladder - PLC are affected: WinProladder Versions 3.30 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-098-01" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-01" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SoMachine Basic" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Nuclear Reactors; Materials; and Waste; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2018-7783" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2018-7783 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric SoMachine Basic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports this vulnerability affects the following SoMachine Basic: SoMachine Basic; all versions prior to v1.6 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-02" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccessSCADA" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-22669" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2021-22669 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Advantech WebAccessSCADA" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of WebAccess/SCADA - browser-based SCADA software package are affected: WebAccess/SCADA Versions 9.0.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-03" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "JTEKT TOYOPUC products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27458" ;
    icsa:cweNumber "CWE-404" ;
    icsa:hasCVE cve-res:CVE-2021-27458 ;
    icsa:hasCWE cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JTEKT TOYOPUC products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of these TOYOPUC product series are affected: TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions PC10GE TCC-6464: All versions PC10P TCC-6372: All versions PC10P-DP TCC-6726: All versions PC10P-DP-IO TCC-6752: All versions PC10B-P TCC-6373: All versions PC10B TCC-1021: All versions PC10B-E/C TCU-6521: All versions PC10E TCC-4737: All versions TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions Plus EX TCU-6741: All versions Plus EX2 TCU-6858: All versions Plus EFR TCU-6743: All versions Plus EFR2 TCU-6859: All versions Plus 2P-EFR TCU-6929: All versions Plus BUS-EX TCU-6900: All versions TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions 2PORT-EFR THU-6404: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-03" ;
    icsa:vendor "JTEKT ELECTRONICS CORPORATION" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-04" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Nucleus Products DNS Module (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-15795; CVE-2020-27009" ;
    icsa:cweNumber "CWE-823; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2020-15795,
        cve-res:CVE-2020-27009 ;
    icsa:hasCWE cwe-res:CWE-787,
        cwe-res:CWE-823 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Nucleus Products DNS Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Nucleus products are affected: Nucleus NET: All versions prior to v5.2 Nucleus RTOS: Versions including affected DNS modules Nucleus Source Code: Versions including affected DNS modules VSTAR: Versions including affected DNS modules." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-05" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Nucleus Products IPv6 Stack (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-25663; CVE-2021-25664" ;
    icsa:cweNumber "CWE-835" ;
    icsa:hasCVE cve-res:CVE-2021-25663,
        cve-res:CVE-2021-25664 ;
    icsa:hasCWE cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Nucleus Products IPv6 Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Nucleus products are affected: Nucleus 4: All versions prior to v4.1.0 Nucleus NET: All versions Nucleus ReadyStart: All versions Nucleus Source Code: Versions including the affected IPv6 stack VSTAR: Versions including the affected IPv6 stack." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-06" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge File Parsing (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-28385; CVE-2021-25678; CVE-2020-26997; CVE-2021-27382; CVE-2021-27380" ;
    icsa:cweNumber "CWE-787; CWE-121; CWE-822" ;
    icsa:hasCVE cve-res:CVE-2020-26997,
        cve-res:CVE-2020-28385,
        cve-res:CVE-2021-25678,
        cve-res:CVE-2021-27380,
        cve-res:CVE-2021-27382 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Solid Edge File Parsing" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Solid Edge - portfolio of software tools are affected: Solid Edge SE2020: All versions before SE2020MP13 Solid Edge SE2020: SE2020MP13 Solid Edge SE2021: All versions before SE2021MP4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-07" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Web Server of SCALANCE X200 (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-25668; CVE-2021-25669" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-25668,
        cve-res:CVE-2021-25669 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Web Server of SCALANCE X200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SCALANCE X200-4P IRT: All versions prior to 5.5.1 SCALANCE X201-3P IRT: All versions prior to 5.5.1 SCALANCE X201-3P IRT PRO: All versions prior to 5.5.1 SCALANCE X202-2 IRT: All versions prior to 5.5.1 SCALANCE X202-2P IRT (incl. SIPLUS NET variant): All versions prior to 5.5.1 SCALANCE X202-2P IRT PRO: All versions prior to 5.5.1 SCALANCE X204 IRT: All versions prior to 5.5.1 SCALANCE X204 IRT PRO: All versions prior to 5.5.1 SCALANCE X204-2 (incl. SIPLUS NET variant): All versions SCALANCE X204-2FM: All versions SCALANCE X204-2LD (incl. SIPLUS NET variant): All versions SCALANCE X204-2LD TS: All versions SCALANCE X204-2TS: All versions SCALANCE X206-1: All versions SCALANCE X206-1LD: All versions SCALANCE X208 (incl. SIPLUS NET variant): All versions SCALANCE X208PRO: All versions SCALANCE X212-2 (incl. SIPLUS NET variant): All versions SCALANCE X212-2LD: All versions SCALANCE X216: All versions SCALANCE X224: All versions SCALANCE XF201-3P IRT: All versions prior to 5.5.1 SCALANCE XF202-2P IRT: All versions prior to 5.5.1 SCALANCE XF204: All versions SCALANCE XF204 IRT: All versions prior to 5.5.1 SCALANCE XF204-2 (incl. SIPLUS NET variant): All versions SCALANCE XF204-2BA IRT: All versions prior to 5.5.1 SCALANCE XF206-1: All versions SCALANCE XF208: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-08" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-19956; CVE-2020-7595" ;
    icsa:cweNumber "CWE-835; CWE-772" ;
    icsa:hasCVE cve-res:CVE-2019-19956,
        cve-res:CVE-2020-7595 ;
    icsa:hasCWE cwe-res:CWE-772,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SINEMA Remote Connect Server: All versions prior to v3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-09" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! Soft Comfort" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-25244; CVE-2020-25243" ;
    icsa:cweNumber "CWE-22; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2020-25243,
        cve-res:CVE-2020-25244 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens LOGO! Soft Comfort" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that these vulnerabilities affect the following LOGO! engineering software products: LOGO! Soft Comfort: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-10" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens and PKE Control Center Server" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-19291; CVE-2019-18342; CVE-2019-19294; CVE-2019-18337; CVE-2019-18341; CVE-2019-13947; CVE-2019-19292; CVE-2019-18338; CVE-2019-19293; CVE-2019-19290; CVE-2019-18340; CVE-2019-19295" ;
    icsa:cweNumber "CWE-22; CWE-89; CWE-287; CWE-79; CWE-23; CWE-778; CWE-317; CWE-313; CWE-749; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2019-13947,
        cve-res:CVE-2019-18337,
        cve-res:CVE-2019-18338,
        cve-res:CVE-2019-18340,
        cve-res:CVE-2019-18341,
        cve-res:CVE-2019-18342,
        cve-res:CVE-2019-19290,
        cve-res:CVE-2019-19291,
        cve-res:CVE-2019-19292,
        cve-res:CVE-2019-19293,
        cve-res:CVE-2019-19294,
        cve-res:CVE-2019-19295 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-23,
        cwe-res:CWE-287,
        cwe-res:CWE-313,
        cwe-res:CWE-317,
        cwe-res:CWE-327,
        cwe-res:CWE-749,
        cwe-res:CWE-778,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens and PKE Control Center Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CCS - video management platform are affected: CCS: All versions prior to v1.5.0 CCS: v1.5.0 and later are affected by CVE-2019-18340." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-10" ;
    icsa:vendor "Siemens and PKE" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-11" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIM 4R-IE Devices" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2016-4954; CVE-2015-7977; CVE-2015-7855; CVE-2016-1547; CVE-2015-7705; CVE-2016-4953; CVE-2015-7974; CVE-2016-1548; CVE-2015-5219; CVE-2016-1550; CVE-2015-7871; CVE-2015-8138; CVE-2015-7979; CVE-2015-7973" ;
    icsa:cweNumber "CWE-200; CWE-287; CWE-254; CWE-704; CWE-20; CWE-362; CWE-19; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2015-5219,
        cve-res:CVE-2015-7705,
        cve-res:CVE-2015-7855,
        cve-res:CVE-2015-7871,
        cve-res:CVE-2015-7973,
        cve-res:CVE-2015-7974,
        cve-res:CVE-2015-7977,
        cve-res:CVE-2015-7979,
        cve-res:CVE-2015-8138,
        cve-res:CVE-2016-1547,
        cve-res:CVE-2016-1548,
        cve-res:CVE-2016-1550,
        cve-res:CVE-2016-4953,
        cve-res:CVE-2016-4954 ;
    icsa:hasCWE cwe-res:CWE-19,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-254,
        cwe-res:CWE-287,
        cwe-res:CWE-362,
        cwe-res:CWE-476,
        cwe-res:CWE-704 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens TIM 4R-IE Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products TIM 4R-IE communication modules are affected: TIM 4R-IE (incl. SIPLUS NET variants): All versions TIM 4R-IE DNP3 (incl. SIPLUS NET variants): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-12" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Tecnomatix RobotExpert" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-25670" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-25670 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Tecnomatix RobotExpert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Tecnomatix RobotExpert are affected: All versions prior to v16.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-13" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMOTICS CONNECT 400 (Update A" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-27737; CVE-2020-27736; CVE-2021-25677; CVE-2020-27738" ;
    icsa:cweNumber "CWE-170; CWE-788; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-27736,
        cve-res:CVE-2020-27737,
        cve-res:CVE-2020-27738,
        cve-res:CVE-2021-25677 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-170,
        cwe-res:CWE-788 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMOTICS CONNECT 400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and versions are affected: SIMOTICS CONNECT 400; All versions prior to v0.5.0.0 SIMOTICS CONNECT 400; v0.5.0.0 and later only affected by CVE-2021-25677." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-14" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Nucleus DNS (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27393" ;
    icsa:cweNumber "CWE-330" ;
    icsa:hasCVE cve-res:CVE-2021-27393 ;
    icsa:hasCWE cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nucleus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions prior to v2013.08 Nucleus Source Code; All versions that include the affected DNS modules.; All versions that include the affected DNS modules VSTAR; All versions Nucleus RTOS; The following Nucleus products and versions are affected: Nucleus NET; All versions Nucleus RTOS; All version which include affected DNS modules Nucleus ReadyStart; All versions prior to v2013.08 Nucleus Source Code; All versions which include the affected DNS modules VSTAR; All versions which include the affected DNS modules.; All versions that include affected DNS modules Nucleus ReadyStart; The following Nucleus products and versions are affected: Nucleus NET" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-103-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-103-15" ;
    dcterms:issued "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens and Milestone Siveillance Video Open Network Bridge" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2021-27392" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2021-27392 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens and Milestone Siveillance Video Open Network Bridge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Milestone XProtect Open Network Bridge and Siemens Siveillance Video Open Network Bridge are affected: 2020 R3 2020 R2 2020 R1 2019 R3 2019 R2 2019 R1 2018 R3 2018 R2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-103-15" ;
    icsa:vendor "Siemens and Milestone" ;
    icsa:year 2021 .

icsa-res:ICSA-21-105-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-105-01" ;
    dcterms:issued "2021-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric C-Bus Toolkit" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2021-22717; CVE-2021-22719; CVE-2021-22720; CVE-2021-22716; CVE-2021-22718" ;
    icsa:cweNumber "CWE-22; CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-22716,
        cve-res:CVE-2021-22717,
        cve-res:CVE-2021-22718,
        cve-res:CVE-2021-22719,
        cve-res:CVE-2021-22720 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric C-Bus Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of C-Bus Toolkit are affected: C-Bus Toolkit v1.15.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-105-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-105-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-105-02" ;
    dcterms:issued "2021-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "EIPStackGroup OpENer Ethernet/IP" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27500; CVE-2021-27478; CVE-2021-27482; CVE-2021-27498" ;
    icsa:cweNumber "CWE-617; CWE-681; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-27478,
        cve-res:CVE-2021-27482,
        cve-res:CVE-2021-27498,
        cve-res:CVE-2021-27500 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-617,
        cwe-res:CWE-681 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EIPStackGroup OpENer Ethernet/IP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OpENer EtherNet/IP are affected: https://github.com/EIPStackGroup/OpENer/ commits and versions prior to Feb 10 2021." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-105-02" ;
    icsa:vendor "EIPStackGroup" ;
    icsa:year 2021 .

icsa-res:ICSA-21-110-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-110-01" ;
    dcterms:issued "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids Ellipse APM" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-27887" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-27887 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi ABB Power Grids Ellipse APM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports the vulnerability affects the following Ellipse APM products: Ellipse APM Versions 5.3.0.1 and earlier Ellipse APM Versions 5.2.0.3 and earlier Ellipse APM Versions 5.1.0.6 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-110-01" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-110-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-110-02" ;
    dcterms:issued "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix Switches" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-1392; CVE-2021-1356; CVE-2021-1220; CVE-2021-1442; CVE-2021-1403; CVE-2021-1452; CVE-2021-1443; CVE-2021-1352" ;
    icsa:cweNumber "CWE-77; CWE-20; CWE-823; CWE-78; CWE-532; CWE-345; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2021-1220,
        cve-res:CVE-2021-1352,
        cve-res:CVE-2021-1356,
        cve-res:CVE-2021-1392,
        cve-res:CVE-2021-1403,
        cve-res:CVE-2021-1442,
        cve-res:CVE-2021-1443,
        cve-res:CVE-2021-1452 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-345,
        cwe-res:CWE-522,
        cwe-res:CWE-532,
        cwe-res:CWE-77,
        cwe-res:CWE-78,
        cwe-res:CWE-823 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Stratix Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the vulnerabilities affect the following Stratix switches: Stratix 5800: Versions 16.12.01 and earlier Stratix 8000: Versions 15.2(7)E3 and earlier Stratix 5700: Versions 15.2(7)E3 and earlier Stratix 5410: Versions 15.2(7)E3 and earlier Stratix 5400: Versions 15.2(7)E3 and earlier Please see the Rockwell Automation security advisory for more detailed information." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-110-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-110-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-110-03" ;
    dcterms:issued "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation COMMGR" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-27480" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-27480 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Industrial Automation COMMGR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of COMMGR - communication management software; and accompanying PLC simulators are affected: COMMGR: Version 1.12 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-110-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-110-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-110-04" ;
    dcterms:issued "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft ScreenEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22668" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-22668 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics CNCSoft ScreenEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CNCSoft ScreenEditor are affected: CNCSoft Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-110-04" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-110-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-110-05" ;
    dcterms:issued "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-B" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22660; CVE-2021-22664" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-22660,
        cve-res:CVE-2021-22664 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics CNCSoft-B" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CNCSoft-B - software management platform are affected: CNCSoft-B Versions 1.0.0.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-110-05" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-110-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-110-06" ;
    dcterms:issued "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton Intelligent Power Manager" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-23276; CVE-2021-23277; CVE-2021-23279; CVE-2021-23278; CVE-2021-23280; CVE-2021-23281" ;
    icsa:cweNumber "CWE-94; CWE-434; CWE-89; CWE-20; CWE-95" ;
    icsa:hasCVE cve-res:CVE-2021-23276,
        cve-res:CVE-2021-23277,
        cve-res:CVE-2021-23278,
        cve-res:CVE-2021-23279,
        cve-res:CVE-2021-23280,
        cve-res:CVE-2021-23281 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-434,
        cwe-res:CWE-89,
        cwe-res:CWE-94,
        cwe-res:CWE-95 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Eaton Intelligent Power Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Eaton reports these vulnerabilities affect the following Intelligent Power Manager products: Eaton Intelligent Power Manager (IPM) - All versions prior to 1.69 Eaton Intelligent Power Manager Virtual Appliance (IPM VA) - All versions prior to 1.69 Eaton Intelligent Power Protector (IPP) - All versions prior to 1.68." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-110-06" ;
    icsa:vendor "Eaton" ;
    icsa:year 2021 .

icsa-res:ICSA-21-110-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-110-07" ;
    dcterms:issued "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27394" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-27394 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Mendix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following Mendix products: Mendix Applications using Mendix 7: All versions prior to v7.23.19 Mendix Applications using Mendix 8: All versions prior to v8.17.0 Mendix Applications using Mendix 8 (v8.12): All versions prior to v8.12.5 Mendix Applications using Mendix 8 (v8.6): All versions prior to v8.6.9 Mendix Applications using Mendix 9: All versions prior to v9.0.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-110-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-112-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-112-01" ;
    dcterms:issued "2021-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22682; CVE-2021-22678" ;
    icsa:cweNumber "CWE-284; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-22678,
        cve-res:CVE-2021-22682 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Horner Automation Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Cscape - control system application programming software are affected: Cscape: All versions prior to 9.90 SP4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-112-01" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-112-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-112-02" ;
    dcterms:issued "2021-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT (Update A)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20590" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2021-20590 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric GOT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the vulnerability affects the VNC function of the following devices: GOT2000 series GT27 model: All versions GT25 model: All versions GT21 model: All versions GT2107-WTBD: All versions GT2107-WTSD: All versions GOT SIMPLE series GS21 model GS2110-WTBD-N: All versions GS2107-WTBD-N: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-112-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-119-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-119-01" ;
    dcterms:issued "2021-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Texas Instruments SimpleLink" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-22679; CVE-2021-22675; CVE-2021-22671; CVE-2021-22673; CVE-2021-22677" ;
    icsa:cweNumber "CWE-190; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-22671,
        cve-res:CVE-2021-22673,
        cve-res:CVE-2021-22675,
        cve-res:CVE-2021-22677,
        cve-res:CVE-2021-22679 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Texas Instruments SimpleLink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Texas Instruments products are affected: SimpleLink MSP432E4 SDK: v4.20.00.12 and prior SimpleLink CC32XX SDK: v4.30.00.06 and prior SimpleLink CC13X0 SDK: versions prior to v4.10.03 SimpleLink CC13X2 SDK: versions prior to v4.40.00 SimpleLink CC26XX SDK: versions prior to v4.40.00 CC3200 SDK: v1.5.0 and prior CC3100 SDK: v1.3.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-119-01" ;
    icsa:vendor "Texas Instruments" ;
    icsa:year 2021 .

icsa-res:ICSA-21-119-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-119-02" ;
    dcterms:issued "2021-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cassia Networks Access Controller" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22685" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2021-22685 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cassia Networks Access Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Access Contoller are affected: Access Controller: All versions prior to 2.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-119-02" ;
    icsa:vendor "Cassia Networks" ;
    icsa:year 2021 .

icsa-res:ICSA-21-119-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-119-03" ;
    dcterms:issued "2021-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Exacq Technologies exacqVision" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-3156" ;
    icsa:cweNumber "CWE-193" ;
    icsa:hasCVE cve-res:CVE-2021-3156 ;
    icsa:hasCWE cwe-res:CWE-193 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Exacq Technologies exacqVision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the vulnerability affects the following products running on unpatched versions of the Ubuntu operating system: Linux based Z-Series and A-Series Q-Series G-Series Legacy LC-Series Legacy ELP-Series exacqVision Network Video Recorders (NVR) Linux based C-Series Workstations S-Series Storage Servers." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-119-03" ;
    icsa:vendor "Exacq Technologies Inc (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-119-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-119-04" ;
    dcterms:issued "2021-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Multiple RTOS (Update E)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Multiple" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27429; CVE-2021-27502; CVE-2021-27439; CVE-2021-27433; CVE-2021-31571; CVE-2021-27504; CVE-2021-22636; CVE-2021-27421; CVE-2021-27431; CVE-2021-27427; CVE-2021-22684; CVE-2021-22680; CVE-2020-13603; CVE-2021-30636; CVE-2021-26706; CVE-2021-27411; CVE-2021-27419; CVE-2021-31572; CVE-2020-28895; CVE-2021-27425; CVE-2021-3420; CVE-2020-35198; CVE-2021-26461; CVE-2021-27435; CVE-2021-27417" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2020-13603,
        cve-res:CVE-2020-28895,
        cve-res:CVE-2020-35198,
        cve-res:CVE-2021-22636,
        cve-res:CVE-2021-22680,
        cve-res:CVE-2021-22684,
        cve-res:CVE-2021-26461,
        cve-res:CVE-2021-26706,
        cve-res:CVE-2021-27411,
        cve-res:CVE-2021-27417,
        cve-res:CVE-2021-27419,
        cve-res:CVE-2021-27421,
        cve-res:CVE-2021-27425,
        cve-res:CVE-2021-27427,
        cve-res:CVE-2021-27429,
        cve-res:CVE-2021-27431,
        cve-res:CVE-2021-27433,
        cve-res:CVE-2021-27435,
        cve-res:CVE-2021-27439,
        cve-res:CVE-2021-27502,
        cve-res:CVE-2021-27504,
        cve-res:CVE-2021-30636,
        cve-res:CVE-2021-31571,
        cve-res:CVE-2021-31572,
        cve-res:CVE-2021-3420 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple RTOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Amazon FreeRTOS; Version 10.4.1 Apache Nuttx OS; Version 9.1.0 ARM CMSIS-RTOS2; versions prior to 2.1.3 ARM Mbed OS; Version 6.3.0 ARM mbed-ualloc; Version 1.3.0 Cesanta Software Mongoose OS; v2.17.0 eCosCentric eCosPro RTOS; Versions 2.0.1 through 4.5.3 Google Cloud IoT Device SDK; Version 1.0.2 Linux Zephyr RTOS; versions prior to 2.4.0 Media Tek LinkIt SDK; versions prior to 4.6.1 Micrium OS; Versions 5.10.1 and prior; Micrium uCOS II/uCOS III Versions 1.39.0 and prior Micrium uC/OS: uC/LIB Versions 1.38.xx; Version 1.39.00; NXP MCUXpresso SDK; versions prior to 2.8.2 NXP MQX; Versions 5.1 and prior Redhat newlib; versions prior to 4.0.0 RIOT OS; Version 2020.01.1 Samsung Tizen RT RTOS; versions prior 3.0.GBB TencentOS-tiny; Version 3.1.0 Texas Instruments CC32XX; versions prior to 4.40.00.07 Texas Instruments SimpleLink MSP432E4XX Texas Instruments SimpleLink-CC13XX; versions prior to 4.40.00 Texas Instruments SimpleLink-CC26XX; versions prior to 4.40.00 Texas Instruments SimpleLink-CC32XX; versions prior to 4.10.03 Uclibc-NG; versions prior to 1.0.36 Windriver VxWorks; prior to 7.0 Micrium uC/LIB Version 1.38.xx; Version 1.39.00 Zephyr Project RTOS; versions prior to 2.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-119-04" ;
    icsa:vendor "Multiple Vendors" ;
    icsa:year 2021 .

icsa-res:ICSA-21-124-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-124-01" ;
    dcterms:issued "2021-05-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WISE-PaaS RMM" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-27437" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2021-27437 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Advantech WISE-PaaS RMM" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following Advantech products are affected: WISE-PaaS/RMM versions prior to 3.3.29." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-124-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-124-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-124-02" ;
    dcterms:issued "2021-05-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft ScreenEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22672" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-22672 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics CNCSoft ScreenEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CNCSoft ScreenEditor - software management platform are affected: CNCSoft ScreenEditor versions prior to v1.01.30." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-124-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-01" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-One" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27413" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-27413 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-One" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an automation software suite; The following versions of CX-One; are affected: CX-One Versions 4.60 and prior; including the following applications: CX-Server Versions 5.0.29.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-02" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT and Tension Controller (Update A)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20589" ;
    icsa:cweNumber "CWE-805" ;
    icsa:hasCVE cve-res:CVE-2021-20589 ;
    icsa:hasCWE cwe-res:CWE-805 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT and Tension Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the vulnerability affects the MODBUS/TCP slave communication function of the following devices: GOT2000 series GT27 model: Versions 01.19.000 - 01.38.000 GT25 model: Versions 01.19.000 - 01.38.000 GT23 model: Versions 01.19.000 - 01.38.000 GT21 model: Versions 01.21.000 - 01.39.000 GOT SIMPLE series GS21 model: Versions 01.21.000 - 01.39.000 GT SoftGOT2000: Versions 1.170C - 1.250L LE7-40GU-L Screen package data for MODBUS/TCP: v1.00 Please see Mitsubishi Electric report number 2021-002 to learn how to check which version is in use..; Mitsubishi Electric reports the vulnerability affects the MODBUS/TCP slave communication function of the following devices: GOT2000 series GT27 model: Versions 01.19.000 - 01.38.000 GT25 model: Versions 01.19.000 - 01.38.000 GT23 model: Versions 01.19.000 - 01.38.000 GT21 model: Versions 01.21.000 - 01.39.000 GOT SIMPLE series GS21 model: Versions 01.21.000 - 01.39.000 GT SoftGOT2000: Versions 1.170C - 1.250L LE7-40GU-L: Screen package data for MODBUS/TCP v1.00 Please see Mitsubishi Electric's report number 2021-002 to learn how to check which version is in use." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-03" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Linux-based Products (Update J)" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-25705" ;
    icsa:cweNumber "CWE-330" ;
    icsa:hasCVE cve-res:CVE-2020-25705 ;
    icsa:hasCWE cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Linux based products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens Linux-based products are affected: RUGGEDCOM RM1224: All versions between v5.0 and v6.4 SCALANCE M-800: All versions between v5.0 and v6.4 SCALANCE S615: All versions between v5.0 and v6.4 SCALANCE SC-600: All versions prior to v2.1.3 SCALANCE W1750D: v8.3.0.1; and prior to Version 3.3 SIMATIC CP 1242-7 GPRS V2: Versions 3.1.39 and prior to Version 3.3 SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants): Versions 2.0 and later SIMATIC CP 1542SP-1: Versions 2.0 and later SIMATIC CP 1543-1 (incl. SIPLUS variants): Versions prior to 3.0 SIMATIC CP 1543SP-1 (incl SIPLUS variants): Versions 2.0 and later SIMATIC CP 1545-1: All versions prior to v1.1 --------- Begin Update J Part 1 of 2 --------- SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0): Versions between and including v3.1.39 and v3.3 SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0): Versions between and including v3.1.39 and v3.3.46 SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0): Versions between and including v3.1.39 and v3.3.46 -------- End Update J Part 1 of 2 ---------- SIMATIC CP 1243-1 (incl. SIPLUS variants): All versions 3.1.39 and newer to those prior to v3.3.3 SIMATIC CP 1243-8 IRC: All versions 3.1.39 and newer to those prior to v3.3.46 SIMATIC MV540 H (6GF3540-0GE10): All versions prior to 3.1 SIMATIC MV540 S (6GF3540-0CD10): All versions prior to 3.1 SIMATIC MV550 H (6GF3550-0GE10): All versions prior to 3.1 SIMATIC MV550 S (6GF3550-0CD10): All versions prior to 3.1 SIMATIC MV560 U (6GF3560-0LE10): All versions prior to 3.1 SIMATIC MV560 X (6GF3560-0HE10): All versions prior to 3.1 SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00): All versions from 1.0 to those prior to v1.6 SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00): All versions from 1.0 to those prior to v1.6 TIM 1531 IRC (6GK7543-1MX00-0XE0): All versions prior to 2.2 Update 1 SIPLUS TIM 1532 (6AG1543-1MX00-7XE0): All versions prior to 2.2 Update 1 SINEMA Remote Connect Server: All versions prior to v3.0 SP1.; v8.6.0; and v8.7.0 SIMATIC MV500 Family: All versions SIMATIC CP 1243-7 LTE EU: Versions 3.1.39 and later; and prior to Version 3.3 SIMATIC CP 1243-7 LTE US: Versions 3.1.39 and later" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-04" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS Medium Voltage Products Remote Access (Update B)" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2021-31337" ;
    icsa:cweNumber "CWE-788; CWE-122; CWE-665; CWE-170; CWE-121; CWE-119; CWE-125; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-31337 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-170,
        cwe-res:CWE-400,
        cwe-res:CWE-665,
        cwe-res:CWE-788 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS Medium Voltage Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following SINAMICS products with Telnet enabled on SIMATIC HMI Comfort Panels: SINAMICS SL150: All versions SINAMICS SM150: All versions SINAMICS SM150i: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-05" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Database Replication Module" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-31341" ;
    icsa:cweNumber "CWE-209" ;
    icsa:hasCVE cve-res:CVE-2021-31341 ;
    icsa:hasCWE cwe-res:CWE-209 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Database Replication Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Mendix Database Replication: All versions prior to v7.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-06" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SNMP Implementation of WinCC Runtime" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-19276" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2019-19276 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SNMP Implementation of WinCC Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected due to the SNMP implementation of WinCC Runtime: SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants): All versions prior to v16 update 4 SIMATIC HMI KTP Mobile Panels: All versions prior to v16 update 4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-07" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC NET CP343-1" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-25242" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-25242 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC NET CP343-1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC are affected: SIMATIC NET CP 343-1 Advanced (including SIPLUS variants): All versions SIMATIC NET CP 343-1 Lean (including SIPLUS variants): All versions SIMATIC NET CP 343-1 Standard (including SIPLUS variants): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-08" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Tecnomatix Plant Simulation" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27397; CVE-2021-27396; CVE-2021-27398" ;
    icsa:cweNumber "CWE-119; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-27396,
        cve-res:CVE-2021-27397,
        cve-res:CVE-2021-27398 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tecnomatix Plant Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Tecnomatix Plant Simulation are affected: Tecnomatix Plant Simulation: All Versions prior to 16.0.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-09" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Excel Importer Module" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-31339" ;
    icsa:cweNumber "CWE-209" ;
    icsa:hasCVE cve-res:CVE-2021-31339 ;
    icsa:hasCWE cwe-res:CWE-209 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Excel Importer Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Mendix Excel Importer Module: All versions prior to v9.0.3.; a module that imports Excel data sheets into Mendix applications; The following versions of Mendix Excel Importer" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-09" ;
    icsa:vendor "Mendix (Subsidiary of Siemens)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-10" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE XM-400 and XR-500 Devices" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-28393" ;
    icsa:cweNumber "CWE-682" ;
    icsa:hasCVE cve-res:CVE-2020-28393 ;
    icsa:hasCWE cwe-res:CWE-682 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE XM-400 and XR-500 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SCALANCE XM-400 Family: All versions prior to v6.4 SCALANCE XR-500 Family: All versions prior to v6.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-11" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC UltraVNC HMI WinCC Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-8262; CVE-2019-8263; CVE-2019-8277; CVE-2019-8275; CVE-2019-8260; CVE-2019-8265; CVE-2019-8280; CVE-2019-8259; CVE-2019-8264; CVE-2019-8261" ;
    icsa:cweNumber "CWE-788; CWE-122; CWE-665; CWE-170; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-8259,
        cve-res:CVE-2019-8260,
        cve-res:CVE-2019-8261,
        cve-res:CVE-2019-8262,
        cve-res:CVE-2019-8263,
        cve-res:CVE-2019-8264,
        cve-res:CVE-2019-8265,
        cve-res:CVE-2019-8275,
        cve-res:CVE-2019-8277,
        cve-res:CVE-2019-8280 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-170,
        cwe-res:CWE-665,
        cwe-res:CWE-788 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC UltraVNC HMI WinCC Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KTP900; KTP700F; and KTP900F: All versions prior to v16 Update 4 SIMATIC WinCC Runtime Advanced: All versions prior to v16 Update 4.; KTP700; The following Siemens SIMATIC HMIs/WinCC products are affected: SIMATIC HMI Comfort Outdoor Panels 7' and 15' (incl. SIPLUS variants): All versions prior to v16 Update 4 SIMATIC HMI Comfort Panels 4'to 22' (incl. SIPLUS variants): All versions prior to v16 Update 4 SIMATIC HMI KTP Mobile Panels KTP400F" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-12" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27385; CVE-2021-27383; CVE-2021-25661; CVE-2021-25662; CVE-2021-27386; CVE-2021-25660; CVE-2021-27384" ;
    icsa:cweNumber "CWE-755; CWE-788; CWE-119; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-25660,
        cve-res:CVE-2021-25661,
        cve-res:CVE-2021-25662,
        cve-res:CVE-2021-27383,
        cve-res:CVE-2021-27384,
        cve-res:CVE-2021-27385,
        cve-res:CVE-2021-27386 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-400,
        cwe-res:CWE-755,
        cwe-res:CWE-788 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC SmartVNC HMI WinCC Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KTP900; KTP700F; KTP900F: All versions prior to v16 Update 4 SIMATIC WinCC Runtime Advanced: All versions prior to v16 Update 4.; KTP700; The following Siemens SIMATIC HMIs/WinCC products are affected: SIMATIC HMI Comfort Outdoor Panels 7' and 15' (incl. SIPLUS variants): All versions prior to v16 Update 4 SIMATIC HMI Comfort Panels 4'-22' (incl. SIPLUS variants): All versions prior to v16 Update 4 SIMATIC HMI KTP Mobile Panels KTP400F" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-13" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS Medium Voltage Products Telnet (Update A)" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-15798" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2020-15798 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS Medium Voltage Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following SINAMICS products with telnet enabled on SIMATIC comfort HMI Panels: SINAMICS GH150: All versions SINAMICS GL150 (with option X30): All versions SINAMICS GM150 (with option X30): All versions SINAMICS SH150: All versions SINAMICS SL150: All versions SINAMICS SM120: All versions SINAMICS SM150: All versions SINAMICS SM150i: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-14" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-5317; CVE-2021-25162; CVE-2021-25145; CVE-2020-24635; CVE-2019-5319; CVE-2021-25146; CVE-2021-25156; CVE-2021-25150; CVE-2021-25159; CVE-2021-25158; CVE-2021-25143; CVE-2021-25160; CVE-2021-25149; CVE-2021-25157; CVE-2021-25148; CVE-2021-25144; CVE-2020-24636; CVE-2021-25155; CVE-2021-25161" ;
    icsa:cweNumber "CWE-120; CWE-287; CWE-79; CWE-77; CWE-20; CWE-362" ;
    icsa:hasCVE cve-res:CVE-2019-5317,
        cve-res:CVE-2019-5319,
        cve-res:CVE-2020-24635,
        cve-res:CVE-2020-24636,
        cve-res:CVE-2021-25143,
        cve-res:CVE-2021-25144,
        cve-res:CVE-2021-25145,
        cve-res:CVE-2021-25146,
        cve-res:CVE-2021-25148,
        cve-res:CVE-2021-25149,
        cve-res:CVE-2021-25150,
        cve-res:CVE-2021-25155,
        cve-res:CVE-2021-25156,
        cve-res:CVE-2021-25157,
        cve-res:CVE-2021-25158,
        cve-res:CVE-2021-25159,
        cve-res:CVE-2021-25160,
        cve-res:CVE-2021-25161,
        cve-res:CVE-2021-25162 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-362,
        cwe-res:CWE-77,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2021-25159; CVE-2021-25145; CVE-2021-25158; CVE-2020-24636; CVE-2021-25146; The following versions of SCALANCE W1750D; are affected: SCALANCE W1750D: All versions prior to 8.7.0 SCALANCE W1750D: Version 8.7.0 (Only affected by CVE-2020-24635; CVE-2021-25156; CVE-2021-25155; CVE-2021-25160; CVE-2021-25161; and CVE-2021-25162).; a software management platform; CVE-2021-25157" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-131-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-131-15" ;
    dcterms:issued "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-0591; CVE-2020-8744" ;
    icsa:cweNumber "CWE-119; CWE-665" ;
    icsa:hasCVE cve-res:CVE-2020-0591,
        cve-res:CVE-2020-8744 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-665 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "incl. SIPLUS variant): All versions SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (MLFB: 6ES7518-4FX00-1AC0): All versions.; 6AG1518-4AX00-4AC0; are affected by vulnerabilities in Intel products: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0; The following versions of SIMATIC S7-1500 CPU 1518-4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-131-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-133-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-133-01" ;
    dcterms:issued "2021-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Connected Components Workbench" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Defense Industrial Base; Energy; Government Facilities" ;
    icsa:cveNumber "CVE-2021-27475; CVE-2021-27473; CVE-2021-27471" ;
    icsa:cweNumber "CWE-502; CWE-22; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-27471,
        cve-res:CVE-2021-27473,
        cve-res:CVE-2021-27475 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Connected Components Workbench" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports these vulnerabilities affect the following Connected Components Workbench versions: Connected Components Workbench v12.00.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-133-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-133-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-133-02" ;
    dcterms:issued "2021-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Sensormatic Tyco AI" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-3156" ;
    icsa:cweNumber "CWE-193" ;
    icsa:hasCVE cve-res:CVE-2021-3156 ;
    icsa:hasCWE cwe-res:CWE-193 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tyco AI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following Sensormatic Electronics products: Tyco AI: All versions up to and including v1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-133-02" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-133-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-133-03" ;
    dcterms:issued "2021-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OPC Foundation UA Products Built with .NET Framework" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27432" ;
    icsa:cweNumber "CWE-674" ;
    icsa:hasCVE cve-res:CVE-2021-27432 ;
    icsa:hasCWE cwe-res:CWE-674 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC UA Products Built with .NET Framework" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following OPC UA products are affected: OPC UA .NET Standard: versions prior to 1.4.365.48 OPC UA .NET Legacy." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-133-03" ;
    icsa:vendor "OPC Foundation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-133-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-133-04" ;
    dcterms:issued "2021-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27434; CVE-2015-6096" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2015-6096,
        cve-res:CVE-2021-27434 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "4.0; and 3.5 Framework versions only).; The following OPC UA products are affected: Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-133-04" ;
    icsa:vendor "Unified Automation GmbH" ;
    icsa:year 2021 .

icsa-res:ICSA-21-138-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-138-01" ;
    dcterms:issued "2021-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson Rosemount X-STREAM" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Chemical" ;
    icsa:cveNumber "CVE-2021-27465; CVE-2021-27459; CVE-2021-27461; CVE-2021-27467; CVE-2021-27463; CVE-2021-27457" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-79; CWE-326; CWE-539; CWE-1021" ;
    icsa:hasCVE cve-res:CVE-2021-27457,
        cve-res:CVE-2021-27459,
        cve-res:CVE-2021-27461,
        cve-res:CVE-2021-27463,
        cve-res:CVE-2021-27465,
        cve-res:CVE-2021-27467 ;
    icsa:hasCWE cwe-res:CWE-1021,
        cwe-res:CWE-22,
        cwe-res:CWE-326,
        cwe-res:CWE-434,
        cwe-res:CWE-539,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rosemount X-STREAM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Emerson's Rosemount X-STREAM gas analysis software; are affected: X-STREAM enhanced XEGP - all revisions X-STREAM enhanced XEGK - all revisions X-STREAM enhanced XEFD - all revisions X-STREAM enhanced XEXF - all revisions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-138-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2021 .

icsa-res:ICSA-21-145-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-145-01" ;
    dcterms:issued "2021-05-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Datakit Libraries bundled in Luxion KeyShot" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27490; CVE-2021-27496; CVE-2021-27492; CVE-2021-27494; CVE-2021-27488" ;
    icsa:cweNumber "CWE-611; CWE-822; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-27488,
        cve-res:CVE-2021-27490,
        cve-res:CVE-2021-27492,
        cve-res:CVE-2021-27494,
        cve-res:CVE-2021-27496 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-611,
        cwe-res:CWE-787,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Libraries bundled in Luxion KeyShot" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "3D rendering and animation software; are bundled with the affected Datakit libraries: KeyShot: Versions v10.1 and prior.; a library embedded in end-user applications; are affected: CatiaV5_3dRead CatiaV6_3dRead Step3dRead Ug3dReadPsr Jt3dReadPsr The following versions of Luxion software; The following modules of Datakit CrossCADWare; Versions 2021.1 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-145-01" ;
    icsa:vendor "Datakit" ;
    icsa:year 2021 .

icsa-res:ICSA-21-145-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-145-02" ;
    dcterms:issued "2021-05-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Micro800 and MicroLogix 1400" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-32926" ;
    icsa:cweNumber "CWE-300" ;
    icsa:hasCVE cve-res:CVE-2021-32926 ;
    icsa:hasCWE cwe-res:CWE-300 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Micro800 and MicroLogix 1400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following controllers are affected: Micro800: All versions MicroLogix 1400: Version 21 and later when Enhanced Password Security enabled." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-145-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-147-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-147-01" ;
    dcterms:issued "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "GENIVI Alliance DLT" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-36244" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2020-36244 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DLT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is affected: dlt-daemon (diagnostic log and trace) versions prior to 2.18.6.; which is open-source and maintained by GENIVI Alliance; The following software component" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-147-01" ;
    icsa:vendor "GENIVI Alliance" ;
    icsa:year 2021 .

icsa-res:ICSA-21-147-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-147-02" ;
    dcterms:issued "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Sensormatic Electronics VideoEdge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-3156" ;
    icsa:cweNumber "CWE-193" ;
    icsa:hasCVE cve-res:CVE-2021-3156 ;
    icsa:hasCWE cwe-res:CWE-193 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Electronics VideoEdge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the vulnerability affects the following Sensormatic Electronics products: VideoEdge versions prior to 5.7.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-147-02" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-147-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-147-03" ;
    dcterms:issued "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "MesaLabs AmegaView" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health; Food and Agriculture" ;
    icsa:cveNumber "CVE-2021-27445; CVE-2021-27453; CVE-2021-27449; CVE-2021-27451; CVE-2021-27447" ;
    icsa:cweNumber "CWE-269; CWE-77; CWE-288; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2021-27445,
        cve-res:CVE-2021-27447,
        cve-res:CVE-2021-27449,
        cve-res:CVE-2021-27451,
        cve-res:CVE-2021-27453 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-287,
        cwe-res:CWE-288,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AmegaView" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "are affected: AmegaView Versions 3.0 and prior.; The following versions of AmegaView; a continuous monitoring hardware and software platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-147-03" ;
    icsa:vendor "Mesa Labs" ;
    icsa:year 2021 .

icsa-res:ICSA-21-147-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-147-04" ;
    dcterms:issued "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2Go and Teamcenter Visualization" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-26998; CVE-2020-26991; CVE-2020-27002; CVE-2020-27001; CVE-2020-26999" ;
    icsa:cweNumber "CWE-125; CWE-121; CWE-822" ;
    icsa:hasCVE cve-res:CVE-2020-26991,
        cve-res:CVE-2020-26998,
        cve-res:CVE-2020-26999,
        cve-res:CVE-2020-27001,
        cve-res:CVE-2020-27002 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: JT2Go: All versions prior to v13.1.0.2 Teamcenter Visualization: All versions prior to v13.1.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-147-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-147-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-147-05" ;
    dcterms:issued "2021-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20591" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-20591 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following MELSEC iQ-R series CPU modules are affected: R00/01/02CPU: All versions R04/08/16/32/120(EN)CPU: All versions R08/16/32/120SFCPU: All versions R08/16/32/120PCPU: All versions R08/16/32/120PSFCPU: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-147-05" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-152-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-152-01" ;
    dcterms:issued "2021-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2020-15782" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2020-15782 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 and S7-1500 CPU Families" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following SIMATIC S7-1200 and S7-1500 CPU products: SIMATIC Drive Controller family: All versions prior to v2.9.2 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): All versions SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to v4.5.0 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v2.9.2 SIMATIC S7-1500 Software Controller: All versions SIMATIC S7-PLCSIM Advanced: All versions prior to v4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-152-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-154-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-154-01" ;
    dcterms:issued "2021-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech iView" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-32932; CVE-2021-32930" ;
    icsa:cweNumber "CWE-306; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2021-32930,
        cve-res:CVE-2021-32932 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iView" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of Advantech's iView product are affected: iView versions prior to v5.7.03.6182." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-154-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-01" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27657" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-27657 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the vulnerability affects the following Metasys building automation products: Metasys: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-02" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Open Design Alliance Drawings SDK" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-32940; CVE-2021-32950; CVE-2021-32946; CVE-2021-32944; CVE-2021-32948; CVE-2021-32938; CVE-2021-32952; CVE-2021-32936" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-787; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2021-32936,
        cve-res:CVE-2021-32938,
        cve-res:CVE-2021-32940,
        cve-res:CVE-2021-32944,
        cve-res:CVE-2021-32946,
        cve-res:CVE-2021-32948,
        cve-res:CVE-2021-32950,
        cve-res:CVE-2021-32952 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-754,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Drawings SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Drawings SDK: All versions prior to 2022.4 Drawing SDK: Version 2022.4 is affected by CVE-2021-32946 and CVE-2021-32952.; a software development kit for DWG and DGN; The following versions of Drawings SDK" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-02" ;
    icsa:vendor "Open Design Alliance" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-03" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA InTouch" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2021-32942" ;
    icsa:cweNumber "CWE-316" ;
    icsa:hasCVE cve-res:CVE-2021-32942 ;
    icsa:hasCWE cwe-res:CWE-316 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InTouch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA reports the vulnerability affects the following InTouch products: InTouch 2020 R2 and all prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-03" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-04" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-22759; CVE-2021-22761; CVE-2021-22760; CVE-2021-22758; CVE-2021-22753; CVE-2021-22755; CVE-2021-22752; CVE-2021-22756; CVE-2021-22762; CVE-2021-22750; CVE-2021-22754; CVE-2021-22751; CVE-2021-22757" ;
    icsa:cweNumber "CWE-22; CWE-824; CWE-763; CWE-416; CWE-787; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-22750,
        cve-res:CVE-2021-22751,
        cve-res:CVE-2021-22752,
        cve-res:CVE-2021-22753,
        cve-res:CVE-2021-22754,
        cve-res:CVE-2021-22755,
        cve-res:CVE-2021-22756,
        cve-res:CVE-2021-22757,
        cve-res:CVE-2021-22758,
        cve-res:CVE-2021-22759,
        cve-res:CVE-2021-22760,
        cve-res:CVE-2021-22761,
        cve-res:CVE-2021-22762 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-22,
        cwe-res:CWE-416,
        cwe-res:CWE-763,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Interactive Graphical SCADA System (IGSS) are affected: IGSS Definition (Def.exe) v15.0.0.21140 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-05" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon X80" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-22749" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2021-22749 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon X80" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Modicon X80 are affected: Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-05" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-06" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Thales Sentinel LDK Run-Time Environment" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-32928" ;
    icsa:cweNumber "CWE-459" ;
    icsa:hasCVE cve-res:CVE-2021-32928 ;
    icsa:hasCWE cwe-res:CWE-459 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sentinel LDK Run-Time Environment" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Machines that previously ran and then uninstalled the following versions of Sentinel LDK Run Time Environment are affected: Sentinel LDK Run-Time Environment: Versions 7.6 and prior This RTE is used in products by many different vendors. As new instances are discovered/reported; they will be added to this list of affected products." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-06" ;
    icsa:vendor "Thales" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-07" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix SAML Module" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-33712" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2021-33712 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix SAML Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following products: Mendix SAML Module: All versions prior to 2.1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-08" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIM 1531 IRC" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2018-0732" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-0732 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIM 1531 IRC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: TIM 1531 IRC (incl. SIPLUS NET variants): All versions prior to v2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-09" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-31342; CVE-2021-31343" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-31342,
        cve-res:CVE-2021-31343 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Solid Edge SE2020 - All versions before 2020MP14 Solid Edge SE2021 - All versions before SE2021MP5.; a portfolio of software tools; The following versions of Siemens Solid Edge" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-10" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC TIM libcurl" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-8169; CVE-2020-8286" ;
    icsa:cweNumber "CWE-295; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2020-8169,
        cve-res:CVE-2020-8286 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC TIM libcurl" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following devices are affected by the third-party component libcurl: SIMATIC TIM 1531 IRC (incl. SIPLUS NET variants); All versions prior to v2.2. The libcurl library Versions 7.62.0 to and including 7.70.0 are vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to DNS servers. The libcurl library Versions 7.41.0 to 7.73.0 are vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. This vulnerability could allow an attacker to pass a revoked certificate as valid." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-11" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC NET CP 443-1 OPC UA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-2518; CVE-2016-4954; CVE-2016-4956; CVE-2016-1547; CVE-2015-7705; CVE-2016-4953; CVE-2017-6458; CVE-2016-7431; CVE-2016-1548; CVE-2016-1550; CVE-2016-4955; CVE-2016-9042; CVE-2015-8138; CVE-2015-7853; CVE-2016-7433" ;
    icsa:cweNumber "CWE-200; CWE-120; CWE-287; CWE-682; CWE-20; CWE-19; CWE-362; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2015-7705,
        cve-res:CVE-2015-7853,
        cve-res:CVE-2015-8138,
        cve-res:CVE-2016-1547,
        cve-res:CVE-2016-1548,
        cve-res:CVE-2016-1550,
        cve-res:CVE-2016-2518,
        cve-res:CVE-2016-4953,
        cve-res:CVE-2016-4954,
        cve-res:CVE-2016-4955,
        cve-res:CVE-2016-4956,
        cve-res:CVE-2016-7431,
        cve-res:CVE-2016-7433,
        cve-res:CVE-2016-9042,
        cve-res:CVE-2017-6458 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-19,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-287,
        cwe-res:CWE-362,
        cwe-res:CWE-682 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC NET CP 443-1 OPC UA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC NET CP 443-1 OPC UA are affected: SIMATIC NET CP 443-1 OPC UA: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-12" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27399; CVE-2021-27387" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-27387,
        cve-res:CVE-2021-27399 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "all versions prior to v2021.1.MP3.; The following versions of Simcenter Femap are affected: Simcenter Femap 2020.2; all versions prior to v2020.2.MP3 Simcenter Femap 2021.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-13" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RFID (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-31340" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-31340 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RF Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "all versions between v1.1 and v1.3.2 SIMATIC RF186C; all versions between v1.1 and v1.3.2 SIMATIC RF188CI; all versions between v1.1 and v1.3.2 SIMATIC RF185C; all versions between v1.1 and v1.3.2 Begin Update B: SIMATIC RF360R; all versions prior to v2.0 End Update B.; all versions between v1.1 and v1.3.2 SIMATIC RF186CI; all versions between v1.1 and v1.3.2 SIMATIC RF188C; The following versions of SIMATIC RF and SIMATIC Reader RF are affected: SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0): All versions between V3.0 and V4.0 SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0): All versions between v3.0 and v4.0 SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0): All versions between v3.0 and v4.0 SIMATIC RF166C" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-159-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-159-14" ;
    dcterms:issued "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2Go and Teamcenter Visualization" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27390" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-27390 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following products: JT2Go: All versions prior to 13.1.0.3 Teamcenter Visualization: All versions prior to 13.1.0.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-159-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-161-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-161-01" ;
    dcterms:issued "2021-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Services Platform" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater" ;
    icsa:cveNumber "CVE-2021-32960" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2021-32960 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Services Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "if FactoryTalk Security is enabled and deployed.; Rockwell Automation reports this vulnerability affects the following versions of FactoryTalk Security; part of FactoryTalk Service Platform: FactoryTalk Services Platform v6.11 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-161-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-161-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-161-02" ;
    dcterms:issued "2021-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "AGG Software Web Server Plugin" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-32962; CVE-2021-32964" ;
    icsa:cweNumber "CWE-23; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-32962,
        cve-res:CVE-2021-32964 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Web Server Plugin" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Web Server may be bundled with any Data Logger: v4.0.40.1014 and prior (webserver.dll)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-161-02" ;
    icsa:vendor "AGG Software" ;
    icsa:year 2021 .

icsa-res:ICSA-21-166-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-166-01" ;
    dcterms:issued "2021-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "ThroughTek P2P SDK" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2021-32934" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2021-32934 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "P2P SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of P2P Software Development Kit (SDK) are affected: Versions 3.1.5 and prior SDK versions with nossl tag Device firmware that does not use AuthKey for IOTC connection Device firmware using the AVAPI module without enabling DTLS mechanism Device firmware using P2PTunnel or RDT module." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-166-01" ;
    icsa:vendor "ThroughTek" ;
    icsa:year 2021 .

icsa-res:ICSA-21-166-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-166-02" ;
    dcterms:issued "2021-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Automation Direct CLICK PLC CPU Modules" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2021-32982; CVE-2021-32984; CVE-2021-32978; CVE-2021-32980; CVE-2021-32986" ;
    icsa:cweNumber "CWE-256; CWE-319; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2021-32978,
        cve-res:CVE-2021-32980,
        cve-res:CVE-2021-32982,
        cve-res:CVE-2021-32984,
        cve-res:CVE-2021-32986 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-288,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CLICK PLC CPU Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Automation Direct reports these vulnerabilities affect the following CLICK PLC CPU modules: CLICK PLC CPU Modules: C0-1x CPUs with All firmware prior to v3.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-166-02" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2021 .

icsa-res:ICSA-21-168-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-168-01" ;
    dcterms:issued "2021-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Enerlin'X Com'X 510" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-22769" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-22769 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Enerlin'X Com'X 510" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Enerlin'X Com'X 510 energy servers are affected: Enerlin'X Com'X 510: All versions prior to v6.8.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-168-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-168-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-168-02" ;
    dcterms:issued "2021-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Softing OPC-UA C++ SDK" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-32994" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2021-32994 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC-UA C++ SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Softing reports the vulnerability affects functions in the following software library; which may be used in other products: OPC UA C++ SDK (Software Development Kit) Versions from 5.59 to 5.64." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-168-02" ;
    icsa:vendor "Softing Industrial Automation GmbH" ;
    icsa:year 2021 .

icsa-res:ICSA-21-168-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-168-03" ;
    dcterms:issued "2021-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2021-32954; CVE-2021-32956" ;
    icsa:cweNumber "CWE-23; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2021-32954,
        cve-res:CVE-2021-32956 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of Advantech WebAccess/SCADA; are affected: WebAccess/SCADA Versions 9.0.1 and prior.; a browser-based SCADA software package" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-168-03" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-173-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-173-01" ;
    dcterms:issued "2021-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess HMI Designer (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2021-33000; CVE-2021-33004; CVE-2021-33002" ;
    icsa:cweNumber "CWE-119; CWE-122; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-33000,
        cve-res:CVE-2021-33002,
        cve-res:CVE-2021-33004 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-122,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess HMI Designer" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of Advantech WebAccess HMI Designer are affected: WebAccess HMI Designer Versions 2.1.9.95 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-173-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-173-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-173-02" ;
    dcterms:issued "2021-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "CODESYS V2 web server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-30194; CVE-2021-30192; CVE-2021-30191; CVE-2021-30189; CVE-2021-30193; CVE-2021-30190" ;
    icsa:cweNumber "CWE-120; CWE-787; CWE-284; CWE-358; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-30189,
        cve-res:CVE-2021-30190,
        cve-res:CVE-2021-30191,
        cve-res:CVE-2021-30192,
        cve-res:CVE-2021-30193,
        cve-res:CVE-2021-30194 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-284,
        cwe-res:CWE-358,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS V2 web server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS reports all CODESYS V2 web servers running stand-alone or as part of the CODESYS runtime system prior to Version 1.1.9.20 are affected.." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-173-02" ;
    icsa:vendor "CODESYS GmbH" ;
    icsa:year 2021 .

icsa-res:ICSA-21-173-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-173-03" ;
    dcterms:issued "2021-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "CODESYS Control V2 communication" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-30188; CVE-2021-30186; CVE-2021-30195" ;
    icsa:cweNumber "CWE-122; CWE-20; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-30186,
        cve-res:CVE-2021-30188,
        cve-res:CVE-2021-30195 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Control V2 communication" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS reports the following CODESYS V2 runtime systems are affected; regardless of the CPU type or operating system: CODESYS Runtime Toolkit 32-bit full prior to v2.4.7.55 CODESYS PLCWinNT prior to v2.4.7.55." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-173-03" ;
    icsa:vendor "CODESYS GmbH" ;
    icsa:year 2021 .

icsa-res:ICSA-21-173-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-173-04" ;
    dcterms:issued "2021-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "CODESYS Control V2 Linux SysFile library" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-30187" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2021-30187 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Control V2 Linux SysFile library" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS reports all runtime systems for Linux based on a CODESYS V2 Runtime Toolkit 32-bit full prior Version 2.4.7.55 are affected.." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-173-04" ;
    icsa:vendor "CODESYS GmbH" ;
    icsa:year 2021 .

icsa-res:ICSA-21-175-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-175-01" ;
    dcterms:issued "2021-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation WinProladder" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-32988; CVE-2021-32992; CVE-2021-32990" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-32988,
        cve-res:CVE-2021-32990,
        cve-res:CVE-2021-32992 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinProladder" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a PLC; The following versions of FATEK Automation WinProladder; are affected: WinProladder: Versions 3.30 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-175-01" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-180-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-180-01" ;
    dcterms:issued "2021-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Exacq Technologies exacqVision Web Service" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27659" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-27659 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision Web Service" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Exacq Technologies exacqVision Web Service software are affected: exacqVision Web Service: Version 21.03 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-180-01" ;
    icsa:vendor "Exacq Technologies Inc (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-180-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-180-02" ;
    dcterms:issued "2021-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Exacq Technologies exacqVision Enterprise Manager" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27658" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-27658 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision Enterprise Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Exacq Technologies exacqVision Enterprise Manager software are affected: exacqVision Enterprise Manager: Version 20.12 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-180-02" ;
    icsa:vendor "Exacq Technologies Inc (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-180-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-180-03" ;
    dcterms:issued "2021-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Panasonic FPWIN Pro" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2021-32972" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2021-32972 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FPWIN Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Panasonic reports this vulnerability affects the following products: FPWIN Pro programming control software: All Versions 7.5.1.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-180-03" ;
    icsa:vendor "Panasonic" ;
    icsa:year 2021 .

icsa-res:ICSA-21-180-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-180-04" ;
    dcterms:issued "2021-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "JTEKT TOYOPUC PLC" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27477" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2021-27477 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TOYOPUC PLC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the PLC are affected: PC10G-CPU 2PORT-EFR Plus CPU Plus EX Plus EX2 Plus EFR Plus EFR2 Plus 2P-EFR PC10P-DP PC10P-DP-IO Plus BUS-EX Nano 10GX Nano 2ET PC10PE PC10PE-16/16P PC10E FL/ET-T-V2H PC10B PC10B-P Nano CPU PC10P PC10GE." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-180-04" ;
    icsa:vendor "JTEKT ELECTRONICS CORPORATION" ;
    icsa:year 2021 .

icsa-res:ICSA-21-180-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-180-05" ;
    dcterms:issued "2021-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA System Platform (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2021-33010; CVE-2021-33008" ;
    icsa:cweNumber "CWE-306; CWE-248" ;
    icsa:hasCVE cve-res:CVE-2021-33008,
        cve-res:CVE-2021-33010 ;
    icsa:hasCWE cwe-res:CWE-248,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA System Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA reports the vulnerability affects AVEVA System Platform versions 2017 through 2020 R2 P01 (inclusive)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-180-05" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2021 .

icsa-res:ICSA-21-180-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-180-06" ;
    dcterms:issued "2021-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Claroty Secure Remote Access Site" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Healthcare and Public Health; Water and Wastewater" ;
    icsa:cveNumber "CVE-2021-32958" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2021-32958 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Secure Remote Access Site" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SRA are affected: Versions 3.0 through 3.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-180-06" ;
    icsa:vendor "Claroty" ;
    icsa:year 2021 .

icsa-res:ICSA-21-182-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-182-01" ;
    dcterms:issued "2021-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Facility Explorer" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27661" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-27661 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Facility Explorer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following product: Facility Explorer SNC Series Supervisory Controller: Version 11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-182-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2021 .

icsa-res:ICSA-21-182-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-182-02" ;
    dcterms:issued "2021-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic Electronics C-CURE 9000 (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27660" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-27660 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "C-CURE 9000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the vulnerability affects the following product: C-CURE 9000: All versions prior to 2.80." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-182-02" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-182-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-182-03" ;
    dcterms:issued "2021-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DOPSoft (Update B)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27455; CVE-2021-27412" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-27412,
        cve-res:CVE-2021-27455 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software supporting the DOP-100 series HMI screens; are affected: DOPSoft Version 4.0.10.17 and prior.; The following versions of DOPSoft" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-182-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-182-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-182-04" ;
    dcterms:issued "2021-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Air Conditioning System" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2021-20593" ;
    icsa:cweNumber "CWE-303" ;
    icsa:hasCVE cve-res:CVE-2021-20593 ;
    icsa:hasCWE cwe-res:CWE-303 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Air Conditioning System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports this vulnerability affects the following air conditioning systems: Air Conditioning System / Centralized Controllers affected: G-50A: Version 2.50 to Version 3.35 GB-50A: Version 2.50 to Version 3.35 AG-150A-A: Versions 3.20 and prior AG-150A-J: Versions 3.20 and prior GB-50ADA-A: Versions 3.20 and prior GB-50ADA-J: Versions 3.20 and prior EB-50GU-A: Versions 7.09 and prior EB-50GU-J: Versions 7.09 and prior AE-200A: Versions 7.93 and prior AE-200E: Versions 7.93 and prior AE-50A: Versions 7.93 and prior AE-50E: Versions 7.93 and prior EW-50A: Versions 7.93 and prior EW-50E: Versions 7.93 and prior TE-200A: Versions 7.93 and prior TE-50A: Versions 7.93 and prior TW-50A: Versions 7.93 and prior CMS-RMD-J: Versions 1.30 and prior Air Conditioning System / Expansion Controllers are affected: PAC-YG50ECA: Versions 2.20 and prior To learn how to determine the version number of equipment; please see publication number 2021-004 from Mitsubishi Electric." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-182-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-182-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-182-05" ;
    dcterms:issued "2021-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Air Conditioning Systems" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2021-20595" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2021-20595 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Air Conditioning Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports this vulnerability affects the following air conditioning systems: Air Conditioning System/Centralized Controllers: G-50A: Versions 3.35 and prior GB-50A: Versions 3.35 and prior GB-24A: Versions 9.11 and prior AG-150A-A: Versions 3.20 and prior AG-150A-J: Versions 3.20 and prior GB-50ADA-A: Versions 3.20 and prior GB-50ADA-J: Versions 3.20 and prior EB-50GU-A: Versions 7.09 and prior EB-50GU-J: Versions 7.09 and prior AE-200A: Versions 7.93 and prior AE-200E: Versions 7.93 and prior AE-50A: Versions 7.93 and prior AE-50E: Versions 7.93 and prior EW-50A: Versions 7.93 and prior EW-50E: Versions 7.93 and prior TE-200A: Versions 7.93 and prior TE-50A: Versions 7.93 and prior TW-50A: Versions 7.93 and prior CMS-RMD-J: Versions 1.30 and prior Air Conditioning System/Expansion Controllers: PAC-YG50ECA: Versions 2.20 and prior Air Conditioning System/BM adapter: BAC-HD150: Versions 2.21 and prior To learn how to determine the version number of equipment; please see publication number 2021-005 from Mitsubishi Electric." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-182-05" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-187-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-187-01" ;
    dcterms:issued "2021-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa NPort IAW5000A-I/O Series Serial Device Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy Sector" ;
    icsa:cveNumber "CVE-2021-32974; CVE-2021-32968; CVE-2021-32976; CVE-2021-32970" ;
    icsa:cweNumber "CWE-20; CWE-78; CWE-120; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-32968,
        cve-res:CVE-2021-32970,
        cve-res:CVE-2021-32974,
        cve-res:CVE-2021-32976 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-20,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NPort IAW5000A-I/O Series Serial Device Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Moxa reports these vulnerabilities affect the following wireless device server: NPort IAW5000A-I/O Series firmware Version 2.2 or earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-187-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2021 .

icsa-res:ICSA-21-189-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-189-01" ;
    dcterms:issued "2021-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix 1100" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-33012" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-33012 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix 1100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the vulnerability affects the following products: MicroLogix 1100: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-189-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-189-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-189-02" ;
    dcterms:issued "2021-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "MDT AutoSave" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-32949; CVE-2021-32933; CVE-2021-32961; CVE-2021-32953; CVE-2021-32937; CVE-2021-32945; CVE-2021-32957" ;
    icsa:cweNumber "CWE-434; CWE-89; CWE-209; CWE-427; CWE-77; CWE-326; CWE-23" ;
    icsa:hasCVE cve-res:CVE-2021-32933,
        cve-res:CVE-2021-32937,
        cve-res:CVE-2021-32945,
        cve-res:CVE-2021-32949,
        cve-res:CVE-2021-32953,
        cve-res:CVE-2021-32957,
        cve-res:CVE-2021-32961 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-23,
        cwe-res:CWE-326,
        cwe-res:CWE-427,
        cwe-res:CWE-434,
        cwe-res:CWE-77,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MDT AutoSave" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MDT Software reports the vulnerabilities affect the following MDT Autosave products: MDT AutoSave versions prior to v6.02.06 MDT AutoSave v7.00-7.04 AutoSave for System Platform (A4SP) versions prior to 4.01 A4SP Version 5.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-189-02" ;
    icsa:vendor "MDT Software" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-01" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric C-Bus Toolkit" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2021-22784" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2021-22784 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "C-Bus Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of C-Bus Toolkit are affected: C-Bus Toolkit Versions 1.15.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-02" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Controllers and Software (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-22782; CVE-2021-22778; CVE-2021-22780; CVE-2020-12525; CVE-2021-22781; CVE-2021-22779" ;
    icsa:cweNumber "CWE-502; CWE-522; CWE-290; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2020-12525,
        cve-res:CVE-2021-22778,
        cve-res:CVE-2021-22779,
        cve-res:CVE-2021-22780,
        cve-res:CVE-2021-22781,
        cve-res:CVE-2021-22782 ;
    icsa:hasCWE cwe-res:CWE-290,
        cwe-res:CWE-311,
        cwe-res:CWE-502,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Controllers and Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "all versions; Modicon M580 CPU (part numbers BMEP* and BMEH*); 474; all versions Please note not all the vulnerabilities listed below affect all the products above. See SEVD-2021-194-01 to see how they correlate.; 570; 574; all versions; SCADAPack 470; Schneider Electric reports these vulnerabilities affect the following control products: EcoStruxure Control Expert; and 575 RTUs; all versions prior to v15.0 SP1 Including all versions of Unity Pro (former name of EcoStruxure Control Expert) EcoStruxure Control Expert v15.0 SP1 EcoStruxure Process Expert; all versions Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert) SCADAPack RemoteConnect for x70; all versions Modicon M340 CPU (part numbers BMXP34*)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-03" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PROFINET Devices (Update D)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-28400" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2020-28400 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PROFINET Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected:SIMATIC PROFINET Driver: SIMATIC PROFINET Driver: All versions prior to v2.3 SIMATIC NET CM 1542-1: All versions prior to v3.0 SCALANCE X204-2 (incl. SIPLUS NET variant): All versions prior to v5.2.5 SCALANCE X204-2FM: All versions prior to v5.2.5 SCALANCE X204-2LD (incl. SIPLUS NET variant): All versions prior to v5.2.5 SCALANCE X20204-2LD TS: All versions prior to v5.2.5 SCALANCE X204 -2TS: All versions prior to v5.2.5 SCALANCE X206-1: All versions prior to v5.2.5 SCALANCE X206-1LD (incl. SIPLUS NET variant): All versions prior to v5.2.5 SCALANCE X208 (incl. SIPLUS NET variant): All versions prior to v5.2.5 SCALANCE X208PRO: All versions prior to v5.2.5 SCALANCE X212-2: All versions prior to v5.2.5 SCALANCE X12-2LD: All versions prior to v5.2.5 SCALANCE X216: All versions prior to v5.2.5 SCALANCE X224: All versions prior to v5.2.5 Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller: All versions Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200: All versions Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P: All versions RUGGEDCOM RM1224: All versions prior to v6.4 SCALANCE M-800: All versions prior to v6.4 SCALANCE S615: All versions prior to v6.4 SCALANCE W700 IEEE 802.11n: All versions SCALANCE W700 IEEE 802.11ac: All versions SCALANCE X200-4 P IRT: All versions prior to v5.5.0 SCALANCE X201-3P IRT: All versions prior to v5.5.0 SCALANCE X201-3P IRT PRO: All versions prior to v5.5.0 SCALANCE X202-2 IRT: All versions prior to v5.5.0 SCALANCE X202-2P IRT (incl. SIPLUS NET variant): All versions prior to v5.5.0 SCALANCE X202-2P IRT PRO: All versions prior to v5.5.0 SCALANCE X204 IRT: All versions prior to v5.5.0 SCALANCE X204 IRT PRO: All versions prior to v5.5.0 SCALANCE X204-2 (incl. SIPLUS NET variant): All versions SCALANCE X204-2FM: All versions SCALANCE X204-2LD (incl. SIPLUS NET variant): All versions SCALANCE X20204-2LD TS: All versions SCALANCE X204 -2TS: All versions SCALANCE X206-1: All versions SCALANCE X206-1LD (incl. SIPLUS NET variant): All versions SCALANCE X208 (incl. SIPLUS NET variant): All versions SCALANCE X208PRO: All versions SCALANCE X212-2: All versions SCALANCE X12-2LD: All versions SCALANCE X216: All versions SCALANCE X224: All versions SCALANCE X302-7EEC: All versions SCALANCE 304-2FE: All versions Update D SCALANCE W1748-1 M12: All versions prior to v3.0.0 SCALANCE W1788-1 M12: All versions prior to v3.0.0 SCALANCE W1788-2 EEC M12: All versions prior to v3.0.0 SCALANCE W1788-2 M12: All versions prior to v3.0.0 SCALANCE W1788-2IA M12: All versions prior to v3.0.0 SCALANCE X302-7EEC: All versions prior to v4.1.4 SCALANCE X306-1LDFE: All versions prior to v4.1.4 SCALANCE X307-2EEC: All versions prior to v4.1.4 SCALANCE X307-3: All versions prior to v4.1.4 SCALANCE X307-3LD: All versions prior to v4.1.4 SCALANCE X308-2 (incl. SIPLUS NET variant) All versions prior to v4.1.4 SCALANCE X308-2LD: All versions prior to v4.1.4 SCALANCE X308-2LH: All versions prior to v4.1.4 SCALANCE X308-2LH+: All versions prior to v4.1.4 SCALANCE X308-2M: All versions prior to v4.1.4 SCALANCE X308-2M POE: All versions prior to v4.1.4 SCALANCE X308-2M TS: All versions prior to v4.1.4 SCALANCE X310: All versions prior to v4.1.4 SCALANCE X310FE: All versions prior to v4.1.4 SCALANCE X320-1FE: All versions prior to v4.1.4 SCALANCE X320-3LDFE: All versions prior to v4.1.4 SCALANCE X408-2: All versions prior to v4.1.4 End Update D SCALANCE XB-200: All versions SCALANCE XC-200: All versions SCALANCE XF201-3P IRT: All versions prior to v5.5.0 SCALANCE XF202-2P IRT: All versions prior to v5.5.0 SCALANCE XF204: All versions SCALANCE XF204 IRT: All versions prior to v5.5.0 SCALANCE XF204-2 (incl. SIPLUS NET variant): All versions SCALANCE XF204-2BA IRT: All versions prior to v5.5.0 SCALANCE XF206-1: All versions SCALANCE XF208: All versions SCALANCE XF-200BA: All versions SCALANCE XM400: All versions prior to v6.3.1 SCALANCE XP-200: All versions SCALANCE XR324-4M EEC: All versions SCALANCE XR324-4M POE: All versions SCALANCE XR324-4M POE TS: All versions SCALANCE XR324-12M: All versions SCALANCE XR324-12M TS: All versions SCALANCE XR500: All versions prior to v6.3.1 SCALANCE XR-300WG: All versions SIMATIC CFU PA: All versions SIMATIC IE/PB-LINK V3: All versions SIMATIC MV500 family: All versions prior to v3.0 SIMATIC NET CM 1542-1: All versions SIMATIC NET CP1616/CP1604: All Versions 2.7 and prior SIMATIC NET CP1626: All versions SIMATIC NET DK-16xx PN IO: All Versions 2.7 and prior SIMATIC Power Line Booster PLB; Base Module (MLFB: 6ES7972-5AA10-0AB0): All versions SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to v4.5 SIMOCODE proV Ethernet/IP: All versions prior to v1.1.3 SIMOCODE proV PROFINET: All versions prior to v2.1.3 SOFTNET-IE PNIO: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-04" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK Integrate Operate Client" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-31892" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2021-31892 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK Integrate Operate Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINUMERIK are affected: SINUMERIK Analyze MyCondition: All versions SINUMERIK Analyze MyPerformance: All versions SINUMERIK Analyze MyPerformance / OEE-Monitor: All versions SINUMERIK Analyze MyPerformance / OEE-Tuning: All versions SINUMERIK Integrate Client 02: All versions including v02.00.12 and up to but not including v02.00.18 SINUMERIK Integrate Client 03: All versions between v03.00.12 and up to but not including v03.00.18 SINUMERIK Integrate Client 04: Version v04.00.02 and all versions including v04.00.15 up to but not including v04.00.18 SINUMERIK Integrate for Production 4.1: All versions prior to v4.1 SP10 HF3 SINUMERIK Integrate for Production 5.1: Version 5.1 SINUMERIK Manage MyMachines: All versions SINUMERIK Manage MyMachines / Remote: All versions SINUMERIK Manage MyMachines / Spindel Monitor: All versions SINUMERIK Manage MyPrograms: All versions SINUMERIK Manage MyResources / Programs: All versions SINUMERIK Manage MyResources / Tools: All versions SINUMERIK Manage My Tools: All versions SINUMERIK Operate v4.8: All versions prior to v4.8 SP8 SINUMERIK Operate v4.93: All versions prior to v4.93 HF7 SINUMERIK Operate v4.94: All versions prior to v4.94 HF5 SINUMERIK Optimize MyProgramming / NX-Cam Editor: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-05" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Software Products" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-31893" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2021-31893 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Software Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following SIMATIC software products: SIMATIC PCS 7 v8.2 and earlier: All versions SIMATIC PCS 7 v9.0: All versions prior to 9.0 SP3 SIMATIC PDM: All versions prior to v9.2 SIMATIC STEP 7 v5.X: All versions prior to v5.6 SP2 HF3 SINAMICS STARTER (containing STEP 7 OEM version): All versions prior to v5.4 HF2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-06" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Software Products (Update B)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-31894" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2021-31894 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Software Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following SIMATIC software products: SIMATIC PCS 7 V8.2 and earlier: All versions --------- Begin Update B Part 1 of 2 --------- SIMATIC PCS 7 V9.X: All versions prior to V9.1 SP2 SIMATIC PDM: All versions prior to V9.2 SP2 --------- End Update B Part 1 of 2 --------- SIMATIC STEP 7 V5.X: All versions prior to v5.7 SINAMICS STARTER (containing STEP 7 OEM version): All versions prior to 5.4 SP2 HF1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-07" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products LLDP (Update D)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-27827; CVE-2015-8011" ;
    icsa:cweNumber "CWE-120; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2015-8011,
        cve-res:CVE-2020-27827 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following products: SIMATIC HMI Unified Comfort Panels: All versions prior to v17 SIMATIC NET CP 1542SP-1 (6GK7542-6UX00-0XE0): All versions SIMATIC NET CP 1542SP-1 IRC (incl. SIPLUS variants) (6GK7243-8RX30-0XE0): All versions SIMATIC NET CP 1543-1 (incl. SIPLUS variants): All versions SIMATIC NET CP 1543SP-1 (incl. SIPLUS variants): All versions SIMATIC NET CP 1545-1 (6GK7545-1GX00-0XE0): All versions prior to v1.1 --------- Begin Update D Part 1 of 2 --------- SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0): All versions prior to v3.3.46 SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0): All versions prior to v3.3.46 --------- End Update D Part 1 of 2 --------- SIMATIC NET 1243-1 (incl. SIPLUS variants) (6GK7243-1BX30-0XE0): All versions prior to v3.3.46 SIMATIC NET 1243-8 IRC (6GK7243-8RX30-0XE0): All versions prior to v3.3.46 SINUMERIK ONE MCP: All versions prior to v2.0.1 TIM 1531 IRC (incl. SIPLUS NET variants): All versions prior to v2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-08" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-34326; CVE-2021-34328; CVE-2021-34329; CVE-2021-34327" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2021-34326,
        cve-res:CVE-2021-34327,
        cve-res:CVE-2021-34328,
        cve-res:CVE-2021-34329 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a portfolio of software tools; are affected: All versions prior to SE2021MP5.; The following versions of Siemens Solid Edge" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-09" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT Utilities" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-33713; CVE-2021-33714; CVE-2021-33715" ;
    icsa:cweNumber "CWE-688; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2021-33713,
        cve-res:CVE-2021-33714,
        cve-res:CVE-2021-33715 ;
    icsa:hasCWE cwe-res:CWE-476,
        cwe-res:CWE-688 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT Utilities" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens JT Utilities are affected: All versions prior to v13.0.2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-10" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-31895" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2021-31895 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM ROS i800: All versions prior to 4.3.7 RUGGEDCOM ROS i801: All versions prior to 4.3.7 RUGGEDCOM ROS i802: All versions prior to 4.3.7 RUGGEDCOM ROS i803: All versions prior to 4.3.7 RUGGEDCOM ROS M969: All versions prior to 4.3.7 RUGGEDCOM ROS M2100: All versions prior to 4.3.7 RUGGEDCOM ROS M2200: All versions prior to 4.3.7 RUGGEDCOM ROS RMC: All versions prior to 4.3.7 RUGGEDCOM ROS RMC20: All versions prior to 4.3.7 RUGGEDCOM ROS RMC30: All versions prior to 4.3.7 RUGGEDCOM ROS RMC40: All versions prior to 4.3.7 RUGGEDCOM ROS RMC41: All versions prior to 4.3.7 RUGGEDCOM ROS RMC8388 V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RMC8388 V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RP110: All versions prior to 4.3.7 RUGGEDCOM ROS RS400: All versions prior to 4.3.7 RUGGEDCOM ROS RS401: All versions prior to 4.3.7 RUGGEDCOM ROS RS416: All versions prior to 4.3.7 RUGGEDCOM ROS RS416V2 V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RS416V2 V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RS900 (32M) V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RS900 (32M) V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RS900G: All versions prior to 4.3.7 RUGGEDCOM ROS RS900G (32M) V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RS900G (32M) V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RS900GP: All versions prior to 4.3.7 RUGGEDCOM ROS RS900L: All versions prior to 4.3.7 RUGGEDCOM ROS PS900W: All versions prior to 4.3.7 RUGGEDCOM ROS RS910: All versions prior to 4.3.7 RUGGEDCOM ROS RS910L: All versions prior to 4.3.7 RUGGEDCOM ROS RS910W: All versions prior to 4.3.7 RUGGEDCOM ROS RS920L: All versions prior to 4.3.7 RUGGEDCOM ROS RS920W: All versions prior to 4.3.7 RUGGEDCOM ROS RS930L: All versions prior to 4.3.7 RUGGEDCOM ROS RS930W: All versions prior to 4.3.7 RUGGEDCOM ROS RS940G: All versions prior to 4.3.7 RUGGEDCOM ROS RS969: All versions prior to 4.3.7 RUGGEDCOM ROS RS8000: All versions prior to 4.3.7 RUGGEDCOM ROS RS8000A: All versions prior to 4.3.7 RUGGEDCOM ROS RS8000H: All versions prior to 4.3.7 RUGGEDCOM ROS RS8000T: All versions prior to 4.3.7 RUGGEDCOM ROS RSG900 V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG900 V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RSG900C: All versions prior to 5.5.4 RUGGEDCOM ROS RSG900G V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG800G V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RSG900R: All versions prior to 5.5.4 RUGGEDCOM ROS RSG920P V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG920P V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RSG2100 (32M) V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG2100 (32M) V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RSG2100 V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG2100P: All versions prior to 4.3.7 RUGGEDCOM ROS RSG2100P (32M) V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG2100P (32M) V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RSG2200: All versions prior to 4.3.7 RUGGEDCOM ROS RSG2288 V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG2288 V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RSG2300 V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG2300 V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RSG2300P V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG2300P V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RSG2488 V4.X: All versions prior to 4.3.7 RUGGEDCOM ROS RSG2488 V5.X: All versions prior to 5.5.4 RUGGEDCOM ROS RSL910: All versions prior to 5.5.4 RUGGEDCOM ROS RST916C: All versions prior to 5.5.4 RUGGEDCOM ROS RST916P: All versions prior to 5.5.4 RUGGEDCOM ROS RST2228: All versions prior to 5.5.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-11" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Active Workspace" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-33711; CVE-2021-33710; CVE-2021-33709" ;
    icsa:cweNumber "CWE-209; CWE-79; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2021-33709,
        cve-res:CVE-2021-33710,
        cve-res:CVE-2021-33711 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-209,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Active Workspace" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; The following versions of Smart Security Manager; are affected: Teamcenter Active Workspace v4: All versions prior to v4.3.9 Teamcenter Active Workspace v5.0: All versions prior to v5.0.7 Teamcenter Active Workspace v5.1: All versions prior to v5.1.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-12" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens VxWorks-based Industrial Products (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-29998" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2021-29998 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wind River VxWorks-based Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ports on front) (6GK5324-4QG00-1AR2): All versions SCALANCE XR324-4M PoE (24V; ports on rear) (6GK5324-4GG00-3JR2): All versions SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG00-1JR2): All versions SCALANCE XR324-4M EEC (24V; coated) (6GK5307-2FD00-1GA3): All versions SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3): All versions SCALANCE X307-2 EEC (230V; coated) (6GK5302-7GD00-1GA3): All versions SCALANCE X302-7 EEC (230V) (6GK5302- 7GD00-3EA3): All versions SCALANCE X302-7 EEC (230V; ports on rear) (6GK5324-4QG00-1HR2): All versions SCALANCE XR324-4M PoE (230V; ports on rear) (6GK5324-4GG00-2JR2): All versions SCALANCE XR324-4M EEC (2x 24V; coated) (6GK5307-2FD00-2GA3): All versions SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3): All versions SCALANCE X307-2 EEC (2x 230V; coated) (6GK5302-7GD00-3GA3): All versions SCALANCE X304-2FE (6GK5304-2BD00-2AA3): All versions SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3): All versions SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3): All versions SCALANCE X307-2 EEC (2x 24V; ports on front) (6GK5324-0GG00-3AR2): All versions SCALANCE XR324-12M (230V; ports on front) (6GK5324-0GG00-1AR2): All versions SCALANCE XR324-12M (24V; ports on front) (6GK5324-4GG00-4ER2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG10-4JR2): All versions SCALANCE XR324-4M EEC (24V; ports on front) (6GK5324-4QG00-1CR2): All versions SCALANCE XR324-12M (24V; ports on front) (6GK5324-4QG00-3AR2): All versions SCALANCE XR324-4M PoE (230V; ports on front) (6GK5324-4GG00-3ER2): All versions SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; coated) (6GK5302-7GD00-2GA3): All versions SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3): All versions SCALANCE X302-7 EEC (2x 230V; ports on front) (6GK5324-4GG00-2ER2): All versions SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-4GG10-1ER2): All versions SCALANCE XR324-4M EEC (24V; coated) (6GK5302-7GD00-4GA3): All versions SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3): All versions SCALANCE X302-7 EEC (24V; coated) (6GK5307-2FD00-3GA3): All versions SCALANCE X307-3 (6GK5307-3BL00-2AA3): All versions SCALANCE X307-3 (6GK5307-3BL10-2AA3): All versions SCALANCE X307-3LD (6GK5307-3BM00-2AA3): All versions SCALANCE X307-3LD (6GK5307-3BM10-2AA3): All versions SCALANCE X308-2 (6GK5308-2FL00-2AA3): All versions SCALANCE X308-2 (6GK5308-2FL10-2AA3): All versions SCALANCE X308-2LD (6GK5308-2FM00-2AA3): All versions SCALANCE X308-2LD (6GK5308-2FM10-2AA3): All versions SCALANCE X308-2LH (6GK5308-2FN00-2AA3): All versions SCALANCE X308-2LH (6GK5308-2FN10-2AA3): All versions SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3): All versions SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3): All versions SCALANCE X308-2M (6GK5308-2GG00-2AA2): All versions SCALANCE X308-2M (6GK5308-2GG10-2AA2): All versions SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2): All versions SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2): All versions SCALANCE X308-2M TS (6GK5308-2GG00-2CA2): All versions SCALANCE X308-2M TS (6GK5308-2GG10-2CA2): All versions SCALANCE X310 (6GK5310-0FA00-2AA3): All versions SCALANCE X310 (6GK5310-0FA10-2AA3): All versions SCALANCE X310FE (6GK5310-0BA00-2AA3): All versions SCALANCE X310FE (6GK5310-0BA10-2AA3): All versions SCALANCE X320-1 FE (6GK5320-1BD00-2AA3): All versions SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3): All versions SCALANCE X408-2 (6GK5408-2FD00-2AA2): All versions SCALANCE XF201-3P IRT (6GK5201-3JR00-2BA6): All versions SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2): All versions SCALANCE XF204 (6GK5204-0BA00-2AF2): All versions SCALANCE XF204-2 (6GK5204-2BC00-2AF2): All versions SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2): All versions SCALANCE XF204IRT (6GK5204-0BA00-2BF2): All versions SCALANCE XF206-1 (6GK5206-1BC00-2AF2): All versions SCALANCE XF208 (6GK5208-0BA00-2AF2): All versions SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-4GG00-1ER2): All versions SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-0GG00-1HR2): All versions SCALANCE XR324-12M (24V; ports on front) (6GK5324-4GG10-4ER2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5324-4QG00-3HR2): All versions SCALANCE XR324-4M PoE TS (24V; ports on rear) (6GK5324-4GG10-3JR2): All versions SCALANCE XR324-4M PoE (24V; coated) (6GK5307-2FD00-4GA3): All versions SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3): All versions SCALANCE X307-2 EEC (24V; ports on rear) (6GK5324-4GG10-2JR2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on front) (6GK5324-0GG10-3AR2): All versions SCALANCE XR324-12M (230V; ports on rear) (6GK5324-0GG10-1HR2): All versions SCALANCE XR324-12M (230V; ports on front) (6GK5324-4GG10-3ER2): All versions SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-0GG10-1AR2): All versions SCALANCE XR324-12M (24V; Siemens reports this vulnerability affects the following Wind River VxWorks-based industrial products: RUGGEDCOM WIN5100 series subscriber unit: All versions RUGGEDCOM WIN5200 series subscriber unit: All versions SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3): All versions SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3): All versions SCALANCE X201-3P IRT PRO (6GK5201-3BH00-2BD2): All versions SCALANCE X202-2IRT (6GK5202-2BB00-2BA3): All versions SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3): All versions SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6): All versions SCALANCE X204-2 (6GK5204-2BB10-2AA3): All versions SCALANCE X204-2FM (6GK5204-2BB11-2AA3): All versions SCALANCE X204-2LD (6GK5204-2BC10-2AA3): All versions SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2): All versions SCALANCE X204-2TS (6GK5204-2BB10-2CA2): All versions SCALANCE X204IRT (6GK5204-0BA00-2BA3): All versions SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6): All versions SCALANCE X206-1 (6GK5206-1BB10-2AA3): All versions SCALANCE X206-1LD (6GK5206-1BC10-2AA3): All versions SCALANCE X208 (6GK5208-0BA10-2AA3): All versions SCALANCE X208PRO (6GK5208-0HA10-2AA6): All versions SCALANCE X212-2 (6GK5212-2BB00-2AA3): All versions SCALANCE X212-2LD (6GK5212-2BC00-2AA3): All versions SCALANCE X216 (6GK5216-0BA00-2AA3): All versions SCALANCE X224 (6GK5224-0BA00-2AA3): All versions SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3): All versions SCALANCE X302-7 EEC (2x 24V; ports on rear) (6GK5324-4GG10-1JR2): All versions SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on rear) (6GK5324-0GG10-3HR2): All versions SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2): All versions SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2): All versions SIMATIC RF180C (6GT2002-0JD00): All versions SIMATIC RF182C (6GT2002-0JD10): All versions SIMATIC RFID 181EIP (6GT2002-0JD20): All versions SIPLUS NET SCALANCE X308-2 (6AG1308-2FL10-4AA3): All versions --------- Begin Update C Part 1 of 2 --------- SINAMICS PERFECT HARMONY GH180 Drives: Drives manufactured between 2015 and 2021 (Drives manufactured in 2022 are not affected) --------- End Update C Part 1 of 2 ---------.; ports on rear) (6GK5324-4GG00-4JR2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5324-0GG00-3HR2): All versions SCALANCE XR324-12M (230V; ports on front) (6GK5324-4GG10-2ER2): All versions SCALANCE XR324-4M EEC (2x 24V" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-13" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS PERFECT HARMONY GH180 (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-15782" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2020-15782 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS PERFECT HARMONY GH180" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "A85; E06; The following versions and models of SINAMICS PERFECT HARMONY are affected: SINAMICS PERFECT HARMONY GH180 Drives manufactured before 2021-8-13; 6SR5 with options A84; W41 with X30 air to air hex 6SR4 with option W41 with X30 air to air hex." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-14" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RWG Universal Controllers" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-25671" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2021-25671 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RWG Universal Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following RWG controllers: RWG1.M8: All versions prior to v1.16.16 RWG1.M12: All versions prior to v1.16.16 RWG1.M12D: All versions prior to v1.16.16." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-15" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2Go and Teamcenter Visualization" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-34318; CVE-2021-34310; CVE-2021-34333; CVE-2021-34330; CVE-2021-34301; CVE-2021-34291; CVE-2021-34311; CVE-2021-34315; CVE-2021-34325; CVE-2021-34293; CVE-2021-34306; CVE-2021-34329; CVE-2021-34300; CVE-2021-34292; CVE-2021-34326; CVE-2021-34320; CVE-2021-34309; CVE-2021-34324; CVE-2021-34319; CVE-2021-34313; CVE-2021-34314; CVE-2021-34327; CVE-2021-34297; CVE-2021-34322; CVE-2021-34332; CVE-2021-34316; CVE-2021-34307; CVE-2021-34298; CVE-2021-34312; CVE-2021-34295; CVE-2021-34294; CVE-2021-34303; CVE-2021-34296; CVE-2021-34321; CVE-2021-34308; CVE-2021-34331; CVE-2021-34304; CVE-2021-34317; CVE-2021-34323; CVE-2021-34305; CVE-2021-34328; CVE-2021-34299; CVE-2021-34302" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-122; CWE-787; CWE-126; CWE-835; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-34291,
        cve-res:CVE-2021-34292,
        cve-res:CVE-2021-34293,
        cve-res:CVE-2021-34294,
        cve-res:CVE-2021-34295,
        cve-res:CVE-2021-34296,
        cve-res:CVE-2021-34297,
        cve-res:CVE-2021-34298,
        cve-res:CVE-2021-34299,
        cve-res:CVE-2021-34300,
        cve-res:CVE-2021-34301,
        cve-res:CVE-2021-34302,
        cve-res:CVE-2021-34303,
        cve-res:CVE-2021-34304,
        cve-res:CVE-2021-34305,
        cve-res:CVE-2021-34306,
        cve-res:CVE-2021-34307,
        cve-res:CVE-2021-34308,
        cve-res:CVE-2021-34309,
        cve-res:CVE-2021-34310,
        cve-res:CVE-2021-34311,
        cve-res:CVE-2021-34312,
        cve-res:CVE-2021-34313,
        cve-res:CVE-2021-34314,
        cve-res:CVE-2021-34315,
        cve-res:CVE-2021-34316,
        cve-res:CVE-2021-34317,
        cve-res:CVE-2021-34318,
        cve-res:CVE-2021-34319,
        cve-res:CVE-2021-34320,
        cve-res:CVE-2021-34321,
        cve-res:CVE-2021-34322,
        cve-res:CVE-2021-34323,
        cve-res:CVE-2021-34324,
        cve-res:CVE-2021-34325,
        cve-res:CVE-2021-34326,
        cve-res:CVE-2021-34327,
        cve-res:CVE-2021-34328,
        cve-res:CVE-2021-34329,
        cve-res:CVE-2021-34330,
        cve-res:CVE-2021-34331,
        cve-res:CVE-2021-34332,
        cve-res:CVE-2021-34333 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-126,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-787,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: JT2Go: All versions prior to v13.2 Teamcenter Visualization: All versions prior to v13.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-16" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-33718" ;
    icsa:cweNumber "CWE-863" ;
    icsa:hasCVE cve-res:CVE-2021-33718 ;
    icsa:hasCWE cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mendix Applications are affected: Mendix Applications using Mendix 7: All versions prior to v7.23.22 Mendix Applications using Mendix 8: All versions prior to v8.18.7 Mendix Applications using Mendix 9: All versions prior to v9.3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-194-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-194-17" ;
    dcterms:issued "2021-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK ONE and SINUMERIK MC (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-15782" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2020-15782 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK ONE and SINUMERIK MC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINUMERIK are affected: SINUMERIK MC: All versions prior to v6.15 SINUMERIK ONE: All versions prior to v6.15." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-194-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-201-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-201-01" ;
    dcterms:issued "2021-07-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-F Series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20596" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2021-20596 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports this vulnerability exists in the following MELSEC-F series Ethernet interface block: FX3U-ENET: Firmware Version 1.14 and prior FX3U-ENET-L: Firmware Version 1.14 and prior FX3U-ENET-P502: Firmware Version 1.14 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-201-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-208-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-208-01" ;
    dcterms:issued "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "KUKA KR C4" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-33014; CVE-2021-33016" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2021-33014,
        cve-res:CVE-2021-33016 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KR C4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of KR C4 are affected: KR C4: All versions prior to 8.7 KSS: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-208-01" ;
    icsa:vendor "KUKA" ;
    icsa:year 2021 .

icsa-res:ICSA-21-208-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-208-02" ;
    dcterms:issued "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT2000 series and GT SoftGOT2000" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20592" ;
    icsa:cweNumber "CWE-820" ;
    icsa:hasCVE cve-res:CVE-2021-20592 ;
    icsa:hasCWE cwe-res:CWE-820 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT2000 series and GT SoftGOT2000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports this vulnerability affects the MODBUS/TCP slave communication function of following products: GOT2000 models GT27; GT25; GT23: All communication driver versions between 01.19.000 and 01.39.010. These versions are affected when using the \"MODBUS/TCP Slave; Gateway\" communication driver. GT SoftGOT2000: All versions between 1.170C and 1.256S. These versions are affected when configured to use \"MODBUS/TCP Slave\" communication." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-208-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-208-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-208-03" ;
    dcterms:issued "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Geutebruck G-Cam E2 and G-Code" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Financial Services; Government Facilities; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2021-33547; CVE-2021-33552; CVE-2021-33548; CVE-2021-33551; CVE-2021-33550; CVE-2021-33554; CVE-2021-33543; CVE-2021-33553; CVE-2021-33546; CVE-2021-33549; CVE-2021-33545; CVE-2021-33544" ;
    icsa:cweNumber "CWE-306; CWE-77; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-33543,
        cve-res:CVE-2021-33544,
        cve-res:CVE-2021-33545,
        cve-res:CVE-2021-33546,
        cve-res:CVE-2021-33547,
        cve-res:CVE-2021-33548,
        cve-res:CVE-2021-33549,
        cve-res:CVE-2021-33550,
        cve-res:CVE-2021-33551,
        cve-res:CVE-2021-33552,
        cve-res:CVE-2021-33553,
        cve-res:CVE-2021-33554 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-306,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "G-Cam E2 and G-Code" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Geutebruck devices contain the affected third-party firmware provided by UDP Technology: E2 Series cameras - G-CAM; Versions 1.12.0.27 and prior; Versions 1.12.13.2 and 1.12.14.5 EEC-2xx EEN-20xx.; Versions 1.12.13.2 and 1.12.14.5 EBC-21xx EFD-22xx ETHC-22xx EWPC-22xx Encoder G-Code; Versions 1.12.0.27 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-208-03" ;
    icsa:vendor "Geutebruck" ;
    icsa:year 2021 .

icsa-res:ICSA-21-208-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-208-04" ;
    dcterms:issued "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS LAquis SCADA" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-32989" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-32989 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LCDS LAquis SCADA" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "The following versions of LAquis SCADA are affected: Versions 4.3.1.1011 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-208-04" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2021 .

icsa-res:ICSA-21-208-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-208-05" ;
    dcterms:issued "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAScreen" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-32969; CVE-2021-32965" ;
    icsa:cweNumber "CWE-843; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-32965,
        cve-res:CVE-2021-32969 ;
    icsa:hasCWE cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAScreen" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DIAScreen sofware are affected: All versions prior to v1.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-208-05" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-210-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-210-01" ;
    dcterms:issued "2021-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids eSOMS" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-35527" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2021-35527 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "eSOMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports this vulnerability affects the following product: eSOMS: All Versions 6.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-210-01" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-210-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-210-02" ;
    dcterms:issued "2021-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wibu-Systems CodeMeter Runtime" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-20094; CVE-2021-20093" ;
    icsa:cweNumber "CWE-126" ;
    icsa:hasCVE cve-res:CVE-2021-20093,
        cve-res:CVE-2021-20094 ;
    icsa:hasCWE cwe-res:CWE-126 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CodeMeter Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CodeMeter Runtime; are affected: CodeMeter Runtime: All versions prior to v7.21a This license manager is used in the products of many different vendors.; a license manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-210-02" ;
    icsa:vendor "Wibu-Systems AG" ;
    icsa:year 2021 .

icsa-res:ICSA-21-217-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-217-01" ;
    dcterms:issued "2021-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "HCC Embedded InterNiche TCP/IP stack, NicheLite (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Hungary" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-25926; CVE-2021-27565; CVE-2021-31226; CVE-2021-31400; CVE-2020-25928; CVE-2021-31401; CVE-2020-35683; CVE-2020-35685; CVE-2020-25767; CVE-2021-31228; CVE-2020-35684; CVE-2021-36762; CVE-2021-31227; CVE-2020-25927" ;
    icsa:cweNumber "CWE-466; CWE-703; CWE-330; CWE-340; CWE-170; CWE-20; CWE-248; CWE-130; CWE-839" ;
    icsa:hasCVE cve-res:CVE-2020-25767,
        cve-res:CVE-2020-25926,
        cve-res:CVE-2020-25927,
        cve-res:CVE-2020-25928,
        cve-res:CVE-2020-35683,
        cve-res:CVE-2020-35684,
        cve-res:CVE-2020-35685,
        cve-res:CVE-2021-27565,
        cve-res:CVE-2021-31226,
        cve-res:CVE-2021-31227,
        cve-res:CVE-2021-31228,
        cve-res:CVE-2021-31400,
        cve-res:CVE-2021-31401,
        cve-res:CVE-2021-36762 ;
    icsa:hasCWE cwe-res:CWE-130,
        cwe-res:CWE-170,
        cwe-res:CWE-20,
        cwe-res:CWE-248,
        cwe-res:CWE-330,
        cwe-res:CWE-340,
        cwe-res:CWE-466,
        cwe-res:CWE-703,
        cwe-res:CWE-839 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InterNiche stack (NicheStack), NicheLite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following embedded component TCP/IP stacks are affected: InterNiche stack: All versions prior to v4.3 NicheLite: All versions prior to v4.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-217-01" ;
    icsa:vendor "HCC Embedded" ;
    icsa:year 2021 .

icsa-res:ICSA-21-217-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-217-02" ;
    dcterms:issued "2021-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation FvDesigner" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-32939; CVE-2021-32931; CVE-2021-32947" ;
    icsa:cweNumber "CWE-787; CWE-824; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-32931,
        cve-res:CVE-2021-32939,
        cve-res:CVE-2021-32947 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FvDesigner" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software tool used to design and develop FATEK FV HMI series product projects; The following versions of FvDesigner; Versions 1.5.88 and prior.; are affected: FvDesigner" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-217-02" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-217-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-217-03" ;
    dcterms:issued "2021-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-33013; CVE-2021-33009; CVE-2021-27505; CVE-2021-33005" ;
    icsa:cweNumber "CWE-284; CWE-22; CWE-434; CWE-548" ;
    icsa:hasCVE cve-res:CVE-2021-27505,
        cve-res:CVE-2021-33005,
        cve-res:CVE-2021-33009,
        cve-res:CVE-2021-33013 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-434,
        cwe-res:CWE-548 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "myPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of myPro are affected: All versions prior to 8.20.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-217-03" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2021 .

icsa-res:ICSA-21-217-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-217-04" ;
    dcterms:issued "2021-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess SCADA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-22674; CVE-2021-22676; CVE-2021-32943" ;
    icsa:cweNumber "CWE-23; CWE-79; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-22674,
        cve-res:CVE-2021-22676,
        cve-res:CVE-2021-32943 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-23,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess SCADA" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of WebAccess/SCADA; are affected: WebAccess/SCADA versions prior to 8.4.5 WebAccess/SCADA versions prior to 9.0.1.; a browser-based SCADA software package" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-217-04" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-222-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-222-01" ;
    dcterms:issued "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2Go and Teamcenter Visualization products" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-32940; CVE-2021-32950; CVE-2021-32944; CVE-2021-33717; CVE-2021-32948; CVE-2021-32938; CVE-2021-32936" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-787; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2021-32936,
        cve-res:CVE-2021-32938,
        cve-res:CVE-2021-32940,
        cve-res:CVE-2021-32944,
        cve-res:CVE-2021-32948,
        cve-res:CVE-2021-32950,
        cve-res:CVE-2021-33717 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go and Teamcenter Visualization products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: JT2Go: All versions prior to v13.2.0.1 Teamcenter Visualization: All versions prior to v13.2.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-222-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-222-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-222-02" ;
    dcterms:issued "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Automation License Manager" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-25659" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-25659 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Automation License Manager are affected: Automation License Manager 5: All versions Automation License Manager 6: All versions prior to v6.0 SP9 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-222-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-222-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-222-03" ;
    dcterms:issued "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2Go and Teamcenter Visualization (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-33738; CVE-2021-32946; CVE-2021-32952" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2021-32946,
        cve-res:CVE-2021-32952,
        cve-res:CVE-2021-33738 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-754,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: JT2Go: All versions prior to v13.2.0.2 Teamcenter Visualization: All versions prior to v13.2.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-222-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-222-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-222-04" ;
    dcterms:issued "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-33721" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2021-33721 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINEC NMS are affected: SINEC NMS: All versions prior to v1.0 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-222-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-222-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-222-05" ;
    dcterms:issued "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products Intel CPUs (Update G)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-12357; CVE-2020-24511; CVE-2020-24486; CVE-2020-24512; CVE-2020-24506; CVE-2020-24507; CVE-2020-24513; CVE-2020-8704; CVE-2020-12360; CVE-2020-8670; CVE-2020-12358; CVE-2020-8703" ;
    icsa:cweNumber "CWE-311" ;
    icsa:hasCVE cve-res:CVE-2020-12357,
        cve-res:CVE-2020-12358,
        cve-res:CVE-2020-12360,
        cve-res:CVE-2020-24486,
        cve-res:CVE-2020-24506,
        cve-res:CVE-2020-24507,
        cve-res:CVE-2020-24511,
        cve-res:CVE-2020-24512,
        cve-res:CVE-2020-24513,
        cve-res:CVE-2020-8670,
        cve-res:CVE-2020-8703,
        cve-res:CVE-2020-8704 ;
    icsa:hasCWE cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SINUMERIK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "6AG1518-4AX00-4AC0; incl. SIPLUS variant): All versions SIMATIC S7-1500 CPU 1518F-4 PN-DP MFP (MLFB: 6ES7518-4FX00-1AC0): All versions SINUMERIK 828D HW PPU.4: All versions SINUMERIK MC MCU 1720: All versions SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10: All versions SINUMERIK ONE PPU 1740: All versions SINUMERIK ONE NCU 1740: All versions prior to v05.00.00.00 SIMATIC IPC127E: All versions prior to v21.01.07 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions prior to v0209_0105 Update C SIMATIC IPC427E: All versions prior to v21.01.16 SIMATIC IPC477E: All versions prior to v21.01.16 SIMATIC IPC477E Pro: All versions prior to v21.01.16 End Update C.; The following Siemens products are affected: SIMATIC Drive Controller Family: All versions SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions SIMATIC Field PG M5: All versions SIMATIC Field PG M6: All versions SIMATIC IPC127E: All versions SIMATIC IPC427E: All versions SIMATIC IPC477E: All versions SIMATIC IPC477E Pro: All versions SIMATIC IPC527GE: All versions SIMATIC IPC547G: All versions SIMATIC IPC627E: All versions SIMATIC IPC647E: All versions SIMATIC IPC677E: All versions SIMATIC IPC847E: All BIOS versions prior to v25.02.10 SIMATIC ITP1000: All versions SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0; incl. SIPLUS variant): All versions SIMATIC S7-1500 CPU 1518F-4 PN-DP MFP (MLFB: 6ES7518-4FX00-1AC0): All versions SINUMERIK 828D HW PPU.4: All versions SINUMERIK MC MCU 1720: All versions SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10: All versions SINUMERIK ONE PPU 1740: All versions SINUMERIK ONE NCU 1740: All versions prior to v05.00.00.00 SIMATIC IPC127E: All versions prior to v21.01.07 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions prior to v0209_0105 SIMATIC IPC427E: All versions prior to v21.01.16 SIMATIC IPC477E: All versions prior to v21.01.16 SIMATIC IPC477E Pro: All versions prior to v21.01.16 SIMATIC ITP1000: All versions SIMATIC Field PG M6: All versions SIMATIC IPC347G: All versions prior to v01.04.00 SIMATIC IPC3000 SMART V3: All versions prior to v01.04.00 --------- Begin Update G Part 1 of 2 --------- SINUMERIK 828D HW PPU.4: All versions prior to v08.00.00.00 SINUMERIK MC MCU 1720: All versions prior to v05.00.00.00 SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10: All versions prior to v08.00.00.00 SINUMERIK ONE PPU 1740: All versions prior to v06.00.00.00 --------- End Update G Part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-222-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-222-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-222-06" ;
    dcterms:issued "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Energy AGT and SGT Solutions" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2016-20009" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2016-20009 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Energy AGT and SGT Solutions" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SGT-100: All versions SGT-200: All versions SGT-300: All versions SGT-400: All versions SGT-A20: All versions SGT-A35: All versions SGT-A64: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-222-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-222-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-222-07" ;
    dcterms:issued "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CP (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-9272; CVE-2020-9273" ;
    icsa:cweNumber "CWE-416; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-9272,
        cve-res:CVE-2020-9273 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC NET CP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC NET CP 1543-1 (Incl. SIPLUS NET variants): All versions prior to v3.0 --------- Begin Update A Part 1 of 2 --------- SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0): All versions prior to v1.1 --------- End Update A Part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-222-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-222-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-222-08" ;
    dcterms:issued "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-37180; CVE-2021-37179; CVE-2021-37178" ;
    icsa:cweNumber "CWE-416; CWE-611; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2021-37178,
        cve-res:CVE-2021-37179,
        cve-res:CVE-2021-37180 ;
    icsa:hasCWE cwe-res:CWE-416,
        cwe-res:CWE-611,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Solid Edge are affected: Solid Edge SE2021: All versions prior to SE2021MP7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-222-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-222-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-222-09" ;
    dcterms:issued "2021-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-37172" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2021-37172 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC are affected: S7-1200 CPU family (incl. SIPLUS variants): Version 4.5.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-222-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-224-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-224-01" ;
    dcterms:issued "2021-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cognex In-Sight OPC Server" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-32935" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2021-32935 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "In-Sight OPC Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of In-Sight OPC Server are affected: v5.7.4 (96) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-224-01" ;
    icsa:vendor "Cognex" ;
    icsa:year 2021 .

icsa-res:ICSA-21-224-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-224-02" ;
    dcterms:issued "2021-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-32975; CVE-2021-32995; CVE-2021-33015" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2021-32975,
        cve-res:CVE-2021-32995,
        cve-res:CVE-2021-33015 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Cscape; a control system application programming software; are affected: Cscape: All Versions prior to 9.90 SP5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-224-02" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-229-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-229-01" ;
    dcterms:issued "2021-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "ThroughTek Kalay P2P SDK" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2021-28372" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2021-28372 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kalay P2P SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Kalay P2P Software Development Kit (SDK) are affected: Versions 3.1.5 and prior SDK versions with the nossl tag Device firmware that does not use AuthKey for IOTC connection Device firmware using the AVAPI module without enabling DTLS mechanism Device firmware using P2PTunnel or RDT module." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-229-01" ;
    icsa:vendor "ThroughTek" ;
    icsa:year 2021 .

icsa-res:ICSA-21-229-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-229-02" ;
    dcterms:issued "2021-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/NMS" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-32951" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2021-32951 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/NMS" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "are affected: WebAccess/NMS: Versions prior to v3.0.3_Build6299.; a network management system; The following versions of WebAccess/NMS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-229-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-229-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-229-03" ;
    dcterms:issued "2021-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "xArrow SCADA" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-33021; CVE-2021-33001; CVE-2021-33025" ;
    icsa:cweNumber "CWE-22; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-33001,
        cve-res:CVE-2021-33021,
        cve-res:CVE-2021-33025 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a SCADA/HMI; The following versions of xArrow; are affected: Versions 7.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-229-03" ;
    icsa:vendor "xArrow" ;
    icsa:year 2021 .

icsa-res:ICSA-21-231-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-231-01" ;
    dcterms:issued "2021-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA SuiteLink Server" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-32987; CVE-2021-32971; CVE-2021-32979; CVE-2021-32963; CVE-2021-32959; CVE-2021-32999" ;
    icsa:cweNumber "CWE-755; CWE-122; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2021-32959,
        cve-res:CVE-2021-32963,
        cve-res:CVE-2021-32971,
        cve-res:CVE-2021-32979,
        cve-res:CVE-2021-32987,
        cve-res:CVE-2021-32999 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-476,
        cwe-res:CWE-755 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SuiteLink Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA reports the following products ship a vulnerable version of the SuiteLink Server and are affected: AVEVA System Platform 2020 R2 P01 and all prior versions AVEVA InTouch 2020 R2 P01 and all prior versions AVEVA Historian 2020 R2 P01 and all prior versions AVEVA Communication Drivers Pack 2020 R2 and all prior versions AVEVA Operations Integration Core 3.0 and all prior versions AVEVA Data Acquisition Servers all versions AVEVA Batch Management 2020 and all prior versions AVEVA MES 2014 R2 and all prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-231-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2021 .

icsa-res:ICSA-21-231-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-231-02" ;
    dcterms:issued "2021-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baker Hughes Bently Nevada 3500" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-32997" ;
    icsa:cweNumber "CWE-916" ;
    icsa:hasCVE cve-res:CVE-2021-32997 ;
    icsa:hasCWE cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "3500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Part No. 3060/00; The following software versions are affected: System 1 6.x; Part No. 288055-01; Released May 2020; 3500/22M Firmware; Part No. 129133-01; Released May 2021.; Released July 2021; 3500 Rack Configuration; Versions 5.05 and prior; Versions 6.98 and prior; Versions 6.4 and prior; Released Dec 2020; System 1; Part No. 3071/xx & 3072/xx; Versions 21.1 HF1 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-231-02" ;
    icsa:vendor "Bently Nevada (Subsidiary of Baker Hughes)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-236-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-236-01" ;
    dcterms:issued "2021-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids TropOS" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-24587; CVE-2020-26139; CVE-2020-24588; CVE-2020-26143; CVE-2020-26147; CVE-2020-24586; CVE-2020-26145; CVE-2020-26144; CVE-2020-26140; CVE-2020-26141; CVE-2020-26146; CVE-2020-26142" ;
    icsa:cweNumber "CWE-287; CWE-306; CWE-326; CWE-20; CWE-74; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2020-24586,
        cve-res:CVE-2020-24587,
        cve-res:CVE-2020-24588,
        cve-res:CVE-2020-26139,
        cve-res:CVE-2020-26140,
        cve-res:CVE-2020-26141,
        cve-res:CVE-2020-26142,
        cve-res:CVE-2020-26143,
        cve-res:CVE-2020-26144,
        cve-res:CVE-2020-26145,
        cve-res:CVE-2020-26146,
        cve-res:CVE-2020-26147 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-306,
        cwe-res:CWE-326,
        cwe-res:CWE-354,
        cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TropOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports these vulnerabilities affect the following products: TropOS: Firmware Version 8.9.4.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-236-01" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-236-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-236-02" ;
    dcterms:issued "2021-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids Retail Operations and CSB Products" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-35529" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2021-35529 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Retail Operations and Counterparty Settlement Billing (CSB)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi ABB Power Grids reports this vulnerability affects the following utility usage and billing software products: Retail Operations: All Versions 5.7.2 and prior Counterparty Settlement and Billing (CSB): All Versions 5.7.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-236-02" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-236-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-236-03" ;
    dcterms:issued "2021-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics TPEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-33007" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2021-33007 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TPEditor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "programming software for Delta Electronics text panels; are affected: TPEditor: v1.98.06 and prior.; The following versions of TPEditor" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-236-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-238-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-238-01" ;
    dcterms:issued "2021-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Controlled Electronic Management Systems CEM Systems AC2000" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27663" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2021-27663 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CEM Systems AC2000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following versions of CEM Systems AC2000: Versions 10.1 through 10.5 This vulnerability applies only to users who have implemented Single Sign On (SSO) and have installed the AC2000 Application Programming Interface (API)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-238-01" ;
    icsa:vendor "Controlled Electronic Management Systems Ltd (CEM) (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-238-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-238-02" ;
    dcterms:issued "2021-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Annke Network Video Recorder" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2021-32941" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-32941 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "N48PBB (NVR)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "This vulnerability affects following versions of N48PBB (NVR): V3.4.106 build 200422 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-238-02" ;
    icsa:vendor "Annke" ;
    icsa:year 2021 .

icsa-res:ICSA-21-238-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-238-03" ;
    dcterms:issued "2021-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAEnergie (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-32955; CVE-2021-38391; CVE-2021-44471; CVE-2021-32967; CVE-2021-44544; CVE-2021-33003; CVE-2021-32991; CVE-2021-38393; CVE-2021-38390; CVE-2021-32983; CVE-2021-31558; CVE-2021-23228; CVE-2022-0988" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-89; CWE-79; CWE-288; CWE-916; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2021-23228,
        cve-res:CVE-2021-31558,
        cve-res:CVE-2021-32955,
        cve-res:CVE-2021-32967,
        cve-res:CVE-2021-32983,
        cve-res:CVE-2021-32991,
        cve-res:CVE-2021-33003,
        cve-res:CVE-2021-38390,
        cve-res:CVE-2021-38391,
        cve-res:CVE-2021-38393,
        cve-res:CVE-2021-44471,
        cve-res:CVE-2021-44544,
        cve-res:CVE-2022-0988 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-79,
        cwe-res:CWE-89,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAEnergie" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DIAEnergie are affected: -------- Begin Update C Part 1 of 2 --------- DIAEnergie: All versions prior to 1.9 --------- End Update C Part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-238-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-238-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-238-04" ;
    dcterms:issued "2021-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DOPSoft (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-33019" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-33019 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DOPSoft are affected: DOPSoft Version 4.00.11 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-238-04" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-243-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-243-01" ;
    dcterms:issued "2021-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic Electronics KT-1" ;
    icsa:CVSSSeverity "Not Applicable" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-1104" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:hasCWE cwe-res:CWE-1104 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KT-1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an Ethernet-ready single-door controller; are affected: KT-1: Versions 2.09.02 and prior.; The following versions of KT-1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-243-01" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-243-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-243-02" ;
    dcterms:issued "2021-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "FANUC Robot Controllers" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-32998; CVE-2021-32996" ;
    icsa:cweNumber "CWE-192; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-32996,
        cve-res:CVE-2021-32998 ;
    icsa:hasCWE cwe-res:CWE-192,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "R-30iA and R-30iB series controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "v.7.63; v9.13; v8.30; v7.70 R-30iB; v9.36; v9.16; v8.13; v8.20; v7.40; The following products and versions are affected: R-30iA; R-30iB Mate; v 7.63; v8.23; R-30iB Mini Plus; v9: v9.10; v8.33; R-30iB Compact; v8: v8.10; v9.30; v7.43; R-30iA Mate; v7: v7.20; R-30iB Compact Plus; v7.50; v8.26; v8.36 R-30iB Plus; R-30iB Mate Plus; v9.40.; v7.30" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-243-02" ;
    icsa:vendor "FANUC" ;
    icsa:year 2021 .

icsa-res:ICSA-21-245-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-245-01" ;
    dcterms:issued "2021-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Sensormatic Electronics Illustra" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-3156" ;
    icsa:cweNumber "CWE-193" ;
    icsa:hasCVE cve-res:CVE-2021-3156 ;
    icsa:hasCWE cwe-res:CWE-193 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Sensormatic Electronics Illustra" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions prior to 1.9.4 Pro 2; All versions prior to 1.4.0.; Johnson Controls reports this vulnerability affects the following Sensormatic Electronics Illustra camera systems: Pro Gen 3; All versions prior to 2.8.0 Flex Gen 2; All versions Insight" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-245-01" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-245-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-245-02" ;
    dcterms:issued "2021-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "JTEKT TOYOPUC Products" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-33011" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2021-33011 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JTEKT TOYOPUC Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of these TOYOPUC products are affected: TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions PC10GE TCC-6464: All versions PC10P TCC-6372: All versions PC10P-DP TCC-6726: All versions PC10P-DP-IO TCC-6752: All versions PC10B-P TCC-6373: All versions PC10B TCC-1021: All versions PC10B-E/C TCU-6521: All versions PC10E TCC-4637: All versions PC10PE TCC-1101: All versions PC10PE-1616P TCC-1102: All versions EF10 TCU-6982: All versions TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions Plus EX TCU-6741: All versions Plus EX2 TCU-6858: All versions Plus EFR TCU-6743: All versions Plus EFR2 TCU-6859: All versions Plus 2P-EFR TCU-6929: All versions Plus BUS-EX TCU-6900: All versions TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions 2PORT-EFR THU-6404: All versions TOYOPUC-Nano Series Nano 10GX TUC-1157: All versions Nano CPU TUC-6941: All versions Nano 2ET TUU-6949: All versions Nano Safety TUC-1085: All versions Nano Safety RS00IP TUU-1086: All versions Nano Safety RS01IP TUU-1087: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-245-02" ;
    icsa:vendor "JTEKT ELECTRONICS CORPORATION" ;
    icsa:year 2021 .

icsa-res:ICSA-21-245-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-245-03" ;
    dcterms:issued "2021-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-38408" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-38408 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "are affected: WebAccess: Versions 9.02 and prior.; The following versions of WebAccess; an HMI platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-245-03" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-250-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-250-01" ;
    dcterms:issued "2021-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series (Update B)" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20598; CVE-2021-20594; CVE-2021-20597" ;
    icsa:cweNumber "CWE-200; CWE-522; CWE-645" ;
    icsa:hasCVE cve-res:CVE-2021-20594,
        cve-res:CVE-2021-20597,
        cve-res:CVE-2021-20598 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-522,
        cwe-res:CWE-645 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series CPU Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports these vulnerabilities affect the following MELSEC products. Users may use the manual ( MELSEC iQ-R Module Configuration Manual \"Appendix 1 Checking Production Information and Firmware Version\" ) to learn how to check the firmware version: MELSEC iQ-R series Safety CPU R08SFCPU: Firmware versions \"26\" and prior (CVE-2021-20594 and CVE-2021-20597) MELSEC iQ-R series Safety CPU R16SFCPU: Firmware versions \"26\" and prior (CVE-2021-20594 and CVE-2021-20597) MELSEC iQ-R series Safety CPU R32SFCPU: Firmware versions \"26\" and prior (CVE-2021-20594 and CVE-2021-20597) MELSEC iQ-R series Safety CPU R120SFCPU: Firmware versions \"26\" and prior (CVE-2021-20594 and CVE-2021-20597) MELSEC iQ-R series Safety CPU R08SFCPU: all versions (CVE-2021-20598) MELSEC iQ-R series Safety CPU R16SFCPU: all versions (CVE-2021-20598) MELSEC iQ-R series Safety CPU R32SFCPU: all versions (CVE-2021-20598) MELSEC iQ-R series Safety CPU R120SFCPU: all versions (CVE-2021-20598) MELSEC iQ-R series SIL2 Process CPU R08PSFCPU: Firmware versions \"11\" and prior (CVE-2021-20594 and CVE-2021-20597) MELSEC iQ-R series SIL2 Process CPU R16PSFCPU: Firmware versions \"11\" and prior (CVE-2021-20594 and CVE-2021-20597) MELSEC iQ-R series SIL2 Process CPU R32PSFCPU: Firmware versions \"11\" and prior (CVE-2021-20594 and CVE-2021-20597) MELSEC iQ-R series SIL2 Process CPU R120PSFCPU: Firmware versions \"11\" and prior (CVE-2021-20594 and CVE-2021-20597) MELSEC iQ-R series SIL2 Process CPU R08PSFCPU: all versions (CVE-2021-20598) MELSEC iQ-R series SIL2 Process CPU R16PSFCPU: all versions (CVE-2021-20598) MELSEC iQ-R series SIL2 Process CPU R32PSFCPU: all versions (CVE-2021-20598) MELSEC iQ-R series SIL2 Process CPU R120PSFCPU: all versions (CVE-2021-20598)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-250-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-250-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-250-02" ;
    dcterms:issued "2021-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi ABB Power Grids System Data Manager" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-35526" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2021-35526 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Power Grids System Data Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of System Data Manager are affected: SDM600: All versions prior to 1.2 FP2 HF6 (Build Nr. 1.2.14002.257)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-250-02" ;
    icsa:vendor "Hitachi and ABB" ;
    icsa:year 2021 .

icsa-res:ICSA-21-252-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-252-01" ;
    dcterms:issued "2021-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PCS Portal" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-38410" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2021-38410 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PCS Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the AVEVA Software Platform Common Services (PCS) Portal are affected: PCS Versions 4.5.2; and 4.4.6 The following products ship a vulnerable version of the PCS Portal application and are affected: AVEVA System Platform 2020 R2 P01; 2020 R2; 4.5.1; 4.5.0; and 2020 AVEVA Work Tasks 2020 Update 1 AVEVA Work Tasks 2020 AVEVA Mobile Operator 2020 AVEVA Manufacturing Execution System 2020 AVEVA Batch Management 2020 AVEVA Enterprise Data Management 2021." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-252-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2021 .

icsa-res:ICSA-21-252-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-252-02" ;
    dcterms:issued "2021-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DOPSoft 2 (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-38404; CVE-2021-38402; CVE-2021-38406" ;
    icsa:cweNumber "CWE-122; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-38402,
        cve-res:CVE-2021-38404,
        cve-res:CVE-2021-38406 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DOPSoft 2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DOPSoft 2 are affected: DOPSoft 2: Version 2.00.07 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-252-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-252-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-252-03" ;
    dcterms:issued "2021-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Europe B.V. smartRTU and INEA ME-RTU" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-14927; CVE-2019-14930; CVE-2019-14929; CVE-2019-14931; CVE-2019-14925; CVE-2019-14928; CVE-2019-14926" ;
    icsa:cweNumber "CWE-79; CWE-276; CWE-284; CWE-78; CWE-798; CWE-256" ;
    icsa:hasCVE cve-res:CVE-2019-14925,
        cve-res:CVE-2019-14926,
        cve-res:CVE-2019-14927,
        cve-res:CVE-2019-14928,
        cve-res:CVE-2019-14929,
        cve-res:CVE-2019-14930,
        cve-res:CVE-2019-14931 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-276,
        cwe-res:CWE-284,
        cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "smartRTU and INEA ME-RTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: smartRTU and INEA ME-RTU: All firmware versions prior to Version 3.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-252-03" ;
    icsa:vendor "Mitsubishi Electric Europe B.V." ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-01" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digi PortServer TS 16" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Communications; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2021-38412" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2021-38412 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Digi PortServer TS 16" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following firmware versions of Digi PortServer TS 16 are affected: Firmware Version 82000684 Firmware Version 82000685." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-01" ;
    icsa:vendor "Digi International, Inc." ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-02" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Sensormatic Electronics KT-1" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27662" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2021-27662 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Sensormatic Electronics KT-1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following versions of KT-1 door controllers: Versions up to and including 3.01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-02" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-03" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Struxureware Data Center Expert" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-22794; CVE-2021-22795" ;
    icsa:cweNumber "CWE-22; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2021-22794,
        cve-res:CVE-2021-22795 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Struxureware Data Center Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Struxureware Data Center Expert Versions 7.8.1 and prior.; a monitoring software; The following versions of Struxureware Data Center Expert" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-04" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "3.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-37176" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-37176 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Simcenter Femap; are affected: Simcenter Femap v2020.2: All versions Simcenter Femap v2021.1: All versions.; a simulation application" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-05" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter STAR-CCM+ Viewer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-25665" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-25665 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter STAR-CCM+ Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Simcenter STAR-CCM+ Viewer; are affected: Simcenter STAR-CCM+ Viewer: All versions prior to 2021.2.1.; a simulation application" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-06" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CP (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-33716" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2021-33716 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a communication processor; The following versions of SIMATIC; are affected: SIMATIC CP 1543-1 (incl. SIPLUS variants): All versions prior to v3.0 --------- Begin Update A Part 1 of 2 --------- SIMATIC CP 1545-1: All versions prior to v1.1 --------- End Update A Part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-07" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens APOGEE and TALON" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27391" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2021-27391 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APOGEE and TALON" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: APOGEE MBC (PPC) (P2 Ethernet): v2.6.3 and newer APOGEE MEC (PPC) (P2 Ethernet): v2.6.3 and newer APOGEE PXC Compact (BACnet): All versions prior to v3.5.3 APOGEE PXC Compact (P2 Ethernet): v2.8 and newer APOGEE PXC Modular (BACnet): All versions prior to v3.5.3 APOGEE PXC Modular (P2 Ethernet): v2.8 and newer TALON TC Compact (BACnet): All versions prior to v3.5.3 TALON TC Modular (BACnet): All versions prior to v3.5.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-08" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-40354; CVE-2021-40356; CVE-2021-40355" ;
    icsa:cweNumber "CWE-611; CWE-639; CWE-267" ;
    icsa:hasCVE cve-res:CVE-2021-40354,
        cve-res:CVE-2021-40355,
        cve-res:CVE-2021-40356 ;
    icsa:hasCWE cwe-res:CWE-267,
        cwe-res:CWE-611,
        cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a virtualization platform; The following versions of Teamcenter; are affected: Teamcenter 12.4: All versions prior to 12.4.0.8 Teamcenter 13.0: All versions prior to 13.0.0.7 Teamcenter 13.1: All versions prior to 13.1.0.5 Teamcenter 13.2: All versions prior to 13.2.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-09" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens NX" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-37202; CVE-2021-37203" ;
    icsa:cweNumber "CWE-416; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-37202,
        cve-res:CVE-2021-37203 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of NX are affected: NX 1980 Series: All versions prior to v1984." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-10" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5 relays (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-33719; CVE-2021-33720" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2021-33719,
        cve-res:CVE-2021-33720 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5 relays" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIPROTEC 5 relays are affected: SIPROTEC 5 relays with CPU variants CP050: All versions prior to 8.80 SIPROTEC 5 relays with CPU variants CP100: All versions prior to 8.80 SIPROTEC 5 relays with CPU variants CP300: All versions prior to 8.80." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-11" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RFID" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-7461" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2020-7461 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RFID" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC RFID are affected: SIMATIC RF350M: All versions SIMATIC RF650M: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-12" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Server" ;
    icsa:CVSSScore "4.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-10941" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2019-10941 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINEMA Server; are affected: SINEMA Server: All versions prior to v14 SP3.; a network monitoring and management software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-13" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! CMR and SIMATIC RTU 3000" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-37186" ;
    icsa:cweNumber "CWE-330" ;
    icsa:hasCVE cve-res:CVE-2021-37186 ;
    icsa:hasCWE cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! CMR, SIMATIC RTU 3000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LOGO! controllers and SIMATIC monitors are affected: LOGO! CMR2020: All versions prior to v2.2 LOGO! CMR2040: All versions prior to v2.2 SIMATIC RTU 3000 family: All versions.; The following versions of LOGO! controllers and SIMATIC monitors are affected: LOGO! CMR2020 (6GK7142-7BX00-0AX0): All versions prior to v2.2 LOGO! CMR2040 (6GK7142-7EX00-0AX0): All versions prior to v2.2 SIMATIC RTU 3000 family: All versions SIMATIC RTU3010C (6NH3112-0BA00-0XX0): All versions prior to v4.0.9 SIMATIC RTU3030C (6NH3112-3BA00-0XX0): All versions prior to v4.0.9 SIMATIC RTU3031C (6NH3112-3BB00-0XX0): All versions prior to v4.0.9 SIMATIC RTU3041C (6NH3112-4BB00-0XX0): All versions prior to v4.0.9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-14" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2021-37201; CVE-2021-37200" ;
    icsa:cweNumber "CWE-22; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2021-37200,
        cve-res:CVE-2021-37201 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINEC NMS are affected: SINEC NMS: All versions prior to v1.0 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-15" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC NET CP Modules" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-33737" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2021-33737 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC NET CP Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a communication processor; are affected: SIMATIC CP 343-1 (incl. SIPLUS variants) all versions SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) all versions SIMATIC CP 343-1 ERPC all versions SIMATIC CP 343-1 Lean (incl. SIPLUS variants) all versions SIMATIC CP 443-1 (incl. SIPLUS variants) all versions SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) all versions.; The following versions of SIMATIC NET CP Modules" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-16" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5 (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-37206" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-37206 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIPROTEC 5 relays with CPU variants CP050: All versions prior to v8.80 SIPROTEC 5 relays with CPU variants CP100: All versions prior to v8.80; SIPROTEC 5 relays with CPU variants CP200: All versions; SIPROTEC 5 relays with CPU variants CP300: All versions prior to v8.80." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-17" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo CC Family" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2021-37181" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2021-37181 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo CC Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens danger management station products are affected: Cerberus DMS v4.0: All versions Cerberus DMS v4.1: All versions Cerberus DMS v4.2: All versions Cerberus DMS v5.0: All versions prior to v5.0 QU1 Desigo CC Compact v4.0: All versions Desigo CC Compact v4.1: All versions Desigo CC Compact v4.2: All versions Desigo CC Compact v5.0: All versions prior to v5.0 QU1 Desigo CC v4.0: All versions Desigo CC v4.1: All versions Desigo CC v4.2: All versions Desigo CC v5.0: All versions prior to v5.0 QU1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-18" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance OIS" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2021-31891" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2021-31891 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance OIS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following Siveillance OIS Building Management Systems products: Desigo CC: All versions with OIS Extension Module GMA-Manager: All versions with OIS running on Debian 9 or earlier Operation Scheduler: All versions with OIS running on Debian 9 or earlier Siveillance Control: All versions with OIS running on Debian 9 or earlier Siveillance Control Pro: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-18" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-19 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-19" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-37192; CVE-2021-37183; CVE-2021-37190; CVE-2021-37193; CVE-2021-37177; CVE-2021-37191" ;
    icsa:cweNumber "CWE-284; CWE-471; CWE-200; CWE-799" ;
    icsa:hasCVE cve-res:CVE-2021-37177,
        cve-res:CVE-2021-37183,
        cve-res:CVE-2021-37190,
        cve-res:CVE-2021-37191,
        cve-res:CVE-2021-37192,
        cve-res:CVE-2021-37193 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-471,
        cwe-res:CWE-799 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the vulnerability affects the following SINEMA Remote Connect Server products: SINEMA Remote Connect Server: All versions prior to V3.0 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-19" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-20 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-20" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! CMR and SIMATIC RTU 3000" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-3647" ;
    icsa:cweNumber "CWE-295; CWE-131" ;
    icsa:hasCVE cve-res:CVE-2020-3647 ;
    icsa:hasCWE cwe-res:CWE-131,
        cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! CMR and SIMATIC RTU 3000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LOGO! CMR and SIMATIC RTU 3000 are affected: LOGO! CMR2020 all versions prior to v2.2 LOGO! CMR2040 all versions prior to v2.2 SIMATIC RTU 3000 family all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-20" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-21 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-21" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-37184" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2021-37184 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an app and device management platform; The following versions of Industrial Edge; are affected: Industrial Edge Management: All versions prior to v1.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-21" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-22 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-22" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Active Workspace" ;
    icsa:CVSSScore "4.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-40357" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2021-40357 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Active Workspace" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Teamcenter Active Workspace v4.3: All versions prior to v4.3.10 Teamcenter Active Workspace v5.0: All versions prior to v5.0.8 Teamcenter Active Workspace v5.1: All versions prior to v5.1.5 Teamcenter Active Workspace v5.2: All versions prior to v5.2.1.; The following versions of Teamcenter Active Workspace; a product lifecycle management (PLM) system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-22" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-257-23 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-257-23" ;
    dcterms:issued "2021-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC and TIM" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-28397" ;
    icsa:cweNumber "CWE-863" ;
    icsa:hasCVE cve-res:CVE-2020-28397 ;
    icsa:hasCWE cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC and TIM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC Drive Controller family: All versions prior to v2.9.2 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions prior to v21.9 SIMATIC S7 PLCSIM Advanced: All versions higher than v2 and prior to v4 SIMATIC S7-1200 CPU family (incl. SIPLUS variants): Version 4.4 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions higher than v2.5 and prior to v2.9.2 SIMATIC S7-1500 Software Controller: All versions higher than v2.5 TIM 1531 IRC (incl. SIPLUS NET variants): Version 2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-257-23" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-259-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-259-01" ;
    dcterms:issued "2021-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-37175; CVE-2021-37173; CVE-2021-37174" ;
    icsa:cweNumber "CWE-250; CWE-269; CWE-280" ;
    icsa:hasCVE cve-res:CVE-2021-37173,
        cve-res:CVE-2021-37174,
        cve-res:CVE-2021-37175 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-269,
        cwe-res:CWE-280 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of RUGGEDCOM ROX are affected: RUGGEDCOM ROX MX5000: All versions prior to v2.14.1 RUGGEDCOM ROX RX1400: All versions prior to v2.14.1 RUGGEDCOM ROX RX1500: All versions prior to v2.14.1 RUGGEDCOM ROX RX1501: All versions prior to v2.14.1 RUGGEDCOM ROX RX1510: All versions prior to v2.14.1 RUGGEDCOM ROX RX1511: All versions prior to v2.14.1 RUGGEDCOM ROX RX1512: All versions prior to v2.14.1 RUGGEDCOM ROX RX1524: All versions prior to v2.14.1 RUGGEDCOM ROX RX1536: All versions prior to v2.14.1 RUGGEDCOM ROX RX5000: All versions prior to v2.14.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-259-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-259-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-259-02" ;
    dcterms:issued "2021-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure and SCADAPack" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-22797" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2021-22797 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure and SCADAPack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and versions are affected: EcoStruxure Control Expert: All versions; including former Unity Pro EcoStruxure Process Expert: All versions; including former HDCS SCADAPack RemoteConnect for x70: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-259-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-266-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-266-01" ;
    dcterms:issued "2021-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trane Symbio (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-38448" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2021-38448 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Symbio 700 and Symbio 800 controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Trane building automation products deployed on the following HVAC equipment are affected: Symbio 700: Odyssey Split Systems: All versions prior to v1.00.0023 Symbio 800: IntelliPak Rooftop Air Conditioner: All versions prior to v1.30.0008 Ascend Air-Cooled Chiller Model ACR: All versions prior to v1.10.0010 Agility Water-Cooled Chiller Model HDWA: All versions prior to v1.00.0010." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-266-01" ;
    icsa:vendor "Trane U.S. Inc." ;
    icsa:year 2021 .

icsa-res:ICSA-21-266-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-266-02" ;
    dcterms:issued "2021-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trane Tracer" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-38450" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2021-38450 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tracer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Trane building automation products: Tracer SC: All versions prior to v4.4 SP7 Tracer SC+: All versions prior to v5.5 SP3 Tracer Concierge: All versions prior to v5.5 SP3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-266-02" ;
    icsa:vendor "Trane" ;
    icsa:year 2021 .

icsa-res:ICSA-21-278-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-278-01" ;
    dcterms:issued "2021-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT and Tension Controller (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20605; CVE-2021-20604; CVE-2021-20603; CVE-2021-20602" ;
    icsa:cweNumber "CWE-755; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-20602,
        cve-res:CVE-2021-20603,
        cve-res:CVE-2021-20604,
        cve-res:CVE-2021-20605 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-755 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT and Tension Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Update A: Mitsubishi Electric PSIRT has informed CISA that further research has shown the vulnerabilities listed in this advisory do not impact the devices listed below. Mitsubishi Electric will be removing its vulnerability notice from its website on April 7; 2022. Any questions regarding this new information should be directed to Mitsubishi Electric [https://www.mitsubishielectric.com/fa/support/index.html] The following Mitsubishi Electric products are affected: GOT2000 Series GT21 Model GT2107-WTBD: All versions GT2107-WTSD: All versions GT2104-RTBD: All versions GT2104-PMBD: All versions GT2103-PMBD: All versions GOT SIMPLE Series GS21 Model GS2110-WTBD: All versions GS2107-WTBD: All versions GS2110-WTBD-N: All versions GS2107-WTBD-N: All versions Tension Controller LE7-40GU-L: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-278-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-278-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-278-02" ;
    dcterms:issued "2021-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson WirelessHART Gateway" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-38485; CVE-2021-42540; CVE-2021-42538; CVE-2021-42542; CVE-2021-42536; CVE-2021-42539" ;
    icsa:cweNumber "CWE-22; CWE-200; CWE-306; CWE-20; CWE-78; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2021-38485,
        cve-res:CVE-2021-42536,
        cve-res:CVE-2021-42538,
        cve-res:CVE-2021-42539,
        cve-res:CVE-2021-42540,
        cve-res:CVE-2021-42542 ;
    icsa:hasCWE cwe-res:CWE-123,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WirelessHART Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Emerson WirelessHART Gateway network communication devices are affected: WirelessHART 1410 Gateway: All versions prior to v4.7.94 WirelessHART 1410D Gateway: All versions prior to v4.7.94 WirelessHART 1420 Gateway: All versions prior to v4.7.94." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-278-02" ;
    icsa:vendor "Emerson" ;
    icsa:year 2021 .

icsa-res:ICSA-21-278-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-278-03" ;
    dcterms:issued "2021-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MXview Network Management Software" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2021-38458; CVE-2021-38456; CVE-2021-38452; CVE-2021-38460; CVE-2021-38454" ;
    icsa:cweNumber "CWE-22; CWE-284; CWE-74; CWE-259; CWE-523" ;
    icsa:hasCVE cve-res:CVE-2021-38452,
        cve-res:CVE-2021-38454,
        cve-res:CVE-2021-38456,
        cve-res:CVE-2021-38458,
        cve-res:CVE-2021-38460 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-259,
        cwe-res:CWE-284,
        cwe-res:CWE-523,
        cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MXview Network Management Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: MXview Network Management Software: Versions 3.x to 3.2.2.; The following versions of MXview; a network management software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-278-03" ;
    icsa:vendor "Moxa" ;
    icsa:year 2021 .

icsa-res:ICSA-21-278-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-278-04" ;
    dcterms:issued "2021-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Experion PKS and ACE Controllers" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-38399; CVE-2021-38397; CVE-2021-38395" ;
    icsa:cweNumber "CWE-434; CWE-23; CWE-74" ;
    icsa:hasCVE cve-res:CVE-2021-38395,
        cve-res:CVE-2021-38397,
        cve-res:CVE-2021-38399 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-434,
        cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Experion PKS and ACE Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: C200: All versions C200E: All versions C300 and ACE controllers: All versions.; The following versions of Experion PKS; a process control system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-278-04" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2021 .

icsa-res:ICSA-21-280-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-280-01" ;
    dcterms:issued "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision Server Bundle" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27664" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-27664 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls exacqVision Server Bundle" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Exacq Technologies exacqVision products are affected: exacqVision Web Service Version 21.06.11.0 or older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-280-01" ;
    icsa:vendor "Exacq Technologies Inc (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-280-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-280-02" ;
    dcterms:issued "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mobile Industrial Robots Vehicles and MiR Fleet Software" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2020-10279; CVE-2020-10280; CVE-2020-10278; CVE-2020-10271; CVE-2020-10277; CVE-2020-10272; CVE-2017-7184; CVE-2017-18255; CVE-2020-10276; CVE-2020-10273" ;
    icsa:cweNumber "CWE-668; CWE-306; CWE-276; CWE-239; CWE-284; CWE-190; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2017-18255,
        cve-res:CVE-2017-7184,
        cve-res:CVE-2020-10271,
        cve-res:CVE-2020-10272,
        cve-res:CVE-2020-10273,
        cve-res:CVE-2020-10276,
        cve-res:CVE-2020-10277,
        cve-res:CVE-2020-10278,
        cve-res:CVE-2020-10279,
        cve-res:CVE-2020-10280 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-239,
        cwe-res:CWE-276,
        cwe-res:CWE-284,
        cwe-res:CWE-306,
        cwe-res:CWE-311,
        cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MiR100, MiR200, MiR250, MiR500, MiR1000, MiR Fleet" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MiR reports the vulnerabilities affect the following products: MiR100; MiR250; MiR500; MiR200; MiR1000 in MiR Robot Software versions prior to 2.10.2.1 MiR Fleet in MiR Fleet Software versions prior to 2.10.2.1 NOTE: the MiR Hook and Shelf Carrier are not affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-280-02" ;
    icsa:vendor "Mobile Industrial Robots (MiR)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-280-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-280-03" ;
    dcterms:issued "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27665" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2021-27665 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls exacqVision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Exacq Technologies' exacqVision surveillance video software products are affected: exacqVision Server 32-bit: Versions 21.06.11.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-280-03" ;
    icsa:vendor "Exacq Technologies Inc (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-280-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-280-04" ;
    dcterms:issued "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series C Controller Module (Update B)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20600" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-20600 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series C Controller Module R12CCPU-V" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following modules of the MELSEC iQ-R Series C Controller Module are affected: --------- Begin Update B Part 1 of 2 --------- R12CCPU-V: All versions --------- End Update B Part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-280-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-280-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-280-05" ;
    dcterms:issued "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "InHand Networks IR615 Router (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-38484; CVE-2021-38474; CVE-2021-38462; CVE-2021-38468; CVE-2021-38466; CVE-2021-38472; CVE-2021-38476; CVE-2021-38480; CVE-2021-38482; CVE-2021-38486; CVE-2021-38470; CVE-2021-38478; CVE-2021-38464" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-307; CWE-79; CWE-204; CWE-521; CWE-326; CWE-78; CWE-285; CWE-1021" ;
    icsa:hasCVE cve-res:CVE-2021-38462,
        cve-res:CVE-2021-38464,
        cve-res:CVE-2021-38466,
        cve-res:CVE-2021-38468,
        cve-res:CVE-2021-38470,
        cve-res:CVE-2021-38472,
        cve-res:CVE-2021-38474,
        cve-res:CVE-2021-38476,
        cve-res:CVE-2021-38478,
        cve-res:CVE-2021-38480,
        cve-res:CVE-2021-38482,
        cve-res:CVE-2021-38484,
        cve-res:CVE-2021-38486 ;
    icsa:hasCWE cwe-res:CWE-1021,
        cwe-res:CWE-204,
        cwe-res:CWE-285,
        cwe-res:CWE-307,
        cwe-res:CWE-326,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-521,
        cwe-res:CWE-78,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IR615 Router" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the InHand Networks IR615 Router are affected: IR615 Router: Versions 2.3.0.r5417 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-280-05" ;
    icsa:vendor "InHand Networks" ;
    icsa:year 2021 .

icsa-res:ICSA-21-280-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-280-06" ;
    dcterms:issued "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation WinProladder" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-38434; CVE-2021-38426; CVE-2021-38436; CVE-2021-38430; CVE-2021-38442; CVE-2021-38438; CVE-2021-38440" ;
    icsa:cweNumber "CWE-194; CWE-416; CWE-787; CWE-121; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-38426,
        cve-res:CVE-2021-38430,
        cve-res:CVE-2021-38434,
        cve-res:CVE-2021-38436,
        cve-res:CVE-2021-38438,
        cve-res:CVE-2021-38440,
        cve-res:CVE-2021-38442 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-194,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinProladder" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a PLC programming software are affected: WinProladder: Versions 3.30 and prior.; The following versions of FATEK Automation WinProladder" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-280-06" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-280-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-280-07" ;
    dcterms:issued "2021-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation Communication Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-38432" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-38432 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Communication Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Communication Server are affected: Communication Server: Versions 1.13 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-280-07" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-285-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-285-01" ;
    dcterms:issued "2021-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess SCADA" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-38431" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2021-38431 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess SCADA" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "The following versions of WebAccess/SCADA; are affected: WebAccess/SCADA: Versions 9.0.3 and prior.; an HMI platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-285-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-285-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-285-02" ;
    dcterms:issued "2021-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-38389; CVE-2021-33023" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-33023,
        cve-res:CVE-2021-38389 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of WebAccess; are affected: WebAccess Versions 9.02 and prior.; an HMI platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-285-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-285-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-285-03" ;
    dcterms:issued "2021-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-22804; CVE-2021-22805; CVE-2021-22802; CVE-2021-22803" ;
    icsa:cweNumber "CWE-306; CWE-22; CWE-434; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2021-22802,
        cve-res:CVE-2021-22803,
        cve-res:CVE-2021-22804,
        cve-res:CVE-2021-22805 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of IGSS software are affected: IGSS Data Collector (dc.exe): v15.0.0.21243 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-285-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-287-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-287-01" ;
    dcterms:issued "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric CNM" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-22801" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-22801 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: ConneXium Network Manager: All versions.; ethernet network management software; The following versions of CNM" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-287-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-287-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-287-02" ;
    dcterms:issued "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Uffizio GPS Tracker" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2020-17483; CVE-2020-17484; CVE-2021-32929; CVE-2020-17485; CVE-2021-32927" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-79; CWE-284; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2020-17483,
        cve-res:CVE-2020-17484,
        cve-res:CVE-2020-17485,
        cve-res:CVE-2021-32927,
        cve-res:CVE-2021-32929 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-601,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GPS Tracker" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions of GPS Tracker software." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-287-02" ;
    icsa:vendor "Uffizio" ;
    icsa:year 2021 .

icsa-res:ICSA-21-287-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-287-03" ;
    dcterms:issued "2021-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series (Update B)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20599" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2021-20599 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series CPU Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the vulnerability affects the following MELSEC CPU Modules: MELSEC iQ-R series Safety CPU R08SFCPU: Firmware versions \"26\" and prior MELSEC iQ-R series Safety CPU R16SFCPU: Firmware versions \"26\" and prior MELSEC iQ-R series Safety CPU R32SFCPU: Firmware versions \"26\" and prior MELSEC iQ-R series Safety CPU R120SFCPU: Firmware versions \"26\" and prior MELSEC iQ-R series SIL2 Process CPU R08PSFCPU: Firmware versions \"11\" and prior MELSEC iQ-R series SIL2 Process CPU R16PSFCPU: Firmware versions \"11\" and prior MELSEC iQ-R series SIL2 Process CPU R32PSFCPU: Firmware versions \"11\" and prior MELSEC iQ-R series SIL2 Process CPU R120PSFCPU: Firmware versions \"11\" and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-287-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-287-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-287-04" ;
    dcterms:issued "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-37199" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2021-37199 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINUMERIK controllers are affected: SINUMERIK 808D: All versions SINUMERIK 828D: All versions prior to v4.95." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-287-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-287-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-287-05" ;
    dcterms:issued "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-33730; CVE-2021-33726; CVE-2021-33727; CVE-2021-33729; CVE-2021-33734; CVE-2021-33723; CVE-2021-33733; CVE-2021-33735; CVE-2021-33728; CVE-2021-33725; CVE-2021-33724; CVE-2021-33736; CVE-2021-33722; CVE-2021-33732; CVE-2021-33731" ;
    icsa:cweNumber "CWE-22; CWE-89; CWE-200; CWE-285; CWE-502" ;
    icsa:hasCVE cve-res:CVE-2021-33722,
        cve-res:CVE-2021-33723,
        cve-res:CVE-2021-33724,
        cve-res:CVE-2021-33725,
        cve-res:CVE-2021-33726,
        cve-res:CVE-2021-33727,
        cve-res:CVE-2021-33728,
        cve-res:CVE-2021-33729,
        cve-res:CVE-2021-33730,
        cve-res:CVE-2021-33731,
        cve-res:CVE-2021-33732,
        cve-res:CVE-2021-33733,
        cve-res:CVE-2021-33734,
        cve-res:CVE-2021-33735,
        cve-res:CVE-2021-33736 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-285,
        cwe-res:CWE-502,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SINEC NMS software are affected: SINEC NMS: Versions prior to v1.0 SP2 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-287-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-287-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-287-06" ;
    dcterms:issued "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-41537; CVE-2021-41540; CVE-2021-41535; CVE-2021-37202; CVE-2021-41533; CVE-2021-41538; CVE-2021-41539; CVE-2021-37203; CVE-2021-41536; CVE-2021-41534" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2021-37202,
        cve-res:CVE-2021-37203,
        cve-res:CVE-2021-41533,
        cve-res:CVE-2021-41534,
        cve-res:CVE-2021-41535,
        cve-res:CVE-2021-41536,
        cve-res:CVE-2021-41537,
        cve-res:CVE-2021-41538,
        cve-res:CVE-2021-41539,
        cve-res:CVE-2021-41540 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Solid Edge SE2021: All versions prior to SE2021MP8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-287-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-287-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-287-07" ;
    dcterms:issued "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-37718; CVE-2021-37725; CVE-2020-3771; CVE-2021-37716; CVE-2021-37722; CVE-2021-37723; CVE-2021-37717; CVE-2019-5318; CVE-2021-37724; CVE-2021-37731; CVE-2021-37721; CVE-2021-37728; CVE-2021-37733; CVE-2021-37720; CVE-2021-37729" ;
    icsa:cweNumber "CWE-22; CWE-352; CWE-120; CWE-77; CWE-78; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2019-5318,
        cve-res:CVE-2020-3771,
        cve-res:CVE-2021-37716,
        cve-res:CVE-2021-37717,
        cve-res:CVE-2021-37718,
        cve-res:CVE-2021-37720,
        cve-res:CVE-2021-37721,
        cve-res:CVE-2021-37722,
        cve-res:CVE-2021-37723,
        cve-res:CVE-2021-37724,
        cve-res:CVE-2021-37725,
        cve-res:CVE-2021-37728,
        cve-res:CVE-2021-37729,
        cve-res:CVE-2021-37731,
        cve-res:CVE-2021-37733 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-22,
        cwe-res:CWE-311,
        cwe-res:CWE-352,
        cwe-res:CWE-77,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2021-37718; are affected: SCALANCE W1750D: All versions prior to v8.7.1.3 --------- Begin Update A part 1 of 3 --------- SCALANCE W1750D: All version 8.7.1.9 and prior (Only affected by CVE-2019-5318) SCALANCE W1750D: All versions from 8.7.1.3 to 8.7.1.8 (Only affected by CVE-2019-5318; CVE-2021-37722; CVE-2021-37728) --------- End Update A part 1 of 3 ---------.; CVE-2021-37717; CVE-2021-37720; The following versions of SCALANCE W1750D; CVE-2021-37721; a software management platform; CVE-2020-37719" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-287-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-287-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-287-08" ;
    dcterms:issued "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX Devices" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-41546" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-41546 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of RUGGEDCOM ROX; are affected: RUGGEDCOM ROX MX5000: All versions prior to v2.14.1 RUGGEDCOM ROX RX1400: All versions prior to v2.14.1 RUGGEDCOM ROX RX1500: All versions prior to v2.14.1 RUGGEDCOM ROX RX1501: All versions prior to v2.14.1 RUGGEDCOM ROX RX1510: All versions prior to v2.14.1 RUGGEDCOM ROX RX1511: All versions prior to v2.14.1 RUGGEDCOM ROX RX1512: All versions prior to v2.14.1 RUGGEDCOM ROX RX1524: All versions prior to v2.14.1 RUGGEDCOM ROX RX1536: All versions prior to v2.14.1 RUGGEDCOM ROX RX5000: All versions prior to v2.14.1.; switches and serial-to-Ethernet devices" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-287-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-287-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-287-09" ;
    dcterms:issued "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Process Historian" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27395" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2021-27395 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Process Historian" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a long-term archive system; are affected: SIMATIC Process Historian 2013 and earlier: All versions SIMATIC Process Historian 2014: All versions prior to SP3 Update 6 SIMATIC Process Historian 2019: All versions SIMATIC Process Historian 2020: All versions.; The following versions of SIMATIC Process Historian" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-287-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-292-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-292-01" ;
    dcterms:issued "2021-10-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "AUVESY Versiondog" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-38467; CVE-2021-38463; CVE-2021-38475; CVE-2021-38451; CVE-2021-38479; CVE-2021-38465; CVE-2021-38449; CVE-2021-38469; CVE-2021-38453; CVE-2021-38457; CVE-2021-38461; CVE-2021-38473; CVE-2021-38471; CVE-2021-38481; CVE-2021-38459; CVE-2021-38477; CVE-2021-38455" ;
    icsa:cweNumber "CWE-434; CWE-732; CWE-89; CWE-15; CWE-416; CWE-427; CWE-321; CWE-787; CWE-284; CWE-294; CWE-20; CWE-73; CWE-119; CWE-125; CWE-400; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2021-38449,
        cve-res:CVE-2021-38451,
        cve-res:CVE-2021-38453,
        cve-res:CVE-2021-38455,
        cve-res:CVE-2021-38457,
        cve-res:CVE-2021-38459,
        cve-res:CVE-2021-38461,
        cve-res:CVE-2021-38463,
        cve-res:CVE-2021-38465,
        cve-res:CVE-2021-38467,
        cve-res:CVE-2021-38469,
        cve-res:CVE-2021-38471,
        cve-res:CVE-2021-38473,
        cve-res:CVE-2021-38475,
        cve-res:CVE-2021-38477,
        cve-res:CVE-2021-38479,
        cve-res:CVE-2021-38481 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-123,
        cwe-res:CWE-125,
        cwe-res:CWE-15,
        cwe-res:CWE-20,
        cwe-res:CWE-284,
        cwe-res:CWE-294,
        cwe-res:CWE-321,
        cwe-res:CWE-400,
        cwe-res:CWE-416,
        cwe-res:CWE-427,
        cwe-res:CWE-434,
        cwe-res:CWE-73,
        cwe-res:CWE-732,
        cwe-res:CWE-787,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Versiondog" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a data management software for automated production; are affected: Versiondog: All versions prior to v8.0.; The following versions of Versiondog" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-292-01" ;
    icsa:vendor "AUVESY" ;
    icsa:year 2021 .

icsa-res:ICSA-21-292-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-292-02" ;
    dcterms:issued "2021-10-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trane HVAC Systems Controls" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-42534" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-42534 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Trane HVAC Systems Controls" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is affected: Tracer SC: Firmware v3.8 and prior.; a device used to coordinate building controls; The following versions of Trane building automation products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-292-02" ;
    icsa:vendor "Trane" ;
    icsa:year 2021 .

icsa-res:ICSA-21-294-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-294-01" ;
    dcterms:issued "2021-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS GENESIS64 and Mitsubishi Electric MC Works64" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27041; CVE-2021-27040" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-27040,
        cve-res:CVE-2021-27041 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MC Works64" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "up to and including Version 4.04E).; The vulnerabilities affect the following HMI SCADA products: GENESIS64 (all versions up to and including 10.97) MC Works64 (all version of MC Works64" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-294-01" ;
    icsa:vendor "ICONICS, Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-294-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-294-02" ;
    dcterms:issued "2021-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIALink" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-38422; CVE-2021-38424; CVE-2021-38416; CVE-2021-38428; CVE-2021-38411; CVE-2021-38420; CVE-2021-38407; CVE-2021-38418; CVE-2021-38403; CVE-2021-38488" ;
    icsa:cweNumber "CWE-79; CWE-276; CWE-427; CWE-1236; CWE-312; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2021-38403,
        cve-res:CVE-2021-38407,
        cve-res:CVE-2021-38411,
        cve-res:CVE-2021-38416,
        cve-res:CVE-2021-38418,
        cve-res:CVE-2021-38420,
        cve-res:CVE-2021-38422,
        cve-res:CVE-2021-38424,
        cve-res:CVE-2021-38428,
        cve-res:CVE-2021-38488 ;
    icsa:hasCWE cwe-res:CWE-1236,
        cwe-res:CWE-276,
        cwe-res:CWE-312,
        cwe-res:CWE-319,
        cwe-res:CWE-427,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIALink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the DIALink industrial automation server are affected: DIALink: Versions 1.2.4.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-294-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-294-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-294-03" ;
    dcterms:issued "2021-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-27432" ;
    icsa:cweNumber "CWE-674" ;
    icsa:hasCVE cve-res:CVE-2021-27432 ;
    icsa:hasCWE cwe-res:CWE-674 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MC Works64 OPC UA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ICONICS and Mitsubishi Electric modules are affected in some third-party OPC Foundation products: GENESIS64: Versions 10.97 and prior Hyper Historian: Versions 10.97 and prior AnalytiX: Versions 10.97 and prior MobileHMI: Versions 10.97 and prior MC Works64: Versions 4.04E and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-294-03" ;
    icsa:vendor "ICONICS, Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-299-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-299-01" ;
    dcterms:issued "2021-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Tellus Lite V-Simulator and V-Server Lite" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-38409; CVE-2021-38419; CVE-2021-38413; CVE-2021-38415; CVE-2021-38401; CVE-2021-38421" ;
    icsa:cweNumber "CWE-824; CWE-822; CWE-122; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-38401,
        cve-res:CVE-2021-38409,
        cve-res:CVE-2021-38413,
        cve-res:CVE-2021-38415,
        cve-res:CVE-2021-38419,
        cve-res:CVE-2021-38421 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787,
        cwe-res:CWE-822,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tellus Lite V-Simulator and V-Server Lite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Fuji Electric remote monitoring and operation software products are affected: V-Server Lite: Versions prior to v4.0.12.0 Tellus Lite V-Simulator: Versions prior to v4.0.12.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-299-01" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-301-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-301-01" ;
    dcterms:issued "2021-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic Electronics victor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-19492" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-19492 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "victor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a video management system; are affected: victor: Versions 5.7 and prior.; The following versions of victor" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-301-01" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-306-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-306-01" ;
    dcterms:issued "2021-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic Electronics VideoEdge" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-11023" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-11023 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VideoEdge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: VideoEdge: All versions prior to v5.7.1.; The following versions of VideoEdge; a network video recorder" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-306-01" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-308-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-308-01" ;
    dcterms:issued "2021-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "VISAM VBASE Editor" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-34803; CVE-2021-42535; CVE-2018-14333; CVE-2019-18988; CVE-2018-16550; CVE-2005-2475; CVE-2021-38417; CVE-2021-42537; CVE-2020-13699" ;
    icsa:cweNumber "CWE-284; CWE-79; CWE-611; CWE-1035" ;
    icsa:hasCVE cve-res:CVE-2005-2475,
        cve-res:CVE-2018-14333,
        cve-res:CVE-2018-16550,
        cve-res:CVE-2019-18988,
        cve-res:CVE-2020-13699,
        cve-res:CVE-2021-34803,
        cve-res:CVE-2021-38417,
        cve-res:CVE-2021-42535,
        cve-res:CVE-2021-42537 ;
    icsa:hasCWE cwe-res:CWE-1035,
        cwe-res:CWE-284,
        cwe-res:CWE-611,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VBASE Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of VISAM VBASE Editor; an automation platform; are affected: VBASE Pro-RT/ Server-RT (Web Remote): Version 11.6.0.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-308-01" ;
    icsa:vendor "VISAM" ;
    icsa:year 2021 .

icsa-res:ICSA-21-308-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-308-02" ;
    dcterms:issued "2021-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "AzeoTech DAQFactory" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-42701; CVE-2021-42543; CVE-2021-42698; CVE-2021-42699" ;
    icsa:cweNumber "CWE-502; CWE-319; CWE-242; CWE-471" ;
    icsa:hasCVE cve-res:CVE-2021-42543,
        cve-res:CVE-2021-42698,
        cve-res:CVE-2021-42699,
        cve-res:CVE-2021-42701 ;
    icsa:hasCWE cwe-res:CWE-242,
        cwe-res:CWE-319,
        cwe-res:CWE-471,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DAQFactory" ;
    icsa:productDistribution "United States, Europe" ;
    icsa:productsAffected "are affected: DAQFactory: All Versions 18.1 Build 2347 and prior.; The following versions of DAQFactory; a software and application development platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-308-02" ;
    icsa:vendor "AzeoTech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-313-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-313-01" ;
    dcterms:issued "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric NMC cards and Embedded Devices" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-22814; CVE-2021-22813; CVE-2021-22815; CVE-2021-22810; CVE-2021-22811; CVE-2021-22812" ;
    icsa:cweNumber "CWE-79; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2021-22810,
        cve-res:CVE-2021-22811,
        cve-res:CVE-2021-22812,
        cve-res:CVE-2021-22813,
        cve-res:CVE-2021-22814,
        cve-res:CVE-2021-22815 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NMC cards and Embedded Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Symmetra; including Symmetra PX 250/500 (SYPX) Network Management Card 2 (NMC2): NMC2 AOS v6.9.6 and prior 3-Phase Uninterruptible Power Supply (UPS) using NMC2 including Symmetra PX 48/96/100/160 kW UPS (PX2); GVXSA; GVMSA; GFC; including Smart-UPS; Gutor (SXW; and Galaxy 3500 with Network Management Card 3 (NMC3): NMC3 AOS v1.4.2.1 and prior APC Power Distribution Products APC Rack Power Distribution Units (PDU) using NMC2: NMC2 AOS v6.9.6 and prior APC Rack Power Distribution Units (PDU) using NMC3: NMC3 AOS v1.4.0 and prior APC 3-Phase Power Distribution Products using NMC2: NMC2 AOS v6.9.6 and prior Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P): NMC2 AOS v6.9.6 and prior Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU): NMC2 AOS v6.9.6 and prior Network Management Card 2 for Modular 150/175kVA PDU (XRDP): NMC2 AOS v6.9.6 and prior Network Management Card 2 for 400 and 500 kVA (PMM): NMC2 AOS v6.9.6 and prior Network Management Card 2 for Modular PDU (XRDP2G): NMC2 AOS v6.9.6 and prior Rack Automatic Transfer Switches (ATS): NMC2 AOS v6.9.6 and prior Environmental Monitoring Environmental Monitoring Unit with embedded NMC2 (NB250) NetBotz NBRK0250: NMC2 AOS v6.9.6 and prior Cooling Products Network Management Card 2 (NMC2) Cooling Products: NMC2 AOS v6.9.6 and prior Battery Management Products Network Management Card 2 (NMC2) AP9922 Battery Management System (BM4): NMC2 AOS v6.9.6 and prior.; see Schneider Electric's Security Notification SEVD-2021-313-03 for more details on the affected products: Uninterruptible Power Supply (UPS) Products 1-Phase Uninterruptible Power Supply (UPS) using NMC2; GVX); G7K; GVXTS; G9KCHU): NMC2 AOS v6.9.6 and prior 1-Phase Uninterruptible Power Supply (UPS) using NMC3 including Smart-UPS; The following products are affected; and Galaxy 3500 with Network Management Card 2 (NMC2): NMC2 AOS v6.9.8 and prior 3-Phase Uninterruptible Power Supply (UPS) using NMC2; and Galaxy (GVMTS; Symmetra PX 20/40 kW UPS (SY3P)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-313-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-313-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-313-02" ;
    dcterms:issued "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric GUIcon" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22807; CVE-2021-22808; CVE-2021-22809" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-22807,
        cve-res:CVE-2021-22808,
        cve-res:CVE-2021-22809 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GUIcon" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of GUIcon software are affected GUIcon: Versions 2.0 (Build 683.003) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-313-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-313-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-313-03" ;
    dcterms:issued "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Nucleus RTOS TCP/IP Stack" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-31888; CVE-2021-31886; CVE-2021-31344; CVE-2021-31887; CVE-2021-31890; CVE-2021-31883; CVE-2021-31884; CVE-2021-31882; CVE-2021-31889; CVE-2021-31881; CVE-2021-31345; CVE-2021-31885; CVE-2021-31346" ;
    icsa:cweNumber "CWE-191; CWE-1284; CWE-170; CWE-843; CWE-240; CWE-119; CWE-805; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-31344,
        cve-res:CVE-2021-31345,
        cve-res:CVE-2021-31346,
        cve-res:CVE-2021-31881,
        cve-res:CVE-2021-31882,
        cve-res:CVE-2021-31883,
        cve-res:CVE-2021-31884,
        cve-res:CVE-2021-31885,
        cve-res:CVE-2021-31886,
        cve-res:CVE-2021-31887,
        cve-res:CVE-2021-31888,
        cve-res:CVE-2021-31889,
        cve-res:CVE-2021-31890 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-1284,
        cwe-res:CWE-170,
        cwe-res:CWE-191,
        cwe-res:CWE-240,
        cwe-res:CWE-805,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nucleus RTOS TCP/IP Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and versions of the Nucleus RTOS are affected: Capital VSTAR: All versions Nucleus NET: All versions Nucleus ReadyStart v3: All versions prior to v2017.02.4 Nucleus ReadyStart v4: All versions prior to v4.1.1 Nucleus Source Code: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-313-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-313-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-313-04" ;
    dcterms:issued "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myDESIGNER" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-43555" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2021-43555 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "myDESIGNER" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of mySCADA myDESIGNER project creation software are affected: myDESIGNER: Versions 8.20.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-313-04" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2021 .

icsa-res:ICSA-21-313-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-313-05" ;
    dcterms:issued "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Vision" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-43553; CVE-2021-43551" ;
    icsa:cweNumber "CWE-79; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2021-43551,
        cve-res:CVE-2021-43553 ;
    icsa:hasCWE cwe-res:CWE-79,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OSIsoft PI Vision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI Vision; are affected: PI:Vision: All versions prior to 2021.; a data management platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-313-05" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2021 .

icsa-res:ICSA-21-313-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-313-06" ;
    dcterms:issued "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSIsoft PI Web API" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-43549" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-43549 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OSIsoft PI Web API" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI Web API; a data management platform; are affected: All versions of PI Web API 2019 SPI and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-313-06" ;
    icsa:vendor "OSIsoft" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-01" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON PLC Editor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-42705; CVE-2021-42707" ;
    icsa:cweNumber "CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-42705,
        cve-res:CVE-2021-42707 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLC Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PLC Editor ladder logic software are affected: PLC Editor: Versions 1.3.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-01" ;
    icsa:vendor "WECON" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-02" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Multiple Data Distribution Service (DDS) Implementations (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Multiple" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-38443; CVE-2021-43547; CVE-2021-38429; CVE-2021-38445; CVE-2021-38447; CVE-2021-38433; CVE-2021-38441; CVE-2021-38435; CVE-2021-38427; CVE-2021-38487; CVE-2021-38423; CVE-2021-38425; CVE-2021-38439" ;
    icsa:cweNumber "CWE-122; CWE-228; CWE-131; CWE-121; CWE-405; CWE-130; CWE-406; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2021-38423,
        cve-res:CVE-2021-38425,
        cve-res:CVE-2021-38427,
        cve-res:CVE-2021-38429,
        cve-res:CVE-2021-38433,
        cve-res:CVE-2021-38435,
        cve-res:CVE-2021-38439,
        cve-res:CVE-2021-38441,
        cve-res:CVE-2021-38443,
        cve-res:CVE-2021-38445,
        cve-res:CVE-2021-38447,
        cve-res:CVE-2021-38487,
        cve-res:CVE-2021-43547 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-123,
        cwe-res:CWE-130,
        cwe-res:CWE-131,
        cwe-res:CWE-228,
        cwe-res:CWE-405,
        cwe-res:CWE-406 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CycloneDDS, FastDDS, GurumDDS, OpenDDS, Connext DDS Professional, Connext DDS Secure, Connext DDS Micro, CoreDX DDS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Inc. (OCI) OpenDDS: All versions prior to 3.18.1 Real-Time Innovations (RTI) Connext DDS Professional and Connext DDS Secure: Versions 4.2x to 6.1.0 RTI Connext DDS Micro: Versions 3.0.0 and later TwinOaks Computing CoreDX DDS: All versions prior to 5.9.1.; The following implementations of OMG DDS are affected: Eclipse CycloneDDS: All versions prior to 0.8.0 eProsima Fast DDS: All versions prior to 2.4.0 (#2269) GurumNetworks GurumDDS: All versions Object Computing" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-02" ;
    icsa:vendor "Eclipse, eProsima, GurumNetworks, Object Computing, Inc. (OCI), Real-Time Innovations (RTI), TwinOaks Computing" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-03" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC (Update E)" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-40359; CVE-2021-40358; CVE-2021-40364" ;
    icsa:cweNumber "CWE-532; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2021-40358,
        cve-res:CVE-2021-40359,
        cve-res:CVE-2021-40364 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affects the following SIMATIC SCADA HMI system products: SIMATIC PCS 7 v8.2 and earlier: All versions SIMATIC PCS 7 v9.0: All versions SIMATIC PCS 7 v9.1: All versions SIMATIC WinCC v7.4 and earlier: All versions SIMATIC WinCC v7.5: All versions prior to v7.5 SP2 Update 5 SIMATIC WinCC v15 and earlier: All versions SIMATIC WinCC v16: All versions SIMATIC WinCC v17: All versions.; Siemens reports these vulnerabilities affects the following SIMATIC SCADA HMI system products: OpenPCSPCS 7 v8.2: All versions OpenPCS PCS 7 v9.0: All versions prior to v9.0 Upd4 OpenPCS PCS 7 v9.1: All versions SIMATIC BATCH v8.2: All versions SIMATIC BATCH v9.0: All versions SIMATIC BATCH v9.1: All versions SIMATIC NET PC Software v14: All versions SIMATIC NET PC Software v15: All versions --------- Begin Update E Part 1 of 2 --------- SIMATIC NET PC Software v16: All versions prior to v16 Update 6 --------- End Update E Part 1 of 2 --------- SIMATIC NET PC Software v17: All versions prior to v17 SP1 SIMATIC PCS 7 v8.2: All versions SIMATIC PCS 7 v9.0: All versions SIMATIC PCS 7 V9.1: All versions prior to v9.1 SP1 SIMATIC Route Control v8.2: All versions SIMATIC Route Control v9.0: All versions SIMATIC Route Control v9.1: All versions SIMATIC WinCC v7.4 and earlier: All versions prior to v7.4 SP1 Update 19 SIMATIC WinCC v7.5: All versions prior to v7.5 SP2 Update 5 SIMATIC WinCC v15 and earlier: All versions prior to v15 SP1 Update 7 SIMATIC WinCC v16: All versions prior to v16 Update 5 SIMATIC WinCC v17: All versions prior to v17 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-04" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix" ;
    icsa:CVSSScore "4.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-42015" ;
    icsa:cweNumber "CWE-525" ;
    icsa:hasCVE cve-res:CVE-2021-42015 ;
    icsa:hasCWE cwe-res:CWE-525 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mendix; are affected: Mendix Applications using Mendix 7: All versions prior to v7.23.26 Mendix Applications using Mendix 8: All versions prior to v8.18.12 Mendix Applications using Mendix 9: All versions prior to v9.6.1.; an application platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-05" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Studio Pro" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-42026; CVE-2021-42025" ;
    icsa:cweNumber "CWE-863" ;
    icsa:hasCVE cve-res:CVE-2021-42025,
        cve-res:CVE-2021-42026 ;
    icsa:hasCWE cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Studio Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following Mendix products: Mendix Applications using Mendix 8: All versions prior to v8.18.13 Mendix Applications using Mendix 9: All versions prior to v9.6.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-06" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-37735; CVE-2021-37732; CVE-2021-37734; CVE-2021-37727; CVE-2021-37730; CVE-2021-37726" ;
    icsa:cweNumber "CWE-119; CWE-22; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2021-37726,
        cve-res:CVE-2021-37727,
        cve-res:CVE-2021-37730,
        cve-res:CVE-2021-37732,
        cve-res:CVE-2021-37734,
        cve-res:CVE-2021-37735 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-22,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SCALANCE W1750D: All versions prior to v8.7.1.3 --------- Begin Update A part 1 of 3 --------- SCALANCE W1750D: Versions from 8.7.1.3 to those prior to v8.7.1.9 (only affected by CVE-2021-37727; and CVE-2021-37734) --------- End Update A part 1 of 3 ---------.; The following versions of SCALANCE W1750D; CVE-2021-37730; a wireless access point" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-07" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Nucleus RTOS-based APOGEE and TALON Products (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-31888; CVE-2021-31886; CVE-2021-31344; CVE-2021-31887; CVE-2021-31890; CVE-2021-31883; CVE-2021-31884; CVE-2021-31882; CVE-2021-31889; CVE-2021-31881; CVE-2021-31345; CVE-2021-31885; CVE-2021-31346" ;
    icsa:cweNumber "CWE-191; CWE-1284; CWE-170; CWE-843; CWE-240; CWE-119; CWE-805; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-31344,
        cve-res:CVE-2021-31345,
        cve-res:CVE-2021-31346,
        cve-res:CVE-2021-31881,
        cve-res:CVE-2021-31882,
        cve-res:CVE-2021-31883,
        cve-res:CVE-2021-31884,
        cve-res:CVE-2021-31885,
        cve-res:CVE-2021-31886,
        cve-res:CVE-2021-31887,
        cve-res:CVE-2021-31888,
        cve-res:CVE-2021-31889,
        cve-res:CVE-2021-31890 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-1284,
        cwe-res:CWE-170,
        cwe-res:CWE-191,
        cwe-res:CWE-240,
        cwe-res:CWE-805,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nucleus RTOS based APOGEE and TALON Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: APOGEE MBC (PPC) (BACnet): All versions APOGEE MBC (PPC) (P2 Ethernet): All versions APOGEE MEC (PPC) (BACnet): All versions APOGEE MEC (PPC) (P2 Ethernet): All versions Begin Update C: APOGEE PXC Compact (BACnet): All versions prior to v3.5.4 APOGEE PXC Compact (P2 Ethernet): All versions prior to v2.8.19 APOGEE PXC Modular (BACnet): All versions prior to v3.5.4 APOGEE PXC Modular (P2 Ethernet): All versions prior to v2.8.19 Desigo PXC00-E.D: Versions 2.3 and later and prior to v6.30.016 Desigo PXC00-U: Versions 2.3 and later and prior to v6.30.016 Desigo PXC001-E.D: Versions 2.3 and later and prior to v6.30.016 Desigo PXC12-E.D: Versions 2.3 and later and prior to v6.30.016 Desigo PXC22-E.D: Versions 2.3 and later and prior to v6.30.016 Desigo PXC22.1-E.D: Versions 2.3 and later and prior to v6.30.016 Desigo PXC36.1-E.D: Versions 2.3 and later and prior to v6.30.016 Desigo PXC50-E.D: Versions 2.3 and later and prior to v6.30.016 Desigo PXC64-U: Versions 2.3 and later and prior to v6.30.016 Desigo PXC100-E.D: Versions 2.3 and later and prior to v6.30.016 Desigo PXC128-U: Versions 2.3 and later and prior to v6.30.016 Desigo PXC200-E.D: Versions 2.3 and later and prior to v6.30.016 Desigo PXM20-E: Versions 2.3 and later and prior to v6.30.016 TALON TC Compact (BACnet): All versions prior to v3.5.4 TALON TC Modular (BACnet): All versions prior to v3.5.4 End Update C:; direct digital control (DDC) devices; The following Nucleus RTOS based APOGEE and TALON Products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-08" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens NX OBJ Translator" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-41538; CVE-2021-41535" ;
    icsa:cweNumber "CWE-416; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2021-41535,
        cve-res:CVE-2021-41538 ;
    icsa:hasCWE cwe-res:CWE-416,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NX OBJ Translator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affects the following NX products: NX 1953 Series: All versions prior to v1973.3700 NX 1980 Series: All versions prior to v1988." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-09" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Climatix POL909 (Update A)" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-40366" ;
    icsa:cweNumber "CWE-311" ;
    icsa:hasCVE cve-res:CVE-2021-40366 ;
    icsa:hasCWE cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Climatix POL909" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Climatix POL909 (AWM module): All versions prior to v11.34. Update: Climatix POL909 (AWB module): All versions prior to v11.34; The following versions of Climatix POL909 (AWM module); an advanced web module" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-10" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SENTRON powermanager" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-37207" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2021-37207 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SENTRON powermanager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a power monitoring software to analyze energy consumption; The following versions of Siemens SENTRON powermanager; are affected: SENTRON powermanager Version 3: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-11" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RTLS Locating Manager" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-10054; CVE-2020-10052; CVE-2020-10053" ;
    icsa:cweNumber "CWE-532; CWE-20; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2020-10052,
        cve-res:CVE-2020-10053,
        cve-res:CVE-2020-10054 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-312,
        cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RTLS Locating Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SIMATIC RTLS Locating Manager; is affected: All versions prior to v2.12.; a scalable digital twin locating system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-12" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens NX JT Translator" ;
    icsa:CVSSScore "3.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-41534; CVE-2021-41533" ;
    icsa:cweNumber "CWE-125; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2021-41533,
        cve-res:CVE-2021-41534 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NX JT Translator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following NX design software products: NX 1980 Series: All versions prior to v1984." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-315-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-315-13" ;
    dcterms:issued "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Video DLNA Server" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2021-42021" ;
    icsa:cweNumber "CWE-26" ;
    icsa:hasCVE cve-res:CVE-2021-42021 ;
    icsa:hasCWE cwe-res:CWE-26 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance Video DLNA Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a video DLNA server; The following versions of Siveillance Video DLNA Server; are affected: Siveillance Video DLNA Server 2019 R1: All versions Siveillance Video DLNA Server 2019 R2: All versions Siveillance Video DLNA Server 2019 R3: All versions Siveillance Video DLNA Server 2020 R1: All versions Siveillance Video DLNA Server 2020 R2: All versions Siveillance Video DLNA Server 2020 R3: All versions Siveillance Video DLNA Server 2021 R1: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-315-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-320-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-320-01" ;
    dcterms:issued "2021-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation WinProladder" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-43556; CVE-2021-43554" ;
    icsa:cweNumber "CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-43554,
        cve-res:CVE-2021-43556 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WinProladder" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of WinProladder; are affected: WinProladder: Versions 3.30_24518 and prior.; a PLC programming software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-320-01" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-320-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-320-02" ;
    dcterms:issued "2021-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20601" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-20601 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric human-machine interface (HMI) products are affected: GOT2000 series GT27 model: All versions GT25 model: All versions GT23 model: All versions GT21 model: All versions GOT SIMPLE series GS21 model: All versions GT SoftGOT2000: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-320-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-334-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-334-01" ;
    dcterms:issued "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Xylem Aanderaa GeoView" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-41063" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2021-41063 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Aanderaa GeoView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a web-based data display; The following versions of Aanderaa GeoView; are affected: AADI GeoView Webservice: All versions prior to v2.1.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-334-01" ;
    icsa:vendor "Xylem Inc" ;
    icsa:year 2021 .

icsa-res:ICSA-21-334-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-334-02" ;
    dcterms:issued "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC and MELIPC Series (Update G)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20611; CVE-2021-20610; CVE-2021-20609" ;
    icsa:cweNumber "CWE-20; CWE-130; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-20609,
        cve-res:CVE-2021-20610,
        cve-res:CVE-2021-20611 ;
    icsa:hasCWE cwe-res:CWE-130,
        cwe-res:CWE-20,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC and MELIPC Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "L26CPU-(P)BT: The first 5 digits of serial No. 23121 and prior MELIPC Series MI5122-VW: Firmware Versions 05 and prior; Q04/06/10/13/20/26/50/100UDEHCPU: The first 5 digits of serial No. 23121 and prior MELSEC Q Series Q03/04/06/13/26UDVCPU: The first 5 digits of serial No. 23071 and prior MELSEC Q Series Q04/06/13/26UDPVCPU: The first 5 digits of serial No. 23071 and prior MELSEC Q Series Q12DCCPU-V; Q24/26DHCCPU-LS: The first 5 digits of serial No. 24031 and prior MELSEC Q Series MR-MQ100: Operating system software version F and prior MELSEC Q Series Q172/173DCPU-S1: Operating system software version W and prior MELSEC Q Series Q172/173DSCPU: Operating system software version Y and prior MELSEC Q Series Q170MCPU: Operating system software version W and prior MELSEC Q Series Q170MSCPU(-S1): Operating system software version Y and prior MELSEC L Series L02/06/26CPU(-P); The following versions of MELSEC series CPU modules and MELIPC Series Industrial Computers are affected: MELSEC iQ-R Series R00/01/02CPU: Firmware Versions 24 and prior MELSEC iQ-R Series R04/08/16/32/120(EN)CPU: Firmware Versions 57 and prior MELSEC iQ-R Series R08/16/32/120SFCPU: Firmware Versions 26 and prior MELSEC iQ-R Series R08/16/32/120PCPU: Firmware Versions 29 and prior MELSEC iQ-R Series R08/16/32/120PSFCPU: Firmware Versions 08 and prior MELSEC iQ-R Series R16/32/64MTCPU: Operating system software Versions 23 and prior MELSEC iQ-R Series R12CCPU-V: Firmware Versions 16 and prior MELSEC Q Series Q03UDECPU; The following versions of MELSEC series CPU modules and MELIPC Series Industrial Computers are affected: MELSEC iQ-R Series R00/01/02CPU: Firmware Versions 24 and prior MELSEC iQ-R Series R04/08/16/32/120(EN)CPU: Firmware Versions 57 and prior ---------- Begin Update F Part 1 of 2 ---------- MELSEC iQ-R Series R08/16/32/120SFCPU: Firmware Versions 26 and prior ---------- End Update F Part 1 of 2 ---------- MELSEC iQ-R Series R08/16/32/120PCPU: Firmware Versions 29 and prior MELSEC iQ-R Series R08/16/32/120PSFCPU: Firmware Versions 08 and prior MELSEC iQ-R Series R16/32/64MTCPU: Operating system software Versions 23 and prior MELSEC iQ-R Series R12CCPU-V: Firmware Versions 16 and prior MELSEC Q Series Q03UDECPU; Q24DHCCPU-V(G); Q24/26DHCCPU-LS: The first 5 digits of serial No. 24031 and prior MELSEC Q Series MR-MQ100: Operating system software version F and prior MELSEC Q Series Q172/173DCPU-S1: Operating system software version W and prior MELSEC Q Series Q172/173DSCPU: All versions MELSEC Q Series Q170MCPU: Operating system software version W and prior MELSEC Q Series Q170MSCPU(-S1): All versions MELSEC L Series L02/06/26CPU(-P)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-334-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-334-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-334-03" ;
    dcterms:issued "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-43982" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-43982 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; are affected: CNCSoft: Version 1.01.30 and prior.; The following versions of CNCSoft" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-334-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-334-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-334-04" ;
    dcterms:issued "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls CEM Systems AC2000" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-3156" ;
    icsa:cweNumber "CWE-193" ;
    icsa:hasCVE cve-res:CVE-2021-3156 ;
    icsa:hasCWE cwe-res:CWE-193 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CEM Systems AC2000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: CEM Systems AC2000: All versions prior to Version 10.6.; an access control system; The following versions of Controlled Electronic Management Systems Ltd. CEM Systems AC2000" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-334-04" ;
    icsa:vendor "Controlled Electronic Management Systems Ltd (CEM) (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-334-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-334-05" ;
    dcterms:issued "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Retail Operations and CSB Software" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-35528" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2021-35528 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Retail Operations and CSB Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports the following versions of Retail Operations and CSB software systems are affected: Retail Operations: Version 5.7.3 and prior Counterparty Settlement and Billing (CSB): Version 5.7.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-334-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-336-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-336-01" ;
    dcterms:issued "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SESU" ;
    icsa:CVSSScore "3.8"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-22799" ;
    icsa:cweNumber "CWE-331" ;
    icsa:hasCVE cve-res:CVE-2021-22799 ;
    icsa:hasCWE cwe-res:CWE-331 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SESU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "but this is not a complete list of products. Some of the products might not deliver SESU as part of the product package; however; The following versions of Schneider Electric Software Update; are affected: Schneider Electric Software Update: v2.3.0 through v2.5.1 Schneider Electric Software Update is used by the following products: EcoStruxure Augmented Operator Advisor EcoStruxure Control Expert (formerly known as Unity Pro) EcoStruxure Process Expert (formerly known as EcoStruxure Hybrid Distributed Control System) EcoStruxure Machine Expert (formerly known as SoMachine or SoMachine Motion) EcoStruxure Machine Expert Basic EcoStruxure Operator Terminal Expert EcoStruxure Plant Builder EcoStruxure Power Design EcoStruxure Automation Expert EcoStruxure Automation Maintenance Expert Eurotherm Data Reviewer Eurotherm iTools eXLhoist Configuration Software Schneider Electric Floating License Manager Schneider Electric License Manager Harmony XB5SSoft SoMove Versatile Software BLUE Vijeo Designer OsiSense XX Configuration Software Zelio Soft 2 Note: This vulnerability affects all products listed above; SESU can be downloaded and used to manage product updates. It may also be possible more components for one product are listed in the \"SESU Managed Products\" dialog for update." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-336-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-336-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-336-02" ;
    dcterms:issued "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Entrapass" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-36198" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2021-36198 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Entrapass" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a security management software; are affected: Entrapass: All versions prior to 8.40.; The following versions of Sensormatic Electronics Entrapass" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-336-02" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-336-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-336-03" ;
    dcterms:issued "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Distributed Data Systems WebHMI" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ukraine" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-43931; CVE-2021-43936" ;
    icsa:cweNumber "CWE-434; CWE-305" ;
    icsa:hasCVE cve-res:CVE-2021-43931,
        cve-res:CVE-2021-43936 ;
    icsa:hasCWE cwe-res:CWE-305,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebHMI" ;
    icsa:productDistribution "Germany, Poland, Ukraine, United States" ;
    icsa:productsAffected "a SCADA system with built-in web server capability; The following versions of WebHMI; are affected: All versions prior to 4.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-336-03" ;
    icsa:vendor "Distributed Data Systems" ;
    icsa:year 2021 .

icsa-res:ICSA-21-336-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-336-04" ;
    dcterms:issued "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 series BCI" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-35533" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-35533 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 series BCI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: RTU500 series CMU Firmware Version 12.0: All versions RTU500 series CMU Firmware Version 12.2: All versions RTU500 series CMU Firmware Version 12.4: All versions.; a remote terminal unit; The following firmware versions of RTU500 series" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-336-04" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-336-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-336-05" ;
    dcterms:issued "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Relion 670/650/SAM600-IO (Update A)" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-35535" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2021-35535 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Relion 670/650/SAM600-IO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports this vulnerability affects the following Relion products: Relion 670/650 series: Version 2.2.0 Relion 670/650/SAM600-IO series: Versions 2.2.1 through 2.2.1.6 Relion 670 series: Versions 2.2.2 through 2.2.2.4 Relion 670 series: Versions 2.2.3 through 2.2.3.3 Relion 670/650 series: Versions 2.2.4 through 2.2.4.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-336-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-336-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-336-06" ;
    dcterms:issued "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy APM Edge (Update A)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-1547; CVE-2020-27779; CVE-2021-23841; CVE-2020-14308; CVE-2020-14372; CVE-2021-20233; CVE-2021-3541; CVE-2020-24977; CVE-2021-3537; CVE-2021-23840; CVE-2021-3518; CVE-2020-15706; CVE-2020-27749; CVE-2019-1563; CVE-2021-3517; CVE-2021-3516; CVE-2019-1549; CVE-2017-8872; CVE-2020-15707; CVE-2021-20225; CVE-2020-10713; CVE-2019-20388; CVE-2020-14311; CVE-2020-1971; CVE-2020-14309; CVE-2020-25632; CVE-2021-3449; CVE-2020-14310; CVE-2020-15705" ;
    icsa:cweNumber "CWE-776; CWE-120; CWE-416; CWE-122; CWE-184; CWE-327; CWE-1357; CWE-787; CWE-203; CWE-330; CWE-401; CWE-190; CWE-362; CWE-121; CWE-285; CWE-125; CWE-347; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2017-8872,
        cve-res:CVE-2019-1547,
        cve-res:CVE-2019-1549,
        cve-res:CVE-2019-1563,
        cve-res:CVE-2019-20388,
        cve-res:CVE-2020-10713,
        cve-res:CVE-2020-14308,
        cve-res:CVE-2020-14309,
        cve-res:CVE-2020-14310,
        cve-res:CVE-2020-14311,
        cve-res:CVE-2020-14372,
        cve-res:CVE-2020-15705,
        cve-res:CVE-2020-15706,
        cve-res:CVE-2020-15707,
        cve-res:CVE-2020-1971,
        cve-res:CVE-2020-24977,
        cve-res:CVE-2020-25632,
        cve-res:CVE-2020-27749,
        cve-res:CVE-2020-27779,
        cve-res:CVE-2021-20225,
        cve-res:CVE-2021-20233,
        cve-res:CVE-2021-23840,
        cve-res:CVE-2021-23841,
        cve-res:CVE-2021-3449,
        cve-res:CVE-2021-3516,
        cve-res:CVE-2021-3517,
        cve-res:CVE-2021-3518,
        cve-res:CVE-2021-3537,
        cve-res:CVE-2021-3541 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-1357,
        cwe-res:CWE-184,
        cwe-res:CWE-190,
        cwe-res:CWE-203,
        cwe-res:CWE-285,
        cwe-res:CWE-327,
        cwe-res:CWE-330,
        cwe-res:CWE-347,
        cwe-res:CWE-362,
        cwe-res:CWE-401,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-776,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APM Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports this vulnerability affects the following APM product versions: APM Edge Version 1.0 APM Edge Version 2.0 APM Edge Version 3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-336-06" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-336-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-336-07" ;
    dcterms:issued "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy PCM600 Update Manager" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-22278" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2021-22278 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PCM600 Update Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2.2.0.23; 2.3.0.60; 2.2.0.2; 2.2; are affected: PCM600 Update Manager: Versions 2.1; 2.4.20041.1; and 2.4.20119.2.; an update manager for the PCM600 software (a protection and control IED manager); 2.2.0.1; The following versions of PCM600 Update Manager; 2.1.0.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-336-07" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-336-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-336-08" ;
    dcterms:issued "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 series" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-1968; CVE-2021-3517; CVE-2020-24977" ;
    icsa:cweNumber "CWE-125; CWE-203; CWE-126" ;
    icsa:hasCVE cve-res:CVE-2020-1968,
        cve-res:CVE-2020-24977,
        cve-res:CVE-2021-3517 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-126,
        cwe-res:CWE-203 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: RTU500 series CMU Firmware: Version 11.* RTU500 series CMU Firmware: Version 12.0.* RTU500 series CMU Firmware: Version 12.2.* RTU500 series CMU Firmware: Version 12.4.* RTU500 series CMU Firmware: Version 12.6.* RTU500 series CMU Firmware: Version 12.7.* RTU500 series CMU Firmware: Version 13.0.* RTU500 series CMU Firmware: Version 13.1.* RTU500 series CMU Firmware: Version 13.2.1.; a remote terminal unit; The following versions of the RTU500 series" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-336-08" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-341-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-341-01" ;
    dcterms:issued "2021-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 OpenLDAP" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-36230; CVE-2020-36229" ;
    icsa:cweNumber "CWE-617; CWE-843" ;
    icsa:hasCVE cve-res:CVE-2020-36229,
        cve-res:CVE-2020-36230 ;
    icsa:hasCWE cwe-res:CWE-617,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 OpenLDAP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a remote terminal unit; are affected: RTU500 Series CMU Firmware Version 12.4.X RTU500 Series CMU Firmware Version 12.6.X RTU500 Series CMU Firmware Version 12.7.X RTU500 Series CMU Firmware Version 13.0.X RTU500 Series CMU Firmware Version 13.1.X RTU500 Series CMU Firmware Version 13.2.1.; The following versions of RTU500 Series" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-341-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-341-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-341-02" ;
    dcterms:issued "2021-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy XMC20 and FOX61x" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-40333; CVE-2021-40334" ;
    icsa:cweNumber "CWE-431; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2021-40333,
        cve-res:CVE-2021-40334 ;
    icsa:hasCWE cwe-res:CWE-431,
        cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XMC20 and FOX61x" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of XMC20 and FOX61x; are affected: XMC20: All versions prior to R15A FOX61x: All versions prior to R15A.; multi-service network elements" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-341-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-343-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-343-01" ;
    dcterms:issued "2021-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy GMS600, PWC600, and Relion (Update A)" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-35534" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2021-35534 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GMS600, PWC600, and Relion 670/650/SAM600-IO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "all revisions Relion 650 series: Version 1.3; all revisions Relion 670 series: Version 2.2.2; all revisions Relion 650 series: Version 1.0; revisions up to 2.2.3.4 Relion 670/650 series: Version 2.2.4; all revisions.; all revisions Relion 670/650/SAM600-IO series: Version 2.2.1; revisions up to 2.2.5.1 Relion 670/650 series: Version 2.1; all revisions Relion 650 series: Version 1.2; all revisions Relion 650 series: Version 1.1; all revisions Relion 670 series: Version 2.2.3; all revisions Relion 670/650/SAM600-IO series: Version 2.2.5; all revisions Relion 670 series: Version 2.0; The following versions of Hitachi Energy GMS600 and PWC600 circuit breaker monitoring systems are affected: GMS600: Version 1.2.0 GMS600: Version 1.3.0 GMS600: Version 1.3.1.0 PWC600: Version 1.1.0.0 PWC600: Version 1.1.0.1 PWC600: Version 1.0.1.0 PWC600: Version 1.0.1.1 PWC600: Version 1.0.1.3 PWC600: Version 1.0.1.4 Relion 670/650 series: Version 2.2.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-343-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2021 .

icsa-res:ICSA-21-343-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-343-02" ;
    dcterms:issued "2021-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON LeviStudioU" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-43983" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-43983 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LeviStudioU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LeviStudioU HMI programming software are affected: LeviStudioU: Versions 2019-09-21 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-343-02" ;
    icsa:vendor "WECON" ;
    icsa:year 2021 .

icsa-res:ICSA-21-348-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-348-01" ;
    dcterms:issued "2021-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech R-SeeNet" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-21927; CVE-2021-21911; CVE-2021-21937; CVE-2021-21918; CVE-2021-21924; CVE-2021-21910; CVE-2021-21928; CVE-2021-21920; CVE-2021-21925; CVE-2021-21934; CVE-2021-21915; CVE-2021-21926; CVE-2021-21929; CVE-2021-21931; CVE-2021-21921; CVE-2021-21919; CVE-2021-21923; CVE-2021-21916; CVE-2021-21922; CVE-2021-21930; CVE-2021-21917; CVE-2021-21912; CVE-2021-21932; CVE-2021-21935; CVE-2021-21933; CVE-2021-21936" ;
    icsa:cweNumber "CWE-269; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2021-21910,
        cve-res:CVE-2021-21911,
        cve-res:CVE-2021-21912,
        cve-res:CVE-2021-21915,
        cve-res:CVE-2021-21916,
        cve-res:CVE-2021-21917,
        cve-res:CVE-2021-21918,
        cve-res:CVE-2021-21919,
        cve-res:CVE-2021-21920,
        cve-res:CVE-2021-21921,
        cve-res:CVE-2021-21922,
        cve-res:CVE-2021-21923,
        cve-res:CVE-2021-21924,
        cve-res:CVE-2021-21925,
        cve-res:CVE-2021-21926,
        cve-res:CVE-2021-21927,
        cve-res:CVE-2021-21928,
        cve-res:CVE-2021-21929,
        cve-res:CVE-2021-21930,
        cve-res:CVE-2021-21931,
        cve-res:CVE-2021-21932,
        cve-res:CVE-2021-21933,
        cve-res:CVE-2021-21934,
        cve-res:CVE-2021-21935,
        cve-res:CVE-2021-21936,
        cve-res:CVE-2021-21937 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "R-SeeNet" ;
    icsa:productDistribution "East Asia, Europe, Middle East, South America, United States" ;
    icsa:productsAffected "are affected: R-SeeNet: Versions 2.4.16 and prior.; a monitoring application; The following versions of R-SeeNet" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-348-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2021 .

icsa-res:ICSA-21-348-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-348-02" ;
    dcterms:issued "2021-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Rack PDU" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-22825" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2021-22825 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rack PDU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of the Rack Power Distribution Unit (PDU) are affected: AP7xxxx and AP8xxx with NMC2: v6.9.6 and prior AP7xxx and AP8xxx with NMC3: v1.1.0.3 and prior APDU9xxx with NMC3: v1.0.0.28 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-348-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-01" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Xylem AquaView" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-42833" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2021-42833 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AquaView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a SCADA system; 7.x; are affected: AquaView: Versions 1.60; The following versions of AquaView; 8.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-01" ;
    icsa:vendor "Xylem Inc" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-02" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-44768" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-44768 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CNCSoft industrial automation software are affected: CNCSoft Versions 1.01.30 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-03" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wibu-Systems CodeMeter Runtime" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-41057" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-41057 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CodeMeter Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CodeMeter Runtime; are affected: CodeMeter Runtime: All versions prior to Version 7.30a.; a license manger" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-03" ;
    icsa:vendor "Wibu-Systems AG" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-04" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GX Works2" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20608" ;
    icsa:cweNumber "CWE-130" ;
    icsa:hasCVE cve-res:CVE-2021-20608 ;
    icsa:hasCWE cwe-res:CWE-130 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GX Works2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of GX Works2; an engineering software suite; are affected: GX Works2: Versions 1.606G and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-05" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FA Engineering Software (Update B)" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20606; CVE-2021-20607" ;
    icsa:cweNumber "CWE-125; CWE-191" ;
    icsa:hasCVE cve-res:CVE-2021-20606,
        cve-res:CVE-2021-20607 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-191 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FA Engineering Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FA Engineering Software; an engineering software suite; are affected: GX Works2: Versions 1.606G and prior MELSOFT Navigator: Versions 2.84N and prior EZSocket: All versions --------- Begin Update A Part 1 of 2 --------- EZSocket: Versions 5.4 and prior --------- End Update A Part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-05" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-06" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Capital VSTAR (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-31344; CVE-2021-31890; CVE-2021-31883; CVE-2021-31882; CVE-2021-31889; CVE-2021-31881; CVE-2021-31345; CVE-2021-31346" ;
    icsa:cweNumber "CWE-191; CWE-1248; CWE-843; CWE-240; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-31344,
        cve-res:CVE-2021-31345,
        cve-res:CVE-2021-31346,
        cve-res:CVE-2021-31881,
        cve-res:CVE-2021-31882,
        cve-res:CVE-2021-31883,
        cve-res:CVE-2021-31889,
        cve-res:CVE-2021-31890 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-1248,
        cwe-res:CWE-125,
        cwe-res:CWE-191,
        cwe-res:CWE-240,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Capital VSTAR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Capital VSTAR software platform are affected because of their use of Nucleus NET; the networking stack of Nucleus RTOS (real-time operating system): Capital VSTAR: All versions with enabled Ethernet options." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-07" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens POWER METER SICAM Q100" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-44165" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-44165 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "POWER METER SICAM Q100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "7KG9501-0AA31-0AA1; are affected: POWER METER SICAM Q100 (7KG9501-0AA01-0AA1; 7KG9501-0AA01-2AA1; The following versions of the POWER METER SICAM Q100 power monitoring device; 7KG9501-0AA31-2AA1): All versions prior to v2.41." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-08" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JTTK and JT Utilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-44447; CVE-2021-44446; CVE-2021-44448" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-44446,
        cve-res:CVE-2021-44447,
        cve-res:CVE-2021-44448 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JTTK and JT Utilities" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of JT Open Toolkit (JTTK); are affected: JT Utilities: All versions prior to v13.0.3.0 JTTK: All versions prior to v11.0.3.0.; and JT Utilities; a series of command line utilities; an application programming interface" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-09" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK Edge" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-42027" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2021-42027 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a hardware and software digital production support and optimization platform; are affected: SINUMERIK Edge: All versions prior to 3.2.; The following versions of SINUMERIK Edge" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-10" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2Go and Teamcenter Visualization" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-44013; CVE-2021-44008; CVE-2021-44003; CVE-2021-44009; CVE-2021-44007; CVE-2021-44010; CVE-2021-44011; CVE-2021-44002; CVE-2021-44012; CVE-2021-44014; CVE-2021-44015; CVE-2021-44017; CVE-2021-44005; CVE-2021-44004; CVE-2021-44001; CVE-2021-44006" ;
    icsa:cweNumber "CWE-416; CWE-787; CWE-457; CWE-125; CWE-193" ;
    icsa:hasCVE cve-res:CVE-2021-44001,
        cve-res:CVE-2021-44002,
        cve-res:CVE-2021-44003,
        cve-res:CVE-2021-44004,
        cve-res:CVE-2021-44005,
        cve-res:CVE-2021-44006,
        cve-res:CVE-2021-44007,
        cve-res:CVE-2021-44008,
        cve-res:CVE-2021-44009,
        cve-res:CVE-2021-44010,
        cve-res:CVE-2021-44011,
        cve-res:CVE-2021-44012,
        cve-res:CVE-2021-44013,
        cve-res:CVE-2021-44014,
        cve-res:CVE-2021-44015,
        cve-res:CVE-2021-44017 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-193,
        cwe-res:CWE-416,
        cwe-res:CWE-457,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of JT2Go and Teamcenter Visualization software tools are affected: JT2Go: All versions prior to v13.2.0.5 Teamcenter Visualization: All versions prior to v13.2.0.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-11" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC eaSie PCS 7 Skill Package" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-42022" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2021-42022 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC eaSie PCS 7 Skill Package" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SIMATIC eaSie PCS 7 Skill Package (6DL5424-0BX00-0AV8): All versions prior to 21.00 SP3.; a digital assistant; The following versions of SIMATIC eaSie PCS 7 Skill Package" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-12" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC ITC" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2018-20748; CVE-2018-20750; CVE-2018-20019; CVE-2020-14404; CVE-2020-14402; CVE-2018-21247; CVE-2019-20788; CVE-2020-14403; CVE-2019-20839; CVE-2020-14401; CVE-2020-14398; CVE-2017-18922; CVE-2019-15690; CVE-2019-20840; CVE-2020-14396; CVE-2019-15681; CVE-2020-14405; CVE-2018-20749; CVE-2020-14397" ;
    icsa:cweNumber "CWE-1035" ;
    icsa:hasCVE cve-res:CVE-2017-18922,
        cve-res:CVE-2018-20019,
        cve-res:CVE-2018-20748,
        cve-res:CVE-2018-20749,
        cve-res:CVE-2018-20750,
        cve-res:CVE-2018-21247,
        cve-res:CVE-2019-15681,
        cve-res:CVE-2019-15690,
        cve-res:CVE-2019-20788,
        cve-res:CVE-2019-20839,
        cve-res:CVE-2019-20840,
        cve-res:CVE-2020-14396,
        cve-res:CVE-2020-14397,
        cve-res:CVE-2020-14398,
        cve-res:CVE-2020-14401,
        cve-res:CVE-2020-14402,
        cve-res:CVE-2020-14403,
        cve-res:CVE-2020-14404,
        cve-res:CVE-2020-14405 ;
    icsa:hasCWE cwe-res:CWE-1035 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC ITC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following SIMATIC Industrial Thin Clients: SIMATIC ITC1500 V3: All versions prior to v3.2.1.0 SIMATIC ITC1500 V3 PRO: All versions prior to v3.2.1.0 SIMATIC ITC1900 V3: All versions prior to v3.2.1.0 SIMATIC ITC1900 V3 PRO: All versions prior to v3.2.1.0 SIMATIC ITC2200 V3: All versions prior to v3.2.1.0 SIMATIC ITC2200 V3 PRO: All versions prior to v3.2.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-13" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Questa and ModelSim (Update A)" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-42023" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2021-42023 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Questa Simulation and ModelSim Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "integrated circuit simulators; are affected: ModelSim Simulation: All Versions Questa Simulation: All Versions.; The following versions of Questa and ModelSim" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-14" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Identity" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-44524; CVE-2021-44522; CVE-2021-44523" ;
    icsa:cweNumber "CWE-668" ;
    icsa:hasCVE cve-res:CVE-2021-44522,
        cve-res:CVE-2021-44523,
        cve-res:CVE-2021-44524 ;
    icsa:hasCWE cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance Identity" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Siveillance Identity v1.5: All versions Siveillance Identity v1.6: All versions prior to v1.6.284.0.; The following versions of Siveillance Identity; a web-based self-service portal" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-15" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter STAR-CCM+ Viewer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-42024" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-42024 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter STAR-CCM+ Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a multiphysics computational fluid dynamics (CFD) software; The following versions of Simcenter STAR-CCM+ Viewer; are affected: Simcenter STAR-CCM+ Viewer: All versions prior to 2021.3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-16" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Healthineers syngo fastView (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-42028; CVE-2021-40367; CVE-2021-45465" ;
    icsa:cweNumber "CWE-787; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2021-40367,
        cve-res:CVE-2021-42028,
        cve-res:CVE-2021-45465 ;
    icsa:hasCWE cwe-res:CWE-123,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "syngo fastView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Syngo fastView: All versions.; a software for digital imaging and communications; The following versions of syngo fastView" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-16" ;
    icsa:vendor "Siemens Healthineers (Subsidiary of Siemens)" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-17" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT Utilities and JT Open Toolkit" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-44441; CVE-2021-44437; CVE-2021-44444; CVE-2021-44439; CVE-2021-44443; CVE-2021-44435; CVE-2021-44442; CVE-2021-44438; CVE-2021-44436; CVE-2021-44431; CVE-2021-44440; CVE-2021-44430; CVE-2021-44433; CVE-2021-44432; CVE-2021-44445; CVE-2021-44434" ;
    icsa:cweNumber "CWE-416; CWE-122; CWE-787; CWE-121; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-44430,
        cve-res:CVE-2021-44431,
        cve-res:CVE-2021-44432,
        cve-res:CVE-2021-44433,
        cve-res:CVE-2021-44434,
        cve-res:CVE-2021-44435,
        cve-res:CVE-2021-44436,
        cve-res:CVE-2021-44437,
        cve-res:CVE-2021-44438,
        cve-res:CVE-2021-44439,
        cve-res:CVE-2021-44440,
        cve-res:CVE-2021-44441,
        cve-res:CVE-2021-44442,
        cve-res:CVE-2021-44443,
        cve-res:CVE-2021-44444,
        cve-res:CVE-2021-44445 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT Utilities and JT Open Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: JT Utilities: All versions prior to v13.1.1.0 JTTK: All versions prior to v11.1.1.0.; The following versions of JT Open Toolkit (JTTK); and JT Utilities; a series of command line utilities; an application programming interface" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-18" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Active Workspace" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-41547" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2021-41547 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Active Workspace" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Teamcenter Active Workspace v4.3: All versions prior to v4.3.11 Teamcenter Active Workspace v5.0: All versions prior to v5.0.10 Teamcenter Active Workspace v5.1: All versions prior to v5.1.6 Teamcenter Active Workspace v5.2: All versions prior to v5.2.3.; The following versions of Teamcenter Active Workspace; a collaboration tool" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-18" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-19 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-19" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass Integrated" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-44524; CVE-2021-44522; CVE-2021-44523" ;
    icsa:cweNumber "CWE-668" ;
    icsa:hasCVE cve-res:CVE-2021-44522,
        cve-res:CVE-2021-44523,
        cve-res:CVE-2021-44524 ;
    icsa:hasCWE cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass Integrated" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SiPass Integrated v2.64: All versions SiPass Integrated v2.80: All versions SiPass Integrated v2.85: All versions.; an access control system; The following versions of Siemens SiPass integrated" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-19" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-350-20 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-350-20" ;
    dcterms:issued "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JTTK and JT Utilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-44449; CVE-2021-44450" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-44449,
        cve-res:CVE-2021-44450 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JTTK and JT Utilities" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of JT Open Toolkit (JTTK); and JT Utilities; are affected: JT Utilities: All versions prior to v12.8.1.1 JTTK: All versions prior to v10.8.1.1.; a series of command line utilities; an application programming interface" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-350-20" ;
    icsa:vendor "Siemens" ;
    icsa:year 2021 .

icsa-res:ICSA-21-355-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-355-01" ;
    dcterms:issued "2021-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-43989; CVE-2021-22657; CVE-2021-23198; CVE-2021-43985; CVE-2021-43981; CVE-2021-43984; CVE-2021-43987; CVE-2021-44453" ;
    icsa:cweNumber "CWE-916; CWE-912; CWE-78; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2021-22657,
        cve-res:CVE-2021-23198,
        cve-res:CVE-2021-43981,
        cve-res:CVE-2021-43984,
        cve-res:CVE-2021-43985,
        cve-res:CVE-2021-43987,
        cve-res:CVE-2021-43989,
        cve-res:CVE-2021-44453 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-78,
        cwe-res:CWE-912,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "myPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of myPRO; are affected: myPRO: Versions 8.20.0 and prior.; an HMI/SCADA system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-355-01" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2021 .

icsa-res:ICSA-21-355-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-355-02" ;
    dcterms:issued "2021-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape EnvisionRV" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-44462" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-44462 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape EnvisionRV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Horner Automation reports this vulnerability affects the following Cscape industrial remote viewing software products: Cscape EnvisionRV v4.50.3.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-355-02" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2021 .

icsa-res:ICSA-21-355-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-355-03" ;
    dcterms:issued "2021-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "WECON LeviStudioU" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-23157; CVE-2021-23138" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-23138,
        cve-res:CVE-2021-23157 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LeviStudioU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LeviStudioU; an HMI programming software; are affected: LeviStudioU: Versions 2019-09-21 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-355-03" ;
    icsa:vendor "WECON" ;
    icsa:year 2021 .

icsa-res:ICSA-21-355-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-355-04" ;
    dcterms:issued "2021-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-44463; CVE-2021-26264" ;
    icsa:cweNumber "CWE-306; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2021-26264,
        cve-res:CVE-2021-44463 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Emerson reports these vulnerabilities affect the following versions: DeltaV Distributed Control System Controllers and Workstations: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-355-04" ;
    icsa:vendor "Emerson" ;
    icsa:year 2021 .

icsa-res:ICSA-21-357-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-357-01" ;
    dcterms:issued "2021-12-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MGate Protocol Gateways" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-4161" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2021-4161 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MGate Protocol Gateways" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following firmware versions of MGate MB3000 Series; are affected: MGate MB3180 Series: Firmware Version 2.2 or lower MGate MB3280 Series: Firmware Version 4.1 or lower MGate MB3480 Series: Firmware Version 3.2 or lower.; a serial-to-Ethernet Modbus gateway" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-357-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2021 .

icsa-res:ICSA-21-357-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-21-357-02" ;
    dcterms:issued "2021-12-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacq Enterprise Manager" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-44228" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-44228 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls exacq Enterprise Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Exacq Enterprise Manager: All Versions 21.12 and prior.; The following versions of Exacq Technologies Enterprise Manager; an enterprise management tool" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-21-357-02" ;
    icsa:vendor "Exacq Technologies Inc (Subsidiary of Johnson Controls)" ;
    icsa:year 2021 .

icsa-res:ICSA-22-006-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-006-01" ;
    dcterms:issued "2022-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-One" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-21137" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-21137 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-One" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CX-One automation software are affected: CX-One: Versions 4.60 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-006-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2022 .

icsa-res:ICSA-22-006-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-006-02" ;
    dcterms:issued "2022-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fernhill SCADA" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater; Food and Agriculture; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-21155" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-21155 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Fernhill SCADA Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Fernhill SCADA Server Version 3.77 and earlier on all supported platforms (Windows; macOS).; Linux" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-006-02" ;
    icsa:vendor "Fernhill Software Ltd." ;
    icsa:year 2022 .

icsa-res:ICSA-22-006-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-006-03" ;
    dcterms:issued "2022-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "IDEC PLCs" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-20827; CVE-2021-37400; CVE-2021-37401; CVE-2021-20826" ;
    icsa:cweNumber "CWE-523; CWE-256" ;
    icsa:hasCVE cve-res:CVE-2021-20826,
        cve-res:CVE-2021-20827,
        cve-res:CVE-2021-37400,
        cve-res:CVE-2021-37401 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-523 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLCs (Programmable Logic Controllers)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following IDEC PLCs are affected: FC6A MICROSmart All-in-One CPU Module: v2.32 and earlier FC6B MICROSmart All-in-One CPU Module: v2.31 and earlier FC6A MICROSmart Plus CPU Module: v1.91 and earlier FC6B MICROSmart Plus CPU Module: v2.31 and earlier FT1A Controller SmartAXIS Pro/Lite: v2.31 and earlier WindLDR: v8.19.1 and earlier WindEDIT Lite: v1.3.1 and earlier Data File Manager: v2.12.1 and earlier FC6A MICROSmart All-in-One CPU Module: v2.32 and earlier FC6A MICROSmart Plus CPU Module: v1.91 and earlier WindLDR: v8.19.1 and earlier WindEDIT: Lite v1.3.1 and earlier Data File Manager: v2.12.1 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-006-03" ;
    icsa:vendor "IDEC" ;
    icsa:year 2022 .

icsa-res:ICSA-22-011-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-011-01" ;
    dcterms:issued "2022-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls VideoEdge" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-36199" ;
    icsa:cweNumber "CWE-228" ;
    icsa:hasCVE cve-res:CVE-2021-36199 ;
    icsa:hasCWE cwe-res:CWE-228 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VideoEdge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: VideoEdge: Versions 5.4.1 to 5.7.1.; The following versions of VideoEdge; a network video recorder" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-011-01" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2022 .

icsa-res:ICSA-22-013-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-013-01" ;
    dcterms:issued "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-F Series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20612" ;
    icsa:cweNumber "CWE-671" ;
    icsa:hasCVE cve-res:CVE-2021-20612 ;
    icsa:hasCWE cwe-res:CWE-671 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MELSEC-F Series with FX3U-ENET; are affected: FX3U-ENET Firmware Version 1.14 and prior FX3U-ENET-L Firmware Version 1.14 and prior FX3U-ENET-P502 Firmware Version 1.14 and prior.; an Ethernet-Internet block" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-013-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-013-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-013-02" ;
    dcterms:issued "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM A8000" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-45033; CVE-2021-45034" ;
    icsa:cweNumber "CWE-284; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2021-45033,
        cve-res:CVE-2021-45034 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM A8000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SICAM A8000; are affected: CP-8000 MASTER MODULE WITH I/O - 25/+70°C (6MF2101-0AB10-0AA0): All versions prior to v16.20 CP-8000 MASTER MODULE WITH I/O - 40/+70°C (6MF2101-1AB10-0AA0): All versions prior to v16.20 CP-8021 MASTER MODULE (6MF2802-1AA00): All versions prior to v16.20 CP-8022 MASTER MODULE WITH GPRS (6MF2802-2AA00): All versions prior to v16.20.; a remote terminal unit" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-013-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-013-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-013-03" ;
    dcterms:issued "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Energy PLUSCONTROL" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Sectors" ;
    icsa:cveNumber "CVE-2021-31344; CVE-2021-31890; CVE-2021-31889; CVE-2021-31345; CVE-2021-31885; CVE-2021-31346" ;
    icsa:cweNumber "CWE-191; CWE-843; CWE-240; CWE-1284; CWE-805" ;
    icsa:hasCVE cve-res:CVE-2021-31344,
        cve-res:CVE-2021-31345,
        cve-res:CVE-2021-31346,
        cve-res:CVE-2021-31885,
        cve-res:CVE-2021-31889,
        cve-res:CVE-2021-31890 ;
    icsa:hasCWE cwe-res:CWE-1284,
        cwe-res:CWE-191,
        cwe-res:CWE-240,
        cwe-res:CWE-805,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLUSCONTROL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PLUSCONTROL; a control device for high-power energy transmission; are affected: PLUSCONTROL 1st Gen: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-013-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-013-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-013-04" ;
    dcterms:issued "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5 Devices" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-41769" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-41769 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5 products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following SIPROTEC 5 products: Devices with the hardware variants CP050; CP100; and CP300 A full list of the affected devices was published in the Siemens Security Advisory SSA-439673." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-013-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-013-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-013-05" ;
    dcterms:issued "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS Web (Update B)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-37197; CVE-2021-37196; CVE-2021-37194; CVE-2021-37195; CVE-2021-37198" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-89; CWE-80; CWE-23" ;
    icsa:hasCVE cve-res:CVE-2021-37194,
        cve-res:CVE-2021-37195,
        cve-res:CVE-2021-37196,
        cve-res:CVE-2021-37197,
        cve-res:CVE-2021-37198 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-80,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of COMOS Web; a unified data platform; are affected: COMOS v10.2: All versions (only if web components are used) Update B COMOS v10.3: All versions prior to v10.3.3.3 (only if web components are used) COMOS v10.3: All versions prior to v10.3.3.3 (only if web components are used) (only affected by CVE-2021-37196) End of Update B COMOS v10.4: All versions prior to v10.4.1 (only if web components are used)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-013-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-013-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-013-06" ;
    dcterms:issued "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM PQ Analyzer" ;
    icsa:CVSSScore "3.4"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-45460" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2021-45460 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM PQ Analyzer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SICAM PQ Analyzer power quality system software are affected: All versions prior to v3.18." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-013-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-013-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-013-07" ;
    dcterms:issued "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-F Series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-20613" ;
    icsa:cweNumber "CWE-665" ;
    icsa:hasCVE cve-res:CVE-2021-20613 ;
    icsa:hasCWE cwe-res:CWE-665 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MELSEC-F Series with FX3U-ENET; an Ethernet-Internet block; are affected: FX3U-ENET: Firmware Version 1.16 and prior FX3U-ENET-L: Firmware Version 1.16 and prior FX3U-ENET-P502: Firmware Version 1.16 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-013-07" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-020-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-020-01" ;
    dcterms:issued "2022-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States, Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-23129; CVE-2022-23130; CVE-2022-23128; CVE-2022-23127" ;
    icsa:cweNumber "CWE-184; CWE-256; CWE-126; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2022-23127,
        cve-res:CVE-2022-23128,
        cve-res:CVE-2022-23129,
        cve-res:CVE-2022-23130 ;
    icsa:hasCWE cwe-res:CWE-126,
        cwe-res:CWE-184,
        cwe-res:CWE-256,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric HMI SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric Iconics Digital Solutions Hyper Historian: <=10.96.2; Mitsubishi Electric Iconics Digital Solutions AnalytiX: <=10.96.2; Mitsubishi Electric MC Works64: <=4.04E; Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.96.2; Mitsubishi Electric Iconics Digital Solutions MobileHMI: <=10.96.2; Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.96.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-020-01" ;
    icsa:vendor "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-025-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-025-01" ;
    dcterms:issued "2022-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Gas Power ToolBoxST" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-44477; CVE-2018-16202" ;
    icsa:cweNumber "CWE-22; CWE-611" ;
    icsa:hasCVE cve-res:CVE-2018-16202,
        cve-res:CVE-2021-44477 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ToolBoxST" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE reports these vulnerabilities affect the following software platform for programming: ToolBoxST OS: All versions prior to 07.09.07C." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-025-01" ;
    icsa:vendor "GE" ;
    icsa:year 2022 .

icsa-res:ICSA-22-032-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-032-01" ;
    dcterms:issued "2022-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ricon Mobile Industrial Cellular Router" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2022-0365" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-0365 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Cellular Router" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a mobile network router; are affected: S9922XL Version 16.10.3 S9922L Version 16.10.3.; The following versions of Ricon Industrial Cellular Router" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-032-01" ;
    icsa:vendor "Ricon Mobile, Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-032-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-032-02" ;
    dcterms:issued "2022-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech ADAM-3600" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-22987" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2022-22987 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ADAM-3600" ;
    icsa:productDistribution "East Asia, United States, Europe" ;
    icsa:productsAffected "The following versions of ADAM-3600; a remote terminal unit; are affected: ADAM-3600: Version 2.6.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-032-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2022 .

icsa-res:ICSA-22-034-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-034-01" ;
    dcterms:issued "2022-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic PowerManage (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-44228" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-44228 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerManage" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Sensormatic Electronics; LLC PowerManage; are affected: PowerManage Versions 4.0 to 4.8.; an operating platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-034-01" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2022 .

icsa-res:ICSA-22-034-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-034-02" ;
    dcterms:issued "2022-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Airspan Networks Mimosa" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2022-21143; CVE-2022-0138; CVE-2022-21215; CVE-2022-21141; CVE-2022-21196; CVE-2022-21800; CVE-2022-21176" ;
    icsa:cweNumber "CWE-89; CWE-78; CWE-285; CWE-918; CWE-502; CWE-327; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2022-0138,
        cve-res:CVE-2022-21141,
        cve-res:CVE-2022-21143,
        cve-res:CVE-2022-21176,
        cve-res:CVE-2022-21196,
        cve-res:CVE-2022-21215,
        cve-res:CVE-2022-21800 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-327,
        cwe-res:CWE-502,
        cwe-res:CWE-78,
        cwe-res:CWE-863,
        cwe-res:CWE-89,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mimosa by Airspan product line" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a network management software platform; are affected: MMP: All versions prior to v1.0.3 PTP C-series: Device versions prior to v2.8.6.1 PTMP C-series and A5x: Device versions prior to v2.5.4.1.; The following products of the Mimosa by Airspan product line" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-034-02" ;
    icsa:vendor "Airspan Networks" ;
    icsa:year 2022 .

icsa-res:ICSA-22-041-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-041-01" ;
    dcterms:issued "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Industrial Products (Update B)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-37185" ;
    icsa:cweNumber "CWE-601" ;
    icsa:hasCVE cve-res:CVE-2021-37185 ;
    icsa:hasCWE cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software platform; The following versions of Siemens Industrial Products with SIMATIC Firmware; are affected: SIMATIC Drive Controller family: All versions prior to v2.9.4 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions ------- Begin Update B Part 1 of 3 ------- SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux: All versions SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): All versions ------- End Update B Part 1 of 3 ------- SIMATIC S7-1200 CPU family (incl. SIPLUS variants): Version 4.5.0 and all following versions prior to v4.5.2 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): Version 2.9.2 and all following versions prior to v2.9.4 SIMATIC S7-1500 Software Controller: All versions SIMATIC S7-PLCSIM Advanced: All versions v4.0 SP1 TIM 1531 IRC (incl. SIPLUS NET variants): Version 2.2 and all following versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-041-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-041-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-041-02" ;
    dcterms:issued "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC and PCS (Update C)" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-40360; CVE-2021-40363" ;
    icsa:cweNumber "CWE-538; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2021-40360,
        cve-res:CVE-2021-40363 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-538 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC and PCS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "but prior to v17 Update 4 are only affected by CVE-2021-40363 --------- End Update C Part 1 of 2 ---------.; Siemens reports these vulnerabilities affect the following SIMATIC products: SIMATIC PCS 7 v9.1: All versions prior to v9.1 SP1 SIMATIC PCS 7 v8.2: All versions prior to v7.4 SP1 Update 19 SIMATIC PCS 7 v9.0: All versions prior to v9.0 SP3 UpdateCollection4 SIMATIC WinCC v7.4: All versions prior to v7.4 SP1 Update 19 SIMATIC WinCC v7.5: All versions prior to v7.5 Update 6 SIMATIC WinCC v15 and earlier: All versions prior to v15 SP1 Update 7 SIMATIC WinCC v16: All versions prior to v16 Update 5 SIMATIC WinCC v17: All versions prior to v17 Update 2 --------- Begin Update C Part 1 of 2 --------- SIMATIC WinCC v17: All versions after and including v17 Update 2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-041-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-041-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-041-03" ;
    dcterms:issued "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-46153; CVE-2021-46156; CVE-2021-46160; CVE-2021-46159; CVE-2021-46157; CVE-2021-46152; CVE-2021-46161; CVE-2021-46151; CVE-2021-46154; CVE-2021-46155; CVE-2021-46158" ;
    icsa:cweNumber "CWE-119; CWE-843; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-46151,
        cve-res:CVE-2021-46152,
        cve-res:CVE-2021-46153,
        cve-res:CVE-2021-46154,
        cve-res:CVE-2021-46155,
        cve-res:CVE-2021-46156,
        cve-res:CVE-2021-46157,
        cve-res:CVE-2021-46158,
        cve-res:CVE-2021-46159,
        cve-res:CVE-2021-46160,
        cve-res:CVE-2021-46161 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an advanced simulation application; The following versions of Simcenter Femap; are affected: Simcenter Femap v2020.2: All versions Simcenter Femap v2021.1: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-041-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-041-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-041-04" ;
    dcterms:issued "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "SINEMA Remote Connect Server" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Sectors" ;
    icsa:cveNumber "CVE-2022-23102" ;
    icsa:cweNumber "CWE-601" ;
    icsa:hasCVE cve-res:CVE-2022-23102 ;
    icsa:hasCWE cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a management platform for remote networks; are affected: SINEMA Remote Connect Server: All versions prior to v2.0.; The following versions of SINEMA Remote Server" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-041-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-041-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-041-05" ;
    dcterms:issued "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM TOOLBOX II (Update A)" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-45106" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2021-45106 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM TOOLBOX II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software platform; The following versions of SICAM TOOLBOX II; are affected: SICAM TOOLBOX II: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-041-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-041-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-041-06" ;
    dcterms:issued "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power 4" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-23312" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2022-23312 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Spectrum Power 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Spectrum Power 4 communications and data modeling software are affected: Siemens Spectrum Power 4: All versions prior to v4.70 SP9 Security Patch 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-041-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-041-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-041-07" ;
    dcterms:issued "2022-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge, JT2Go, and Teamcenter Visualization (Update C)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-44016; CVE-2021-43336; CVE-2021-44000; CVE-2021-44018; CVE-2021-38405" ;
    icsa:cweNumber "CWE-119; CWE-122; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-38405,
        cve-res:CVE-2021-43336,
        cve-res:CVE-2021-44000,
        cve-res:CVE-2021-44016,
        cve-res:CVE-2021-44018 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge, JT2Go, and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following visualization software products: JT2Go: All versions prior to v13.2.0.7 Teamcenter Visualization v13.2: All versions prior to v13.2.0.7 Solid Edge SE2021: All versions prior to SE2021MP9 Solid Edge SE2022: All versions prior to SE2022MP1 Teamcenter Visualization v12.4: All versions prior to v12.4.0.13 --------- Begin Update C Part 1 of 2 --------- Teamcenter Visualization v13.1: All versions prior to v13.1.0.8 Teamcenter Visualization v13.1: All versions prior to v13.1.0.9 --------- End Update C Part 1 of 2 --------- Teamcenter Visualization v13.2: All versions prior to v13.2.0.7 Teamcenter Visualization v13.3: All versions prior to v13.3.0.1 Not all the above products are affected by all the vulnerabilities below. For a complete list of how they correspond; please see Siemens security advisory SSA-301589.; Siemens reports these vulnerabilities affect the following visualization software products: JT2Go: All versions Solid Edge SE2021: All versions prior to SE2021MP9 Solid Edge SE2022: All versions prior to SE2022MP1 Teamcenter Visualization v12.4: All versions Teamcenter Visualization v13.1: All versions Teamcenter Visualization v13.1: All versions prior to v13.1.0.8 Teamcenter Visualization v13.2: All versions Teamcenter Visualization v13.3: All versions Teamcenter Visualization v13.3: All versions prior to v13.3.0.1 Not all the above products are affected by all the vulnerabilities below. For a complete list of how they correspond" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-041-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-046-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-046-01" ;
    dcterms:issued "2022-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2022-24313; CVE-2022-24310; CVE-2022-24316; CVE-2022-24317; CVE-2022-24315; CVE-2022-24312; CVE-2022-24314; CVE-2022-24311" ;
    icsa:cweNumber "CWE-22; CWE-862; CWE-120; CWE-665; CWE-190; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-24310,
        cve-res:CVE-2022-24311,
        cve-res:CVE-2022-24312,
        cve-res:CVE-2022-24313,
        cve-res:CVE-2022-24314,
        cve-res:CVE-2022-24315,
        cve-res:CVE-2022-24316,
        cve-res:CVE-2022-24317 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-22,
        cwe-res:CWE-665,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS (Interactive Graphical SCADA System)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports these vulnerabilities affect the following IGSS Data Server module: IGSS Data Server (IGSSdataServer.exe): v15.0.0.22020 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-046-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-053-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-053-01" ;
    dcterms:issued "2022-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy CIMPLICITY-IPM" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-23921" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2022-23921 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy CIMPLICITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an HMI and SCADA platform; are affected: Proficy CIMPLICITIY v11.1 and prior versions.; The following versions of Proficy CIMPLICITY" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-053-01" ;
    icsa:vendor "GE" ;
    icsa:year 2022 .

icsa-res:ICSA-22-053-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-053-02" ;
    dcterms:issued "2022-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy CIMPLICITY-Cleartext" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-21798" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-21798 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy CIMPLICITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "which can be easily spoofed and used to log in to make operational changes to the system.; The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-053-02" ;
    icsa:vendor "GE" ;
    icsa:year 2022 .

icsa-res:ICSA-22-053-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-053-03" ;
    dcterms:issued "2022-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "WIN-911 2021" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-23104; CVE-2022-23922" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2022-23104,
        cve-res:CVE-2022-23922 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WIN-911 2021" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: WIN-911 2021 R1 - 5.21.10; WIN-911 2021 R2 - 5.21.17.; an alarm notification platform; The following versions of WIN-911" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-053-03" ;
    icsa:vendor "WIN-911" ;
    icsa:year 2022 .

icsa-res:ICSA-22-055-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-055-01" ;
    dcterms:issued "2022-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation FvDesigner" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-25170; CVE-2022-23985; CVE-2022-21209" ;
    icsa:cweNumber "CWE-125; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-21209,
        cve-res:CVE-2022-23985,
        cve-res:CVE-2022-25170 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FvDesigner" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software tool used to design and develop FATEK FV HMI series product projects; The following versions of FvDesigner; are affected: FvDesigner: Versions 1.5.100 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-055-01" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-055-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-055-02" ;
    dcterms:issued "2022-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric EcoWebServerIII" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-20676; CVE-2018-14042; CVE-2018-14040; CVE-2016-10735; CVE-2020-11022; CVE-2020-7746; CVE-2017-18214; CVE-2019-8331; CVE-2020-11023" ;
    icsa:cweNumber "CWE-79; CWE-915; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2016-10735,
        cve-res:CVE-2017-18214,
        cve-res:CVE-2018-14040,
        cve-res:CVE-2018-14042,
        cve-res:CVE-2018-20676,
        cve-res:CVE-2019-8331,
        cve-res:CVE-2020-11022,
        cve-res:CVE-2020-11023,
        cve-res:CVE-2020-7746 ;
    icsa:hasCWE cwe-res:CWE-400,
        cwe-res:CWE-79,
        cwe-res:CWE-915 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Energy Saving Data Collecting Server (EcoWebServerIII)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MES3-255C-DM-EN: Versions 3.0.0 to 3.3.0; MES3-255C-DM-CN: Versions 3.0.0 to 3.3.0.; Mitsubishi Electric reports these vulnerabilities affect the following versions of EcoWebServerIII; an energy saving data collecting server: MES3-255C-EN: Versions 3.0.0 to 3.3.0; MES3-255C-CN: Versions 3.0.0 to 3.3.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-055-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-055-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-055-03" ;
    dcterms:issued "2022-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Easergy P5 and P3 (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2022-22725; CVE-2022-34758; CVE-2022-22723; CVE-2022-22722" ;
    icsa:cweNumber "CWE-798; CWE-20; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2022-22722,
        cve-res:CVE-2022-22723,
        cve-res:CVE-2022-22725,
        cve-res:CVE-2022-34758 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Easergy P5 and P3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: --------- Begin Update A Part 2 of 4 --------- All firmware versions prior to v01.401.102 --------- End Update A Part 2 of 4 --------- The following versions of Easergy P3; a medium voltage protection relay; are affected: All versions prior to v30.205.; The following versions of Easergy P5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-055-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-062-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-062-01" ;
    dcterms:issued "2022-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "IPCOMM ipDIO" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-24432; CVE-2022-22985; CVE-2022-21146; CVE-2022-24915" ;
    icsa:cweNumber "CWE-94; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2022-21146,
        cve-res:CVE-2022-22985,
        cve-res:CVE-2022-24432,
        cve-res:CVE-2022-24915 ;
    icsa:hasCWE cwe-res:CWE-79,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ipDIO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Firmware Version 3.9 2016/04/18 / IPDIO SW 3.9.; The following versions of IPCOMM ipDIO; a telecontrol communication device" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-062-01" ;
    icsa:vendor "IPCOMM" ;
    icsa:year 2022 .

icsa-res:ICSA-22-063-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-063-01" ;
    dcterms:issued "2022-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trailer Power Line Communications (PLC) J2497" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Not Applicable" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2022-25922; CVE-2022-26131" ;
    icsa:cweNumber "CWE-306; CWE-1319" ;
    icsa:hasCVE cve-res:CVE-2022-25922,
        cve-res:CVE-2022-26131 ;
    icsa:hasCWE cwe-res:CWE-1319,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Power Line Communications (PLC): J2497 (a.k.a. PLC4TRUCKS)" ;
    icsa:productDistribution "United States, Canada, Mexico" ;
    icsa:productsAffected "serial communications link over the vehicle power supply line; a bidirectional; Power Line Communications (PLC): J2497 (a.k.a. PLC4TRUCKS); is affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-063-01" ;
    icsa:vendor "Not Applicable" ;
    icsa:year 2022 .

icsa-res:ICSA-22-067-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-067-01" ;
    dcterms:issued "2022-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Axeda agent and Axeda Desktop Server (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-25251; CVE-2022-25247; CVE-2022-25246; CVE-2022-25249; CVE-2022-25250; CVE-2022-25248; CVE-2022-25252" ;
    icsa:cweNumber "CWE-22; CWE-200; CWE-306; CWE-703; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-25246,
        cve-res:CVE-2022-25247,
        cve-res:CVE-2022-25248,
        cve-res:CVE-2022-25249,
        cve-res:CVE-2022-25250,
        cve-res:CVE-2022-25251,
        cve-res:CVE-2022-25252 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-703,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Axeda agent, Axeda Desktop Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a remote asset connectivity software used as part of a cloud based IoT platform; are affected: Axeda agent: All versions Axeda Desktop Server for Windows: All versions. See the following links for more information on products that may be dependent on the affected Axeda agent and Axeda Desktop Server: Accuray: accuray.com/services/customer-resources Agilent: community.agilent.com/resources/b/support-announcements/posts/remote-advisor-security-notification BD: cybersecurity.bd.com/bulletins-and-patches/third-party-vulnerability-axeda-software-products Bayer: radiologysolutions.bayer.com/information-technology-advisory Beckman Coulter: beckmancoulter.com/en/about-beckman-coulter/product-security Elekta: community.elekta.com (Login Required) General Electric: gehealthcare.com/security Update C: Hologic: https://www.hologic.com/support/usa/breast-skeletal-products-cybersecurity Roche Diagnostics: diagnostics.roche.com/global/en/legal/product-security-advisory.html Smiths Medical: smiths-medical.com/en-us/company-information/smiths-medical-cyber-security-updates Varian: varian.com/resources-support/cybersecurity-varian; The following versions of Axeda agent and Axeda Desktop Server; are affected: Axeda agent: All versions; Axeda Desktop Server for Windows: All versions. Update A: See the following links for more information on products that may be dependent on the affected Axeda agent and Axeda Desktop Server: Accuray: accuray.com/services/customer-resources Agilent: community.agilent.com/resources/b/support-announcements/posts/remote-advisor-security-notification Bayer: radiologysolutions.bayer.com/information-technology-advisory BD: cybersecurity.bd.com/bulletins-and-patches/third-party-vulnerability-axeda-software-products Elekta: community.elekta.com (Login Required) General Electric: gehealthcare.com/security Roche Diagnostics: diagnostics.roche.com/global/en/legal/product-security-advisory.html Smiths Medical: smiths-medical.com/en-us/company-information/smiths-medical-cyber-security-updates Varian: varian.com/resources-support/cybersecurity-varian" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-067-01" ;
    icsa:vendor "PTC" ;
    icsa:year 2022 .

icsa-res:ICSA-22-067-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-067-02" ;
    dcterms:issued "2022-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA System Platform" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-0835" ;
    icsa:cweNumber "CWE-316" ;
    icsa:hasCVE cve-res:CVE-2022-0835 ;
    icsa:hasCWE cwe-res:CWE-316 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "System Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; are affected: AVEVA System Platform 2020 R2 P01; AVEVA System Platform 2020 R2S; AVEVA System Platform 2020.; The following versions of AVEVA System Platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-067-02" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-01" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM Devices (Update D)" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-37209" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2021-37209 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of RUGGEDCOM communication equipment are affected: RUGGEDCOM ROS i800 V4.X: All Versions RUGGEDCOM ROS i801 V4.X: All Versions RUGGEDCOM ROS i802 V4.X: All Versions RUGGEDCOM ROS i803 V4.X: All Versions RUGGEDCOM ROS RMC30 V4.X: All Versions RUGGEDCOM ROS RMC8388 V4.X: All Versions RUGGEDCOM ROS RP110 V4.X: All Versions RUGGEDCOM ROS RS1600 V4.X: All Versions RUGGEDCOM ROS RS1600F V4.X: All Versions RUGGEDCOM ROS RS1600T V4.X: All Versions RUGGEDCOM ROS RS400 V4.X: All Versions RUGGEDCOM ROS RS401 V4.X: All Versions RUGGEDCOM ROS RS416Pv2 V4.X: All Versions RUGGEDCOM ROS RS416v2 V4.X: All Versions RUGGEDCOM ROS RS8000 V4.X: All Versions RUGGEDCOM ROS RS8000A V4.X: All Versions RUGGEDCOM ROS RS8000H V4.X: All Versions RUGGEDCOM ROS RS8000T V4.X: All Versions RUGGEDCOM ROS RS900 (32M) V4.X: All Versions RUGGEDCOM ROS RS900 V4.X: All Versions RUGGEDCOM ROS RS900G (32M) V4.X: All Versions RUGGEDCOM ROS RS900G V4.X: All Versions RUGGEDCOM ROS RS900GP V4.X: All Versions RUGGEDCOM ROS RS900L V4.X: All Versions RUGGEDCOM ROS RS900M V4.X: All Versions RUGGEDCOM ROS RS900W V4.X: All Versions RUGGEDCOM ROS RS910 V4.X: All Versions RUGGEDCOM ROS RS910L V4.X: All Versions RUGGEDCOM ROS RS910W V4.X: All Versions RUGGEDCOM ROS RS920L V4.X: All Versions RUGGEDCOM ROS RS920W V4.X: All Versions RUGGEDCOM ROS RS930L V4.X: All Versions RUGGEDCOM ROS RS930W V4.X: All Versions RUGGEDCOM ROS RS940G V4.X: All Versions RUGGEDCOM ROS RSG2100 (32M) V4.X: All Versions RUGGEDCOM ROS RSG2100 V4.X: All Versions RUGGEDCOM ROS RSG2100P V4.X: All Versions RUGGEDCOM ROS RSG2200 V4.X: All Versions RUGGEDCOM ROS RSG2288 V4.X: All Versions RUGGEDCOM ROS RSG2300 V4.X: All Versions RUGGEDCOM ROS RSG2300P V4.X: All Versions RUGGEDCOM ROS RSG2488 V4.X: All Versions --------- Begin Update D Part 1 of 2--------- RUGGEDCOM ROS RMC8388 V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RS416Pv2 V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RS416v2 V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RS900 (32M) V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RS900G (32M) V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG2100 (32M) V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG2288 V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG2300P V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG2300 V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG2488 V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG907R V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG908C V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG909R V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG910C V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG920P V4.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSG920P V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RSL910 V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RST2228 V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RST2228P V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RST916C V5.X: All Versions prior to v5.7.0 RUGGEDCOM ROS RST916P V5.X: All Versions prior to v5.7.0 --------- End Update D Part 1 of 2---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-02" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMOTICS CONNECT 400" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-31890; CVE-2021-31889; CVE-2021-31346; CVE-2021-31344" ;
    icsa:cweNumber "CWE-1284; CWE-843; CWE-191; CWE-240" ;
    icsa:hasCVE cve-res:CVE-2021-31344,
        cve-res:CVE-2021-31346,
        cve-res:CVE-2021-31889,
        cve-res:CVE-2021-31890 ;
    icsa:hasCWE cwe-res:CWE-1284,
        cwe-res:CWE-191,
        cwe-res:CWE-240,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMOTICS CONNECT 400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMOTICS CONNECT 400; a connectivity module; CVE-2021-31890.; CVE-2021-31346; are affected: SIMOTICS CONNECT 400: All versions prior to v0.5.0.0; SIMOTICS CONNECT 400: All versions prior to v1.0.0.0; only affected by CVE-2021-31344" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-03" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-24281; CVE-2022-24282; CVE-2022-25311" ;
    icsa:cweNumber "CWE-502; CWE-269; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2022-24281,
        cve-res:CVE-2022-24282,
        cve-res:CVE-2022-25311 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-502,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a network management system; are affected: SINEC NMS: All versions.; The following versions of Siemens SINEC NMS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-04" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Mendix Forgot Password Appstore" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-26314; CVE-2022-26313" ;
    icsa:cweNumber "CWE-284; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2022-26313,
        cve-res:CVE-2022-26314 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Forgot Password Appstore module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mendix Forgot Password Appstore; a password management module; are affected: Mendix Forgot Password Appstore module: All versions after v3.3.0 and prior to v3.5.1; Mendix Forgot Password Appstore module (Mendix 7 compatible): All versions prior to v3.2.2 (only affected by CVE-2022-26314)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-05" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter STAR-CCM+ Viewer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-24661" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2022-24661 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter STAR-CCM+ Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Simcenter STAR-CCM+ Viewer: All versions prior to 2022.1.; The following versions of Simcenter STAR-CCM+ Viewer; a computational fluid dynamics software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-06" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-32940; CVE-2021-25177; CVE-2021-32950; CVE-2021-32944; CVE-2021-32946; CVE-2021-25178; CVE-2021-32948; CVE-2021-25174; CVE-2021-32938; CVE-2021-25175; CVE-2021-32952; CVE-2021-31784; CVE-2021-25173; CVE-2021-32936; CVE-2021-25176" ;
    icsa:cweNumber "CWE-822; CWE-416; CWE-787; CWE-789; CWE-843; CWE-121; CWE-125; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2021-25173,
        cve-res:CVE-2021-25174,
        cve-res:CVE-2021-25175,
        cve-res:CVE-2021-25176,
        cve-res:CVE-2021-25177,
        cve-res:CVE-2021-25178,
        cve-res:CVE-2021-31784,
        cve-res:CVE-2021-32936,
        cve-res:CVE-2021-32938,
        cve-res:CVE-2021-32940,
        cve-res:CVE-2021-32944,
        cve-res:CVE-2021-32946,
        cve-res:CVE-2021-32948,
        cve-res:CVE-2021-32950,
        cve-res:CVE-2021-32952 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-754,
        cwe-res:CWE-787,
        cwe-res:CWE-789,
        cwe-res:CWE-822,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Siemens COMOS: All versions prior to v10.4.1.; a unified platform for collaborative plan design; The following versions of Siemens COMOS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-07" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Climatix POL909" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-41543; CVE-2021-41541; CVE-2021-41542" ;
    icsa:cweNumber "CWE-284; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-41541,
        cve-res:CVE-2021-41542,
        cve-res:CVE-2021-41543 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Climatix POL909 (AWB and AWM modules)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "advanced web modules; are affected: Climatix POL909 (AWM module): All versions prior to v11.34; Climatix POL909 (AWB module): All versions prior to v11.34.; The following versions of Climatix POL909 (AWM and AWB modules)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-08" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Polarion ALM" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-44478" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-44478 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Polarion ALM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following Polarion Subversion Webclient: Polarion Subversion Webclient: v21 R1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-09" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC INS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-22884; CVE-2019-19923; CVE-2020-7774; CVE-2021-22946; CVE-2020-11656; CVE-2019-19924; CVE-2020-27304; CVE-2019-19646; CVE-2019-19880; CVE-2021-22947; CVE-2020-8284; CVE-2021-27290; CVE-2021-22924; CVE-2021-22897; CVE-2020-9327; CVE-2019-19926; CVE-2021-3711; CVE-2019-19242; CVE-2021-25214; CVE-2020-13631; CVE-2021-25219; CVE-2021-32803; CVE-2021-32804; CVE-2021-39134; CVE-2020-8231; CVE-2021-22890; CVE-2021-37701; CVE-2021-22930; CVE-2020-11655; CVE-2021-23840; CVE-2019-19603; CVE-2021-22926; CVE-2021-22931; CVE-2021-23362; CVE-2021-22945; CVE-2021-22922; CVE-2021-39135.; CVE-2021-3672; CVE-2020-8286; CVE-2021-25216; CVE-2020-8285; CVE-2021-3450; CVE-2021-22925; CVE-2020-8265; CVE-2020-13871; CVE-2021-22876; CVE-2020-13632; CVE-2020-15358; CVE-2021-22921; CVE-2020-8625; CVE-2020-1971; CVE-2019-19925; CVE-2021-22883; CVE-2021-37712; CVE-2019-19244; CVE-2019-19317; CVE-2021-22918; CVE-2021-37713; CVE-2020-8287; CVE-2021-22939; CVE-2020-13630; CVE-2021-22923; CVE-2021-22898; CVE-2021-22940; CVE-2020-8169; CVE-2020-8177; CVE-2021-3449; CVE-2021-3712; CVE-2021-25215; CVE-2021-22901; CVE-2019-19645" ;
    icsa:cweNumber "CWE-1035" ;
    icsa:hasCVE cve-res:CVE-2019-19242,
        cve-res:CVE-2019-19244,
        cve-res:CVE-2019-19317,
        cve-res:CVE-2019-19603,
        cve-res:CVE-2019-19645,
        cve-res:CVE-2019-19646,
        cve-res:CVE-2019-19880,
        cve-res:CVE-2019-19923,
        cve-res:CVE-2019-19924,
        cve-res:CVE-2019-19925,
        cve-res:CVE-2019-19926,
        cve-res:CVE-2020-11655,
        cve-res:CVE-2020-11656,
        cve-res:CVE-2020-13630,
        cve-res:CVE-2020-13631,
        cve-res:CVE-2020-13632,
        cve-res:CVE-2020-13871,
        cve-res:CVE-2020-15358,
        cve-res:CVE-2020-1971,
        cve-res:CVE-2020-27304,
        cve-res:CVE-2020-7774,
        cve-res:CVE-2020-8169,
        cve-res:CVE-2020-8177,
        cve-res:CVE-2020-8231,
        cve-res:CVE-2020-8265,
        cve-res:CVE-2020-8284,
        cve-res:CVE-2020-8285,
        cve-res:CVE-2020-8286,
        cve-res:CVE-2020-8287,
        cve-res:CVE-2020-8625,
        cve-res:CVE-2020-9327,
        cve-res:CVE-2021-22876,
        cve-res:CVE-2021-22883,
        cve-res:CVE-2021-22884,
        cve-res:CVE-2021-22890,
        cve-res:CVE-2021-22897,
        cve-res:CVE-2021-22898,
        cve-res:CVE-2021-22901,
        cve-res:CVE-2021-22918,
        cve-res:CVE-2021-22921,
        cve-res:CVE-2021-22922,
        cve-res:CVE-2021-22923,
        cve-res:CVE-2021-22924,
        cve-res:CVE-2021-22925,
        cve-res:CVE-2021-22926,
        cve-res:CVE-2021-22930,
        cve-res:CVE-2021-22931,
        cve-res:CVE-2021-22939,
        cve-res:CVE-2021-22940,
        cve-res:CVE-2021-22945,
        cve-res:CVE-2021-22946,
        cve-res:CVE-2021-22947,
        cve-res:CVE-2021-23362,
        cve-res:CVE-2021-23840,
        cve-res:CVE-2021-25214,
        cve-res:CVE-2021-25215,
        cve-res:CVE-2021-25216,
        cve-res:CVE-2021-25219,
        cve-res:CVE-2021-27290,
        cve-res:CVE-2021-32803,
        cve-res:CVE-2021-32804,
        cve-res:CVE-2021-3449,
        cve-res:CVE-2021-3450,
        cve-res:CVE-2021-3672,
        cve-res:CVE-2021-3711,
        cve-res:CVE-2021-3712,
        cve-res:CVE-2021-37701,
        cve-res:CVE-2021-37712,
        cve-res:CVE-2021-37713,
        cve-res:CVE-2021-39134,
        <http://w3id.org/sepses/resource/cve/CVE-2021-39135.> ;
    icsa:hasCWE cwe-res:CWE-1035 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC INS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following SINEC INS (Infrastructure Network Services) web-based application: SINEC INS: All versions prior to v1.0.1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-10" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-46699; CVE-2021-46162" ;
    icsa:cweNumber "CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-46162,
        cve-res:CVE-2021-46699 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following Simcenter Femap simulation applications: Simcenter Femap: All versions prior to v2022.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-11" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK MC" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-24408" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2022-24408 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK MC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following versions of the SINUMERIK MC CNC system control system for customized machines: SINUMERIK MC: All versions prior to v1.15 SP1; SINUMERIK ONE: All versions prior to v6.15 SP1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-12" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-42018; CVE-2021-42017; CVE-2021-42020; CVE-2021-37208; CVE-2021-42019; CVE-2021-42016" ;
    icsa:cweNumber "CWE-1035" ;
    icsa:hasCVE cve-res:CVE-2021-37208,
        cve-res:CVE-2021-42016,
        cve-res:CVE-2021-42017,
        cve-res:CVE-2021-42018,
        cve-res:CVE-2021-42019,
        cve-res:CVE-2021-42020 ;
    icsa:hasCWE cwe-res:CWE-1035 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following RUGGEDCOM ROS-based devices: RUGGEDCOM ROS M2100: All versions prior to v5.6.0; RUGGEDCOM ROS RMC8388 devices: All versions prior to v5.6.0; RUGGEDCOM ROS RS416v2: All versions prior to v5.6.0; RUGGEDCOM ROS RS900G: All versions prior to v5.6.0; RUGGEDCOM ROS RS900G (32M): All versions prior to v5.6.0; RUGGEDCOM ROS RSG900 v5.X: All versions prior to v5.6.0; RUGGEDCOM ROS RSG920P v5.X: All versions prior to v5.6.0; RUGGEDCOM ROS RSG2100 (32M) v5.X: All versions prior to v5.6.0; RUGGEDCOM ROS RSG2100P: All versions prior to v5.6.0; RUGGEDCOM ROS RSG2100P (32M) v5.X: All versions prior to v5.6.0; RUGGEDCOM ROS RSG2288 v5.X: All versions prior to v5.6.0; RUGGEDCOM ROS RSG2300 v5.X: All versions prior to v5.6.0; RUGGEDCOM ROS RSG2300P v5.X: All versions prior to v5.6.0; RUGGEDCOM ROS RSG2488 v5.X: All versions prior to v5.6.0; RUGGEDCOM ROS RSL910: All versions prior to v5.6.0; RUGGEDCOM ROS RST916C: All versions prior to v5.6.0; RUGGEDCOM ROS RST916P: All versions prior to v5.6.0; RUGGEDCOM ROS RST2228: All versions prior to v5.6.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-069-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-069-13" ;
    dcterms:issued "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-24309" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-24309 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mendix; are affected: Mendix Applications using Mendix 7: All versions prior to v7.23.29; Mendix Applications using Mendix 8: All versions prior to v8.18.16; Mendix Applications using Mendix 9: All versions.; an application development platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-069-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-074-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-074-01" ;
    dcterms:issued "2022-03-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB OPC Server for AC 800M" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-22284" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2021-22284 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC Server for AC 800M" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OPC Server; 1.x and 2.0 including: OPC Server for AC 800M: Versions 5.1.1-1 and 6.0.0-1 Compact Product Suite - Control and I/O: OPC Server for AC 800M: Versions 5.1.0-x; 6.0.0-x.; 6.0.0-1 to 6.0.0-3 Control Builder Safe; Control Software for AC 800M: OPC Server for AC 800M: Versions 5.1.0-x; 5.1.1-x; are affected: 800xA; a run-time data reader" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-074-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2022 .

icsa-res:ICSA-22-081-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-081-01" ;
    dcterms:issued "2022-03-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAEnergie (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-1376; CVE-2022-26836; CVE-2022-26839; CVE-2022-26013; CVE-2022-1367; CVE-2022-26069; CVE-2022-26338; CVE-2022-1377; CVE-2022-1366; CVE-2022-26065; CVE-2022-27175; CVE-2022-26666; CVE-2022-1378; CVE-2022-1371; CVE-2022-1374; CVE-2022-0923; CVE-2022-1369; CVE-2022-25880; CVE-2022-26059; CVE-2022-26887; CVE-2022-25347; CVE-2022-1375; CVE-2022-1372; CVE-2022-26514; CVE-2022-25980; CVE-2022-1370" ;
    icsa:cweNumber "CWE-37; CWE-276; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2022-0923,
        cve-res:CVE-2022-1366,
        cve-res:CVE-2022-1367,
        cve-res:CVE-2022-1369,
        cve-res:CVE-2022-1370,
        cve-res:CVE-2022-1371,
        cve-res:CVE-2022-1372,
        cve-res:CVE-2022-1374,
        cve-res:CVE-2022-1375,
        cve-res:CVE-2022-1376,
        cve-res:CVE-2022-1377,
        cve-res:CVE-2022-1378,
        cve-res:CVE-2022-25347,
        cve-res:CVE-2022-25880,
        cve-res:CVE-2022-25980,
        cve-res:CVE-2022-26013,
        cve-res:CVE-2022-26059,
        cve-res:CVE-2022-26065,
        cve-res:CVE-2022-26069,
        cve-res:CVE-2022-26338,
        cve-res:CVE-2022-26514,
        cve-res:CVE-2022-26666,
        cve-res:CVE-2022-26836,
        cve-res:CVE-2022-26839,
        cve-res:CVE-2022-26887,
        cve-res:CVE-2022-27175 ;
    icsa:hasCWE cwe-res:CWE-276,
        cwe-res:CWE-37,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAEnergie" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DIAEnergie; are affected: --------- Begin Update C Part 1 of 2 --------- DIAEnergie: All versions prior to 1.9 --------- End Update C Part 1 of 2 ---------.; an industrial energy management" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-081-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-083-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-083-01" ;
    dcterms:issued "2022-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CENTUM and Exaopc" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2022-22729; CVE-2022-21177; CVE-2022-21808; CVE-2022-23402; CVE-2022-21194; CVE-2022-22141; CVE-2022-22151; CVE-2022-23401; CVE-2022-22148; CVE-2022-22145" ;
    icsa:cweNumber "CWE-427; CWE-264; CWE-23; CWE-78; CWE-798; CWE-117" ;
    icsa:hasCVE cve-res:CVE-2022-21177,
        cve-res:CVE-2022-21194,
        cve-res:CVE-2022-21808,
        cve-res:CVE-2022-22141,
        cve-res:CVE-2022-22145,
        cve-res:CVE-2022-22148,
        cve-res:CVE-2022-22151,
        cve-res:CVE-2022-22729,
        cve-res:CVE-2022-23401,
        cve-res:CVE-2022-23402 ;
    icsa:hasCWE cwe-res:CWE-117,
        cwe-res:CWE-23,
        cwe-res:CWE-264,
        cwe-res:CWE-427,
        cwe-res:CWE-78,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CENTUM and Exaopc" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "but may be indirectly affected by the existence of CENTUM installed on the same PC:B/M9000CS: (R5.04.01 - R5.05.01) B/M9000 VP: (R6.01.01 - R8.03.01) Usage of the CAMS function may determine whether an installation is affected. Please see Yokogawa's full report (YSAR-22-0001) for details.; Yokogawa reports these vulnerabilities affect the following distributed control system and software products: CENTUM CS 3000 (Including CENTUM CS 3000 Entry Class): R3.08.10 - R3.09.00 CENTUM VP (Including CENTUM VP Entry Class): R4.01.00 - R4.03.00 R5.01.00 - R5.04.20 R6.01.00 - R6.08.00 Exaopc: (R3.72.00 - R3.79.00) Yokogawa reports the following products are not directly affected by the vulnerabilities" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-083-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2022 .

icsa-res:ICSA-22-083-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-083-02" ;
    dcterms:issued "2022-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-0999" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2022-0999 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "myPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "mySCADA reports this vulnerability affects the following myPRO HMI /SCADA products: myPRO Versions 8.25.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-083-02" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2022 .

icsa-res:ICSA-22-088-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-088-01" ;
    dcterms:issued "2022-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ISaGRAF Update A" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1018" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2022-1018 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISaGRAF" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation software products are affected: Connected Component Workbench: v12.00 and prior --------- Begin Update A Part 1 of 2 --------- ISaGRAF Workbench: All versions prior to v6.6.10 --------- End Update A Part 1 of 2 --------- ISaGRAF Workbench: v6.6.9 and prior Safety Instrumented Systems Workstation: v1.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-088-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-088-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-088-02" ;
    dcterms:issued "2022-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Position" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-26419; CVE-2022-26022; CVE-2022-26417; CVE-2022-25959" ;
    icsa:cweNumber "CWE-119; CWE-416; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-25959,
        cve-res:CVE-2022-26022,
        cve-res:CVE-2022-26417,
        cve-res:CVE-2022-26419 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Position" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a position control software; are affected: CX-Position Versions 2.5.3 and prior.; The following versions of CX-Position" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-088-02" ;
    icsa:vendor "Omron" ;
    icsa:year 2022 .

icsa-res:ICSA-22-088-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-088-03" ;
    dcterms:issued "2022-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy LinkOne WebView" ;
    icsa:CVSSScore "4.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-40338; CVE-2021-40339; CVE-2021-40337; CVE-2021-40340" ;
    icsa:cweNumber "CWE-79; CWE-309; CWE-200; CWE-16" ;
    icsa:hasCVE cve-res:CVE-2021-40337,
        cve-res:CVE-2021-40338,
        cve-res:CVE-2021-40339,
        cve-res:CVE-2021-40340 ;
    icsa:hasCWE cwe-res:CWE-16,
        cwe-res:CWE-200,
        cwe-res:CWE-309,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LinkOne WebView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: LinkOne WebView v3.20; LinkOne WebView v3.22; LinkOne WebView v3.23; LinkOne; WebView v3.24; LinkOne WebView v3.25; LinkOne WebView v3.26.; an enterprise graphical parts catalog; The following versions of LinkOne WebView" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-088-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-088-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-088-04" ;
    dcterms:issued "2022-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Modbus Tools Modbus Slave" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1068" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-1068 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modbus Slave" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Modbus Slave; are affected: Modbus Slave Versions 7.4.2 and prior.; a PLC programming simulation tool" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-088-04" ;
    icsa:vendor "Modbus Tools" ;
    icsa:year 2022 .

icsa-res:ICSA-22-090-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-090-01" ;
    dcterms:issued "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SCADAPack Workbench" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-0221" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2022-0221 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADAPack Workbench" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCADAPack Workbench software are affected: SCADAPack Workbench Versions 6.6.8a and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-090-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-090-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-090-02" ;
    dcterms:issued "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy e-mesh EMS" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-11080; CVE-2020-8174; CVE-2021-22883; CVE-2020-8265" ;
    icsa:cweNumber "CWE-119; CWE-416; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-11080,
        cve-res:CVE-2020-8174,
        cve-res:CVE-2020-8265,
        cve-res:CVE-2021-22883 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-400,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "e-mesh EMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an optimizer software for energy resources; The following version of e-mesh EMS; is affected: e-mesh EMS Version 1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-090-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-090-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-090-03" ;
    dcterms:issued "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Alpha5" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-21228; CVE-2022-21168; CVE-2022-24383; CVE-2022-21214; CVE-2022-21202" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-121; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2022-21168,
        cve-res:CVE-2022-21202,
        cve-res:CVE-2022-21214,
        cve-res:CVE-2022-21228,
        cve-res:CVE-2022-24383 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alpha5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Alpha5: All versions prior to 4.3.; a servo drive system; The following versions of Fuji Electric's Alpha5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-090-03" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-090-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-090-04" ;
    dcterms:issued "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FA Products (Update A)" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-25157; CVE-2022-25156; CVE-2022-25158; CVE-2022-25160; CVE-2022-25155; CVE-2022-25159" ;
    icsa:cweNumber "CWE-328; CWE-294; CWE-836; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2022-25155,
        cve-res:CVE-2022-25156,
        cve-res:CVE-2022-25157,
        cve-res:CVE-2022-25158,
        cve-res:CVE-2022-25159,
        cve-res:CVE-2022-25160 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-312,
        cwe-res:CWE-328,
        cwe-res:CWE-836 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FA products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All models: All versions MELSEC iQ-F Series FX5UJ CPU modules; L26CPU-(P)BT LJ71C24(-R2) LJ71E71-100 LJ72GF15-T2 --------- End Update A Part 1 of 2 ---------; Q04/06/10/13/20/26/50/100UDEHCPU Q03/04/06/13/26UDVCPU Q04/06/13/26UDPVCPU QJ71C24N(-R2/R4) QJ71E71-100 QJ72BR15 QJ72LP25(-25/G/GE) MELSEC L series: All Versions of the following: L02/06/26CPU(-P); All models: All versions --------- Begin Update A Part 1 of 2 --------- MELSEC iQ-R series: All Versions of the following: R00/01/02CPU: R04/08/16/32/120(EN)CPU R08/16/32/120SFCPU R08/16/32/120PCPU R08/16/32/120PSFCPU R16/32/64MTCPU RJ71GN11-T2 RJ71GN11-EIP RJ71C24(-R2/R4) RJ71EN71 RJ71GF11-T2 RJ71GP21(S)-SX RJ72GF15-T2 MELSEC Q series: All Versions of the following: Q03UDECPU; The following FA CPU module products are affected: MELSEC iQ-F Series FX5U(C) CPU modules" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-090-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-090-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-090-05" ;
    dcterms:issued "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix Controllers" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Sectors" ;
    icsa:cveNumber "CVE-2022-1161" ;
    icsa:cweNumber "CWE-829" ;
    icsa:hasCVE cve-res:CVE-2022-1161 ;
    icsa:hasCWE cwe-res:CWE-829 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Logix Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the vulnerability affects the following products: 1768 CompactLogix controllers; 1769 CompactLogix controllers; CompactLogix 5370 controllers; CompactLogix 5380 controllers; CompactLogix 5480 controllers; Compact GuardLogix 5370 controllers; Compact GuardLogix 5380 controllers; ControlLogix 5550 controllers; ControlLogix 5560 controllers; ControlLogix 5570 controllers; ControlLogix 5580 controllers; GuardLogix 5560 controllers; GuardLogix 5570 controllers; GuardLogix 5580 controllers; FlexLogix 1794-L34 controllers; DriveLogix 5730 controllers; SoftLogix 5800 controllers." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-090-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-090-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-090-06" ;
    dcterms:issued "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "General Electric Renewable Energy MDS Radios" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2017-17562; CVE-2022-24120; CVE-2022-24119; CVE-2022-24117; CVE-2022-24118; CVE-2022-24116" ;
    icsa:cweNumber "CWE-912; CWE-494; CWE-326; CWE-20; CWE-256; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2017-17562,
        cve-res:CVE-2022-24116,
        cve-res:CVE-2022-24117,
        cve-res:CVE-2022-24118,
        cve-res:CVE-2022-24119,
        cve-res:CVE-2022-24120 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-256,
        cwe-res:CWE-326,
        cwe-res:CWE-400,
        cwe-res:CWE-494,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MDS iNET/iNET II/SD/TD220/TD220MAX Radios" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "General Electric reports these vulnerabilities affect the following radios: iNET/iNET II series radio firmware versions prior to rev. 8.3.0; SD series radio firmware versions prior to rev. 6.4.7; TD220X series radio firmware versions prior to rev. 2.0.16; TD220MAX series radio firmware versions prior to rev. 1.2.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-090-06" ;
    icsa:vendor "General Electric Renewable Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-090-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-090-07" ;
    dcterms:issued "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Studio 5000 Logix Designer" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1159" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2022-1159 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Studio 5000 Logix Designer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following Studio 5000 Logix Designer design; and software products: ControlLogix 5580 controllers; GuardLogix 5580 controllers; CompactLogix 5380 controllers; CompactLogix 5480 controllers Compact GuardLogix 5380 controllers.; configuration hardware" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-090-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-095-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-095-01" ;
    dcterms:issued "2022-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ISaGRAF" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1118" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2022-1118 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISaGRAF" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected:Connected Component Workbench: v13.00.00 and prior ISaGRAF Workbench: v6.0 though v6.6.9 Safety Instrumented Systems Workstation: v1.2 and prior (for Trusted Controllers)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-095-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-095-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-095-02" ;
    dcterms:issued "2022-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-36202" ;
    icsa:cweNumber "CWE-918" ;
    icsa:hasCVE cve-res:CVE-2021-36202 ;
    icsa:hasCWE cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Metasys; are affected:Metasys ADS/ADX/OAS Versions 10 and 11.; a building automation system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-095-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-097-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-097-01" ;
    dcterms:issued "2022-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pepperl+Fuchs WirelessHART-Gateway" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-34562; CVE-2020-7656; CVE-2021-34564; CVE-2021-34561; CVE-2011-4969; CVE-2014-6071; CVE-2021-33555; CVE-2020-11022; CVE-2013-0169; CVE-2020-11023; CVE-2012-6708; CVE-2021-34565; CVE-2016-10707; CVE-2021-34559; CVE-2021-34563; CVE-2007-2379; CVE-2015-9251; CVE-2019-11358; CVE-2021-34560" ;
    icsa:cweNumber "CWE-22; CWE-444; CWE-200; CWE-1004; CWE-350; CWE-79; CWE-310; CWE-315; CWE-798; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2007-2379,
        cve-res:CVE-2011-4969,
        cve-res:CVE-2012-6708,
        cve-res:CVE-2013-0169,
        cve-res:CVE-2014-6071,
        cve-res:CVE-2015-9251,
        cve-res:CVE-2016-10707,
        cve-res:CVE-2019-11358,
        cve-res:CVE-2020-11022,
        cve-res:CVE-2020-11023,
        cve-res:CVE-2020-7656,
        cve-res:CVE-2021-33555,
        cve-res:CVE-2021-34559,
        cve-res:CVE-2021-34560,
        cve-res:CVE-2021-34561,
        cve-res:CVE-2021-34562,
        cve-res:CVE-2021-34563,
        cve-res:CVE-2021-34564,
        cve-res:CVE-2021-34565 ;
    icsa:hasCWE cwe-res:CWE-1004,
        cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-310,
        cwe-res:CWE-315,
        cwe-res:CWE-350,
        cwe-res:CWE-400,
        cwe-res:CWE-444,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WirelessHART-Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of WirelessHART-Gateway industrial networking devices are affected:WHA-GW-F2D2-0-AS- Z2-ETH: Versions 3.0.7; 3.0.8; 3.0.9.; 3.0.9; WHA-GW-F2D2-0-AS-Z2-ETH.EIP: Versions 3.0.7" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-097-01" ;
    icsa:vendor "PEPPERL+FUCHS" ;
    icsa:year 2022 .

icsa-res:ICSA-22-097-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-097-02" ;
    dcterms:issued "2022-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB SPIET800 and PNI800" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-22288; CVE-2021-22285; CVE-2021-22286" ;
    icsa:cweNumber "CWE-241; CWE-372; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-22285,
        cve-res:CVE-2021-22286,
        cve-res:CVE-2021-22288 ;
    icsa:hasCWE cwe-res:CWE-241,
        cwe-res:CWE-372,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Symphony Plus SPIET800 and PNI800" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Symphony Plus network interface modules are affected:SPIET800: Firmware Version A_B or prior PNI800: Firmware Version A_B or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-097-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2022 .

icsa-res:ICSA-22-102-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-102-01" ;
    dcterms:issued "2022-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Valmet DNA" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Finland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-26726" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2021-26726 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DNA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Valmet DNA; a distributed control system; are affected: Valmet DNA: Versions from Collection 2012 to Collection 2021." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-102-01" ;
    icsa:vendor "Valmet" ;
    icsa:year 2022 .

icsa-res:ICSA-22-102-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-102-02" ;
    dcterms:issued "2022-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-Q Series C Controller Module" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-29998" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2021-29998 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-Q Series C Controller Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MELSEC-Q Series C Controller Module using Wind River VxWorks Version 6.4 are affected: Module Q12DCCPU-V: First 5 digits of serial number 24031 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-102-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-102-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-102-03" ;
    dcterms:issued "2022-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2022-1264" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2022-1264 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ignition" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of Inductive Automation Ignition software are affected:Inductive Automation Ignition: All 8.0 versions after 8.0.4 Inductive Automation Ignition: All 8.1 versions prior to 8.1.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-102-03" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-102-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-102-04" ;
    dcterms:issued "2022-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GT25-WLAN (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-24587; CVE-2020-24588; CVE-2020-26143; CVE-2020-24586; CVE-2020-26144; CVE-2020-26140; CVE-2020-26146" ;
    icsa:cweNumber "CWE-212; CWE-306; CWE-326; CWE-74; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2020-24586,
        cve-res:CVE-2020-24587,
        cve-res:CVE-2020-24588,
        cve-res:CVE-2020-26140,
        cve-res:CVE-2020-26143,
        cve-res:CVE-2020-26144,
        cve-res:CVE-2020-26146 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-212,
        cwe-res:CWE-306,
        cwe-res:CWE-326,
        cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wireless LAN communication unit GT25-WLAN in GOT2000 Series GT25 or GT27" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Begin Update A: GT25-WLAN: Version 01.39.000 and earlier End Update A.; The following versions of Wireless LAN communication unit GT25-WLAN in GOT2000 Series GT25 or GT27" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-102-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-102-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-102-05" ;
    dcterms:issued "2022-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Aethon TUG Home Base Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Singapore" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-1070; CVE-2022-26423; CVE-2022-1059; CVE-2022-27494; CVE-2022-1066" ;
    icsa:cweNumber "CWE-79; CWE-862; CWE-300" ;
    icsa:hasCVE cve-res:CVE-2022-1059,
        cve-res:CVE-2022-1066,
        cve-res:CVE-2022-1070,
        cve-res:CVE-2022-26423,
        cve-res:CVE-2022-27494 ;
    icsa:hasCWE cwe-res:CWE-300,
        cwe-res:CWE-79,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TUG Home Base Server" ;
    icsa:productDistribution "East Asia, United States" ;
    icsa:productsAffected "a server used to control and communicate with autonomous mobile robots in hospitals: All versions prior to Version 24.; Aethon reports these vulnerabilities affect the following versions of TUG Home Base Server" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-102-05" ;
    icsa:vendor "Aethon (owned by ST Engineering)" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-01" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DMARS" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-1331" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2022-1331 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DMARS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DMARS; are affected:DMARS: All versions prior to v2.1.10.24.; a Motion Controller program development tool" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-02" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-36205" ;
    icsa:cweNumber "CWE-459" ;
    icsa:hasCVE cve-res:CVE-2021-36205 ;
    icsa:hasCWE cwe-res:CWE-459 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys ADS/ADX/OAS Servers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following Metasys ADS/ADX/OAS servers for building management systems: All Metasys ADS/ADX/OAS Servers: Versions 10 and 11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-03" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Red Lion DA50N" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-27179; CVE-2022-1039; CVE-2022-26516" ;
    icsa:cweNumber "CWE-345; CWE-522; CWE-1104; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2022-1039,
        cve-res:CVE-2022-26516,
        cve-res:CVE-2022-27179 ;
    icsa:hasCWE cwe-res:CWE-1104,
        cwe-res:CWE-345,
        cwe-res:CWE-521,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DA50N" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Red Lion DA50N; a networking gateway; are affected: DA50N: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-03" ;
    icsa:vendor "Red Lion Controls" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-04" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE FragAttacks" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-24588; CVE-2020-26139; CVE-2020-26143; CVE-2020-26147; CVE-2020-26145; CVE-2020-26144; CVE-2020-26140; CVE-2020-26141; CVE-2020-26146" ;
    icsa:cweNumber "CWE-287; CWE-306; CWE-74; CWE-20; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2020-24588,
        cve-res:CVE-2020-26139,
        cve-res:CVE-2020-26140,
        cve-res:CVE-2020-26141,
        cve-res:CVE-2020-26143,
        cve-res:CVE-2020-26144,
        cve-res:CVE-2020-26145,
        cve-res:CVE-2020-26146,
        cve-res:CVE-2020-26147 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-306,
        cwe-res:CWE-354,
        cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE family devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected:SCALANCE W721-1 RJ45: All versions SCALANCE W722-1 RJ45: All versions SCALANCE W734-1 RJ45: All versions SCALANCE W738-1 M12: All versions SCALANCE W748-1 M12: All versions SCALANCE W738-1 RJ45: All versions SCALANCE W761-1 RJ45: All versions SCALANCE W774-1 M12 EEC: All versions SCALANCE W774-1 RJ45: All versions SCALANCE W778-1 M12 EEC: All versions SCALANCE W786-1 RJ45: All versions SCALANCE W786-2 RJ45: All versions SCALANCE W786-2 SFP: All versions SCALANCE W786-2IA RJ45: All versions SCALANCE W788-1 M12: All versions SCALANCE W788-1 RJ45: All versions SCALANCE W788-2 M12: All versions SCALANCE W788-1 M12 EEC: All versions SCALANCE W788-2 RJ45: All versions SCALANCE W1748-1 M12: All versions prior to v3.0.0 SCALANCE W1750D M12: All versions prior to v8.7.1.3 SCALANCE W1788-1 M12: All versions prior to v3.0.0 SCALANCE W1788-2 EEC M12: All versions prior to v3.0.0 SCALANCE W1788-2 M12: All versions prior to v3.0.0 SCALANCE W17." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-05" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OpenSSL Vulnerabilities in Industrial Products (Update B)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-3449" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2021-3449 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "incl. SIPLUS variant): All versions prior to v2.9.3 SIMATIC WinCC Runtime Advanced: All versions prior to v17 Update 1 SIMATIC WinCC TeleControl: All versions SINAMICS Connect 300: All versions SINEC NMS: Versions 1.0 SP1 through 1.0 SP2 SINEMA Server: Versions 14 through 14 SP3 SINUMERIK OPC UA Server: All versions prior to v3.1 SP1 SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0): Versions 2.2 through 3.0 SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0): Versions 2.0 through 2.2 TIA Administrator: All versions prior to v1.0 SP4 TIM 1531 IRC (6GK7543-1MX00-0XE0): Versions 2.0 through 2.2.; Siemens reports this vulnerability affects the following products: RUGGEDCOM CROSSBOW Station Access Controller: All versions since and including v5.2.0 only when running on ROX v2.14.0 RUGGEDCOM RCM1224: Versions 6.2 through 7.1 SCALANCE LPE9403 (6GK5998-3GS00-2AC2): All versions prior to v1.1 SCALANCE M804PB (6GK5804-0AP00-2AA2): Versions 6.2 through 7.1 SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): Versions 6.2 through 7.1 SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): Versions 6.2 through 7.1 SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): Versions 6.2 through 7.1 SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): Versions 6.2 through 7.11 SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): Versions 6.2 through 7.1 SCALANCE M874-2 (6GK5874-2AA00-2AA2): Versions 6.2 through 7.1 SCALANCE M874-3 (6GK5874-3AA00-2AA2): Versions 6.2 through 7.1SCALANCE M876-3 (6GK5876-3AA02-2BA2): Versions 6.2 through 7.1SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): Versions 6.2 through 7.1SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): Versions 6.2 through 7.1SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): Versions 6.2 through 7.1 SCALANCE S602: All versions since and including v4.1 SCALANCE S612: All versions since and including v4.1 SCALANCE S615 (6GK5615-0AA00-2AA2): Versions 6.2 through 7.1 SCALANCE S623: All versions since and including v4.1 SCALANCE S627-2M: All versions since and including v4.1 SCALANCE SC622-2C (6GK5622-2GS00-2AC2): Versions 2.0 through 2.1.4 SCALANCE SC632-2C (6GK5632-2GS00-2AC2): Versions 2.0 through 2.1.4 SCALANCE SC636-2C (6GK5636-2GS00-2AC2): Versions 2.0 through 2.1.4 SCALANCE SC642-2C (6GK5642-2GS00-2AC2): Versions 2.0 through 2.1.4 SCALANCE SC646-2C (6GK5646-2GS00-2AC2): Versions 2.0 through 2.1.4SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0): Versions 2.0 through 3.0 SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0): Versions 2.0 through 3.0 SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0): Versions 2.0 through 3.0 SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0): Versions 2.0 through 3.0 SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0): Versions 2.0 through 3.0 SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0): Versions 2.0 through 3.0 SCALANCE W-700 IEEE 802.11n family: All versions since and including v6.5 SCALANCE XB-200: All versions prior to v4.3 SCALANCE XC-200: All versions prior to v4.3 SCALANCE XF-200BA: All versions prior to v4.3 SCALANCE XM-400: All versions prior to v6.4 SCALANCE XP-200: All versions prior to v4.3 SCALANCE XR-300WG: All versions prior to v4.3 SCALANCE XR-500 Family: All versions prior to v6.4 SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00): Versions 1.1 through 1.6 SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00): Versions 1.1 through 1.6 --------- Begin Update B Part 1 of 1 --------- SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0): Versions since v3.1 and prior to v3.3.46 SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0): Versions since v3.1 and prior to v3.3.46 SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0): Versions since v3.1 and prior to v3.3.46 SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0): Versions since v3.1 and prior to v3.3.46 SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0): Versions since v3.1 and prior to v3.3.46 --------- End Update B Part 1 of 1 --------- SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants): All versions since and including v2.1 SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0): Versions 2.2 through 3.0 SIMATIC CP 1543SP-1 (incl. SIPLUS variants): All versions since and including v2.1 SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0): All versions since and including v1.0 SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants): All versions prior to V17.0 Upd 2 SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants): All versions prior to V17.0 Upd 2 SIMATIC HMI KTP Mobile Panels: All versions prior to v17.0 Upd 2 SIMATIC Logon: Versions 1.6 Upd 2 through 1.6 Upd 5 SIMATIC MV540 H (6GF3540-0GE10): All versions prior to v3.1 SIMATIC MV540 S (6GF3540-0CD10): All versions prior to v3.1 SIMATIC MV550 H (6GF3550-0GE10): All versions prior to v3.1 SIMATIC MV550 S (6GF3550-0CD10): All versions prior to v3.1 SIMATIC MV560 U (6GF3560-0LE10): All versions prior to v3.1 SIMATIC MV560 X (6GF3560-0HE10): All versions prior to v3.1 SIMATIC PCS 7 TeleControl: All versions prior to v9.1 SIMATIC PCS neo: All versions prior to v3.1 SIMATIC PDM: Versions 9.1 Upd 7 through 9.2 SP 1 SIMATIC Process Historian OPC UA Server: All versions 2019 through 2020 Upd1 SIMATIC RF166C (6GT2002-0EE20): All versions prior to v2.0 SIMATIC RF185C (6GT2002-0JE10): All versions prior to v2.0 SIMATIC RF186C (6GT2002-0JE20): All versions prior to v2.0 SIMATIC RF186CI (6GT2002-0JE50): All versions prior to v2.0 SIMATIC RF188C (6GT2002-0JE40): All versions prior to v2.0 SIMATIC RF188CI (6GT2002-0JE60): All versions prior to v2.0 SIMATIC RF360R (6GT2801-5BA30): All versions prior to v2.0 SIMATIC RF610R (6GT2811-6BC10): All versions prior to v4.0 SIMATIC RF615R (6GT2811-6CC10): All versions prior to v4.0 SIMATIC RF650R (6GT2811-6AB20): All versions prior to v4.0 SIMATIC RF680R (6GT2811-6AA10): All versions prior to v4.0 SIMATIC RF685R (6GT2811-6CA10): All versions prior to v4.0 SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to v4.5.2 SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0; 6AG1518-4AX00-4AC0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-06" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PROFINET Stack Integrated on Interniche Stack (Update E)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-25622" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-25622 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PROFINET Stack Integrated on Interniche Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "M12-L (6ES7141-6BG00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; M12-L (6ES7142-6BR00-0BB0): Versions 5.1.1 and later SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants): Versions 4.2 and later SIMATIC ET200SP IM155-6 MF HF: All versions SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants): All versions SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants): Versions 4.2 and later SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants): Versions 4.2 and later SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants): Versions 4.2 and later SIMATIC ET 200pro IM154-8 PN/DP CPU(6ES7154-8AB01-0AB0): All versions prior to V3.2.19 SIMATIC ET 200pro IM154-8F PN/DP CPU(6ES7154-8FB01-0AB0): All versions prior to V3.2.19 SIMATIC ET 200pro IM154-8FX PN/DP CPU(6ES7154-8FX00-0AB0): All versions prior to V3.2.19 SIMATIC ET 200S IM151-8 PN/DP CPU(6ES7151-8AB01-0AB0): All versions prior to V3.2.19 SIMATIC ET 200S IM151-8F PN/DP CPU(6ES7151-8FB01-0AB0): All versions prior to V3.2.19 SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0): All versions SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0): Versions 4.2 and later SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0): All versions prior to V3.3.19 SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0): All versions prior to V3.2.19 SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0): All versions prior to V3.2.19 SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0): All versions prior to V3.2.19 SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0): All versions prior to V3.2.19 SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0): All versions prior to V3.2.19 SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0): All versions prior to V3.2.19 SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0): All versions prior to V3.2.19 SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0): All versions prior to V3.2.19 SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0): All versions prior to V3.2.19 SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants): All versions prior to v6.0.10 SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants): All versions SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants): All versions prior to V8.2.3 --------- Begin Update E Part 1 of 4 --------- SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants): All versions prior to V10.1.1 --------- End Update E Part 1 of 4 --------- SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v2.0.0 --------- Begin Update E Part 2 of 4 --------- SIMATIC TDC CP51M1: All versions prior to V1.1.10 SIMATIC TDC CPU555: All versions prior to V1.2.1 --------- End Update E Part 2 of 4 --------- SIMATIC WinAC RTX: All versions SIMIT Simulation Platform: All versions SINAMICS DCM: All versions with Ethernet interface SINAMICS G110M: All versions with Ethernet interface SINAMICS G115D: All versions with Ethernet interface SINAMICS G120 (incl. SIPLUS variants): All versions with Ethernet interface SINAMICS G130: All versions SINAMICS G150: All versions SINAMICS S110: All versions with Ethernet interface SINAMICS S120 (incl. SIPLUS variants): All versions SINAMICS S150: All versions SINAMICS S210: All versions SINAMICS V90: All versions with Ethernet interface SIPLUS HCS4200 CIM4210 (6BK1942-1AA00-0AA0): All versions SIPLUS HCS4200 CIM4210C (6BK1942-1AA00-0AA1): All versions SIPLUS HCS4300 CIM4310 (6BK1943-1AA00-0AA0): All versions SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0): Versions 4.2 and later SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0): All versions prior to V3.3.19 SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0): All versions prior to V3.2.19 SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0): All versions prior to V3.2.19 SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0): All versions prior to V3.2.19 SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0): All versions prior to V3.2.19.; M12-L (6ES7148-6JG00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; The following products are affected: SIMATIC CFU DIQ (6ES7655-5PX31-1XX0): All versions SIMATIC CFU PA (6ES7655-5PX11-0XX0): All versions SIMATIC ET200AL IM157-1 PN: All versions SIMATIC ET200ecoPN; M12-L (6ES7142-6BG00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; DQ 8x24VDC/0; M12-L (6ES7143-6BH00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; CM 8x IO-Link; 5A; DI 16x24VDC; M12-L (6ES7141-6BH00-0BB0): Versions 5.1.1 and later SIMATIC ET200ecoPN; DI 8x24VDC; DIQ 16x24VDC/2A; DQ 8x24VDC/2A" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-07" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix (Update B)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-27241" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2022-27241 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mendix; are affected: -------- Begin Update B Part 1 of 2 --------- Mendix applications using Mendix 7: All versions prior to 7.23.31 Mendix applications using Mendix 8: All versions prior to 8.18.18 Mendix applications using Mendix 9: All versions prior to 9.11 Mendix applications using Mendix 9 (v9.6): All versions prior to 9.6.12 --------- End Update B Part 1 of 2 ---------.; a software platform to build mobile and web applications" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-08" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1700" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-28328; CVE-2022-28329; CVE-2022-27481" ;
    icsa:cweNumber "CWE-20; CWE-362" ;
    icsa:hasCVE cve-res:CVE-2022-27481,
        cve-res:CVE-2022-28328,
        cve-res:CVE-2022-28329 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-362 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1700" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected:SCLANCE W1788-1 M12: All versions prior to 3.0.0 SCALANCE W1788-2 ECC M12: All versions prior to 3.0.0 SCALANCE W1788-2 M12: All versions prior to 3.0.0 SCALANCE W1788-2IA M12: All versions prior to 3.0.0.; a wireless communication device; The following versions of SCALANCE" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-09" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-300 Switches" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-25753; CVE-2022-26335; CVE-2022-25751; CVE-2022-25752; CVE-2022-26334; CVE-2022-25754; CVE-2022-25756; CVE-2022-25755; CVE-2022-26380" ;
    icsa:cweNumber "CWE-352; CWE-120; CWE-80; CWE-330; CWE-284; CWE-20; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-25751,
        cve-res:CVE-2022-25752,
        cve-res:CVE-2022-25753,
        cve-res:CVE-2022-25754,
        cve-res:CVE-2022-25755,
        cve-res:CVE-2022-25756,
        cve-res:CVE-2022-26334,
        cve-res:CVE-2022-26335,
        cve-res:CVE-2022-26380 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-20,
        cwe-res:CWE-284,
        cwe-res:CWE-330,
        cwe-res:CWE-352,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X-300 switch family devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SCALANCE X302-7 EEC: All versions prior to v4.1.4; SCALANCE X304-2FE: All versions prior to v4.1.4; SCALANCE X306-1LD FE: All versions prior to v4.1.4 SCALANCE X307-2 EEC: All versions prior to v4.1.4; SCALANCE X307-3: All versions prior to v4.1.4 SCALANCE X307-3LD: All versions prior to v4.1.4 SCALANCE X308-2: All versions prior to v4.1.4; SCALANCE X308-2LD: All versions prior to v4.1.4; SCALANCE X308-2LH: All versions prior to v4.1.4; SCALANCE X308-2LH+: All versions prior to v4.1.4; SCALANCE X308-2M: All versions prior to v4.1.4; SCALANCE X308-2M POE: All versions prior to v4.1.4 SCALANCE X308-2M TS: All versions prior to v4.1.4; SCALANCE X310: All versions prior to v4.1.4; SCALANCE X310FE: All versions prior to v4.1.4 SCALANCE X320-1 FE: All versions prior to v4.1.4; SCALANCE X320-1-2LD FE: All versions prior to v4.1.4; SCALANCE X408-2: All versions prior to v4.1.4; SCALANCE XR324-4M EEC: All versions prior to v4.1.4; SCALANCE XR324-4M PoE: All versions prior to v4.1.4; SCALANCE XR324-4M PoE TS: All versions prior to v4.1.4; SCALANCE XR324-12M: All versions prior to v4.1.4; SCALANCE XR324-12M TS: All versions prior to v4.1.4; SIPLUS NET SCALANCE X308-2: All versions prior to v4.1.4; Smart Security Manager: Versions 1.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-10" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM A8000" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-27480" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2022-27480 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM A8000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SICAM A8000 CP-8031: All versions prior to v4.80 SICAM A8000 CP-8050: All versions prior to v4.80." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-11" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Energy Manager" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-23449; CVE-2022-23448; CVE-2022-23450" ;
    icsa:cweNumber "CWE-502; CWE-732; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2022-23448,
        cve-res:CVE-2022-23449,
        cve-res:CVE-2022-23450 ;
    icsa:hasCWE cwe-res:CWE-427,
        cwe-res:CWE-502,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Energy Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC Energy Manager Basic: All versions prior to v7.3 Update 1 SIMATIC Energy Manager PRO: All versions prior to v7.3 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-12" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-400 (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-40368" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2021-40368 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens S7-400 products are affected: SIMATIC S7-400 HV6 CPU family (incl. SIPLUS variants): All versions prior to v6.0.10 SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants): All versions --------- Begin Update A Part 1 of 2 --------- SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants): All versions prior to v8.2.3 --------- End Update A Part 1 of 2 --------- SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants): All versions prior to v10.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-13" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 CPU GNU/Linux subsystem (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "SeeSSB-439005" ;
    icsa:cweNumber "CWE-1104" ;
    icsa:hasCVE cve-res:SeeSSB-439005 ;
    icsa:hasCWE cwe-res:CWE-1104 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 CPU GNU/Linux subsystem" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the GNU/Linux subsystem of the following products: --------- Begin Update A Part 1 of 1 --------- SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant): firmware version V3.0 SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant): firmware version V2.9.4 SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant): firmware version V2.9.3 --------- End Update A Part 1 of 1 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-14" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 (TIA Portal)" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-42029" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2021-42029 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "STEP 7 (TIA Portal)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC STEP 7 (TIA Portal) v15: All versions; SIMATIC STEP 7 (TIA Portal) v16: All versions prior to v16 Update 5; SIMATIC STEP 7 (TIA Portal) v17: All versions prior to v17 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-15" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-28661; CVE-2022-28663; CVE-2022-28662" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-28661,
        cve-res:CVE-2022-28662,
        cve-res:CVE-2022-28663 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Simcenter Femap; are affected: Simcenter Femap: All versions prior to v2022.1.2.; a simulation application" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-16" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Administrator (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-27194" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-27194 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATICS PCS neo (Admin Console), SINTEPLAN, TIA Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "15.1; TIA Administrator in the following Siemens products is affected: SIMATICS PCS neo (Administration Console): All versions prior to v3.1 SP1 --------- Begin Update A Part 1 of 2 --------- SINETPLAN: All versions TIA Portal: Versions 15; 16; and 17 --------- End Update A Part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-104-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-104-17" ;
    dcterms:issued "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix" ;
    icsa:CVSSScore "3.1"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-25650" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-25650 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mendix; are affected: Mendix applications using Mendix 7: All versions prior to 7.23.27; Mendix applications using Mendix 8: All versions prior to 8.18.14; Mendix applications using Mendix 9: All versions prior to 9.12.0; Mendix applications using Mendix 9 (9.6): All versions prior to 9.6.3.; a software platform to build mobile and web applications" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-104-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-109-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-109-01" ;
    dcterms:issued "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Interlogix Hills ComNav" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2022-26519; CVE-2022-1318" ;
    icsa:cweNumber "CWE-307; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2022-1318,
        cve-res:CVE-2022-26519 ;
    icsa:hasCWE cwe-res:CWE-307,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hills ComNav" ;
    icsa:productDistribution "Australia" ;
    icsa:productsAffected "Carrier reports these vulnerabilities affect the following Hills ComNav remote access integration modules: Hills ComNav: versions prior to 3002-19." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-109-01" ;
    icsa:vendor "Interlogix (Carrier Global Corporation)" ;
    icsa:year 2022 .

icsa-res:ICSA-22-109-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-109-02" ;
    dcterms:issued "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Automated Logic WebCTRL" ;
    icsa:CVSSScore "5.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2022-1019" ;
    icsa:cweNumber "CWE-601" ;
    icsa:hasCVE cve-res:CVE-2022-1019 ;
    icsa:hasCWE cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebCtrl Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Carrier reports this vulnerability affects the following Automated Logic WebCtrl Server building automation software products: WebCtrl Server: All versions up to 7.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-109-02" ;
    icsa:vendor "Automated Logic" ;
    icsa:year 2022 .

icsa-res:ICSA-22-109-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-109-03" ;
    dcterms:issued "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "FANUC ROBOGUIDE Simulation Platform" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-38483; CVE-2021-43933; CVE-2021-43986; CVE-2021-43990; CVE-2021-43988" ;
    icsa:cweNumber "CWE-732; CWE-611; CWE22; CWE-284; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-38483,
        cve-res:CVE-2021-43933,
        cve-res:CVE-2021-43986,
        cve-res:CVE-2021-43988,
        cve-res:CVE-2021-43990 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-400,
        cwe-res:CWE-611,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ROBOGUIDE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: ROBOGUIDE v9.40083.00.05 (Rev T) and earlier. Note: This offline simulation software program does not provide any control or management of physical devices or processes. It is included because it is used in Industrial Control Systems (ICS).; The following versions of ROBOGUIDE; a simulation platform software suite for FANUC Robots" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-109-03" ;
    icsa:vendor "FANUC Corporation / FANUC America Corporation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-109-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-109-04" ;
    dcterms:issued "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Elcomplus SmartPPT SCADA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Russia" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2021-43939; CVE-2021-43930; CVE-2021-43932; CVE-2021-43934" ;
    icsa:cweNumber "CWE-434; CWE-79; CWE-22; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2021-43930,
        cve-res:CVE-2021-43932,
        cve-res:CVE-2021-43934,
        cve-res:CVE-2021-43939 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-285,
        cwe-res:CWE-434,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SmartPPT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of SmartPPT SCADA; is affected: SmartPPT SCADA v1.1.; an integrated voice and data dispatch software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-109-04" ;
    icsa:vendor "Elcomplus" ;
    icsa:year 2022 .

icsa-res:ICSA-22-109-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-109-05" ;
    dcterms:issued "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Elcomplus SmartPPT SCADA Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Russia" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2021-43938; CVE-2021-43937; CVE-2021-43930; CVE-2021-43934; CVE-2021-43932" ;
    icsa:cweNumber "CWE-434; CWE-352; CWE-200; CWE-79; CWE-35" ;
    icsa:hasCVE cve-res:CVE-2021-43930,
        cve-res:CVE-2021-43932,
        cve-res:CVE-2021-43934,
        cve-res:CVE-2021-43937,
        cve-res:CVE-2021-43938 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-35,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SmartPPT SCADA Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is affected: SmartPPT SCADA Server v1.4.; The following version of SmartPPT SCADA Server; an integrated voice and data dispatch software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-109-05" ;
    icsa:vendor "Elcomplus" ;
    icsa:year 2022 .

icsa-res:ICSA-22-111-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-111-01" ;
    dcterms:issued "2022-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics ASDA-Soft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-1403; CVE-2022-1402" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-1402,
        cve-res:CVE-2022-1403 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ASDA-Soft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ASDA-Soft servo software are affected: ASDA-Soft: Version 5.4.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-111-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-111-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-111-02" ;
    dcterms:issued "2022-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys SCT Pro" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-36203" ;
    icsa:cweNumber "CWE-918" ;
    icsa:hasCVE cve-res:CVE-2021-36203 ;
    icsa:hasCWE cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Johnson Controls SCT and SCT Pro building automation software are affected: Metasys System Configuration Tool (SCT): All versions prior to 14.2.2 Metasys System Configuration Tool Pro (SCT Pro): All versions prior to 14.2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-111-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-111-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-111-03" ;
    dcterms:issued "2022-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MicroSCADA Pro/X SYS600" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-8172; CVE-2021-32028; CVE-2020-8174; CVE-2020-8201; CVE-2020-1968; CVE-2020-8287; CVE-2020-8265; CVE-2021-32027; CVE-2020-8252" ;
    icsa:cweNumber "CWE-444; CWE-119; CWE-120; CWE-200; CWE-295; CWE-203" ;
    icsa:hasCVE cve-res:CVE-2020-1968,
        cve-res:CVE-2020-8172,
        cve-res:CVE-2020-8174,
        cve-res:CVE-2020-8201,
        cve-res:CVE-2020-8252,
        cve-res:CVE-2020-8265,
        cve-res:CVE-2020-8287,
        cve-res:CVE-2021-32027,
        cve-res:CVE-2021-32028 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-200,
        cwe-res:CWE-203,
        cwe-res:CWE-295,
        cwe-res:CWE-444 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroSCADA Pro/X SYS600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SYS600: Versions 10.1.1 and prior (OpenSSL Vulnerability) SYS600: Versions 9.4 FP1 through 10.2.1 (Node.js vulnerabilities) SYS600: Versions 10.0.0 through 10.2.1 (PostgreSQL vulnerabilities).; a SCADA product; The following versions of MicroSCADA Pro/X SYS600" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-111-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-116-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-116-01" ;
    dcterms:issued "2022-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy System Data Manager" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-12243; CVE-2020-1968; CVE-2020-25709; CVE-2021-23840; CVE-2020-36230; CVE-2020-36229; CVE-2020-25710" ;
    icsa:cweNumber "CWE-674; CWE-190; CWE-843; CWE-617; CWE-203" ;
    icsa:hasCVE cve-res:CVE-2020-12243,
        cve-res:CVE-2020-1968,
        cve-res:CVE-2020-25709,
        cve-res:CVE-2020-25710,
        cve-res:CVE-2020-36229,
        cve-res:CVE-2020-36230,
        cve-res:CVE-2021-23840 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-203,
        cwe-res:CWE-617,
        cwe-res:CWE-674,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "System Data Manager - SDM600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports these vulnerabilities affect the following System Data Manager products: All System Data Manager - SDM600 versions prior to version 1.2 FP2 HF10 (Build Nr. 1.2.14002.506)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-116-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-118-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-118-01" ;
    dcterms:issued "2022-04-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-36207" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-36207 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys ADS/ADX/OAS Servers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following Metasys ADS/ADX/OAS Servers:All Metasys ADS/ADX/OAS Servers: Versions 10 and 11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-118-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-123-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-123-01" ;
    dcterms:issued "2022-05-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CENTUM and ProSafe-RS" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2019-0203; CVE-2022-27188; CVE-2015-0248; CVE-2022-26034; CVE-2018-11782" ;
    icsa:cweNumber "CWE-287; CWE-20; CWE-78; CWE-399; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2015-0248,
        cve-res:CVE-2018-11782,
        cve-res:CVE-2019-0203,
        cve-res:CVE-2022-26034,
        cve-res:CVE-2022-27188 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-399,
        cwe-res:CWE-476,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CENTUM and ProSafe-RS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2015-0248: CENTUM VP (Including CENTUM VP Entry Class): R6.01.10 through R6.07.10 if VP6E5000 or VP6E5100 are installed B/M9000 VP R8.01.01 through R8.03.01 Prosafe-RS: R4.01.00 through R4.05.00 - if RS4E5000 or RS4E5100 are installed.; are affected: CVE-2022-27188: CENTUM VP series: CENTUM VP (Including CENTUM VP Entry Class): R4.01.00 through R4.03.00 (if VP6E5150 is installed) B/M9000 VP: R6.01.01 through R6.03.02 CVE-2022-26034: CENTUM VP (Including CENTUM VP Entry Class): R6.01.10 through R6.09.00 (if VP6E5000 is installed) B/M9000 VP R8.01.01 through R8.03.01 Prosafe-RS: R4.01.00 through R4.07.00 - if RS4E5000 is installed CVE-2019-0203; CVE-2018-11782; The following versions of CENTUM (a Distributed Control System) and ProSafe-RS (Safety Instrumented System)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-123-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2022 .

icsa-res:ICSA-22-125-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-125-01" ;
    dcterms:issued "2022-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-21934" ;
    icsa:cweNumber "CWE-620" ;
    icsa:hasCVE cve-res:CVE-2022-21934 ;
    icsa:hasCWE cwe-res:CWE-620 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys ADS/ADX/OAS Servers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following Metasys ADS/ADX/OAS Servers: Metasys ADS/ADX/OAS Servers: Versions 10 and 11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-125-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-130-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-130-01" ;
    dcterms:issued "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Adminer in Industrial Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-43008" ;
    icsa:cweNumber "CWE-552" ;
    icsa:hasCVE cve-res:CVE-2021-43008 ;
    icsa:hasCWE cwe-res:CWE-552 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Adminer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a database management tool; are affected: Adminer: Versions 1.112.0 to 4.6.2.; The following versions of Adminer" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-130-01" ;
    icsa:vendor "Adminer" ;
    icsa:year 2022 .

icsa-res:ICSA-22-130-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-130-02" ;
    dcterms:issued "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton Intelligent Power Protector" ;
    icsa:CVSSScore "5.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-23283" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-23283 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligent Power Protector (IPP)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Eaton IPP; a power protection platform; are affected: Eaton Intelligent Power Protector (IPP): All versions prior to v1.69 release 166." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-130-02" ;
    icsa:vendor "Eaton" ;
    icsa:year 2022 .

icsa-res:ICSA-22-130-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-130-03" ;
    dcterms:issued "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton Intelligent Power Manager Infrastructure" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-23285; CVE-2021-23286; CVE-2021-23284" ;
    icsa:cweNumber "CWE-79; CWE-1236" ;
    icsa:hasCVE cve-res:CVE-2021-23284,
        cve-res:CVE-2021-23285,
        cve-res:CVE-2021-23286 ;
    icsa:hasCWE cwe-res:CWE-1236,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligent Power Manager Infrastructure" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Eaton Intelligent power monitoring products are affected: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure): All versions including v1.5.0 plus205." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-130-03" ;
    icsa:vendor "Eaton" ;
    icsa:year 2022 .

icsa-res:ICSA-22-130-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-130-04" ;
    dcterms:issued "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eaton Intelligent Power Manager" ;
    icsa:CVSSScore "5.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-23282" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-23282 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intelligent Power Manager (IPM) v1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a power management platform; The following versions of Eaton IPM; are affected: Eaton Intelligent Power Manager (IPM) v1: All versions prior to v1.70." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-130-04" ;
    icsa:vendor "Eaton" ;
    icsa:year 2022 .

icsa-res:ICSA-22-130-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-130-05" ;
    dcterms:issued "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-1467" ;
    icsa:cweNumber "CWE-668" ;
    icsa:hasCVE cve-res:CVE-2022-1467 ;
    icsa:hasCWE cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA InTouch Access Anywhere and AVEVA Plant SCADA Access Anywhere" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA reports this vulnerability affects the following HMI products: AVEVA InTouch Access Anywhere: All versions; AVEVA Plant SCADA Access Anywhere (formerly known as AVEVA Citect Anywhere and Schneider Electric Citect Anywhere): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-130-05" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2022 .

icsa-res:ICSA-22-130-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-130-06" ;
    dcterms:issued "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSOFT GT OPC UA" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-23840; CVE-2021-3712" ;
    icsa:cweNumber "CWE-190; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-23840,
        cve-res:CVE-2021-3712 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSOFT GT OPC UA Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and version combinations using OPC UA Client Connections are affected: MELSOFT GT OPC UA Client: Versions 1.00A to 1.02C; GT SoftGOT2000: Versions 1.215Z to 1.270G." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-130-06" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-01" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-1405; CVE-2022-1404" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-1404,
        cve-res:CVE-2022-1405 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; are affected: CNCSoft: All versions prior to 1.01.32.; The following versions of CNCSoft" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-02" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSOFT iQ AppPortal" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-26691; CVE-2020-13938; CVE-2022-23943; CVE-2022-0778; CVE-2021-3711; CVE-2021-44790; CVE-2021-34798; CVE-2022-22720" ;
    icsa:cweNumber "CWE-862; CWE-444; CWE-120; CWE-787; CWE-835; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2020-13938,
        cve-res:CVE-2021-26691,
        cve-res:CVE-2021-34798,
        cve-res:CVE-2021-3711,
        cve-res:CVE-2021-44790,
        cve-res:CVE-2022-0778,
        cve-res:CVE-2022-22720,
        cve-res:CVE-2022-23943 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-444,
        cwe-res:CWE-476,
        cwe-res:CWE-787,
        cwe-res:CWE-835,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSOFT iQ AppPortal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following MELSOFT iQ AppPortal versions using the vulnerable open-source software used by VisualSVN Server; are affected: MELSOFT iQ AppPortal (SW1DND-IQAPL-M): Versions 1.00A through 1.26C." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-03" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inkscape in Industrial Products" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Open-source" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-42700; CVE-2021-42702; CVE-2021-42704" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2021-42700,
        cve-res:CVE-2021-42702,
        cve-res:CVE-2021-42704 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Inkscape, an open-source graphics editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Inkscape open-source graphics editor are affected: Inkscape Version 0.91." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-03" ;
    icsa:vendor "Inkscape" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-04" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cambium Networks cnMaestro" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2022-1357; CVE-2022-1362; CVE-2022-1358; CVE-2022-1359; CVE-2022-1360; CVE-2022-1361; CVE-2022-1356" ;
    icsa:cweNumber "CWE-676; CWE-22; CWE-89; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-1356,
        cve-res:CVE-2022-1357,
        cve-res:CVE-2022-1358,
        cve-res:CVE-2022-1359,
        cve-res:CVE-2022-1360,
        cve-res:CVE-2022-1361,
        cve-res:CVE-2022-1362 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-676,
        cwe-res:CWE-78,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "cnMaestro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of cnMaestro; are affected: cnMaestro On-Premises: All versions prior to 3.0.3-r32 cnMaestro On-Premises: All versions prior to 2.4.2-r29 cnMaestro On-Premises: All versions prior to 3.0.0-r34.; a Network management system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-04" ;
    icsa:vendor "Cambium Networks" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-05" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial PCs and CNC devices (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-8698; CVE-2020-0590; CVE-2020-8694; CVE-2020-8745" ;
    icsa:cweNumber "CWE-269; CWE-20; CWE-1189; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2020-0590,
        cve-res:CVE-2020-8694,
        cve-res:CVE-2020-8698,
        cve-res:CVE-2020-8745 ;
    icsa:hasCWE cwe-res:CWE-1189,
        cwe-res:CWE-20,
        cwe-res:CWE-269,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial PCs and CNC devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following Industrial PCs and CNC devices: SIMATIC Drive Controller family: All versions prior to v05.00.01.00 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions prior to v0209_0105 SIMATIC Field PG M5: All BIOS versions prior to v22.01.08 --------- Begin Update A Part 1 of 2 --------- SIMATIC Field PG M6: All versions prior to v26.01.08 --------- End Update A Part 1 of 2 --------- SIMATIC IPC127E: All versions SIMATIC IPC427E (incl. SIPLUS variants): All BIOS versions prior to v21.01.15 SIMATIC IPC477E: All BIOS versions prior to v21.01.15 SIMATIC IPC477E Pro: All BIOS versions prior to v21.01.15 SIMATIC IPC527G: All BIOS versions prior to v1.4.0 SIMATIC IPC527G: All BIOS versions prior to v1.4.0 SIMATIC IPC547G: All versions prior to R1.30.0 SIMATIC IPC627E: All BIOS versions prior to v25.02.08 SIMATIC IPC647E: All BIOS versions prior to v25.02.08 SIMATIC IPC677E: All BIOS versions prior to v25.02.08 SIMATIC IPC847E: All BIOS versions prior to v25.02.08 SIMATIC ITP1000: All BIOS versions prior to v23.01.08 SINUMERIK 828D HW PU.4: All versions prior to v08.00.00.00 SINUMERIK MC MCU 1720: All versions prior to v05.00.00.00 SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10: All versions SINUMERIK ONE NCU 1740: All versions prior to v04.00.00.00 SINUMERIK ONE PPU 1740: All versions prior to v06.00.00.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-06" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-24287" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2022-24287 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS, WinCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC PCS 7 v9.0: All versions SIMATIC PCS 7 v9.1: All versions SIMATIC WinCC Runtime Professional v16: All versions --------- Begin Update A Part 1 of 2 --------- SIMATIC WinCC Runtime Professional v17: All versions prior to v17 Upd4 --------- End Update A Part 1 of 2 --------- SIMATIC WinCC v7.4: All versions SIMATIC WinCC v7.5: All versions prior to 7.5 SP2 Update 8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-07" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM P850 and SICAM P855" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-29874; CVE-2022-29878; CVE-2022-29872; CVE-2022-29879; CVE-2022-29877; CVE-2022-29876; CVE-2022-29880; CVE-2022-29881; CVE-2022-29882; CVE-2022-29883; CVE-2022-29873" ;
    icsa:cweNumber "CWE-287; CWE-306; CWE-79; CWE-141; CWE-294; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-29872,
        cve-res:CVE-2022-29873,
        cve-res:CVE-2022-29874,
        cve-res:CVE-2022-29876,
        cve-res:CVE-2022-29877,
        cve-res:CVE-2022-29878,
        cve-res:CVE-2022-29879,
        cve-res:CVE-2022-29880,
        cve-res:CVE-2022-29881,
        cve-res:CVE-2022-29882,
        cve-res:CVE-2022-29883 ;
    icsa:hasCWE cwe-res:CWE-141,
        cwe-res:CWE-287,
        cwe-res:CWE-294,
        cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SICAM P850 and SICAM P855" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SICAM P850 7KG8500-0AA00-0AA0: All versions prior to v3.0 SICAM P850 7KG8500-0AA00-2AA0: All versions prior to v3.0 SICAM P850 7KG8500-0AA10-0AA0: All versions prior to v3.0 SICAM P850 7KG8500-0AA10-2AA0: All versions prior to v3.0 SICAM P850 7KG8500-0AA30-0AA0: All versions prior to v3.0 SICAM P850 7KG8500-0AA30-2AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA01-0AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA01-2AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA02-0AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA02-2AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA11-0AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA11-2AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA12-0AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA12-2AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA31-0AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA31-2AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA32-0AA0: All versions prior to v3.0 SICAM P850 7KG8501-0AA32-2AA0: All versions prior to v3.0 SICAM P855 7KG8550-0AA00-0AA0: All versions prior to v3.0 SICAM P855 7KG8550-0AA00-2AA0: All versions prior to v3.0 SICAM P855 7KG8550-0AA10-0AA0: All versions prior to v3.0 SICAM P855 7KG8550-0AA10-2AA0: All versions prior to v3.0 SICAM P855 7KG8550-0AA30-0AA0: All versions prior to v3.0 SICAM P855 7KG8550-0AA30-2AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA01-0AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA01-2AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA02-0AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA02-2AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA11-0AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA11-2AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA12-0AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA12-2AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA31-0AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA31-2AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA32-0AA0: All versions prior to v3.0 SICAM P855 7KG8551-0AA32-2AA0: All versions prior to v3.0.; electrical variable measuring devices; The following versions of SICAM P850 and SICAM P855" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-08" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products with OPC UA (Update C)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-45117" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2021-45117 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC NET PC, SITOP Manager, TeleControl Server Basic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KTP700; The following Siemens industrial products are affected: SIMATIC NET PC Software v14: All versions prior to 14 SP1 Update 14 SIMATIC NET PC Software v15: All versions SIMATIC NET PC Software v16: All versions prior to 16 Update 6 SIMATIC NET PC Software v17: All versions prior to 17 SP1 SITOP Manager: All versions --------- Begin Update C Part 1 of 3 --------- SIMATIC HMI Comfort Outdoor Panels 7\" and 15\" (including SIPLUS variants): All versions prior to 17 Update 5 SIMATIC HMI Comfort Panels 4\" to 22\" (including SIPLUS variants): All versions prior to 17 Update 5 SIMATIC HMI KTP Mobile Panels KTP400F; KTP700F; KTP900 and KTP900F: All versions prior to 17 Update 5 --------- End Update C Part 1 of 3 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-09" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2GO and Teamcenter Visualization" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-29029; CVE-2022-29032; CVE-2022-29033; CVE-2022-29031; CVE-2022-29030; CVE-2022-29028" ;
    icsa:cweNumber "CWE-680; CWE-415; CWE-824; CWE-835; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2022-29028,
        cve-res:CVE-2022-29029,
        cve-res:CVE-2022-29030,
        cve-res:CVE-2022-29031,
        cve-res:CVE-2022-29032,
        cve-res:CVE-2022-29033 ;
    icsa:hasCWE cwe-res:CWE-415,
        cwe-res:CWE-476,
        cwe-res:CWE-680,
        cwe-res:CWE-824,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2GO, Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: JT2GO: All versions prior to v13.3.0.3 Teamcenter Visualization v13.3: All versions prior to v13.3.0.3 Teamcenter Visualization v14.0: All versions prior to v14.0.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-10" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo PXC and DXR Devices (Update A)" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-24040; CVE-2022-24041; CVE-2022-24044; CVE-2022-24043; CVE-2021-41545; CVE-2022-24042; CVE-2022-24039; CVE-2022-24045" ;
    icsa:cweNumber "CWE-307; CWE-614; CWE-613; CWE-248; CWE-916; CWE-75; CWE-203; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-41545,
        cve-res:CVE-2022-24039,
        cve-res:CVE-2022-24040,
        cve-res:CVE-2022-24041,
        cve-res:CVE-2022-24042,
        cve-res:CVE-2022-24043,
        cve-res:CVE-2022-24044,
        cve-res:CVE-2022-24045 ;
    icsa:hasCWE cwe-res:CWE-203,
        cwe-res:CWE-248,
        cwe-res:CWE-307,
        cwe-res:CWE-400,
        cwe-res:CWE-613,
        cwe-res:CWE-614,
        cwe-res:CWE-75,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PXC and DXR Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following Desigo DXR and PXC controllers: Desigo DXR2: All versions prior to v01.21.142.5-22 Desigo PXC3: All versions prior to v01.21.142.4-18 Desigo PXC4: All versions prior to v02.20.142.10-10884 Desigo PXC5: All versions prior to v02.20.142.10-10884." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-11" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CP 44x-1 RNA" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-27640" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-27640 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP 442-1 RNA, 443-1 RNA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC CP 442-1 RNA: All versions prior to v1.5.18 SIMATIC CP 443-1 RNA: All versions prior to v1.5.18." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-12" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products (Update C)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-40142" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2021-40142 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC Foundation Local Discovery Server of several industrial products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the OPC Foundation Local Discovery Server of the following Siemens industrial products: SIMATIC NET PC Software v14: All versions prior to v14 SP1 Update 14 SIMATIC NET PC Software v15: All versions SIMATIC NET PC Software v16: All versions prior to V16 Update 6 SIMATIC NET PC Software v17: All versions prior to v17 SP1 SIMATIC Process Historian OPC UA Server: All versions prior to 2020 SP1 SIMATIC WinCC: All versions --------- Begin Update C Part 1 of 2 --------- SIMATIC WinCC Runtime Professional: All versions prior 10 v18 SIMATIC WinCC Unified Scada Runtime: All versions prior 10 v18 --------- End Update C Part 1 of 2 --------- TeleControl Server Basic v3: All versions prior to v3.1.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-13" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Devices using libcurl (Update B)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-22901; CVE-2021-22924" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2021-22901,
        cve-res:CVE-2021-22924 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial devices using libcurl" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following Siemens Industrial Devices using libcurl: LOGO! CMR family: All versions RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions prior to v7.1 RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions prior to v7.1 SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions prior to v7.1 SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions prior to v7.1 SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions prior to v7.1 SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions prior to v7.1 SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions prior to v7.1 SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions prior to v7.1 SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions prior to v7.1 SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions prior to v7.1 SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2): All versions prior to v7.1 SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions prior to v7.1 SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions prior to v7.1 SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions prior to v7.1 SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions prior to v7.1 SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions prior to v7.1 SCALANCE S615 (6GK5615-0AA00-2AA2): All versions prior to v7.1 --------- Begin Update B Part 1 of 2 --------- SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0): All versions prior to v3.3.46 SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0): All versions prior to v3.3.46 SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0): All versions prior to v3.3.46 SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0): All versions prior to v3.3.46 SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0): All versions prior to v3.3.46 SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0): All versions prior to V3.3.46 SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0): All versions prior to V3.3.46 --------- End Update B Part 1 of 2 --------- SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0): All versions prior to v3.0.22 SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0): All versions prior to v1.1 SINEMA Remote Connect Client: All versions prior to v3.1 SIMATIC RTU3010C (6NH3112-0BA00-0XX0): All versions prior to v5.0 SIMATIC RTU3030C (6NH3112-3BA00-0XX0): All versions prior to v5.0 SIMATIC RTU3031C (6NH3112-3BB00-0XX0): All versions prior to v5.0 SIMATIC RTU3041C (6NH3112-4BB00-0XX0): All versions prior to v5.0 SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0): All versions prior to v3.0.22." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-14" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-27653" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-27653 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an advanced simulation application; The following versions of Simcenter Femap; are affected: Simcenter Femap: All versions prior to v2020.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-15" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OpenV2G" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2022-27242" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2022-27242 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenV2G" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following open-source implementation of the ISO/IEC vehicle-to-grid communication interface (V2G CI) standard: OpenV2G: v0.9.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-132-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-132-16" ;
    dcterms:issued "2022-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter (Update B)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-24290; CVE-2022-29801" ;
    icsa:cweNumber "CWE-611; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-24290,
        cve-res:CVE-2022-29801 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following Teamcenter product lifecycle management software: Teamcenter v12.4: All versions prior to v12.4.0.13 Teamcenter v13.0: All versions prior to v13.0.0.9 Teamcenter v13.1: All versions Teamcenter v13.2: All versions prior to v13.2.0.8 Teamcenter v13.3: All versions prior to v13.3.0.3 --------- Begin Update B Part 1 of 2 --------- Teamcenter v14.0: All versions prior to v14.0.0.2 --------- End Update B Part 2 of 2 -----------" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-132-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-137-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-137-01" ;
    dcterms:issued "2022-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Circutor COMPACT DC-S BASIC" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Spain" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-1669" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-1669 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMPACT DC-S BASIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Circutor COMPACT DC-S BASIC; are affected: Circutor COMPACT DC-S BASIC: CIR_CDC_v1.2.17.; a smart metering concentrator" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-137-01" ;
    icsa:vendor "Circutor" ;
    icsa:year 2022 .

icsa-res:ICSA-22-139-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-139-01" ;
    dcterms:issued "2022-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series (Update B)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-25161; CVE-2022-25162" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-25161,
        cve-res:CVE-2022-25162 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FX5UC-32MT/DSS-TS; 64; The following versions of the MELSEC iQ-F series a CPU module are affected: --------- Begin Update A Part 1 of 3 --------- MELSEC iQ-F FX5U-xMy/z x=32; z=ES; DSS with serial number 17X**** or later: All versions prior to 1.270 MELSEC iQ-F FX5UC-xMy/z x=32; DSS with Serial number 179**** and prior: All versions prior to 1.073 MELSEC iQ-F FX5UC-xMy/z x=32; 40; 80; y=T; DSS with Serial number 179**** and prior: All versions prior to 1.073 --------- End Update A Part 1 of 3 --------- MELSEC iQ-F FX5UC-32MT/DS-TS; 60; FX5UC-32MR/DS-TS: All versions prior to 1.270 MELSEC iQ-F FX5UJ-xMy/z x=24; ESS: Version 1.000 (These products are sold in limited regions) --------- End Update A Part 2 of 3 ---------.; DSS with serial number 17X**** or later: All versions prior to 1.270 MELSEC iQ-F FX5U-xMy/z x=32; ESS: All versions prior to 1.030 --------- Begin Update A Part 2 of 3 --------- MELSEC iQ-F FX5UJ-xMy/ES-A x=24; y=T.R; R; z=D; y=T.R: All versions prior to 1.031 (These products are sold in limited regions) MELSEC iQ-F FX5S-xMy/z x=30; DS; ESS; 96" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-139-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-144-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-144-01" ;
    dcterms:issued "2022-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix Controllers" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1797" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-1797 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Logix Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following Logix Controllers: CompactLogix 5380 controllers: firmware Versions 32.013 and earlier Compact GuardLogix 5380 controllers: firmware Versions 32.013 and earlier CompactLogix 5480 controllers: firmware Versions 32.013 and earlier ControlLogix 5580 controllers: firmware Versions 32.013 and earlier GuardLogix 5580 controllers: firmware Versions 32.013 and earlier CompactLogix 5370 controllers: firmware Versions 33.013 and earlier Compact GuardLogix 5370 controllers: firmware Versions 33.013 and earlier ControlLogix 5570 controllers: firmware Versions 33.013 and earlier GuardLogix 5570 controllers: firmware Versions 33.013 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-144-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-144-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-144-02" ;
    dcterms:issued "2022-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Matrikon OPC Server" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1261" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-1261 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Matrikon OPC Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Makitron OPC software are affected: Matrikon OPC Server: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-144-02" ;
    icsa:vendor "Matrikon (Subsidiary of Honeywell)" ;
    icsa:year 2022 .

icsa-res:ICSA-22-146-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-146-01" ;
    dcterms:issued "2022-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Keysight N6854A Geolocation server and N6841A RF Sensor software" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2022-1661; CVE-2022-1660" ;
    icsa:cweNumber "CWE-502; CWE-23" ;
    icsa:hasCVE cve-res:CVE-2022-1660,
        cve-res:CVE-2022-1661 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "N6854A Geolocation server and N6841A RF Sensor software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Keysight N6854A and N6841A RF: Version 2.4.0 or later.; a spectrum monitoring platform; The following version of Keysight N6854A Geolocation and server and N6841A Sensor software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-146-01" ;
    icsa:vendor "Keysight Technologies Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-146-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-146-02" ;
    dcterms:issued "2022-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape Csfont" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-30540; CVE-2022-29488; CVE-2022-28690; CVE-2022-27184" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-27184,
        cve-res:CVE-2022-28690,
        cve-res:CVE-2022-29488,
        cve-res:CVE-2022-30540 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape Csfont" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Horner Automation Cscape PLC management software are affected: Horner Automation Cscape Csfont: Versions 9.90 SP5 (v9.90.196) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-146-02" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-151-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-151-01" ;
    dcterms:issued "2022-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Alpha7 PC Loader" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-1888" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-1888 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alpha7 PC Loader" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Alpha7 PC Loader: All versions.; The following versions of Alpha7 PC Loader; a servo drive system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-151-01" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-153-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-153-01" ;
    dcterms:issued "2022-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Carrier LenelS2 HID Mercury access panels" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2022-31479; CVE-2022-31486; CVE-2022-31482; CVE-2022-31481; CVE-2022-31480; CVE-2022-31483; CVE-2022-31484; CVE-2022-31485" ;
    icsa:cweNumber "CWE-22; CWE-120; CWE-78; CWE-693; CWE-425" ;
    icsa:hasCVE cve-res:CVE-2022-31479,
        cve-res:CVE-2022-31480,
        cve-res:CVE-2022-31481,
        cve-res:CVE-2022-31482,
        cve-res:CVE-2022-31483,
        cve-res:CVE-2022-31484,
        cve-res:CVE-2022-31485,
        cve-res:CVE-2022-31486 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-22,
        cwe-res:CWE-425,
        cwe-res:CWE-693,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HID Mercury access panels sold by LenelS2" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Carrier reports these vulnerabilities affect the following HID Mercury access panels sold by LenelS2: LNL-X2210 LNL-X2220 LNL-X3300 LNL-X4420 LNL-4420 S2-LP-1501 S2-LP-4502 S2-LP-2500 S2-LP-1502." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-153-01" ;
    icsa:vendor "Carrier LenelS2" ;
    icsa:year 2022 .

icsa-res:ICSA-22-153-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-153-02" ;
    dcterms:issued "2022-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Illumina Local Run Manager (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-1524; CVE-2022-1518; CVE-2022-1517; CVE-2022-1521; CVE-2022-1519" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-250; CWE-284; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-1517,
        cve-res:CVE-2022-1518,
        cve-res:CVE-2022-1519,
        cve-res:CVE-2022-1521,
        cve-res:CVE-2022-1524 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-250,
        cwe-res:CWE-284,
        cwe-res:CWE-319,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Local Run Manager (LRM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following devices and instruments using LRM software are affected: Illumina In Vitro Diagnostic (IVD) devices: NextSeq 550Dx: LRM Versions 1.3 to 3.1 MiSeq Dx: LRM Versions 1.3 to 3.1 Researcher Use Only (ROU) instruments: NextSeq 500 Instrument: LRM Versions 1.3 to 3.1 NextSeq 550 Instrument: LRM Versions 1.3 to 3.1 MiSeq Instrument: LRM Versions 1.3 to 3.1 iSeq 100 Instrument: LRM Versions 1.3 to 3.1 MiniSeq Instrument: LRM Versions 1.3 to 3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-153-02" ;
    icsa:vendor "Illumina" ;
    icsa:year 2022 .

icsa-res:ICSA-22-154-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-154-01" ;
    dcterms:issued "2022-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Vulnerabilities Affecting Dominion Voting Systems ImageCast X" ;
    icsa:CVSSSeverity "Not Assigned" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Government Facilities/Election Infrastructure" ;
    icsa:cveNumber "CVE-2022-1746; CVE-2022-1745; CVE-2022-1740; CVE-2022-1739; CVE-2022-1743; CVE-2022-1744; CVE-2022-1741; CVE-2022-1747; CVE-2022-1742" ;
    icsa:cweNumber "CWE-912; CWE-290; CWE-1283; CWE-250; CWE-266; CWE-24; CWE-346; CWE-347; CWE-424" ;
    icsa:hasCVE cve-res:CVE-2022-1739,
        cve-res:CVE-2022-1740,
        cve-res:CVE-2022-1741,
        cve-res:CVE-2022-1742,
        cve-res:CVE-2022-1743,
        cve-res:CVE-2022-1744,
        cve-res:CVE-2022-1745,
        cve-res:CVE-2022-1746,
        cve-res:CVE-2022-1747 ;
    icsa:hasCWE cwe-res:CWE-1283,
        cwe-res:CWE-24,
        cwe-res:CWE-250,
        cwe-res:CWE-266,
        cwe-res:CWE-290,
        cwe-res:CWE-346,
        cwe-res:CWE-347,
        cwe-res:CWE-424,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Democracy Suite ImageCast X" ;
    icsa:productDistribution "Multiple Countries" ;
    icsa:productsAffected "as used in Dominion Democracy Suite Voting System Version 5.5-A NOTE: After following the vendor's procedure to upgrade the ImageCast X from Version 5.5.10.30 to 5.5.10.32; the ImageCast X may be left in a configuration that could allow an attacker who can attach an external input device to escalate privileges and/or install malicious code. Instructions to check for and mitigate this condition are available from Dominion Voting Systems. Any jurisdictions running ImageCast X are encouraged to contact Dominion Voting Systems to understand the vulnerability status of their specific implementation.; as used in Dominion Democracy Suite Voting System Version 5.5-A ImageCast X application Versions 5.5.10.30 and 5.5.10.32; The following versions of the Dominion Voting Systems ImageCast X software are known to be affected (other versions were not able to be tested): ImageCast X firmware based on Android 5.1; or after performing other Android administrative actions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-154-01" ;
    icsa:vendor "Dominion Voting Systems" ;
    icsa:year 2022 .

icsa-res:ICSA-22-160-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-160-01" ;
    dcterms:issued "2022-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Air Conditioning Systems" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2016-2183; CVE-2009-3555; CVE-2022-24296; CVE-2015-2808; CVE-2013-2566" ;
    icsa:cweNumber "CWE-327; CWE-300; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2009-3555,
        cve-res:CVE-2013-2566,
        cve-res:CVE-2015-2808,
        cve-res:CVE-2016-2183,
        cve-res:CVE-2022-24296 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-300,
        cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Air Conditioning Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The firmware on the following Mitsubishi Electric products is affected: G-150AD: Versions 3.21 and prior AG-150A-A: Versions 3.21 and prior AG-150A-J: Versions 3.21 and prior GB-50AD: Versions 3.21 and prior GB-50ADA-A: Versions 3.21 and prior GB-50ADA-J: Versions 3.21 and prior EB-50GU-A: Versions. 7.10 and prior EB-50GU-J: Versions 7.10 and prior AE-200J: Versions 7.97 and prior AE-200A: Versions 7.97 and prior AE-200E: Versions 7.97 and prior AE-50J: Versions 7.97 and prior AE-50A: Versions 7.97 and prior AE-50E: Versions 7.97 and prior EW-50J: Versions 7.97 and prior EW-50A: Versions 7.97 and prior EW-50E: Versions 7.97 and prior TE-200A: Versions 7.97 and prior TE-50A: Versions 7.97 and prior TW-50A: Versions 7.97 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-160-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-165-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-165-01" ;
    dcterms:issued "2022-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys ADS ADX OAS Servers" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-21937; CVE-2022-21938; CVE-2022-21935" ;
    icsa:cweNumber "CWE-79; CWE-620" ;
    icsa:hasCVE cve-res:CVE-2022-21935,
        cve-res:CVE-2022-21937,
        cve-res:CVE-2022-21938 ;
    icsa:hasCWE cwe-res:CWE-620,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys ADS/ADX/OAS Servers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Metasys ADS/ADX/OAS Servers are affected: All Metasys ADS/ADX/OAS Versions 10 and 11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-165-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-165-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-165-02" ;
    dcterms:issued "2022-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Meridian Cooperative Meridian" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-29578" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-29578 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Meridian" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of Meridian utility software are affected: Version 22.02 Version 22.03." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-165-02" ;
    icsa:vendor "Meridian Cooperative" ;
    icsa:year 2022 .

icsa-res:ICSA-22-165-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-165-03" ;
    dcterms:issued "2022-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-25163" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-25163 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-Q/L Series and iQ-R Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MELSEC-L Ethernet Interface Module; The following versions of MELSEC-Q Ethernet Interface Module; and MELSEC iQ-R MES Interface Module are affected: MELSEC-Q Series QJ71E71-100: First five digits of serial number 24061 and prior MELSEC-L Series LJ71E71-100: First five digits of serial number 24061 and prior MELSEC iQ-R Series RD81MES96N: firmware Version 08 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-165-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-01" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect C-More EA9 HMI" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2006; CVE-2022-2005" ;
    icsa:cweNumber "CWE-427; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-2005,
        cve-res:CVE-2022-2006 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "C-more EA9 HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an industrial touch screen HMI; are affected: C-more EA9 with the following part numbers; all versions prior to 6.73: EA9-T6CL EA9-T6CL-R EA9-T7CL EA9-T7CL-R EA9-T8CL EA9-T10CL EA9-T10WCL EA9-T12CL EA9-T15CL EA9-T15CL-R EA9-RHMI EA9-PGMSW.; The following versions of C-more EA9" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-01" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-02" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect DirectLOGIC with Serial Communication (Update A)" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2003" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-2003 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DirectLOGIC with Serial Communication" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a programmable controller; are affected: The following D0-06 series CPUs; prior to v2.72: D0-06DD1 D0-06DD2 D0-06DR D0-06DA D0-06AR D0-06AA D0-06DD1-D D0-06DD2-D D0-06DR-D D0-06DD2-D D0-06DR-D --------- Begin Update A part 1 of 2 --------- D0-05DD: All versions prior to V5.41 D0-05DR: All versions prior to V5.41. D0-05DA: All versions prior to V5.41 D0-05AR: All versions prior to V5.41 D0-05AA: All versions prior to V5.41 D0-05AD: All versions prior to V5.41 D0-05DD-D: All versions prior to V5.41 D0-05DR-D: All versions prior to V5.41 D2-230: All versions D2-240: All versions D2-250: All versions D2-250-1: All versions prior to V4.91 D2-260: All versions prior to V2.71 D2-262: All versions prior to V1.06 D3-350: All versions D4-430: All versions D4-440: All versions D4-450: All versions D4-454: All versions prior to V1.04 F1-130AA: All versions F1-130AD: All versions F1-130DA: All versions F1-130DD: All versions F1-130DD-D: All versions F1-130DR-D: All versions F1-130AR: All versions F1-130DR: All versions --------- End Update A part 1 of 2 ---------.; The following versions of DirectLOGIC with serial communication" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-02" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-03" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect DirectLOGIC with Ethernet (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2003; CVE-2022-2004" ;
    icsa:cweNumber "CWE-319; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-2003,
        cve-res:CVE-2022-2004 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DirectLOGIC with Ethernet Communication Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a PLC Ethernet module; The following versions of DirectLOGIC with Ethernet communication modules; are affected: All versions of H0-ECOM and H0-ECOM100 when installed in the following D0-06 series CPUs versions prior to v2.72: D0-06DD1 D0-06DD2 D0-06DR D0-06DA D0-06AR D0-06AA D0-06DD1-D D0-06DD2-D D0-06DR-D --------- Begin Update A part 1 of 2 --------- All versions of H0-ECOM and H0-ECOM100 when installed in the following D0-05 series CPUs versions prior to v5.41 D0-05DD D0-05DR D0-05DA D0-05AR D0-05AA D0-05AD D0-05DD-D D0-05DR-D All versions of H2-ECOM and H2-ECOM100 when installed in the following: D2-240: All versions D2-250: All versions D2-250-1: All versions prior to 4.91 D2-260: All versions prior to 2.71 D2-262: All versions prior to 1.06 All versions of H4-ECOM and All versions of H4-ECOM100 when installed in the following: D4-430: All versions D4-440: All versions D4-450: All versions D4-454: All versions prior to 1.04 --------- End Update A part 1 of 2 ---------DirectLOGIC with Serial Communication." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-03" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-04" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix SAML Module" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-32286; CVE-2022-32285" ;
    icsa:cweNumber "CWE-79; CWE-611" ;
    icsa:hasCVE cve-res:CVE-2022-32285,
        cve-res:CVE-2022-32286 ;
    icsa:hasCWE cwe-res:CWE-611,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix SAML Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following Mendix SAML Modules: Mendix SAML Module (Mendix 7 compatible): all versions prior to v1.16.6 Mendix SAML Module (Mendix 8 compatible): all versions prior to v2.2.2 Mendix SAML Module (Mendix 9 compatible): all versions prior to v3.2.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-05" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens EN100 Ethernet Module" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-30937" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2022-30937 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EN100 Ethernet Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of EN100 Ethernet Module are affected: EN100 Ethernet module DNP3 IP variant: all versions EN100 Ethernet module IEC 104 variant: all versions EN100 Ethernet module IEC 61850 variant: all versions prior to v4.37 EN100 Ethernet module Modbus TCP variant: all versions EN100 Ethernet module PROFINET IO variant: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-06" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Apache HTTP Server (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-34798; CVE-2021-40438; CVE-2021-39275" ;
    icsa:cweNumber "CWE-787; CWE-476; CWE-918" ;
    icsa:hasCVE cve-res:CVE-2021-34798,
        cve-res:CVE-2021-39275,
        cve-res:CVE-2021-40438 ;
    icsa:hasCWE cwe-res:CWE-476,
        cwe-res:CWE-787,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Apache HTTP Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM NMS: All versions when using the device firmware upgrade mechanism --------- Begin Update A part 1 of 3 --------- SINEC NMS: All versions prior to v1.0.3 --------- End Update A part 1 of 3 --------- SINEMA Remote Connect Server: All versions prior to v3.1 SINEMA Server v14: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-07" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "4.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-27220; CVE-2022-27219" ;
    icsa:cweNumber "CWE-358" ;
    icsa:hasCVE cve-res:CVE-2022-27219,
        cve-res:CVE-2022-27220 ;
    icsa:hasCWE cwe-res:CWE-358 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following SINEMA Remote Connect management platform: SINEMA Remote Connect Server: all versions prior to v3.0 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-08" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM GridEdge" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30229; CVE-2022-30231; CVE-2022-30230" ;
    icsa:cweNumber "CWE-306; CWE-402" ;
    icsa:hasCVE cve-res:CVE-2022-30229,
        cve-res:CVE-2022-30230,
        cve-res:CVE-2022-30231 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-402 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM GridEdge Essential ARM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SICAM GridEdge Essential ARM: All versions prior to v2.6.6 SICAM GridEdge Essential Intel: All versions prior to v2.6.6 SICAM GridEdge Essential with GDS ARM: All versions prior to v2.6.6 SICAM GridEdge Essential with GDS Intel: All versions prior to v2.6.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-09" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE LPE9403 Third-Party Vulnerabilities" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-41091; CVE-2020-27304; CVE-2021-41103; CVE-2021-39293; CVE-2021-36221; CVE-2022-0847; CVE-2021-20317; CVE-2021-41092; CVE-2021-41089; CVE-2021-33910" ;
    icsa:cweNumber "CWE-22; CWE-732; CWE-200; CWE-770; CWE-665; CWE-362; CWE-281" ;
    icsa:hasCVE cve-res:CVE-2020-27304,
        cve-res:CVE-2021-20317,
        cve-res:CVE-2021-33910,
        cve-res:CVE-2021-36221,
        cve-res:CVE-2021-39293,
        cve-res:CVE-2021-41089,
        cve-res:CVE-2021-41091,
        cve-res:CVE-2021-41092,
        cve-res:CVE-2021-41103,
        cve-res:CVE-2022-0847 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-281,
        cwe-res:CWE-362,
        cwe-res:CWE-665,
        cwe-res:CWE-732,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE LPE9403" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "which are part of the SCALANCE LPE9403.; Linux kernel and system; a processing power extension for the SCALANCE family of products; are affected: All versions prior to v2.0 The vulnerabilities exist within the third-party components CivetWeb; Docker; The following versions of SCALANCE LPE9403 (Local Processing Engine)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-10" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE XM-400 and XR-500" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-37182" ;
    icsa:cweNumber "CWE-354" ;
    icsa:hasCVE cve-res:CVE-2021-37182 ;
    icsa:hasCWE cwe-res:CWE-354 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE XM-400 and XR-500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "24V (L3 int.): All versions prior to v6.5 XR528-6M: All versions prior to v6.5 XR528-6M (2HR2): All versions prior to v6.5 XR528-6M (2HR2; L3 int.): All versions prior to v6.5 XR528-6M (L3 int.): All versions prior to v6.5 XR552-12M: All versions prior to v6.5 XR552-12M (2HR2): All versions prior to v6.5 XR552-12M (2HR2): All versions prior to v6.5 XR552-12M (2HR2; 24V: All versions prior to v6.5 XR524-8C; 24V (L3 int.): All versions prior to v6.5 XR526-8C; 1x230V (L3 int.): All versions prior to v6.5 XR524-8C; 1x230V: All versions prior to v6.5 XR524-8C; 1x230V (L3 int.): All versions prior to v6.5 XR526-8C; The following versions of SCALANCE X industrial switches are affected: XM408-4C: All versions prior to v6.5 XM408-4C (L3 int.): All versions prior to v6.5 XM408-8C: All versions prior to v6.5 XM408-8C (L3 int.): All versions prior to v6.5 XM416-4C: All versions prior to v6.5 XM416-4C (L3 int.): All versions prior to v6.5 XR524-8C; 1x230V: All versions prior to v6.5 XR526-8C; 2x230V: All versions prior to v6.5 XR526-8C; 2x230V (L3 int.): All versions prior to v6.5 XR524-8C; 2x230V (L3 int.): All versions prior to v6.5 XR526-8C; L3 int.): All versions prior to v6.5.; 24V: All versions prior to v6.5 XR526-8C; 2x230V: All versions prior to v6.5 XR524-8C" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-11" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Xpedition Designer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-31465" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2022-31465 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Xpedition Designer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following PCB design flow products: Xpedition Designer: All versions prior to vX.2.11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-12" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power Systems" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-26476" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-26476 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Spectrum Power" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a SCADA; The following versions of Spectrum Power; are affected: Spectrum Power 4: All versions using Shared HIS Spectrum Power 7: All versions using Shared HIS Spectrum Power MGMS: All versions using Shared HIS.; data modeling and monitoring system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-13" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter (Update A)" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-31619" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-31619 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Teamcenter v12.4: All versions prior to v12.4.0.13 Teamcenter v13.0: All versions prior to v13.0.0.9 Teamcenter v13.1: All versions prior to v13.1.0.9 --------- Begin Update A Part 1 of 4 --------- Teamcenter V13.2; which is not installed by default.; all versions prior to V14.0.0.2 --------- End Update A Part 2 of 4 --------- This vulnerability only affects software using the Java EE Server Manager HTML Adaptor; a product lifecycle management software; The following versions of Teamcenter; all versions prior to V13.2.0.9 --------- End Update A Part 1 of 4 --------- Teamcenter V13.3; all versions prior to V13.3.0.3 --------- Begin Update A Part 2 of 4 --------- Teamcenter V14.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-14" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OpenSSL Affected Industrial Products (Update E)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-0778" ;
    icsa:cweNumber "CWE-835" ;
    icsa:hasCVE cve-res:CVE-2022-0778 ;
    icsa:hasCWE cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple industrial products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ports on front) (6GK5324-4GG10- 4ER2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60- 250VDC; DC 24V) (6GK5328-4SS00-2AR3): All versions SCALANCE XR524-8C; ports on front) (6GK5324-4QG00-1AR2): All versions SCALANCE XR324-4M PoE (24V; 24V (L3 int.) (6GK5526-8GR00-2AR2): All versions prior to V6.5 SCALANCE XR528-6M (6GK5528-0AA00-2AR2): All versions prior to V6.5 SCALANCE XR528-6M (2HR2) (6GK5528-0AA00-2HR2): All versions prior to V6.5 SCALANCE XR528-6M (2HR2; ports on rear) (6GK5324-0GG10-3HR2): All versions SCALANCE XR324-12M TS (24V) (6GK5324- 0GG00-1CR2): All versions SCALANCE XR324-12M TS (24V) (6GK5324- 0GG10-1CR2): All versions SCALANCE XR324WG (24 x FE; ports on rear) (6GK5324-4GG00-1JR2): All versions SCALANCE XR324-4M EEC (24V; AC230V) (6GK5328-4FS00- 3RR3): All versions SCALANCE XR328-4C WG (24XFE; 2x230V (L3 int.) (6GK5524-8GR00-4AR2): All versions prior to V6.5 SCALANCE XR524-8C; DC 24V) (6GK5324-0BA00-2AR3): All versions SCALANCE XR328-4C WG (24xFE; 2x230V (6GK5526-8GS00-4AR2): All versions prior to V6.5 SCALANCE XR526-8C; coated) (6GK5302-7GD00-1GA3): All versions SCALANCE X302-7 EEC (230V) (6GK5302- 7GD00-3EA3): All versions SCALANCE X302-7 EEC (230V; coated) (6GK5307-2FD00-2GA3): All versions SCALANCE X307-2 EEC (2x 230V) (6GK5307- 2FD00-4EA3): All versions SCALANCE X307-2 EEC (2x 230V; AC 230V) (6GK5328-4SS00-3AR3): All versions SCALANCE XR328-4C WG (28xGE; PN) (6GK5213-3BB00- 2AB2): All versions SCALANCE XB213-3 (ST; AC 230V) (6GK5324-0BA00-3AR3): All versions SCALANCE XR324WG (24 X FE; ports on rear) (6GK5324-4GG10-1JR2): All versions SCALANCE XR324-4M EEC (100-240VAC/60- 250VDC; ports on rear) (6GK5324-4QG00-1HR2): All versions SCALANCE XR324-4M PoE (230V; ports on rear) (6GK5324-4GG00-2JR2): All versions SCALANCE XR324-4M EEC (2x 24V; L3 int.) (6GK5528-0AR00-2HR2): All versions prior to V6.5 SCALANCE XR528-6M (L3 int.) (6GK5528-0AR00-2AR2): All versions prior to V6.5 SCALANCE XR552-12M (6GK5552-0AA00-2AR2): All versions prior to V6.5 SCALANCE XR552-12M (2HR2) (6GK5552-0AA00-2HR2): All versions prior to V6.5 SCALANCE XR552-12M (2HR2) (6GK5552-0AR00-2HR2): All versions prior to V6.5 SCALANCE XR552-12M (2HR2; PN) (6GK5205-3BD00- 2AB2): SCALANCE XB205-3LD (SC; coated) (6GK5307-2FD00-3GA3): All versions SCALANCE X307-3 (6GK5307-3BL00-2AA3): All versions SCALANCE X307-3 (6GK5307-3BL10-2AA3): All versions SCALANCE X307-3LD (6GK5307-3BM00- 2AA3): All versions SCALANCE X307-3LD (6GK5307-3BM10- 2AA3): All versions SCALANCE X308-2 (6GK5308-2FL00-2AA3): All versions SCALANCE X308-2 (6GK5308-2FL10-2AA3): All versions SCALANCE X308-2LD (6GK5308-2FM00- 2AA3): All versions SCALANCE X308-2LD (6GK5308-2FM10- 2AA3): All versions SCALANCE X308-2LH (6GK5308-2FN00- 2AA3): All versions SCALANCE X308-2LH (6GK5308-2FN10- 2AA3): All versions SCALANCE X308-2LH+ (6GK5308-2FP00- 2AA3): All versions SCALANCE X308-2LH+ (6GK5308-2FP10- 2AA3): All versions SCALANCE X308-2M (6GK5308-2GG00-2AA2): All versions SCALANCE X308-2M (6GK5308-2GG10-2AA2): All versions SCALANCE X308-2M PoE (6GK5308-2QG00- 2AA2): All versions SCALANCE X308-2M PoE (6GK5308-2QG10- 2AA2): All versions SCALANCE X308-2M TS (6GK5308-2GG00- 2CA2): All versions SCALANCE X308-2M TS (6GK5308-2GG10- 2CA2): All versions SCALANCE X310 (6GK5310-0FA00-2AA3): All versions SCALANCE X310 (6GK5310-0FA10-2AA3): All versions SCALANCE X310FE (6GK5310-0BA00-2AA3): All versions SCALANCE X310FE (6GK5310-0BA10-2AA3): All versions SCALANCE X320-1 FE (6GK5320-1BD00- 2AA3): All versions SCALANCE X320-1-2LD FE (6GK5320-3BF00- 2AA3): All versions SCALANCE X408-2 (6GK5408-2FD00-2AA2): All versions SCALANCE XB205-3 (SC; ports on front) (6GK5324-0GG00-3AR2): All versions SCALANCE XR324-12M (230V; coated) (6GK5302-7GD00-4GA3): All versions SCALANCE X302-7 EEC (24V) (6GK5302- 7GD00-1EA3): All versions SCALANCE X302-7 EEC (24V; 1x230V (6GK5524-8GS00-3AR2): All versions prior to V6.5 SCALANCE XR524-8C; PN) (6GK5213- 3BD00-2AB2): All versions SCALANCE XB213-3 (SC; 2x230V (L3 int.) (6GK5526-8GR00-4AR2): All versions prior to V6.5 SCALANCE XR526-8C; ports on front) (6GK5324-0GG00-1AR2): All versions SCALANCE XR324-12M (24V; 1x230V (L3 int.) (6GK5526-8GR00-3AR2): All versions prior to V6.5 SCALANCE XR526-8C; ports on front) (6GK5324-4QG00-1CR2): All versions SCALANCE XR324-12M (24V; PN) (6GK5205-3BB00-2AB2): All versions SCALANCE XB205-3 (ST; coated) (6GK5302-7GD00-2GA3): All versions SCALANCE X302-7 EEC (2x 230V) (6GK5302- 7GD00-4EA3): All versions SCALANCE X302-7 EEC (2x 230V; ports on front) (6GK5324-4GG00- 3ER2): All versions SCALANCE XR324-4M EEC (100-240VAC/60- 250VDC; ports on rear) (6GK5324-4GG00- 3JR2): All versions SCALANCE XR324-4M EEC (100-240VAC/60- 250VDC; E/IP) (6GK5213- 3BB00-2TB2): All versions SCALANCE XB213-3LD (SC; ports on front) (6GK5324-4QG00-3AR2): All versions SCALANCE XR324-4M PoE (230V; 2x230V (6GK5524-8GS00-4AR2): All versions prior to V6.5 SCALANCE XR524-8C; ports on rear) (6GK5324-4GG10-2JR2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60- 250VDC; DC24V) (6GK5328-4FS00-2RR3): All versions SCALANCE XR328-4C WG (28xGE; E/IP) (6GK5213- 3BD00-2TB2): All versions SCALANCE XB213-3 (ST; 24V (L3 int.) (6GK5524-8GR00-2AR2): All versions prior to V6.5 SCALANCE XR526-8C; PN) (6GK5213- 3BF00-2AB2): All versions SCALANCE XB213-3LD (SC; L3 int.) (6GK5552-0AR00-2AR2): All versions prior to V6.5 Security Configuration Tool (SCT): All versions SIMATIC Cloud Connect 7 CC712 (6GK1411- 1AC00): All versions prior to v1.9 SIMATIC Cloud Connect 7 CC716 (6GK1411- 5AC00): All versions prior to v1.9 SIMATIC CP 343-1 Advanced (6GK7343-1GX31- 0XE0): All versions SIMATIC CP 443-1 Advanced (6GK7443-1GX30- 0XE0): All versions SIMATIC CP 443-1 OPC UA (6GK7443-1UX00- 0XE0): All versions SIMATIC CP 1242-7 V2 (6GK7242-7KX31- 0XE0): All versions SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0): All versions SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30- 0XE0): All versions SIMATIC CP 1243-7 LTE US (6GK7243-7SX30- 0XE0): All versions SIMATIC CP 1243-8 IRC (6GK7243-8RX30- 0XE0): All versions SIMATIC CP 1542SP-1 (6GK7542-6UX00- 0XE0): All versions SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0): All versions SIMATIC CP 1543SP-1 (6GK7543-6WX00- 0XE0): All versions SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0): All versions SIMATIC CP 1626 (6GK1162-6AA01): All versions SIMATIC CP 1628 (6GK1162-8AA00): All versions --------- Begin Update E Part 1 of 8 --------- SIMATIC Drive Controller family: All versions prior to v3.0.1 --------- End Update E Part 1 of 8 --------- SIMATIC ET 200SP Open Controller (incl. SIPLUS variants): All versions --------- Begin Update E Part 2 of 8 --------- SIMATIC HMI Unified Comfort Panels: All versions prior to v18 --------- End Update E Part 2 of 8 --------- SIMATIC Logon: All versions prior to v1.6 Upd6 SIMATIC MV540 H (6GF3540-0GE10): All versions prior to v3.3 SIMATIC MV540 S (6GF3540-0CD10): All versions prior to v3.3 SIMATIC MV550 H (6GF3550-0GE10): All versions prior to v3.3 SIMATIC MV550 S (6GF3550-0CD10): All versions prior to v3.3 SIMATIC MV560 U (6GF3560-0LE10): All versions prior to v3.3 SIMATIC MV560 X (6GF3560-0HE10): All versions prior to v3.3 SIMATIC NET PC Software v14: All versions SIMATIC NET PC Software v15: All versions SIMATIC NET PC Software v16: All versions prior to v16 Update 6 SIMATIC NET PC Software v17: All versions SIMATIC PCS 7 TeleControl: All versions --------- Begin Update E Part 3 of 8 --------- SIMATIC PCS neo (Administration Console): All versions prior to v4.0 --------- End Update E Part 3 of 8 --------- SIMATIC PDM: All versions prior to v9.2.2 --------- Begin Update E Part 4 of 8 --------- SIMATIC Process Historian OPC UA Server: All versions prior to v2020 SP1 Upd1 --------- End Update E Part 4 of 8 --------- SIMATIC RF166C (6GT2002-0EE20): All versions prior to v2.0.1 SIMATIC RF185C (6GT2002-0JE10): All versions prior to v2.0.1 SIMATIC RF186C (6GT2002-0JE20): All versions prior to v2.0.1 SIMATIC RF186CI (6GT2002-0JE50): All versions prior to v2.0.1 SIMATIC RF188C (6GT2002-0JE40): All versions prior to v2.0.1 SIMATIC RF188CI (6GT2002-0JE60): All versions prior to v.2.0.1 SIMATIC RF360R (6GT2801-5BA30): All versions prior to v2.0.1 SIMATIC RF610R (6GT2811-6BC10): All versions prior to v4.0.1 SIMATIC RF615R (6GT2811-6CC10): All versions prior to v4.0.1 SIMATIC RF650R (6GT2811-6AB20): All versions prior to v4.0.1 SIMATIC RF680R (6GT2811-6AA10): All versions prior to v4.0.1 SIMATIC RF685R (6GT2811-6CA10): All versions prior to v4.0.1 --------- Begin Update E Part 5 of 8 --------- SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to v4.6.0 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to v3.0.1 --------- End Update E Part 5 of 8 --------- SIMATIC S7-1500 Software Controller (incl. F): All versions --------- Begin Update E Part 6 of 8 --------- SIMATIC S7-PLCSIM Advanced: All versions prior to v5.0 --------- End Update E Part 6 of 8 --------- SIMATIC STEP 7 (TIA Portal): All versions SIMATIC STEP 7 V5.X: All versions prior to v5.7 HF4 SIMATIC WinCC (TIA Portal): All versions SIMATIC WinCC Unified (TIA Portal): All versions prior to V17 Update 5 SINAUT Software ST7sc: All versions SINAUT ST7CC: All versions SINEC INS: All versions prior to V1.0 SP2 SINEC NMS: All versions prior to V1.0.3 SINEC NMS: All versions SINEMA Remote Connect Server: All versions prior to v3.1 SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0): All versions SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0): All versions SIPLUS NET CP 343-1 Advanced (6AG1343- 1GX31-4XE0): All versions SIPLUS NET CP 443-1 Advanced (6AG1443- 1GX30-4XE0): All versions SIPLUS NET CP 1242-7 v2 (6AG1242-7KX31- 7XE0): All versions SIPLUS NET CP 1543-1 (6AG1543-1AX00- 2XE0): All versions SIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3): All versions SIPLUS NET SCALANCE X308-2 (6AG1308- 2FL10-4AA3): All versions SIPLUS NET SCALANCE XC206-2 (6AG1206- 2BB00-7AC2): All versions SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2): All versions SIPLUS NET SCALANCE XC208 (6AG1208- 0BA00-7AC2): All versions SIPLUS NET SCALANCE XC216-4C (6AG1216- 4BS00-7AC2): All versions SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30- 2AX0): All versions SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243- 1BX30-1XE0): All versions SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0): All versions TeleControl Server Basic v3: All versions prior to v3.1.1 --------- Begin Update E Part 7 of 8 --------- TIA Administrator: All versions prior to v1.0 SP8 --------- End Update E Part 7 of 8 --------- TIA Portal Cloud: All versions TIA Portal v15: All versions TIA Portal v16: All versions --------- Begin Update E Part 8 of 8 --------- TIA Portal v17: All versions prior to v17 Update 5 --------- End Update E Part 8 of 8 --------- TIM 1531 IRC (6GK7543-1MX00-0XE0): All versions.; ports on front) (6GK5324-4GG00-2ER2): All versions SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-4GG10-1ER2): All versions SCALANCE XR324-4M EEC (24V; 1x230V (L3 int.) (6GK5524-8GR00-3AR2): All versions prior to V6.5 SCALANCE XR524-8C; ports on front) (6GK5324-4GG00-1ER2): All versions SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-0GG00-1HR2): All versions SCALANCE XR324-12M (24V; coated) (6GK5307-2FD00-4GA3): All versions SCALANCE X307-2 EEC (24V) (6GK5307- 2FD00-1EA3): All versions SCALANCE X307-2 EEC (24V; PN) (6GK5205- 3BF00-2AB2): All versions SCALANCE XB205-3LD (SC; ports on rear) (6GK5324-4GG10- 4JR2): All versions SCALANCE XR324-4M EEC (24V; 1x230V (6GK5526-8GS00-3AR2): All versions prior to V6.5 SCALANCE XR526-8C; ports on rear) (6GK5324-4GG10- 3JR2): All versions SCALANCE XR324-4M PoE (24V; ports on rear) (6GK5324-4QG00-3HR2): All versions SCALANCE XR324-4M PoE TS (24V; 24V (6GK5526-8GS00-2AR2): All versions prior to V6.5 SCALANCE XR526-8C; E/IP) (6GK5205-3BD00-2TB2): All versions SCALANCE XB205-3 (ST; ports on front) (6GK5324-0GG10-3AR2): All versions SCALANCE XR324-12M (230V; E/IP) (6GK5205-3BB00-2TB2): All versions SCALANCE XB205-3 (ST; E/IP) (6GK5205- 3BF00-2TB2): All versions SCALANCE XB208 (PN) (6GK5208-0BA00- 2AB2): All versions SCALANCE XB208 (E/IP) (6GK5208-0BA00- 2TB2): All versions SCALANCE XB213-3 (SC; 24V) (6GK5328-4FS00-2AR3): All versions SCALANCE XR328-4C WG (24xFE; coated) (6GK5302-7GD00-3GA3): All versions SCALANCE X304-2FE (6GK5304-2BD00- 2AA3): All versions SCALANCE X306-1LD FE (6GK5306-1BF00- 2AA3): All versions SCALANCE X307-2 EEC (2x 24V) (6GK5307- 2FD00-2EA3): All versions SCALANCE X307-2 EEC (2x 24V; ports on rear) (6GK5324-4GG00- 4JR2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60- 250VDC; ports on rear) (6GK5324-0GG10-1HR2): All versions SCALANCE XR324-12M (230V; 4XGE; E/IP) (6GK5213- 3BF00-2TB2): All versions SCALANCE XB216 (PN) (6GK5216-0BA00- 2AB2): All versions SCALANCE XB216 (E/IP) (6GK5216-0BA00- 2TB2): All versions SCALANCE XB205-3 (SC) (6GK5205-3BD00- 2AB2): All versions SCALANCE XB205-3 (SC) (6GK5205-3BD00- 2TB2): All versions SCALANCE XB205-3 (ST/BFOC) (6GK5205- 3BB00-2AB2): All versions SCALANCE XB205-3 (ST/BFOC) (6GK5205- 3BB00-2TB2): All versions SCALANCE XB205-3LD (6GK5205-3BF00- 2AB2): All versions SCALANCE XB205-3LD (6GK5205-3BF00- 2TB2): All versions SCALANCE XB208 (6GK5208-0BA00-2AB2): All versions SCALANCE XB208 (6GK5208-0BA00-2TB2): All versions SCALANCE XB213-3 (SC) (6GK5213-3BD00- 2AB2): All versions SCALANCE XB213-3 (SC) (6GK5213-3BD00- 2TB2): All versions SCALANCE XB213-3 (ST/BFOC) (6GK5213- 3BB00-2AB2): All versions SCALANCE XB213-3 (ST/BFOC) (6GK5213- 3BB00-2TB2): All versions SCALANCE XB213-3LD (6GK5213-3BF00- 2AB2): All versions SCALANCE XB213-3LD (6GK5213-3BF00- 2TB2): All versions SCALANCE XB216 (6GK5216-0BA00-2AB2): All versions SCALANCE XB216 (6GK5216-0BA00-2TB2): All versions SCALANCE XC206-2 (SC) (6GK5206-2BD00- 2AC2): All versions SCALANCE XC206-2 (ST/BFOC) (6GK5206- 2BB00-2AC2): All versions SCALANCE XC206-2SFP (6GK5206-2BS00- 2AC2): All versions SCALANCE XC206-2SFP EEC (6GK5206- 2BS00-2FC2): All versions SCALANCE XC206-2SFP G (6GK5206-2GS00- 2AC2): All versions SCALANCE XC206-2SFP G (6GK5206-2GS00- 2TC2): All versions SCALANCE XC206-2SFP G EEC (6GK5206- 2GS00-2FC2): All versions SCALANCE XC208 (6GK5208-0BA00-2AC2): All versions SCALANCE XC208EEC (6GK5208-0BA00- 2FC2): All versions SCALANCE XC208G (6GK5208-0GA00-2AC2): All versions SCALANCE XC208G (6GK5208-0GA00-2TC2): All versions SCALANCE XC208G EEC (6GK5208-0GA00- 2FC2): All versions SCALANCE XC216 (6GK5216-0BA00-2AC2): All versions SCALANCE XC216-4C (6GK5216-4BS00- 2AC2): All versions SCALANCE XC216-4C G (6GK5216-4GS00- 2AC2): All versions SCALANCE XC216-4C G (EIP Def.) (6GK5216- 4GS00-2TC2): All versions SCALANCE XC216-4C G EEC (6GK5216- 4GS00-2FC2): All versions SCALANCE XC216EEC (6GK5216-0BA00- 2FC2): All versions SCALANCE XC224 (6GK5224-0BA00-2AC2): All versions SCALANCE XC224-4C G (6GK5224-4GS00- 2AC2): All versions SCALANCE XC224-4C G (EIP Def.) (6GK5224- 4GS00-2TC2): All versions SCALANCE XC224-4C G EEC (6GK5224- 4GS00-2FC2): All versions SCALANCE XF201-3P IRT (6GK5201-3JR00- 2BA6): All versions SCALANCE XF202-2P IRT (6GK5202-2BH00- 2BD2): All versions SCALANCE XF204 (6GK5204-0BA00-2AF2): All versions SCALANCE XF204 (6GK5204-0BA00-2GF2): All versions SCALANCE XF204 DNA (6GK5204-0BA00- 2YF2): All versions SCALANCE XF204-2 (6GK5204-2BC00-2AF2): All versions SCALANCE XF204-2BA (6GK5204-2AA00- 2GF2): All versions SCALANCE XF204-2BA DNA (6GK5204-2AA00- 2YF2): All versions SCALANCE XF204-2BA IRT (6GK5204-2AA00- 2BD2): All versions SCALANCE XF204IRT (6GK5204-0BA00- 2BF2): All versions SCALANCE XF204IRT (6GK5204-0BA10- 2BF2): All versions SCALANCE XF206-1 (6GK5206-1BC00-2AF2): All versions SCALANCE XF208 (6GK5208-0BA00-2AF2): All versions SCALANCE XM408-4C (6GK5408-4GP00-2AM2): All versions prior to V6.5 SCALANCE XM408-4C (L3 int.) (6GK5408-4GQ00-2AM2): All versions prior to V6.5 SCALANCE XM408-8C (6GK5408-8GS00-2AM2): All versions prior to V6.5 SCALANCE XM408-8C (L3 int.) (6GK5408-8GR00-2AM2): All versions prior to V6.5 SCALANCE XM416-4C (6GK5416-4GS00-2AM2): All versions prior to V6.5 SCALANCE XM416-4C (L3 int.) (6GK5416-4GR00-2AM2): All versions prior to V6.5 SCALANCE XP208 (6GK5208-0HA00-2AS6): All versions SCALANCE XP208 (6GK5208-0HA00-2TS6): All versions SCALANCE XP208EEC (6GK5208-0HA00- 2ES6): All versions SCALANCE XP208PoE EEC (6GK5208-0UA00- 5ES6): All versions SCALANCE XP216 (6GK5216-0HA00-2AS6): All versions SCALANCE XP216 (6GK5216-0HA00-2TS6): All versions SCALANCE XP216EEC (6GK5216-0HA00- 2ES6): All versions SCALANCE XP216POE EEC (6GK5216-0UA00- 5ES6): All versions SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-4GG10- 3ER2): All versions SCALANCE XR324-4M EEC (100-240VAC/60- 250VDC; ports on front) (6GK5324-0GG10-1AR2): All versions SCALANCE XR324-12M (24V; 24V (6GK5524-8GS00-2AR2): All versions prior to V6.5 SCALANCE XR524-8C; coated) (6GK5307-2FD00-1GA3): All versions SCALANCE X307-2 EEC (230V) (6GK5307- 2FD00-3EA3): All versions SCALANCE X307-2 EEC (230V; ports on front) (6GK5324-4GG00- 4ER2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60- 250VDC; The following Siemens industrial products are affected: Industrial Edge - OPC UA Connector: All versions prior to v1.7 Industrial Edge - SIMATIC S7 Connector App: All versions prior to v1.7.0 RUGGEDCOM CROSSBOW Station Access Controller: All versions only when running on ROX II versions prior to V2.15.1 RUGGEDCOM RM1224 LTE(4G) EU (6GK6108- 4AM00-2BA2): All versions RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions RUGGEDCOM ROX MX5000: All versions prior to v2.15.1 RUGGEDCOM ROX MX5000RE: All versions prior to v2.15.1 RUGGEDCOM ROX RX1400: All versions prior to v2.15.1 RUGGEDCOM ROX RX1500: All versions prior to v2.15.1 RUGGEDCOM ROX RX1501: All versions prior to v2.15.1 RUGGEDCOM ROX RX1510: All versions prior to v2.15.1 RUGGEDCOM ROX RX1511: All versions prior to v2.15.1 RUGGEDCOM ROX RX1512: All versions prior to v2.15.1 RUGGEDCOM ROX RX1524: All versions prior to v2.15.1 RUGGEDCOM ROX RX1536: All versions prior to v2.15.1 RUGGEDCOM ROX RX5000: All versions prior to v2.15.1 SCALANCE LPE9403 (6GK5998-3GS00-2AC2): All versions prior to v2.0 SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions SCALANCE M826-2 SHDSL-Router (6GK5826- 2AB00-2AB2): All versions SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions SCALANCE M876-3 (EVDO) (6GK5876-3AA02- 2BA2): All versions SCALANCE M876-3 (ROK) (6GK5876-3AA02- 2EA2): All versions SCALANCE M876-4 (EU) (6GK5876-4AA00- 2BA2): All versions SCALANCE M876-4 (NAM) (6GK5876-4AA00- 2DA2): All versions SCALANCE MUM853-1 (EU) (6GK5853-2EA00- 2DA1): All versions SCALANCE MUM853-1 (RoW) (6GK5853- 2EA00-2AA1): All versions SCALANCE MUM856-1 (EU) (6GK5856-2EA00- 3DA1): All versions SCALANCE MUM856-1 (NAM) (6GK5856- 2EA00-3BA1): All versions SCALANCE MUM856-1 (RoW) (6GK5856- 2EA00-3AA1): All versions SCALANCE S615 (6GK5615-0AA00-2AA2): All versions SCALANCE SC622-2C (6GK5622-2GS00- 2AC2): All versions prior to v2.3.1 SCALANCE SC632-2C (6GK5632-2GS00- 2AC2): All versions prior to v2.3.1 SCALANCE SC636-2C (6GK5636-2GS00- 2AC2): All versions prior to v2.3.1 SCALANCE SC642-2C (6GK5642-2GS00- 2AC2): All versions prior to v2.3.1 SCALANCE SC646-2C (6GK5646-2GS00- 2AC2): All versions prior to v2.3.1 SCALANCE W721-1 RJ45 (6GK5721-1FC00- 0AA0) SCALANCE W721-1 RJ45 (6GK5721-1FC00- 0AB0) SCALANCE W722-1 RJ45 (6GK5722-1FC00- 0AA0) SCALANCE W722-1 RJ45 (6GK5722-1FC00- 0AB0) SCALANCE W722-1 RJ45 (6GK5722-1FC00- 0AC0) SCALANCE W734-1 RJ45 (6GK5734-1FX00- 0AA0) SCALANCE W734-1 RJ45 (6GK5734-1FX00- 0AA6) SCALANCE W734-1 RJ45 (6GK5734-1FX00- 0AB0) SCALANCE W734-1 RJ45 (USA) (6GK5734- 1FX00-0AB6) SCALANCE W738-1 M12 (6GK5738-1GY00- 0AA0) SCALANCE W738-1 M12 (6GK5738-1GY00- 0AB0) SCALANCE W748-1 M12 (6GK5748-1GD00- 0AA0) SCALANCE W748-1 M12 (6GK5748-1GD00- 0AB0) SCALANCE W748-1 RJ45 (6GK5748-1FC00- 0AA0) SCALANCE W748-1 RJ45 (6GK5748-1FC00- 0AB0) SCALANCE W761-1 RJ45 (6GK5761-1FC00- 0AA0) SCALANCE W761-1 RJ45 (6GK5761-1FC00- 0AB0) SCALANCE W774-1 M12 EEC (6GK5774-1FY00- 0TA0) SCALANCE W774-1 M12 EEC (6GK5774-1FY00- 0TB0) SCALANCE W774-1 RJ45 (6GK5774-1FX00- 0AA0) SCALANCE W774-1 RJ45 (6GK5774-1FX00- 0AA6) SCALANCE W774-1 RJ45 (6GK5774-1FX00- 0AB0) SCALANCE W774-1 RJ45 (6GK5774-1FX00- 0AC0) SCALANCE W774-1 RJ45 (USA) (6GK5774- 1FX00-0AB6) SCALANCE W778-1 M12 (6GK5778-1GY00- 0AA0) SCALANCE W778-1 M12 (6GK5778-1GY00- 0AB0) SCALANCE W778-1 M12 EEC (6GK5778- 1GY00-0TA0) SCALANCE W778-1 M12 EEC (USA) (6GK5778- 1GY00-0TB0) SCALANCE W786-1 RJ45 (6GK5786-1FC00- 0AA0) SCALANCE W786-1 RJ45 (6GK5786-1FC00- 0AB0) SCALANCE W786-2 RJ45 (6GK5786-2FC00- 0AA0) SCALANCE W786-2 RJ45 (6GK5786-2FC00- 0AB0) SCALANCE W786-2 RJ45 (6GK5786-2FC00- 0AC0) SCALANCE W786-2 SFP (6GK5786-2FE00- 0AA0) SCALANCE W786-2 SFP (6GK5786-2FE00- 0AB0) SCALANCE W786-2IA RJ45 (6GK5786-2HC00- 0AA0) SCALANCE W786-2IA RJ45 (6GK5786-2HC00- 0AB0) SCALANCE W788-1 M12 (6GK5788-1GD00- 0AA0) SCALANCE W788-1 M12 (6GK5788-1GD00- 0AB0) SCALANCE W788-1 RJ45 (6GK5788-1FC00- 0AA0) SCALANCE W788-1 RJ45 (6GK5788-1FC00- 0AB0) SCALANCE W788-2 M12 (6GK5788-2GD00- 0AA0) SCALANCE W788-2 M12 (6GK5788-2GD00- 0AB0) SCALANCE W788-2 M12 EEC (6GK5788- 2GD00-0TA0) SCALANCE W788-2 M12 EEC (6GK5788- 2GD00-0TB0) SCALANCE W788-2 M12 EEC (6GK5788- 2GD00-0TC0) SCALANCE W788-2 RJ45 (6GK5788-2FC00- 0AA0) SCALANCE W788-2 RJ45 (6GK5788-2FC00- 0AB0) SCALANCE W788-2 RJ45 (6GK5788-2FC00- 0AC0) SCALANCE W1748-1 M12 (6GK5748-1GY01- 0AA0) SCALANCE W1748-1 M12 (6GK5748-1GY01- 0TA0) SCALANCE W1750D (JP) (6GK5750-2HX01- 1AD0): All versions SCALANCE W1750D (ROW) (6GK5750-2HX01- 1AA0): All versions SCALANCE W1750D (USA) (6GK5750-2HX01- 1AB0): All versions SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0) SCALANCE W1788-2 EEC M12 (6GK5788- 2GY01-0TA0) SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0) SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0) SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) SCALANCE WAM766-1 (6GK5766-1GE00-7DB0) SCALANCE WAM766-1 6GHz (6GK5766-1JE00-7DA0) SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TB0) SCALANCE WAM766-1 EEC 6GHz (6GK5766-1JE00-7TA0) SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) SCALANCE WUM766-1 (6GK5766-1GE00-3DB0) SCALANCE WUM766-1 6GHz (6GK5766-1JE00-3DA0) SCALANCE X200-4P IRT (6GK5200-4AH00- 2BA3): All versions SCALANCE X200-4P IRT (6GK5200-4AH10- 2BA3): All versions SCALANCE X201-3P IRT (6GK5201-3BH00- 2BA3): All versions SCALANCE X201-3P IRT (6GK5201-3BH10- 2BA3): All versions SCALANCE X201-3P IRT PRO (6GK5201- 3BH00-2BD2): All versions SCALANCE X201-3P IRT PRO (6GK5201-3JR10- 2BA6): All versions SCALANCE X202-2IRT (6GK5202-2BB00- 2BA3): All versions SCALANCE X202-2IRT (6GK5202-2BB10- 2BA3): All versions SCALANCE X202-2P IRT (6GK5202-2BH00- 2BA3): All versions SCALANCE X202-2P IRT (6GK5202-2BH10- 2BA3): All versions SCALANCE X202-2P IRT PRO (6GK5202-2JR00- 2BA6): All versions SCALANCE X202-2P IRT PRO (6GK5202-2JR10- 2BA6): All versions SCALANCE X204-2 (6GK5204-2BB10-2AA3): All versions SCALANCE X204-2FM (6GK5204-2BB11- 2AA3): All versions SCALANCE X204-2LD (6GK5204-2BC10- 2AA3): All versions SCALANCE X204-2LD TS (6GK5204-2BC10- 2CA2): All versions SCALANCE X204-2TS (6GK5204-2BB10- 2CA2): All versions SCALANCE X204IRT (6GK5204-0BA00-2BA3): All versions SCALANCE X204IRT (6GK5204-0BA10-2BA3): All versions SCALANCE X204IRT PRO (6GK5204-0JA00- 2BA6): All versions SCALANCE X204IRT PRO (6GK5204-0JA10- 2BA6): All versions SCALANCE X206-1 (6GK5206-1BB10-2AA3): All versions SCALANCE X206-1LD (6GK5206-1BC10- 2AA3): All versions SCALANCE X208 (6GK5208-0BA10-2AA3): All versions SCALANCE X208PRO (6GK5208-0HA10- 2AA6): All versions SCALANCE X212-2 (6GK5212-2BB00-2AA3): All versions SCALANCE X212-2LD (6GK5212-2BC00- 2AA3): All versions SCALANCE X216 (6GK5216-0BA00-2AA3): All versions SCALANCE X224 (6GK5224-0BA00-2AA3): All versions SCALANCE X302-7 EEC (2x 24V) (6GK5302- 7GD00-2EA3): All versions SCALANCE X302-7 EEC (2x 24V; ports on rear) (6GK5324-0GG00-3HR2): All versions SCALANCE XR324-12M (230V; 4xGE; ports on front) (6GK5324-4GG10-2ER2): All versions SCALANCE XR324-4M EEC (2x 24V; AC230V) (6GK5328-4FS00- 3AR3): All versions SCALANCE XR328-4C WG (24xFE" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-15" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Active Workspace" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-32145" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-32145 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Active Workspace" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Teamcenter Active Workspace v5.2: All versions prior to 5.2.9 Teamcenter Active Workspace v6.0: All versions prior to 6.0.3.; a software management platform; The following versions of Smart Security Manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-16" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE LPE 4903 and SINUMERIK Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-4034" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-4034 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE LPE 4903 and SINUMERIK Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products and versions are affected: SCALANCE LPE9403: All versions prior to v2.0 SINUMERIK Edge: All versions prior to v3.3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-167-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-167-17" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-32253; CVE-2021-22924; CVE-2022-22825; CVE-2022-32252; CVE-2022-22826; CVE-2021-46143; CVE-2022-32262; CVE-2022-22824; CVE-2022-32251; CVE-2022-25315; CVE-2022-32255; CVE-2022-22823; CVE-2021-22925; CVE-2022-32258; CVE-2022-29034; CVE-2022-23852; CVE-2022-32259; CVE-2022-23990; CVE-2022-32260; CVE-2021-45960; CVE-2022-32254; CVE-2022-22827; CVE-2022-25314; CVE-2022-32256; CVE-2022-32261; CVE-2022-22822; CVE-2022-25235; CVE-2022-25236; CVE-2022-25313; CVE-2022-27221" ;
    icsa:cweNumber "CWE-706; CWE-1244; CWE-668; CWE-223; CWE-306; CWE-79; CWE-286; CWE-77; CWE-310; CWE-448; CWE-284; CWE-20; CWE-190; CWE-908; CWE-532; CWE-116; CWE-345; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-22924,
        cve-res:CVE-2021-22925,
        cve-res:CVE-2021-45960,
        cve-res:CVE-2021-46143,
        cve-res:CVE-2022-22822,
        cve-res:CVE-2022-22823,
        cve-res:CVE-2022-22824,
        cve-res:CVE-2022-22825,
        cve-res:CVE-2022-22826,
        cve-res:CVE-2022-22827,
        cve-res:CVE-2022-23852,
        cve-res:CVE-2022-23990,
        cve-res:CVE-2022-25235,
        cve-res:CVE-2022-25236,
        cve-res:CVE-2022-25313,
        cve-res:CVE-2022-25314,
        cve-res:CVE-2022-25315,
        cve-res:CVE-2022-27221,
        cve-res:CVE-2022-29034,
        cve-res:CVE-2022-32251,
        cve-res:CVE-2022-32252,
        cve-res:CVE-2022-32253,
        cve-res:CVE-2022-32254,
        cve-res:CVE-2022-32255,
        cve-res:CVE-2022-32256,
        cve-res:CVE-2022-32258,
        cve-res:CVE-2022-32259,
        cve-res:CVE-2022-32260,
        cve-res:CVE-2022-32261,
        cve-res:CVE-2022-32262 ;
    icsa:hasCWE cwe-res:CWE-116,
        cwe-res:CWE-1244,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-223,
        cwe-res:CWE-284,
        cwe-res:CWE-286,
        cwe-res:CWE-306,
        cwe-res:CWE-310,
        cwe-res:CWE-345,
        cwe-res:CWE-400,
        cwe-res:CWE-448,
        cwe-res:CWE-532,
        cwe-res:CWE-668,
        cwe-res:CWE-706,
        cwe-res:CWE-77,
        cwe-res:CWE-79,
        cwe-res:CWE-908 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Siemens SINEMA Remote Connect Server: All versions prior to v3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-167-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-172-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-172-01" ;
    dcterms:issued "2022-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-24946" ;
    icsa:cweNumber "CWE-413" ;
    icsa:hasCVE cve-res:CVE-2022-24946 ;
    icsa:hasCWE cwe-res:CWE-413 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R, Q, and L Series CPU Module; MELIPC Series CPU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric products are affected: MELSEC iQ-R Series R12CCPU-V CPU Firmware: Version 16 and prior MELSEC Q Series Q03UDECPU: Versions with the first 5 digits of serial number 24061 and prior MELSEC Q Series Q04UDECPU: Versions with the first 5 digits of serial number 24061 and prior MELSEC Q Series Q06UDECPU: Versions with the first 5 digits of serial number 24061 and prior MELSEC Q Series Q10UDECPU: Versions with the first 5 digits of serial number 24061 and prior MELSEC Q Series Q13UDECPU: Versions with the first 5 digits of serial number 24061 and prior MELSEC Q Series Q20UDECPU: Versions with the first 5 digits of serial number 24061 and prior MELSEC Q Series Q26UDECPU: Versions with the first 5 digits of serial number 24061 and prior MELSEC Q Series Q50UDECPU: Versions with the first 5 digits of serial number 24061 and prior MELSEC Q Series Q100UDECPU: Versions with the first 5 digits of serial number 24061 and prior MELSEC Q Series Q03UDVCPU: Versions with the first 5 digits of serial number 24051 and prior MELSEC Q Series Q04UDVCPU: Versions with the first 5 digits of serial number 24051 and prior MELSEC Q Series Q06UDVCPU: Versions with the first 5 digits of serial number 24051 and prior MELSEC Q Series Q13UDVCPU: Versions with the first 5 digits of serial number 24051 and prior MELSEC Q Series Q26UDVCPU: Versions with the first 5 digits of serial number 24051 and prior MELSEC Q Series Q04UDPVCPU: Versions with the first 5 digits of serial number 24051 and prior MELSEC Q Series Q06UDPVCPU: Versions with the first 5 digits of serial number 24051 and prior MELSEC Q Series Q13UDPVCPU: Versions with the first 5 digits of serial number 24051 and prior MELSEC Q Series Q26UDPVCPU: Versions with the first 5 digits of serial number 24051 and prior MELSEC Q Series Q12DCCPU-V: Versions with the first 5 digits of serial number 25061 and prior MELSEC Q Series Q24DHCCPU-V(G): Versions with the first 5 digits of serial number 25061 and prior MELSEC Q Series Q24DHCCPU-LS: Versions with the first 5 digits of serial number 25061 and prior MELSEC Q Series Q26DHCCPU-LS: Versions with the first 5 digits of serial number 25061 and prior MELSEC L Series L02CPU(-P): Versions with the first 5 digits of serial number 24051 and prior MELSEC L Series L06CPU(-P): Versions with the first 5 digits of serial number 24051 and prior MELSEC L Series L26CPU(-P): Versions with the first 5 digits of serial number 24051 and prior MELSEC L Series L26CPU-(P)BT: Versions with the first 5 digits of serial number 24051 and prior MELIPC Series MI5122-VW CPU Firmware: Version 05 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-172-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-172-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-172-02" ;
    dcterms:issued "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "JTEKT TOYOPUC" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-29958; CVE-2022-29951" ;
    icsa:cweNumber "CWE-306; CWE-345" ;
    icsa:hasCVE cve-res:CVE-2022-29951,
        cve-res:CVE-2022-29958 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TOYOPUC Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a programmable logic controller; are affected: PC10G-CPU Type=TCC-6353: All versions PC10GE Type=TCC-6464: All versions PC10P Type=TCC-6372: All versions PC10P-DP Type=TCC-6726: All versions PC10P-DP-IO Type=TCC-6752: All versions PC10B-P Type=TCC-6373: All versions PC10B Type=TCC-1021: All versions PC10E Type=TCC-4737: All versions PC10EL Type=TCC-4747: All versions Plus CPU Type=TCC-6740: All versions PC3JX Type=TCC-6901: All versions PC3JX-D Type=TCC-6902: All versions PC10PE Type=TCC-1101: All versions PC10PE-1616P Type=TCC-1102: All versions PCDL Type=TKC-6688: All versions Nano 10GX Type=TUC-1157: All versions Nano CPU Type=TUC-6941: All versions.; The following versions of TOYOPUC products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-172-02" ;
    icsa:vendor "JTEKT ELECTRONICS CORPORATION" ;
    icsa:year 2022 .

icsa-res:ICSA-22-172-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-172-03" ;
    dcterms:issued "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Phoenix Contact Classic Line Controllers" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-31800" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2022-31800 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ILC, AXC, RFC, PC WORX, FC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the classic line industrial controllers; are affected: ILC 1x0 All variants ILC 1x1 All variants ILC 1x1 GSM/GPRS: Article number 2700977 ILC 3xx All variants AXC 1050: Article number 2700988 AXC 1050 XC: Article number 2701295 AXC 3050: Article number 2700989 RFC 480S PN 4TX: Article number 2404577 RFC 470 PN 3TX: Article number 2916600 RFC 470S PN 3TX: Article number 2916794 FC 460R PN 3TX: Article number 2700784 RFC 460R PN 3TX-S: Article number 1096407 RFC 430 ETH-IB: Article number 2730190 RFC 450 ETH-IB: Article number 2730200 PC WORX SRT: Article number 2701680 PC WORX RT BASIC: Article number 2700291 FC 350 PCI ETH: Article number 2730844." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-172-03" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2022 .

icsa-res:ICSA-22-172-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-172-04" ;
    dcterms:issued "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Phoenix Contact ProConOS and MULTIPROG" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-31801" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2022-31801 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ProConOS/ProConOS eCLR and MULTIPROG" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: ProConOS: All versions ProConOS eCLR: All versions MULTIPROG: All versions.; a software development kit; The following versions of ProConOS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-172-04" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2022 .

icsa-res:ICSA-22-172-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-172-05" ;
    dcterms:issued "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Phoenix Contact Classic Line Industrial Controllers" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-9201" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2019-9201 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC 191 ETH 2TX, ILC 191 ME/AN, and AXC 1050" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the classic line industrial controllers are affected: ILC 1x0: All variants ILC 1x1: All variants ILC 3xx: All variants AXC 1050: Article number 2700988 AXC 1050XC: Article number 2701295 AXC 3050: Article number 2700989 RFC 480S: Article number 2404577 RFC 470S: Article number 2916794 RFC 460R: Article number 2700784 RFC 430 ETH: Article number 2730190 RFC 450 ETH: Article number 2730200 PC WORX SRT: Article number 2701680 PC WORX RT BASIC: Article number 2700291 FC 350 PCI ETH: Article number 2730844." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-172-05" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2022 .

icsa-res:ICSA-22-172-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-172-06" ;
    dcterms:issued "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC OA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-33139" ;
    icsa:cweNumber "CWE-603" ;
    icsa:hasCVE cve-res:CVE-2022-33139 ;
    icsa:hasCWE cwe-res:CWE-603 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC OA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a SCADA HMI system; are affected: SIMATIC WinCC OA v3.16: All versions SIMATIC WinCC OA v3.17: All versions SIMATIC WinCC OA v3.18: All versions.; The following versions of SIMATIC WinCC OA" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-172-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-174-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-174-01" ;
    dcterms:issued "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa STARDOM" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2951; CVE-2022-30997" ;
    icsa:cweNumber "CWE-798; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-2951,
        cve-res:CVE-2022-30997 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "STARDOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a network control system; are affected: STARDOM FCN/FCJ: Versions R1.01 through R4.31 STARDOM FCN/FCJ: Versions R4.10 through R4.31; The following versions of STARDOM; dual CPU modules only; only affected by CVE-2022-30997." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-174-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2022 .

icsa-res:ICSA-22-174-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-174-02" ;
    dcterms:issued "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CAMS for HIS" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2022-30707" ;
    icsa:cweNumber "CWE-657" ;
    icsa:hasCVE cve-res:CVE-2022-30707 ;
    icsa:hasCWE cwe-res:CWE-657 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Consolidation Alarm Management Software for Human Interface Station (CAMS for HIS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and R6.01.00 through R6.09.00 (these product versions are affected regardless of whether CAMS function is used or not). Exaopc: Versions R3.72.00 through R3.80.00 (these product versions are affected if NTPF100-S6 \"For CENTUM VP Support CAMS for HIS\" is installed). B/M9000CS: Versions R5.04.01 - R5.05.01 B/M9000 VP: Versions R6.01.01 - R8.03.01.; Versions R5.01.00 through R5.04.20; are affected: CENTUM CS 3000 (including CENTUM CS 3000 Entry Class): Versions R3.08.10 through R3.09.00. These vulnerabilities affect this product if LHS4800 (CAMS for HIS) is installed. CENTUM VP (including CENTUM VP Entry Class): Versions R4.01.00 through R4.03.00 (these product versions are affected only if CAMS function is used); The following products that use CAMS for HIS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-174-02" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2022 .

icsa-res:ICSA-22-174-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-174-03" ;
    dcterms:issued "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Secheron SEPCOS Control and Protection Relay" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2103; CVE-2022-2105; CVE-2022-1667; CVE-2022-1666; CVE-2022-1668; CVE-2022-2104; CVE-2022-2102" ;
    icsa:cweNumber "CWE-269; CWE-521; CWE-284; CWE-841; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2022-1666,
        cve-res:CVE-2022-1667,
        cve-res:CVE-2022-1668,
        cve-res:CVE-2022-2102,
        cve-res:CVE-2022-2103,
        cve-res:CVE-2022-2104,
        cve-res:CVE-2022-2105 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-284,
        cwe-res:CWE-521,
        cwe-res:CWE-522,
        cwe-res:CWE-841 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SEPCOS Control and Protection Relay" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following firmware versions of the Secheron SEPCOS Control and Protection Relay are affected: SEPCOS Single Package firmware (1.23.xx feature level): All versions prior to 1.23.21 SEPCOS Single Package firmware (1.24.xx feature level): All versions prior to 1.24.8 SEPCOS Single Package firmware (1.25.xx feature level): All versions prior to 1.25.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-174-03" ;
    icsa:vendor "Secheron" ;
    icsa:year 2022 .

icsa-res:ICSA-22-174-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-174-04" ;
    dcterms:issued "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pyramid Solutions EtherNet/IP Adapter Development Kit" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Financial Services" ;
    icsa:cveNumber "CVE-2022-1737" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-1737 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EtherNet/IP Adapter Development Kit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Pyramid Solutions' products are affected: EtherNet/IP Adapter Development Kit (EADK): Versions 4.4.0 and prior EtherNet/IP Adapter DLL Kit (EIPA): Versions 4.4.0 and prior EtherNet/IP Scanner Development Kit (EDKS): Versions 4.4.0 and prior. EtherNet/IP Scanner DLL Kit (EIPS): Versions 4.4.0 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-174-04" ;
    icsa:vendor "Pyramid Solutions, Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-174-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-174-05" ;
    dcterms:issued "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Elcomplus SmartICS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Russia" ;
    icsa:criticalInfrastructureSector "Communications; Commercial Facilities; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-2106; CVE-2022-2088; CVE-2022-2140" ;
    icsa:cweNumber "CWE-23; CWE-79; CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-2088,
        cve-res:CVE-2022-2106,
        cve-res:CVE-2022-2140 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-284,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SmartICS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Elcomplus reports these vulnerabilities affect the following SmartICS web-based HMI: SmartICS v2.3.4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-174-05" ;
    icsa:vendor "Elcomplus" ;
    icsa:year 2022 .

icsa-res:ICSA-22-179-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-179-01" ;
    dcterms:issued "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB e-Design" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-29483; CVE-2022-28702" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2022-28702,
        cve-res:CVE-2022-29483 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "e-Design" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of e-Design engineering software are affected: e-Design: All versions prior to 1.12.2.0006." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-179-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2022 .

icsa-res:ICSA-22-179-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-179-02" ;
    dcterms:issued "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron SYSMAC CS-CJ-CP Series and NJ-NX Series (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-31205; CVE-2022-31204; CVE-2022-31207; CVE-2022-31206" ;
    icsa:cweNumber "CWE-256; CWE-319; CWE-345; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2022-31204,
        cve-res:CVE-2022-31205,
        cve-res:CVE-2022-31206,
        cve-res:CVE-2022-31207 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-319,
        cwe-res:CWE-345,
        cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SYSMAC CS/CJ/CP Series and NJ/NX Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a programmable logic controller; \"¯The following versions of the Omron SYSMAC CS/CJ/CP Series and NJ/NX Series; are affected: --------- Begin Update A part 1 of 4 --------- SYSMAC CS1H/CJ1G: Versions prior to 4.1 SYSMAC CS1D-CPU H/P/HA: Versions prior to 1.4 SYSMAC CS1D-CPU S/SA: Versions prior to 2.1 --------- End Update A part 1 of 4 --------- SYSMAC CJ2M: Versions prior to 2.1 SYSMAC CJ2H: Versions prior to 1.5 SYSMAC CP1E/CP1H: Versions prior to 1.30 --------- Begin Update A part 2 of 4 --------- SYSMAC CP1L: Versions prior to 1.1 --------- End Update A part 2 of 4 --------- CP1W-CIF41: All versions SYSMAC CX-Programmer: Versions prior to 9.6 SYSMAC NJ/NX Series: Versions prior to 1.49 (1.29 for NX7)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-179-02" ;
    icsa:vendor "Omron" ;
    icsa:year 2022 .

icsa-res:ICSA-22-179-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-179-03" ;
    dcterms:issued "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech iView" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2139; CVE-2022-2143; CVE-2022-2138; CVE-2022-2135; CVE-2022-2136; CVE-2022-2142; CVE-2022-2137" ;
    icsa:cweNumber "CWE-306; CWE-23; CWE-77; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2022-2135,
        cve-res:CVE-2022-2136,
        cve-res:CVE-2022-2137,
        cve-res:CVE-2022-2138,
        cve-res:CVE-2022-2139,
        cve-res:CVE-2022-2142,
        cve-res:CVE-2022-2143 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-306,
        cwe-res:CWE-77,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iView" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of Advantech iView management software are affected: Advantech iView: All versions prior to 5_7_04_6469." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-179-03" ;
    icsa:vendor "Advantech" ;
    icsa:year 2022 .

icsa-res:ICSA-22-179-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-179-04" ;
    dcterms:issued "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Motorola Solutions MOSCAD IP and ACE IP Gateways" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30276" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2022-30276 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MOSCAD IP Gateway and ACE IP Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Motorola MDLC are affected: MOSCAD IP gateway (IPGW): All versions ACE IP gateway (CPU 4600): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-179-04" ;
    icsa:vendor "Motorola Solutions" ;
    icsa:year 2022 .

icsa-res:ICSA-22-179-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-179-05" ;
    dcterms:issued "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Motorola Solutions MDLC" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30275; CVE-2022-30273" ;
    icsa:cweNumber "CWE-256; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2022-30273,
        cve-res:CVE-2022-30275 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MDLC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and 4.83.001.; 4.82.004; The following versions of the Motorola Solutions MDLC protocol parser are affected: MDLC: Versions 4.80.0024" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-179-05" ;
    icsa:vendor "Motorola Solutions" ;
    icsa:year 2022 .

icsa-res:ICSA-22-179-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-179-06" ;
    dcterms:issued "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Motorola Solutions ACE1000" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30270; CVE-2022-30269; CVE-2022-30274; CVE-2022-30271; CVE-2022-30272" ;
    icsa:cweNumber "CWE-798; CWE-345; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2022-30269,
        cve-res:CVE-2022-30270,
        cve-res:CVE-2022-30271,
        cve-res:CVE-2022-30272,
        cve-res:CVE-2022-30274 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-345,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ACE1000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ACE1000; a remote terminal unit; are affected: Motorola Solutions ACE1000: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-179-06" ;
    icsa:vendor "Motorola Solutions" ;
    icsa:year 2022 .

icsa-res:ICSA-22-181-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-181-01" ;
    dcterms:issued "2022-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Exemys RME1" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Argentina" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2197" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2022-2197 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RME1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Exemys RME1; are affected: Exemys RME1-AI firmware: All versions prior to and including 2.1.6.; an analog acquisition module" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-181-01" ;
    icsa:vendor "Exemys" ;
    icsa:year 2022 .

icsa-res:ICSA-22-181-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-181-02" ;
    dcterms:issued "2022-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa Wide Area Communication Router" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2022-32284" ;
    icsa:cweNumber "CWE-330" ;
    icsa:hasCVE cve-res:CVE-2022-32284 ;
    icsa:hasCWE cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wide Area Communication Router (WAC Router)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Yokogawa reports this vulnerability affects the communication module for the following WAC Router: Wide Area Communication Router (for AW810D) VI461: Vnet/IP firmware (F) R12 or earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-181-02" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2022 .

icsa-res:ICSA-22-181-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-181-03" ;
    dcterms:issued "2022-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson DeltaV Distributed Control System" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30260; CVE-2022-29963; CVE-2022-29957; CVE-2022-29964; CVE-2022-29962; CVE-2022-29965" ;
    icsa:cweNumber "CWE-306; CWE-345; CWE-327; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-29957,
        cve-res:CVE-2022-29962,
        cve-res:CVE-2022-29963,
        cve-res:CVE-2022-29964,
        cve-res:CVE-2022-29965,
        cve-res:CVE-2022-30260 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-327,
        cwe-res:CWE-345,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeltaV Distributed Control System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; The following versions of DeltaV Distributed Control System; are affected: DeltaV M-series: All versions DeltaV S-series: All versions DeltaV P-series: All versions DeltaV SIS: All versions DeltaV CIOC/EIOC/WIOC IO cards: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-181-03" ;
    icsa:vendor "Emerson" ;
    icsa:year 2022 .

icsa-res:ICSA-22-181-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-181-04" ;
    dcterms:issued "2022-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Distributed Data Systems WebHMI" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ukraine" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-2253; CVE-2022-2254" ;
    icsa:cweNumber "CWE-79; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-2253,
        cve-res:CVE-2022-2254 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebHMI" ;
    icsa:productDistribution "Europe, North America" ;
    icsa:productsAffected "The following versions of WebHMI are affected: WebHMI 4.1.1.7662 (and possibly prior versions)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-181-04" ;
    icsa:vendor "Distributed Data Systems" ;
    icsa:year 2022 .

icsa-res:ICSA-22-188-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-188-01" ;
    dcterms:issued "2022-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-21798" ;
    icsa:cweNumber "CWE-1021" ;
    icsa:hasCVE cve-res:CVE-2022-21798 ;
    icsa:hasCWE cwe-res:CWE-1021 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix 1100/1400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following MicroLogix controllers: MicroLogix 1400: Versions 21.007 and prior MicroLogix 1100: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-188-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-188-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-188-02" ;
    dcterms:issued "2022-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Bently Nevada ADAPT 3701/4X Series and 60M100" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-29952; CVE-2022-29953" ;
    icsa:cweNumber "CWE-798; CWE-306" ;
    icsa:hasCVE cve-res:CVE-2022-29952,
        cve-res:CVE-2022-29953 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "3701/4X series and 60M100 (3701/60) Condition Monitoring System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Bently Nevada 3700 machinery monitors are affected: Bently Nevada 3701/40: All versions prior to 4.1 Bently Nevada 3701/44: All versions prior to 4.1 Bently Nevada 3701/46: All versions prior to 4.1 Bently Nevada 60M100 (3701/60): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-188-02" ;
    icsa:vendor "Bently Nevada (Subsidiary of Baker Hughes)" ;
    icsa:year 2022 .

icsa-res:ICSA-22-193-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-193-01" ;
    dcterms:issued "2022-07-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dahua ASI7213X-T1 (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30563; CVE-2022-30561; CVE-2022-30560; CVE-2022-30562" ;
    icsa:cweNumber "CWE-434; CWE-294; CWE-209" ;
    icsa:hasCVE cve-res:CVE-2022-30560,
        cve-res:CVE-2022-30561,
        cve-res:CVE-2022-30562,
        cve-res:CVE-2022-30563 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-294,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DHI-ASI7213X-T1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Dahua video products; are affected: --------- Begin Update A Part 2 of 4 --------- Dahua ASI7XXX: Versions prior to v1.000.0000009.0.R.220620 Dahua IPC-HDBW2XXX: Versions prior to v2.820.0000000.48.R.220614 Dahua IPC-HX2XXX: Versions Prior to v2.820.0000000.48.R.220614 --------- End Update A Part 2 of 4 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-193-01" ;
    icsa:vendor "Dahua Technology Co., Ltd" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-01" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X Switch Devices" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-26649; CVE-2022-26647; CVE-2022-26648" ;
    icsa:cweNumber "CWE-120; CWE-330" ;
    icsa:hasCVE cve-res:CVE-2022-26647,
        cve-res:CVE-2022-26648,
        cve-res:CVE-2022-26649 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X Switch Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCALANCE X Switch Devices; are affected: SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3): All versions SCALANCE X200-4P IRT (6GK5200-4AH10-2BA3): All versions SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3): All versions SCALANCE X201-3P IRT (6GK5201-3BH10-2BA3): All versions SCALANCE X201-3P IRT PRO (6GK5201-3BH00-2BD2): All versions SCALANCE X201-3P IRT PRO (6GK5201-3JR10-2BA6): All versions SCALANCE X202-2IRT (6GK5202-2BB00-2BA3): All versions SCALANCE X202-2IRT (6GK5202-2BB10-2BA3): All versions SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3): All versions SCALANCE X202-2P IRT (6GK5202-2BH10-2BA3): All versions SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6): All versions SCALANCE X202-2P IRT PRO (6GK5202-2JR10-2BA6): All versions SCALANCE X204-2 (6GK5204-2BB10-2AA3): All versions prior to v5.2.6 SCALANCE X204-2FM (6GK5204-2BB11-2AA3): All versions prior to v5.2.6 SCALANCE X204-2LD (6GK5204-2BC10-2AA3): All versions prior to v5.2.6 SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2): All versions prior to v5.2.6 SCALANCE X204-2TS (6GK5204-2BB10-2CA2): All versions prior to v5.2.6 SCALANCE X204IRT (6GK5204-0BA00-2BA3): All versions SCALANCE X204IRT (6GK5204-0BA10-2BA3): All versions SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6): All versions SCALANCE X204IRT PRO (6GK5204-0JA10-2BA6): All versions SCALANCE X206-1 (6GK5206-1BB10-2AA3): All versions prior to v5.2.6 SCALANCE X206-1LD (6GK5206-1BC10-2AA3): All versions prior to v5.2.6 SCALANCE X208 (6GK5208-0BA10-2AA3): All versions prior to v5.2.6 SCALANCE X208PRO (6GK5208-0HA10-2AA6): All versions prior to v5.2.6 SCALANCE X212-2 (6GK5212-2BB00-2AA3): All versions prior to v5.2.6 SCALANCE X212-2LD (6GK5212-2BC00-2AA3): All versions prior to v5.2.6 SCALANCE X216 (6GK5216-0BA00-2AA3): All versions prior to v5.2.6 SCALANCE X224 (6GK5224-0BA00-2AA3): All versions prior to v5.2.6 SCALANCE XF201-3P IRT (6GK5201-3JR00-2BA6): All versions SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2): All versions SCALANCE XF204 (6GK5204-0BA00-2AF2): All versions prior to v5.2.6 SCALANCE XF204-2 (6GK5204-2BC00-2AF2): All versions prior to v5.2.6 SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2): All versions SCALANCE XF204IRT (6GK5204-0BA00-2BF2): All versions SCALANCE XF204IRT (6GK5204-0BA10-2BF2): All versions SCALANCE XF206-1 (6GK5206-1BC00-2AF2): All versions prior to v5.2.6 SCALANCE XF208 (6GK5208-0BA00-2AF2): All versions prior to v5.2.6.; industrial ethernet switches" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-02" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM GridEdge" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-34464" ;
    icsa:cweNumber "CWE-668" ;
    icsa:hasCVE cve-res:CVE-2022-34464 ;
    icsa:hasCWE cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM GridEdge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SICAM GridEdge are affected: SICAM GridEdge Essential ARM (6MD7881-2AA30): All versions. SICAM GridEdge Essential Intel (6MD7881-2AA40): All versions prior to v2.7.3 SICAM GridEdge Essential with GDS ARM (6MD7881-2AA10): All versions. SICAM GridEdge Essential with GDS Intel(6MD7881-2AA20): All versions prior to v2.7.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-03" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC MV500 Devices" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-33138; CVE-2022-33137" ;
    icsa:cweNumber "CWE-306; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2022-33137,
        cve-res:CVE-2022-33138 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC MV500 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SIMATIC MV540 H (6GF3540-0GE10): All versions prior to v3.3 SIMATIC MV540 S (6GF3540-0CD10): All versions prior to v3.3 SIMATIC MV550 H (6GF3550-0GE10): All versions prior to v3.3 SIMATIC MV550 S (6GF3550-0CD10): All versions prior to v3.3 SIMATIC MV560 U (6GF3560-0LE10): All versions prior to v3.3 SIMATIC MV560 X (6GF3560-0HE10): All versions prior to v3.3.; Optical Readers; The following versions of SIMATIC MV500 Devices" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-04" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-34748" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-34748 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: All versions prior to v2022.2.; Siemens reports the following versions of Simcenter Femap; a complex model simulator" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-05" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-29560" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2022-29560 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM ROX MX5000: All versions prior to 2.15.1 RUGGEDCOM ROXMX5000RE: All versions prior to 2.15.1 RUGGEDCOM ROX RX1400: All versions prior to 2.15.1 RUGGEDCOM ROX RX1500: All versions prior to 2.15.1 RUGGEDCOM ROX RX1501: All versions prior to 2.15.1 RUGGEDCOM ROX RX1510: All versions prior to 2.15.1 RUGGEDCOM ROX RX1511: All versions prior to 2.15.1 RUGGEDCOM ROX RX1512: All versions prior to 2.15.1 RUGGEDCOM ROX RX1524: All versions prior to 2.15.1 RUGGEDCOM ROX RX1536: All versions prior to 2.15.1 RUGGEDCOM ROX RX5000: All versions prior to 2.15.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-06" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Excel Importer" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-34467" ;
    icsa:cweNumber "CWE-776" ;
    icsa:hasCVE cve-res:CVE-2022-34467 ;
    icsa:hasCWE cwe-res:CWE-776 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Excel Importer Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Mendix Excel Importer Module (Mendix 8 compatible): All versions prior to v9.2.2 Mendix Excel Importer Module (Mendix 9 compatible): All versions prior to v10.1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-07" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Datalogics File Parsing Vulnerability (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2069" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2022-2069 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization and JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Teamcenter Visualization V13.3: All versions prior to 13.3.0.5 --------- Begin Update A Part 1 of 3 --------- Teamcenter Visualization V14.0: All versions prior to 14.0.0.2 --------- End Update A Part 1 of 3 ---------. JT2go: All versions prior to 13.3.0.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-08" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PADS Standard/Plus Viewer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-34290; CVE-2022-34277; CVE-2022-34287; CVE-2022-34278; CVE-2022-34286; CVE-2022-34274; CVE-2022-34273; CVE-2022-34289; CVE-2022-34276; CVE-2022-34284; CVE-2022-34283; CVE-2022-34281; CVE-2022-34285; CVE-2022-34279; CVE-2022-34275; CVE-2022-34280; CVE-2022-34291; CVE-2022-34288; CVE-2022-34282; CVE-2022-34272" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-34272,
        cve-res:CVE-2022-34273,
        cve-res:CVE-2022-34274,
        cve-res:CVE-2022-34275,
        cve-res:CVE-2022-34276,
        cve-res:CVE-2022-34277,
        cve-res:CVE-2022-34278,
        cve-res:CVE-2022-34279,
        cve-res:CVE-2022-34280,
        cve-res:CVE-2022-34281,
        cve-res:CVE-2022-34282,
        cve-res:CVE-2022-34283,
        cve-res:CVE-2022-34284,
        cve-res:CVE-2022-34285,
        cve-res:CVE-2022-34286,
        cve-res:CVE-2022-34287,
        cve-res:CVE-2022-34288,
        cve-res:CVE-2022-34289,
        cve-res:CVE-2022-34290,
        cve-res:CVE-2022-34291 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PADS Standard/Plus Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PADS Standard and Standard Plus; are affected: PADS Standard/Plus Viewer: All versions.; a PCB schematic design and layout environment" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-09" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Simcenter Femap and Parasolid (Update B)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-34465" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-34465 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap and Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and Parasolid; a 3D geometric modeling tool; are affected: Parasolid v33.1: All versions prior to V33.1.264 Parasolid v34.0: All versions prior to v34.0.250 Parasolid v34.1: All versions prior to v34.1.233 --------- Begin Update B Part 1 of 2 --------- Simcenter Femap V2022.1: All versions prior to V2022.1.3 Simcenter Femap V2022.2: All versions prior to V2022.2.2 --------- End Update B Part 1 of 2 ---------.; an advanced simulation application; The following versions of Simcenter Femap" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-10" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Applications" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-34466" ;
    icsa:cweNumber "CWE-74" ;
    icsa:hasCVE cve-res:CVE-2022-34466 ;
    icsa:hasCWE cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Applications" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mendix Applications; are affected: Mendix Applications using Mendix 9: All versions between v9.11 v9.15 Mendix Applications using Mendix 9 (v9.12): All versions prior to v9.12.3.; high productivity app platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-11" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Open Design Alliance Drawings SDK" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-28808; CVE-2022-28807; CVE-2022-28809" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-28807,
        cve-res:CVE-2022-28808,
        cve-res:CVE-2022-28809 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Drawings SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Drawing SDK (CVE-2022-28807): All versions prior to 2023.2 Drawing SDK (CVE-2022-28808): All versions prior to 2023.3 Drawing SDK (CVE-2022-28809): All versions prior to 2023.3.; a professional SDK platform; The following versions of Drawing SDK" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-11" ;
    icsa:vendor "Open Design Alliance" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-12" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SRCS VPN Feature in SIMATIC CP Devices (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-34820; CVE-2022-34819; CVE-2022-34821" ;
    icsa:cweNumber "CWE-94; CWE-122; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2022-34819,
        cve-res:CVE-2022-34820,
        cve-res:CVE-2022-34821 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-77,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "communication processors; are affected: --------- Begin Update A Part 1 of 2 --------- SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0): All versions prior to V3.3.46 SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0): All versions prior to V3.3.46 SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0): All versions prior to V3.3.46 SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0): All versions prior to V3.3.46 SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0): All versions prior to V3.3.46 SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0): All versions v2.0 and later SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0): All versions prior to v3.0.22 SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0): All versions v2.0 and later SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0): All versions v2.0 and later SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0): All versions v2.0 and later SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0): All versions v2.0 and later SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0): All versions prior to V3.3.46 SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0): All versions prior to v3.0.22 SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0): All versions prior to V3.3.46 SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0): All versions prior to V3.3.46 --------- End Update A Part 1 of 2 ---------; The following versions of SIMATIC CP Devices" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-13" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-31257" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-31257 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mendix; are affected: Mendix Applications using Mendix 7: All versions prior to v7.23.31 Mendix Applications using Mendix 8: All versions prior to v8.18.18 Mendix Applications using Mendix 9: All versions prior to v9.14.0 Mendix Applications using Mendix 9 (V9.6): All versions prior to v9.6.12 Mendix Applications using Mendix 9 (V9.12): All versions prior to v9.12.2.; a high productivity app platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-14" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens CPC80 Firmware of SICAM A8000" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-29884" ;
    icsa:cweNumber "CWE-772" ;
    icsa:hasCVE cve-res:CVE-2022-29884 ;
    icsa:hasCWE cwe-res:CWE-772 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CPC80 Firmware of SICAM A8000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: CP-8000 MASTER MODULE WITH I/O -25/+70°C (6MF2101-0AB10-0AA0): All versions prior to CPC80 v16.30 CP-8000 MASTER MODULE WITH I/O -40/+70°C\" (6MF2101-1AB10-0AA0): All version prior to CPC80 v16.30 CP-8021 MASTER MODULE (6MF2802-1AA00): All versions prior to CPC80 v16.30 CP-8022 MASTER MODULE WITH GPRS (6MF2802-2AA00): All versions prior to CPC80 v16.30." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-15" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC eaSie Core Package" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-44222; CVE-2021-44221" ;
    icsa:cweNumber "CWE-306; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-44221,
        cve-res:CVE-2021-44222 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC eaSie" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC eaSie; are affected: Core Package (6DL5424-0AX00-0AV8): All versions prior to v22.00.; a digital automation manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-16" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens EN100 Ethernet Module" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-30938" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2022-30938 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EN100 Ethernet Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following ethernet modules: EN100 Ethernet module DNP3 IP variant: All versions EN100 Ethernet module IEC 104 variant: All versions EN100 Ethernet module IEC 61850 variant: All versions prior to v4.40 EN100 Ethernet module Modbus TCP variant: All versions EN100 Ethernet module PROFINET IO variant: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-17" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Opcenter Quality" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-33736" ;
    icsa:cweNumber "CWE-303" ;
    icsa:hasCVE cve-res:CVE-2022-33736 ;
    icsa:hasCWE cwe-res:CWE-303 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Opcenter Quality" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following quality management systems: Opcenter Quality V13.1: All versions prior to v13.1.20220624 Opcenter Quality V13.2: All versions prior to v13.2.20220624." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-195-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-195-18" ;
    dcterms:issued "2022-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS (Update A)" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-34663" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2022-34663 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following RUGGEDCOM ROS-based devices: RUGGEDCOM ROS i800: All versions RUGGEDCOM ROS i801: All versions RUGGEDCOM ROS i802: All versions RUGGEDCOM ROS i803: All versions RUGGEDCOM ROS M969: All versions RUGGEDCOM ROS M2100: All versions RUGGEDCOM ROS M2200: All versions RUGGEDCOM ROS RMC: All versions RUGGEDCOM ROS RMC20: All versions RUGGEDCOM ROS RMC30: All versions RUGGEDCOM ROS RMC40: All versions RUGGEDCOM ROS RMC41: All versions RUGGEDCOM ROS RMC8388: All versions prior to v5.6.0 RUGGEDCOM ROS RP110: All versions RUGGEDCOM ROS RS400: All versions RUGGEDCOM ROS RS401: All versions RUGGEDCOM ROS RS416: All versions RUGGEDCOM ROS RS416v2: All versions prior to v5.6.0 RUGGEDCOM ROS RS900 (32M): All versions prior to v5.6.0 RUGGEDCOM ROS RS900G: All versions RUGGEDCOM ROS RS900G (32M): All versions prior to v5.6.0 RUGGEDCOM ROS RS900GP: All versions RUGGEDCOM ROS RS900L: All versions RUGGEDCOM ROS RS900W: All versions RUGGEDCOM ROS RS910: All versions RUGGEDCOM ROS RS910L: All versions RUGGEDCOM ROS RS910W: All versions RUGGEDCOM ROS RS920L: All versions RUGGEDCOM ROS RS920W: All versions RUGGEDCOM ROS RS930L: All versions RUGGEDCOM ROS RS930W: All versions RUGGEDCOM ROS RS940G: All versions RUGGEDCOM ROS RS969: All versions --------- Begin Update A Part 1 of 1 --------- RUGGEDCOM ROS RS900: All versions RUGGEDCOM ROS RS1600: All versions RUGGEDCOM ROS RS1600F: All versions RUGGEDCOM ROS RS1600T: All versions --------- End Update A Part 1 of 1 --------- RUGGEDCOM ROS RS8000: All versions RUGGEDCOM ROS RS8000A: All versions RUGGEDCOM ROS RS8000H: All versions RUGGEDCOM ROS RS8000T: All versions RUGGEDCOM ROS RSG907R: All versions prior to v5.6.0 RUGGEDCOM ROS RSG908C: All versions prior to v5.6.0 RUGGEDCOM ROS RSG909R: All versions prior to v5.6.0 RUGGEDCOM ROS RSG910C: All versions prior to v5.6.0 RUGGEDCOM ROS RSG920P: All versions prior to v5.6.0 RUGGEDCOM ROS RSG2100: All versions RUGGEDCOM ROS RSG2100 (32M): All versions prior to v5.6.0 RUGGEDCOM ROS RSG2100P: All versions RUGGEDCOM ROS RSG2200: All versions RUGGEDCOM ROS RSG2288: All versions prior to v5.6.0 RUGGEDCOM ROS RSG2300: All versions prior to v5.6.0 RUGGEDCOM ROS RSG2300P: All versions prior to v5.6.0 RUGGEDCOM ROS RSG2488: All versions prior to v5.6.0 RUGGEDCOM ROS RSL910: All versions prior to v5.6.0 RUGGEDCOM ROS RST916C: All versions prior to v5.6.0 RUGGEDCOM ROS RST916P: All versions prior to v5.6.0 RUGGEDCOM ROS RST2228: All versions prior to v5.6.0 RUGGEDCOM ROS RST2228P: All versions prior to v5.6.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-195-18" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-200-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-200-01" ;
    dcterms:issued "2022-07-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "MiCODUS MV720 GPS tracker (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Transportation Systems; Government Facilities; Financial Services; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2141; CVE-2022-2107; CVE-2022-2199; CVE-2022-34150; CVE-2022-33944" ;
    icsa:cweNumber "CWE-798; CWE-79; CWE-639; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2022-2107,
        cve-res:CVE-2022-2141,
        cve-res:CVE-2022-2199,
        cve-res:CVE-2022-33944,
        cve-res:CVE-2022-34150 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-639,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MV720 GPS tracker" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MV720 GPS tracker are affected: MV720 model." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-200-01" ;
    icsa:vendor "MiCODUS" ;
    icsa:year 2022 .

icsa-res:ICSA-22-202-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-202-01" ;
    dcterms:issued "2022-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Drive Composer, Automation Builder, Mint Workbench" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-31216; CVE-2022-31217; CVE-2022-31219; CVE-2022-31218; CVE-2022-26057" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2022-26057,
        cve-res:CVE-2022-31216,
        cve-res:CVE-2022-31217,
        cve-res:CVE-2022-31218,
        cve-res:CVE-2022-31219 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Drive Composer, Automation Builder, Mint Workbench" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ABB products are affected: ABB Drive Composer Entry: Versions 2.0 to 2.7 ABB Drive Composer Pro: Versions 2.0 to 2.7 ABB Automation Builder: Versions 1.1.0 to 2.5.0 Mint Workbench: Builds 5866 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-202-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2022 .

icsa-res:ICSA-22-202-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-202-02" ;
    dcterms:issued "2022-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys ADS, ADX, OAS" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-36200" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2021-36200 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys ADS, ADX, OAS with MUI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OAS are affected: Johnson Controls Metasys ADS; OAS with MUI: Version 10 Johnson Controls Metasys ADS; ADX; The following versions of Metasys ADS; OAS with MUI: Version 11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-202-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-202-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-202-03" ;
    dcterms:issued "2022-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ISaGRAF Workbench" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2464; CVE-2022-2465; CVE-2022-2463" ;
    icsa:cweNumber "CWE-502; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2022-2463,
        cve-res:CVE-2022-2464,
        cve-res:CVE-2022-2465 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISaGRAF Workbench" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports these vulnerabilities affect the following versions of ISaGRAF Workbench; an automation development tool: ISaGRAF Workbench Version 6.0 through 6.6.9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-202-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-202-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-202-04" ;
    dcterms:issued "2022-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States, Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-33315; CVE-2022-33317; CVE-2022-33320; CVE-2022-33318; CVE-2022-33319; CVE-2022-33316; CVE-2022-29834" ;
    icsa:cweNumber "CWE-502; CWE-22; CWE-125; CWE-829" ;
    icsa:hasCVE cve-res:CVE-2022-29834,
        cve-res:CVE-2022-33315,
        cve-res:CVE-2022-33316,
        cve-res:CVE-2022-33317,
        cve-res:CVE-2022-33318,
        cve-res:CVE-2022-33319,
        cve-res:CVE-2022-33320 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-22,
        cwe-res:CWE-502,
        cwe-res:CWE-829 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update C)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric ICONICS Suite: >=10.97|<=10.97.1; Mitsubishi Electric Iconics Digital Solutions GENESIS64: >=10.97|<=10.97.1; Mitsubishi Electric GENESIS64: >=10.97|<=10.97.1; Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: >=10.97|<=10.97.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-202-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-202-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-202-05" ;
    dcterms:issued "2022-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect Stride Field I/O" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2022-2485" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-2485 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stride Field I/O" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "B/N 4714432222.; firmware version prior to v8.3.4.0 SIO- MB04ADS; batch number (B/N) 5714442222 SIO-MB04ADS; B/N 5714442222 SIO-MB04THMS; firmware version prior to v8.11.3.0 SIO-MB12CDR; firmware version prior to v8.0.4.0 SIO-MB16CDD2; B/N 57141862221 SIO-MB04DAS; firmware version prior to v8.2.4.00 SIO-MB12CDR; firmware version prior to v8.6.3.0 SIO-MB08ADS-2; firmware version prior to v8.7.3.0 SIO-MB08THMS; AutomationDirect reports this vulnerability affects Stride Field I/O products with the following part numbers: SIO-MB04RTDS; firmware version prior to v8.8.4.0 SIO-MB04DAS; firmware version prior to v8.5.4.0 SIO-MB08ADS-1; firmware version prior to v8.1.4.0 SIO-MB16ND3; firmware version prior to v8.4.3.0 SIO-MB04THMS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-202-05" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2022 .

icsa-res:ICSA-22-207-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-207-01" ;
    dcterms:issued "2022-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition (Update A)" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2022-1704" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2022-1704 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ignition" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of Inductive Automation Ignition software are affected: -------- Begin Update A Part 1 of 1 --------- Inductive Automation Ignition: All versions from 8.1 to those prior to v8.1.8 Inductive Automation Ignition: All 7.9 versions prior to v7.9.21 --------- End Update A Part 1 of 1 ---------" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-207-01" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-207-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-207-02" ;
    dcterms:issued "2022-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Safety Manager" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30314; CVE-2022-30315; CVE-2022-30313; CVE-2022-30316" ;
    icsa:cweNumber "CWE-798; CWE-345; CWE-306" ;
    icsa:hasCVE cve-res:CVE-2022-30313,
        cve-res:CVE-2022-30314,
        cve-res:CVE-2022-30315,
        cve-res:CVE-2022-30316 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-345,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Safety Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2022-30313; and CVE-2022-30316) All versions Safety Manager: (CVE-2022-30314) Versions prior to R160.1.; The following versions of Safety Manager; a safety solution of the Experion Process Knowledge System; are affected: Safety Manager: (CVE-2022-30315" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-207-02" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2022 .

icsa-res:ICSA-22-207-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-207-03" ;
    dcterms:issued "2022-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Saia Burgess PG5 PCD" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30320; CVE-2022-30319" ;
    icsa:cweNumber "CWE-327; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2022-30319,
        cve-res:CVE-2022-30320 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Saia Burgess PG5 PCD" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a PLC; are affected: Saia Burgess PG5 PCD: All versions.; The following versions of Saia Burgess PG5 PCD" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-207-03" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2022 .

icsa-res:ICSA-22-207-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-207-04" ;
    dcterms:issued "2022-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "MOXA NPort 5110" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2022-2044; CVE-2022-2043" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-2043,
        cve-res:CVE-2022-2044 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NPort 5110" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the MOXA NPort 5110 device server are affected: NPort 5110: Firmware Versions 2.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-207-04" ;
    icsa:vendor "Moxa" ;
    icsa:year 2022 .

icsa-res:ICSA-22-209-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-209-01" ;
    dcterms:issued "2022-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Products Impacted by Chromium Type Confusion" ;
    icsa:CVSSScore "4.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1096" ;
    icsa:cweNumber "CWE-843" ;
    icsa:hasCVE cve-res:CVE-2022-1096 ;
    icsa:hasCWE cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Software, Enhanced HIM for PowerFlex, Connected Components Workbench" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "13; and 6.30 Enhanced HIM (eHIM) for PowerFlex 6000T: Version 1.001 Connected Components Workbench software: Versions 11; The following versions of Rockwell products are affected: FactoryTalk Linx Enterprise software: Versions 6.20; 6.21; and 20 FactoryTalk View Site Edition: Version 13.; 12" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-209-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-216-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-216-01" ;
    dcterms:issued "2022-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digi ConnectPort X2D" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2634" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2022-2634 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ConnectPort X2D Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Digi products are affected: Digi ConnectPort X2D Gateway: All firmware versions in devices manufactured prior to January 2020." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-216-01" ;
    icsa:vendor "Digi International, Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-221-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-221-01" ;
    dcterms:issued "2022-08-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Multiple Factory Automation Products (Update D)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-1292; CVE-2022-0778" ;
    icsa:cweNumber "CWE-835; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-0778,
        cve-res:CVE-2022-1292 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "NZ2MHG-TSNT4): Version 03 and prior [affected by CVE-2022-0778 only] MELSEC iQ-R Series OPC UA Server Module (RD81OPC96): Version 08 and prior [affected by CVE-2022-0778 only].; The following version of GT SoftGOT2000 is affected: GOT2000 compatible HMI software (GT SoftGOT2000): Version 1.275M CC-Link IE TSN Industrial Managed Switch (NZ2MHG-TSNT8F2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-221-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-221-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-221-02" ;
    dcterms:issued "2022-08-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson ControlWave" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Oil and Gas; Petrochemical; Chemical; Life Sciences; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-30262" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2022-30262 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlWave" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a programmable controller; The following versions of ControlWave; are affected: ControlWave: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-221-02" ;
    icsa:vendor "Emerson" ;
    icsa:year 2022 .

icsa-res:ICSA-22-221-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-221-03" ;
    dcterms:issued "2022-08-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson OpenBSI" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Oil and Gas; Petrochemical; Chemical; Life Sciences; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-29959; CVE-2022-29960" ;
    icsa:cweNumber "CWE-327; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2022-29959,
        cve-res:CVE-2022-29960 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenBSI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OpenBSI; a set of network communication services; are affected: OpenBSI: Versions 5.9 SP3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-221-03" ;
    icsa:vendor "Emerson" ;
    icsa:year 2022 .

icsa-res:ICSA-22-223-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-223-01" ;
    dcterms:issued "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter STAR-CCM+" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-34659" ;
    icsa:cweNumber "CWE200" ;
    icsa:hasCVE cve-res:CVE-2022-34659 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter STAR-CCM+" ;
    icsa:productDistribution "Multiple Countries" ;
    icsa:productsAffected "The following versions of Simcenter STAR-CCM+ are affected: Simcenter STAR-CCM+: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-223-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-223-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-223-02" ;
    dcterms:issued "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-34660; CVE-2022-34661" ;
    icsa:cweNumber "CWE-835; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2022-34660,
        cve-res:CVE-2022-34661 ;
    icsa:hasCWE cwe-res:CWE-77,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Teamcenter; a product lifecycle management software; are affected: Teamcenter v12.4: All versions prior to v12.4.0.15 Teamcenter v13.0: All versions prior to v13.0.0.10 Teamcenter v13.1: All versions prior to v13.1.0.10 Teamcenter v13.2: All versions prior to v13.2.0.9 Teamcenter v13.3: All versions prior to v13.3.0.5 Teamcenter v14.0: All versions prior to v14.0.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-223-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-223-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-223-03" ;
    dcterms:issued "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-21812; CVE-2021-21825; CVE-2021-21813; CVE-2021-21828; CVE-2021-21811; CVE-2021-21829; CVE-2022-26507; CVE-2021-21830; CVE-2021-21810; CVE-2021-21815; CVE-2021-21826; CVE-2021-21827; CVE-2021-21814" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-191; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2021-21810,
        cve-res:CVE-2021-21811,
        cve-res:CVE-2021-21812,
        cve-res:CVE-2021-21813,
        cve-res:CVE-2021-21814,
        cve-res:CVE-2021-21815,
        cve-res:CVE-2021-21825,
        cve-res:CVE-2021-21826,
        cve-res:CVE-2021-21827,
        cve-res:CVE-2021-21828,
        cve-res:CVE-2021-21829,
        cve-res:CVE-2021-21830,
        cve-res:CVE-2022-26507 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-191 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reported these vulnerabilities affect the following products using AT&T Labs Compressor (XMill) and Decompressor (XDemill): EcoStruxure Control Expert: All versions (including former Unity Pro) prior to V15.1 HF001 EcoStruxure Process Expert: All versions (including former HDCS) prior to V2021 SCADAPack RemoteConnect for x70: All versions prior to R2.7.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-223-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-223-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-223-04" ;
    dcterms:issued "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson ROC800, ROC800L and DL8000" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30264" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2022-30264 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ROC800, ROC800L and DL8000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a remote automation controller; are affected: ROC800: All versions ROC800L: All versions DL8000: All versions.; The following versions of ROC800" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-223-04" ;
    icsa:vendor "Emerson" ;
    icsa:year 2022 .

icsa-res:ICSA-22-223-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-223-05" ;
    dcterms:issued "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM A8000 Web Server Module" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-46304" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2021-46304 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM A8000 CP-8000, CP-8021, CP-8022" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens has reported that this vulnerability affects the following SICAM A8000 Web Server Module products and versions: CP-8000 MASTER MODULE WITH I/O -25/+70°C (6MF2101-0AB10-0AA0): All Versions CP-8000 MASTER MODULE WITH I/O -40/+70°C (6MF2101-1AB10-0AA0): All Versions CP-8021 MASTER MODULE (6MF2802-1AA00): All Versions CP-8022 MASTER MODULE WITH GPRS (6MF2802-2AA00): All Versions The affected protocol firmware utilized with the web server modules includes the following: AGPMT0 (AGP Master) DNPiT1 (DNP3 TCP/IP Server) DNPiT2 (DNP3 TCP/IP Client) DNPMT0 (DNP3 Master seriell) DNPST0 (DNP3 Slave seriell) ET83 (61850 Ed.1) ET85 (61850 Ed.2) MBCiT0 (MODBUS TCP/IP Client) MBSiT0 (MODBUS TCP/IP Server) MODMT2 (MODBUS Master seriell) OPUPT0 (OPCUA Pub/Sub) OPUPT1 (Mindconnect)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-223-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-223-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-223-06" ;
    dcterms:issued "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM TOOLBOX II" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-45106" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2021-45106 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM TOOLBOX II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a control and monitoring system; are affected: SICAM TOOLBOX II: All versions.; The following versions of SICAM TOOLBOX II" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-223-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-223-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-223-07" ;
    dcterms:issued "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE (Update A)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-36325; CVE-2022-36323; CVE-2022-36324" ;
    icsa:cweNumber "CWE-74; CWE-80; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2022-36323,
        cve-res:CVE-2022-36324,
        cve-res:CVE-2022-36325 ;
    icsa:hasCWE cwe-res:CWE-74,
        cwe-res:CWE-770,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DC 24V) (6GK5328-4SS00-2AR3): All versions SCALANCE XR524-8C; PN) (6GK5213-3BF00-2AB2): All versions SCALANCE XB216 (6GK5216-0BA00-2TB2): All versions SCALANCE XB216 (PN) (6GK5216-0BA00-2AB2): All versions SCALANCE XC206-2 (SC) (6GK5206-2BD00-2AC2): All versions SCALANCE XC206-2 (ST/BFOC) (6GK5206-2BB00-2AC2): All versions SCALANCE XC206-2G PoE (6GK5206-2RS00-2AC2): All versions SCALANCE XC206-2G PoE (54 V DC) (6GK5206-2RS00-5AC2): All versions SCALANCE XC206-2G PoE EEC (54 V DC) (6GK5206-2RS00-5FC2): All versions SCALANCE XC206-2SFP (6GK5206-2BS00-2AC2): All versions SCALANCE XC206-2SFP EEC (6GK5206-2BS00-2FC2): All versions SCALANCE XC206-2SFP G (6GK5206-2GS00-2AC2): All versions SCALANCE XC206-2SFP G (EIP DEF.) (6GK5206-2GS00-2TC2): All versions SCALANCE XC206-2SFP G EEC (6GK5206-2GS00-2FC2): All versions SCALANCE XC208 (6GK5208-0BA00-2AC2): All versions SCALANCE XC208EEC (6GK5208-0BA00-2FC2): All versions SCALANCE XC208G (6GK5208-0GA00-2AC2): All versions SCALANCE XC208G (EIP def.) (6GK5208-0GA00-2TC2): All versions SCALANCE XC208G EEC (6GK5208-0GA00-2FC2): All versions SCALANCE XC208G PoE (6GK5208-0RA00-2AC2): All versions SCALANCE XC208G PoE (54 V DC) (6GK5208-0RA00-5AC2): All versions SCALANCE XC216 (6GK5216-0BA00-2AC2): All versions SCALANCE XC216-3G PoE (6GK5216-3RS00-2AC2): All versions SCALANCE XC216-3G PoE (54 V DC) (6GK5216-3RS00-5AC2): All versions SCALANCE XC216-4C (6GK5216-4BS00-2AC2): All versions SCALANCE XC216-4C G (6GK5216-4GS00-2AC2): All versions SCALANCE XC216-4C G (EIP Def.) (6GK5216-4GS00-2TC2): All versions SCALANCE XC216-4C G EEC (6GK5216-4GS00-2FC2): All versions SCALANCE XC216EEC (6GK5216-0BA00-2FC2): All versions SCALANCE XC224 (6GK5224-0BA00-2AC2): All versions SCALANCE XC224-4C G (6GK5224-4GS00-2AC2): All versions SCALANCE XC224-4C G (EIP Def.) (6GK5224-4GS00-2TC2): All versions SCALANCE XC224-4C G EEC (6GK5224-4GS00-2FC2): All versions SCALANCE XF204 (6GK5204-0BA00-2GF2): All versions SCALANCE XF204 DNA (6GK5204-0BA00-2YF2): All versions SCALANCE XF204-2BA (6GK5204-2AA00-2GF2): All versions SCALANCE XF204-2BA DNA (6GK5204-2AA00-2YF2): All versions SCALANCE XM408-4C (6GK5408-4GP00-2AM2): All versions SCALANCE XM408-4C (L3 int.) (6GK5408-4GQ00-2AM2): All versions SCALANCE XM408-8C (6GK5408-8GS00-2AM2): All versions SCALANCE XM408-8C (L3 int.) (6GK5408-8GR00-2AM2): All versions SCALANCE XM416-4C (6GK5416-4GS00-2AM2): All versions SCALANCE XM416-4C (L3 int.) (6GK5416-4GR00-2AM2): All versions SCALANCE XP208 (6GK5208-0HA00-2AS6): All versions SCALANCE XP208 (6GK5208-0HA00-2TS6): All versions SCALANCE XP208EEC (6GK5208-0HA00-2ES6): All versions SCALANCE XP208PoE EEC (6GK5208-0UA00-5ES6): All versions SCALANCE XP216 (6GK5216-0HA00-2AS6): All versions SCALANCE XP216 (6GK5216-0HA00-2TS6): All versions SCALANCE XP216EEC (6GK5216-0HA00-2ES6): All versions SCALANCE XP216POE EEC (6GK5216-0UA00-5ES6): All versions SCALANCE XR324WG (24 x FE; 2x230V (6GK5524-8GS00-4AR2): All versions SCALANCE XR524-8C; PN) (6GK5205-3BF00-2AB2): All versions SCALANCE XB208 (6GK5208-0BA00-2TB2): All versions SCALANCE XB208 (PN) (6GK5208-0BA00-2AB2): All versions SCALANCE XB213-3 (SC) (6GK5213-3BD00-2TB2): All versions SCALANCE XB213-3 (SC; 24V (6GK5524-8GS00-2AR2): All versions SCALANCE XR524-8C; 1x230V (6GK5526-8GS00-3AR2): All versions SCALANCE XR526-8C; AC 230V) (6GK5328-4SS00-3AR3): All versions SCALANCE XR328-4C WG (28xGE; AC 230V) (6GK5324-0BA00-3AR3): All versions SCALANCE XR324WG (24 X FE; 1x230V (6GK5524-8GS00-3AR2): All versions SCALANCE XR524-8C; L3 int.) (6GK5528-0AR00-2HR2): All versions SCALANCE XR528-6M (L3 int.) (6GK5528-0AR00-2AR2): All versions SCALANCE XR552-12M (6GK5552-0AA00-2AR2): All versions SCALANCE XR552-12M (2HR2) (6GK5552-0AA00-2HR2): All versions SCALANCE XR552-12M (2HR2) (6GK5552-0AR00-2HR2): All versions SCALANCE XR552-12M (2HR2; PN) (6GK5213-3BD00-2AB2): All versions SCALANCE XB213-3 (ST; 1x230V (L3 int.) (6GK5526-8GR00-3AR2): All versions SCALANCE XR526-8C; PN) (6GK5205-3BB00-2AB2): All versions SCALANCE XB205-3 (ST; PN) (6GK5205-3BD00-2AB2): All versions SCALANCE XB205-3 (ST/BFOC) (6GK5205-3BB00-2TB2): All versions SCALANCE XB205-3LD (6GK5205-3BF00-2TB2): All versions SCALANCE XB205-3LD (SC; DC24V) (6GK5328-4FS00-2RR3): All versions SCALANCE XR328-4C WG (28xGE; L3 int.) (6GK5552-0AR00-2AR2): All versions SIPLUS NET SCALANCE XC206-2 (6AG1206-2BB00-7AC2): All versions SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2): All versions SIPLUS NET SCALANCE XC208 (6AG1208-0BA00-7AC2): All versions SIPLUS NET SCALANCE XC216-4C (6AG1216-4BS00-7AC2): All versions --------- End Update A Part 1 of 2 ---------.; Siemens reports these vulnerabilities affects the following SCALANCE products: M-800 / S615: All versions SC-600 Family: All versions prior to V2.3.1 W-700 IEEE 802.11ax Family: All versions W-700 IEEE 802.11n Family: All versions W-1700 IEEE 802.11ac Family: All versions XB-200 Switch Family: All versions XC-200 Switch Family: All versions XF-200BA Switch Family: All versions XM-400 Family: All versions XP-200 Switch Family: All versions XR-300WG Switch Family: All versions XR-500 Family: All versions --------- Begin Update A Part 1 of 2 --------- RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions < V7.1.2 RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions < V7.1.2 SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions < V7.1.2 SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions < V7.1.2 SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions < V7.1.2: All versions < V7.1.2 SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions < V7.1.2 SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions < V7.1.2 SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions < V7.1.2 SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions < V7.1.2 SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2): All versions < V7.1.2 SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions < V7.1.2 SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions < V7.1.2 SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions < V7.1.2 SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): All versions < V7.1.2 SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions < V7.1.2 SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions < V7.1.2 SCALANCE S615 (6GK5615-0AA00-2AA2): All versions < V7.1.2 SCALANCE SC622-2C (6GK5622-2GS00-2AC2): All versions < V2.3.1 SCALANCE SC632-2C (6GK5632-2GS00-2AC2): All versions < V2.3.1 SCALANCE SC636-2C (6GK5636-2GS00-2AC2): All versions < V2.3.1 SCALANCE SC642-2C (6GK5642-2GS00-2AC2): All versions < V2.3.1 SCALANCE SC646-2C (6GK5646-2GS00-2AC2): All versions < V2.3.1 SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0): All versions SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0): All versions SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6): All versions SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0): All versions SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0): All versions SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0): All versions SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0): All versions SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6): All versions SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0): All versions SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0): All versions SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0): All versions SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0): All versions SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0): All versions SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0): All versions SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0): All versions SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0): All versions SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0): All versions SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0): All versions SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0): All versions SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0): All versions SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0): All versions SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0): All versions SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0): All versions SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0): All versions SCALANCE WAM763-1 (6GK5763-1AL00-7DA0): All versions SCALANCE WAM766-1 (6GK5766-1GE00-7DA0): All versions SCALANCE WAM766-1 (6GK5766-1GE00-7DB0): All versions SCALANCE WAM766-1 6GHz (6GK5766-1JE00-7DA0): All versions SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0): All versions SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TB0): All versions SCALANCE WAM766-1 EEC 6GHz (6GK5766-1JE00-7TA0): All versions SCALANCE WUM763-1 (6GK5763-1AL00-3AA0): All versions SCALANCE WUM763-1 (6GK5763-1AL00-3DA0): All versions SCALANCE WUM766-1 (6GK5766-1GE00-3DA0): All versions SCALANCE WUM766-1 (6GK5766-1GE00-3DB0): All versions SCALANCE WUM766-1 6GHz (6GK5766-1JE00-3DA0): All versions SCALANCE XB205-3 (SC) (6GK5205-3BD00-2TB2): All versions SCALANCE XB205-3 (SC; 24V (L3 int.) (6GK5524-8GR00-2AR2): All versions SCALANCE XR526-8C; 1x230V (L3 int.) (6GK5524-8GR00-3AR2): All versions SCALANCE XR524-8C; 2x230V (L3 int.) (6GK5526-8GR00-4AR2): All versions SCALANCE XR526-8C; 2x230V (6GK5526-8GS00-4AR2): All versions SCALANCE XR526-8C; PN) (6GK5213-3BB00-2AB2): All versions SCALANCE XB213-3 (ST/BFOC) (6GK5213-3BB00-2TB2): All versions SCALANCE XB213-3LD (6GK5213-3BF00-2TB2): All versions SCALANCE XB213-3LD (SC; DC 24V) (6GK5324-0BA00-2AR3): All versions SCALANCE XR326-2C PoE WG (6GK5326-2QS00-3AR3): All versions SCALANCE XR326-2C PoE WG (without UL) (6GK5326-2QS00-3RR3): All versions SCALANCE XR328-4C WG (24xFE; 24V) (6GK5328-4FS00-2AR3): All versions SCALANCE XR328-4C WG (24xFE; 4XGE; 2x230V (L3 int.) (6GK5524-8GR00-4AR2): All versions SCALANCE XR524-8C; AC230V) (6GK5328-4FS00-3RR3): All versions SCALANCE XR328-4C WG (24XFE; 24V (6GK5526-8GS00-2AR2): All versions SCALANCE XR526-8C; 4xGE; AC230V) (6GK5328-4FS00-3AR3): All versions SCALANCE XR328-4C WG (24xFE; 24V (L3 int.) (6GK5526-8GR00-2AR2): All versions SCALANCE XR528-6M (6GK5528-0AA00-2AR2): All versions SCALANCE XR528-6M (2HR2) (6GK5528-0AA00-2HR2): All versions SCALANCE XR528-6M (2HR2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-223-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-228-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-228-01" ;
    dcterms:issued "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CENTUM Controller FCS" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-33939" ;
    icsa:cweNumber "CWE-399" ;
    icsa:hasCVE cve-res:CVE-2022-33939 ;
    icsa:hasCWE cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CENTUM VP & CS 3000 Controller FCS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CP451.; CP33; CP345 CP401; Yokogawa reports this vulnerability affects the following CENTUM VP/CS 3000 Controller FCS products: CENTUM VP/CS 3000 controller FCS CP31" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-228-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2022 .

icsa-res:ICSA-22-228-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-228-02" ;
    dcterms:issued "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "LS ELECTRIC PLC and XG5000 (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2758" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2022-2758 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LS ELEC PLC and XG5000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and XG5000; a PLC; a PLC programming software; The following versions of LS ELECTRIC PLC; are affected: --------- Begin Update A part 1 of 3 --------- LS Electric PLC: XGK-CPUU/H/A/S/E: All versions prior to V3.50 XGI-CPUU/UD/H/S/E: All versions prior to V3.20 XGR-CPUH: All versions prior to V1.80 XGB-XBMS: All versions prior to V3.00 XGB-XBCH: All versions prior to V1.90 XGB-XECH: All versions prior to V1.30 LS Electric XG5000: All versions prior to V4.0 --------- End Update A part 1 of 3 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-228-02" ;
    icsa:vendor "LS ELECTRIC, LS Industrial Systems (LSIS) Co. Ltd" ;
    icsa:year 2022 .

icsa-res:ICSA-22-228-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-228-03" ;
    dcterms:issued "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation DRAS" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2759" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2022-2759 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Robot Automation Studio (DRAS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a controller software suite; The following versions of DRAS; are affected: DRAS: All versions prior to 1.13.20." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-228-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-228-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-228-04" ;
    dcterms:issued "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Softing Secure Integration Server" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2338; CVE-2022-1069; CVE-2022-2335; CVE-2022-1748; CVE-2022-1373; CVE-2022-2547; CVE-2022-2337; CVE-2022-2334; CVE-2022-2336" ;
    icsa:cweNumber "CWE-287; CWE-427; CWE-191; CWE-23; CWE-319; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2022-1069,
        cve-res:CVE-2022-1373,
        cve-res:CVE-2022-1748,
        cve-res:CVE-2022-2334,
        cve-res:CVE-2022-2335,
        cve-res:CVE-2022-2336,
        cve-res:CVE-2022-2337,
        cve-res:CVE-2022-2338,
        cve-res:CVE-2022-2547 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-191,
        cwe-res:CWE-23,
        cwe-res:CWE-287,
        cwe-res:CWE-319,
        cwe-res:CWE-427,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Secure Integration Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Softing reports these vulnerabilities affect the following products: Secure Integration Server: Version 1.22. edgeConnector: Version 3.1. edgeAggregator: Version 3.1. OPC UA C++ Server SDK: Version 6. OPC Suite: Version 5.2. uaGate: Version 1.74." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-228-04" ;
    icsa:vendor "Softing Industrial Automation GmbH" ;
    icsa:year 2022 .

icsa-res:ICSA-22-228-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-228-05" ;
    dcterms:issued "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "B&R Industrial Automation Automation Studio 4" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-22289" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2021-22289 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation Studio 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "B&R Automation reports the vulnerabilities affect the following versions of Automation Studio; a programmable logic controller (PLC) automation programming software: Automation Studio 4: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-228-05" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2022 .

icsa-res:ICSA-22-228-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-228-06" ;
    dcterms:issued "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson Proficy Machine Edition" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Dams; Defense Industrial Base; Energy; Food and Agriculture; Government Facilities; Information Technology; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-2789; CVE-2022-2793; CVE-2022-2791; CVE-2022-2788; CVE-2022-2792; CVE-2022-2790" ;
    icsa:cweNumber "CWE-434; CWE-284; CWE-29; CWE-345; CWE-353; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2022-2788,
        cve-res:CVE-2022-2789,
        cve-res:CVE-2022-2790,
        cve-res:CVE-2022-2791,
        cve-res:CVE-2022-2792,
        cve-res:CVE-2022-2793 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-29,
        cwe-res:CWE-345,
        cwe-res:CWE-347,
        cwe-res:CWE-353,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy Machine Edition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Proficy Machine Edition Version 9.80 and prior.; The following versions of Proficy Machine Edition; an engineering workstation that is part of the PACSystems control system software platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-228-06" ;
    icsa:vendor "Emerson" ;
    icsa:year 2022 .

icsa-res:ICSA-22-228-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-228-07" ;
    dcterms:issued "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sequi PortBloque S" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2661; CVE-2022-2662" ;
    icsa:cweNumber "CWE-285; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2022-2661,
        cve-res:CVE-2022-2662 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sequi PortBloque S" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a serial Modbus firewall; are affected: Sequi PortBloque S: All versions.; The following versions of Sequi PortBloque S" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-228-07" ;
    icsa:vendor "Sequi" ;
    icsa:year 2022 .

icsa-res:ICSA-22-235-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-235-01" ;
    dcterms:issued "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "ARC Informatique PcVue (Update A)" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2569" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2022-2569 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PcVue" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ARC Informatique product components are affected: --------- Begin Update A part 1 of 2 --------- PcVue 12 OAuth web service configuration versions prior to 12.0.27 PcVue 15 OAuth web service configuration versions prior to 15.2.3 --------- End Update A part 1 of 2 --------- PcVue 12 OAuth web service configuration PcVue 15 OAuth web service configuration." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-235-01" ;
    icsa:vendor "ARC Informatique" ;
    icsa:year 2022 .

icsa-res:ICSA-22-235-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-235-02" ;
    dcterms:issued "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation DIALink" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2660" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2022-2660 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Industrial Automation DIALink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the DIALink Industrial Automation server are affected: Delta Industrial Automation DIALink: Version 1.4.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-235-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-235-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-235-03" ;
    dcterms:issued "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-2234" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2022-2234 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mySCADA myPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "mySCADA reports this vulnerability affects the following myPRO HMI/SCADA systems: myPRO: Versions 8.26.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-235-03" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2022 .

icsa-res:ICSA-22-235-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-235-05" ;
    dcterms:issued "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Measuresoft ScadaPro Server" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2892" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-2892 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScadaPro Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a supervisory control and data acquisition (SCADA) system; The following versions of ScadaPro Server; are affected: ScadaPro Server: Versions prior to 6.8.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-235-05" ;
    icsa:vendor "Measuresoft" ;
    icsa:year 2022 .

icsa-res:ICSA-22-235-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-235-06" ;
    dcterms:issued "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Measuresoft ScadaPro Server and Client" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2895; CVE-2022-2898; CVE-2022-2897; CVE-2022-2894; CVE-2022-2896" ;
    icsa:cweNumber "CWE-416; CWE-59; CWE-121; CWE-822" ;
    icsa:hasCVE cve-res:CVE-2022-2894,
        cve-res:CVE-2022-2895,
        cve-res:CVE-2022-2896,
        cve-res:CVE-2022-2897,
        cve-res:CVE-2022-2898 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-416,
        cwe-res:CWE-59,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScadaPro Server and Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ScadaPro; a supervisory control and data acquisition (SCADA) system; are affected: ScadaPro Server and Client: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-235-06" ;
    icsa:vendor "Measuresoft" ;
    icsa:year 2022 .

icsa-res:ICSA-22-235-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-235-07" ;
    dcterms:issued "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-2081" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-2081 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi Energy's RTU500 firmware are affected: RTU500 series CMU Firmware version 12.0.1-12.0.13 RTU500 series CMU Firmware version 12.2.1-12.2.11 RTU500 series CMU Firmware version 12.4.1-12.4.11 RTU500 series CMU Firmware version 12.6.1-12.6.7 RTU500 series CMU Firmware version 12.7.1-12.7.3 RTU500 series CMU Firmware version 13.2.1-13.2.4 RTU500 series CMU Firmware version 13.3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-235-07" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-237-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-237-01" ;
    dcterms:issued "2022-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "FATEK Automation FvDesigner" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2866" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-2866 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FvDesigner" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the FvDesigner software tool are affected: FvDesigner: Versions 1.5.103 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-237-01" ;
    icsa:vendor "FATEK Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-01" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy FACTS Control Platform (FCP) Product" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-8172; CVE-2020-8174; CVE-2020-8201; CVE-2020-1968; CVE-2020-8265; CVE-2020-8287; CVE-2020-8252" ;
    icsa:cweNumber "CWE-1357" ;
    icsa:hasCVE cve-res:CVE-2020-1968,
        cve-res:CVE-2020-8172,
        cve-res:CVE-2020-8174,
        cve-res:CVE-2020-8201,
        cve-res:CVE-2020-8252,
        cve-res:CVE-2020-8265,
        cve-res:CVE-2020-8287 ;
    icsa:hasCWE cwe-res:CWE-1357 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FACTS Control Platform (FCP) Product" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports multiple open-source software related vulnerabilities in the following FACTS Control Platform (FCP) product versions: FCP 1.1.0 - 1.3.0 FCP 2.1.0 - 2.3.0 FCP 3.0.0 - 3.12.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-02" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Gateway Station (GWS) Product" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-8172; CVE-2020-8174; CVE-2020-8201; CVE-2020-1968; CVE-2020-8265; CVE-2020-8287; CVE-2020-8252" ;
    icsa:cweNumber "CWE-1357" ;
    icsa:hasCVE cve-res:CVE-2020-1968,
        cve-res:CVE-2020-8172,
        cve-res:CVE-2020-8174,
        cve-res:CVE-2020-8201,
        cve-res:CVE-2020-8252,
        cve-res:CVE-2020-8265,
        cve-res:CVE-2020-8287 ;
    icsa:hasCWE cwe-res:CWE-1357 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Gateway Station (GWS) Product" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reported multiple open-source software related vulnerabilities in the following GWS Product versions: GWS 2.0.0.0 and earlier GWS 2.1.0.0 GWS 2.2.0.0 GWS 2.3.0.0 GWS 2.4.0.0 GWS 3.0.0.0 GWS 3.1.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-03" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MSM Product" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2016-9586; CVE-2011-4273; CVE-2016-8619; CVE-2015-6584; CVE-2016-7167; CVE-2016-7103; CVE-2016-8621; CVE-2013-2174; CVE-2014-0138; CVE-2016-8617; CVE-2014-3707; CVE-2016-8618; CVE-2018-16842" ;
    icsa:cweNumber "CWE-1357" ;
    icsa:hasCVE cve-res:CVE-2011-4273,
        cve-res:CVE-2013-2174,
        cve-res:CVE-2014-0138,
        cve-res:CVE-2014-3707,
        cve-res:CVE-2015-6584,
        cve-res:CVE-2016-7103,
        cve-res:CVE-2016-7167,
        cve-res:CVE-2016-8617,
        cve-res:CVE-2016-8618,
        cve-res:CVE-2016-8619,
        cve-res:CVE-2016-8621,
        cve-res:CVE-2016-9586,
        cve-res:CVE-2018-16842 ;
    icsa:hasCWE cwe-res:CWE-1357 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MSM Product" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports multiple open-source software related vulnerabilities in the following MSM product versions: MSM version 2.2 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-04" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-28613" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-28613 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reported this vulnerability affects the following RTU500 series in which HCI Modbus TCP is configured and enabled by project configuration: RTU500 series CMU Firmware version 12.0.* RTU500 series CMU Firmware version 12.2.* RTU500 series CMU Firmware version 12.4.* RTU500 series CMU Firmware version 12.6.* RTU500 series CMU Firmware version 12.7.* RTU500 series CMU Firmware version 13.2.*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-04" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-05" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric D300win" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1738; CVE-2022-1523" ;
    icsa:cweNumber "CWE-125; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2022-1523,
        cve-res:CVE-2022-1738 ;
    icsa:hasCWE cwe-res:CWE-123,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "D300win" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: D300win: versions prior to 3.7.1.17.; a programming support tool expert; The following versions of D300win" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-05" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-06" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell ControlEdge" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30318" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-30318 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlEdge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ControlEdge; are affected: ControlEdge: All versions prior to 151.2.; a PLC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-06" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-07" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Experion LX" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30317" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2022-30317 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Experion LX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Experion LX; are affected: Experion LX: All versions.; a distributed control system (DCS)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-07" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-08" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Trend Controls Inter-Controller Protocol" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-30312" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-30312 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Trend Controls IQ Series that utilize Inter-Controller (IC) protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: IQ Series Controllers that utilize Inter-Controller (IC) protocol: All versions.; The following versions of Trend Controls IQ Series IC; an industrial communication controller" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-08" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-09" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Programmer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2979" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2022-2979 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Programmer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is affected: Omron CX-Programmer: All versions prior to v9.78.; part of a software automation suite; The following Omron product" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-09" ;
    icsa:vendor "Omron" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-10" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Kepware KEPServerEX (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2848; CVE-2022-2825" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-2825,
        cve-res:CVE-2022-2848 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kepware KEPServerEX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a connectivity platform: Kepware KEPServerEX: Versions prior to 6.12 ThingWorkx Kepware Server: Versions prior to 6.12 ThingWorkx Industrial Connectivity: All versions OPC-Aggregator: Versions prior to 6.12 ThingWorkx Kepware Edge: Versions 1.4 and prior The following products are known to be vulnerable: Rockwell Automation KEPServer Enterprise: Versions prior to v6.12 GE Digital Industrial Gateway Server: Versions prior to v7.612 Software Toolbox TOP Server: Versions prior to v6.12.; The following PTC products are affected by vulnerabilities found in Kepware KEPServerEX" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-10" ;
    icsa:vendor "PTC" ;
    icsa:year 2022 .

icsa-res:ICSA-22-242-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-242-11" ;
    dcterms:issued "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic Electronics iSTAR" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-21941" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2022-21941 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iSTAR Ultra" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: iSTAR Ultra: All versions prior to 6.8.9. CU01.; a network-ready door controller; The following versions of Sensormatic iSTAR Ultra" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-242-11" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2022 .

icsa-res:ICSA-22-244-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-244-01" ;
    dcterms:issued "2022-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DOPSoft (Update A)" ;
    icsa:CVSSScore "3.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2966" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-2966 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software supporting the DOP-100 series HMI screens; are affected: DOPSoft: All versions; The following versions of DOPSoft" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-244-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-249-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-249-01" ;
    dcterms:issued "2022-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Triangle Microworks Libraries" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-38138" ;
    icsa:cweNumber "CWE-824" ;
    icsa:hasCVE cve-res:CVE-2022-38138 ;
    icsa:hasCWE cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TMW IEC 61850 Software Library and TMW IEC 60870-6 (ICCP/TASE.2) Software Library" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "TMW Library: IEC 61850 Any client or server using the C language library with a version number of 11.2.0 or earlier. Any client or server using the C++; C#; or Java language library with a version number of 5.0.1 or earlier. TMW Library: IEC 60870-6 (ICCP/Tase.2) Any client or server using a C++ language library with a version number of 4.4.3 or earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-249-01" ;
    icsa:vendor "Triangle MicroWorks" ;
    icsa:year 2022 .

icsa-res:ICSA-22-249-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-249-02" ;
    dcterms:issued "2022-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Edge 2020 R2 SP1 and all prior versions" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-28686; CVE-2022-36970; CVE-2022-28688; CVE-2022-36969; CVE-2022-28685; CVE-2022-28687" ;
    icsa:cweNumber "CWE-502; CWE-427; CWE-611; CWE-357" ;
    icsa:hasCVE cve-res:CVE-2022-28685,
        cve-res:CVE-2022-28686,
        cve-res:CVE-2022-28687,
        cve-res:CVE-2022-28688,
        cve-res:CVE-2022-36969,
        cve-res:CVE-2022-36970 ;
    icsa:hasCWE cwe-res:CWE-357,
        cwe-res:CWE-427,
        cwe-res:CWE-502,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA Edge 2020 R2 SP1 and all prior versions" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: AVEVA Edge: 2020 R2 SP1 and all prior versions.; an industrial software system; The following versions of AVEVA Edge" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-249-02" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2022 .

icsa-res:ICSA-22-249-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-249-03" ;
    dcterms:issued "2022-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cognex 3D-A1000 Dimensioning System" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2022-1525; CVE-2022-1522; CVE-2022-1368" ;
    icsa:cweNumber "CWE-306; CWE-117; CWE-602" ;
    icsa:hasCVE cve-res:CVE-2022-1368,
        cve-res:CVE-2022-1522,
        cve-res:CVE-2022-1525 ;
    icsa:hasCWE cwe-res:CWE-117,
        cwe-res:CWE-306,
        cwe-res:CWE-602 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "3D-A1000 Dimensioning System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an industrial smart camera; are affected: Cognex 3D-A1000 Dimensioning System: Firmware Version: 1.0.3 (3354) and prior.; The following versions of Cognex 3D-A1000 Dimensioning System" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-249-03" ;
    icsa:vendor "Cognex" ;
    icsa:year 2022 .

icsa-res:ICSA-22-249-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-249-04" ;
    dcterms:issued "2022-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy TXpert Hub CoreTec 4" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-35530; CVE-2021-35532; CVE-2021-35531" ;
    icsa:cweNumber "CWE-20; CWE-288; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2021-35530,
        cve-res:CVE-2021-35531,
        cve-res:CVE-2021-35532 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-288,
        cwe-res:CWE-494 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TXpert Hub CoreTec 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2.1.3 TXpert Hub CoreTec 4 version 2.2.0; 2.1.1; a digital transformer monitoring and diagnostics device; The following versions of TXpert Hub CoreTec 4; 2.2.1.; 2.0.1 TXpert Hub CoreTec 4 version 2.1.0; 2.1.2; are affected: TXpert Hub CoreTec 4 version 2.0.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-249-04" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-251-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-251-01" ;
    dcterms:issued "2022-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "MZ Automation libIEC61850" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-2970; CVE-2022-2973; CVE-2022-2972; CVE-2022-2971" ;
    icsa:cweNumber "CWE-121; CWE-476; CWE843" ;
    icsa:hasCVE cve-res:CVE-2022-2970,
        cve-res:CVE-2022-2971,
        cve-res:CVE-2022-2972,
        cve-res:CVE-2022-2973 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-476,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "libIEC61850" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IEC 61850 implementation software; are affected: libIEC61850 Versions 1.4 and prior libIEC61850 Version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e.; The following versions of libIEC61850" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-251-01" ;
    icsa:vendor "MZ Automation GmbH" ;
    icsa:year 2022 .

icsa-res:ICSA-22-256-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-256-01" ;
    dcterms:issued "2022-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-3156" ;
    icsa:cweNumber "CWE-193" ;
    icsa:hasCVE cve-res:CVE-2021-3156 ;
    icsa:hasCWE cwe-res:CWE-193 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TXpert Hub CoreTec 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2.1.3 TXpert Hub CoreTec 4 version 2.2.0; 2.1.1; a digital transformer monitoring and diagnostics device; The following versions of TXpert Hub CoreTec 4; 2.2.1.; 2.0.1 TXpert Hub CoreTec 4 version 2.1.0; 2.1.2; are affected: TXpert Hub CoreTec 4 version 2.0.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-256-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-256-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-256-02" ;
    dcterms:issued "2022-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell SoftMaster" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2332; CVE-2022-2333" ;
    icsa:cweNumber "CWE-427; CWE-732" ;
    icsa:hasCVE cve-res:CVE-2022-2332,
        cve-res:CVE-2022-2333 ;
    icsa:hasCWE cwe-res:CWE-427,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SoftMaster" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a PLC software application: SoftMaster: version 4.51.; Honeywell reports these vulnerabilities affect the following SoftMaster desktop application" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-256-02" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2022 .

icsa-res:ICSA-22-256-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-256-03" ;
    dcterms:issued "2022-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAEnergie (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-32145" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-32145 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAEnergie" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "--------- Begin Update A Part 1 of 2 --------- Delta Electronics reports this vulnerability affects the following versions of DIAEnergie; an industrial energy management system: DIAEnergie: versions prior to 1.9.03.009 --------- End Update A Part 1 of 2 ---------" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-256-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-256-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-256-04" ;
    dcterms:issued "2022-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Kingspan TMS300 CS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-2757" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2022-2757 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TMS300 CS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a water tank management system; are affected. Kingspan TMS300 CS: All versions.; All versions of Kingspan TMS300 CS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-256-04" ;
    icsa:vendor "Kingspan" ;
    icsa:year 2022 .

icsa-res:ICSA-22-258-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-258-01" ;
    dcterms:issued "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mobility CoreShield OWG Software" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-38466" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-38466 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CoreShield One-Way Gateway (OWG) Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "which enable unidirectional exchange of information between network zones; The following versions of CoreShield OWG software; are affected: CoreShield OWG Software: All versions prior to 2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-258-01" ;
    icsa:vendor "Siemens Mobility" ;
    icsa:year 2022 .

icsa-res:ICSA-22-258-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-258-02" ;
    dcterms:issued "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap and Parasolid" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-39141; CVE-2022-39139; CVE-2022-39153; CVE-2022-39140; CVE-2022-39144; CVE-2022-39154; CVE-2022-39138; CVE-2022-39142; CVE-2022-39152; CVE-2022-39151; CVE-2022-39149; CVE-2022-39143; CVE-2022-39146; CVE-2022-39147; CVE-2022-39137; CVE-2022-39148; CVE-2022-39145; CVE-2022-39150; CVE-2022-39156; CVE-2022-39155" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2022-39137,
        cve-res:CVE-2022-39138,
        cve-res:CVE-2022-39139,
        cve-res:CVE-2022-39140,
        cve-res:CVE-2022-39141,
        cve-res:CVE-2022-39142,
        cve-res:CVE-2022-39143,
        cve-res:CVE-2022-39144,
        cve-res:CVE-2022-39145,
        cve-res:CVE-2022-39146,
        cve-res:CVE-2022-39147,
        cve-res:CVE-2022-39148,
        cve-res:CVE-2022-39149,
        cve-res:CVE-2022-39150,
        cve-res:CVE-2022-39151,
        cve-res:CVE-2022-39152,
        cve-res:CVE-2022-39153,
        cve-res:CVE-2022-39154,
        cve-res:CVE-2022-39155,
        cve-res:CVE-2022-39156 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap and Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2022-39148; CVE-2022-39153; CVE-2022-39146; CVE-2022- 39145; CVE-2022-39143; CVE-2022-39154; CVE-2022-39144; CVE-2022-39142 Version V34.0 All versions prior to V34.0.252 Version V34.1 All versions prior to V34.1.242 Version V35.0 All versions prior to V35.0.161 Versions V35.0.161 up to V35.0.164; only affected by CVE-2022-39156; CVE-2022- 39150; CVE-2022-39147; CVE-2022-39142 Simcenter Femap; a modeling and simulation software V2022.1 All versions prior to V2022.1.3 V2022.2 All versions prior to V2022.2.2.; a 3D geometric modeling tool Version V33.1 All versions prior to V33.1.262 Versions V33.1.262 up to V33.1.263; only affected by CVE-2022-39156; CVE-2022-39152; CVE-2022-39151; CVE-2022-39149; \"¯Siemens reports these vulnerabilities as affecting the following products: Parasolid; CVE-2022- 39155" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-258-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-258-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-258-03" ;
    dcterms:issued "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-39158" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-39158 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of RUGGEDCOM ROS-based devices; are affected: --------- Begin Update A part 1 of 2 --------- RUGGEDCOM ROS RMC8388 V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RS416Pv2 V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RS416v2 V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RS900 (32M) V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RS900G (32M) V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG907R V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG908C V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG909R V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG910C V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG920P V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG2100 (32M) V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG2288 V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG2300 V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG2300P V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSG2488 V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RSL910 V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RST916C V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RST916P V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RST2228 V5.X: All versions prior to V5.6.0 RUGGEDCOM ROS RST2228P V5.X: All versions prior to V5.6.0 --------- End Update A part 1 of 2 ---------.; typically switches and serial-to-Ethernet devices" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-258-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-258-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-258-04" ;
    dcterms:issued "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix SAML Module (Update B)" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-44457; CVE-2022-37011" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2022-37011,
        cve-res:CVE-2022-44457 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix SAML Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reported this vulnerability affects the following versions of Mendix SAML Module; up to but not including Version V2.3.2. Mendix SAML Module (Mendix 9 compatible): Versions V3.3.1 and later; up to but not including Version V3.3.5.; a SAML cloud authentication application: For CVE-2022-37011 Mendix SAML Module (Mendix 7 compatible): All versions prior to V1.17.0 Mendix SAML Module (Mendix 8 compatible): All versions prior to V2.3.0 Mendix SAML Module (Mendix 9 compatible): All versions prior to V3.3.1 For CVE-2022-44457 Mendix SAML Module (Mendix 7 compatible): Versions V1.17.0 and later. Mendix SAML Module (Mendix 8 compatible): Versions V2.3.0 and later" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-258-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-258-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-258-05" ;
    dcterms:issued "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC INS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-23337; CVE-2021-25220; CVE-2020-28168; CVE-2022-0155; CVE-2022-0235; CVE-2020-28500; CVE-2020-12762; CVE-2021-23841; CVE-2021-25217; CVE-2021-4160; CVE-2020-7793; CVE-2021-23839; CVE-2021-3749; CVE-2022-0396" ;
    icsa:cweNumber "CWE-404; CWE-77; CWE-359; CWE-326; CWE-20; CWE-190; CWE-311; CWE-918; CWE-119; CWE-601; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-12762,
        cve-res:CVE-2020-28168,
        cve-res:CVE-2020-28500,
        cve-res:CVE-2020-7793,
        cve-res:CVE-2021-23337,
        cve-res:CVE-2021-23839,
        cve-res:CVE-2021-23841,
        cve-res:CVE-2021-25217,
        cve-res:CVE-2021-25220,
        cve-res:CVE-2021-3749,
        cve-res:CVE-2021-4160,
        cve-res:CVE-2022-0155,
        cve-res:CVE-2022-0235,
        cve-res:CVE-2022-0396 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-311,
        cwe-res:CWE-326,
        cwe-res:CWE-359,
        cwe-res:CWE-400,
        cwe-res:CWE-404,
        cwe-res:CWE-601,
        cwe-res:CWE-77,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC INS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SINEC INS; a software tool for central network services; are affected: Siemens SINEC INS: All versions prior to V1.0 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-258-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-263-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-263-01" ;
    dcterms:issued "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy PROMOD IV" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2010-3591" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2010-3591 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PROMOD IV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "transmission congestion; an energy planning; are affected: Hitachi Energy PROMOD IV Version: 11.2; The following versions of PROMOD IV and the PROMOD-Generator; and price forecasting system; and 11.4.; 11.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-263-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-263-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-263-02" ;
    dcterms:issued "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy AFF660/665 Series" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-6994" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2020-6994 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AFF660/665 Firewall" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi Energy AFF660/665; an industrial firewall; are affected: Hitachi Energy AFF660 FW: Versions 03.0.02 and prior Hitachi Energy AFF665 FW: Versions 03.0.02 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-263-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-263-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-263-03" ;
    dcterms:issued "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dataprobe iBoot-PDU (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3187; CVE-2022-47320; CVE-2022-4945; CVE-2022-3188; CVE-2022-46738; CVE-2022-3189; CVE-2022-3186; CVE-2022-46658; CVE-2022-3183; CVE-2022-47311; CVE-2022-3185; CVE-2022-3184" ;
    icsa:cweNumber "CWE-22; CWE-200; CWE-1391; CWE-284; CWE-78; CWE-121; CWE-285; CWE-918; CWE-288; CWE-256; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2022-3183,
        cve-res:CVE-2022-3184,
        cve-res:CVE-2022-3185,
        cve-res:CVE-2022-3186,
        cve-res:CVE-2022-3187,
        cve-res:CVE-2022-3188,
        cve-res:CVE-2022-3189,
        cve-res:CVE-2022-46658,
        cve-res:CVE-2022-46738,
        cve-res:CVE-2022-47311,
        cve-res:CVE-2022-47320,
        cve-res:CVE-2022-4945 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-1391,
        cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-256,
        cwe-res:CWE-284,
        cwe-res:CWE-285,
        cwe-res:CWE-288,
        cwe-res:CWE-78,
        cwe-res:CWE-863,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iBoot-PDU FW" ;
    icsa:productDistribution "Multiple Countries" ;
    icsa:productsAffected "The following versions of Dataprobe iBoot-PDU; a power distribution unit; are affected: Dataprobe iBoot-PDU FW: All Versions prior to 1.42.06162022." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-263-03" ;
    icsa:vendor "Dataprobe" ;
    icsa:year 2022 .

icsa-res:ICSA-22-263-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-263-04" ;
    dcterms:issued "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Host Engineering Communications Module" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3228" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-3228 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "H0-ECOM100 Communications Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Firmware v5.0.155 and prior.; a module to communicate with programmable logic controllers; The following firmware versions of H0-ECOM100 Communications Module" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-263-04" ;
    icsa:vendor "Host Engineering" ;
    icsa:year 2022 .

icsa-res:ICSA-22-265-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-265-01" ;
    dcterms:issued "2022-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Measuresoft ScadaPro Server" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3263" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-3263 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScadaPro Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Measuresoft reports this vulnerability affects the following product: ScadaPro Server: version 6.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-265-01" ;
    icsa:vendor "Measuresoft" ;
    icsa:year 2022 .

icsa-res:ICSA-22-270-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-270-01" ;
    dcterms:issued "2022-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy AFS660/AFS665" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-6994" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2020-6994 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AFS660/AFS665 industrial switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports this vulnerability affects the following AFS660/AFS665 industrial switches: Releases 7.0.02 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-270-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-270-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-270-02" ;
    dcterms:issued "2022-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy APM Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-0492; CVE-2021-4034" ;
    icsa:cweNumber "CWE-787; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2021-4034,
        cve-res:CVE-2022-0492 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lumada Asset Performance Management (APM) Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of APM are affected: Lumada APM Edge Version 1.0 Lumada APM Edge Version 2.0 Lumada APM Edge Version 3.0 Lumada APM Edge Version 4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-270-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-270-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-270-03" ;
    dcterms:issued "2022-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager ThinServer" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-38742" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2022-38742 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager ThinServer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following versions of ThinManager ThinServer; a thin client and remote desktop protocol (RDP) server management software: Versions 11.0.0 through 11.0.4 Versions 11.1.0 through 11.1.4 Versions 11.2.0 through 11.2.5 Versions 12.0.0 through 12.0.2 Versions 12.1.0 through 12.1.3 Version 13.0.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-270-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-272-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-272-01" ;
    dcterms:issued "2022-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MicroSCADA Pro X SYS600_8DBD000106" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-29492; CVE-2022-2277; CVE-2022-1778; CVE-2022-29490; CVE-2022-29922" ;
    icsa:cweNumber "CWE-284; CWE-269; CWE-20; CWE-241" ;
    icsa:hasCVE cve-res:CVE-2022-1778,
        cve-res:CVE-2022-2277,
        cve-res:CVE-2022-29490,
        cve-res:CVE-2022-29492,
        cve-res:CVE-2022-29922 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-241,
        cwe-res:CWE-269,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroSCADA Pro/X SYS600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports this vulnerability affects the following SCADA products used for monitoring and controlling power systems: SYS600 10.3.1 and earlier SYS600 9.4 FP2 Hotfix 4 and earlier versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-272-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-272-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-272-02" ;
    dcterms:issued "2022-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MicroSCADA Pro X SYS600_8DBD000107" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-25692; CVE-2022-0778" ;
    icsa:cweNumber "CWE-1357" ;
    icsa:hasCVE cve-res:CVE-2020-25692,
        cve-res:CVE-2022-0778 ;
    icsa:hasCWE cwe-res:CWE-1357 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroSCADA Pro/X SYS600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports this vulnerability affects the following SCADA products used for monitoring and controlling power systems: SYS600 10.3.1 and earlier SYS600 9.x versions CVE-2020-25692 impacts SYS600 if the Authentication Service is installed; it is not installed by default but needs to be either enabled during the installation process of SYS600 or manually installed later. Authentication Service (previously ABB Authentication Service) is needed only when SYS600 users are authenticated using centralized SDM600 user account management." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-272-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-277-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-277-01" ;
    dcterms:issued "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys ADX Server" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-21936" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2022-21936 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys ADX (Extended Application and Data Server) Server running MVE (Metasys for Validated Environments)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following Metasys ADX Server running MVE: Metasys ADX Server version 12.0 running MVE." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-277-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2022 .

icsa-res:ICSA-22-277-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-277-02" ;
    dcterms:issued "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Modular Switchgear Monitoring" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-40335; CVE-2021-40336" ;
    icsa:cweNumber "CWE-352; CWE-113" ;
    icsa:hasCVE cve-res:CVE-2021-40335,
        cve-res:CVE-2021-40336 ;
    icsa:hasCWE cwe-res:CWE-113,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modular Switchgear Monitoring (MSM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MSM; a monitoring system for high voltage switchgear; are affected: MSM version 2.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-277-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-277-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-277-03" ;
    dcterms:issued "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3378; CVE-2022-3377; CVE-2022-3379" ;
    icsa:cweNumber "CWE-787; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2022-3377,
        cve-res:CVE-2022-3378,
        cve-res:CVE-2022-3379 ;
    icsa:hasCWE cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Cscape; a PLC control software; are affected: Cscape Version 9.90 SP 6 and prior Cscape Version 9.90 SP 7 and prior (CVE-2022-3379 and CVE-2022-3378 only)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-277-03" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-277-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-277-04" ;
    dcterms:issued "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Programmer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3397; CVE-2022-3396; CVE-2022-3398" ;
    icsa:cweNumber "CWE-787; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2022-3396,
        cve-res:CVE-2022-3397,
        cve-res:CVE-2022-3398 ;
    icsa:hasCWE cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Programmer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: CX-Programmer: Version 9.78 and prior.; The following versions of CX-Programmer; part of a software automation suite" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-277-04" ;
    icsa:vendor "Omron" ;
    icsa:year 2022 .

icsa-res:ICSA-22-279-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-279-01" ;
    dcterms:issued "2022-10-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk VantagePoint" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-38743; CVE-2022-3158" ;
    icsa:cweNumber "CWE-284; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2022-3158,
        cve-res:CVE-2022-38743 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk VantagePoint software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: FactoryTalk VantagePoint: Firmware versions prior to 8.0 FactoryTalk VantagePoint: Firmware versions between 8.0 and 8.10 FactoryTalk VantagePoint: Firmware versions between 8.10 and 8.20 FactoryTalk VantagePoint: Firmware versions between 8.20 and 8.30 FactoryTalk VantagePoint: Firmware versions between 8.30 and 8.31." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-279-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-279-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-279-02" ;
    dcterms:issued "2022-10-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "HIWIN Robot System Software (HRSS)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-3382" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-3382 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HIWIN Robot System Software (HRSS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a human-machine interface (HMI); is affected: HIWIN HRSS: version 3.3.21.9869.; The following version of HIWIN Robot System Software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-279-02" ;
    icsa:vendor "HIWIN" ;
    icsa:year 2022 .

icsa-res:ICSA-22-284-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-284-01" ;
    dcterms:issued "2022-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Altair HyperView Player" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2022-2949; CVE-2022-2950; CVE-2022-2947; CVE-2022-2951" ;
    icsa:cweNumber "CWE-119; CWE-908; CWE-129" ;
    icsa:hasCVE cve-res:CVE-2022-2947,
        cve-res:CVE-2022-2949,
        cve-res:CVE-2022-2950,
        cve-res:CVE-2022-2951 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-129,
        cwe-res:CWE-908 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HyperView Player" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Altair HyperView Player; are affected: HyperView Player: Versions 2021.1.0.27 and prior.; a standalone 3D viewer" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-284-01" ;
    icsa:vendor "Altair" ;
    icsa:year 2022 .

icsa-res:ICSA-22-284-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-284-02" ;
    dcterms:issued "2022-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Daikin SVMPC1 and SVMPC2" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-38355; CVE-2022-41653" ;
    icsa:cweNumber "CWE-284; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2022-38355,
        cve-res:CVE-2022-41653 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SVMPC1, SVMPC2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "both an office and remote controller; are affected: SVMPC1: Version 2.1.22 and prior SVMPC2: Version 1.2.3 and prior.; The following versions of Daikin Holdings Singapore Pte Ltd. SVMPC1 and SVMPC2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-284-02" ;
    icsa:vendor "Daikin Holdings Singapore Pte Ltd" ;
    icsa:year 2022 .

icsa-res:ICSA-22-284-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-284-03" ;
    dcterms:issued "2022-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic Electronics C-CURE 9000" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-36201" ;
    icsa:cweNumber "CWE-204" ;
    icsa:hasCVE cve-res:CVE-2021-36201 ;
    icsa:hasCWE cwe-res:CWE-204 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "C-CURE 9000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls Inc. reports this vulnerability affects the following Sensormatic Electronics C-CURE 9000 security management systems: C-CURE 9000 version 2.90 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-284-03" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-01" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO!" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2022-3636" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2022-3636 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO!" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a programmable logic controller; The following versions of LOGO!; are affected: LOGO! 8 BM (including SIPLUS variants): All versions prior to 8.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-02" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Management" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-40147" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2022-40147 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Edge Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: All versions prior to V1.5.1.; The following versions of Industrial Edge Management; an application and device management platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-03" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-37864" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2022-37864 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Solid Edge: all versions prior to SE2022MP9.; a portfolio of software tools; The following versions of Siemens Solid Edge" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-04" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 and S7-1500 CPU Families" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-38465" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2022-38465 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 and S7-1500 CPU families" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the SIMATIC S7-1200 and S7-1500 CPU product families: SIMATIC Drive Controller family: All versions prior to 2.9.2 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (including SIPLUS variants): All versions prior to 21.9 SIMATIC ET 200SP Open controller CPU 1515SP PC (including SIPLUS variants): All versions SIMATIC S7-1200 CPU family (including SIPLUS variants): All versions prior to V4.5.0 SIMATIC S7-1500 CPU family (including related ET200 CPUs and SIPLUS variants): All versions prior to 2.9.2 SIMATIC S7-1500 Software Controller: All version prior to 21.9 SIMCATIC S7-PLCSIM Advanced: All version prior to 4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-05" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-22965; CVE-2022-22950" ;
    icsa:cweNumber "CWE-94; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2022-22950,
        cve-res:CVE-2022-22965 ;
    icsa:hasCWE cwe-res:CWE-770,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lumada Asset Performance Manager (APM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Lumada Asset Performance Manager with the Prognostic Model Executor Service enabled are affected: Lumada Asset Performance Manager (APM) online service (SaaS) version 6.3.220323.0 and prior Lumada Asset Performance Manager (APM) versions 6.0.0.0 to 6.0.0.4 Lumada Asset Performance Manager (APM) versions 6.1.0.0 and 6.1.0.1 Lumada Asset Performance Manager (APM) versions 6.2.0.0 to 6.2.0.2 Lumada Asset Performance Manager (APM) versions 6.3.0.0 to 6.3.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-06" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo PXM Devices Webserver" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-40177; CVE-2022-40182; CVE-2022-40176; CVE-2022-40181; CVE-2022-40180; CVE-2022-40179; CVE-2022-40178" ;
    icsa:cweNumber "CWE-352; CWE-200; CWE-79; CWE-78; CWE-84" ;
    icsa:hasCVE cve-res:CVE-2022-40176,
        cve-res:CVE-2022-40177,
        cve-res:CVE-2022-40178,
        cve-res:CVE-2022-40179,
        cve-res:CVE-2022-40180,
        cve-res:CVE-2022-40181,
        cve-res:CVE-2022-40182 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-352,
        cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-84 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo PXM Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Desigo devices contain the affected webserver: Desigo PXM30-1: All versions prior to V02.20.126.11-41 Desigo PXM30.E: All versions prior to V02.20.126.11-41 Desigo PXM40-1: All versions prior to V02.20.126.11-41 Desigo PXM40.E: All versions prior to V02.20.126.11-41 Desigo PXM50-1: All versions prior to V02.20.126.11-41 Desigo PXM50.E: All versions prior to V02.20.126.11-41 PXG3.W100-1: All versions prior to V02.20.126.11-37 PXG3.W100-2: All versions prior to V02.20.126.11-41 PXG3.W200-1: All versions prior to V02.20.126.11-37 PXG3.W200-2: All versions prior to V02.20.126.11-41." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-07" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Nucleus RTOS FTP Server (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-38371" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-38371 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nucleus Real-Time Operating System (RTOS) FTP Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Nucleus RTOS components contain the affected File Transport Protocol (FTP) server: Nucleus NET: All versions --------- Begin Update A Part 1 of 4 --------- Nucleus ReadyStart V3: All versions --------- End Update A Part 1 of 4 --------- Nucleus Source Code: Versions including affected FTP server." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-08" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TCP Event Service of SCALANCE and RUGGEDCOM Devices" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-31766" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-31766 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE, RUGGEDCOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions prior to v7.1.2 RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions prior to v7.1.2 SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions prior to v7.1.2 SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions prior to v7.1.2 SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions prior to v7.1.2 SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions prior to v7.1.2 SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions prior to v7.1.2 SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions prior to v7.1.2 SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions prior to v7.1.2 SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions prior to v7.1.2 SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2): All versions prior to v7.1.2 SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions prior to v7.1.2 SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions prior to v7.1.2 SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions prior to v7.1.2 SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): All versions prior to v7.1.2 SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions prior to v7.1.2 SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions prior to v7.1.2 SCALANCE S615 (6GK5615-0AA00-2AA2): All versions prior to v7.1.2 SCALANCE WAM763-1 (6GK5763-1AL00-7DA0): All versions v1.1.0 and newer SCALANCE WAM766-1 (6GK5766-1GE00-7DA0): All versions v1.1.0 and newer SCALANCE WAM766-1 (6GK5766-1GE00-7DB0): All versions v1.1.0 and newer SCALANCE WAM766-1 6GHz (6GK5766-1JE00-7DA0): All versions v1.1.0 and newer SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0): All versions v1.1.0 and newer SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TB0): All versions v1.1.0 and newer SCALANCE WAM766-1 EEC 6GHz (6GK5766-1JE00-7TA0): All versions v1.1.0 and newer SCALANCE WUM763-1 (6GK5763-1AL00-3AA0): All versions v1.1.0 and newer SCALANCE WUM763-1 (6GK5763-1AL00-3DA0): All versions v1.1.0 and newer SCALANCE WUM766-1 (6GK5766-1GE00-3DA0): All versions v1.1.0 and newer SCALANCE WUM766-1 (6GK5766-1GE00-3DB0): All versions v1.1.0 and newer.; a software management platform; The following versions of Smart Security Manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-09" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM P850 and P855 Devices (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-40226; CVE-2022-41665" ;
    icsa:cweNumber "CWE-384; CWE-141" ;
    icsa:hasCVE cve-res:CVE-2022-40226,
        cve-res:CVE-2022-41665 ;
    icsa:hasCWE cwe-res:CWE-141,
        cwe-res:CWE-384 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM P850 and P855 devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SICAM P850 and P855 are affected: SICAM P850 (7KG8500-0AA00-0AA0): All versions prior to v3.10 SICAM P850 (7KG8500-0AA00-2AA0): All versions prior to v3.10 SICAM P850 (7KG8500-0AA10-0AA0): All versions prior to v3.10 SICAM P850 (7KG8500-0AA10-2AA0): All versions prior to v3.10 SICAM P850 (7KG8500-0AA30-0AA0): All versions prior to v3.10 SICAM P850 (7KG8500-0AA30-2AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA01-0AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA01-2AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA02-0AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA02-2AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA11-0AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA11-2AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA12-0AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA12-2AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA31-0AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA31-2AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA32-0AA0): All versions prior to v3.10 SICAM P850 (7KG8501-0AA32-2AA0): All versions prior to v3.10 SICAM P855 (7KG8550-0AA00-0AA0): All versions prior to v3.10 SICAM P855 (7KG8550-0AA00-2AA0): All versions prior to v3.10 SICAM P855 (7KG8550-0AA10-0AA0): All versions prior to v3.10 SICAM P855 (7KG8550-0AA10-2AA0): All versions prior to v3.10 SICAM P855 (7KG8550-0AA30-0AA0): All versions prior to v3.10 SICAM P855 (7KG8550-0AA30-2AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA01-0AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA01-2AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA02-0AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA02-2AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA11-0AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA11-2AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA12-0AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA12-2AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA31-0AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA31-2AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA32-0AA0): All versions prior to v3.10 SICAM P855 (7KG8551-0AA32-2AA0): All versions prior to v3.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-10" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT Open Toolkit and Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-41851" ;
    icsa:cweNumber "CWE-824" ;
    icsa:hasCVE cve-res:CVE-2022-41851 ;
    icsa:hasCWE cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT Open Toolkit and Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: JTTK: versions prior to V11.1.1.0 Simcenter Femap V2022.1: versions prior to V2022.1.3 Simcenter Femap V2022.2: versions prior to V2022.2.2.; an API for JT-enabled software; and Simcenter Femap; Siemens reports the following versions of JT Open Toolkit (JTTK); a modeling editing and simulation application" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-11" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE and RUGGEDCOM Products (Update B)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-31765" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2022-31765 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple SCALANCE and RUGGEDCOM products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DC 24V) (6GK5328-4SS00-2AR3): All versions SCALANCE XR524-8C; E/IP) (6GK5205- 3BF00-2TB2): All versions SCALANCE XB205-3LD (SC; AC230V) (6GK5328-4FS00- 3RR3): All versions SCALANCE XR328-4C WG (24XFE; 24V (L3 int.) (6GK5526- 8GR00-2AR2): All versions SCALANCE XR528-6M (6GK5528-0AA00- 2AR2): All versions SCALANCE XR528-6M (2HR2) (6GK5528- 0AA00-2HR2): All versions SCALANCE XR528-6M (2HR2; PN) (6GK5205- 3BF00-2AB2): All versions SCALANCE XB208 (E/IP) (6GK5208-0BA00- 2TB2): All versions SCALANCE XB208 (PN) (6GK5208-0BA00- 2AB2): All versions SCALANCE XB213-3 (SC; E/IP) (6GK5213- 3BF00-2TB2): All versions SCALANCE XB213-3LD (SC; AC 230V) (6GK5328-4SS00-3AR3): All versions SCALANCE XR328-4C WG (28xGE; AC 230V) (6GK5324-0BA00-3AR3): All versions SCALANCE XR324WG (24 X FE; PN) (6GK5213- 3BF00-2AB2): All versions SCALANCE XB216 (E/IP) (6GK5216-0BA00- 2TB2): All versions SCALANCE XB216 (PN) (6GK5216-0BA00- 2AB2): All versions SCALANCE XC206-2 (SC) (6GK5206-2BD00- 2AC2): All versions SCALANCE XC206-2 (ST/BFOC) (6GK5206- 2BB00-2AC2): All versions SCALANCE XC206-2G PoE (6GK5206-2RS00- 2AC2): All versions SCALANCE XC206-2G PoE (54 V DC) (6GK5206-2RS00-5AC2): All versions SCALANCE XC206-2G PoE EEC (54 V DC) (6GK5206-2RS00-5FC2): All versions SCALANCE XC206-2SFP (6GK5206-2BS00- 2AC2): All versions SCALANCE XC206-2SFP EEC (6GK5206- 2BS00-2FC2): All versions SCALANCE XC206-2SFP G (6GK5206-2GS00- 2AC2): All versions SCALANCE XC206-2SFP G (EIP DEF.) (6GK5206-2GS00-2TC2): All versions SCALANCE XC206-2SFP G EEC (6GK5206- 2GS00-2FC2): All versions SCALANCE XC208 (6GK5208-0BA00-2AC2): All versions SCALANCE XC208EEC (6GK5208-0BA00- 2FC2): All versions SCALANCE XC208G (6GK5208-0GA00-2AC2): All versions SCALANCE XC208G (EIP def.) (6GK5208- 0GA00-2TC2): All versions SCALANCE XC208G EEC (6GK5208-0GA00- 2FC2): All versions SCALANCE XC208G PoE (6GK5208-0RA00- 2AC2): All versions SCALANCE XC208G PoE (54 V DC) (6GK5208- 0RA00-5AC2): All versions SCALANCE XC216 (6GK5216-0BA00-2AC2): All versions SCALANCE XC216-3G PoE (6GK5216-3RS00- 2AC2): All versions SCALANCE XC216-3G PoE (54 V DC) (6GK5216-3RS00-5AC2): All versions SCALANCE XC216-4C (6GK5216-4BS00- 2AC2): All versions SCALANCE XC216-4C G (6GK5216-4GS00- 2AC2): All versions SCALANCE XC216-4C G (EIP Def.) (6GK5216- 4GS00-2TC2): All versions SCALANCE XC216-4C G EEC (6GK5216- 4GS00-2FC2): All versions SCALANCE XC216EEC (6GK5216-0BA00- 2FC2): All versions SCALANCE XC224 (6GK5224-0BA00-2AC2): All versions SCALANCE XC224-4C G (6GK5224-4GS00- 2AC2): All versions SCALANCE XC224-4C G (EIP Def.) (6GK5224- 4GS00-2TC2): All versions SCALANCE XC224-4C G EEC (6GK5224- 4GS00-2FC2): All versions SCALANCE XF204 (6GK5204-0BA00-2GF2): All versions SCALANCE XF204 DNA (6GK5204-0BA00- 2YF2): All versions SCALANCE XF204-2BA (6GK5204-2AA00- 2GF2): All versions SCALANCE XF204-2BA DNA (6GK5204-2AA00- 2YF2): All versions SCALANCE XM408-4C (6GK5408-4GP00- 2AM2): All versions SCALANCE XM408-4C (L3 int.) (6GK5408- 4GQ00-2AM2): All versions SCALANCE XM408-8C (6GK5408-8GS00- 2AM2): All versions SCALANCE XM408-8C (L3 int.) (6GK5408- 8GR00-2AM2): All versions SCALANCE XM416-4C (6GK5416-4GS00- 2AM2): All versions SCALANCE XM416-4C (L3 int.) (6GK5416- 4GR00-2AM2): All versions SCALANCE XP208 (6GK5208-0HA00-2AS6): All versions SCALANCE XP208 (Ethernet/IP) (6GK5208- 0HA00-2TS6): All versions SCALANCE XP208EEC (6GK5208-0HA00- 2ES6): All versions SCALANCE XP208PoE EEC (6GK5208-0UA00- 5ES6): All versions SCALANCE XP216 (6GK5216-0HA00-2AS6): All versions SCALANCE XP216 (Ethernet/IP) (6GK5216- 0HA00-2TS6): All versions SCALANCE XP216EEC (6GK5216-0HA00- 2ES6): All versions SCALANCE XP216POE EEC (6GK5216-0UA00- 5ES6): All versions SCALANCE XR324WG (24 x FE; E/IP) (6GK5205- 3BD00-2TB2): All versions SCALANCE XB205-3 (ST; 1x230V (L3 int.) (6GK5526-8GR00-3AR2): All versions SCALANCE XR526-8C; DC 24V) (6GK5324-0BA00-2AR3): All versions SCALANCE XR326-2C PoE WG (6GK5326- 2QS00-3AR3): All versions SCALANCE XR326-2C PoE WG (without UL) (6GK5326-2QS00-3RR3): All versions SCALANCE XR328-4C WG (24xFE; 2x230V (6GK5524- 8GS00-4AR2): All versions SCALANCE XR524-8C; L3 int.) (6GK5552-0AR00-2AR2): All versions SIPLUS NET SCALANCE XC206-2 (6AG1206- 2BB00-7AC2): All versions SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2): All versions SIPLUS NET SCALANCE XC208 (6AG1208- 0BA00-7AC2): All versions SIPLUS NET SCALANCE XC216-4C (6AG1216- 4BS00-7AC2): All versions.; DC24V) (6GK5328-4FS00-2RR3): All versions SCALANCE XR328-4C WG (28xGE; PN) (6GK5205-3BD00- 2AB2): All versions SCALANCE XB205-3LD (SC; E/IP) (6GK5213- 3BD00-2TB2): All versions SCALANCE XB213-3 (SC; L3 int.) (6GK5528-0AR00-2HR2): All versions SCALANCE XR528-6M (L3 int.) (6GK5528- 0AR00-2AR2): All versions SCALANCE XR552-12M (6GK5552-0AA00- 2AR2): All versions SCALANCE XR552-12M (2HR2) (6GK5552- 0AA00-2HR2): All versions SCALANCE XR552-12M (2HR2) (6GK5552- 0AR00-2HR2): All versions SCALANCE XR552-12M (2HR2; E/IP) (6GK5205- 3BB00-2TB2): All versions SCALANCE XB205-3 (ST; PN) (6GK5213- 3BD00-2AB2): All versions SCALANCE XB213-3 (ST; 1x230V (L3 int.) (6GK5524-8GR00-3AR2): All versions SCALANCE XR524-8C; 2x230V (L3 int.) (6GK5526-8GR00-4AR2): All versions SCALANCE XR526-8C; 24V) (6GK5328-4FS00-2AR3): All versions SCALANCE XR328-4C WG (24xFE; PN) (6GK5205- 3BB00-2AB2): All versions SCALANCE XB205-3 (ST; The following types and versions of SCALANCE and RUGGEDCOM devices are affected: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108- 4AM00-2BA2): All versions prior to V7.1.2 RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions prior to V7.1.2 SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions prior to V7.1.2 SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions prior to V7.1.2 SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions prior to V7.1.2 SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions prior to V7.1.2 SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions prior to V7.1.2 SCALANCE M826-2 SHDSL-Router (6GK5826- 2AB00-2AB2): All versions prior to V7.1.2 SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions prior to V7.1.2 SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions prior to V7.1.2 SCALANCE M876-3 (EVDO) (6GK5876-3AA02- 2BA2): All versions prior to V7.1.2 SCALANCE M876-3 (ROK) (6GK5876-3AA02- 2EA2): All versions prior to V7.1.2 SCALANCE M876-4 (EU) (6GK5876-4AA00- 2BA2): All versions prior to V7.1.2 SCALANCE M876-4 (NAM) (6GK5876-4AA00- 2DA2): All versions prior to V7.1.2 SCALANCE MUM853-1 (EU) (6GK5853-2EA00- 2DA1): All versions prior to V7.1.2 SCALANCE MUM856-1 (EU) (6GK5856-2EA00- 3DA1): All versions prior to V7.1.2 SCALANCE MUM856-1 (RoW) (6GK5856- 2EA00-3AA1): All versions prior to V7.1.2 SCALANCE S615 (6GK5615-0AA00-2AA2): All versions prior to V7.1.2 --------- Begin Update B part 1 of 1 --------- SCALANCE SC622-2C (6GK5622-2GS00- 2AC2): All versions prior to V3.0 SCALANCE SC632-2C (6GK5632-2GS00- 2AC2): All versions prior to V3.0 SCALANCE SC636-2C (6GK5636-2GS00- 2AC2): All versions prior to V3.0 SCALANCE SC642-2C (6GK5642-2GS00- 2AC2): All versions prior to V3.0 SCALANCE SC646-2C (6GK5646-2GS00- 2AC2): All versions prior to V3.0 --------- End Update B part 1 of 1 --------- SCALANCE SC622-2C (6GK5622-2GS00- 2AC2): All versions SCALANCE SC632-2C (6GK5632-2GS00- 2AC2): All versions SCALANCE SC636-2C (6GK5636-2GS00- 2AC2): All versions SCALANCE SC642-2C (6GK5642-2GS00- 2AC2): All versions SCALANCE SC646-2C (6GK5646-2GS00- 2AC2): All versions SCALANCE W721-1 RJ45 (6GK5721-1FC00- 0AA0): All versions SCALANCE W721-1 RJ45 (6GK5721-1FC00- 0AB0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00- 0AA0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00- 0AB0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00- 0AC0): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00- 0AA0): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00- 0AA6): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00- 0AB0): All versions SCALANCE W734-1 RJ45 (USA) (6GK5734- 1FX00-0AB6): All versions SCALANCE W738-1 M12 (6GK5738-1GY00- 0AA0): All versions SCALANCE W738-1 M12 (6GK5738-1GY00- 0AB0): All versions SCALANCE W748-1 M12 (6GK5748-1GD00- 0AA0): All versions SCALANCE W748-1 M12 (6GK5748-1GD00- 0AB0): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00- 0AA0): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00- 0AB0): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00- 0AA0): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00- 0AB0): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00- 0TA0): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00- 0TB0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00- 0AA0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00- 0AA6): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00- 0AB0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00- 0AC0): All versions SCALANCE W774-1 RJ45 (USA) (6GK5774- 1FX00-0AB6): All versions SCALANCE W778-1 M12 (6GK5778-1GY00- 0AA0): All versions SCALANCE W778-1 M12 (6GK5778-1GY00- 0AB0): All versions SCALANCE W778-1 M12 EEC (6GK5778- 1GY00-0TA0): All versions SCALANCE W778-1 M12 EEC (USA) (6GK5778- 1GY00-0TB0): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00- 0AA0): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00- 0AB0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00- 0AA0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00- 0AB0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00- 0AC0): All versions SCALANCE W786-2 SFP (6GK5786-2FE00- 0AA0): All versions SCALANCE W786-2 SFP (6GK5786-2FE00- 0AB0): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00- 0AA0): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00- 0AB0): All versions SCALANCE W788-1 M12 (6GK5788-1GD00- 0AA0): All versions SCALANCE W788-1 M12 (6GK5788-1GD00- 0AB0): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00- 0AA0): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00- 0AB0): All versions SCALANCE W788-2 M12 (6GK5788-2GD00- 0AA0): All versions SCALANCE W788-2 M12 (6GK5788-2GD00- 0AB0): All versions SCALANCE W788-2 M12 EEC (6GK5788- 2GD00-0TA0): All versions SCALANCE W788-2 M12 EEC (6GK5788- 2GD00-0TB0): All versions SCALANCE W788-2 M12 EEC (6GK5788- 2GD00-0TC0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00- 0AA0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00- 0AB0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00- 0AC0): All versions SCALANCE W1748-1 M12 (6GK5748-1GY01- 0AA0): All versions SCALANCE W1748-1 M12 (6GK5748-1GY01- 0TA0): All versions SCALANCE W1788-1 M12 (6GK5788-1GY01- 0AA0): All versions SCALANCE W1788-2 EEC M12 (6GK5788- 2GY01-0TA0): All versions SCALANCE W1788-2 M12 (6GK5788-2GY01- 0AA0): All versions SCALANCE W1788-2IA M12 (6GK5788-2HY01- 0AA0): All versions SCALANCE WAM763-1 (6GK5763-1AL00- 7DA0): All versions SCALANCE WAM766-1 (6GK5766-1GE00- 7DA0): All versions SCALANCE WAM766-1 (6GK5766-1GE00- 7DB0): All versions SCALANCE WAM766-1 6GHz (6GK5766-1JE00- 7DA0): All versions SCALANCE WAM766-1 EEC (6GK5766-1GE00- 7TA0): All versions SCALANCE WAM766-1 EEC (6GK5766-1GE00- 7TB0): All versions SCALANCE WAM766-1 EEC 6GHz (6GK5766- 1JE00-7TA0): All versions SCALANCE WUM763-1 (6GK5763-1AL00- 3AA0): All versions SCALANCE WUM763-1 (6GK5763-1AL00- 3DA0): All versions SCALANCE WUM766-1 (6GK5766-1GE00- 3DA0): All versions SCALANCE WUM766-1 (6GK5766-1GE00- 3DB0): All versions SCALANCE WUM766-1 6GHz (6GK5766-1JE00- 3DA0): All versions SCALANCE XB205-3 (SC; E/IP) (6GK5213- 3BB00-2TB2): All versions SCALANCE XB213-3 (ST; 4XGE; 24V (6GK5524-8GS00- 2AR2): All versions SCALANCE XR524-8C; 24V (L3 int.) (6GK5524- 8GR00-2AR2): All versions SCALANCE XR526-8C; 24V (6GK5526-8GS00- 2AR2): All versions SCALANCE XR526-8C; 2x230V (L3 int.) (6GK5524-8GR00-4AR2): All versions SCALANCE XR524-8C; 4xGE; 1x230V (6GK5524- 8GS00-3AR2): All versions SCALANCE XR524-8C; 1x230V (6GK5526- 8GS00-3AR2): All versions SCALANCE XR526-8C; AC230V) (6GK5328-4FS00- 3AR3): All versions SCALANCE XR328-4C WG (24xFE; PN) (6GK5213-3BB00- 2AB2): All versions SCALANCE XB213-3LD (SC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-12" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens APOGEE, TALON and Desigo PXC/PXM Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2022-38371" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-38371 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FTP Server of Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following products which use FTP Server of Nucleus RTOS: APOGEE MBC (PPC) (BACnet): All versions APOGEE MBC (PPC) (P2 Ethernet): All versions APOGEE MEC (PPC) (BACnet): All versions APOGEE MEC (PPC) (P2 Ethernet): All versions APOGEE PXC Compact (BACnet): All versions APOGEE PXC Compact (P2 Ethernet): All versions APOGEE PXC Modular (BACnet): All versions APOGEE PXC Modular (P2 Ethernet): All versions Desigo PXC00-E.D: All versions since and including V2.3 Desigo PXC00-U: All versions since and including V2.3 Desigo PXC001-E.D: All versions since and including V2.3 Desigo PXC12-E.D: All versions since and including V2.3 Desigo PXC22-E.D: All versions since and including V2.3 Desigo PXC22.1-E.D: All versions since and including V2.3 Desigo PXC36.1-E.D: All versions since and including V2.3 Desigo PXC50-E.D: All versions since and including V2.3 Desigo PXC64-U: All versions since and including V2.3 Desigo PXC100-E.D: All versions since and including V2.3 Desigo PXC128-U: All versions since and including V2.3 Desigo PXC200-E.D: All versions since and including V2.3 Desigo PXM20-E: All versions since and including V2.3 TALON TC Compact (BACnet): All versions TALON TC Modular (BACnet): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-13" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! 8 BM Devices" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-36363; CVE-2022-36361; CVE-2022-36362" ;
    icsa:cweNumber "CWE-20; CWE-1285; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2022-36361,
        cve-res:CVE-2022-36362,
        cve-res:CVE-2022-36363 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-1285,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! 8 BM Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following LOGO! 8 BM (Base Module) devices: LOGO! 8 BM (incl. SIPLUS variants): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-14" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC HMI Panels" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-40227" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-40227 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Human Machine Interface (HMI) Panels" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SIMATIC HMIs are affected: SIMATIC HMI Comfort Panels (incl. SIPLUS variants): All versions prior to V17 Update 4 SIMATIC HMI KTP400 Basic (6AV2123-2DB03-0AX0): All versions prior to V17 Update 5 SIMATIC HMI KTP700 Basic (6AV2123-2GB03-0AX0): All versions prior to V17 Update 5 SIMATIC HMI KTP900 Basic (6AV2123-2JB03-0AX0): All versions prior to V17 Update 5 SIMATIC HMI KTP1200 Basic (6AV2123-2MB03-0AX0): All versions prior to V17 Update 5 SIMATIC HMI KTP Mobile Panels: All versions prior to V17 Update 4 SIPLUS HMI KTP400 BASIC (6AG1123-2DB03-2AX0): All versions prior to V17 Update 5 SIPLUS HMI KTP700 BASIC (6AG1123-2GB03-2AX0): All versions prior to V17 Update 5 SIPLUS HMI KTP900 BASIC (6AG1123-2JB03-2AX0): All versions prior to V17 Update 5 SIPLUS HMI KTP1200 BASIC (6AG1123-2MB03-2AX0): All versions prior to V17 Update 5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-15" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-200 and X-200IRT Families (Update A)" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-40631" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2022-40631 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X-200 and X-200IRT Families" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SCALANCE X-200 and X-200IRT devices; are affected: SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3): All versions prior to V5.5.0 SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3): All versions prior to V5.5.0 SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6): All versions prior to V5.5.0 SCALANCE X202-2IRT (6GK5202-2BB10-2BA3): All versions prior to V5.5.0 SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3): All versions prior to V5.5.0 SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6): All versions prior to V5.5.0 SCALANCE X204-2 (6GK5204-2BB10-2AA3): All versions prior to V5.2.5 SCALANCE X204-2FM (6GK5204-2BB11-2AA3): All versions prior to V5.2.5 SCALANCE X204-2LD (6GK5204-2BC10-2AA3): All versions prior to V5.2.5 SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2): All versions prior to V5.2.5 SCALANCE X204-2TS (6GK5204-2BB10-2CA2): All versions prior to V5.2.5 SCALANCE X204IRT (6GK5204-0BA00-2BA3): All versions prior to V5.5.0 SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6): All versions prior to V5.5.0 SCALANCE X206-1 (6GK5206-1BB10-2AA3): All versions prior to V5.2.5 SCALANCE X206-1LD (6GK5206-1BC10-2AA3): All versions prior to V5.2.5 SCALANCE X208 (6GK5208-0BA10-2AA3): All versions prior to V5.2.5 SCALANCE X208PRO (6GK5208-0HA10-2AA6): All versions prior to V5.2.5 SCALANCE X212-2 (6GK5212-2BB00-2AA3): All versions prior to V5.2.5 SCALANCE X212-2LD (6GK5212-2BC00-2AA3): All versions prior to V5.2.5 SCALANCE X216 (6GK5216-0BA00-2AA3): All versions prior to V5.2.5 SCALANCE X224 (6GK5224-0BA00-2AA3): All versions prior to V5.2.5 SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2): All versions prior to V5.5.0 SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2): All versions prior to V5.5.0 SCALANCE XF204 (6GK5204-0BA00-2AF2): All versions prior to V5.2.5 SCALANCE XF204-2 (6GK5204-2BC00-2AF2): All versions prior to V5.2.5 SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2): All versions prior to V5.5.0 SCALANCE XF204IRT (6GK5204-0BA00-2BF2): All versions prior to V5.5.0 SCALANCE XF206-1 (6GK5206-1BC00-2AF2): All versions prior to V5.2.5 SCALANCE XF208 (6GK5208-0BA00-2AF2): All versions prior to V5.2.5 SIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3): All versions prior to V5.5.0.; industrial ethernet switches" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-286-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-286-16" ;
    dcterms:issued "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo CC and Cerberus DMS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-33139" ;
    icsa:cweNumber "CWE-603" ;
    icsa:hasCVE cve-res:CVE-2022-33139 ;
    icsa:hasCWE cwe-res:CWE-603 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo CC and Cerberus DMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens management stations are affected: Desigo CC: All versions Desigo CC Compact: All versions Cerberus DMS: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-286-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-291-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-291-01" ;
    dcterms:issued "2022-10-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech R-SeeNet" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-3385; CVE-2022-3386; CVE-2022-3387" ;
    icsa:cweNumber "CWE-22; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-3385,
        cve-res:CVE-2022-3386,
        cve-res:CVE-2022-3387 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "R-SeeNet" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; are affected: Version 2.4.19 and prior Version 2.4.17 and prior (CVE-2022-3386 and CVE-2022-3385 only).; The following versions of R-SeeNet" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-291-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2022 .

icsa-res:ICSA-22-293-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-293-01" ;
    dcterms:issued "2022-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Bentley Systems MicroStation Connect" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-41613; CVE-2022-40201" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-40201,
        cve-res:CVE-2022-41613 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroStation Connect" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Bentley Systems MicroStation Connect; a software management platform; are affected: v10.17.0.209 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-293-01" ;
    icsa:vendor "Bentley Systems" ;
    icsa:year 2022 .

icsa-res:ICSA-22-298-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-298-01" ;
    dcterms:issued "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Haas Controller" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2474; CVE-2022-41636; CVE-2022-2475" ;
    icsa:cweNumber "CWE-306; CWE-1220; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-2474,
        cve-res:CVE-2022-2475,
        cve-res:CVE-2022-41636 ;
    icsa:hasCWE cwe-res:CWE-1220,
        cwe-res:CWE-306,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Haas Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a Computer Numerical Control (CNC); are affected: Haas Controller: Version 100.20.000.1110.; The following versions of the Haas Controller" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-298-01" ;
    icsa:vendor "Haas Automation, Inc" ;
    icsa:year 2022 .

icsa-res:ICSA-22-298-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-298-02" ;
    dcterms:issued "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "HEIDENHAIN Controller TNC (Update A)" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Communications; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-41648" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2022-41648 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HEIDENHAIN TNC 640" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "HEIDENHAIN reports the following products are affected: HEIDENHAIN Controller TNC 640 NC Software: Version 340590 07 SP5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-298-02" ;
    icsa:vendor "HEIDENHAIN" ;
    icsa:year 2022 .

icsa-res:ICSA-22-298-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-298-03" ;
    dcterms:issued "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Video Mobile Server" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Commercial Facilities" ;
    icsa:cveNumber "CVE-2022-43400" ;
    icsa:cweNumber "CWE-1390" ;
    icsa:hasCVE cve-res:CVE-2022-43400 ;
    icsa:hasCWE cwe-res:CWE-1390 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance Video 2022 R2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a mobile server; The following versions of Siemens Siveillance Video; are affected: All versions prior to V22.2a(80)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-298-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-298-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-298-04" ;
    dcterms:issued "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MicroSCADA X DMS600" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-32028; CVE-2021-32027" ;
    icsa:cweNumber "CWE-1357" ;
    icsa:hasCVE cve-res:CVE-2021-32027,
        cve-res:CVE-2021-32028 ;
    icsa:hasCWE cwe-res:CWE-1357 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DMS600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Hitachi Energy product; is affected: DMS600: Version 4.5.; integrated with MicroSCADA X" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-298-04" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-298-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-298-05" ;
    dcterms:issued "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls CKS CEVAS" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Emergency Services" ;
    icsa:cveNumber "CVE-2021-36206" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-36206 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CEVAS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: All CEVAS versions prior to 1.01.46.; a deployment management and billing system; The following versions of CKS CEVAS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-298-05" ;
    icsa:vendor "CKS (Subsidiary of Johnson Controls)" ;
    icsa:year 2022 .

icsa-res:ICSA-22-298-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-298-06" ;
    dcterms:issued "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronic DIAEnergie (Update B)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-40967; CVE-2023-0822; CVE-2022-40965; CVE-2022-43447; CVE-2022-41555; CVE-2022-41133; CVE-2022-41701; CVE-2022-43452; CVE-2022-41775; CVE-2022-43506; CVE-2022-43457; CVE-2022-41651; CVE-2022-41702; CVE-2022-41773" ;
    icsa:cweNumber "CWE-79; CWE-89; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2022-40965,
        cve-res:CVE-2022-40967,
        cve-res:CVE-2022-41133,
        cve-res:CVE-2022-41555,
        cve-res:CVE-2022-41651,
        cve-res:CVE-2022-41701,
        cve-res:CVE-2022-41702,
        cve-res:CVE-2022-41773,
        cve-res:CVE-2022-41775,
        cve-res:CVE-2022-43447,
        cve-res:CVE-2022-43452,
        cve-res:CVE-2022-43457,
        cve-res:CVE-2022-43506,
        cve-res:CVE-2023-0822 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAEnergie" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: DIAEnergie versions prior to v1.9.01.002 DIAEnergie versions prior to v1.9.02.001 --------- Begin Update B part 3 of 5 --------- DIAEnergie versions prior to v1.9.03.001 --------- End Update B part 3 of 5 ---------.; an industrial energy management system; Delta Electronics reports the following versions of DIAEnergie" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-298-06" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-298-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-298-07" ;
    dcterms:issued "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics InfraSuite Device Master (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-41772; CVE-2022-41629; CVE-2022-41644; CVE-2022-41776; CVE-2022-41778; CVE-2022-41657; CVE-2022-40202; CVE-2022-41779; CVE-2022-41688; CVE-2022-38142" ;
    icsa:cweNumber "CWE-502; CWE-22; CWE-306" ;
    icsa:hasCVE cve-res:CVE-2022-38142,
        cve-res:CVE-2022-40202,
        cve-res:CVE-2022-41629,
        cve-res:CVE-2022-41644,
        cve-res:CVE-2022-41657,
        cve-res:CVE-2022-41688,
        cve-res:CVE-2022-41772,
        cve-res:CVE-2022-41776,
        cve-res:CVE-2022-41778,
        cve-res:CVE-2022-41779 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InfraSuite Device Master" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a real-time device monitoring software; The following versions of InfraSuite Device Master; are affected: Version 00.00.01a and prior --------- Begin Update A part 1 of 2 --------- InfraSuite Device Master: Versions prior to 1.0.3 (CVE-2022-41657 and CVE-2022-40202 only) --------- End Update A part 1 of 2 ---------." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-298-07" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-300-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-300-01" ;
    dcterms:issued "2022-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Alarm and Events Server" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Water and Wastewater System" ;
    icsa:cveNumber "CVE-2022-38744" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-38744 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Alarm and Events Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following FactoryTalk Alarm and Events Server: FactoryTalk Alarm and Events Server: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-300-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-300-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-300-02" ;
    dcterms:issued "2022-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "SAUTER Controls moduWeb" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2022-40190" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2022-40190 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "moduWeb" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "web services used to monitor Building and Control networks and devices; are affected: SAUTER moduWeb firmware Version 2.7.1.; The following version of SAUTER moduWeb firmware" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-300-02" ;
    icsa:vendor "SAUTER Controls" ;
    icsa:year 2022 .

icsa-res:ICSA-22-300-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-300-03" ;
    dcterms:issued "2022-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix Devices Containing Cisco IOS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-3516; CVE-2020-3200; CVE-2021-1385; CVE-2021-1446; CVE-2020-3229; CVE-2020-3211; CVE-2020-3218; CVE-2020-3209; CVE-2020-3219" ;
    icsa:cweNumber "CWE-22; CWE-436; CWE-20; CWE-78; CWE-347; CWE-754; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2020-3200,
        cve-res:CVE-2020-3209,
        cve-res:CVE-2020-3211,
        cve-res:CVE-2020-3218,
        cve-res:CVE-2020-3219,
        cve-res:CVE-2020-3229,
        cve-res:CVE-2020-3516,
        cve-res:CVE-2021-1385,
        cve-res:CVE-2021-1446 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-347,
        cwe-res:CWE-436,
        cwe-res:CWE-754,
        cwe-res:CWE-78,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and the contained Cisco software are affected: Cisco IOS XE and Cisco IOS software contained in: Stratix 5800 switches: All versions prior to v16.12.01 Stratix 5400/5410 switches: All versions prior to v15.2(7)E2 (CVE-2020-3200 only); The following versions of Stratix Devices; industrial ethernet switches" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-300-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-300-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-300-04" ;
    dcterms:issued "2022-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trihedral VTScada" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2022-3181" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-3181 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VTScada" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of VTScada software are affected: VTScada Versions 12.0.38 and prior configured to accept incoming HTTP(S) connections." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-300-04" ;
    icsa:vendor "Trihedral" ;
    icsa:year 2022 .

icsa-res:ICSA-22-307-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-307-01" ;
    dcterms:issued "2022-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "ETIC Telecom Remote Access Server (RAS) (Update B)" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Communications; Information Technology; Energy" ;
    icsa:cveNumber "CVE-2024-26155; CVE-2024-26156; CVE-2022-3703; CVE-2022-40981; CVE-2024-26154; CVE-2024-26157; CVE-2022-41607; CVE-2024-26153" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-352; CWE-79; CWE-345; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-3703,
        cve-res:CVE-2022-40981,
        cve-res:CVE-2022-41607,
        cve-res:CVE-2024-26153,
        cve-res:CVE-2024-26154,
        cve-res:CVE-2024-26155,
        cve-res:CVE-2024-26156,
        cve-res:CVE-2024-26157 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-319,
        cwe-res:CWE-345,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Remote Access Server (RAS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-26155; are affected: ETIC Telecom RAS: All versions prior to 4.5.0 (CVE-2022-3703; CVE-2024-26156); ETIC Telecom Remote Access Server (RAS) is used to manage connections between the machine network of the industrial site and the operator who has to perform remote maintenance from his PC or smartphone. The following versions of ETIC Telecom Remote Access Server (RAS); CVE-2022-40981; CVE-2024-26154; CVE-2024-26157; CVE-2022-41607; ETIC Telecom RAS: All versions prior to 4.11.0 (CVE-2024-26153)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-307-01" ;
    icsa:vendor "ETIC Telecom" ;
    icsa:year 2022 .

icsa-res:ICSA-22-307-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-307-02" ;
    dcterms:issued "2022-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nokia ASIK AirScale System Module" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Finland" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2022-2483; CVE-2022-2484; CVE-2022-2482" ;
    icsa:cweNumber "CWE-1274; CWE-1282" ;
    icsa:hasCVE cve-res:CVE-2022-2482,
        cve-res:CVE-2022-2483,
        cve-res:CVE-2022-2484 ;
    icsa:hasCWE cwe-res:CWE-1274,
        cwe-res:CWE-1282 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ASIK AirScale 5G Common System Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a baseband unit; The following versions of Nokia ASIK AirScale; are affected: ASIK 474021A.101 ASIK 474021A.102 (not affected by CVE-2022-2484)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-307-02" ;
    icsa:vendor "Nokia" ;
    icsa:year 2022 .

icsa-res:ICSA-22-307-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-307-03" ;
    dcterms:issued "2022-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Industrial Automation DIALink" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2969" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2022-2969 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIALink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Electronics Industrial Automation reports this vulnerability affects the following DIALink products: DIALink versions prior to v1.5.0.0 Beta 4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-307-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-01" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-39157; CVE-2022-43397" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-39157,
        cve-res:CVE-2022-43397 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following Parasolid 3D geometric modeling tools: Parasolid V34.0: versions prior to V34.0.252 Parasolid V34.0: versions prior to V34.0.254 Parasolid V34.1: versions prior to V34.1.242 Parasolid V34.1: versions prior to V34.1.244 Parasolid V35.0: versions prior to V35.0.184 Parasolid V35.0: versions prior to V35.0.170." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-02" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Web Server Login Page of Industrial Controllers (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-30694" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2022-30694 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Industrial Controllers and Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The web server login pages of the following Siemens devices are affected: --------- Begin Update A Part 1 of 5 --------- SIMATIC Drive Controller family: All versions prior to V3.0.1. --------- End Update A Part 1 of 5 --------- SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0): All versions prior to V3.2.19. SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0): All versions prior to V3.2.19. SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0): All versions prior to V3.2.19. SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0): All versions prior to V3.2.19. SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0): All versions prior to V3.2.19. SIMATIC PC Station: All versions V2.1 and later. SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0): All versions prior to V3.3.19. SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0): All versions prior to V3.2.19. SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0): All versions prior to V3.2.19. SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0): All versions prior to V3.2.19. SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0): All versions prior to V3.2.19. SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0): All versions prior to V3.2.19. SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0): All versions prior to V3.2.19. SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0): All versions prior to V3.2.19. SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0): All versions prior to V3.2.19. SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0): All versions prior to V3.2.19. SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants): All versions. SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants): All versions. SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions. --------- Begin Update A Part 2 of 5 --------- SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to V3.0.1. --------- End Update A Part 2 of 5 --------- SIMATIC S7-1500 Software Controller: All versions. --------- Begin Update A Part 3 of 5 --------- SIMATIC S7-PLCSIM Advanced: All versions prior to V5.0 --------- End Update A Part 3 of 5 --------- SIMATIC S7-PLCSIM Advanced: All versions. SIMATIC WinCC Runtime Advanced: All versions. SINUMERIK ONE: All versions. SIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0): All versions prior to V3.2.19. SIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0): All versions prior to V3.2.19. SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0): All versions prior to V3.3.19. SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0): All versions prior to V3.2.19. SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0): All versions prior to V3.2.19. SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0): All versions prior to V3.2.19. SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0): All versions prior to V3.2.19." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-03" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC Network Management System Logback Component" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-42550" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2021-42550 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: All versions prior to v1.0.3.; a network management system; The following versions of Siemens SINEC NMS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-04" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK ONE and SINUMERIK MC" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-38465" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2022-38465 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK ONE and SINUMERIK MC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SINUMERIK CNC systems are affected: SINUMERIK ONE All Versions SINUMERIK MC All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-05" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-39158" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-39158 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following RUGGEDCOM ROS switches and serial-to-Ethernet devices: RUGGEDCOM ROS i800 V4.X: All versions RUGGEDCOM ROS i801 V4.X: All versions RUGGEDCOM ROS i802 V4.X: All versions RUGGEDCOM ROS i803 V4.X: All versions RUGGEDCOM ROS RMC30 V4.X: All versions RUGGEDCOM ROS RMC8388 V4.X: All versions RUGGEDCOM ROS RP110 V4.X: All versions RUGGEDCOM ROS RS1600 V4.X: All versions RUGGEDCOM ROS RS1600F V4.X: All versions RUGGEDCOM ROS RS1600T V4.X: All versions RUGGEDCOM ROS RS400 V4.X: All versions RUGGEDCOM ROS RS401 V4.X: All versions RUGGEDCOM ROS RS416Pv2 V4.X: All versions RUGGEDCOM ROS RS416v2 V4.X: All versions RUGGEDCOM ROS RS8000 V4.X: All versions RUGGEDCOM ROS RS8000A V4.X: All versions RUGGEDCOM ROS RS8000H V4.X: All versions RUGGEDCOM ROS RS8000T V4.X: All versions RUGGEDCOM ROS RS900 (32M) V4.X: All versions RUGGEDCOM ROS RS900 V4.X: All versions RUGGEDCOM ROS RS900G (32M) V4.X: All versions RUGGEDCOM ROS RS900G V4.X: All versions RUGGEDCOM ROS RS900GP V4.X: All versions RUGGEDCOM ROS RS900L V4.X: All versions RUGGEDCOM ROS RS900M V4.X: All versions RUGGEDCOM ROS RS900W V4.X: All versions RUGGEDCOM ROS RS910 V4.X: All versions RUGGEDCOM ROS RS910L V4.X: All versions RUGGEDCOM ROS RS910W V4.X: All versions RUGGEDCOM ROS RS920L V4.X: All versions RUGGEDCOM ROS RS920W V4.X: All versions RUGGEDCOM ROS RS930L V4.X: All versions RUGGEDCOM ROS RS930W V4.X: All versions RUGGEDCOM ROS RS940G V4.X: All versions RUGGEDCOM ROS RSG2100 (32M) V4.X: All versions RUGGEDCOM ROS RSG2100 V4.X: All versions RUGGEDCOM ROS RSG2100P V4.X: All versions RUGGEDCOM ROS RSG2200 V4.X: All versions RUGGEDCOM ROS RSG2288 V4.X: All versions RUGGEDCOM ROS RSG2300 V4.X: All versions RUGGEDCOM ROS RSG2300P V4.X: All versions RUGGEDCOM ROS RSG2488 V4.X: All versions RUGGEDCOM ROS RSG920P V4.X: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-06" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens QMS Automotive" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-43958" ;
    icsa:cweNumber "CWE-316" ;
    icsa:hasCVE cve-res:CVE-2022-43958 ;
    icsa:hasCWE cwe-res:CWE-316 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "QMS Automotive" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: All versions.; The following versions of Siemens QMS Automotive; a quality management system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-07" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron NJ/NX-series Machine Automation Controllers" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-33971" ;
    icsa:cweNumber "CWE-489" ;
    icsa:hasCVE cve-res:CVE-2022-33971 ;
    icsa:hasCWE cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NJ/NX-series Machine Automation Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of the NJ/NX-series Machine Automation Controllers are affected: NX7-series Machine Automation Controller (All Models): Versions 1.28 and prior NX1-series Machine Automation Controller (All Models): Versions 1.48 and prior NJ-series Machine Automation Controller (All Models): Versions 1.48 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-07" ;
    icsa:vendor "Omron" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-08" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron NJNX-series" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-33208; CVE-2022-34151" ;
    icsa:cweNumber "CWE-798; CWE-294" ;
    icsa:hasCVE cve-res:CVE-2022-33208,
        cve-res:CVE-2022-34151 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NJ/NX-series Controllers and Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "NA5-7W): Runtime versions 1.15 and prior.; are affected: NX7-series Machine Automation Controller (All Models): Versions 1.28 and prior NX1-series Machine Automation Controller (All Models): Versions 1.48 and prior NJ-series Machine Automation Controller (All Models): Versions 1.48 and prior Automation Software Sysmac Studio (All Models): Versions 1.49 and prior NA-series Programable Terminal (NA5-15W; NA5-12W; NA5-9W; The following versions of NJ/NX-series; a machine automation controller" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-08" ;
    icsa:vendor "Omron" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-09" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-41660; CVE-2022-41662; CVE-2022-39136; CVE-2022-41661; CVE-2022-41664; CVE-2022-41663" ;
    icsa:cweNumber "CWE-416; CWE-122; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-39136,
        cve-res:CVE-2022-41660,
        cve-res:CVE-2022-41661,
        cve-res:CVE-2022-41662,
        cve-res:CVE-2022-41663,
        cve-res:CVE-2022-41664 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization and JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: JT2Go: All versions prior to V14.1.0.4 --------- Begin Update A Part 1 of 2 --------- Teamcenter Visualization V13.3: All versions V13.3.0.7 and later; prior to V13.3.0.8 (only affected by CVE-2022-39136) --------- End Update A Part 1 of 2 --------- Teamcenter Visualization V13.3: All versions prior to V13.3.0.7 Teamcenter Visualization V14.0: All versions prior to V14.0.0.3 Teamcenter Visualization V14.1: All versions prior to V14.1.0.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-10" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-37895; CVE-2022-37887; CVE-2022-37896; CVE-2022-37886; CVE-2022-37890; CVE-2022-37888; CVE-2022-37891; CVE-2022-37889; CVE-2002-20001; CVE-2022-37885; CVE-2022-37892; CVE-2022-37894; CVE-2022-37893" ;
    icsa:cweNumber "CWE-120; CWE-79; CWE-77; CWE-20; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2002-20001,
        cve-res:CVE-2022-37885,
        cve-res:CVE-2022-37886,
        cve-res:CVE-2022-37887,
        cve-res:CVE-2022-37888,
        cve-res:CVE-2022-37889,
        cve-res:CVE-2022-37890,
        cve-res:CVE-2022-37891,
        cve-res:CVE-2022-37892,
        cve-res:CVE-2022-37893,
        cve-res:CVE-2022-37894,
        cve-res:CVE-2022-37895,
        cve-res:CVE-2022-37896 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20,
        cwe-res:CWE-400,
        cwe-res:CWE-77,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following versions of SCALANCE W1750D; which is a brand-labeled access point device from Aruba: SCALANCE W1750D (JP) (6GK5750-2HX01-1AD0): All versions SCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0): All versions SCALANCE W1750D (USA) (6GK5750-2HX01-1AB0): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-314-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-314-11" ;
    dcterms:issued "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM Q100" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-43545; CVE-2022-43546; CVE-2022-43439; CVE-2022-43398" ;
    icsa:cweNumber "CWE-20; CWE-384" ;
    icsa:hasCVE cve-res:CVE-2022-43398,
        cve-res:CVE-2022-43439,
        cve-res:CVE-2022-43545,
        cve-res:CVE-2022-43546 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-384 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM Q100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following SICAM Q100 products: POWER METER SICAM Q100 (7KG9501-0AA31-2AA1): prior to V2.50 POWER METER SICAM Q100 (7KG9501-0AA01-2AA1): prior to V2.50." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-314-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-319-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-319-01" ;
    dcterms:issued "2022-11-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GT SoftGOT2000" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2068" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-2068 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GT SoftGOT2000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports this vulnerability affects OpenSSL in the following products: GT SoftGOT2000 1.275M”1.280S." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-319-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-321-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-321-01" ;
    dcterms:issued "2022-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Red Lion Crimson" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-3090" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2022-3090 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Crimson" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "HMIs; and modules are affected: Crimson 3.0: Version 707.000 and prior Crimson 3.1: Version 3126.001 and prior Crimson 3.2: Version 3.2.0044.0 and prior.; The following versions of Crimson; a programming software for various controllers" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-321-01" ;
    icsa:vendor "Red Lion Controls" ;
    icsa:year 2022 .

icsa-res:ICSA-22-321-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-321-02" ;
    dcterms:issued "2022-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cradlepoint IBR600" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2022-3086" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2022-3086 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IBR600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Cradlepoint IBR600 are affected: NetCloud OS (NCOS) Version: 6.5.0.160bc2e and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-321-02" ;
    icsa:vendor "Cradlepoint" ;
    icsa:year 2022 .

icsa-res:ICSA-22-326-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-326-01" ;
    dcterms:issued "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Edge" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-42797; CVE-2021-42796; CVE-2016-2542; CVE-2021-42794" ;
    icsa:cweNumber "CWE-284; CWE-40; CWE-200; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2016-2542,
        cve-res:CVE-2021-42794,
        cve-res:CVE-2021-42796,
        cve-res:CVE-2021-42797 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-40,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: AVEVA Edge 2020 R2 SP1 AVEVA Edge 2020 R2 SP1 w/ HF 2020.2.00.40 AVEVA Edge 2020 R2 and all prior versions (formerly known as InduSoft Web Studio).; an HMI/SCADA software; The following versions of AVEVA Edge" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-326-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2022 .

icsa-res:ICSA-22-326-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-326-02" ;
    dcterms:issued "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digital Alert Systems DASDEC" ;
    icsa:CVSSScore "4.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Emergency Services" ;
    icsa:cveNumber "CVE-2022-40204; CVE-2019-18265" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2019-18265,
        cve-res:CVE-2022-40204 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DASDEC" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "an emergency communication system; The following versions of DASDEC; are affected: Versions prior to 4.1 (CVE-2019-18265 only) All versions (CVE-2022-40204 only)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-326-02" ;
    icsa:vendor "Digital Alert Systems" ;
    icsa:year 2022 .

icsa-res:ICSA-22-326-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-326-03" ;
    dcterms:issued "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Phoenix Contact Automation Worx" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3737; CVE-2022-3461" ;
    icsa:cweNumber "CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-3461,
        cve-res:CVE-2022-3737 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation Worx Software Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following components of Automation Worx Software Suite are affected: Config+: Versions 1.89 and prior PC Worx: Versions 1.89 and prior PC Worx Express: Versions 1.89 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-326-03" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2022 .

icsa-res:ICSA-22-326-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-326-04" ;
    dcterms:issued "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE CIMPLICITY" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-3092; CVE-2022-2948; CVE-2022-2952; CVE-2022-2002; CVE-2022-3084" ;
    icsa:cweNumber "CWE-122; CWE-787; CWE-824; CWE-822" ;
    icsa:hasCVE cve-res:CVE-2022-2002,
        cve-res:CVE-2022-2948,
        cve-res:CVE-2022-2952,
        cve-res:CVE-2022-3084,
        cve-res:CVE-2022-3092 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-787,
        cwe-res:CWE-822,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CIMPLICITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an HMI/SCADA software; are affected: CIMPLICITY: Versions 2022 and prior.; The following versions of CIMPLICITY" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-326-04" ;
    icsa:vendor "GE" ;
    icsa:year 2022 .

icsa-res:ICSA-22-326-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-326-05" ;
    dcterms:issued "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa Multiple ARM-Based Computers" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2022-3088" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2022-3088 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ARM-Based Computers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Moxa reports this vulnerability affects the following products and versions: UC-8100A-ME-T System Image: Versions v1.0 to v1.6 UC-2100 System Image: Versions v1.0 to v1.12 UC-2100-W System Image: Versions v1.0 to v 1.12 UC-3100 System Image: Versions v1.0 to v1.6 UC-5100 System Image: Versions v1.0 to v1.4 UC-8100 System Image: Versions v3.0 to v3.5 UC-8100-ME-T System Image: Versions v3.0 and v3.1 UC-8100A-ME-T System Image: Versions v1.0 to v1.6 UC-8200 System Image: v1.0 to v1.5 AIG-300 System Image: v1.0 to v1.4 UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2 UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1 UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1 DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-326-05" ;
    icsa:vendor "Moxa" ;
    icsa:year 2022 .

icsa-res:ICSA-22-333-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-333-01" ;
    dcterms:issued "2022-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT2000" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-40266" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-40266 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT2000 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric GOT2000 Series products are affected: GT27 Model: FTP server versions 01.39.000 and prior GT25 Model: FTP server versions 01.39.000 and prior GT23 Model: FTP server versions 01.39.000 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-333-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-333-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-333-02" ;
    dcterms:issued "2022-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy IED Connectivity Packages and PCM600 Products (Update A)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-2513" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2022-2513 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PCM600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi Energy's IED Connectivity Packages and PCM600 products are affected: PCM600: v2.11 and previous versions; including hotfixes 670 Connectivity Package: versions from 3.0 to 3.4.1 650 Connectivity Package: versions from 1.3 to 2.4.1 SAM600-IO Connectivity Package: versions from 1.0 to 1.2 GMS600 Connectivity Package: versions from 1.3 to 1.3.1 PWC600 Connectivity Package: versions from 1.1 to 1.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-333-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-333-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-333-03" ;
    dcterms:issued "2022-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MicroSCADA Pro/X SYS600 Products (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-3388" ;
    icsa:cweNumber "CWE-1173" ;
    icsa:hasCVE cve-res:CVE-2022-3388 ;
    icsa:hasCWE cwe-res:CWE-1173 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroSCADA X SYS600, MicroSCADA Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi Energy's MicroSCADA Pro/X SYS600 products are affected: SYS600: 10.4 and earlier SYS600: 9.4 FP2 Hotfix 4 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-333-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2022 .

icsa-res:ICSA-22-333-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-333-04" ;
    dcterms:issued "2022-11-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa UC Series (Update A)" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-3086" ;
    icsa:cweNumber "CWE-1263" ;
    icsa:hasCVE cve-res:CVE-2022-3086 ;
    icsa:hasCWE cwe-res:CWE-1263 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UC Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: UC-8580 Series: V1.1 UC-8540 Series: V1.0 to V1.2 UC-8410A Series: V2.2 UC-8200 Series: V1.0 to V2.4 UC-8100A-ME-T Series: V1.0 to V1.1 --------- Begin Update A part 1 of 1 --------- UC-8100 Series: V1.2 --------- End Update A part 1 of 1 --------- UC-5100 Series: V1.2 UC-3100 Series: V1.2 to V2.0 UC-2100 Series: V1.3 to V1.5 UC-2100-W Series: V1.3 to V1.5.; The following bootloader versions of Moxa UC Series; industrial internet-of-things (IIoT) gateway devices" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-333-04" ;
    icsa:vendor "Moxa" ;
    icsa:year 2022 .

icsa-res:ICSA-22-333-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-333-05" ;
    dcterms:issued "2022-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FA Engineering Software (Update C)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-29832; CVE-2022-29826; CVE-2022-29833; CVE-2022-25164; CVE-2022-29825; CVE-2022-29831; CVE-2022-29828; CVE-2022-29829; CVE-2022-29830; CVE-2022-29827" ;
    icsa:cweNumber "CWE-316; CWE-321; CWE-259; CWE-312; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2022-25164,
        cve-res:CVE-2022-29825,
        cve-res:CVE-2022-29826,
        cve-res:CVE-2022-29827,
        cve-res:CVE-2022-29828,
        cve-res:CVE-2022-29829,
        cve-res:CVE-2022-29830,
        cve-res:CVE-2022-29831,
        cve-res:CVE-2022-29832,
        cve-res:CVE-2022-29833 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-312,
        cwe-res:CWE-316,
        cwe-res:CWE-321,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GX Works3, MX OPC UA Module Configurator-R, GX Works2, GX Developer, GT Designer3 Version1 (GOT2000), Motion Control Setting, MT Works2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2022-29832; CVE-2022-29826; and CVE-2022-29830). GX Works3: 1.015R to 1.087R (affected by CVE-2022-25164; and CVE-2022-29833). GX Works3: 1.095Z (affected by CVE-2022-25164; CVE-2022-29833). MX OPC UA Module Configurator-R: 1.08J and prior (affected by CVE-2022-25164). GX Works2: All versions (affected by CVE-2022-29832). GX Developer: 8.40S or later (affected by CVE-2022-29832). GT Designer3 Version1 (GOT2000): 1.122C to 1.290C (affected by CVE-2022-29825 and CVE-2022-29829). Motion Control Settings (GX Works3 related software): 1.000A to 1.033K (affected by CVE-2022-29826 and CVE-2022-29830). Motion Control Settings (GX Works3 related software): 1.035M to 1.042U (affected by CVE-2022-29826; The following versions of Mitsubishi Electric FA Engineering Software are affected: GX Works3: 1.000A to 1.011M (affected by CVE-2022-25164; and CVE-2022-29830). Motion Control Settings (GX Works3 related software): 1.045X to 1.065T (affected by CVE-2022-29830). MT Works2: 1.100E to 1.200J (affected by CVE-2022-29825 and CVE-2022-29829).; CVE-2022-29831; CVE-2022-29825; and CVE-2022-29833). GX Works3: 1.090U (affected by CVE-2022-25164; CVE-2022-29828; CVE-2022-29829; CVE-2022-29833). GX Works3: 1.096A and later (affected by CVE-2022-29827; CVE-2022-29830; CVE-2022-29827" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-333-05" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-335-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-335-01" ;
    dcterms:issued "2022-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-40265" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-40265 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric MELSEC iQ-R Series products are affected: RJ71EN71: Firmware version \"65\" and prior R04/08/16/32/120ENCPU: Network part firmware version \"65\" and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-335-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-335-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-335-02" ;
    dcterms:issued "2022-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Remote Compact Controller" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2642; CVE-2022-2641; CVE-2022-2640" ;
    icsa:cweNumber "CWE-321; CWE-1108; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2022-2640,
        cve-res:CVE-2022-2641,
        cve-res:CVE-2022-2642 ;
    icsa:hasCWE cwe-res:CWE-1108,
        cwe-res:CWE-321,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Remote Compact Controller (RCC) 972" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Remote Compact Controller (RCC) 972; is affected: RCC 972: Firmware Version 15.40.; an all-in-one I/O controller" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-335-02" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-342-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-342-01" ;
    dcterms:issued "2022-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech iView" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-3323" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2022-3323 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iView" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following versions of Advantech iView management software are affected: Version 5.7.04.6469 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-342-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2022 .

icsa-res:ICSA-22-342-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-342-02" ;
    dcterms:issued "2022-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-3711; CVE-2022-23854; CVE-2020-11022" ;
    icsa:cweNumber "CWE-23; CWE-120; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-11022,
        cve-res:CVE-2021-3711,
        cve-res:CVE-2022-23854 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-23,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InTouch Access Anywhere, Plant SCADA Access Anywhere" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Begin Update A Part 4 of 6 --------- The following versions of AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere”both remote human machine interface (HMI) software”are affected: InTouch Access Anywhere: 2023 and prior Plant SCADA Access Anywhere: 2020 R2 and prior --------- End Update A Part 4 of 6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-342-02" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2022 .

icsa-res:ICSA-22-342-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-342-03" ;
    dcterms:issued "2022-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix controllers" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-3752" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-3752 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CompactLogix, Compact GuardLogix, ControlLogix, and GuardLogix controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation controllers are affected: CompactLogix 5380 controllers: firmware version 31.011 and later Compact GuardLogix 5380 controllers: firmware version 31.011 and later CompactLogix 5480 controllers: firmware version 32.011 and later ControlLogix 5580 controllers: firmware version 31.011 and later GuardLogix 5580 controllers: firmware version 31.011 and later." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-342-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-346-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-346-05" ;
    dcterms:issued "2022-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PLM Help Server" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-44575" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2022-44575 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PLM Help Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens PLM Help Server; a documentation server; are affected: Version 4.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-346-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-347-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-347-01" ;
    dcterms:issued "2022-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS and Mitsubishi Electric Products" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-40264" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2022-40264 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ICONICS Product Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "This vulnerability could affect the ICONICS Suite including GENESIS64; Hyper Historian; AnalytiX; and MobileHMI: Versions v10.96 to v10.97.2 Note: ICONICS version 10.97.2 CFR1 and later versions are not vulnerable to this vulnerability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-347-01" ;
    icsa:vendor "ICONICS, Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-347-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-347-02" ;
    dcterms:issued "2022-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric APC Easy UPS Online" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-42973; CVE-2022-42970; CVE-2022-42971; CVE-2022-42972" ;
    icsa:cweNumber "CWE-306; CWE-732; CWE-434; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-42970,
        cve-res:CVE-2022-42971,
        cve-res:CVE-2022-42972,
        cve-res:CVE-2022-42973 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-434,
        cwe-res:CWE-732,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APC Easy UPS Online" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of APC Easy UPS Online; Windows Server 2019; 10; an uninterruptible power supply (UPS) monitoring software; 2019; 2022) APC Easy UPS Online Version 2.5-GA-01-22261 and prior (Windows 11; 2022).; 11; Windows Server 2016; are affected: APC Easy UPS Online Version 2.5-GA and prior (Windows 7" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-347-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-347-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-347-03" ;
    dcterms:issued "2022-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Contec CONPROSYS HMI System (CHS) (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-22339; CVE-2023-22373; CVE-2023-22334; CVE-2022-44456; CVE-2023-22331" ;
    icsa:cweNumber "CWE-79; CWE-836; CWE-284; CWE-78; CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2022-44456,
        cve-res:CVE-2023-22331,
        cve-res:CVE-2023-22334,
        cve-res:CVE-2023-22339,
        cve-res:CVE-2023-22373 ;
    icsa:hasCWE cwe-res:CWE-1392,
        cwe-res:CWE-284,
        cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-836 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CONPROSYS HMI System (CHS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2023-22339 CONPROSYS HMI System (CHS): Ver.3.4.5 and prior --------- End Update A part 3 of 5 ---------; CVE-2023-22373; CVE-2023-22334; The following versions of CONPROSYS HMI System (CHS); are affected: --------- Begin Update A part 3 of 5 --------- CVE-2022-44456 CONPROSYS HMI System (CHS): Ver.3.4.4 and prior CVE-2023-22331" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-347-03" ;
    icsa:vendor "Contec" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-01" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Prosys OPC UA Simulation Server (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Finland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2022-2967" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2022-2967 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UA Simulation Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Prosys OPC UA simulation servers are affected: Prosys OPC UA Simulation Server versions prior to 5.4.0 Prosys OPC UA Modbus Server 1.4.18-5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-01" ;
    icsa:vendor "Prosys OPC" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-02" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-200RNA Switch Devices" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-46352; CVE-2022-46351; CVE-2022-46354; CVE-2022-46355; CVE-2022-46353; CVE-2022-46350" ;
    icsa:cweNumber "CWE-200; CWE-80; CWE-330; CWE-284; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-46350,
        cve-res:CVE-2022-46351,
        cve-res:CVE-2022-46352,
        cve-res:CVE-2022-46353,
        cve-res:CVE-2022-46354,
        cve-res:CVE-2022-46355 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-330,
        cwe-res:CWE-400,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens software is affected: SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2): All versions prior to V3.2.7 SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2): All versions prior to V3.2.7 SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3): All versions prior to V3.2.7 SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3): All versions prior to V3.2.7 SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3): All versions prior to V3.2.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-03" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Multiple Denial of Service Vulnerabilities in Industrial Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-44695; CVE-2021-44694; CVE-2021-40365; CVE-2021-44693" ;
    icsa:cweNumber "CWE-1284; CWE-20; CWE-1286; CWE-1287" ;
    icsa:hasCVE cve-res:CVE-2021-40365,
        cve-res:CVE-2021-44693,
        cve-res:CVE-2021-44694,
        cve-res:CVE-2021-44695 ;
    icsa:hasCWE cwe-res:CWE-1284,
        cwe-res:CWE-1286,
        cwe-res:CWE-1287,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Products, TIM 1531 IRC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SIMATIC Drive Controller family: All versions prior to V3.0.1 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to V4.6.0 SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to V3.0.1 SIMATIC S7-1500 Software Controller: All versions SIMATIC S7-PLCSIM Advanced: All versions prior V5.0 SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0): All versions TIM 1531 IRC (6GK7543-1MX00-0XE0): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-04" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Multiple Vulnerabilities in SCALANCE Products" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-46140; CVE-2022-46143; CVE-2022-46142; CVE-2022-46144; CVE-2022-34821" ;
    icsa:cweNumber "CWE-94; CWE-664; CWE-257; CWE-1284; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2022-34821,
        cve-res:CVE-2022-46140,
        cve-res:CVE-2022-46142,
        cve-res:CVE-2022-46143,
        cve-res:CVE-2022-46144 ;
    icsa:hasCWE cwe-res:CWE-1284,
        cwe-res:CWE-257,
        cwe-res:CWE-327,
        cwe-res:CWE-664,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM and SCALANCE devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2022-46143): All versions SCALANCE XF204 DNA (6GK5204-0BA00-2YF2) (only affected by CVE-2022-46140; AC230V) (6GK5328-4FS00-3RR3) (only affected by CVE-2022-46140; RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (only affected by CVE-2022-34821; but prior to V3.0 SCALANCE SC636-2C (6GK5636-2GS00-2AC2): All versions prior to V2.3 SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XM408-4C (L3 int.) (6GK5408-4GQ00-2AM2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XB205-3LD (SC; CVE-2022-46143): All versions SCALANCE XB216 (PN) (6GK5216-0BA00-2AB2) (only affected by CVE-2022-46140; E/IP) (6GK5213-3BF00-2TB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0) (only affected by CVE-2022-46140; E/IP) (6GK5213-3BD00-2TB2) (only affected by CVE-2022-46140; 24V (6GK5526-8GS00-2AR2) (only affected by CVE-2022-46140; 1x230V (L3 int.) (6GK5524-8GR00-3AR2) (only affected by CVE-2022-46140; but prior to V3.0 SCALANCE SC642-2C (6GK5642-2GS00-2AC2): All versions prior to V2.3 SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE XC206-2G PoE (54 V DC) (6GK5206-2RS00-5AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE XR528-6M (6GK5528-0AA00-2AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC216 (6GK5216-0BA00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC206-2G PoE (6GK5206-2RS00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC208G (EIP def.) (6GK5208-0GA00-2TC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XP216 (6GK5216-0HA00-2AS6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XP208PoE EEC (6GK5208-0UA00-5ES6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XP216 (Ethernet/IP) (6GK5216-0HA00-2TS6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE M876-4 (6GK5876-4AA10-2BA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XB205-3 (ST; CVE-2022-46143): All versions SCALANCE XR324WG (24 x FE; CVE-2022-46143): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XM416-4C (L3 int.) (6GK5416-4GR00-2AM2) (only affected by CVE-2022-46140; PN) (6GK5205-3BD00-2AB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC206-2SFP G (EIP DEF.) (6GK5206-2GS00-2TC2) (only affected by CVE-2022-46140; 24V (6GK5524-8GS00-2AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR528-6M (2HR2; CVE-2022-46143): All versions SCALANCE WUM766-1 (6GK5766-1GE00-3DB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC216-4C G EEC (6GK5216-4GS00-2FC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR328-4C WG (24XFE; CVE-2022-46143): All versions SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (only affected by CVE-2022-34821; DC 24V) (6GK5324-0BA00-2AR3) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0) (only affected by CVE-2022-46140; 2x230V (6GK5526-8GS00-4AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0) (only affected by CVE-2022-46140; PN) (6GK5205-3BF00-2AB2) (only affected by CVE-2022-46140; DC 24V) (6GK5328-4SS00-2AR3) (only affected by CVE-2022-46140; but prior to V3.0 SCALANCE SC632-2C (6GK5632-2GS00-2AC2): All versions prior to V2.3 SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC206-2SFP EEC (6GK5206-2BS00-2FC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XP208 (6GK5208-0HA00-2AS6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR324WG (24 X FE; CVE-2022-46143): All versions SCALANCE M874-3 (6GK5874-3AA00-2AA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR528-6M (L3 int.) (6GK5528-0AR00-2AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XM408-4C (6GK5408-4GP00-2AM2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE M874-2 (6GK5874-2AA00-2AA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE XB208 (PN) (6GK5208-0BA00-2AB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC208G PoE (54 V DC) (6GK5208-0RA00-5AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC216-3G PoE (54 V DC) (6GK5216-3RS00-5AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SIPLUS NET SCALANCE XC206-2 (6AG1206-2BB00-7AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC206-2 (SC) (6GK5206-2BD00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XB216 (E/IP) (6GK5216-0BA00-2TB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC208G EEC (6GK5208-0GA00-2FC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR552-12M (2HR2; CVE-2022-46143): All versions SCALANCE WUM766-1 6GHz (6GK5766-1JE00-3DA0) (only affected by CVE-2022-46140; 2x230V (L3 int.) (6GK5526-8GR00-4AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR552-12M (2HR2) (6GK5552-0AA00-2HR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XM416-4C (6GK5416-4GS00-2AM2) (only affected by CVE-2022-46140; DC24V) (6GK5328-4FS00-2RR3) (only affected by CVE-2022-46140; E/IP) (6GK5205-3BD00-2TB2) (only affected by CVE-2022-46140; AC 230V) (6GK5328-4SS00-3AR3) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR328-4C WG (24xFE; CVE-2022-46143): All versions SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR552-12M (6GK5552-0AA00-2AR2) (only affected by CVE-2022-46140; 24V) (6GK5328-4FS00-2AR3) (only affected by CVE-2022-46140; 2x230V (L3 int.) (6GK5524-8GR00-4AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SIPLUS NET SCALANCE XC208 (6AG1208-0BA00-7AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XM408-8C (L3 int.) (6GK5408-8GR00-2AM2) (only affected by CVE-2022-46140; 4XGE; CVE-2022-46143): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0) (only affected by CVE-2022-46140; 2x230V (6GK5524-8GS00-4AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0) (only affected by CVE-2022-46140; 1x230V (L3 int.) (6GK5526-8GR00-3AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC216-3G PoE (6GK5216-3RS00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC216EEC (6GK5216-0BA00-2FC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR326-2C PoE WG (6GK5326-2QS00-3AR3) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR552-12M (2HR2) (6GK5552-0AR00-2HR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (only affected by CVE-2022-46140; CVE-2022-46142; CVE-2022-46143): All versions SCALANCE XC206-2SFP (6GK5206-2BS00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE WAM766-1 (6GK5766-1GE00-7DB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC216-4C G (EIP Def.) (6GK5216-4GS00-2TC2) (only affected by CVE-2022-46140; 24V (L3 int.) (6GK5524-8GR00-2AR2) (only affected by CVE-2022-46140; 24V (L3 int.) (6GK5526-8GR00-2AR2) (only affected by CVE-2022-46140; but prior to V3.0 SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE XB208 (E/IP) (6GK5208-0BA00-2TB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions.; CVE-2022-46143): All versions SCALANCE M804PB (6GK5804-0AP00-2AA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE XF204 (6GK5204-0BA00-2GF2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0) (only affected by CVE-2022-46140; E/IP) (6GK5213-3BB00-2TB2) (only affected by CVE-2022-46140; E/IP) (6GK5205-3BF00-2TB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC208G PoE (6GK5208-0RA00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC224-4C G (6GK5224-4GS00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46144): All versions V2.3 and later; 1x230V (6GK5524-8GS00-3AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (only affected by CVE-2022-34821; 1x230V (6GK5526-8GS00-3AR2) (only affected by CVE-2022-46140; but prior to V3.0 SCALANCE SC626-2C (6GK5626-2GS00-2AC2): All versions prior to V2.3 SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (only affected by CVE-2022-34821; but prior to V3.0 SCALANCE SC646-2C (6GK5646-2GS00-2AC2): All versions prior to V2.3 SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE XC208G (6GK5208-0GA00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE S615 EEC (6GK5615-0AA01-2AA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC206-2G PoE EEC (54 V DC) (6GK5206-2RS00-5FC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2) (only affected by CVE-2022-34821; PN) (6GK5205-3BB00-2AB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC206-2 (ST/BFOC) (6GK5206-2BB00-2AC2) (only affected by CVE-2022-46140; PN) (6GK5213-3BF00-2AB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0) (only affected by CVE-2022-46140; PN) (6GK5213-3BB00-2AB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE XC224-4C G EEC (6GK5224-4GS00-2FC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0) (only affected by CVE-2022-46140; PN) (6GK5213-3BD00-2AB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE WAM766-1 6GHz (6GK5766-1JE00-7DA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC208 (6GK5208-0BA00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC206-2SFP G EEC (6GK5206-2GS00-2FC2) (only affected by CVE-2022-46140; AC 230V) (6GK5324-0BA00-3AR3) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR328-4C WG (28xGE; CVE-2022-46143): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XB213-3 (ST; CVE-2022-46143): All versions SCALANCE XC208EEC (6GK5208-0BA00-2FC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC216-4C G (6GK5216-4GS00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XP208 (Ethernet/IP) (6GK5208-0HA00-2TS6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR526-8C; CVE-2022-46143): All versions SCALANCE S615 (6GK5615-0AA00-2AA2) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE XM408-8C (6GK5408-8GS00-2AM2) (only affected by CVE-2022-46140; AC230V) (6GK5328-4FS00-3AR3) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC224-4C G (EIP Def.) (6GK5224-4GS00-2TC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XR528-6M (2HR2) (6GK5528-0AA00-2HR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE SC622-2C (6GK5622-2GS00-2AC2): All versions prior to V2.3 SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (only affected by CVE-2022-34821; E/IP) (6GK5205-3BB00-2TB2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SIPLUS NET SCALANCE XC216-4C (6AG1216-4BS00-7AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE WAM766-1 EEC 6GHz (6GK5766-1JE00-7TA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XB205-3 (SC; L3 int.) (6GK5528-0AR00-2HR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC216-4C (6GK5216-4BS00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XB213-3LD (SC; CVE-2022-46143; CVE-2022-46143): All versions SCALANCE XF204-2BA DNA (6GK5204-2AA00-2YF2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XP216EEC (6GK5216-0HA00-2ES6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (only affected by CVE-2022-34821; CVE-2022-46143): All versions SCALANCE XC206-2SFP G (6GK5206-2GS00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XC224 (6GK5224-0BA00-2AC2) (only affected by CVE-2022-46140; CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XF204-2BA (6GK5204-2AA00-2GF2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XP216POE EEC (6GK5216-0UA00-5ES6) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE XP208EEC (6GK5208-0HA00-2ES6) (only affected by CVE-2022-46140; 4xGE; CVE-2022-46143): All versions SCALANCE XR524-8C; CVE-2022-46143): All versions SCALANCE XB213-3 (SC; CVE-2022-46143): All versions SCALANCE XR326-2C PoE WG (without UL) (6GK5326-2QS00-3RR3) (only affected by CVE-2022-46140; L3 int.) (6GK5552-0AR00-2AR2) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0) (only affected by CVE-2022-46140; CVE-2022-46143): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0) (only affected by CVE-2022-46140" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-06" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC OA Ultralight Client" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-44731" ;
    icsa:cweNumber "CWE-88" ;
    icsa:hasCVE cve-res:CVE-2022-44731 ;
    icsa:hasCWE cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC OA Ultralight Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a human machine interface (HMI); The following versions of Siemens SIMATIC WinCC OA; are affected: SIMATIC WinCC OA V3.15: All versions SIMATIC WinCC OA V3.16: All versions prior to V3.16 P035 SIMATIC WinCC OA V3.17: All versions prior to V3.17 P024 SIMATIC WinCC OA V3.18: All versions prior to V3.18 P014." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-07" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter STAR-CCM+" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-43517" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2022-43517 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter STAR-CCM+" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a computational fluid dynamics software; The following versions of Siemens Simcenter STAR-CCM+; are affected: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-08" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Polarion ALM" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-46265" ;
    icsa:cweNumber "CWE-74" ;
    icsa:hasCVE cve-res:CVE-2022-46265 ;
    icsa:hasCWE cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Polarion ALM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: All versions.; The following versions of Siemens Polarion ALM; an application lifecycle management software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-09" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Products affected by OpenSSL 3.0" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3602; CVE-2022-3786" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2022-3602,
        cve-res:CVE-2022-3786 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Calibre ICE, Mcenter, SCALANCE X-200RNA switch family, SICAM GridPass, SIMATIC RTLS Locating Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: Calibre ICE: Versions 2022.4 and after Mcenter: Versions 5.2.1.0 and after SCALANCE X-200RNA switch family: Versions 3.2.7 and after SICAM GridPass (6MD7711-2AA00-1EA0): Versions 1.80 and after SIMATIC RTLS Locating Manager (6GT2780-0DA00): Versions 2.13 and after." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-10" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens APOGEE/TALON Field Panels" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-28388" ;
    icsa:cweNumber "CWE-342" ;
    icsa:hasCVE cve-res:CVE-2020-28388 ;
    icsa:hasCWE cwe-res:CWE-342 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APOGEE PXC/TALON TC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: APOGEE PXC Series (BACnet): All versions prior to 3.5.5 APOGEE PXC Series (P2 Ethernet): All versions prior to 2.8.20 TALON TC Series (BACnet): All versions prior to 3.5.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-11" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5 Devices" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-45044" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-45044 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIPROTEC 5 6MD85 devices (CPU variant CP200): All versions SIPROTEC 5 6MD85 devices (CPU variant CP300): All versions SIPROTEC 5 6MD86 devices (CPU variant CP200): All versions SIPROTEC 5 6MD86 devices (CPU variant CP300): All versions SIPROTEC 5 6MD89 devices (CPU variant CP300): All versions SIPROTEC 5 6MU85 devices (CPU variant CP300): All versions SIPROTEC 5 7KE85 devices (CPU variant CP200): All versions SIPROTEC 5 7KE85 devices (CPU variant CP300): All versions SIPROTEC 5 7SA82 devices (CPU variant CP100): All versions SIPROTEC 5 7SA82 devices (CPU variant CP150): All versions SIPROTEC 5 7SA86 devices (CPU variant CP200): All versions SIPROTEC 5 7SA86 devices (CPU variant CP300): All versions SIPROTEC 5 7SA87 devices (CPU variant CP200): All versions SIPROTEC 5 7SA87 devices (CPU variant CP300): All versions SIPROTEC 5 7SD82 devices (CPU variant CP100): All versions SIPROTEC 5 7SD82 devices (CPU variant CP150): All versions SIPROTEC 5 7SD86 devices (CPU variant CP200): All versions SIPROTEC 5 7SD86 devices (CPU variant CP300): All versions SIPROTEC 5 7SD87 devices (CPU variant CP200): All versions SIPROTEC 5 7SD87 devices (CPU variant CP300): All versions SIPROTEC 5 7SJ81 devices (CPU variant CP100): All versions SIPROTEC 5 7SJ81 devices (CPU variant CP150): All versions SIPROTEC 5 7SJ82 devices (CPU variant CP100): All versions SIPROTEC 5 7SJ82 devices (CPU variant CP150): All versions SIPROTEC 5 7SJ85 devices (CPU variant CP200): All versions SIPROTEC 5 7SJ85 devices (CPU variant CP300): All versions SIPROTEC 5 7SJ86 devices (CPU variant CP200): All versions SIPROTEC 5 7SJ86 devices (CPU variant CP300): All versions SIPROTEC 5 7SK82 devices (CPU variant CP100): All versions SIPROTEC 5 7SK82 devices (CPU variant CP150): All versions SIPROTEC 5 7SK85 devices (CPU variant CP200): All versions SIPROTEC 5 7SK85 devices (CPU variant CP300): All versions SIPROTEC 5 7SL82 devices (CPU variant CP100): All versions SIPROTEC 5 7SL82 devices (CPU variant CP150): All versions SIPROTEC 5 7SL86 devices (CPU variant CP200): All versions SIPROTEC 5 7SL86 devices (CPU variant CP300): All versions SIPROTEC 5 7SL87 devices (CPU variant CP200): All versions SIPROTEC 5 7SL87 devices (CPU variant CP300): All versions SIPROTEC 5 7SS85 devices (CPU variant CP200): All versions SIPROTEC 5 7SS85 devices (CPU variant CP300): All versions SIPROTEC 5 7ST85 devices (CPU variant CP200): All versions SIPROTEC 5 7ST85 devices (CPU variant CP300): All versions SIPROTEC 5 7SX85 devices (CPU variant CP300): All versions SIPROTEC 5 7UM85 devices (CPU variant CP300): All versions SIPROTEC 5 7UT82 devices (CPU variant CP100): All versions SIPROTEC 5 7UT82 devices (CPU variant CP150): All versions SIPROTEC 5 7UT85 devices (CPU variant CP200): All versions SIPROTEC 5 7UT85 devices (CPU variant CP300): All versions SIPROTEC 5 7UT86 devices (CPU variant CP200): All versions SIPROTEC 5 7UT86 devices (CPU variant CP300): All versions SIPROTEC 5 7UT87 devices (CPU variant CP200): All versions SIPROTEC 5 7UT87 devices (CPU variant CP300): All versions SIPROTEC 5 7VE85 devices (CPU variant CP300): All versions SIPROTEC 5 7VK87 devices (CPU variant CP200): All versions SIPROTEC 5 7VK87 devices (CPU variant CP300): All versions SIPROTEC 5 Communication Module ETH-BA-2EL: All versions SIPROTEC 5 Communication Module ETH-BB-2FO: All versions SIPROTEC 5 Communication Module ETH-BD-2FO: All versions SIPROTEC 5 Compact 7SX800 devices (CPU variant CP050): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-12" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-46348; CVE-2022-46347; CVE-2022-46349; CVE-2022-46345; CVE-2022-46346" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-46345,
        cve-res:CVE-2022-46346,
        cve-res:CVE-2022-46347,
        cve-res:CVE-2022-46348,
        cve-res:CVE-2022-46349 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: Parasolid V33.1: All versions up to 33.1.264 Parasolid V34.0: All versions up to 34.0.252 Parasolid V34.1: All versions up to 34.1.242 Parasolid V35.0: All versions up to 35.0.170." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-13" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Workflow Commons" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-46664" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-46664 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Workflow Commons" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Mendix Workflow Commons: All versions prior to v2.4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-14" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SISCO MMS-EASE Third Party Component" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2015-6574" ;
    icsa:cweNumber "CWE-399" ;
    icsa:hasCVE cve-res:CVE-2015-6574 ;
    icsa:hasCWE cwe-res:CWE-399 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SISCO MMS-EASE third party component" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CP300): All versions prior to v7.80 SIPROTEC 5 7UT87 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SA82 devices (CPU variant CP100): All versions prior to v7.80 SIPROTEC 5 7SA86 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SJ81 devices (CPU variant CP100): All versions prior to v7.80 SIPROTEC 5 7SJ82 devices (CPU variant CP100): All versions prior to v7.80 SIPROTEC 5 7SJ85 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SL82 devices (CPU variant CP100): All versions prior to v7.80 SIPROTEC 5 7SL86 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SX85 devices (CPU variant CP300): All versions prior to v7.80 SIPROTEC 5 7UM85 devices (CPU variant CP300): All versions prior to v7.80 SIPROTEC 5 7UT82 devices (CPU variant CP100): All versions prior to v7.80 SIPROTEC 5 7UT85 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7VE85 devices (CPU variant CP300): All versions prior to v7.80 SIPROTEC 5 7VK87 devices (CPU variants CP200; The following Siemens products are affected by this third-party component vulnerability: SIPROTEC 5 6MD85 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SD87 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 6MD86 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7ST85 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SJ86 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SK82 devices (CPU variant CP100): All versions prior to v7.80 SIPROTEC 5 7SK85 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SA87 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7UT86 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SD82 devices (CPU variant CP100): All versions prior to v7.80 SIPROTEC 5 7SD86 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SL87 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 6MU89 devices (CPU variant CP300): All versions prior to v7.80 SIPROTEC 5 6MU85 devices (CPU variant CP300): All versions prior to v7.80 SIPROTEC 5 7KE85 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 7SS85 devices (CPU variants CP200; CP300): All versions prior to v7.80 SIPROTEC 5 Communication Module ETH-BA-2EL: All versions prior to v7.80 SIPROTEC 5 Communication Module ETH-BB-2FO: All versions prior to v7.80 SIPROTEC 5 Communication Module USART-AB-1EL: All versions prior to v7.80 SIPROTEC 5 Communication Module USART-AC-2EL: All versions prior to v7.80 SIPROTEC 5 Communication Module USART-AD-1FO: All versions prior to v7.80 SIPROTEC 5 Communication Module USART-AE-2FO: All versions prior to v7.80." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-15" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3160; CVE-2022-3159; CVE-2022-3161" ;
    icsa:cweNumber "CWE-119; CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-3159,
        cve-res:CVE-2022-3160,
        cve-res:CVE-2022-3161 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization and JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following viewing and lifecycle management products are affected because they contain the APDFL library from Datalogics; which is affected by these vulnerabilities: JT2Go: All versions prior to V14.1.0.5 Teamcenter Visualization V13.3: All versions prior to V13.3.0.8 Teamcenter Visualization V14.0: All versions prior to V14.0.0.4 Teamcenter Visualization V14.1: All versions prior to V14.1.0.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-16" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens APOGEE and TALON" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-45937" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-45937 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APOGEE and TALON" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a building automation and control systems; The following versions of Siemens APOGEE PXC and TALON TC Series; are affected: APOGEE PXC Series (BACnet): Versions prior to 3.5.5 APOGEE PXC Series (P2 Ethernet): Versions prior to 2.8.20 TALON TC Series (BACnet): Versions prior to 3.5.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-17" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Email Connector" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-45936" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-45936 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Email Connector" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; The following versions of Siemens Mendix Email Connector; are affected: Mendix Email Connector: Versions prior to 2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-18" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE SC-600 Family" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-32205; CVE-2022-32206; CVE-2022-30065; CVE-2022-25032" ;
    icsa:cweNumber "CWE-416; CWE-787; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2022-25032,
        cve-res:CVE-2022-30065,
        cve-res:CVE-2022-32205,
        cve-res:CVE-2022-32206 ;
    icsa:hasCWE cwe-res:CWE-416,
        cwe-res:CWE-770,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE SC-600 Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; are affected: SCALANCE SC622-2C (6GK5622-2GS00-2AC2): Versions prior to 3.0 SCALANCE SC626-2C (6GK5626-2GS00-2AC2): Versions prior to 3.0 SCALANCE SC632-2C (6GK5632-2GS00-2AC2): Versions prior to 3.0 SCALANCE SC636-2C (6GK5636-2GS00-2AC2): Versions prior to 3.0 SCALANCE SC642-2C (6GK5642-2GS00-2AC2): Versions prior to 3.0 SCALANCE SC646-2C (6GK5646-2GS00-2AC2): Versions prior to 3.0.; The following versions of Siemens SCALANCE SC-600 Family" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-18" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-19 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-19" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM PAS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-43724; CVE-2022-43723; CVE-2022-43722" ;
    icsa:cweNumber "CWE-427; CWE-319; CWE-1287" ;
    icsa:hasCVE cve-res:CVE-2022-43722,
        cve-res:CVE-2022-43723,
        cve-res:CVE-2022-43724 ;
    icsa:hasCWE cwe-res:CWE-1287,
        cwe-res:CWE-319,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM PAS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following energy automation products for operating electrical substations: SICAM PAS/PQS: all versions prior to V7.0 SICAM PAS/PQS: all versions from and including 7.0 and prior to V8.06." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-19" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-20 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-20" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-41283; CVE-2022-41285; CVE-2022-41280; CVE-2022-41279; CVE-2022-41282; CVE-2022-41288; CVE-2022-45484; CVE-2022-41281; CVE-2022-41286; CVE-2022-41278; CVE-2022-41287; CVE-2022-41284" ;
    icsa:cweNumber "CWE-770; CWE-416; CWE-787; CWE-369; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2022-41278,
        cve-res:CVE-2022-41279,
        cve-res:CVE-2022-41280,
        cve-res:CVE-2022-41281,
        cve-res:CVE-2022-41282,
        cve-res:CVE-2022-41283,
        cve-res:CVE-2022-41284,
        cve-res:CVE-2022-41285,
        cve-res:CVE-2022-41286,
        cve-res:CVE-2022-41287,
        cve-res:CVE-2022-41288,
        cve-res:CVE-2022-45484 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-369,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-770,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization and JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following visualization and product lifecycle management tools: JT2Go: all versions Teamcenter Visualization V13.2: versions prior to V13.2.0.12 Teamcenter Visualization V13.3: versions prior to V13.3.0.8 Teamcenter Visualization V13.3: versions since and including V13.3.0.8 (CVE-2022-45484 only) Teamcenter Visualization V14.0: versions prior to V14.0.0.4 Teamcenter Visualization V14.0: versions since and including V14.0.0.4 (CVE-2022-45484 only) Teamcenter Visualization V14.1: versions prior to V14.1.0.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-20" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-349-21 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-349-21" ;
    dcterms:issued "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-200RNA Switch Devices" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2015-0288; CVE-2015-0285; CVE-2016-2105; CVE-2016-2106; CVE-2017-15906; CVE-2015-1789; CVE-2015-0207; CVE-2016-0800; CVE-2016-10011; CVE-2015-0286; CVE-2016-6303; CVE-2016-0702; CVE-2016-10010; CVE-2016-6302; CVE-2016-2177; CVE-2016-0703; CVE-2015-0209; CVE-2016-0777; CVE-2015-3195; CVE-2015-0289; CVE-2015-6565; CVE-2016-2179; CVE-2016-2180; CVE-2015-3193; CVE-2014-8176; CVE-2003-1562; CVE-2016-1908; CVE-2019-16905; CVE-2016-2176; CVE-2015-1792; CVE-2016-6304; CVE-2016-2183; CVE-2015-0293; CVE-2019-6109; CVE-2015-3196; CVE-2015-5600; CVE-2016-0798; CVE-2015-1791; CVE-2015-0292; CVE-2016-6210; CVE-2018-20685; CVE-2016-6305; CVE-2015-3197; CVE-2015-6563; CVE-2016-0799; CVE-2016-2109; CVE-2015-0291; CVE-2019-6111; CVE-2016-6307; CVE-2016-0797; CVE-2015-0208; CVE-2019-6110; CVE-2015-1788; CVE-2016-0778; CVE-2003-0190; CVE-2016-0705; CVE-2017-3735; CVE-2015-0287; CVE-2015-8325; CVE-2019-1552; CVE-2015-1787; CVE-2016-10012; CVE-2015-0290; CVE-2015-6564; CVE-2016-6515; CVE-2015-3194; CVE-2016-2108; CVE-2016-6308; CVE-2015-5352; CVE-2015-1790; CVE-2018-15473; CVE-2016-6306; CVE-2016-2182; CVE-2015-4000; CVE-2016-0701; CVE-2016-1907; CVE-2016-2178; CVE-2016-2181; CVE-2016-8858; CVE-2016-10009; CVE-2016-0704; CVE-2015-1794; CVE-2016-2107" ;
    icsa:cweNumber "CWE-732; CWE-22; CWE-200; CWE-287; CWE-426; CWE-787; CWE-401; CWE-838; CWE-264; CWE-190; CWE-295; CWE-116; CWE-125; CWE-203; CWE-400; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2003-0190,
        cve-res:CVE-2003-1562,
        cve-res:CVE-2014-8176,
        cve-res:CVE-2015-0207,
        cve-res:CVE-2015-0208,
        cve-res:CVE-2015-0209,
        cve-res:CVE-2015-0285,
        cve-res:CVE-2015-0286,
        cve-res:CVE-2015-0287,
        cve-res:CVE-2015-0288,
        cve-res:CVE-2015-0289,
        cve-res:CVE-2015-0290,
        cve-res:CVE-2015-0291,
        cve-res:CVE-2015-0292,
        cve-res:CVE-2015-0293,
        cve-res:CVE-2015-1787,
        cve-res:CVE-2015-1788,
        cve-res:CVE-2015-1789,
        cve-res:CVE-2015-1790,
        cve-res:CVE-2015-1791,
        cve-res:CVE-2015-1792,
        cve-res:CVE-2015-1794,
        cve-res:CVE-2015-3193,
        cve-res:CVE-2015-3194,
        cve-res:CVE-2015-3195,
        cve-res:CVE-2015-3196,
        cve-res:CVE-2015-3197,
        cve-res:CVE-2015-4000,
        cve-res:CVE-2015-5352,
        cve-res:CVE-2015-5600,
        cve-res:CVE-2015-6563,
        cve-res:CVE-2015-6564,
        cve-res:CVE-2015-6565,
        cve-res:CVE-2015-8325,
        cve-res:CVE-2016-0701,
        cve-res:CVE-2016-0702,
        cve-res:CVE-2016-0703,
        cve-res:CVE-2016-0704,
        cve-res:CVE-2016-0705,
        cve-res:CVE-2016-0777,
        cve-res:CVE-2016-0778,
        cve-res:CVE-2016-0797,
        cve-res:CVE-2016-0798,
        cve-res:CVE-2016-0799,
        cve-res:CVE-2016-0800,
        cve-res:CVE-2016-10009,
        cve-res:CVE-2016-10010,
        cve-res:CVE-2016-10011,
        cve-res:CVE-2016-10012,
        cve-res:CVE-2016-1907,
        cve-res:CVE-2016-1908,
        cve-res:CVE-2016-2105,
        cve-res:CVE-2016-2106,
        cve-res:CVE-2016-2107,
        cve-res:CVE-2016-2108,
        cve-res:CVE-2016-2109,
        cve-res:CVE-2016-2176,
        cve-res:CVE-2016-2177,
        cve-res:CVE-2016-2178,
        cve-res:CVE-2016-2179,
        cve-res:CVE-2016-2180,
        cve-res:CVE-2016-2181,
        cve-res:CVE-2016-2182,
        cve-res:CVE-2016-2183,
        cve-res:CVE-2016-6210,
        cve-res:CVE-2016-6302,
        cve-res:CVE-2016-6303,
        cve-res:CVE-2016-6304,
        cve-res:CVE-2016-6305,
        cve-res:CVE-2016-6306,
        cve-res:CVE-2016-6307,
        cve-res:CVE-2016-6308,
        cve-res:CVE-2016-6515,
        cve-res:CVE-2016-8858,
        cve-res:CVE-2017-15906,
        cve-res:CVE-2017-3735,
        cve-res:CVE-2018-15473,
        cve-res:CVE-2018-20685,
        cve-res:CVE-2019-1552,
        cve-res:CVE-2019-16905,
        cve-res:CVE-2019-6109,
        cve-res:CVE-2019-6110,
        cve-res:CVE-2019-6111 ;
    icsa:hasCWE cwe-res:CWE-116,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-200,
        cwe-res:CWE-203,
        cwe-res:CWE-22,
        cwe-res:CWE-264,
        cwe-res:CWE-287,
        cwe-res:CWE-295,
        cwe-res:CWE-400,
        cwe-res:CWE-401,
        cwe-res:CWE-426,
        cwe-res:CWE-732,
        cwe-res:CWE-787,
        cwe-res:CWE-838,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X-200RNA switch devices before V3.2.7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following industrial ethernet network access points are affected because they use OpenSSL and OpenSSH (which are affected by these vulnerabilities): SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2): All versions prior to V3.2.7 SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2): All versions prior to V3.2.7 SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3): All versions prior to V3.2.7 SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3): All versions prior to V3.2.7 SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3): All versions prior to V3.2.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-349-21" ;
    icsa:vendor "Siemens" ;
    icsa:year 2022 .

icsa-res:ICSA-22-354-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-354-01" ;
    dcterms:issued "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Tellus Lite V-Simulator" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3087; CVE-2022-3085" ;
    icsa:cweNumber "CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-3085,
        cve-res:CVE-2022-3087 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tellus Lite V-Simulator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Fuji Electric Tellus Lite V-Simulator”a remote monitoring and operation software”are affected: Versions 4.0.12.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-354-01" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-354-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-354-02" ;
    dcterms:issued "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation GuardLogix and ControlLogix controllers" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-3157" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-3157 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GuardLogix, ControlLogix, Compact Logix, and Compact GaurdLogix controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following controllers: CompactLogix 5370 Versions 20-33 Compact GuardLogix 5370 Versions 28-33 ControlLogix 5570 Versions 20-33 ControlLogix5570 redundancy Versions 20-33 GuardLogix 5570 Versions 20-33." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-354-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-354-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-354-03" ;
    dcterms:issued "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "ARC Informatique PcVue (Update A)" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems; Water and Wastewater Systems; Energy; Critical Manufacturing; Food and Agriculture" ;
    icsa:cveNumber "CVE-2022-4312; CVE-2022-4311" ;
    icsa:cweNumber "CWE-532; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2022-4311,
        cve-res:CVE-2022-4312 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PcVue" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: PcVue Versions 15 through 15.2.2 (CVE-2022-3411 only) --------- Begin Update A part 1 of 2 --------- PcVue Versions 8.10 through 15.2.3 (CVE-2022-3412 only) PcVue 12 products are only affected until Version 12.0.28 --------- End Update A part 1 of 2 ---------.; a supervisory control and data acquisition (SCADA) monitoring and control software; The following versions of PcVue" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-354-03" ;
    icsa:vendor "ARC Informatique" ;
    icsa:year 2022 .

icsa-res:ICSA-22-354-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-354-04" ;
    dcterms:issued "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation MicroLogix 1100 and 1400" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-46670; CVE-2022-3166" ;
    icsa:cweNumber "CWE-79; CWE-1021" ;
    icsa:hasCVE cve-res:CVE-2022-3166,
        cve-res:CVE-2022-46670 ;
    icsa:hasCWE cwe-res:CWE-1021,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroLogix 1100 and 1400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MicroLogix”a line of programmable logic controllers (PLCs)”are affected: MicroLogix 1100: all versions MicroLogix 1400 A: Versions 7.000 and prior MicroLogix 1400 B/C: Versions 21.007 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-354-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-354-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-354-05" ;
    dcterms:issued "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta 4G Router DX-3021" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-4616" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2022-4616 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "4G Router DX-3021" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta reports this vulnerability affects the following 4G Routers: DX-3021L9 versions prior to V1.24." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-354-05" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2022 .

icsa-res:ICSA-22-356-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-356-01" ;
    dcterms:issued "2022-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Priva TopControl Suite" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-3010" ;
    icsa:cweNumber "CWE-916" ;
    icsa:hasCVE cve-res:CVE-2022-3010 ;
    icsa:hasCWE cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TopControl Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following components of Priva TopControl Suite are affected: Bacnet: All versions prior to 8.7.8.0 Blue ID: All versions prior to 8.7.8.0 Compass: All versions prior to 8.7.8.0 Connect: All versions prior to 8.7.8.0 TPC: All versions prior to 8.7.8.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-356-01" ;
    icsa:vendor "Priva" ;
    icsa:year 2022 .

icsa-res:ICSA-22-356-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-356-02" ;
    dcterms:issued "2022-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Studio 5000 Logix Emulate" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-3156" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-3156 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Studio 5000 Logix Emulate" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Studio 5000 Logix Emulate are affected: Studio 5000 Logix Emulate v .20-33." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-356-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2022 .

icsa-res:ICSA-22-356-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-356-03" ;
    dcterms:issued "2022-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R, iQ-L Series and MELIPC Series (Update E)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-33324" ;
    icsa:cweNumber "CWE-404" ;
    icsa:hasCVE cve-res:CVE-2022-33324 ;
    icsa:hasCWE cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R, iQ-L Series and MELIPC Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "iQ-L series CPU module; Mitsubishi Electric reports this vulnerability affects the following MELSEC iQ-R; and MELIPC series: MELSEC iQ-R Series R00CPU: firmware versions 32 and prior MELSEC iQ-R Series R01CPU: firmware versions 32 and prior MELSEC iQ-R Series R02CPU: firmware versions 32 and prior MELSEC iQ-R Series R04(EN)CPU: firmware versions 65 and prior MELSEC iQ-R Series R08(EN)CPU: firmware versions 65 and prior MELSEC iQ-R Series R16(EN)CPU: firmware versions 65 and prior MELSEC iQ-R Series R32(EN)CPU: firmware versions 65 and prior MELSEC iQ-R Series R120(EN)CPU: firmware versions 65 and prior MELSEC iQ-R Series R08SFCPU: firmware versions 29 and prior MELSEC iQ-R Series R16SFCPU: firmware versions 29 and prior MELSEC iQ-R Series R32SFCPU: firmware versions 29 and prior MELSEC iQ-R Series R120SFCPU: firmware versions 29 and prior MELSEC iQ-R Series R08PSFCPU: firmware versions 08 and prior MELSEC iQ-R Series R16PSFCPU: firmware versions 08 and prior MELSEC iQ-R Series R32PSFCPU: firmware versions 08 and prior MELSEC iQ-R Series R120PSFCPU: firmware versions 08 and prior MELSEC iQ-R Series R12CCPU-V: firmware versions 17 and prior MELSEC iQ-L Series L04HCPU (sold in limited regions): firmware versions 05 and prior MELSEC iQ-L Series L08HCPU (sold in limited regions): firmware versions 05 and prior MELSEC iQ-L Series L16HCPU (sold in limited regions): firmware versions 05 and prior MELSEC iQ-L Series L32HCPU (sold in limited regions): firmware versions 05 and prior MELIPC Series MI5122-VW: firmware versions 07 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-356-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2022 .

icsa-res:ICSA-22-356-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-22-356-04" ;
    dcterms:issued "2022-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CX-Programmer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-43509" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-43509 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CX-Programmer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: CX-Programmer: Versions 9.78 and prior.; The following versions of CX-Programmer; part of a software automation suite" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-22-356-04" ;
    icsa:vendor "Omron" ;
    icsa:year 2022 .

icsa-res:ICSA-23-005-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-005-01" ;
    dcterms:issued "2023-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy UNEM" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-40342; CVE-2021-40341; CVE-2022-3929; CVE-2022-3927; CVE-2022-3928" ;
    icsa:cweNumber "CWE-319; CWE-321; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2021-40341,
        cve-res:CVE-2021-40342,
        cve-res:CVE-2022-3927,
        cve-res:CVE-2022-3928,
        cve-res:CVE-2022-3929 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-321,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UNEM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports these vulnerabilities affect the following UNEM products: UNEM R16A UNEM R15B UNEM R15A UNEM R14B UNEM R14A UNEM R11B UNEM R11A UNEM R10C UNEM R9C." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-005-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-005-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-005-02" ;
    dcterms:issued "2023-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy FOXMAN-UN" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-40342; CVE-2021-40341; CVE-2022-3929; CVE-2022-3927; CVE-2022-3928" ;
    icsa:cweNumber "CWE-1394; CWE-321; CWE-319; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2021-40341,
        cve-res:CVE-2021-40342,
        cve-res:CVE-2022-3927,
        cve-res:CVE-2022-3928,
        cve-res:CVE-2022-3929 ;
    icsa:hasCWE cwe-res:CWE-1394,
        cwe-res:CWE-319,
        cwe-res:CWE-321,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FOXMAN-UN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports these vulnerabilities affect the following FOXMAN-UN products: FOXMAN-UN R16A FOXMAN-UN R15B FOXMAN-UN R15A FOXMAN-UN R14B FOXMAN-UN R14A FOXMAN-UN R11B FOXMAN-UN R11A FOXMAN-UN R10C FOXMAN-UN R9C." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-005-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-005-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-005-03" ;
    dcterms:issued "2023-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Lumada Asset Performance Management" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-37434; CVE-2022-3602; CVE-2022-3786" ;
    icsa:cweNumber "CWE-787; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2022-3602,
        cve-res:CVE-2022-37434,
        cve-res:CVE-2022-3786 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lumada Asset Performance Management (APM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Lumada APM: Version 6.5.0.0 Lumada APM: Versions 6.1.0.0 through 6.4.0.0 (CVE-2022-37434 only).; a web-based asset monitoring software deployable as both a cloud service or as a local deployment; The following versions of Lumada Asset Performance Management (APM)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-005-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-010-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-010-01" ;
    dcterms:issued "2023-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Black Box KVM" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-4636" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2022-4636 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KVM Switches and Extenders" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a Keyboard/Video/Mouse switch and extender; are affected: Black Box KVM ACR1000A-R-R2: Firmware version v3.4.31307 Black Box KVM ACR1000A-T-R2: Firmware version v3.4.31307 Black Box KVM ACR1002A-T: Firmware version v3.4.31307 Black Box KVM ACR1002A-R: Firmware version v3.4.31307 Black Box KVM ACR1020A-T: Firmware version v3.4.31307.; The following models and versions of Black Box KVMs" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-010-01" ;
    icsa:vendor "Black Box" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-01" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sewio RTLS Studio" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-43483; CVE-2022-47395; CVE-2022-45127; CVE-2022-47917; CVE-2022-45444; CVE-2022-46733; CVE-2022-43455; CVE-2022-41989; CVE-2022-47911" ;
    icsa:cweNumber "CWE-352; CWE-79; CWE-787; CWE-20; CWE-78; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2022-41989,
        cve-res:CVE-2022-43455,
        cve-res:CVE-2022-43483,
        cve-res:CVE-2022-45127,
        cve-res:CVE-2022-45444,
        cve-res:CVE-2022-46733,
        cve-res:CVE-2022-47395,
        cve-res:CVE-2022-47911,
        cve-res:CVE-2022-47917 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-259,
        cwe-res:CWE-352,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTLS Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is affected: RTLS Studio: version 2.0.0 up to and including version 2.6.2; a Real-Time Location System (RTLS); The following version of Sewio's RTLS Studio" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-01" ;
    icsa:vendor "Sewio" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-02" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "RONDS Equipment Predictive Maintenance Solution" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-2893; CVE-2022-3091" ;
    icsa:cweNumber "CWE-22; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2022-2893,
        cve-res:CVE-2022-3091 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Equipment Predictive Maintenance (EPM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of RONDS EPM; an equipment predictive maintenance solution; is affected: v1.19.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-02" ;
    icsa:vendor "RONDS" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-03" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "InHand Networks InRouter" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing; Transportation Systems; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-22600; CVE-2022-22599; CVE-2022-22598; CVE-2022-22597; CVE-2022-22601" ;
    icsa:cweNumber "CWE-330; CWE-284; CWE-760; CWE-78; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-22597,
        cve-res:CVE-2022-22598,
        cve-res:CVE-2022-22599,
        cve-res:CVE-2022-22600,
        cve-res:CVE-2022-22601 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-319,
        cwe-res:CWE-330,
        cwe-res:CWE-760,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InRouter302, InRouter615" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an industrial router line; The following versions of InRouters; are affected: InRouter 302: All versions prior to IR302 V3.5.56 InRouter 615: All versions prior to InRouter6XX-S-V2.3.0.r5542" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-03" ;
    icsa:vendor "InHand Networks" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-04" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Panasonic Sanyo CCTV Network Camera" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2022-4621" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2022-4621 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sanyo CCTV Network Camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Panasonic Sanyo CCTV Network Camera are affected: VCC-HD5600P version 2.03-06 VDC-HD3300P version 2.03-08 VDC-HD3300P version 1.02-05 VCC-HD3300 version 2.03-02 VDC-HD3100P version 2.03-00 VCC-HD2100P version 2.03-02" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-04" ;
    icsa:vendor "Panasonic" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-05" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "SAUTER Controls Nova 200 - 220 Series (PLC 6)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-0052; CVE-2023-0053" ;
    icsa:cweNumber "CWE-306; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2023-0052,
        cve-res:CVE-2023-0053 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nova 200-220 Series (PLC 6)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a series of programmable logic controllers (PLCs); are affected: Nova 220 (EYK220F001) DDC with BACnet connection: Firmware version 3.3-006 and prior with BACnetstac version 4.2.1 and prior Nova 230 (EYK230F001) DDC with BACnet connection: Firmware version 3.3-006 and prior with BACnetstac version 4.2.1 and prior Nova 106 (EYK300F001) BACnet communication card: Firmware version 3.3-006 and prior with BACnetstac version 4.2.1 and prior moduNet300 (EY-AM300F001; The following firmware versions of SAUTER Controls Nova; EY-AM300F002): Firmware version 3.3-006 and prior with BACnetstac version 4.2.1 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-05" ;
    icsa:vendor "SAUTER Controls" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-06" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-36204" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2021-36204 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys ADS/ADX/OAS Servers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Metasys ADS/ADX/OAS Servers are affected: Metasys ADS/ADX/OAS Version 10.X: All versions prior to 10.1.6 Metasys ADS/ADX/OAS Version 11.X: All versions prior to 11.0.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-06" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-07" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Lumada APM" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-2155" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-2155 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lumada APM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports the following products are affected: Lumada APM - SaaS: Versions 6.0.0.0 to 6.4.220601.0 Lumada APM - On Premises: Versions 6.0.0.0.0 to 6.4.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-07" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-08" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens S7-1500 CPU devices" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-38773" ;
    icsa:cweNumber "CWE-1326" ;
    icsa:hasCVE cve-res:CVE-2022-38773 ;
    icsa:hasCWE cwe-res:CWE-1326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "S7-1500 CPU product family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following CPU products: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): All versions SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): All versions SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0): All versions SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0): All versions SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0): All versions SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0): All versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0): All versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0): All versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0): All versions SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0): All versions SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0): All versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0): All versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0): All versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0): All versions SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0): All versions SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0): All versions SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0): All versions SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0): All versions SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0): All versions SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0): All versions SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK00-0AB0): All versions SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK01-0AB0): All versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL00-0AB0): All versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0): All versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0): All versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL00-0AB0): All versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0): All versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0): All versions SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RL00-0AB0): All versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM00-0AB0): All versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0): All versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0): All versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM00-0AB0): All versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0): All versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0): All versions SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RM00-0AB0): All versions SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0): All versions SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0): All versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN00-0AB0): All versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0): All versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0): All versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN00-0AB0): All versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0): All versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0): All versions SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0): All versions SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0): All versions SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0): All versions SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0): All versions SIMATIC S7-1500 CPU 1517H-3 PN (6ES7517-3HP00-0AB0): All versions SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0): All versions SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0): All versions SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0): All versions SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): All versions SIMATIC S7-1500 CPU 1518-4F PN/DP (6ES7518-4FP00-0AB0): All versions SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): All versions SIMATIC S7-1500 CPU 1518HF-4 PN (6ES7518-4JP00-0AB0): All versions SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0): All versions SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0): All versions SIMATIC S7-1500 C" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-09" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix SAML Module" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-46823" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2022-46823 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix SAML" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Upgrade Track): Versions V3.3.0 and after up to V3.3.8; New Track): Versions V3.3.0 and after up to V3.3.9 Mendix SAML (Mendix 9 compatible; The following components from Siemens are affected: Mendix SAML (Mendix 8 compatible): Versions V2.3.0 and after up to V2.3.4 Mendix SAML (Mendix 9 compatible" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-10" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Automation License Manager" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-43513" ;
    icsa:cweNumber "CWE-22; CWE-73" ;
    icsa:hasCVE cve-res:CVE-2022-43513 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation License Manager (ALM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: Automation License Manager V5: All versions Automation License Manager V6: All versions prior to V6.0 SP9 Upd4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-012-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-012-11" ;
    dcterms:issued "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge before V2023 MP1" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-47967" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2022-47967 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Solid Edge are affected: All versions prior to V2023 MP1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-012-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-017-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-017-01" ;
    dcterms:issued "2023-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Proficy Historian" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-46660; CVE-2022-4673; CVE-2022-46331; CVE-2022-43494; CVE-2022-38469" ;
    icsa:cweNumber "CWE-434; CWE-284; CWE-261; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2022-38469,
        cve-res:CVE-2022-43494,
        cve-res:CVE-2022-46331,
        cve-res:CVE-2022-46660,
        cve-res:CVE-2022-4673 ;
    icsa:hasCWE cwe-res:CWE-261,
        cwe-res:CWE-284,
        cwe-res:CWE-288,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proficy Historian" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE Digital reports these vulnerabilities affect the following Proficy Historian product: Proficy Historian v7.0 and higher versions Not Affected: Other GE software offerings including GE Digital and Proficy Products not listed above." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-017-01" ;
    icsa:vendor "GE Digital" ;
    icsa:year 2023 .

icsa-res:ICSA-23-017-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-017-02" ;
    dcterms:issued "2023-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F, iQ-R Series (Update B)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-40267" ;
    icsa:cweNumber "CWE-337" ;
    icsa:hasCVE cve-res:CVE-2022-40267 ;
    icsa:hasCWE cwe-res:CWE-337 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F and iQ-R Series products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric MELSEC products are affected: MELSEC iQ-F Series with serial number 17X**** or later: FX5U-xMy/z x=32; FX5UC-32MT/DSS-TS; ESS: Versions 1.042 and prior FX5UJ-xMy/ES-A* x=24; FX5UC-32MR/DS-TS: Versions 1.280 and prior FX5UJ-xMy/z x=24; 64; z=ES; 40; 80; y=T; 96 y=T; 60; DSS: Versions 1.074 and prior FX5UC-xMy/z x=32; R: Versions 1.043 and prior FX5S-xMy/z x=30; R; DSS: Versions 1.280 and prior MELSEC iQ-F Series with serial number 179**** and prior: FX5U-xMy/z x=32; z=D; DSS: Versions 1.280 and prior FX5UC-xMy/z x=32; DS; ESS; ESS: Versions 1.003 and prior --------- Begin Update B Part 1 of 3 --------- MELSEC iQ-R Series R00/01/02CPU: Versions 33 and prior MELSEC iQ-R Series R04/08/16/32/120(EN)CPU: Versions 66 and prior --------- End Update B Part 1 of 3 --------- * These products are available in limited regions.; DSS: Versions 1.074 and prior MELSEC iQ-F Series FX5UC-32MT/DS-TS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-017-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-017-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-017-03" ;
    dcterms:issued "2023-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC INS" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1292; CVE-2022-32215; CVE-2022-2068; CVE-2022-45092; CVE-2022-2274; CVE-2022-2097; CVE-2022-45093; CVE-2022-32212; CVE-2022-45094; CVE-2022-32222; CVE-2022-35255; CVE-2022-35256; CVE-2022-32213" ;
    icsa:cweNumber "CWE-22; CWE-444; CWE-290; CWE-77; CWE-787; CWE-330; CWE-326; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-1292,
        cve-res:CVE-2022-2068,
        cve-res:CVE-2022-2097,
        cve-res:CVE-2022-2274,
        cve-res:CVE-2022-32212,
        cve-res:CVE-2022-32213,
        cve-res:CVE-2022-32215,
        cve-res:CVE-2022-32222,
        cve-res:CVE-2022-35255,
        cve-res:CVE-2022-35256,
        cve-res:CVE-2022-45092,
        cve-res:CVE-2022-45093,
        cve-res:CVE-2022-45094 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-290,
        cwe-res:CWE-326,
        cwe-res:CWE-330,
        cwe-res:CWE-444,
        cwe-res:CWE-77,
        cwe-res:CWE-78,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC INS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following network services application: SINEC INS: versions prior to V1.0 SP2 Update 1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-017-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-019-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-019-01" ;
    dcterms:issued "2023-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy PCU400" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-3602; CVE-2022-3786" ;
    icsa:cweNumber "CWE-1357" ;
    icsa:hasCVE cve-res:CVE-2022-3602,
        cve-res:CVE-2022-3786 ;
    icsa:hasCWE cwe-res:CWE-1357 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PCU400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: PCU400: Versions 9.3.0 and later up to but not including 9.3.8 PCULogger tool: Version 1.0.1.; a network manager and process communication unit; The following versions of PCU400" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-019-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-023-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-023-04" ;
    dcterms:issued "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Westermo Lynx 206-F2G" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-45735; CVE-2023-42765; CVE-2023-45222; CVE-2023-40544; CVE-2023-45227; CVE-2023-38579; CVE-2023-40143; CVE-2023-45213" ;
    icsa:cweNumber "CWE-94; CWE-352; CWE-79; CWE-942; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2023-38579,
        cve-res:CVE-2023-40143,
        cve-res:CVE-2023-40544,
        cve-res:CVE-2023-42765,
        cve-res:CVE-2023-45213,
        cve-res:CVE-2023-45222,
        cve-res:CVE-2023-45227,
        cve-res:CVE-2023-45735 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-79,
        cwe-res:CWE-94,
        cwe-res:CWE-942 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lynx 206-F2G" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Lynx: Model Version L206-F2G1 Lynx: Firmware Version 4.24.; a layer three industrial Ethernet switch; The following versions of Lynx 206-F2G" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-023-04" ;
    icsa:vendor "Westermo" ;
    icsa:year 2024 .

icsa-res:ICSA-23-024-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-024-01" ;
    dcterms:issued "2023-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "XINJE XD" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-34606; CVE-2021-34605" ;
    icsa:cweNumber "CWE-23; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2021-34605,
        cve-res:CVE-2021-34606 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XINJE XD Programing Tool" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of XINJE XD are affected: Version 3.5.1 and prior ." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-024-01" ;
    icsa:vendor "XINJE" ;
    icsa:year 2023 .

icsa-res:ICSA-23-024-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-024-02" ;
    dcterms:issued "2023-01-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "SOCOMEC MODULYS GP (UPDATE A)" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-0356" ;
    icsa:cweNumber "CWE-261" ;
    icsa:hasCVE cve-res:CVE-2023-0356 ;
    icsa:hasCWE cwe-res:CWE-261 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MODULYS GP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: MODULYS GP: Net Vision v7.20; The following versions of SOCOMEC MODULYS GP; a modular UPS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-024-02" ;
    icsa:vendor "Socomec" ;
    icsa:year 2023 .

icsa-res:ICSA-23-026-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-026-01" ;
    dcterms:issued "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft ScreenEditor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-4634" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-4634 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; are affected: CNCSoft: All versions prior to v1.01.34 Running ScreenEditor: All versions 1.01.5 and prior.; The following versions of CNCSoft" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-026-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-026-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-026-02" ;
    dcterms:issued "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Econolite EOS (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2023-0452; CVE-2023-0451" ;
    icsa:cweNumber "CWE-284; CWE-328" ;
    icsa:hasCVE cve-res:CVE-2023-0451,
        cve-res:CVE-2023-0452 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-328 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EOS" ;
    icsa:productDistribution "United States, Canada" ;
    icsa:productsAffected "a traffic control software; are affected: --------- Begin Update A Part 1 of 4 --------- EOS: Versions prior to 3.2.23 --------- End Update A Part 1 of 4 ---------.; The following versions of EOS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-026-02" ;
    icsa:vendor "Econolite" ;
    icsa:year 2023 .

icsa-res:ICSA-23-026-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-026-03" ;
    dcterms:issued "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "SnapOne Wattbox" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-22389; CVE-2023-23582; CVE-2023-24020; CVE-2023-22315" ;
    icsa:cweNumber "CWE-122; CWE-345; CWE-256; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2023-22315,
        cve-res:CVE-2023-22389,
        cve-res:CVE-2023-23582,
        cve-res:CVE-2023-24020 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-256,
        cwe-res:CWE-307,
        cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wattbox WB-300-IP -3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a surge protector; are affected: Wattbox WB-300-IP-3: versions WB10.9a17 and prior.; The following versions of Snap One Wattbox WB-300-IP-3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-026-03" ;
    icsa:vendor "Snap One" ;
    icsa:year 2023 .

icsa-res:ICSA-23-026-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-026-04" ;
    dcterms:issued "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sierra Wireless AirLink Router with ALEOS Software" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-46650; CVE-2022-46649" ;
    icsa:cweNumber "CWE-88; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2022-46649,
        cve-res:CVE-2022-46650 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AirLink Router with ALEOS Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RV50; RV55; LX 40; LX60) running ALEOS software: Versions prior to 4.16.0.; RV50x; Sierra Wireless reports the following versions of AirLink router with ALEOS software are affected: Airlink Router (ES450; GX450) running ALEOS software: Versions 4.9.7 and prior Airlink Router (MP70" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-026-04" ;
    icsa:vendor "Sierra Wireless" ;
    icsa:year 2023 .

icsa-res:ICSA-23-026-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-026-05" ;
    dcterms:issued "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELFA SD SQ series and F-series Robot Controllers" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-33323" ;
    icsa:cweNumber "CWE-489" ;
    icsa:hasCVE cve-res:CVE-2022-33323 ;
    icsa:hasCWE cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELFA SD/SQ series and F-series Robot Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports this vulnerability affects the following Robot Controllers: MELFA SD/SQ Series: firmware version S7x and prior MELFA SD/SQ Series: firmware version R7x and prior MELFA F-Series: firmware version S7x and prior MELFA F-Series: firmware version R7x and prior Note: The affected firmware version depends on the model name; see Mitsubishi Electric's publication for the specific model names and controller types." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-026-05" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-026-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-026-06" ;
    dcterms:issued "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation products using GoAhead Web Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2019-5096; CVE-2019-5097" ;
    icsa:cweNumber "CWE-835; CWE-416" ;
    icsa:hasCVE cve-res:CVE-2019-5096,
        cve-res:CVE-2019-5097 ;
    icsa:hasCWE cwe-res:CWE-416,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Products using GoAhead Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following products use a version of GoAhead web server vulnerable to both CVE-2019-5096 and CVE-2019-5097: 1732E-8CFGM8R/A: firmware version 1.012 1732E-IF4M12R/A (discontinued): firmware version 1.012 1732E-IR4IM12R/A: firmware version 1.012 1732E-IT4IM12R/A: firmware version 1.012 1732E-OF4M12R/A: firmware version 1.012 1732E-OB8M8SR/A: firmware version 1.013 1732E-IB8M8SOER: firmware version 1.012 1732E-8IOLM12R: firmware version 2.011 1747-AENTR: firmware version 2.002 1769-AENTR: firmware version 1.001 5069-AEN2TR: firmware version 3.011 1756-EN2TR/C: firmware versions up to and including 11.001 1756-EN2T/D: firmware versions up to and including 11.001 1756-EN2TSC/B (discontinued): firmware version 10.01 1756-EN2TSC/B: firmware version 10.01 1756-HIST1G/A (discontinued): firmware versions up to and including 3.054 1756-HIST2G/A(discontinued): firmware versions up to and including 3.054 1756-HIST2G/B: firmware versions up to and including 5.103 Rockwell Automation reports the following products use a version of GoAhead web server vulnerable to CVE-2019-5097: ControlLogix 5580 controllers: firmware version V28 - V32 GuardLogix 5580 controllers: firmware version V31 - V32 CompactLogix 5380 controllers: firmware version V28 - V32 Compact GuardLogix 5380 controllers: firmware version V31 - V32 CompactLogix 5480 controllers: firmware version V32 1756- EN2T/D: firmware version 11.001 1756-EN2TR/C: firmware version 11.001 1765 - EN3TR/B: firmware version 11.001 1756-EN2F/C: firmware version 11.001 1756-EN2TP/A: firmware version 11.001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-026-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-026-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-026-07" ;
    dcterms:issued "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Landis+Gyr E580" ;
    icsa:CVSSScore "3.9"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-3083" ;
    icsa:cweNumber "CWE-784" ;
    icsa:hasCVE cve-res:CVE-2022-3083 ;
    icsa:hasCWE cwe-res:CWE-784 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "E850 (ZMQ200)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of E850 (ZMQ200) are affected: E850 (ZMQ200): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-026-07" ;
    icsa:vendor "Landis+Gyr" ;
    icsa:year 2023 .

icsa-res:ICSA-23-031-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-031-01" ;
    dcterms:issued "2023-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DOPSoft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0123; CVE-2023-0124" ;
    icsa:cweNumber "CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-0123,
        cve-res:CVE-2023-0124 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: DOPSoft: versions 4.00.16.22 and prior.; The following versions of DOPSoft; a human machine interface (HMI) editing software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-031-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-033-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-033-01" ;
    dcterms:issued "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAScreen" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-0249; CVE-2023-0251; CVE-2023-0250" ;
    icsa:cweNumber "CWE-119; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-0249,
        cve-res:CVE-2023-0250,
        cve-res:CVE-2023-0251 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAScreen" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software configuration tool for Delta devices; The following versions of DIAScreen; are affected: DIAScreen: versions 1.2.1.23 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-033-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-033-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-033-02" ;
    dcterms:issued "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT2000 Series and GT SoftGOT2000" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-40268; CVE-2022-40269" ;
    icsa:cweNumber "CWE-1021; CWE-290" ;
    icsa:hasCVE cve-res:CVE-2022-40268,
        cve-res:CVE-2022-40269 ;
    icsa:hasCWE cwe-res:CWE-1021,
        cwe-res:CWE-290 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT Mobile Function on GOT2000 Series and GT SoftGOT2000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports these vulnerabilities affect the GOT Mobile Function on the following products: GOT2000 Series: GT27 model: GOT Mobile versions 01.14.000-01.47.000 GT25 model: GOT Mobile versions 01.14.000-01.47.000 GT SoftGOT2000: software versions 1.265B-1.285X." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-033-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-033-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-033-03" ;
    dcterms:issued "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baicells Nova" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2023-24508" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2023-24508 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nova" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Baicells reports this vulnerability affects the following Nova LTE TDD eNodeB devices with firmware through RTS/RTD 3.6.6: Nova 227 Nova 233 Nova 243 Nova 246." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-033-03" ;
    icsa:vendor "Baicells Technologies" ;
    icsa:year 2023 .

icsa-res:ICSA-23-033-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-033-04" ;
    dcterms:issued "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DVW-W02W2-E2" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-42139" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-42139 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DVW-W02W2-E2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: DVW-W02W2-E2: Version 2.42.; The following versions of DVW-W02W2-E2; an industrial ethernet router" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-033-04" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-033-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-033-05" ;
    dcterms:issued "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DX-2100-L1-CN" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-42140; CVE-2023-0432" ;
    icsa:cweNumber "CWE-79; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-42140,
        cve-res:CVE-2023-0432 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DX-2100-L1-CN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: DX-2100-L1-CN: Version 1.5.0.10.; an industrial ethernet router; The following versions of DX-2100-L1-CN" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-033-05" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-037-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-037-01" ;
    dcterms:issued "2023-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "EnOcean SmartServer" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2022-3089" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-3089 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SmartServer with i.LON Vision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following EnOcean Edge products are affected: EnOcean SmartServer: v2.2 SR8/SP8 (4.12.006) with i.LON Vision v2.2 SR8/SP8 (4.12.006)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-037-01" ;
    icsa:vendor "EnOcean Edge Inc (Subsidiary of EnOcean GmbH)" ;
    icsa:year 2023 .

icsa-res:ICSA-23-040-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-040-01" ;
    dcterms:issued "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "ControlByWeb X-400, X-600M" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-23553; CVE-2023-23551" ;
    icsa:cweNumber "CWE-94; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-23551,
        cve-res:CVE-2023-23553 ;
    icsa:hasCWE cwe-res:CWE-79,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "X-400, X-600M" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "web enabled I/O Controllers; The following versions of ControlByWeb X-400 and X-600M; are affected: X-400: All firmware versions prior to 2.8 X-600M: All firmware versions prior to 1.16.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-040-01" ;
    icsa:vendor "ControlByWeb" ;
    icsa:year 2023 .

icsa-res:ICSA-23-040-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-040-02" ;
    dcterms:issued "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "LS Electric XBC-DN32U" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-22806; CVE-2023-22805; CVE-2023-0102; CVE-2023-22803; CVE-2023-22807; CVE-2023-0103; CVE-2023-22804" ;
    icsa:cweNumber "CWE-306; CWE-788; CWE-284; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2023-0102,
        cve-res:CVE-2023-0103,
        cve-res:CVE-2023-22803,
        cve-res:CVE-2023-22804,
        cve-res:CVE-2023-22805,
        cve-res:CVE-2023-22806,
        cve-res:CVE-2023-22807 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-788 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XBC-DN32U" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a PLC performance module; is affected: XBC-DN32U: Operating System Version 01.80.; The following version of XBC-DN32U" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-040-02" ;
    icsa:vendor "LS ELECTRIC, LS Industrial Systems (LSIS) Co. Ltd" ;
    icsa:year 2023 .

icsa-res:ICSA-23-040-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-040-03" ;
    dcterms:issued "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls System Configuration Tool (SCT)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-21939; CVE-2022-21940" ;
    icsa:cweNumber "CWE-614; CWE-1004" ;
    icsa:hasCVE cve-res:CVE-2022-21939,
        cve-res:CVE-2022-21940 ;
    icsa:hasCWE cwe-res:CWE-1004,
        cwe-res:CWE-614 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "System Configuration Tool" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of System Configuration Tool (SCT) are affected: System Configuration Tool (SCT) version 14: Versions prior to 14.2.3 System Configuration Tool (SCT) version 15: Versions prior to 15.0.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-040-03" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-040-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-040-04" ;
    dcterms:issued "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape Envision RV" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0623; CVE-2023-0622; CVE-2023-0621" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-0621,
        cve-res:CVE-2023-0622,
        cve-res:CVE-2023-0623 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape Envision RV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Cscape Envision RV; a control system remote access management software; is affected: Cscape Envision RV: Version 4.60." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-040-04" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-045-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-045-01" ;
    dcterms:issued "2023-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Weintek EasyBuilder Pro cMT Series" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0104" ;
    icsa:cweNumber "CWE-29" ;
    icsa:hasCVE cve-res:CVE-2023-0104 ;
    icsa:hasCWE cwe-res:CWE-29 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EasyBuilder Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Weintek EasyBuilder Pro; are affected: v6.07.01 and prior v6.07.02.479 and prior v6.08.01.349 and prior.; a project management software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-045-01" ;
    icsa:vendor "Weintek" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-01" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-22846; CVE-2023-22321; CVE-2023-24560; CVE-2023-24550; CVE-2023-24559; CVE-2022-46347; CVE-2022-46346; CVE-2023-24565; CVE-2023-24549; CVE-2023-24553; CVE-2023-24556; CVE-2023-24554; CVE-2023-24566; CVE-2023-25140; CVE-2023-24563; CVE-2023-24555; CVE-2021-43391; CVE-2021-43336; CVE-2022-46345; CVE-2022-46349; CVE-2023-24557; CVE-2023-24551; CVE-2023-24558; CVE-2023-22295; CVE-2023-22669; CVE-2023-22670; CVE-2023-24561; CVE-2023-24581; CVE-2023-24552; CVE-2021-32936; CVE-2022-46348; CVE-2021-32948; CVE-2021-32938; CVE-2023-22354; CVE-2023-24564; CVE-2023-24562; CVE-2023-23579" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2021-32936,
        cve-res:CVE-2021-32938,
        cve-res:CVE-2021-32948,
        cve-res:CVE-2021-43336,
        cve-res:CVE-2021-43391,
        cve-res:CVE-2022-46345,
        cve-res:CVE-2022-46346,
        cve-res:CVE-2022-46347,
        cve-res:CVE-2022-46348,
        cve-res:CVE-2022-46349,
        cve-res:CVE-2023-22295,
        cve-res:CVE-2023-22321,
        cve-res:CVE-2023-22354,
        cve-res:CVE-2023-22669,
        cve-res:CVE-2023-22670,
        cve-res:CVE-2023-22846,
        cve-res:CVE-2023-23579,
        cve-res:CVE-2023-24549,
        cve-res:CVE-2023-24550,
        cve-res:CVE-2023-24551,
        cve-res:CVE-2023-24552,
        cve-res:CVE-2023-24553,
        cve-res:CVE-2023-24554,
        cve-res:CVE-2023-24555,
        cve-res:CVE-2023-24556,
        cve-res:CVE-2023-24557,
        cve-res:CVE-2023-24558,
        cve-res:CVE-2023-24559,
        cve-res:CVE-2023-24560,
        cve-res:CVE-2023-24561,
        cve-res:CVE-2023-24562,
        cve-res:CVE-2023-24563,
        cve-res:CVE-2023-24564,
        cve-res:CVE-2023-24565,
        cve-res:CVE-2023-24566,
        cve-res:CVE-2023-24581,
        cve-res:CVE-2023-25140 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect Solid Edge products. See SSA-491245 for more information on which specific vulnerabilities affect each of the following: Solid Edge SE2022: All versions Solid Edge SE2022: All versions prior to V2210 Update12 Solid Edge SE2023: All versions prior to V2023 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-02" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-200 IRT" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2007-5846" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2007-5846 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X200 IRT Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3): All versions prior to V5.5.0 SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3): All versions prior to V5.5.0 SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6): All versions prior to V5.5.0 SCALANCE X202-2IRT (6GK5202-2BB00-2BA3): All versions prior to V5.5.0 SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3): All versions prior to V5.5.0 SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6): All versions prior to V5.5.0 SCALANCE X204IRT (6GK5204-0BA00-2BA3): All versions prior to V5.5.0 SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6): All versions prior to V5.5.0 SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2): All versions prior to V5.5.0 SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2): All versions prior to V5.5.0 SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2): All versions prior to V5.5.0 SCALANCE XF204IRT (6GK5204-0BA00-2BF2): All versions prior to V5.5.0 SIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3): All versions prior to V5.5.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-03" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Brownfield Connectivity Client" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-1343; CVE-2022-1292; CVE-2022-1473; CVE-2022-1434" ;
    icsa:cweNumber "CWE-295; CWE-404; CWE-327; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-1292,
        cve-res:CVE-2022-1343,
        cve-res:CVE-2022-1434,
        cve-res:CVE-2022-1473 ;
    icsa:hasCWE cwe-res:CWE-295,
        cwe-res:CWE-327,
        cwe-res:CWE-404,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Brownfield Connectivity Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following Siemens Brownfield Connectivity Client products: Brownfield Connectivity Client: All versions prior to V2.15." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-04" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Brownfield Connectivity Gateway" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-24675; CVE-2021-44716; CVE-2022-28327; CVE-2021-41772; CVE-2022-24921; CVE-2021-41771; CVE-2021-44717; CVE-2022-27536" ;
    icsa:cweNumber "CWE-668; CWE-770; CWE-20; CWE-295; CWE-119; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-41771,
        cve-res:CVE-2021-41772,
        cve-res:CVE-2021-44716,
        cve-res:CVE-2021-44717,
        cve-res:CVE-2022-24675,
        cve-res:CVE-2022-24921,
        cve-res:CVE-2022-27536,
        cve-res:CVE-2022-28327 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20,
        cwe-res:CWE-295,
        cwe-res:CWE-400,
        cwe-res:CWE-668,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Brownfield Connectivity”Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following Brownfield Connectivity”Gateway products: Brownfield Connectivity”Gateway: all versions prior to V1.10 Brownfield Connectivity”Gateway: V1.10.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-05" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-31808" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-31808 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass integrated AC5100, AC5102, AC5200, ACC-AP, Granta-MK3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ACC-4; ACC-32): All versions SiPass integrated ACC-AP: All versions prior to V2.85.43 SiPass integrated Granta-MK3 (ACC-GRANTA): All versions.; ACC-8; ACC-16; The following software from Siemens is affected: SiPass integrated AC5100 (ACC): All versions SiPass integrated AC5102 (ACC-G2): All versions prior to V2.85.44 SiPass integrated AC5200 (ACC-Lite" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-06" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-39157; CVE-2022-43397" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-39157,
        cve-res:CVE-2022-43397 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: Simcenter Femap: All versions prior to V2023.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-07" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Project Server" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-35868" ;
    icsa:cweNumber "CWE-426" ;
    icsa:hasCVE cve-res:CVE-2022-35868 ;
    icsa:hasCWE cwe-res:CWE-426 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIA Project-Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: TIA Multiuser Server V14: All versions TIA Multiuser Server V15: All versions prior to V15.1 Update 8 TIA Project-Server: All versions prior to V1.1 TIA Project-Server V16: All versions TIA Project-Server V17: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-08" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-33984; CVE-2022-30774; CVE-2022-33908; CVE-2022-31243; CVE-2022-33907; CVE-2022-33906; CVE-2022-33982" ;
    icsa:cweNumber "CWE-367" ;
    icsa:hasCVE cve-res:CVE-2022-30774,
        cve-res:CVE-2022-31243,
        cve-res:CVE-2022-33906,
        cve-res:CVE-2022-33907,
        cve-res:CVE-2022-33908,
        cve-res:CVE-2022-33982,
        cve-res:CVE-2022-33984 ;
    icsa:hasCWE cwe-res:CWE-367 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808 Product Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: RUGGEDCOM APE1808 ADM (6GK6015-0AL20-0GL0): All versions RUGGEDCOM APE1808 ADM CC (6GK6015-0AL20-0GL1): All versions RUGGEDCOM APE1808 CKP (6GK6015-0AL20-0GK0): All versions RUGGEDCOM APE1808 CKP CC (6GK6015-0AL20-0GK1): All versions RUGGEDCOM APE1808 CLOUDCONNECT (6GK6015-0AL20-0GM0): All versions RUGGEDCOM APE1808 CLOUDCONNECT CC (6GK6015-0AL20-0GM1): All versions RUGGEDCOM APE1808 ELAN (6GK6015-0AL20-0GP0): All versions RUGGEDCOM APE1808 ELAN CC (6GK6015-0AL20-0GP1): All versions RUGGEDCOM APE1808 SAM-L (6GK6015-0AL20-0GN0): All versions RUGGEDCOM APE1808 SAM-L CC (6GK6015-0AL20-0GN1): All versions RUGGEDCOM APE1808CLA-P (6GK6015-0AL20-1AA0): All versions RUGGEDCOM APE1808CLA-P CC (6GK6015-0AL20-1AA1): All versions RUGGEDCOM APE1808CLA-S1 (6GK6015-0AL20-1AB0): All versions RUGGEDCOM APE1808CLA-S1 CC (6GK6015-0AL20-1AB1): All versions RUGGEDCOM APE1808CLA-S3 (6GK6015-0AL20-1AD0): All versions RUGGEDCOM APE1808CLA-S3 CC (6GK6015-0AL20-1AD1): All versions RUGGEDCOM APE1808CLA-S5 (6GK6015-0AL20-1AF0): All versions RUGGEDCOM APE1808CLA-S5 CC (6GK6015-0AL20-1AF1): All versions RUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0): All versions RUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1): All versions RUGGEDCOM APE1808W10 (6GK6015-0AL20-0GJ0): All versions RUGGEDCOM APE1808W10 CC (6GK6015-0AL20-0GJ1): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-09" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Industrial Products" ;
    icsa:CVSSScore "7.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-21198" ;
    icsa:cweNumber "CWE-367" ;
    icsa:hasCVE cve-res:CVE-2022-21198 ;
    icsa:hasCWE cwe-res:CWE-367 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC industrial products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SIMATIC Field PG M5: All versions SIMATIC Field PG M6: All versions SIMATIC IPC BX-39A: All versions SIMATIC IPC427E: All versions SIMATIC IPC477E: All versions SIMATIC IPC477E Pro: All versions SIMATIC IPC627E: All versions SIMATIC IPC647E: All versions SIMATIC IPC677E: All versions SIMATIC IPC847E: All versions SIMATIC ITP1000: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-10" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-24482" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2023-24482 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens software is affected: COMOS V10.2: All versions COMOS V10.3.3.1: Versions prior to V10.3.3.1.45 COMOS V10.3.3.2: Versions prior to V10.3.3.2.33 COMOS V10.3.3.3: Versions prior to V10.3.3.3.9 COMOS V10.3.3.4: Versions prior to V10.3.3.4.6 COMOS V10.4.0.0: Versions prior to V10.4.0.0.31 COMOS V10.4.1.0: Versions prior to V10.4.1.0.32 COMOS V10.4.2.0: Versions prior to V10.4.2.0.25." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-11" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-23835" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2023-23835 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Applications" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens software is affected: Mendix Applications using Mendix 7: All versions prior to V7.23.34 Mendix Applications using Mendix 8: All versions prior to V8.18.23 Mendix Applications using Mendix 9: All versions prior to V9.22.0 Mendix Applications using Mendix 9 (V9.12): All versions prior to V9.12.10 Mendix Applications using Mendix 9 (V9.18): All versions prior to V9.18.4 Mendix Applications using Mendix 9 (V9.6): All versions prior to V9.6.15." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-12" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT Open, JT Utilities, and Parasolid" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-25140; CVE-2022-47936; CVE-2022-47977" ;
    icsa:cweNumber "CWE-119; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-47936,
        cve-res:CVE-2022-47977,
        cve-res:CVE-2023-25140 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT Open Toolkit, JT Utilities, and Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2022-47977) JT Utilities: All versions prior to V13.2.3.0 (only affected by CVE-2022-47936; CVE-2022-47977) Parasolid V34.0: All versions prior to V34.0.252 (only affected by CVE-2022-47936) Parasolid V34.0: All versions prior to V34.0.254 (only affected by CVE-2022-25140) Parasolid V34.1: All versions prior to V34.1.242 (only affected by CVE-2022-47936; CVE-2023-25140) Parasolid V35.0: All versions prior to V35.0.170 (only affected by CVE-2022-47936; CVE-2023-25140).; The following Siemens software is affected: JT Open: All versions prior to V11.2.3.0 (only affected by CVE-2022-47936; CVE-2023-25140) Parasolid V35.1: All versions prior to V35.1.150 (only affected by CVE-2022-47936" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-047-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-047-13" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sub-IoT DASH 7 Alliance Protocol" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Open-source" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0847" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-0847 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DASH 7 Alliance Protocol stack implementation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Sub-IoT DASH 7 Alliance protocol implementation: All versions prior to 0.5.0.; sub-GHz Internet of Things (IoT) communication protocol; The following versions of the Sub-IoT implementation of the Dash7 Alliance protocol; a low power" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-047-13" ;
    icsa:vendor "Sub-IoT project" ;
    icsa:year 2023 .

icsa-res:ICSA-23-052-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-052-01" ;
    dcterms:issued "2023-02-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSOFT iQ AppPortal" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-31813; CVE-2022-26377" ;
    icsa:cweNumber "CWE-345; CWE-444" ;
    icsa:hasCVE cve-res:CVE-2022-26377,
        cve-res:CVE-2022-31813 ;
    icsa:hasCWE cwe-res:CWE-345,
        cwe-res:CWE-444 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSOFT iQ AppPortal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric products and versions are affected: MELSOFT iQ AppPortal (SW1DND-IQAPL-M): v1.00A to 1.29F." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-052-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-054-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-054-01" ;
    dcterms:issued "2023-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC ThingWorx Edge" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0754; CVE-2023-0755" ;
    icsa:cweNumber "CWE-190; CWE-129" ;
    icsa:hasCVE cve-res:CVE-2023-0754,
        cve-res:CVE-2023-0755 ;
    icsa:hasCWE cwe-res:CWE-129,
        cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThingWorx Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following components of PTC ThingWorx are affected: ThingWorx Edge C-SDK: v2.2.12.1052 or lower .NET-SDK: v5.8.4.971 or lower ThingWorx Edge MicroServer (EMS): v5.4.10.0 or lower Kepware KEPServerEX: v6.12 or lower ThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity): v6.12 or lower ThingWorx Industrial Connectivity: All versions ThingWorx Kepware Edge: v1.5 or lower Rockwell Automation KEPServer Enterprise: v6.12 or lower GE Digital Industrial Gateway Server: v7.612 or lower." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-054-01" ;
    icsa:vendor "PTC" ;
    icsa:year 2023 .

icsa-res:ICSA-23-059-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-059-01" ;
    dcterms:issued "2023-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Gateway Station" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-25692; CVE-2022-0778" ;
    icsa:cweNumber "CWE-835; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2020-25692,
        cve-res:CVE-2022-0778 ;
    icsa:hasCWE cwe-res:CWE-476,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Gateway Station (GWS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports these vulnerabilities affect open-source software (OpenLDAP and OpenSSL) used by the following Gateway Station (GWS) versions: GWS 2.0.0.0 GWS 2.1.0.0 GWS 2.2.0.0 GWS 2.3.0.0 GWS 2.4.0.0 GWS 3.0.0.0 GWS 3.1.0.0 GWS 3.2.0.0 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-059-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-059-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-059-02" ;
    dcterms:issued "2023-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Gateway Station" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-2277; CVE-2022-29922; CVE-2022-1778" ;
    icsa:cweNumber "CWE-20; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2022-1778,
        cve-res:CVE-2022-2277,
        cve-res:CVE-2022-29922 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Gateway Station (GWS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports these vulnerabilities affect the following Gateway Station (GWS) versions: GWS 3.0.0.0 GWS 3.1.0.0 GWS 3.2.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-059-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-061-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-061-01" ;
    dcterms:issued "2023-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0457" ;
    icsa:cweNumber "CWE-256" ;
    icsa:hasCVE cve-res:CVE-2023-0457 ;
    icsa:hasCWE cwe-res:CWE-256 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F, iQ-R, Q, and L series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Q04/06/10/13/20/26/50/100UDEHCPU: All versions MELSEC-Q Q03/04/06/13/26UDVCPU: All versions MELSEC-Q Q04/06/13/26UDPVCPU: All versions MELSEC-Q QJ71E71-100: All versions MELSEC-L L02/06/26CPU(-P); --------- Begin Update A Part 2 of 4 --------- The following Mitsubishi Electric MELSEC products are affected: MELSEC iQ-F FX5U(C) CPU modules: All models; all versions MELSEC iQ-F FX5UJ CPU modules: All models; all versions MELSEC iQ-F FX5-ENET: All versions MELSEC iQ-F FX5-ENET/IP: All versions MELSEC iQ-R R00/01/02CPU: All versions MELSEC iQ-R R04/08/16/32/120(EN)CPU: All versions MELSEC iQ-R R08/16/32/120SFCPU: All versions MELSEC iQ-R R08/16/32/120PCPU: All versions MELSEC iQ-R R08/16/32/120PSFCPU: All versions MELSEC iQ-R RJ71EN71: All versions MELSEC iQ-R R12CCPU-V: All versions MELSEC-Q Q03UDECPU; L26CPU-(P)BT: All versions MELSEC-L LJ71E71-100: All versions --------- End Update A Part 2 of 4 ---------.; all versions MELSEC iQ-F FX5S CPU modules: All models" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-061-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-061-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-061-02" ;
    dcterms:issued "2023-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baicells Nova" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2023-0776" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2023-0776 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Baicells reports this vulnerability affects the following LTE TDD eNodeB devices with firmware versions through QRTB 2.12.7: Nova 436Q Nova 430E Nova 430I Neutrino 430." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-061-02" ;
    icsa:vendor "Baicells Technologies" ;
    icsa:year 2023 .

icsa-res:ICSA-23-061-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-061-03" ;
    dcterms:issued "2023-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rittal CMC III Access systems" ;
    icsa:CVSSScore "4.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2022-40633" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-40633 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CMC III" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rittal reports this vulnerability affects the following control cabinet locks: CMC III." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-061-03" ;
    icsa:vendor "Rittal" ;
    icsa:year 2023 .

icsa-res:ICSA-23-068-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-068-01" ;
    dcterms:issued "2023-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Akuvox E11 Publication" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2023-0345; CVE-2023-0351; CVE-2023-0352; CVE-2023-0354; CVE-2023-0344; CVE-2023-0350; CVE-2023-0353; CVE-2023-0346; CVE-2023-0348; CVE-2023-0355; CVE-2023-0347; CVE-2023-0349; CVE-2023-0343" ;
    icsa:cweNumber "CWE-94; CWE-329; CWE-862; CWE-912; CWE-200; CWE-287; CWE-306; CWE-640; CWE-321; CWE-284; CWE-257; CWE-646; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2023-0343,
        cve-res:CVE-2023-0344,
        cve-res:CVE-2023-0345,
        cve-res:CVE-2023-0346,
        cve-res:CVE-2023-0347,
        cve-res:CVE-2023-0348,
        cve-res:CVE-2023-0349,
        cve-res:CVE-2023-0350,
        cve-res:CVE-2023-0351,
        cve-res:CVE-2023-0352,
        cve-res:CVE-2023-0353,
        cve-res:CVE-2023-0354,
        cve-res:CVE-2023-0355 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-257,
        cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-306,
        cwe-res:CWE-321,
        cwe-res:CWE-329,
        cwe-res:CWE-640,
        cwe-res:CWE-646,
        cwe-res:CWE-798,
        cwe-res:CWE-862,
        cwe-res:CWE-912,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "E11" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a doorbell camera phone; The following versions of Akuvox E11; are affected: E11: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-068-01" ;
    icsa:vendor "Akuvox" ;
    icsa:year 2023 .

icsa-res:ICSA-23-068-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-068-02" ;
    dcterms:issued "2023-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "B&R Systems Diagnostics Manager" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2022-4286" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2022-4286 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Systems Diagnostics Manager (SDM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions B&R System Diagnostics Manager; are affected: System Diagnostics Manager: runtime versions 3.00 and later System Diagnostics Manager: runtime versions C4.93 and prior.; used to diagnose B&R controllers" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-068-02" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2023 .

icsa-res:ICSA-23-068-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-068-03" ;
    dcterms:issued "2023-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Ability Symphony Plus" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater" ;
    icsa:cveNumber "CVE-2023-0228" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-0228 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ability Symphony Plus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports this vulnerability affects the following Ability Symphony Plus products: S+ Operations 3.3 SP2 (part of SPR1 2023.0) S+ Operations 3.3 SP1 and earlier 3.x versions S+ Operations 2.2 S+ Operations 2.1 SP2 and earlier 2.x versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-068-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2023 .

icsa-res:ICSA-23-068-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-068-04" ;
    dcterms:issued "2023-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "STEP Tools Third-Party" ;
    icsa:CVSSScore "2.2"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0973" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2023-0973 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "STEPTools ifcmesh library" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of STEPTools are affected: STEPTools v18SP1 ifcmesh library (v18.1)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-068-04" ;
    icsa:vendor "Step Tools, Inc" ;
    icsa:year 2023 .

icsa-res:ICSA-23-068-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-068-05" ;
    dcterms:issued "2023-02-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Relion 670, 650 and SAM600-IO Series (Update B)" ;
    icsa:CVSSScore "4.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-3864" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2022-3864 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy Relion 670, 650 and SAM600-IO Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Relion 670 series version 2.2.3 revisions up to 2.2.3.6; Relion 670 series version 2.2.2 revisions up to 2.2.2.5; SAM600-IO series version 2.2.1 revisions up to 2.2.1.8; Relion 650 series version 2.2.4 revisions up to 2.2.4.3; Relion 670 series version 2.2.1 revisions up to 2.2.1.8; Relion 650 series version 2.2.5 revisions up to 2.2.5.5; Relion 670 series version 2.2.4 revisions up to 2.2.4.3; Relion 670 series version 2.2.5 revisions up to 2.2.5.5; Relion 670 series version 2.2.0 all revisions; Relion 650 series version 2.2.0 all revisions; Relion 650 series version 2.2.1 revisions up to 2.2.1.8" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-068-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-073-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-073-01" ;
    dcterms:issued "2023-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CJ1m PLC" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0811" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2023-0811 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CJ1M PLC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a programmable logic controller; are affected: SYSMAC CJ-series CJ2H-CPU6 -EIP: All versions CJ2H-CPU6 : All versions CJ2M-CPU : All versions CJ1G-CPU P: All versions SYSMAC CS-series CS1H-CPU H: All versions CS1G-CPU H: All versions CS1D-CPU HA: All versions CS1D-CPU H: All versions CS1D-CPU SA: All versions CS1D-CPU S: All versions CS1D-CPU P: All versions SYSMAC CP-series CP2E-E D - : All versions CP2E-S D - All versions CP2E-N D - : All versions CP1H-X40D - : All versions CP1H-XA40D - : All versions CP1H-Y20DT-D: All versions CP1L-EL20D - : All versions CP1L-EM D - : All versions CP1L-L D - : All versions CP1L-M D - : All versions CP1E-E D - : All versions CP1E-NA D - : All versions.; The following components of Omron CJ1M" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-073-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2023 .

icsa-res:ICSA-23-073-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-073-02" ;
    dcterms:issued "2023-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Autodesk FBX SDK" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-41304; CVE-2022-41303; CVE-2022-41302" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-41302,
        cve-res:CVE-2022-41303,
        cve-res:CVE-2022-41304 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FBX SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the affected products are affected: Autodesk FBX SDK versions 2020 and prior Luxion KeyShot version 11.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-073-02" ;
    icsa:vendor "Autodesk" ;
    icsa:year 2023 .

icsa-res:ICSA-23-073-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-073-03" ;
    dcterms:issued "2023-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE iFIX" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0598" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2023-0598 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iFIX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: GE Digital Proficy iFIX 2022 GE Digital Proficy iFIX v6.1 GE Digital Proficy iFIX v6.5.; a human machine interface (HMI) supervisory control and data acquisition (SCADA) software; The following components of iFIX" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-073-03" ;
    icsa:vendor "GE Digital" ;
    icsa:year 2023 .

icsa-res:ICSA-23-073-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-073-04" ;
    dcterms:issued "2023-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Plant SCADA and AVEVA Telemetry Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-1256" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2023-1256 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA Plant SCADA and AVEVA Telemetry Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA Plant SCADA 2020R2 Update 10 and all prior versions. AVEVA Telemetry Server 2020 R2 SP1 and all prior versions.; The following versions of AVEVA Plant SCADA and AVEVA Telemetry Server are affected: AVEVA Plant SCADA 2023" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-073-04" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2023 .

icsa-res:ICSA-23-075-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-075-01" ;
    dcterms:issued "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE, RUGGEDCOM Third-Party" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1516; CVE-2022-32206; CVE-2022-1652; CVE-2021-42376; CVE-2021-42384; CVE-2022-30594; CVE-2021-42382; CVE-2022-23040; CVE-2021-4149; CVE-2021-42375; CVE-2022-1304; CVE-2022-36879; CVE-2022-23038; CVE-2022-0002; CVE-2022-1343; CVE-2022-26490; CVE-2022-36946; CVE-2022-0001; CVE-2022-2639; CVE-2022-23039; CVE-2021-42383; CVE-2022-1353; CVE-2022-0547; CVE-2022-23036; CVE-2022-32205; CVE-2022-35252; CVE-2022-2380; CVE-2022-23041; CVE-2022-1199; CVE-2022-33981; CVE-2021-42385; CVE-2022-1473; CVE-2022-23042; CVE-2022-1292; CVE-2022-2588; CVE-2022-28390; CVE-2022-32208; CVE-2022-1974; CVE-2022-1016; CVE-2021-4238; CVE-2022-0494; CVE-2022-32296; CVE-2022-1734; CVE-2022-28356; CVE-2019-1125; CVE-2021-42378; CVE-2021-42379; CVE-2021-42381; CVE-2018-25032; CVE-2022-23037; CVE-2022-20158; CVE-2022-32207; CVE-2022-30065; CVE-2021-42377; CVE-2022-23308; CVE-2021-4034; CVE-2021-42374; CVE-2022-1198; CVE-2021-42380; CVE-2022-32981; CVE-2022-1975; CVE-2021-26401; CVE-2021-42373; CVE-2022-1011; CVE-2022-1729" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-276; CWE-476; CWE-404; CWE-200; CWE-763; CWE-770; CWE-20; CWE-362; CWE-120; CWE-787; CWE-1286; CWE-78; CWE-203; CWE-863; CWE-287; CWE-191; CWE-667; CWE-248; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-25032,
        cve-res:CVE-2019-1125,
        cve-res:CVE-2021-26401,
        cve-res:CVE-2021-4034,
        cve-res:CVE-2021-4149,
        cve-res:CVE-2021-42373,
        cve-res:CVE-2021-42374,
        cve-res:CVE-2021-42375,
        cve-res:CVE-2021-42376,
        cve-res:CVE-2021-42377,
        cve-res:CVE-2021-42378,
        cve-res:CVE-2021-42379,
        cve-res:CVE-2021-4238,
        cve-res:CVE-2021-42380,
        cve-res:CVE-2021-42381,
        cve-res:CVE-2021-42382,
        cve-res:CVE-2021-42383,
        cve-res:CVE-2021-42384,
        cve-res:CVE-2021-42385,
        cve-res:CVE-2022-0001,
        cve-res:CVE-2022-0002,
        cve-res:CVE-2022-0494,
        cve-res:CVE-2022-0547,
        cve-res:CVE-2022-1011,
        cve-res:CVE-2022-1016,
        cve-res:CVE-2022-1198,
        cve-res:CVE-2022-1199,
        cve-res:CVE-2022-1292,
        cve-res:CVE-2022-1304,
        cve-res:CVE-2022-1343,
        cve-res:CVE-2022-1353,
        cve-res:CVE-2022-1473,
        cve-res:CVE-2022-1516,
        cve-res:CVE-2022-1652,
        cve-res:CVE-2022-1729,
        cve-res:CVE-2022-1734,
        cve-res:CVE-2022-1974,
        cve-res:CVE-2022-1975,
        cve-res:CVE-2022-20158,
        cve-res:CVE-2022-23036,
        cve-res:CVE-2022-23037,
        cve-res:CVE-2022-23038,
        cve-res:CVE-2022-23039,
        cve-res:CVE-2022-23040,
        cve-res:CVE-2022-23041,
        cve-res:CVE-2022-23042,
        cve-res:CVE-2022-23308,
        cve-res:CVE-2022-2380,
        cve-res:CVE-2022-2588,
        cve-res:CVE-2022-2639,
        cve-res:CVE-2022-26490,
        cve-res:CVE-2022-28356,
        cve-res:CVE-2022-28390,
        cve-res:CVE-2022-30065,
        cve-res:CVE-2022-30594,
        cve-res:CVE-2022-32205,
        cve-res:CVE-2022-32206,
        cve-res:CVE-2022-32207,
        cve-res:CVE-2022-32208,
        cve-res:CVE-2022-32296,
        cve-res:CVE-2022-32981,
        cve-res:CVE-2022-33981,
        cve-res:CVE-2022-35252,
        cve-res:CVE-2022-36879,
        cve-res:CVE-2022-36946 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-1286,
        cwe-res:CWE-191,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-203,
        cwe-res:CWE-248,
        cwe-res:CWE-276,
        cwe-res:CWE-287,
        cwe-res:CWE-295,
        cwe-res:CWE-362,
        cwe-res:CWE-404,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-667,
        cwe-res:CWE-763,
        cwe-res:CWE-770,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Busybox Applet affecting SCALANCE and RUGGEDCOM products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions prior to v7.2 RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions prior to v7.2 SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions prior to v7.2 SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions prior to v7.2 SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions prior to v7.2 SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions prior to v7.2 SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions prior to v7.2 SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions prior to v7.2 SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions prior to v7.2 SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions prior to v7.2 SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2): All versions prior to v7.2 SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions prior to v7.2 SCALANCE M876-4 (6GK5876-4AA10-2BA2): All versions prior to v7.2 SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions prior to v7.2 SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions prior to v7.2 SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): All versions prior to v7.2 SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions prior to v7.2 SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions prior to v7.2 SCALANCE S615 (6GK5615-0AA00-2AA2): All versions prior to v7.2 SCALANCE S615 EEC (6GK5615-0AA01-2AA2): All versions prior to v7.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-075-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-075-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-075-02" ;
    dcterms:issued "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM CROSSBOW V5.3" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-27462; CVE-2023-27463" ;
    icsa:cweNumber "CWE-862; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2023-27462,
        cve-res:CVE-2023-27463 ;
    icsa:hasCWE cwe-res:CWE-862,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM CROSSBOW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: Siemens RUGGEDCOM CROSSBOW: All versions prior to V5.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-075-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-075-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-075-03" ;
    dcterms:issued "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM CROSSBOW V5.2" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-27310; CVE-2023-27309" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2023-27309,
        cve-res:CVE-2023-27310 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM CROSSBOW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: Siemens RUGGEDCOM CROSSBOW: All versions prior to V5.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-075-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-075-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-075-04" ;
    dcterms:issued "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D Devices" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0215; CVE-2022-4304; CVE-2022-4450; CVE-2023-0286" ;
    icsa:cweNumber "CWE-416; CWE-20; CWE-415; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-326,
        cwe-res:CWE-415,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SCALANCE W1750D (JP) (6GK5750-2HX01-1AD0): All versions SCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0): All versions SCALANCE W1750D (USA) (6GK5750-2HX01-1AB0): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-075-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-075-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-075-05" ;
    dcterms:issued "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix SAML Module" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-25957" ;
    icsa:cweNumber "CWE-303" ;
    icsa:hasCVE cve-res:CVE-2023-25957 ;
    icsa:hasCWE cwe-res:CWE-303 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix SAML Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "New Track): Versions 3.1.9 to 3.2.5 Mendix SAML (Mendix 9 compatible; The following software from Siemens is affected: Mendix SAML (Mendix 7 compatible): Versions 1.16.4 to 1.17.2 Mendix SAML (Mendix 8 compatible): Versions 2.2.0 to 2.2.3 Mendix SAML (Mendix 9 compatible; Upgrade Track): Version 3.1.9 to 3.2.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-075-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-075-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-075-06" ;
    dcterms:issued "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell OneWireless Wireless Device Manager" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-46361; CVE-2022-43485; CVE-2022-4240" ;
    icsa:cweNumber "CWE-306; CWE-77; CWE-330" ;
    icsa:hasCVE cve-res:CVE-2022-4240,
        cve-res:CVE-2022-43485,
        cve-res:CVE-2022-46361 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-330,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OneWireless Wireless Device Manager (WDM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Honeywell reports these vulnerabilities affect the following versions of OneWireless WDM: All versions up to R322.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-075-06" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2023 .

icsa-res:ICSA-23-075-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-075-07" ;
    dcterms:issued "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Modbus TCP AOI Server" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0027" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2023-0027 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modbus TCP Server Add-On Instruction (AOI)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Modbus TCP Server AOI: Versions 2.00 and 2.03.; The following versions of Rockwell Automation Modbus TCP Server AOI" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-075-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-080-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-080-01" ;
    dcterms:issued "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Keysight N6854A Geolocation Server and N6841A RF Sensor" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Government Facilities" ;
    icsa:cveNumber "CVE-2023-1399" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-1399 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "N6854A Geolocation Sever" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Keysight monitoring products are affected: N6854A Geolocation Server versions 2.4.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-080-01" ;
    icsa:vendor "Keysight Technologies Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-080-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-080-02" ;
    dcterms:issued "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics InfraSuite Device Master" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-1133; CVE-2023-1139; CVE-2023-1140; CVE-2023-1134; CVE-2023-1142; CVE-2023-1136; CVE-2023-1143; CVE-2023-1144; CVE-2023-1137; CVE-2023-1141; CVE-2023-1135; CVE-2023-1138; CVE-2023-1145" ;
    icsa:cweNumber "CWE-22; CWE-732; CWE-287; CWE-306; CWE-77; CWE-284; CWE-502; CWE-749" ;
    icsa:hasCVE cve-res:CVE-2023-1133,
        cve-res:CVE-2023-1134,
        cve-res:CVE-2023-1135,
        cve-res:CVE-2023-1136,
        cve-res:CVE-2023-1137,
        cve-res:CVE-2023-1138,
        cve-res:CVE-2023-1139,
        cve-res:CVE-2023-1140,
        cve-res:CVE-2023-1141,
        cve-res:CVE-2023-1142,
        cve-res:CVE-2023-1143,
        cve-res:CVE-2023-1144,
        cve-res:CVE-2023-1145 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-306,
        cwe-res:CWE-502,
        cwe-res:CWE-732,
        cwe-res:CWE-749,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InfraSuite Device Master" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a real-time device monitoring software; The following versions of InfraSuite Device Master; are affected: Versions prior to 1.0.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-080-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-080-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-080-04" ;
    dcterms:issued "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RADIUS Client of SIPROTEC 5 Devices" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-38767" ;
    icsa:cweNumber "CWE-835" ;
    icsa:hasCVE cve-res:CVE-2022-38767 ;
    icsa:hasCWE cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RADIUS client of SIPROTEC 5 devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SIPROTEC 5 6MD85 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 6MD86 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 6MD89 (CP300) - >= V7.80 SIPROTEC 5 6MU85 (CP300) - >= V7.90 < V9.30 SIPROTEC 5 7KE85 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SA86 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SA87 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SD86 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SD87 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SJ85 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SJ86 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SK85 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SL86 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SL87 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7SS85 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7ST85 (CP300) - >= V8.81 < V9.30 SIPROTEC 5 7ST86 (CP300) - >= V9.20 < V9.30 SIPROTEC 5 7SX85 (CP300) - >= V8.30 < V9.30 SIPROTEC 5 7UM85 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7UT85 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7UT86 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7UT87 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7VE85 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 7VK87 (CP300) - >= V7.80 < V9.30 SIPROTEC 5 Communication Module ETH-BA-2EL - >= V7.80 < V9.30 SIPROTEC 5 Communication Module ETH-BB-2FO - >= V7.80 < V9.30 SIPROTEC 5 Communication Module ETH-BD-2FO - >= V7.80 < V9.30 SIPROTEC 5 Compact 7SX800 (CP050) - >= V8.70 < V9.30." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-080-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-080-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-080-05" ;
    dcterms:issued "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "VISAM VBASE Automation Base" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-45876; CVE-2022-46300; CVE-2022-46286; CVE-2022-45121; CVE-2022-41696; CVE-2022-45468; CVE-2022-43512" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2022-41696,
        cve-res:CVE-2022-43512,
        cve-res:CVE-2022-45121,
        cve-res:CVE-2022-45468,
        cve-res:CVE-2022-45876,
        cve-res:CVE-2022-46286,
        cve-res:CVE-2022-46300 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VBASE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "VISAM reports these vulnerabilities affect the following VBASE products: VBASE Automation Base: versions prior to 11.7.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-080-05" ;
    icsa:vendor "VISAM" ;
    icsa:year 2023 .

icsa-res:ICSA-23-080-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-080-06" ;
    dcterms:issued "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-27856; CVE-2023-27857; CVE-2023-27855" ;
    icsa:cweNumber "CWE-22; CWE-122" ;
    icsa:hasCVE cve-res:CVE-2023-27855,
        cve-res:CVE-2023-27856,
        cve-res:CVE-2023-27857 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager ThinServer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a thin client and remote desktop protocol (RDP) server management software; are affected: ThinManager ThinServer: Versions 6.x - 10.x ThinManager ThinServer: Versions 11.0.0 - 11.0.5 ThinManager ThinServer: Versions 11.1.0 - 11.1.5 ThinManager ThinServer: Versions 11.2.0 - 11.2.6 ThinManager ThinServer: Versions 12.0.0 - 12.0.4 ThinManager ThinServer: Versions 12.1.0 - 12.1.5 ThinManager ThinServer: Versions 13.0.0 - 13.0.1.; The following versions of Rockwell Automation ThinManager ThinServer" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-080-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-080-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-080-07" ;
    dcterms:issued "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE Third-Party" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-1516; CVE-2022-32206; CVE-2022-1652; CVE-2021-42376; CVE-2021-42384; CVE-2022-30594; CVE-2021-42382; CVE-2022-23395; CVE-2022-23040; CVE-2021-42375; CVE-2021-42386; CVE-2022-1304; CVE-2018-12886; CVE-2022-36879; CVE-2022-23038; CVE-2022-0002; CVE-2022-1343; CVE-2022-26490; CVE-2022-36946; CVE-2022-0001; CVE-2022-2639; CVE-2022-23039; CVE-2021-42383; CVE-2022-1353; CVE-2022-0547; CVE-2022-23036; CVE-2022-32205; CVE-2022-35252; CVE-2022-2380; CVE-2022-23041; CVE-2022-1199; CVE-2022-33981; CVE-2021-42385; CVE-2022-1473; CVE-2022-23042; CVE-2022-1292; CVE-2022-2588; CVE-2022-28390; CVE-2022-32208; CVE-2022-1974; CVE-2022-1016; CVE-2022-0494; CVE-2022-32296; CVE-2022-1734; CVE-2022-28356; CVE-2021-42378; CVE-2021-42381; CVE-2021-42379; CVE-2018-25032; CVE-2022-23037; CVE-2022-20158; CVE-2022-32207; CVE-2022-30065; CVE-2021-42377; CVE-2022-23308; CVE-2021-42374; CVE-2022-1198; CVE-2021-42380; CVE-2022-32981; CVE-2022-1975; CVE-2021-42373; CVE-2022-1011; CVE-2022-1729" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-276; CWE-476; CWE-404; CWE-200; CWE-763; CWE-770; CWE-209; CWE-20; CWE-362; CWE-120; CWE-787; CWE-1321; CWE-1286; CWE-78; CWE-203; CWE-863; CWE-287; CWE-191; CWE-248; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-12886,
        cve-res:CVE-2018-25032,
        cve-res:CVE-2021-42373,
        cve-res:CVE-2021-42374,
        cve-res:CVE-2021-42375,
        cve-res:CVE-2021-42376,
        cve-res:CVE-2021-42377,
        cve-res:CVE-2021-42378,
        cve-res:CVE-2021-42379,
        cve-res:CVE-2021-42380,
        cve-res:CVE-2021-42381,
        cve-res:CVE-2021-42382,
        cve-res:CVE-2021-42383,
        cve-res:CVE-2021-42384,
        cve-res:CVE-2021-42385,
        cve-res:CVE-2021-42386,
        cve-res:CVE-2022-0001,
        cve-res:CVE-2022-0002,
        cve-res:CVE-2022-0494,
        cve-res:CVE-2022-0547,
        cve-res:CVE-2022-1011,
        cve-res:CVE-2022-1016,
        cve-res:CVE-2022-1198,
        cve-res:CVE-2022-1199,
        cve-res:CVE-2022-1292,
        cve-res:CVE-2022-1304,
        cve-res:CVE-2022-1343,
        cve-res:CVE-2022-1353,
        cve-res:CVE-2022-1473,
        cve-res:CVE-2022-1516,
        cve-res:CVE-2022-1652,
        cve-res:CVE-2022-1729,
        cve-res:CVE-2022-1734,
        cve-res:CVE-2022-1974,
        cve-res:CVE-2022-1975,
        cve-res:CVE-2022-20158,
        cve-res:CVE-2022-23036,
        cve-res:CVE-2022-23037,
        cve-res:CVE-2022-23038,
        cve-res:CVE-2022-23039,
        cve-res:CVE-2022-23040,
        cve-res:CVE-2022-23041,
        cve-res:CVE-2022-23042,
        cve-res:CVE-2022-23308,
        cve-res:CVE-2022-23395,
        cve-res:CVE-2022-2380,
        cve-res:CVE-2022-2588,
        cve-res:CVE-2022-2639,
        cve-res:CVE-2022-26490,
        cve-res:CVE-2022-28356,
        cve-res:CVE-2022-28390,
        cve-res:CVE-2022-30065,
        cve-res:CVE-2022-30594,
        cve-res:CVE-2022-32205,
        cve-res:CVE-2022-32206,
        cve-res:CVE-2022-32207,
        cve-res:CVE-2022-32208,
        cve-res:CVE-2022-32296,
        cve-res:CVE-2022-32981,
        cve-res:CVE-2022-33981,
        cve-res:CVE-2022-35252,
        cve-res:CVE-2022-36879,
        cve-res:CVE-2022-36946 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-1286,
        cwe-res:CWE-1321,
        cwe-res:CWE-191,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-203,
        cwe-res:CWE-209,
        cwe-res:CWE-248,
        cwe-res:CWE-276,
        cwe-res:CWE-287,
        cwe-res:CWE-295,
        cwe-res:CWE-362,
        cwe-res:CWE-404,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-763,
        cwe-res:CWE-770,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Various third-party components used in SCALANCE W-700 devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SCALANCE WAM763-1 (6GK5763-1AL00-7DA0): All versions prior to v2.0 SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0): All versions prior to v2.0 SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0): All versions prior to v2.0 SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0): All versions prior to v2.0 SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0): All versions prior to v2.0 SCALANCE WUM763-1 (6GK5763-1AL00-3DA0): All versions prior to v2.0 SCALANCE WUM763-1 (6GK5763-1AL00-3AA0): All versions prior to v2.0 SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0): All versions prior to v2.0 SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0): All versions prior to v2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-080-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-082-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-082-01" ;
    dcterms:issued "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "RoboDK" ;
    icsa:CVSSScore "7.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-1516" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2023-1516 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RoboDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a programming and simulation software; The following versions of RoboDK; are affected: RoboDK v5.5.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-082-01" ;
    icsa:vendor "RoboDK" ;
    icsa:year 2023 .

icsa-res:ICSA-23-082-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-082-02" ;
    dcterms:issued "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "CP-Plus KVMS Pro" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-1518" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2023-1518 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KVMS Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: KVMS Pro V2.01.0.T.190521 and prior.; a software management platform; The following versions of CP Plus KVMS Pro" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-082-02" ;
    icsa:vendor "CP Plus" ;
    icsa:year 2023 .

icsa-res:ICSA-23-082-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-082-03" ;
    dcterms:issued "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "SAUTER EY-modulo 5 Building Automation Stations" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-28655; CVE-2023-28650; CVE-2023-28652; CVE-2023-27927; CVE-2023-22300" ;
    icsa:cweNumber "CWE-434; CWE-79; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2023-22300,
        cve-res:CVE-2023-27927,
        cve-res:CVE-2023-28650,
        cve-res:CVE-2023-28652,
        cve-res:CVE-2023-28655 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-434,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EY-modulo 5 Building Automation Stations" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SAUTER reports these vulnerabilities affect the following EY-modulo 5 Building Automation Stations: EY-AS525F001 with moduWeb." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-082-03" ;
    icsa:vendor "SAUTER" ;
    icsa:year 2023 .

icsa-res:ICSA-23-082-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-082-04" ;
    dcterms:issued "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-27982; CVE-2023-27981; CVE-2023-27980; CVE-2023-27978; CVE-2023-27977; CVE-2023-27979; CVE-2023-27983; CVE-2023-27984" ;
    icsa:cweNumber "CWE-22; CWE-306; CWE-20; CWE-502; CWE-345" ;
    icsa:hasCVE cve-res:CVE-2023-27977,
        cve-res:CVE-2023-27978,
        cve-res:CVE-2023-27979,
        cve-res:CVE-2023-27980,
        cve-res:CVE-2023-27981,
        cve-res:CVE-2023-27982,
        cve-res:CVE-2023-27983,
        cve-res:CVE-2023-27984 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-345,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS (Interactive Graphical SCADA System)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Dashboard and Custom Reports modules for the IGSS (Interactive Graphical SCADA System) product: IGSS Data Server (IGSSdataServer.exe): V16.0.0.23040 and prior IGSS Dashboard (DashBoard.exe): V16.0.0.23040 and prior Custom Reports (RMS16.dll): V16.0.0.23040 and prior.; Schneider Electric reports these vulnerabilities affect the following Data Server" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-082-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-082-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-082-05" ;
    dcterms:issued "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Pulsar Plus Controller" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-1607; CVE-2022-26080" ;
    icsa:cweNumber "CWE-352; CWE-330" ;
    icsa:hasCVE cve-res:CVE-2022-1607,
        cve-res:CVE-2022-26080 ;
    icsa:hasCWE cwe-res:CWE-330,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pulsar Plus Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: ABB Infinity DC Power Plant - H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) - comcode 150047415 ABB Pulsar Plus System Controller - NE843_S - comcode 150042936.; The following versions of ABB Pulsar Plus Controller" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-082-05" ;
    icsa:vendor "ABB" ;
    icsa:year 2023 .

icsa-res:ICSA-23-082-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-082-06" ;
    dcterms:issued "2023-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "ProPump and Controls Osprey Pump Controller (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-28395; CVE-2023-27394; CVE-2023-28398; CVE-2023-28712; CVE-2023-27886; CVE-2023-28654; CVE-2023-28648; CVE-2023-28375; CVE-2023-28718" ;
    icsa:cweNumber "CWE-352; CWE-79; CWE-77; CWE-78; CWE-288; CWE-259; CWE-598; CWE-331" ;
    icsa:hasCVE cve-res:CVE-2023-27394,
        cve-res:CVE-2023-27886,
        cve-res:CVE-2023-28375,
        cve-res:CVE-2023-28395,
        cve-res:CVE-2023-28398,
        cve-res:CVE-2023-28648,
        cve-res:CVE-2023-28654,
        cve-res:CVE-2023-28712,
        cve-res:CVE-2023-28718 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-288,
        cwe-res:CWE-331,
        cwe-res:CWE-352,
        cwe-res:CWE-598,
        cwe-res:CWE-77,
        cwe-res:CWE-78,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Osprey Pump Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and automated controls is affected: Osprey Pump Controller: Versions prior to release 20230518.; The following version of Osprey Pump Controller; pumping systems" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-082-06" ;
    icsa:vendor "ProPump and Controls, Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-089-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-089-01" ;
    dcterms:issued "2023-02-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy IEC 61850 MMS-Server (Update B)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-3353" ;
    icsa:cweNumber "CWE-404" ;
    icsa:hasCVE cve-res:CVE-2022-3353 ;
    icsa:hasCWE cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy IEC 61850 MMS-Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SAM600-IO series version 2.2.1 up to revision 2.2.1.8; Relion 670 series version 2.2.3 revisions up to 2.2.3.6; Relion 670 series version 2.2.2 revisions up to 2.2.2.5; Relion 650 series version 1.3 all revisions; Relion 650 series version 2.1 revisions up to 2.1.0.5; Relion 670 series version 2.1 revisions up to 2.1.0.5; Relion 650 series version 1.1 all revisions; Relion 670 series version 2.2.1 up to revision 2.2.1.8; Relion 650 series version 2.2.4 revisions up to 2.2.4.3; SAM600-IO series version 2.2.5 revisions up to 2.2.5.5; Relion 670 series version 2.0 revisions up to 2.0.0.13; Relion 670 series version 1.2 revisions up to 1.2.3.22; Relion 650 series version 2.2.5 revisions up to 2.2.5.5; Relion 650 series version 2.2.1 up to revision 2.2.1.8; Relion 670 series version 2.2.4 revisions up to 2.2.4.3; Relion 670 series version 2.2.5 revisions up to 2.2.5.5; Relion 670 series version 2.2.0 all revisions; Relion 650 series version 2.2.0 all revisions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-089-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-094-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-094-01" ;
    dcterms:issued "2023-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nexx Smart Home Device" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-1751; CVE-2023-1748; CVE-2023-1752; CVE-2023-1750; CVE-2023-1749" ;
    icsa:cweNumber "CWE-798; CWE-20; CWE-639; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-1748,
        cve-res:CVE-2023-1749,
        cve-res:CVE-2023-1750,
        cve-res:CVE-2023-1751,
        cve-res:CVE-2023-1752 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-639,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Garage Door Controller, Smart Plug, Smart Alarm" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Nexx Smart Home devices are affected: Nexx Garage Door Controller (NXG-100B; NXG-200): Version nxg200v-p3-4-1 and prior Nexx Smart Plug (NXPG-100W): Version nxpg100cv4-0-0 and prior Nexx Smart Alarm (NXAL-100): Version nxal100v-p1-9-1and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-094-01" ;
    icsa:vendor "Nexx" ;
    icsa:year 2023 .

icsa-res:ICSA-23-096-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-096-01" ;
    dcterms:issued "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Industrial Control Links ScadaFlex II SCADA Controllers" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-25359" ;
    icsa:cweNumber "CWE-73" ;
    icsa:hasCVE cve-res:CVE-2022-25359 ;
    icsa:hasCWE cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScadaFlex II SCADA Controllers" ;
    icsa:productDistribution "North America, South America" ;
    icsa:productsAffected "WebLib: 1.24 SW: 1.02.20 (build 286); WebLib: 1.22 SW: 1.02.01 (build 229); The following versions of Industrial Control Links ScadaFlex II SCADA Controllers are affected: SW: 1.03.07 (build 317); WebLib: 1.13.; WebLib: 1.24 SW: 1.02.15 (build 286); WebLib: 1.14 SW: 1.01.01 (build 2149); WebLib: 1.16 SW: 1.01.14 (build 172)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-096-01" ;
    icsa:vendor "Industrial Control Links" ;
    icsa:year 2023 .

icsa-res:ICSA-23-096-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-096-02" ;
    dcterms:issued "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "JTEKT Screen Creator Advance 2" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-22349; CVE-2023-22350; CVE-2023-22353; CVE-2023-22360; CVE-2023-22347; CVE-2023-22346; CVE-2023-22345" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-22345,
        cve-res:CVE-2023-22346,
        cve-res:CVE-2023-22347,
        cve-res:CVE-2023-22349,
        cve-res:CVE-2023-22350,
        cve-res:CVE-2023-22353,
        cve-res:CVE-2023-22360 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Screen Creator Advance 2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software program; The following versions of JTEKT ELECTRONICS Screen Creator Advance 2; are affected: JTEKT ELECTRONICS Screen Creator Advance 2: Ver0.1.1.4 Build01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-096-02" ;
    icsa:vendor "JTEKT ELECTRONICS CORPORATION" ;
    icsa:year 2023 .

icsa-res:ICSA-23-096-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-096-03" ;
    dcterms:issued "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "JTEKT Kostac PLC" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-22419; CVE-2023-22424; CVE-2023-22421" ;
    icsa:cweNumber "CWE-416; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-22419,
        cve-res:CVE-2023-22421,
        cve-res:CVE-2023-22424 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kostac PLC Programming Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of JTEKT ELECTRONICS Kostac PLC Programming Software are affected: JTEKT ELECTRONICS Kostac PLC Programing Software: Versions 1.6.9.0 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-096-03" ;
    icsa:vendor "JTEKT ELECTRONICS CORPORATION" ;
    icsa:year 2023 .

icsa-res:ICSA-23-096-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-096-04" ;
    dcterms:issued "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Korenix Jetwave" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2023-23294; CVE-2023-23296; CVE-2023-23295" ;
    icsa:cweNumber "CWE-77; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-23294,
        cve-res:CVE-2023-23295,
        cve-res:CVE-2023-23296 ;
    icsa:hasCWE cwe-res:CWE-400,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Jetwave" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Korenix Jetwave; are affected: Korenix JetWave4221 HP-E versions V1.3.0 and prior Korenix JetWave 3220/3420 V3 versions prior to V1.7 Korenix JetWave 2212G version V1.3.T Korenix JetWave 2212X/2112S version V1.3.0 Korenix JetWave 2211C versions prior to V1.6 Korenix JetWave 2411/2111 versions prior to V1.5 Korenix JetWave 2411L/2111L versions prior to V1.6 Korenix JetWave 2414/2114 versions prior to V1.4 Korenix JetWave 2424 versions prior to V1.3 Korenix JetWave 2460 versions prior to V1.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-096-04" ;
    icsa:vendor "Korenix" ;
    icsa:year 2023 .

icsa-res:ICSA-23-096-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-096-05" ;
    dcterms:issued "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MicroSCADA System Data Manager SDM600" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-3686; CVE-2022-3685; CVE-2022-3682; CVE-2022-3684; CVE-2022-3683" ;
    icsa:cweNumber "CWE-434; CWE-404; CWE-269; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2022-3682,
        cve-res:CVE-2022-3683,
        cve-res:CVE-2022-3684,
        cve-res:CVE-2022-3685,
        cve-res:CVE-2022-3686 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-285,
        cwe-res:CWE-404,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroSCADA System Data Manager SDM600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi Energy's MicroSCADA SDM600; are affected: SDM600: Versions prior to v1.2 FP3 HF4 (Build Nr. 1.2.23000.291) SDM600: Versions prior to v1.3.0 (Build Nr. 1.3.0.1339).; a data management tool" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-096-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-096-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-096-06" ;
    dcterms:issued "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-28716; CVE-2023-29150; CVE-2023-28400; CVE-2023-29169; CVE-2023-28384" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2023-28384,
        cve-res:CVE-2023-28400,
        cve-res:CVE-2023-28716,
        cve-res:CVE-2023-29150,
        cve-res:CVE-2023-29169 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mySCADA myPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of myPRO HMI/SCADA systems are affected: myPRO: versions 8.26.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-096-06" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2023 .

icsa-res:ICSA-23-101-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-101-01" ;
    dcterms:issued "2023-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "FANUC ROBOGUIDE-HandlingPRO" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-1864" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2023-1864 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ROBOGUIDE-HandlingPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a robot simulation software; are affected: ROBOGUIDE-HandlingPRO: Versions 9 Rev.ZD and prior.; The following versions of ROBOGUIDE-HandlingPRO" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-101-01" ;
    icsa:vendor "FANUC Corporation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-01" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Adaptec maxView Application" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-23588" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2023-23588 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Adaptec maxView Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SIMATIC IPC1047: All versions SIMATIC IPC1047E: All versions with Adaptec maxView Storage Manager prior to 4.09.00.25611 on Windows SIMATIC IPC647D: All versions SIMATIC IPC647E: All versions with Adaptec maxView Storage Manager prior to 4.09.00.25611 on Windows SIMATIC IPC847D: All versions SIMATIC IPC847E: All versions with Adaptec maxView Storage Manager prior to 4.09.00.25611 on Windows." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-02" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT Open and JT Utilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-29053" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-29053 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT Open and JT Utilities" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens software is affected: JT Open: All versions prior to V11.3.2.0 JT Utilities: All versions prior to V13.3.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-03" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens in OPC Foundation Local Discovery Server" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-44725" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-44725 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC Foundation Local Discovery Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: OpenPCS 7 V9.1: All versions SIMATIC NET PC Software V14: All versions SIMATIC NET PC Software V15: All versions SIMATIC NET PC Software V16: All versions SIMATIC NET PC Software V17: All versions SIMATIC NET PC Software V18: All versions SIMATIC Process Historian OPC UA Server: All versions SIMATIC WinCC: All versions prior to V8.0 SIMATIC WinCC Runtime Professional: All versions SIMATIC WinCC Unified PC Runtime: All versions prior to V18.0 UPD 1 SR 1 TeleControl Server Basic V3: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-04" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Portal" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-26293" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-26293 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIA Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: TIA Portal V15: All versions TIA Portal V16: All versions TIA Portal V17: All versions TIA Portal V18: All versions prior to v18 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-05" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE X-200IRT Devices" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-29054" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2023-29054 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X-200IRT Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3): All versions prior to V5.5.2 SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3): All versions prior to V5.5.2 SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6): All versions prior to V5.5.2 SCALANCE X202-2IRT (6GK5202-2BB00-2BA3): All versions prior to V5.5.2 SCALANCE X202-2IRT (6GK5202-2BB10-2BA3): All versions prior to V5.5.2 SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3): All versions prior to V5.5.2 SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6): All versions prior to V5.5.2 SCALANCE X204IRT (6GK5204-0BA00-2BA3): All versions prior to V5.5.2 SCALANCE X204IRT (6GK5204-0BA10-2BA3): All versions prior to V5.5.2 SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6): All versions prior to V5.5.2 SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2): All versions prior to V5.5.2 SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2): All versions prior to V5.5.2 SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2): All versions prior to V5.5.2 SCALANCE XF204IRT (6GK5204-0BA00-2BF2): All versions prior to V5.5.2 SIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3): All versions prior to V5.5.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-06" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5 Devices" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-28766" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2023-28766 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SIPROTEC 5 6MD85 (CP200): All versions (v) SIPROTEC 5 6MD85 (CP300): All versions prior to v9.40 SIPROTEC 5 6MD86 (CP200): All versions SIPROTEC 5 6MD86 (CP300): All versions prior to v9.40 SIPROTEC 5 6MD89 (CP300): All versions SIPROTEC 5 6MU85 (CP300): All versions prior to v9.40 SIPROTEC 5 7KE85 (CP200): All versions SIPROTEC 5 7KE85 (CP300): All versions prior to v9.40 SIPROTEC 5 7SA82 (CP100): All versions SIPROTEC 5 7SA82 (CP150): All versions prior to v9.40 SIPROTEC 5 7SA84 (CP200): All versions SIPROTEC 5 7SA86 (CP200): All versions SIPROTEC 5 7SA86 (CP300): All versions prior to v9.40 SIPROTEC 5 7SA87 (CP200): All versions SIPROTEC 5 7SA87 (CP300): All versions prior to v9.40 SIPROTEC 5 7SD82 (CP100): All versions SIPROTEC 5 7SD82 (CP150): All versions prior to v9.40 SIPROTEC 5 7SD84 (CP200): All versions SIPROTEC 5 7SD86 (CP200): All versions SIPROTEC 5 7SD86 (CP300): All versions prior to v9.40 SIPROTEC 5 7SD87 (CP200): All versions SIPROTEC 5 7SD87 (CP300): All versions prior to v9.40 SIPROTEC 5 7SJ81 (CP100): All versions SIPROTEC 5 7SJ81 (CP150): All versions prior to v9.40 SIPROTEC 5 7SJ82 (CP100): All versions SIPROTEC 5 7SJ82 (CP150): All versions prior to v9.40 SIPROTEC 5 7SJ85 (CP200): All versions SIPROTEC 5 7SJ85 (CP300): All versions prior to v9.40 SIPROTEC 5 7SJ86 (CP200): All versions SIPROTEC 5 7SJ86 (CP300): All versions prior to v9.40 SIPROTEC 5 7SK82 (CP100): All versions SIPROTEC 5 7SK82 (CP150): All versions prior to v9.40 SIPROTEC 5 7SK85 (CP200): All versions SIPROTEC 5 7SK85 (CP300): All versions prior to v9.40 SIPROTEC 5 7SL82 (CP100): All versions SIPROTEC 5 7SL82 (CP150): All versions prior to v9.40 SIPROTEC 5 7SL86 (CP200): All versions SIPROTEC 5 7SL86 (CP300): All versions prior to v9.40 SIPROTEC 5 7SL87 (CP200): All versions SIPROTEC 5 7SL87 (CP300): All versions prior to v9.40 SIPROTEC 5 7SS85 (CP200): All versions SIPROTEC 5 7SS85 (CP300): All versions prior to v9.40 SIPROTEC 5 7ST85 (CP200): All versions SIPROTEC 5 7ST85 (CP300): All versions SIPROTEC 5 7ST86 (CP300): All versions prior to v9.40 SIPROTEC 5 7SX82 (CP150): All versions prior to v9.40 SIPROTEC 5 7SX85 (CP300): All versions prior to v9.40 SIPROTEC 5 7UM85 (CP300): All versions prior to v9.40 SIPROTEC 5 7UT82 (CP100): All versions SIPROTEC 5 7UT82 (CP150): All versions prior to v9.40 SIPROTEC 5 7UT85 (CP200): All versions SIPROTEC 5 7UT85 (CP300): All versions prior to v9.40 SIPROTEC 5 7UT86 (CP200): All versions SIPROTEC 5 7UT86 (CP300): All versions prior to v9.40 SIPROTEC 5 7UT87 (CP200): All versions SIPROTEC 5 7UT87 (CP300): All versions prior to v9.40 SIPROTEC 5 7VE85 (CP300): All versions prior to v9.40 SIPROTEC 5 7VK87 (CP200): All versions SIPROTEC 5 7VK87 (CP300): All versions prior to v9.40 SIPROTEC 5 7VU85 (CP300): All versions prior to v9.40 SIPROTEC 5 Communication Module ETH-BA-2EL: All versions prior to v9.40 SIPROTEC 5 Communication Module ETH-BB-2FO: All versions prior to v9.40 SIPROTEC 5 Communication Module ETH-BD-2FO: All versions prior to v9.40 SIPROTEC 5 Compact 7SX800 (CP050): All versions prior to v9.40." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-07" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens CPCI85 Firmware of SICAM A8000 Devices" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-28489" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2023-28489 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CPCI85 Firmware of SICAM A8000 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: CP-8031 MASTER MODULE (6MF2803-1AA00): All versions prior to CPCI85 V05 CP-8050 MASTER MODULE (6MF2805-0AA00): All versions prior to CPCI85 V05." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-08" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Forgot Password Module" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-27464" ;
    icsa:cweNumber "CWE-204" ;
    icsa:hasCVE cve-res:CVE-2023-27464 ;
    icsa:hasCWE cwe-res:CWE-204 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Forgot Password Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: Mendix Forgot Password (Mendix 7 compatible): Versions prior to 3.7.1 Mendix Forgot Password (Mendix 8 compatible): Version prior to 4.1.1 Mendix Forgot Password (Mendix 9 compatible): Version prior to 5.1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-09" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE XCM332" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-32206; CVE-2022-1652; CVE-2022-32208; CVE-2022-32207; CVE-2022-40674; CVE-2022-30065; CVE-2022-32205; CVE-2022-35252; CVE-2021-46828; CVE-2022-1729" ;
    icsa:cweNumber "CWE-770; CWE-416; CWE-276; CWE-787; CWE-1286; CWE-362" ;
    icsa:hasCVE cve-res:CVE-2021-46828,
        cve-res:CVE-2022-1652,
        cve-res:CVE-2022-1729,
        cve-res:CVE-2022-30065,
        cve-res:CVE-2022-32205,
        cve-res:CVE-2022-32206,
        cve-res:CVE-2022-32207,
        cve-res:CVE-2022-32208,
        cve-res:CVE-2022-35252,
        cve-res:CVE-2022-40674 ;
    icsa:hasCWE cwe-res:CWE-1286,
        cwe-res:CWE-276,
        cwe-res:CWE-362,
        cwe-res:CWE-416,
        cwe-res:CWE-770,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE XCM332" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SCALANCE XCM332 (6GK5332-0GA01-2AC2): Versions prior to 2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-10" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-43768; CVE-2022-43767; CVE-2022-43716" ;
    icsa:cweNumber "CWE-416; CWE-770; CWE-833" ;
    icsa:hasCVE cve-res:CVE-2022-43716,
        cve-res:CVE-2022-43767,
        cve-res:CVE-2022-43768 ;
    icsa:hasCWE cwe-res:CWE-416,
        cwe-res:CWE-770,
        cwe-res:CWE-833 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following software from Siemens is affected: SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0): All versions SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0): All versions SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants): All versions SIMATIC CP 1243-1 IEC (incl. SIPLUS variants): All versions SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0): All versions SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0): All versions SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0): All versions SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0): All versions SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0): All versions SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0): All versions SIMATIC CP 443-1 (6GK7443-1EX30-0XE0): All versions prior to V3.3 SIMATIC CP 443-1 (6GK7443-1EX30-0XE1): All versions prior to V3.3 SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0): All versions prior to V3.3 SIMATIC IPC DiagBase: All versions SIMATIC IPC DiagMonitor: All versions SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0): All versions SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0): All versions SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0): All versions SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0): All versions SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0): All versions prior to V3.3 SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0): All versions prior to V3.3 SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0): All versions SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0): All versions SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0): All versions prior to V2.3.6 TIM 1531 IRC (6GK7543-1MX00-0XE0): All versions prior to V2.3.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-11" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-1709" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-1709 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization and JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Teamcenter Visualization and JT2Go are affected: Siemens reports this vulnerability JT2Go: all versions prior to V14.2.0.2 Teamcenter Visualization V13.2: all versions prior to V13.2.0.13 Teamcenter Visualization V13.3: all versions prior to V13.3.0.9 Teamcenter Visualization V14.0: all versions prior to V14.0.0.5 Teamcenter Visualization V14.1: all versions prior to V14.1.0.7 Teamcenter Visualization V14.2: all versions prior to V14.2.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-12" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Polarion ALM" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-28828" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2023-28828 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Polarion ALM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens Polarion ALM products are affected: Polarion ALM: all versions prior to V2304.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-13" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE Switch Families" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-28895; CVE-2020-35198" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2020-28895,
        cve-res:CVE-2020-35198 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE X-200, X-200IRT, and X-300 Switch Families" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "coated) (6GK5307-2FD00-2GA3): All versions SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3): All versions SCALANCE X307-3 (6GK5307-3BL00-2AA3): All versions SCALANCE X307-3 (6GK5307-3BL10-2AA3): All versions SCALANCE X307-3LD (6GK5307-3BM00-2AA3): All versions SCALANCE X307-3LD (6GK5307-3BM10-2AA3): All versions SCALANCE X308-2 (6GK5308-2FL00-2AA3): All versions SCALANCE X308-2 (6GK5308-2FL10-2AA3): All versions SCALANCE X308-2LD (6GK5308-2FM00-2AA3): All versions SCALANCE X308-2LD (6GK5308-2FM10-2AA3): All versions SCALANCE X308-2LH (6GK5308-2FN00-2AA3): All versions SCALANCE X308-2LH (6GK5308-2FN10-2AA3): All versions SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3): All versions SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3): All versions SCALANCE X308-2M (6GK5308-2GG00-2AA2): All versions SCALANCE X308-2M (6GK5308-2GG10-2AA2): All versions SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2): All versions SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2): All versions SCALANCE X308-2M TS (6GK5308-2GG00-2CA2): All versions SCALANCE X308-2M TS (6GK5308-2GG10-2CA2): All versions SCALANCE X310 (6GK5310-0FA00-2AA3): All versions SCALANCE X310 (6GK5310-0FA10-2AA3): All versions SCALANCE X310FE (6GK5310-0BA00-2AA3): All versions SCALANCE X310FE (6GK5310-0BA10-2AA3): All versions SCALANCE X320-1 FE (6GK5320-1BD00-2AA3): All versions SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3): All versions SCALANCE X408-2 (6GK5408-2FD00-2AA2): All versions SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2): All versions prior to V5.5.2 SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2): All versions prior to V5.5.2 SCALANCE XF204 (6GK5204-0BA00-2AF2): All versions prior to V5.2.6 SCALANCE XF204-2 (6GK5204-2BC00-2AF2): All versions prior to V5.2.6 SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2): All versions prior to V5.5.2 SCALANCE XF204IRT (6GK5204-0BA00-2BF2): All versions prior to V5.5.2 SCALANCE XF206-1 (6GK5206-1BC00-2AF2): All versions prior to V5.2.6 SCALANCE XF208 (6GK5208-0BA00-2AF2): All versions prior to V5.2.6 SCALANCE XR324-12M (230V; ports on rear) (6GK5324-4GG00-3JR2): All versions SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-4QG00-1AR2): All versions SCALANCE XR324-4M PoE (24V; ports on rear) (6GK5324-4GG00-1JR2): All versions SCALANCE XR324-4M EEC (24V; coated) (6GK5307-2FD00-3GA3): All versions SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3): All versions SCALANCE X307-2 EEC (24V; coated) (6GK5307-2FD00-1GA3): All versions SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3): All versions SCALANCE X307-2 EEC (2x 230V; ports on rear) (6GK5324-4GG10-4JR2): All versions SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-4GG00-2JR2): All versions SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-4QG00-3HR2): All versions SCALANCE XR324-4M PoE (24V; ports on front) (6GK5324-0GG00-3AR2): All versions SCALANCE XR324-12M (230V; ports on rear) (6GK5324-4QG00-1HR2): All versions SCALANCE XR324-4M PoE TS (24V; ports on front) (6GK5324-0GG00-1AR2): All versions SCALANCE XR324-12M (24V; ports on front) (6GK5324-4GG00-4ER2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on front) (6GK5324-4QG00-3AR2): All versions SCALANCE XR324-4M PoE (230V; Siemens reports these vulnerabilities affect the following SCALANCE Switch Family products: SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3): All versions prior to V5.5.2 SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3): All versions prior to V5.5.2 SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6): All versions prior to V5.5.2 SCALANCE X202-2IRT (6GK5202-2BB00-2BA3): All versions prior to V5.5.2 SCALANCE X202-2IRT (6GK5202-2BB10-2BA3): All versions prior to V5.5.2 SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3): All versions prior to V5.5.2 SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6): All versions prior to V5.5.2 SCALANCE X204-2 (6GK5204-2BB10-2AA3): All versions prior to V5.2.6 SCALANCE X204-2FM (6GK5204-2BB11-2AA3): All versions prior to V5.2.6 SCALANCE X204-2LD (6GK5204-2BC10-2AA3): All versions prior to V5.2.6 SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2): All versions prior to V5.2.6 SCALANCE X204-2TS (6GK5204-2BB10-2CA2): All versions prior to V5.2.6 SCALANCE X204IRT (6GK5204-0BA00-2BA3): All versions prior to V5.5.2 SCALANCE X204IRT (6GK5204-0BA10-2BA3): All versions prior to V5.5.2 SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6): All versions prior to V5.5.2 SCALANCE X206-1 (6GK5206-1BB10-2AA3): All versions prior to V5.2.6 SCALANCE X206-1LD (6GK5206-1BC10-2AA3): All versions prior to V5.2.6 SCALANCE X208 (6GK5208-0BA10-2AA3): All versions prior to V5.2.6 SCALANCE X208PRO (6GK5208-0HA10-2AA6): All versions prior to V5.2.6 SCALANCE X212-2 (6GK5212-2BB00-2AA3): All versions prior to V5.2.6 SCALANCE X212-2LD (6GK5212-2BC00-2AA3): All versions prior to V5.2.6 SCALANCE X216 (6GK5216-0BA00-2AA3): All versions prior to V5.2.6 SCALANCE X224 (6GK5224-0BA00-2AA3): All versions prior to V5.2.6 SCALANCE X302-7 EEC (230V; ports on front) (6GK5324-4QG00-1CR2): All versions SIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3): All versions prior to V5.5.2 SIPLUS NET SCALANCE X308-2 (6AG1308-2FL10-4AA3): All versions.; ports on rear) (6GK5324-4GG10-1JR2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on front) (6GK5324-4GG00-3ER2): All versions SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-4GG00-2ER2): All versions SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-4GG10-3JR2): All versions SCALANCE XR324-4M EEC (24V; ports on front) (6GK5324-4GG10-1ER2): All versions SCALANCE XR324-4M EEC (24V; ports on front) (6GK5324-4GG00-1ER2): All versions SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-0GG00-1HR2): All versions SCALANCE XR324-12M (24V; coated) (6GK5302-7GD00-3GA3): All versions SCALANCE X302-7 EEC (230V) (6GK5302-7GD00-3EA3): All versions SCALANCE X302-7 EEC (24V; ports on front) (6GK5324-4GG10-4ER2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; coated) (6GK5302-7GD00-1GA3): All versions SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3): All versions SCALANCE X302-7 EEC (2x 230V; ports on front) (6GK5324-0GG10-3AR2): All versions SCALANCE XR324-12M (230V; ports on rear) (6GK5324-0GG10-3HR2): All versions SCALANCE XR324-12M (24V; coated) (6GK5307-2FD00-4GA3): All versions SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3): All versions SCALANCE X307-2 EEC (2x 24V; ports on rear) (6GK5324-0GG10-1HR2): All versions SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2): All versions SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2): All versions SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-4GG10-3ER2): All versions SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-0GG10-1AR2): All versions SCALANCE XR324-12M (24V; coated) (6GK5302-7GD00-4GA3): All versions SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3): All versions SCALANCE X302-7 EEC (2x 24V; ports on rear) (6GK5324-4GG00-4JR2): All versions SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG10-2JR2): All versions SCALANCE XR324-4M PoE (230V; ports on rear) (6GK5324-0GG00-3HR2): All versions SCALANCE XR324-12M (230V; coated) (6GK5302-7GD00-2GA3): All versions SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3): All versions SCALANCE X304-2FE (6GK5304-2BD00-2AA3): All versions SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3): All versions SCALANCE X307-2 EEC (230V; ports on front) (6GK5324-4GG10-2ER2): All versions SCALANCE XR324-4M EEC (2x 24V" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-14" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Datakit CrossCAD-WARE" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-22846; CVE-2023-22295; CVE-2023-22321; CVE-2023-22354; CVE-2023-23579" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-22295,
        cve-res:CVE-2023-22321,
        cve-res:CVE-2023-22354,
        cve-res:CVE-2023-22846,
        cve-res:CVE-2023-23579 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CrossCAD/Ware_x64 library" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Datakit product; is affected: CrossCAD/Ware_x64 library: All versions prior to 2023.1.; a conversion engine" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-14" ;
    icsa:vendor "Datakit" ;
    icsa:year 2023 .

icsa-res:ICSA-23-103-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-103-15" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOC35 Series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-1285" ;
    icsa:cweNumber "CWE-364" ;
    icsa:hasCVE cve-res:CVE-2023-1285 ;
    icsa:hasCWE cwe-res:CWE-364 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GC-ENET-COM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Mitsubishi Electric India GC-ENET-COM: Models with the beginning serial number 16XXXXXXXXX.; The following versions of Mitsubishi Electric India Ethernet communication Extension unit GC-ENET-COM" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-103-15" ;
    icsa:vendor "Mitsubishi Electric India" ;
    icsa:year 2023 .

icsa-res:ICSA-23-108-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-108-01" ;
    dcterms:issued "2023-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CSCJ Series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-45794" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2022-45794 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SYSMAC CS/CJ Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "programmable logic controllers; are affected: SYSMAC CJ2H-CPU6 -EIP: all versions SYSMAC CJ2H-CPU6 : all versions SYSMAC CJ2M-CPU : all versions SYSMAC CJ1G-CPU P: all versions SYSMAC CS1H-CPU H: all versions SYSMAC CS1G-CPU H: all versions SYSMAC CS1D-CPU HA: all versions SYSMAC CS1D-CPU H: all versions SYSMAC CS1D-CPU SA: all versions SYSMAC CS1D-CPU S: all versions SYSMAC CS1D-CPU P: all versions.; The following versions of Omron CS/CJ series" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-108-01" ;
    icsa:vendor "Omron" ;
    icsa:year 2023 .

icsa-res:ICSA-23-108-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-108-02" ;
    dcterms:issued "2023-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric APC Easy UPS Online Monitoring Software (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-29411; CVE-2023-29413; CVE-2023-29412" ;
    icsa:cweNumber "CWE-306; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2023-29411,
        cve-res:CVE-2023-29412,
        cve-res:CVE-2023-29413 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APC Easy UPS Online Monitoring Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2019; 11; Windows Server 2016; 2022 are affected: APC Easy UPS Online Monitoring Software: v2.5-GA-01-22261 and prior Schneider Electric Easy UPS Online Monitoring Software: Version V2.5-GA-01-22320 and prior.; The following versions of Easy UPS Online Monitoring Software for Windows 10" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-108-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-110-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-110-01" ;
    dcterms:issued "2023-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "INEA ME RTU" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Slovenia" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Transportation Systems" ;
    icsa:cveNumber "CVE-2023-2131" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2023-2131 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ME RTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a remote terminal unit; The following versions of ME RTU; are affected: ME RTU: versions prior to 3.36." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-110-01" ;
    icsa:vendor "INEA" ;
    icsa:year 2023 .

icsa-res:ICSA-23-115-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-115-01" ;
    dcterms:issued "2023-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Keysight N8844A Data Analytics Web Service (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Government Facilities" ;
    icsa:cveNumber "CVE-2023-1967" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-1967 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "N8844A Data Analytics Web Service" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Keysight reports this vulnerability affects one or more products in the following groups. There are multiple fix dates in these product groups; users are encouraged to visit Keysight's product lookup tool for details: N8844A Data Analytics Web Service: Version 2.1.7351 and prior 5G Test SW: all versions 89600 Vector Signal Analysis SW: versions prior to 6/20/2023 Arbitrary Waveform Generators: all versions Automotive Compliance Apps: versions prior to 4/17/2023 AXIe Embedded Controllers: versions prior to 6/2/2023 BenchVue: all versions BERTs and Compliance Test SW: all versions Boundary Scan Analyzers: versions prior to 4/20/2023 Component Analysis SW: versions prior to 4/22/2023 Device Current Waveform Analyzers: versions prior to 4/20/2023 ENA Network Analyzers: versions prior to 4/5/2023 EXM Wireless Test: versions prior to 4/20/2023 In-Circuit Parallel Testers: versions prior to 7/21/2023 Infiniium Oscilloscopes: all versions InfiniiVision USB and PXIe Oscilloscope SW: versions prior to 4/17/2023 Logic Analyzers: versions prior to 4/19/2023 Massively Parallel Board Test Systems: all versions Multi-Band Vector Transceiver Solutions: all versions Multiport ECal SW: versions prior to 4/22/2023 MXE EMI Test Receivers: all versions Noise Figure Analyzers: versions prior to 3/24/2023 Open RAN Studio: versions prior to 4/21/2023 Optical Modulation Analyzers: versions prior to 4/13/2023 Oscilloscope Compliance Test SW: all versions PathWave Lab Operations for Connectivity: versions prior to 4/7/2023 PathWave Measurement SW: versions prior to 3/24/2023 PathWave Test Automation Platform (TAP): all versions Phase Noise Test System: versions prior to 3/15/2023 PNA Network Analyzers: versions prior to 5/4/2023 Precision Source/Measure Units: versions prior to 4/20/2023 Propsim Channel Emulators: versions prior to 5/5/2023 PXIe Embedded Controllers: versions prior to 5/12/2023 PXIe Network Analyzers: all versions PXIe Signal Analyzers and Generators: all versions Radar Target Simulators: all versions Sampling Oscilloscope Compliance Test SW: all versions Signal Generation SW: all versions Signal Source Analyzers: versions prior to 7/7/2023 USB Network Analyzers: versions prior to 4/22/2023 UXM 5G Wireless Test: versions prior to 3/24/2023 VXG Signal Generators: versions prior to 4/27/2023 VXT PXIe Transceivers: all versions WaveJudge Wireless Analyzer Apps: versions prior to 4/5/2023 X-Series Signal Analyzers: all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-115-01" ;
    icsa:vendor "Keysight Technologies Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-115-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-115-02" ;
    dcterms:issued "2023-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Scada-LTS Third Party Component" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Open-source" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-1179" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2015-1179 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Scada-LTS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Scada-LTS Versions 2.7.4 and prior; The following versions of Scada-LTS; an open-source HMI" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-115-02" ;
    icsa:vendor "Scada-LTS" ;
    icsa:year 2023 .

icsa-res:ICSA-23-122-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-122-01" ;
    dcterms:issued "2023-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Factory Automation Products" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-24489; CVE-2022-0002; CVE-2020-24512; CVE-2021-0089; CVE-2021-0146; CVE-2021-0086; CVE-2021-0127; CVE-2020-8670; CVE-2021-33150" ;
    icsa:cweNumber "CWE-1395" ;
    icsa:hasCVE cve-res:CVE-2020-24489,
        cve-res:CVE-2020-24512,
        cve-res:CVE-2020-8670,
        cve-res:CVE-2021-0086,
        cve-res:CVE-2021-0089,
        cve-res:CVE-2021-0127,
        cve-res:CVE-2021-0146,
        cve-res:CVE-2021-33150,
        cve-res:CVE-2022-0002 ;
    icsa:hasCWE cwe-res:CWE-1395 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Factory Automation (FA) Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric Factory Automation products are affected: MELIPC Series MI5122-VM: All versions MI1002-W: All versions MI2012-W: All versions MI3321G-W: All versions MI3315G-W: All versions MELSEC iQ-R Series R102WCPU-W: All versions MELSEC Q Series Q24DHCCPU-V: All versions Q24DHCCPU-VG: All versions Q24DHCCPU-LS: All versions Q26DHCCPU-LS: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-122-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-129-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-129-02" ;
    dcterms:issued "2023-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MSM" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-15504; CVE-2021-43298; CVE-2023-23916; CVE-2019-12822; CVE-2020-15688; CVE-2018-15505; CVE-2021-41615; CVE-2019-16645" ;
    icsa:cweNumber "CWE-94; CWE-307; CWE-294; CWE-119; CWE-476; CWE-331" ;
    icsa:hasCVE cve-res:CVE-2018-15504,
        cve-res:CVE-2018-15505,
        cve-res:CVE-2019-12822,
        cve-res:CVE-2019-16645,
        cve-res:CVE-2020-15688,
        cve-res:CVE-2021-41615,
        cve-res:CVE-2021-43298,
        cve-res:CVE-2023-23916 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-294,
        cwe-res:CWE-307,
        cwe-res:CWE-331,
        cwe-res:CWE-476,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modular Switchgear Monitoring (MSM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Hitachi Energy products are affected: MSM: 2.2.5 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-129-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-01" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0973; CVE-2023-30986; CVE-2023-30985" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2023-0973,
        cve-res:CVE-2023-30985,
        cve-res:CVE-2023-30986 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Solid Edge SE2023: All versions prior to V223.0 Update 3 Solid Edge SE2023: All versions prior to V223.0 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-02" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-47522" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-47522 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SCALANCE W1750D (JP) (6GK5750-2HX01-1AD0): All versions SCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0): All versions SCALANCE W1750D (USA) (6GK5750-2HX01-1AB0): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-03" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Video Event and Management Servers" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-30899; CVE-2023-30898" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-30898,
        cve-res:CVE-2023-30899 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance Video" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the following IP video management software: Siveillance Video 2020 R2: all versions prior to V20.2 HotfixRev14 Siveillance Video 2020 R3: all versions prior to V20.3 HotfixRev12 Siveillance Video 2021 R1: all versions prior to V21.1 HotfixRev12 Siveillance Video 2021 R2: all versions prior to V21.2 HotfixRev8 Siveillance Video 2022 R1: all versions prior to V22.1 HotfixRev7 Siveillance Video 2022 R2: all versions prior to V22.2 HotfixRev5 Siveillance Video 2022 R3: all versions prior to V22.3 HotfixRev2 Siveillance Video 2023 R1: all versions prior to V23.1 HotfixRev1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-04" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Cloud Connect 7" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-29107; CVE-2023-29103; CVE-2023-29104; CVE-2023-29106; CVE-2023-29105; CVE-2023-29128; CVE-2023-28832" ;
    icsa:cweNumber "CWE-544; CWE-22; CWE-200; CWE-552; CWE-77; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2023-28832,
        cve-res:CVE-2023-29103,
        cve-res:CVE-2023-29104,
        cve-res:CVE-2023-29105,
        cve-res:CVE-2023-29106,
        cve-res:CVE-2023-29107,
        cve-res:CVE-2023-29128 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-259,
        cwe-res:CWE-544,
        cwe-res:CWE-552,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Cloud Connect 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00): All versions V2.0 to V2.1 SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00): All versions prior to V2.1 SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00): All versions V2.0 to V2.1 SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00): All versions prior to V2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-05" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS Third-Party" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-43680; CVE-2022-43552; CVE-2022-40674; CVE-2022-32221; CVE-2022-42916; CVE-2022-35252; CVE-2022-35260; CVE-2022-43551; CVE-2022-42915" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-1286; CWE-121; CWE-319; CWE-440" ;
    icsa:hasCVE cve-res:CVE-2022-32221,
        cve-res:CVE-2022-35252,
        cve-res:CVE-2022-35260,
        cve-res:CVE-2022-40674,
        cve-res:CVE-2022-42915,
        cve-res:CVE-2022-42916,
        cve-res:CVE-2022-43551,
        cve-res:CVE-2022-43552,
        cve-res:CVE-2022-43680 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-1286,
        cwe-res:CWE-319,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-440 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Third-party components libexpat and libcurl in SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: Third-Party components used in SINEC NMS: All versions prior to V1.0.3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-06" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE LPE9403" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-27408; CVE-2023-27409; CVE-2023-27407; CVE-2023-27410" ;
    icsa:cweNumber "CWE-22; CWE-77; CWE-378; CWE-122" ;
    icsa:hasCVE cve-res:CVE-2023-27407,
        cve-res:CVE-2023-27408,
        cve-res:CVE-2023-27409,
        cve-res:CVE-2023-27410 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-22,
        cwe-res:CWE-378,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE LPE9403" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SCALANCE LPE9403 (6GK5998-3GS00-2AC2): Versions prior to 2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-07" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sierra Wireless AirVantage" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-31280; CVE-2023-31279" ;
    icsa:cweNumber "CWE-200; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-31279,
        cve-res:CVE-2023-31280 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AirVantage" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Sierra Wireless AirVantage; are affected: AirVantage Platform.; a cloud management platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-07" ;
    icsa:vendor "Sierra Wireless" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-08" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Teltonika Remote Management System and RUT Model Routers" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Lithuania" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems; Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-32347; CVE-2023-32348; CVE-2023-32349; CVE-2023-2588; CVE-2023-32350; CVE-2023-2587; CVE-2023-32346; CVE-2023-2586" ;
    icsa:cweNumber "CWE-830; CWE-287; CWE-15; CWE-79; CWE-204; CWE-78; CWE-918" ;
    icsa:hasCVE cve-res:CVE-2023-2586,
        cve-res:CVE-2023-2587,
        cve-res:CVE-2023-2588,
        cve-res:CVE-2023-32346,
        cve-res:CVE-2023-32347,
        cve-res:CVE-2023-32348,
        cve-res:CVE-2023-32349,
        cve-res:CVE-2023-32350 ;
    icsa:hasCWE cwe-res:CWE-15,
        cwe-res:CWE-204,
        cwe-res:CWE-287,
        cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-830,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Remote Management System and RUT model routers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2023-32347; CVE-2023-32348; CVE-2023-2588) Remote Management System (RMS): Versions prior to 4.14.0 (affected by CVE-2023-2586) RUT model routers: Version 00.07.00 through 00.07.03.4 (affected by CVE-2023-32349) RUT model routers: Version 00.07.00 through 00.07.03 (affected by CVE-2023-32350).; CVE-2023-2587; The following Teltonika products are affected: Remote Management System (RMS): Versions prior to 4.10.0 (affected by CVE-2023-32346" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-08" ;
    icsa:vendor "Teltonika" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-09" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Kinetix 5500" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Chemical; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-1834" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2023-1834 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kinetix 5500 EtherNet/IP Servo Drive" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Kinetix 5500 devices manufactured between May 2022 and January 2023: Version 7.13.; an industrial control router; The following versions of Kinetix 5500 EtherNet/IP Servo Drive" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-09" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-10" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena Simulation Software" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-29460; CVE-2023-29461; CVE-2023-29462" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2023-29460,
        cve-res:CVE-2023-29461,
        cve-res:CVE-2023-29462 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arena Simulation Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation product is affected: Arena Simulation Software: v16.20.01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-10" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-11" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "BirdDog Cameras and Encoders" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-2504; CVE-2023-2505" ;
    icsa:cweNumber "CWE-798; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2023-2504,
        cve-res:CVE-2023-2505 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "STUDIO R3, 4K QUAD, MINI, A300 EYES" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following BirdDog camera and encoder versions are affected: 4K QUAD: Versions 4.5.181 and 4.5.196 MINI: Version 2.6.2 A300 EYES: Version 3.4 STUDIO R3: Version 3.6.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-11" ;
    icsa:vendor "BirdDog" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-12" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "SDG PnPSCADA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "South Africa" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-1934" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2023-1934 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PnPSCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SDG PnPSCADA products are affected: PnPSCADA (cross platforms): v2.*." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-12" ;
    icsa:vendor "SDG Technologies" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-13" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Vuforia Studio" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-29502; CVE-2023-31200; CVE-2023-29152; CVE-2023-24476; CVE-2023-27881; CVE-2023-29168" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-352; CWE-285; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2023-24476,
        cve-res:CVE-2023-27881,
        cve-res:CVE-2023-29152,
        cve-res:CVE-2023-29168,
        cve-res:CVE-2023-29502,
        cve-res:CVE-2023-31200 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-285,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vuforia Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PTC reports these vulnerabilities affect the following Vuforia Studio products: Vuforia Studio: all versions prior to 9.9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-13" ;
    icsa:vendor "PTC" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-14" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PanelView 800" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Telecommunications" ;
    icsa:cveNumber "CVE-2019-16748; CVE-2020-36177" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2019-16748,
        cve-res:CVE-2020-36177 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PanelView 800" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PanelView 800; are affected: PanelView 800-2711R-T4T: Version 5.011 to 8.011 PanelView 800-2711R-T7T: Version 5.011 to 8.011 PanelView 800-2711R-T10T: Version 5.011 to 8.011.; a graphics terminal" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-14" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-131-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-131-15" ;
    dcterms:issued "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2443" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2023-2443 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: ThinManager: Versions 13.0 to 13.0.1.; The following versions of ThinManager; a software management platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-131-15" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-136-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-136-01" ;
    dcterms:issued "2023-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Snap One OvrC Cloud (Update A)" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2023-28386; CVE-2023-31245; CVE-2024-50380; CVE-2023-25183; CVE-2023-28649; CVE-2023-31193; CVE-2023-31240; CVE-2023-28412; CVE-2024-50381; CVE-2023-31241" ;
    icsa:cweNumber "CWE-912; CWE-290; CWE-306; CWE-204; CWE-284; CWE-20; CWE-798; CWE-345; CWE-319; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2023-25183,
        cve-res:CVE-2023-28386,
        cve-res:CVE-2023-28412,
        cve-res:CVE-2023-28649,
        cve-res:CVE-2023-31193,
        cve-res:CVE-2023-31240,
        cve-res:CVE-2023-31241,
        cve-res:CVE-2023-31245,
        cve-res:CVE-2024-50380,
        cve-res:CVE-2024-50381 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-204,
        cwe-res:CWE-284,
        cwe-res:CWE-290,
        cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-345,
        cwe-res:CWE-601,
        cwe-res:CWE-798,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OvrC Cloud, OvrC Pro Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Snap One component is affected: OvrC Pro: All versions prior to 7.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-136-01" ;
    icsa:vendor "Snap One" ;
    icsa:year 2023 .

icsa-res:ICSA-23-136-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-136-02" ;
    dcterms:issued "2023-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell ArmorStart" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-29023; CVE-2023-29027; CVE-2023-29029; CVE-2023-29030; CVE-2023-29026; CVE-2023-29024; CVE-2023-29022; CVE-2023-29028; CVE-2023-29025; CVE-2023-29031" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-29022,
        cve-res:CVE-2023-29023,
        cve-res:CVE-2023-29024,
        cve-res:CVE-2023-29025,
        cve-res:CVE-2023-29026,
        cve-res:CVE-2023-29027,
        cve-res:CVE-2023-29028,
        cve-res:CVE-2023-29029,
        cve-res:CVE-2023-29030,
        cve-res:CVE-2023-29031 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ArmorStart" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell ArmorStart are affected: ArmorStart ST281E: Version 2.004.06 and later ArmorStart ST284E: All versions ArmorStart ST280E: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-136-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-136-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-136-03" ;
    dcterms:issued "2023-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Vantagepoint" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2444" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2023-2444 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Vantagepoint" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation FactoryTalk Vantagepoint are affected: FactoryTalk Vantagepoint: All versions prior to 8.40." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-136-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-138-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-138-01" ;
    dcterms:issued "2023-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Carlo Gavazzi Powersoft" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2017-20184" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2017-20184 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Powersoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an energy management software; are affected: Powersoft: Versions 2.1.1.1 and prior.; The following versions of Carlo Gavazzi Powersoft" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-138-01" ;
    icsa:vendor "Carlo Gavazzi" ;
    icsa:year 2023 .

icsa-res:ICSA-23-138-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-138-02" ;
    dcterms:issued "2023-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC WS Series (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-1618" ;
    icsa:cweNumber "CWE-489" ;
    icsa:hasCVE cve-res:CVE-2023-1618 ;
    icsa:hasCWE cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WS0-GETH00200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "--------- Begin Update A Part 1 of 2 -------- The following versions of Mitsubishi Electric MELSEC WS Series; an ethernet interface module; are affected: WS0-GETH00200: Serial numbers 2310**** and prior --------- End Update A Part 1 of 2 ---------" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-138-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-138-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-138-03" ;
    dcterms:issued "2023-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MicroSCADA Pro/X SYS600" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2011-1207" ;
    icsa:cweNumber "CWE-863" ;
    icsa:hasCVE cve-res:CVE-2011-1207 ;
    icsa:hasCWE cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroSCADA Pro/X SYS600 Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi Energy's MicroSCADA Pro/X SYS600 products are affected: SYS600: 9.4 FP2 Hotfix 5 and earlier SYS600: 10.1.1 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-138-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-138-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-138-04" ;
    dcterms:issued "2023-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls OpenBlue Enterprise Manager Data Collector" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2025; CVE-2023-2024" ;
    icsa:cweNumber "CWE-200; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-2024,
        cve-res:CVE-2023-2025 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenBlue Enterprise Manager Data Collector" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Johnson Controls products are affected: OpenBlue Enterprise Manager Data Collector: Firmware versions prior to 3.2.5.75." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-138-04" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-143-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-143-01" ;
    dcterms:issued "2023-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy's AFS65x, AFS67x, AFR67x and AFF66x Products" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-40674; CVE-2022-43680" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2022-40674,
        cve-res:CVE-2022-43680 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AFS65x, AFS67x, AFR67x and AFF66x series products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi Energy's AFS65x; AFS660/665C; AFS670v2: Firmware 7.1.05 and earlier AFS670/675; AFR67x and AFF66x series products; AFS67x; AFR67x: Firmware 9.1.07 and earlier AFF660/665: Firmware 03.0.02 and earlier AFS65x: All versions.; are affected: AFS660/665S" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-143-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-143-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-143-02" ;
    dcterms:issued "2023-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy’s RTU500 Series Product (UPDATE B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-4304; CVE-2022-0778; CVE-2021-3711; CVE-2022-23937; CVE-2023-0286; CVE-2021-3712" ;
    icsa:cweNumber "CWE-120; CWE-208; CWE-835; CWE-843; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-3711,
        cve-res:CVE-2021-3712,
        cve-res:CVE-2022-0778,
        cve-res:CVE-2022-23937,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2023-0286 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-208,
        cwe-res:CWE-835,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RTU500 series CMU Firmware: version 12.4.1 through 12.4.12; are affected: RTU500 series CMU Firmware: version 12.0.1 through 12.0.15; RTU500 series CMU Firmware: version 12.7.1 through 12.7.6; RTU500 series CMU Firmware: version 13.4.1 through 13.4.2.; RTU500 series CMU Firmware: version 12.2.1 through 12.2.12; The following versions of Hitachi Energy's RTU500 Series Product; RTU500 series CMU Firmware: version 13.3.1 through 13.3.3; RTU500 series CMU Firmware: version 13.2.1 through 13.2.6; RTU500 series CMU Firmware: version 12.6.1 through 12.6.9" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-143-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-143-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-143-03" ;
    dcterms:issued "2023-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC Series CPU Module (Update D)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-1424" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2023-1424 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC Series CPU module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports this vulnerability affects the following MELSEC Series CPU module components. The following manuals show how to check the firmware version: \"17.3 Troubleshooting Using the Engineering Tool\"-\"Module diagnostics\" in the MELSEC iQ-F FX5S/FX5UJ/FX5U/FX5UC User's Manual (Hardware) and \"Appendix 1: Checking Production Information and Firmware Version\" in the MELSEC iQ-R Module Configuration Manual: MELSEC iQ-F Series FX5U-32MT/ES; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-80MT/ES; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-32MT/ESS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-80MR/ES; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-64MT/DSS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5UC-32MT/D; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5UC-32MT/DSS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-64MR/DS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-32MR/DS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5UC-64MT/D; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-80MT/DSS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5UC-64MT/DSS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-32MR/ES; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-80MT/DS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-64MR/ES; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-64MT/ES; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-32MT/DS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-80MR/DS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-64MT/ESS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-80MT/ESS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-32MT/DSS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5UC-32MT/DS-TS: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5UC-32MT/DSS-TS: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5UC-32MR/DS-TS: version 1.220 up to and including 1.281 MELSEC iQ-R Series R00CPU: versions 35 and prior MELSEC iQ-R Series R01CPU: versions 35 and prior MELSEC iQ-R Series R02CPU: versions 35 and prior MELSEC iQ-R Series R04(EN)CPU: version 12 up to and including 68 MELSEC iQ-R Series R08(EN)CPU: version 12 up to and including 68 MELSEC iQ-R Series R16(EN)CPU: version 12 up to and including 68 MELSEC iQ-R Series R32(EN)CPU: version 12 up to and including 68 MELSEC iQ-R Series R120(EN)CPU: version 12 up to and including 68 MELSEC iQ-R Series R08SFCPU: version 26 up to and including 31 MELSEC iQ-R Series R16SFCPU: version 26 up to and including 31 MELSEC iQ-R Series R32SFCPU: version 26 up to and including 31 MELSEC iQ-R Series R120SFCPU: version 26 up to and including 31 MELSEC iQ-R Series R08PCPU: version 3 up to and including 37 MELSEC iQ-R Series R16PCPU: version 3 up to and including 37 MELSEC iQ-R Series R32PCPU: version 3 up to and including 37 MELSEC iQ-R Series R120PCPU: version 3 up to and including 37.; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5U-64MT/DS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5UC-96MT/DSS; Serial number 17X**** or later: version 1.220 up to and including 1.281 MELSEC iQ-F Series FX5UC-96MT/D" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-143-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-143-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-143-04" ;
    dcterms:issued "2023-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-29503; CVE-2023-27916; CVE-2023-32281; CVE-2023-31278; CVE-2023-32289; CVE-2023-28653; CVE-2023-32539; CVE-2023-32203; CVE-2023-32545; CVE-2023-31244" ;
    icsa:cweNumber "CWE-824; CWE-416; CWE-121; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-27916,
        cve-res:CVE-2023-28653,
        cve-res:CVE-2023-29503,
        cve-res:CVE-2023-31244,
        cve-res:CVE-2023-31278,
        cve-res:CVE-2023-32203,
        cve-res:CVE-2023-32281,
        cve-res:CVE-2023-32289,
        cve-res:CVE-2023-32539,
        cve-res:CVE-2023-32545 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape, Cscape EnvisionRV" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Horner Automation's Cscape are affected: Cscape: v9.90 SP8 Cscape EnvisionRV: v4.70." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-143-04" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-145-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-145-01" ;
    dcterms:issued "2023-05-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MXsecurity Series" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-33236; CVE-2023-33235" ;
    icsa:cweNumber "CWE-798; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2023-33235,
        cve-res:CVE-2023-33236 ;
    icsa:hasCWE cwe-res:CWE-77,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MXsecurity Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Moxa reports these vulnerabilities affect the following MXsecurity Series: MXsecurity Series: Software v1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-145-01" ;
    icsa:vendor "Moxa" ;
    icsa:year 2023 .

icsa-res:ICSA-23-150-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-150-01" ;
    dcterms:issued "2023-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-2866" ;
    icsa:cweNumber "CWE-351" ;
    icsa:hasCVE cve-res:CVE-2023-2866 ;
    icsa:hasCWE cwe-res:CWE-351 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "Advantech reports this vulnerability affect the following WebAccess/SCADA product: WebAccess/SCADA: version 8.4.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-150-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2023 .

icsa-res:ICSA-23-152-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-152-01" ;
    dcterms:issued "2023-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess-SCADA" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-22450; CVE-2023-32628; CVE-2023-32540" ;
    icsa:cweNumber "CWE-94; CWE-434" ;
    icsa:hasCVE cve-res:CVE-2023-22450,
        cve-res:CVE-2023-32540,
        cve-res:CVE-2023-32628 ;
    icsa:hasCWE cwe-res:CWE-434,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess Node" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "The following Advantech products are affected: WebAccess/SCADA versions 9.1.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-152-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2023 .

icsa-res:ICSA-23-152-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-152-02" ;
    dcterms:issued "2023-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "HID Global SAFE" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Government Facilities; Transportation Systems; Commercial Facilities; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-2904" ;
    icsa:cweNumber "CWE-471" ;
    icsa:hasCVE cve-res:CVE-2023-2904 ;
    icsa:hasCWE cwe-res:CWE-471 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SAFE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: HID SAFE using the optional External Visitor Manager portal: Versions 5.8.0 through 5.11.3.; The following versions of HID's SAFE; a personnel and access management software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-152-02" ;
    icsa:vendor "HID Global" ;
    icsa:year 2023 .

icsa-res:ICSA-23-157-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-157-01" ;
    dcterms:issued "2023-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-B DOPSoft (Update)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4685; CVE-2023-24014; CVE-2023-25177" ;
    icsa:cweNumber "CWE-122; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-24014,
        cve-res:CVE-2023-25177,
        cve-res:CVE-2023-4685 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft-B DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a human machine interface (HMI); and component of CNCSoft-B 1.0.0.4; are affected are affected: CNCSoft-B DOPSoft: versions prior to v4.0.0.82.; The following versions of CNCSoft-B DOPSoft" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-157-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-157-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-157-02" ;
    dcterms:issued "2023-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series (Update C)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2060; CVE-2023-2062; CVE-2023-2061; CVE-2023-2063" ;
    icsa:cweNumber "CWE-798; CWE-549; CWE-434; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2023-2060,
        cve-res:CVE-2023-2061,
        cve-res:CVE-2023-2062,
        cve-res:CVE-2023-2063 ;
    icsa:hasCWE cwe-res:CWE-434,
        cwe-res:CWE-521,
        cwe-res:CWE-549,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series/iQ-F Series EtherNet/IP Modules and EtherNet/IP Configuration tool" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2023-2063) SW1DNN-EIPCT-BD: version 1.01B and prior (CVE-2023-2062) SW1DNN-EIPCTFX5-BD: version 1.01B and prior (CVE-2023-2062).; CVE-2023-2063) FX5-ENET/IP: All versions (CVE-2023-2060; CVE-2023-2061; Mitsubishi Electric reports these vulnerabilities affect the following MELSEC iQ-R Series/iQ-F Series EtherNet/IP Modules and EtherNet/IP Configuration tool: RJ71EIP91: All versions (CVE-2023-2060" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-157-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-159-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-159-01" ;
    dcterms:issued "2023-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Atlas Copco Power Focus 6000" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-1897; CVE-2023-1898; CVE-2023-1899" ;
    icsa:cweNumber "CWE-334; CWE-319; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2023-1897,
        cve-res:CVE-2023-1898,
        cve-res:CVE-2023-1899 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-319,
        cwe-res:CWE-334 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Power Focus 6000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a smart connected assembly product; are affected: Power Focus 6000: All versions.; The following versions of Power Focus 6000" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-159-01" ;
    icsa:vendor "Atlas Copco" ;
    icsa:year 2023 .

icsa-res:ICSA-23-159-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-159-02" ;
    dcterms:issued "2023-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic Electronics Illustra Pro Gen 4" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0954" ;
    icsa:cweNumber "CWE-489" ;
    icsa:hasCVE cve-res:CVE-2023-0954 ;
    icsa:hasCWE cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Illustra Pro Gen 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Sensormatic Electronics Illustra Pro Gen 4 are affected: Pro Gen 4 Dome: Up to and including Illustra.SS016.05.09.04.0006 Pro Gen 4 PTZ: Up to and including Illustra.SS010.05.09.04.0022." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-159-02" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2023 .

icsa-res:ICSA-23-164-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-164-01" ;
    dcterms:issued "2023-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Datalogics Library Third-Party" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-1709" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-1709 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Library APDFL v18.0.4PlusP1e" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Datalogics library versions are affected: Library APDFL v18.0.4PlusP1e and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-164-01" ;
    icsa:vendor "Datalogics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-164-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-164-02" ;
    dcterms:issued "2023-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Services Platform" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-2639; CVE-2023-2638; CVE-2023-2637" ;
    icsa:cweNumber "CWE-321; CWE-346; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-2637,
        cve-res:CVE-2023-2638,
        cve-res:CVE-2023-2639 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-321,
        cwe-res:CWE-346 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Services Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: FactoryTalk Policy Manager: v6.11.0 FactoryTalk System Services: v6.11.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-164-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-164-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-164-03" ;
    dcterms:issued "2023-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Edge Gateway" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2021-35940" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-35940 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Edge Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following FactoryTalk Edge Gateway products: FactoryTalk Edge Gateway: v1.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-164-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-164-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-164-04" ;
    dcterms:issued "2023-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Transaction Manager" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-2778" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-2778 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Transaction Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following FactoryTalk Transaction Manager products: FactoryTalk Transaction Manager: versions 13.10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-164-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-01" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "SUBNET PowerSYSTEM Center" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-29158; CVE-2023-32659" ;
    icsa:cweNumber "CWE-294; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-29158,
        cve-res:CVE-2023-32659 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerSYSTEM Center" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a multi-function management platform; The following versions of SUBNET PowerSYSTEM Center; are affected: PowerSYSTEM Center: 2020 U10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-01" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-02" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccessSCADA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Chemical; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-1437" ;
    icsa:cweNumber "CWE-822" ;
    icsa:hasCVE cve-res:CVE-2023-1437 ;
    icsa:hasCWE cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: WebAccess/SCADA: All versions prior to 9.1.4.; The following versions of Advantech WebAccess/SCADA; a browser-based SCADA software package" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-03" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM Q200 Devices" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-43545; CVE-2023-31238; CVE-2023-30901; CVE-2022-43398; CVE-2022-43546; CVE-2022-43439" ;
    icsa:cweNumber "CWE-20; CWE-732; CWE-384; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2022-43398,
        cve-res:CVE-2022-43439,
        cve-res:CVE-2022-43545,
        cve-res:CVE-2022-43546,
        cve-res:CVE-2023-30901,
        cve-res:CVE-2023-31238 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-352,
        cwe-res:CWE-384,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "POWER METER SICAM Q200 family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities were identified in the webserver of the following Q200 devices: POWER METER SICAM Q200 family: versions prior to V2.70." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-04" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMOTION" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-27465" ;
    icsa:cweNumber "CWE-213" ;
    icsa:hasCVE cve-res:CVE-2023-27465 ;
    icsa:hasCWE cwe-res:CWE-213 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMOTION" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIMOTION C240 (6AU1240-1AA00-0AA0): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION C240 PN (6AU1240-1AB00-0AA0): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION D410-2 DP (6AU1410-2AA00-0AA0): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION D425-2 DP (6AU1425-2AA00-0AA0): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION D435-2 DP (6AU1435-2AA00-0AA0): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0): All versions including V5.4 and later SIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0): All versions including V5.4 and later but prior to V5.5 SP1 SIMOTION P320-4 E (6AU1320-4DE65-3AF0): All versions including V5.4 and later SIMOTION P320-4 S (6AU1320-4DS66-3AG0): All versions including V5.4 and later." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-05" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC" ;
    icsa:CVSSScore "3.9"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-28829" ;
    icsa:cweNumber "CWE-477" ;
    icsa:hasCVE cve-res:CVE-2023-28829 ;
    icsa:hasCWE cwe-res:CWE-477 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIMATIC NET PC Software V14: All versions SIMATIC NET PC Software V15: All versions SIMATIC PCS 7 V8.2: All versions SIMATIC PCS 7 V9.0: All versions SIMATIC PCS 7 V9.1: All versions SIMATIC WinCC: All versions prior to V8.0 SINAUT Software ST7sc: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-06" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Portal" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-30757" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2023-30757 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Totally Integrated Automation (TIA) Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: Totally Integrated Automation Portal (TIA Portal) V14: All versions Totally Integrated Automation Portal (TIA Portal) V15: All versions Totally Integrated Automation Portal (TIA Portal) V15.1: All versions Totally Integrated Automation Portal (TIA Portal) V16: All versions Totally Integrated Automation Portal (TIA Portal) V17: All versions Totally Integrated Automation Portal (TIA Portal) V18: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-07" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC V7" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-30897" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2023-30897 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC V7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIMATIC WinCC: All versions prior to V7.5.2.13." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-08" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 and Derived Products" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-25910" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2023-25910 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS 7, SIMATIC S7-PM, SIMATIC STEP 7 V5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIMATIC PCS 7: All versions SIMATIC S7-PM: All versions SIMATIC STEP 7 V5: All versions prior to V5.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-09" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-26495" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-26495 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: Solid Edge SE2023: All versions prior to V223.0 Update 5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-10" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 TM MFP BIOS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-29562; CVE-2021-42376; CVE-2021-42384; CVE-2021-42382; CVE-2021-42375; CVE-2021-42386; CVE-2021-20269; CVE-2021-33574; CVE-2023-0394; CVE-2021-3999; CVE-2022-40307; CVE-2022-3028; CVE-2021-28831; CVE-2022-42703; CVE-2022-23218; CVE-2023-1073; CVE-2022-41222; CVE-2021-3326; CVE-2021-27645; CVE-2021-42383; CVE-2021-42385; CVE-2022-39190; CVE-2022-2588; CVE-2022-21233; CVE-2020-27618; CVE-2022-3586; CVE-2021-3998; CVE-2022-2905; CVE-2019-25013; CVE-2022-20421; CVE-2020-1752; CVE-2021-35942; CVE-2022-4378; CVE-2021-38604; CVE-2022-20422; CVE-2022-28391; CVE-2022-39188; CVE-2021-42378; CVE-2021-42381; CVE-2021-42379; CVE-2023-0179; CVE-2022-3435; CVE-2021-42377; CVE-2022-30065; CVE-2022-2585; CVE-2021-42374; CVE-2016-10228; CVE-2020-10029; CVE-2022-23219; CVE-2021-42380; CVE-2022-1882; CVE-2021-42373; CVE-2022-4662" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-276; CWE-311; CWE-617; CWE-476; CWE-400; CWE-763; CWE-455; CWE-835; CWE-20; CWE-190; CWE-362; CWE-193; CWE-120; CWE-787; CWE-119; CWE-755; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2016-10228,
        cve-res:CVE-2019-25013,
        cve-res:CVE-2020-10029,
        cve-res:CVE-2020-1752,
        cve-res:CVE-2020-27618,
        cve-res:CVE-2020-29562,
        cve-res:CVE-2021-20269,
        cve-res:CVE-2021-27645,
        cve-res:CVE-2021-28831,
        cve-res:CVE-2021-3326,
        cve-res:CVE-2021-33574,
        cve-res:CVE-2021-35942,
        cve-res:CVE-2021-38604,
        cve-res:CVE-2021-3998,
        cve-res:CVE-2021-3999,
        cve-res:CVE-2021-42373,
        cve-res:CVE-2021-42374,
        cve-res:CVE-2021-42375,
        cve-res:CVE-2021-42376,
        cve-res:CVE-2021-42377,
        cve-res:CVE-2021-42378,
        cve-res:CVE-2021-42379,
        cve-res:CVE-2021-42380,
        cve-res:CVE-2021-42381,
        cve-res:CVE-2021-42382,
        cve-res:CVE-2021-42383,
        cve-res:CVE-2021-42384,
        cve-res:CVE-2021-42385,
        cve-res:CVE-2021-42386,
        cve-res:CVE-2022-1882,
        cve-res:CVE-2022-20421,
        cve-res:CVE-2022-20422,
        cve-res:CVE-2022-21233,
        cve-res:CVE-2022-23218,
        cve-res:CVE-2022-23219,
        cve-res:CVE-2022-2585,
        cve-res:CVE-2022-2588,
        cve-res:CVE-2022-28391,
        cve-res:CVE-2022-2905,
        cve-res:CVE-2022-30065,
        cve-res:CVE-2022-3028,
        cve-res:CVE-2022-3435,
        cve-res:CVE-2022-3586,
        cve-res:CVE-2022-39188,
        cve-res:CVE-2022-39190,
        cve-res:CVE-2022-40307,
        cve-res:CVE-2022-41222,
        cve-res:CVE-2022-42703,
        cve-res:CVE-2022-4378,
        cve-res:CVE-2022-4662,
        cve-res:CVE-2023-0179,
        cve-res:CVE-2023-0394,
        cve-res:CVE-2023-1073 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-193,
        cwe-res:CWE-20,
        cwe-res:CWE-276,
        cwe-res:CWE-311,
        cwe-res:CWE-362,
        cwe-res:CWE-400,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-455,
        cwe-res:CWE-476,
        cwe-res:CWE-617,
        cwe-res:CWE-755,
        cwe-res:CWE-763,
        cwe-res:CWE-787,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 TM MFP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports these vulnerabilities affect the BIOS of the following SIMATIC S7-1500 products: SIMATIC S7-1500 TM MFP - BIOS: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-11" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 TM MFP Linux Kernel" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-2663; CVE-2022-3115; CVE-2022-2097; CVE-2021-4037; CVE-2022-0171; CVE-2022-20566; CVE-2023-0465; CVE-2022-40307; CVE-2022-3625; CVE-2022-36879; CVE-2022-47929; CVE-2022-1343; CVE-2021-3759; CVE-2021-33655; CVE-2022-1852; CVE-2022-1473; CVE-2022-3524; CVE-2022-20572; CVE-2022-2905; CVE-2022-20422; CVE-2022-21166; CVE-2022-3564; CVE-2022-42719; CVE-2022-32250; CVE-2023-1095; CVE-2022-4095; CVE-2023-1077; CVE-2022-4129; CVE-2022-42721; CVE-2022-4450; CVE-2022-3545; CVE-2022-1462; CVE-2022-42895; CVE-2022-1012; CVE-2022-2153; CVE-2022-43750; CVE-2022-20421; CVE-2023-0215; CVE-2022-21123; CVE-2022-4139; CVE-2023-0464; CVE-2022-42896; CVE-2022-47518; CVE-2022-3628; CVE-2022-3629; CVE-2022-40768; CVE-2022-3565; CVE-2022-4662; CVE-2022-3303; CVE-2022-42432; CVE-2022-41849; CVE-2022-36280; CVE-2022-2078; CVE-2022-21125; CVE-2022-41218; CVE-2022-47946; CVE-2023-23455; CVE-2022-2274; CVE-2022-3169; CVE-2022-21505; CVE-2022-2602; CVE-2022-39190; CVE-2022-1292; CVE-2022-2588; CVE-2022-3521; CVE-2022-3586; CVE-2023-0590; CVE-2022-3649; CVE-2022-39188; CVE-2023-23454; CVE-2022-2959; CVE-2022-1184; CVE-2022-42329; CVE-2023-23559; CVE-2022-1679; CVE-2023-0286; CVE-2022-3104; CVE-2022-41850; CVE-2022-3621; CVE-2022-3635; CVE-2022-3633; CVE-2022-42328; CVE-2022-42720; CVE-2022-47520; CVE-2023-0466; CVE-2022-42722; CVE-2022-3028; CVE-2022-26373; CVE-2022-42703; CVE-2023-26607; CVE-2022-36946; CVE-2022-3646; CVE-2022-4304; CVE-2022-41222; CVE-2022-2978; CVE-2022-3534; CVE-2022-36123; CVE-2022-3594; CVE-2022-3606; CVE-2022-32296; CVE-2022-1434; CVE-2022-2503; CVE-2022-2586; CVE-2022-2327; CVE-2022-41674; CVE-2022-1882; CVE-2022-34918" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-305; CWE-311; CWE-476; CWE-400; CWE-404; CWE-668; CWE-455; CWE-401; CWE-326; CWE-835; CWE-20; CWE-362; CWE-121; CWE-843; CWE-457; CWE-190; CWE-459; CWE-120; CWE-824; CWE-787; CWE-284; CWE-923; CWE-78; CWE-119; CWE-327; CWE-203; CWE-863; CWE-287; CWE-667; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-33655,
        cve-res:CVE-2021-3759,
        cve-res:CVE-2021-4037,
        cve-res:CVE-2022-0171,
        cve-res:CVE-2022-1012,
        cve-res:CVE-2022-1184,
        cve-res:CVE-2022-1292,
        cve-res:CVE-2022-1343,
        cve-res:CVE-2022-1434,
        cve-res:CVE-2022-1462,
        cve-res:CVE-2022-1473,
        cve-res:CVE-2022-1679,
        cve-res:CVE-2022-1852,
        cve-res:CVE-2022-1882,
        cve-res:CVE-2022-20421,
        cve-res:CVE-2022-20422,
        cve-res:CVE-2022-20566,
        cve-res:CVE-2022-20572,
        cve-res:CVE-2022-2078,
        cve-res:CVE-2022-2097,
        cve-res:CVE-2022-21123,
        cve-res:CVE-2022-21125,
        cve-res:CVE-2022-21166,
        cve-res:CVE-2022-21505,
        cve-res:CVE-2022-2153,
        cve-res:CVE-2022-2274,
        cve-res:CVE-2022-2327,
        cve-res:CVE-2022-2503,
        cve-res:CVE-2022-2586,
        cve-res:CVE-2022-2588,
        cve-res:CVE-2022-2602,
        cve-res:CVE-2022-26373,
        cve-res:CVE-2022-2663,
        cve-res:CVE-2022-2905,
        cve-res:CVE-2022-2959,
        cve-res:CVE-2022-2978,
        cve-res:CVE-2022-3028,
        cve-res:CVE-2022-3104,
        cve-res:CVE-2022-3115,
        cve-res:CVE-2022-3169,
        cve-res:CVE-2022-32250,
        cve-res:CVE-2022-32296,
        cve-res:CVE-2022-3303,
        cve-res:CVE-2022-34918,
        cve-res:CVE-2022-3521,
        cve-res:CVE-2022-3524,
        cve-res:CVE-2022-3534,
        cve-res:CVE-2022-3545,
        cve-res:CVE-2022-3564,
        cve-res:CVE-2022-3565,
        cve-res:CVE-2022-3586,
        cve-res:CVE-2022-3594,
        cve-res:CVE-2022-3606,
        cve-res:CVE-2022-36123,
        cve-res:CVE-2022-3621,
        cve-res:CVE-2022-3625,
        cve-res:CVE-2022-3628,
        cve-res:CVE-2022-36280,
        cve-res:CVE-2022-3629,
        cve-res:CVE-2022-3633,
        cve-res:CVE-2022-3635,
        cve-res:CVE-2022-3646,
        cve-res:CVE-2022-3649,
        cve-res:CVE-2022-36879,
        cve-res:CVE-2022-36946,
        cve-res:CVE-2022-39188,
        cve-res:CVE-2022-39190,
        cve-res:CVE-2022-40307,
        cve-res:CVE-2022-40768,
        cve-res:CVE-2022-4095,
        cve-res:CVE-2022-41218,
        cve-res:CVE-2022-41222,
        cve-res:CVE-2022-4129,
        cve-res:CVE-2022-4139,
        cve-res:CVE-2022-41674,
        cve-res:CVE-2022-41849,
        cve-res:CVE-2022-41850,
        cve-res:CVE-2022-42328,
        cve-res:CVE-2022-42329,
        cve-res:CVE-2022-42432,
        cve-res:CVE-2022-42703,
        cve-res:CVE-2022-42719,
        cve-res:CVE-2022-42720,
        cve-res:CVE-2022-42721,
        cve-res:CVE-2022-42722,
        cve-res:CVE-2022-42895,
        cve-res:CVE-2022-42896,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-43750,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2022-4662,
        cve-res:CVE-2022-47518,
        cve-res:CVE-2022-47520,
        cve-res:CVE-2022-47929,
        cve-res:CVE-2022-47946,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0464,
        cve-res:CVE-2023-0465,
        cve-res:CVE-2023-0466,
        cve-res:CVE-2023-0590,
        cve-res:CVE-2023-1077,
        cve-res:CVE-2023-1095,
        cve-res:CVE-2023-23454,
        cve-res:CVE-2023-23455,
        cve-res:CVE-2023-23559,
        cve-res:CVE-2023-26607 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-203,
        cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-295,
        cwe-res:CWE-305,
        cwe-res:CWE-311,
        cwe-res:CWE-326,
        cwe-res:CWE-327,
        cwe-res:CWE-362,
        cwe-res:CWE-400,
        cwe-res:CWE-401,
        cwe-res:CWE-404,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-455,
        cwe-res:CWE-457,
        cwe-res:CWE-459,
        cwe-res:CWE-476,
        cwe-res:CWE-667,
        cwe-res:CWE-668,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-824,
        cwe-res:CWE-835,
        cwe-res:CWE-843,
        cwe-res:CWE-863,
        cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 TM MFP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIMATIC S7-1500 TM MFP - Linux Kernel: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-12" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS Medium Voltage Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-32206; CVE-2021-42384; CVE-2021-42382; CVE-2021-42386; CVE-2022-1343; CVE-2022-36946; CVE-2021-42383; CVE-2022-32205; CVE-2022-0547; CVE-2022-35252; CVE-2022-1199; CVE-2021-42385; CVE-2022-1473; CVE-2022-1292; CVE-2022-32208; CVE-2021-42378; CVE-2021-42381; CVE-2021-42379; CVE-2018-25032; CVE-2022-32207; CVE-2022-23308; CVE-2021-42374; CVE-2021-42380" ;
    icsa:cweNumber "CWE-404; CWE-770; CWE-287; CWE-416; CWE-276; CWE-787; CWE-1286; CWE-20; CWE-78; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-25032,
        cve-res:CVE-2021-42374,
        cve-res:CVE-2021-42378,
        cve-res:CVE-2021-42379,
        cve-res:CVE-2021-42380,
        cve-res:CVE-2021-42381,
        cve-res:CVE-2021-42382,
        cve-res:CVE-2021-42383,
        cve-res:CVE-2021-42384,
        cve-res:CVE-2021-42385,
        cve-res:CVE-2021-42386,
        cve-res:CVE-2022-0547,
        cve-res:CVE-2022-1199,
        cve-res:CVE-2022-1292,
        cve-res:CVE-2022-1343,
        cve-res:CVE-2022-1473,
        cve-res:CVE-2022-23308,
        cve-res:CVE-2022-32205,
        cve-res:CVE-2022-32206,
        cve-res:CVE-2022-32207,
        cve-res:CVE-2022-32208,
        cve-res:CVE-2022-35252,
        cve-res:CVE-2022-36946 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-1286,
        cwe-res:CWE-20,
        cwe-res:CWE-276,
        cwe-res:CWE-287,
        cwe-res:CWE-295,
        cwe-res:CWE-404,
        cwe-res:CWE-416,
        cwe-res:CWE-770,
        cwe-res:CWE-78,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS MV (medium voltage) products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following SINAMICS MV (medium voltage) products integrate the SCALANCE S615 device which contains these vulnerabilities: SINAMICS GL150: all versions produced between Oct 2021 and May 2023 with the C68 option. SINAMICS PERFECT HARMONY GH180 6SR5: all versions produced between Oct 2021 and May 2023 with installed SCALANCE S615 device. SINAMICS SL150: all versions produced between Oct 2021 and May 2023 with the C68 option." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-13" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM A8000 Devices" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-33919; CVE-2023-33921; CVE-2023-33920" ;
    icsa:cweNumber "CWE-798; CWE-77; CWE-749" ;
    icsa:hasCVE cve-res:CVE-2023-33919,
        cve-res:CVE-2023-33920,
        cve-res:CVE-2023-33921 ;
    icsa:hasCWE cwe-res:CWE-749,
        cwe-res:CWE-77,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM A8000 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: CP-8031 MASTER MODULE (6MF2803-1AA00): All versions prior to CPCI85 V05 CP-8050 MASTER MODULE (6MF2805-0AA00): All versions prior to CPCI85 V05." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-166-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-166-14" ;
    dcterms:issued "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-33124; CVE-2023-33121; CVE-2023-33122; CVE-2023-33123" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2023-33121,
        cve-res:CVE-2023-33122,
        cve-res:CVE-2023-33123,
        cve-res:CVE-2023-33124 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go, Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: JT2Go: All versions prior to v14.2.0.3 Teamcenter Visualization V13.2: All versions prior to v13.2.0.13 Teamcenter Visualization V13.3: All versions prior to v 13.3.0.10 Teamcenter Visualization V14.0: All versions prior to v 14.0.0.6 Teamcenter Visualization V14.1: All versions prior to v 14.1.0.8 Teamcenter Visualization V14.2: All versions prior to v 14.2.0.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-166-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-171-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-171-01" ;
    dcterms:issued "2023-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Enphase Envoy (Update A)" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-33869" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2023-33869 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Envoy" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Enphase Envoy; an energy monitoring device; is affected: Envoy: D7.0.88." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-171-01" ;
    icsa:vendor "Enphase" ;
    icsa:year 2023 .

icsa-res:ICSA-23-171-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-171-02" ;
    dcterms:issued "2023-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Enphase Installer Toolkit Android App (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-32274" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2023-32274 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Enphase Installer Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is affected: Installer Toolkit: 3.27.0.; The following version of Enphase Installer Toolkit; a software application" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-171-02" ;
    icsa:vendor "Enphase" ;
    icsa:year 2023 .

icsa-res:ICSA-23-173-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-173-02" ;
    dcterms:issued "2023-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech R-SeeNet" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-3256; CVE-2023-2611" ;
    icsa:cweNumber "CWE-798; CWE-73" ;
    icsa:hasCVE cve-res:CVE-2023-2611,
        cve-res:CVE-2023-3256 ;
    icsa:hasCWE cwe-res:CWE-73,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "R-SeeNet" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Advantech reports these vulnerabilities affects the following R-SeeNet monitoring application: R-SeeNet: versions 2.4.22 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-173-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2023 .

icsa-res:ICSA-23-173-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-173-03" ;
    dcterms:issued "2023-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "SpiderControl SCADAWebServer" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-3329" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2023-3329 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCADA WebServer" ;
    icsa:productDistribution "Europe, Worldwide" ;
    icsa:productsAffected "The following versions of SCADAWebServer are affected: SCADAWebServer: Versions 2.08 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-173-03" ;
    icsa:vendor "SpiderControl" ;
    icsa:year 2023 .

icsa-res:ICSA-23-178-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-178-01" ;
    dcterms:issued "2023-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy FOXMAN-UN and UNEM Products" ;
    icsa:CVSSScore "4.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-1711" ;
    icsa:cweNumber "CWE-117" ;
    icsa:hasCVE cve-res:CVE-2023-1711 ;
    icsa:hasCWE cwe-res:CWE-117 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FOXMAN-UN, UNEM Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FOXMAN-UN and UNEM; are affected: FOXMAN-UN: Version R14B FOXMAN-UN: Version R14A FOXMAN-UN: Version R11B FOXMAN-UN: Version R11A FOXMAN-UN: Version R10C FOXMAN-UN: Version R9C UNEM: Version R14B UNEM: Version R14A UNEM: Version R11B UNEM: Version R11A UNEM: Version R10C UNEM: Version R9C.; network management system toolsets; are affected: FOXMAN-UN: Version R16A FOXMAN-UN: Version R15B FOXMAN-UN: Version R15A UNEM: Version R16A UNEM Version R15B UNEM: Version R15A The following version and sub-versions of FOXMAN-UN and UNEM" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-178-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-180-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-180-01" ;
    dcterms:issued "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics InfraSuite Device Master" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-30765; CVE-2023-34347; CVE-2023-34316" ;
    icsa:cweNumber "CWE-284; CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-30765,
        cve-res:CVE-2023-34316,
        cve-res:CVE-2023-34347 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InfraSuite Device Master" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: InfraSuite Device Master: Versions prior to 1.0.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-180-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-180-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-180-02" ;
    dcterms:issued "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-1049" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2023-1049 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Operator Terminal Expert VXDZ" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Schneider Electric EcoStruxure Operator Terminal Expert; are affected: EcoStruxure Operator Terminal Expert: Versions 3.3 SP1 and prior.; a human machine interface (HMI) application" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-180-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-180-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-180-03" ;
    dcterms:issued "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ovarro TBox RTUs" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems; Energy; Transportation Systems: Communications" ;
    icsa:cveNumber "CVE-2023-3395; CVE-2023-36610; CVE-2023-36609; CVE-2023-36611; CVE-2023-36608; CVE-2023-36607" ;
    icsa:cweNumber "CWE-862; CWE-829; CWE-285; CWE-256; CWE-327; CWE-331" ;
    icsa:hasCVE cve-res:CVE-2023-3395,
        cve-res:CVE-2023-36607,
        cve-res:CVE-2023-36608,
        cve-res:CVE-2023-36609,
        cve-res:CVE-2023-36610,
        cve-res:CVE-2023-36611 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-285,
        cwe-res:CWE-327,
        cwe-res:CWE-331,
        cwe-res:CWE-829,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TBox RTUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2023-36611) TBox MS-CPU32: Version 1.46 through 1.50.598 (CVE-2023-36608) TBox MS-CPU32-S2: Version 1.46 through 1.50.598 (CVE-2023-36608) TBox LT2: Version 1.46 through 1.50.598 (CVE-2023-36608) TBox TG2: Version 1.46 through 1.50.598 (CVE-2023-36608) TBox RM2: Version 1.46 through 1.50.598 (CVE-2023-36608) TBox MS-CPU32: All versions (CVE-2023-3395) TBox MS-CPU32-S2: All versions (CVE-2023-3395) TBox LT2: All versions (CVE-2023-3395) TBox TG2: All versions (CVE-2023-3395) TBox RM2: All versions (CVE-2023-3395).; CVE-2023-36611) TBox TG2: Version 1.50.598 and prior (CVE-2023-36607; CVE-2023-36610; CVE-2023-36611) TBox LT2: Version 1.50.598 and prior (CVE-2023-36607; The following firmware versions of TBox RTUs are affected: TBox MS-CPU32: Version 1.50.598 and prior (CVE-2023-36607; CVE-2023-36611) TBox MS-CPU32-S2: Version 1.50.598 and prior (CVE-2023-36607; CVE-2023-36609; CVE-2023-36611) TBox RM2: Version 1.50.598 and prior (CVE-2023-36607" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-180-03" ;
    icsa:vendor "Ovarro" ;
    icsa:year 2023 .

icsa-res:ICSA-23-180-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-180-04" ;
    dcterms:issued "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-F Series (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2846" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2023-2846 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-F Series" ;
    icsa:productDistribution "Limited region distribution" ;
    icsa:productsAffected "30; DSS: All versions FX3G-xMy/ES-A x=14; R: All versions FX3GE-xMy/z x=24; 64; FX3GC-32MT/DSS: All versions FX3GA-xMy-CM x=24; z=ES; 128; FX3UC-32MT-LT-2: All versions FX3UC-16MT/D-P4; 40; 20; FX3UC-16MR/DSS-P4: All versions FX3G-xMy/ES-A x=14; DSS: All versions FX3GA-xMy-CM x=24; FX3U-64MS/ES: All versions FX3U-xMy/ES-A x=16; R: All versions These products are sold in limited regions: FX3U-xMy/ES-A x=16; 80; y=T; FX3UC-16MR/DS-T: All versions FX3UC-32MT-LT; R: All versions FX3SA-xMy-CM x=10; R: All versions.; ESS: All versions FX3SA-xMy-CM x=10; R: All versions FX3GC-32MT/D; FX3U-64MR/UA1: All versions FX3U-32MS/ES; DSS: All versions FX3S-30My/z-2AD y=T; 32; 14; DSS: All versions Mitsubishi Electric reports this vulnerability affects the following MELSEC-F Series products if they are used with ethernet communication special adapter FX3U-ENET-ADP or ethernet communication block FX3U-ENET(-L): FX3U-xMy/z x=16; 48; 60; FX3UC-16MR/DSS-P4: All versions FX3G-xMy/z x=14; R: All versions FX3S-xMy/z x=10; R; Mitsubishi Electric reports this vulnerability affects the following MELSEC-F Series products: FX3GE-xMy/z x=24; DSS: All versions FX3U-32MR/UA1; z=D; R: All versions FX3UC-xMT/z x=16; R: All versions FX3UC-16MT/D-P4; DS; DSS: All versions FX3UC-16MR/D-T; ESS; 24; 96" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-180-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-187-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-187-01" ;
    dcterms:issued "2023-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "PiiGAB M-Bus" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-33868; CVE-2023-34433; CVE-2023-35765; CVE-2023-36859; CVE-2023-32652; CVE-2023-34995; CVE-2023-31277; CVE-2023-35120; CVE-2023-35987" ;
    icsa:cweNumber "CWE-94; CWE-798; CWE-352; CWE-307; CWE-79; CWE-521; CWE-916; CWE-523; CWE-256" ;
    icsa:hasCVE cve-res:CVE-2023-31277,
        cve-res:CVE-2023-32652,
        cve-res:CVE-2023-33868,
        cve-res:CVE-2023-34433,
        cve-res:CVE-2023-34995,
        cve-res:CVE-2023-35120,
        cve-res:CVE-2023-35765,
        cve-res:CVE-2023-35987,
        cve-res:CVE-2023-36859 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-307,
        cwe-res:CWE-352,
        cwe-res:CWE-521,
        cwe-res:CWE-523,
        cwe-res:CWE-79,
        cwe-res:CWE-798,
        cwe-res:CWE-916,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "M-Bus SoftwarePack 900S" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PiiGAB reports these vulnerabilities affect the following wireless meter reading software: M-Bus SoftwarePack 900S." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-187-01" ;
    icsa:vendor "Processinformation i Goteborg Aktiebolag (PiiGAB)" ;
    icsa:year 2023 .

icsa-res:ICSA-23-187-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-187-02" ;
    dcterms:issued "2023-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABUS TVIP" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Comercial Facilities" ;
    icsa:cveNumber "CVE-2023-26609" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2023-26609 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABUS Security Camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ABUS TVIP; an indoor security camera; are affected: ABUS TVIP: 20000-21150." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-187-02" ;
    icsa:vendor "ABUS" ;
    icsa:year 2023 .

icsa-res:ICSA-23-192-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-192-01" ;
    dcterms:issued "2023-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Enhanced HIM" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-2746" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2023-2746 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Enhanced HIM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Enhanced HIM: Version 1.001.; a communication interface; The following versions of Rockwell Automations Enhanced HIM" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-192-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-192-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-192-02" ;
    dcterms:issued "2023-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic Electronics iSTAR" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3127" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-3127 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iSTAR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports this vulnerability affects the following versions of Sensormatic Electronics iSTAR products: iSTAR Ultra and iSTAR Ultra LT: Firmware after version 6.8.6 and prior to 6.9.2 CU01 iSTAR Ultra G2 and iSTAR Edge G2: Firmware versions prior to 6.9.2 CU01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-192-02" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2023 .

icsa-res:ICSA-23-192-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-192-03" ;
    dcterms:issued "2023-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Panasonic Control FPWin Pro7" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing: Food and Agriculture" ;
    icsa:cveNumber "CVE-2023-28729; CVE-2023-28730; CVE-2023-28728" ;
    icsa:cweNumber "CWE-119; CWE-843; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-28728,
        cve-res:CVE-2023-28729,
        cve-res:CVE-2023-28730 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Control FPWIN Pro7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Panasonic Control FPWIN; are affected: Control FPWIN: version 7.6.0.3 and all previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-192-03" ;
    icsa:vendor "Panasonic" ;
    icsa:year 2023 .

icsa-res:ICSA-23-193-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-193-01" ;
    dcterms:issued "2023-07-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Select Communication Modules" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3595; CVE-2023-3596" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-3595,
        cve-res:CVE-2023-3596 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK, 1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and C: Versions 5.008 and 5.028 and prior 1756-EN2T Series D: Versions 11.003 and prior 1756-EN2TK Series A; and C: Versions 5.008 and 5.028 and prior 1756-EN2TXT Series D: Versions 11.003 and prior 1756-EN2TP Series A: Versions 11.003 and prior 1756-EN2TPK Series A: Versions 11.003 and prior 1756-EN2TPXT Series A: Versions 11.003 and prior 1756-EN2TR Series A and B: Versions 5.008 and 5.028 and prior 1756-EN2TR Series C: Versions 11.003 and prior 1756-EN2TRK Series A and B: Versions 5.008 and 5.028 and prior 1756-EN2TRK Series C: Versions 11.003 and prior 1756-EN2TRXT Series A and B: Versions 5.008 and 5.028 and prior 1756-EN2TRXT Series C: Versions 11.003 and prior 1756-EN2F Series A and B: Versions 5.008 and 5.028 and prior 1756-EN2F Series C: Versions 11.003 and prior 1756-EN2FK Series A and B: Versions 5.008 and 5.028 and prior 1756-EN2FK Series C: Versions 11.003 and prior 1756-EN3TR Series A: Versions 5.008 and 5.028 and prior 1756-EN3TR Series B: Versions 11.003 and prior 1756-EN3TRK Series A: Versions 5.008 and 5.028 and prior 1756-EN3TRK Series B: Versions 11.003 and prior 1756-EN4TR Series A: Versions 5.001 and prior 1756-EN4TRK Series A: Versions 5.001 and prior 1756-EN4TRXT Series A: Versions 5.001 and prior.; and C: Versions 5.008 and 5.028 and prior 1756-EN2TK Series D: Versions 11.003 and prior 1756-EN2TXT Series A; The following Rockwell Automation products are affected: 1756-EN2T Series A; B" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-193-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-194-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-194-01" ;
    dcterms:issued "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-36386; CVE-2022-27781; CVE-2023-36753; CVE-2022-2068; CVE-2021-22946; CVE-2023-36390; CVE-2023-36752; CVE-2022-24903; CVE-2022-27782; CVE-2023-36748; CVE-2022-22576; CVE-2022-1292; CVE-2023-36750; CVE-2023-36754; CVE-2023-36389; CVE-2023-36749; CVE-2022-29562; CVE-2022-32207; CVE-2023-36751; CVE-2022-29561; CVE-2023-36755" ;
    icsa:cweNumber "CWE-352; CWE-120; CWE-287; CWE-79; CWE-276; CWE-77; CWE-326; CWE-20; CWE-78; CWE-295; CWE-319; CWE-327; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-22946,
        cve-res:CVE-2022-1292,
        cve-res:CVE-2022-2068,
        cve-res:CVE-2022-22576,
        cve-res:CVE-2022-24903,
        cve-res:CVE-2022-27781,
        cve-res:CVE-2022-27782,
        cve-res:CVE-2022-29561,
        cve-res:CVE-2022-29562,
        cve-res:CVE-2022-32207,
        cve-res:CVE-2023-36386,
        cve-res:CVE-2023-36389,
        cve-res:CVE-2023-36390,
        cve-res:CVE-2023-36748,
        cve-res:CVE-2023-36749,
        cve-res:CVE-2023-36750,
        cve-res:CVE-2023-36751,
        cve-res:CVE-2023-36752,
        cve-res:CVE-2023-36753,
        cve-res:CVE-2023-36754,
        cve-res:CVE-2023-36755 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20,
        cwe-res:CWE-276,
        cwe-res:CWE-287,
        cwe-res:CWE-295,
        cwe-res:CWE-319,
        cwe-res:CWE-326,
        cwe-res:CWE-327,
        cwe-res:CWE-352,
        cwe-res:CWE-400,
        cwe-res:CWE-77,
        cwe-res:CWE-78,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: RUGGEDCOM ROX MX5000: All versions prior to V2.16.0 RUGGEDCOM ROX MX5000RE: All versions prior to V2.16.0 RUGGEDCOM ROX RX1400: All versions prior to V2.16.0 RUGGEDCOM ROX RX1500: All versions prior to V2.16.0 RUGGEDCOM ROX RX1501: All versions prior to V2.16.0 RUGGEDCOM ROX RX1510: All versions prior to V2.16.0 RUGGEDCOM ROX RX1511: All versions prior to V2.16.0 RUGGEDCOM ROX RX1512: All versions prior to V2.16.0 RUGGEDCOM ROX RX1524: All versions prior to V2.16.0 RUGGEDCOM ROX RX1536: All versions prior to V2.16.0 RUGGEDCOM ROX RX5000: All versions prior to V2.16.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-194-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-194-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-194-02" ;
    dcterms:issued "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass Integrated" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-31810" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-31810 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass Integrated" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports this vulnerability affects the following SiPass integrated products: SiPass integrated: all versions prior to V2.90.3.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-194-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-194-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-194-03" ;
    dcterms:issued "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CN 4100" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-29130; CVE-2023-29131" ;
    icsa:cweNumber "CWE-284; CWE-276" ;
    icsa:hasCVE cve-res:CVE-2023-29130,
        cve-res:CVE-2023-29131 ;
    icsa:hasCWE cwe-res:CWE-276,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CN 4100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SIMATIC CN 4100; are affected: SIMATIC CN 4100: all versions prior to V2.5.; a communication node" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-194-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-194-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-194-04" ;
    dcterms:issued "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC MV500 Devices" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-21166; CVE-2022-4450; CVE-2022-21125; CVE-2022-42329; CVE-2022-4304; CVE-2022-0812; CVE-2022-3643; CVE-2022-42328; CVE-2022-1012; CVE-2023-0215; CVE-2022-21123; CVE-2023-0286; CVE-2022-32296" ;
    icsa:cweNumber "CWE-459; CWE-200; CWE-415; CWE-416; CWE-401; CWE-326; CWE-667; CWE-74; CWE-20; CWE-203" ;
    icsa:hasCVE cve-res:CVE-2022-0812,
        cve-res:CVE-2022-1012,
        cve-res:CVE-2022-21123,
        cve-res:CVE-2022-21125,
        cve-res:CVE-2022-21166,
        cve-res:CVE-2022-32296,
        cve-res:CVE-2022-3643,
        cve-res:CVE-2022-42328,
        cve-res:CVE-2022-42329,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-203,
        cwe-res:CWE-326,
        cwe-res:CWE-401,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-459,
        cwe-res:CWE-667,
        cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC MV500 series devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIMATIC MV540 H (6GF3540-0GE10): All versions prior to v3.3.4 SIMATIC MV540 S (6GF3540-0CD10): All versions prior to v 3.3.4 SIMATIC MV550 H (6GF3550-0GE10): All versions prior to v 3.3.4 SIMATIC MV550 S (6GF3550-0CD10): All versions prior to v 3.3.4 SIMATIC MV560 U (6GF3560-0LE10): All versions prior to v 3.3.4 SIMATIC MV560 X (6GF3560-0HE10): All versions prior to v 3.3.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-194-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-194-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-194-05" ;
    dcterms:issued "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PowerMonitor 1000" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2072" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-2072 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerMonitor 1000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation PowerMonitor 1000 are affected: PowerMonitor 1000: V4.011." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-194-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-194-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-194-06" ;
    dcterms:issued "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Experion PKS, LX and PlantCruise" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-22435; CVE-2023-26597; CVE-2023-24474; CVE-2023-23585; CVE-2023-25770; CVE-2023-24480; CVE-2023-25078; CVE-2023-25948; CVE-2023-25178" ;
    icsa:cweNumber "CWE-122; CWE-697; CWE-121; CWE-394; CWE-502; CWE-116; CWE-345; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-22435,
        cve-res:CVE-2023-23585,
        cve-res:CVE-2023-24474,
        cve-res:CVE-2023-24480,
        cve-res:CVE-2023-25078,
        cve-res:CVE-2023-25178,
        cve-res:CVE-2023-25770,
        cve-res:CVE-2023-25948,
        cve-res:CVE-2023-26597 ;
    icsa:hasCWE cwe-res:CWE-116,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-345,
        cwe-res:CWE-394,
        cwe-res:CWE-400,
        cwe-res:CWE-502,
        cwe-res:CWE-697 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Experion PKS, LX, and PlantCruise" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "and PlantCruise: Experion PKS: versions prior to R520.2 Experion LX: versions prior to R520.2 Experion PlantCruise: versions prior to R520.2.; LX; Honeywell reports these vulnerabilities affect the following versions of Experion PKS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-194-06" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2023 .

icsa-res:ICSA-23-199-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-199-01" ;
    dcterms:issued "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2263" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-2263 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kinetix 5700" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Rockwell Automation Kinetix 5700 DC Bus Power Supply is affected: Kinetix 5700: V13.001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-199-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-199-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-199-02" ;
    dcterms:issued "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Keysight N6845A Geolocation Server" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Government Facilities" ;
    icsa:cveNumber "CVE-2023-34394; CVE-2023-36853" ;
    icsa:cweNumber "CWE-23; CWE-749" ;
    icsa:hasCVE cve-res:CVE-2023-34394,
        cve-res:CVE-2023-36853 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "N6854A Geolocation Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Keysight monitoring products are affected: N6854A Geolocation Server versions 2.4.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-199-02" ;
    icsa:vendor "Keysight Technologies Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-199-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-199-03" ;
    dcterms:issued "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Iagona ScrutisWeb" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-33871; CVE-2023-35189; CVE-2023-38257; CVE-2023-35763" ;
    icsa:cweNumber "CWE-434; CWE-36; CWE-639; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2023-33871,
        cve-res:CVE-2023-35189,
        cve-res:CVE-2023-35763,
        cve-res:CVE-2023-38257 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-36,
        cwe-res:CWE-434,
        cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScrutisWeb" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a web application; are affected: ScrutisWeb: Version 2.1.37 and prior.; The following versions of Iagona ScrutisWeb" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-199-03" ;
    icsa:vendor "Iagona" ;
    icsa:year 2023 .

icsa-res:ICSA-23-199-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-199-04" ;
    dcterms:issued "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Weintek Weincloud" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-32657; CVE-2023-35134; CVE-2023-37362; CVE-2023-34429" ;
    icsa:cweNumber "CWE-640; CWE-237; CWE-307; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-32657,
        cve-res:CVE-2023-34429,
        cve-res:CVE-2023-35134,
        cve-res:CVE-2023-37362 ;
    icsa:hasCWE cwe-res:CWE-237,
        cwe-res:CWE-287,
        cwe-res:CWE-307,
        cwe-res:CWE-640 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Weincloud" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Weintek Weincloud versions are affected: Account API: Versions 0.13.6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-199-04" ;
    icsa:vendor "Weintek" ;
    icsa:year 2023 .

icsa-res:ICSA-23-199-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-199-05" ;
    dcterms:issued "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "GeoVision GV-ADR2701" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-3638" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-3638 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GV-ADR2701" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GeoVision reports this vulnerability affects the following GV-ADR2701 cameras: GV-ADR2701: Version V1.00_2017_12_15." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-199-05" ;
    icsa:vendor "GeoVision" ;
    icsa:year 2023 .

icsa-res:ICSA-23-199-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-199-06" ;
    dcterms:issued "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Cimplicity" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-3463" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2023-3463 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CIMPLICITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following GE Digital products are affected: CIMPLICITY: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-199-06" ;
    icsa:vendor "GE Digital" ;
    icsa:year 2023 .

icsa-res:ICSA-23-199-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-199-07" ;
    dcterms:issued "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "WellinTech KingHistorian" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-45124; CVE-2022-43663" ;
    icsa:cweNumber "CWE-200; CWE-195" ;
    icsa:hasCVE cve-res:CVE-2022-43663,
        cve-res:CVE-2022-45124 ;
    icsa:hasCWE cwe-res:CWE-195,
        cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KingHistorian" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: KingHistorian: version 35.01.00.05.; a time-series database; The following versions of WellinTech KingHistorian" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-199-07" ;
    icsa:vendor "WellinTech" ;
    icsa:year 2023 .

icsa-res:ICSA-23-201-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-201-01" ;
    dcterms:issued "2023-07-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2022-45788" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2022-45788 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Control Expert: All versions prior to V15.3 EcoStruxure Process Expert: Version V2020 and prior Modicon M340 CPU (part numbers BMXP34*): All versions prior to SV3.51 Modicon M580 CPU (part numbers BMEP* and BMEH*): All versions prior to SV4.10 Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S): All versions Modicon Momentum Unity M1E Processor (171CBU*): All versions prior to SV2.6 Modicon MC80 (BMKC80): All versions Legacy Modicon Quantum (140CPU65*) and Premium CPUs (TSXP57*): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-201-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-206-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-206-01" ;
    dcterms:issued "2023-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "AXIS A1001" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-21406" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2023-21406 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AXIS A1001" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of AXIS A1001; are affected: AXIS A1001: 1.65.4 and prior.; a network door controller" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-206-01" ;
    icsa:vendor "Axis Communications" ;
    icsa:year 2023 .

icsa-res:ICSA-23-206-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-206-02" ;
    dcterms:issued "2023-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager ThinServer" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2913" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2023-2913 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager ThinServer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following versions of ThinManager ThinServer; a thin client and remote desktop protocol (RDP) server management software: ThinManager ThinServer: versions 13.0.0”13.0.2 and 13.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-206-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-206-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-206-03" ;
    dcterms:issued "2023-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson ROC800 Series RTU and DL8000 Preset Controller" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-1935" ;
    icsa:cweNumber "CWE-305" ;
    icsa:hasCVE cve-res:CVE-2023-1935 ;
    icsa:hasCWE cwe-res:CWE-305 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ROC800-Series RTU; including ROC800, ROC800L, and DL8000 Preset Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "all hardware series The Series 1 ROC800 and DL8000 became obsolete in 2008 when the Series 2 was introduced.; all hardware series ROC809L & ROC827L” All firmware versions DL8000” All firmware versions; The following products are affected: ROC809 & ROC827” All firmware versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-206-03" ;
    icsa:vendor "Emerson" ;
    icsa:year 2023 .

icsa-res:ICSA-23-206-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-206-04" ;
    dcterms:issued "2023-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls IQ Wifi 6" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3548" ;
    icsa:cweNumber "CWE-307" ;
    icsa:hasCVE cve-res:CVE-2023-3548 ;
    icsa:hasCWE cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IQ Wifi 6" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Johnson Controls products are affected: IQ Wifi 6: All firmware versions prior to 2.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-206-04" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-208-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-208-01" ;
    dcterms:issued "2023-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "ETIC Telecom RAS Authentication" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-3453" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2023-3453 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Remote Access Server (RAS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ETIC Telecom RAS are affected: ETIC Telecom RAS: All versions 4.7.0 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-208-01" ;
    icsa:vendor "ETIC Telecom" ;
    icsa:year 2023 .

icsa-res:ICSA-23-208-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-208-02" ;
    dcterms:issued "2023-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC KEPServerEX" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3825" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-3825 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KEPServerEX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an industrial automation data concentrator and device manager; are affected: KEPServerEX: Versions 6.0 to 6.14.263; The following versions of KEPServerEX" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-208-02" ;
    icsa:vendor "PTC" ;
    icsa:year 2023 .

icsa-res:ICSA-23-208-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-208-03" ;
    dcterms:issued "2023-07-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric CNC Series (Update E)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3346" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2023-3346 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNC Series devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric CNC series products are affected: M800VW (BND-2051W000-**): Versions A8 and prior M800VS (BND-2052W000-**): Versions A8 and prior M80V (BND-2053W000-**): Versions A8 and prior M80VW (BND-2054W000-**): Versions A8 and prior M800W (BND-2005W000-**): Versions FB and prior M800S (BND-2006W000-**): Versions FB and prior M80 (BND-2007W000-**): Versions FB and prior M80W (BND-2008W000-**): Versions FB and prior E80 (BND-2009W000-**): Versions FB and prior C80 (BND-2036W000-**): Versions BF and prior M750VW (BND-1015W002-**): Versions LF and prior M730VW/M720VW (BND-1015W000-**): Versions LF and prior M750VS (BND-1012W002-**): Versions LF and prior M730VS/M720VS (BND-1012W000-**): Versions LF and prior M70V (BND-1018W000-**): Versions LF and prior E70 (BND-1022W000-**): Versions LF and prior Remote Service Gateway Unit (BND-2041W001-**): Versions AD and prior Data Acquisition Unit (BND-2041W002-**): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-208-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-213-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-213-01" ;
    dcterms:issued "2023-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "APSystems Altenergy Power Control" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-28343" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2023-28343 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Altenergy Power Control" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Altenergy Power Control software are affected: Altenergy Power Control Software: C1.2.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-213-01" ;
    icsa:vendor "APSystems" ;
    icsa:year 2023 .

icsa-res:ICSA-23-215-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-215-01" ;
    dcterms:issued "2023-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GOT2000 and GOT SIMPLE" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3373" ;
    icsa:cweNumber "CWE-342" ;
    icsa:hasCVE cve-res:CVE-2023-3373 ;
    icsa:hasCWE cwe-res:CWE-342 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GOT2000 Series and GOT SIMPLE Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports this vulnerability affects the following HMIs when using the FTP server function: GOT2000 Series; GS21 model: versions 01.49.000 and prior; GT21 model: versions 01.49.000 and prior GOT SIMPLE" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-215-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-215-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-215-02" ;
    dcterms:issued "2023-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GT and GOT Series Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0525" ;
    icsa:cweNumber "CWE-261" ;
    icsa:hasCVE cve-res:CVE-2023-0525 ;
    icsa:hasCWE cwe-res:CWE-261 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GT Designer3, GOT2000 Series, GOT SIMPLE Series, and GT SoftGOT2000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GT25; GS21): v01.49.000 and prior; The following Mitsubishi Electric products are affected when either of the following cases apply: The case of transferring data with GT Designer3 Version1(GOT2000) listed below and GOT2000 Series or GOT SIMPLE Series listed below with the Data Transfer Security function enabled. The case of transferring data by the SoftGOT-GOT link function with GT SoftGOT2000 listed below and GOT2000 series listed below with the Data Transfer Security function enabled. GT Designer3 Version1 (GOT2000): v1.295H and prior GT SoftGOT2000: v1.295H and prior GOT2000 (Models GT21; GT27): v01.49.000 and prior GOT SIMPLE (Models GS25; GT23" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-215-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-215-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-215-03" ;
    dcterms:issued "2023-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "TEL-STER TelWin SCADA WebInterface" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Poland" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0956" ;
    icsa:cweNumber "CWE-35" ;
    icsa:hasCVE cve-res:CVE-2023-0956 ;
    icsa:hasCWE cwe-res:CWE-35 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TelWin SCADA WebInterface" ;
    icsa:productDistribution "Poland" ;
    icsa:productsAffected "TEL-STER reports this vulnerability affects the following versions of TelWin SCADA WebInterface: TelWin SCADA WebInterface: versions 3.2 to 6.1 TelWin SCADA WebInterface: versions 7.0 to 7.1 TelWin SCADA WebInterface: versions 8.0 and 9.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-215-03" ;
    icsa:vendor "TEL-STER Sp. z o. o." ;
    icsa:year 2023 .

icsa-res:ICSA-23-215-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-215-04" ;
    dcterms:issued "2023-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sensormatic Electronics VideoEdge" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3749" ;
    icsa:cweNumber "CWE-349" ;
    icsa:hasCVE cve-res:CVE-2023-3749 ;
    icsa:hasCWE cwe-res:CWE-349 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VideoEdge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Sensormatic Electronics; a subsidiary of Johnson Controls Inc; products are affected: VideoEdge: Versions prior to 6.1.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-215-04" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2023 .

icsa-res:ICSA-23-220-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-220-01" ;
    dcterms:issued "2023-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-3001" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-3001 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS (Interactive Graphical SCADA System)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports this vulnerability affects the following IGSS (Interactive Graphical SCADA System) products: IGSS Dashboard (DashBoard.exe): v16.0.0.23130 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-220-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-220-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-220-02" ;
    dcterms:issued "2023-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-4608; CVE-2022-2502" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2022-2502,
        cve-res:CVE-2022-4608 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports these vulnerabilities affect the following RTU500 series products: RTU500 series CMU: Firmware versions 13.3.1“13.3.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-220-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-01" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge, JT2Go and Teamcenter Visualization" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-28830; CVE-2023-38683; CVE-2023-38682" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-28830,
        cve-res:CVE-2023-38682,
        cve-res:CVE-2023-38683 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge, JT2Go, and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: JT2Go: All versions prior to v14.2.0.5 Solid Edge SE2022: All versions prior to v222.0 Update 13 Solid Edge SE2023: All versions prior to v223.0 Update 4 Teamcenter Visualization V13.2: All versions prior to v13.2.0.15 Teamcenter Visualization V13.2: All versions prior to v13.2.0.14 Teamcenter Visualization V13.3: All versions prior to v13.3.0.11 Teamcenter Visualization V14.1: All versions prior to v14.1.0.11 Teamcenter Visualization V14.1: All versions prior to v14.1.0.10 Teamcenter Visualization V14.2: All versions prior to v14.2.0.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-02" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid Installer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-37378" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2023-37378 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected if installed with Parasolid installer: Parasolid V35.0: All versions Parasolid V35.1: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-03" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT Open, JT Utilities, and Parasolid" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-30796; CVE-2023-30795" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-30795,
        cve-res:CVE-2023-30796 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT Open, JT Utilities, and Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: JT Open: All versions prior to v11.4 JT Utilities: All versions prior to v13.4 Parasolid v34.0: All versions prior to v34.0.253 Parasolid v34.1: All versions prior to v34.1.243 Parasolid v35.0: All versions prior to v35.0.177 Parasolid v35.1: All versions prior to v35.1.073." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-04" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Software Center" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2021-41544; CVE-2022-25634" ;
    icsa:cweNumber "CWE-427; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2021-41544,
        cve-res:CVE-2022-25634 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Software Center" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: Siemens Software Center: All versions prior to v3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-05" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM CROSSBOW" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-37971; CVE-2023-37373; CVE-2021-31239; CVE-2023-27411; CVE-2023-37372" ;
    icsa:cweNumber "CWE-306; CWE-269; CWE-125; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2021-31239,
        cve-res:CVE-2022-37971,
        cve-res:CVE-2023-27411,
        cve-res:CVE-2023-37372,
        cve-res:CVE-2023-37373 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-269,
        cwe-res:CWE-306,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM CROSSBOW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following server application is affected: RUGGEDCOM CROSSBOW: Versions prior to V5.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-06" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid and Teamcenter Visualization" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-38532; CVE-2023-38530; CVE-2023-38526; CVE-2023-38524; CVE-2023-38528; CVE-2023-38529; CVE-2023-38527; CVE-2023-38531; CVE-2023-38525" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-476; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2023-38524,
        cve-res:CVE-2023-38525,
        cve-res:CVE-2023-38526,
        cve-res:CVE-2023-38527,
        cve-res:CVE-2023-38528,
        cve-res:CVE-2023-38529,
        cve-res:CVE-2023-38530,
        cve-res:CVE-2023-38531,
        cve-res:CVE-2023-38532 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-476,
        cwe-res:CWE-770,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Parasolid and Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Parasolid V34.1: versions prior to V34.1.258 Parasolid V35.0: versions prior to V35.0.254 Parasolid V35.1: versions prior to V35.1.171 Parasolid V35.1: versions prior to V35.1.197 Parasolid V35.1: versions prior to V35.1.184 Teamcenter Visualization V14.1: all versions Teamcenter Visualization V14.2: versions prior to V14.2.0.6 Teamcenter Visualization V14.3: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-07" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Address Processing in SIMATIC" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0286" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-0286 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SIPLUS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): versions prior to V2.9.7SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): versions V3.0.1 to V3.0.3SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): versions prior to V2.9.7SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): versions V3.0.1 to V3.0.3SIMATIC ET 200SP Open Controller (incl. SIPLUS variants): all versionsSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): all versionsSIMATIC IPC DiagBase: all versionsSIMATIC IPC DiagMonitor: all versionsSIMATIC S7-1200 CPU family (incl. SIPLUS variants): all versionsSIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0): all versionsSIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0): all versionsSIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0): all versionsSIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0): all versionsSIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0): all versionsSIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK00-0AB0): all versionsSIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL00-0AB0): all versionsSIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL00-0AB0): all versionsSIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RL00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1514SP-2 PN (6ES7514-2DN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM00-0AB0): all versionsSIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM00-0AB0): all versionsSIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RM00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN00-0AB0): all versionsSIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN00-0AB0): all versionsSIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517H-3 PN (6ES7517-3HP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518HF-4 PN (6ES7518-4JP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK (6ES7518-4AP00-3AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK (6ES7518-4FP00-3AB0): versions prior to V2.9.7SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN (6ES7513-2GL00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN (6ES7513-2PL00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN (6ES7516-2GN00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN (6ES7516-2PN00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 Software Controller: all versionsSIMATIC S7-PLCSIM Advanced: all versionsSIPLUS ET 200SP CPU 1510SP F-1 PN (6AG1510-1SJ01-2AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL (6AG2510-1SJ01-1AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-2AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-7AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-4AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-1AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK00-2AB0): all versionsSIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-2AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-7AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-1AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-4AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-2AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-7AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-4AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-1AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK00-2AB0): all versionsSIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK01-1AB0): versions prior to V2.9.7 SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK02-1AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK01-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK02-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK00-2AB0): all versionsSIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL00-2AB0): all versions SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL00-2AB0): all versionsSIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515F-2 PN RAIL (6AG2515-2FM02-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL (6AG2515-2FM01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515R-2 PN (6AG1515-2RM00-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL (6AG2515-2RM00-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-2AB0): all versionsSIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-7AB0): all versionsSIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL (6AG2516-3AN02-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL (6AG2516-3AN01-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN00-2AB0): all versionsSIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1517H-3 PN (6AG1517-3HP00-4AB0): versions prior to V3.0.3SIPLUS S7-1500 CPU 1518-4 PN/DP (6AG1518-4AP00-4AB0): versions prior to V3.0.3SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): versions prior to V3.0.3SIPLUS S7-1500 CPU 1518F-4 PN/DP (6AG1518-4FP00-4AB0): versions prior to V3.0.3SIPLUS S7-1500 CPU 1518HF-4 PN (6AG1518-4JP00-4AB0): versions prior to V3.0.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-08" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Resource Allocation in Siemens RUGGEDCOM" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-39269" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2023-39269 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: RUGGEDCOM i800: All versions prior to V4.3.8 RUGGEDCOM i800NC: All versions prior to V4.3.8 RUGGEDCOM i801: All versions prior to V4.3.8 RUGGEDCOM i801NC: All versions prior to V4.3.8 RUGGEDCOM i802: All versions prior to V4.3.8 RUGGEDCOM i802NC: All versions prior to V4.3.8 RUGGEDCOM i803: All versions prior to V4.3.8 RUGGEDCOM i803NC: All versions prior to V4.3.8 RUGGEDCOM M2100: All versions prior to V4.3.8 RUGGEDCOM M2100F: All versions RUGGEDCOM M2100NC: All versions prior to V4.3.8 RUGGEDCOM M2200: All versions prior to V4.3.8 RUGGEDCOM M2200F: All versions RUGGEDCOM M2200NC: All versions prior to V4.3.8 RUGGEDCOM M969: All versions prior to V4.3.8 RUGGEDCOM M969F: All versions RUGGEDCOM M969NC: All versions prior to V4.3.8 RUGGEDCOM RMC30: All versions prior to V4.3.8 RUGGEDCOM RMC30NC: All versions prior to V4.3.8 RUGGEDCOM RMC8388 V4.X: All versions prior to V4.3.8 RUGGEDCOM RMC8388 V5.X: All versions RUGGEDCOM RMC8388NC V4.X: All versions prior to V4.3.8 RUGGEDCOM RMC8388NC V5.X: All versions RUGGEDCOM RP110: All versions prior to V4.3.8 RUGGEDCOM RP110NC: All versions prior to V4.3.8 RUGGEDCOM RS1600: All versions prior to V4.3.8 RUGGEDCOM RS1600F: All versions prior to V4.3.8 RUGGEDCOM RS1600FNC: All versions prior to V4.3.8 RUGGEDCOM RS1600NC: All versions prior to V4.3.8 RUGGEDCOM RS1600T: All versions prior to V4.3.8 RUGGEDCOM RS1600TNC: All versions prior to V4.3.8 RUGGEDCOM RS400: All versions prior to V4.3.8 RUGGEDCOM RS400F: All versions RUGGEDCOM RS400NC: All versions prior to V4.3.8 RUGGEDCOM RS401: All versions prior to V4.3.8 RUGGEDCOM RS401NC: All versions prior to V4.3.8 RUGGEDCOM RS416: All versions prior to V4.3.8 RUGGEDCOM RS416F: All versions RUGGEDCOM RS416NC: All versions prior to V4.3.8 RUGGEDCOM RS416NC v2: All versions RUGGEDCOM RS416P: All versions prior to V4.3.8 RUGGEDCOM RS416PF: All versions RUGGEDCOM RS416PNC: All versions prior to V4.3.8 RUGGEDCOM RS416PNC v2: All versions RUGGEDCOM RS416Pv2: All versions RUGGEDCOM RS416v2: All versions RUGGEDCOM RS8000: All versions prior to V4.3.8 RUGGEDCOM RS8000A: All versions prior to V4.3.8 RUGGEDCOM RS8000ANC: All versions prior to V4.3.8 RUGGEDCOM RS8000H: All versions prior to V4.3.8 RUGGEDCOM RS8000HNC: All versions prior to V4.3.8 RUGGEDCOM RS8000NC: All versions prior to V4.3.8 RUGGEDCOM RS8000T: All versions prior to V4.3.8 RUGGEDCOM RS8000TNC: All versions prior to V4.3.8 RUGGEDCOM RS900: All versions prior to V4.3.8 RUGGEDCOM RS900 (32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RS900 (32M) V5.X: All versions RUGGEDCOM RS900F: All versions RUGGEDCOM RS900G: All versions prior to V4.3.8 RUGGEDCOM RS900G (32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RS900G (32M) V5.X: All versions RUGGEDCOM RS900GF: All versions RUGGEDCOM RS900GNC: All versions prior to V4.3.8 RUGGEDCOM RS900GNC(32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RS900GNC(32M) V5.X: All versions RUGGEDCOM RS900GP: All versions prior to V4.3.8 RUGGEDCOM RS900GPF: All versions RUGGEDCOM RS900GPNC: All versions prior to V4.3.8 RUGGEDCOM RS900L: All versions prior to V4.3.8 RUGGEDCOM RS900LNC: All versions prior to V4.3.8 RUGGEDCOM RS900M-GETS-C01: All versions prior to V4.3.8 RUGGEDCOM RS900M-GETS-XX: All versions prior to V4.3.8 RUGGEDCOM RS900M-STND-C01: All versions prior to V4.3.8 RUGGEDCOM RS900M-STND-XX: All versions prior to V4.3.8 RUGGEDCOM RS900MNC-GETS-C01: All versions prior to V4.3.8 RUGGEDCOM RS900MNC-GETS-XX: All versions prior to V4.3.8 RUGGEDCOM RS900MNC-STND-XX: All versions prior to V4.3.8 RUGGEDCOM RS900MNC-STND-XX-C01: All versions prior to V4.3.8 RUGGEDCOM RS900NC: All versions prior to V4.3.8 RUGGEDCOM RS900NC (32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RS900NC (32M) V5.X: All versions RUGGEDCOM RS900W: All versions prior to V4.3.8 RUGGEDCOM RS910: All versions prior to V4.3.8 RUGGEDCOM RS910L: All versions prior to V4.3.8 RUGGEDCOM RS910LNC: All versions prior to V4.3.8 RUGGEDCOM RS910NC: All versions prior to V4.3.8 RUGGEDCOM RS910W: All versions prior to V4.3.8 RUGGEDCOM RS920L: All versions prior to V4.3.8 RUGGEDCOM RS920LNC: All versions prior to V4.3.8 RUGGEDCOM RS920W: All versions prior to V4.3.8 RUGGEDCOM RS930L: All versions prior to V4.3.8 RUGGEDCOM RS930LNC: All versions prior to V4.3.8 RUGGEDCOM RS930W: All versions prior to V4.3.8 RUGGEDCOM RS940G: All versions prior to V4.3.8 RUGGEDCOM RS940GF: All versions RUGGEDCOM RS940GNC: All versions prior to V4.3.8 RUGGEDCOM RS969: All versions prior to V4.3.8 RUGGEDCOM RS969NC: All versions prior to V4.3.8 RUGGEDCOM RSG2100: All versions prior to V4.3.8 RUGGEDCOM RSG2100 (32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2100 (32M) V5.X: All versions RUGGEDCOM RSG2100F: All versions RUGGEDCOM RSG2100NC: All versions prior to V4.3.8 RUGGEDCOM RSG2100NC (32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2100NC (32M) V5.X: All versions RUGGEDCOM RSG2100P: All versions prior to V4.3.8 RUGGEDCOM RSG2100PF: All versions RUGGEDCOM RSG2100PNC: All versions prior to V4.3.8 RUGGEDCOM RSG2200: All versions prior to V4.3.8 RUGGEDCOM RSG2200F: All versions RUGGEDCOM RSG2200NC: All versions prior to V4.3.8 RUGGEDCOM RSG2288 V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2288 V5.X: All versions RUGGEDCOM RSG2288NC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2288NC V5.X: All versions RUGGEDCOM RSG2300 V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2300 V5.X: All versions RUGGEDCOM RSG2300F: All versions RUGGEDCOM RSG2300NC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2300NC V5.X: All versions RUGGEDCOM RSG2300P V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2300P V5.X: All versions RUGGEDCOM RSG2300PF: All versions RUGGEDCOM RSG2300PNC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2300PNC V5.X: All versions RUGGEDCOM RSG2488 V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2488 V5.X: All versions RUGGEDCOM RSG2488F: All versions RUGGEDCOM RSG2488NC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2488NC V5.X: All versions RUGGEDCOM RSG907R: All versions RUGGEDCOM RSG908C: All versions RUGGEDCOM RSG909R: All versions RUGGEDCOM RSG910C: All versions RUGGEDCOM RSG920P V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG920P V5.X: All versions RUGGEDCOM RSG920PNC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG920PNC V5.X: All versions RUGGEDCOM RSL910: All versions RUGGEDCOM RSL910NC: All versions RUGGEDCOM RST2228: All versions RUGGEDCOM RST2228P: All versions RUGGEDCOM RST916C: All versions RUGGEDCOM RST916P: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-09" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OpenSSL RSA Decryption in SIMATIC" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-4304" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2022-4304 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SIPLUS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00): versions prior to V2.2SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00): versions prior to V2.2SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): versions V3.0.1 to V3.0.3SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): versions prior to V2.9.7SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): versions V3.0.1 to V3.0.3SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): versions prior to V2.9.7SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0): versions prior to V3.2.19SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0): versions prior to V3.2.19SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0): versions prior to V3.2.19SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0): versions prior to V3.2.19SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0): versions prior to V3.2.19SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): all versionsSIMATIC Logon V1.6: all versionsSIMATIC PDM V9.1: all versionsSIMATIC PDM V9.2: versions prior to V9.2 SP2 Upd1SIMATIC Process Historian 2019 OPC UA Server: all versionsSIMATIC Process Historian 2020 OPC UA Server: all versionsSIMATIC Process Historian 2022 OPC UA Server: all versionsSIMATIC S7-1200 CPU family (incl. SIPLUS variants): all versionsSIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0): all versionsSIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0): all versionsSIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0): all versionsSIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0): all versionsSIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0): all versionsSIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK00-0AB0): all versionsSIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL00-0AB0): all versionsSIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL00-0AB0): all versionsSIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RL00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RM03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1514SP-2 PN (6ES7514-2DN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM00-0AB0): all versionsSIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM00-0AB0): all versionsSIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RM00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN00-0AB0): all versionsSIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN00-0AB0): all versionsSIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517H-3 PN (6ES7517-3HP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518HF-4 PN (6ES7518-4JP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0): versions prior to V3.0.3SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK (6ES7518-4AP00-3AB0): versions prior to V2.9.7SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK (6ES7518-4FP00-3AB0): versions prior to V2.9.7SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN (6ES7513-2GL00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN (6ES7513-2PL00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN (6ES7516-2GN00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN (6ES7516-2PN00-0AB0): versions prior to V2.9.7SIMATIC S7-1500 Software Controller: all versionsSIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0): versions prior to V3.3.19SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0): versions prior to V3.2.19SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0): versions prior to V3.2.19SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0): versions prior to V3.2.19SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0): versions prior to V3.2.19SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0): versions prior to V3.2.19SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0): versions prior to V3.2.19SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0): versions prior to V3.2.19SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0): versions prior to V3.2.19SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0): versions prior to V3.2.19SIMATIC S7-PLCSIM Advanced: all versionsSIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0): versions prior to V3.2.19SIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0): versions prior to V3.2.19SIPLUS ET 200SP CPU 1510SP F-1 PN (6AG1510-1SJ01-2AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL (6AG2510-1SJ01-1AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-2AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-7AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-4AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-1AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK00-2AB0): all versionsSIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-2AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-7AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-1AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-4AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-2AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-7AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-4AB0): versions prior to V2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-1AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK00-2AB0): all versionsSIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK01-1AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK02-1AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK01-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK02-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK00-2AB0): all versionsSIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL00-2AB0): all versionsSIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL00-2AB0): all versionsSIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515F-2 PN RAIL (6AG2515-2FM02-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL (6AG2515-2FM01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515R-2 PN (6AG1515-2RM00-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL (6AG2515-2RM00-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-2AB0): all versionsSIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-7AB0): all versionsSIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-7AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL (6AG2516-3AN02-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL (6AG2516-3AN01-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN00-2AB0): all versionsSIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN01-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-2AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-4AB0): versions prior to V2.9.7SIPLUS S7-1500 CPU 1517H-3 PN (6AG1517-3HP00-4AB0): versions prior to V3.0.3SIPLUS S7-1500 CPU 1518-4 PN/DP (6AG1518-4AP00-4AB0): versions prior to V3.0.3SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): versions prior to V3.0.3SIPLUS S7-1500 CPU 1518F-4 PN/DP (6AG1518-4FP00-4AB0): versions prior to V3.0.3SIPLUS S7-1500 CPU 1518HF-4 PN (6AG1518-4JP00-4AB0): versions prior to V3.0.3SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0): versions prior to V3.3.19SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0): versions prior to V3.2.19SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0): versions prior to V3.2.19SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0): versions prior to V3.2.19SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0): versions prior to V3.2.19." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-10" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM TOOLBOX II" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-39062; CVE-2023-38641" ;
    icsa:cweNumber "CWE-732; CWE-250" ;
    icsa:hasCVE cve-res:CVE-2022-39062,
        cve-res:CVE-2023-38641 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM TOOLBOX II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: SICAM TOOLBOX II: All versions prior to V07.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-11" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge SE2023" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-39183; CVE-2023-39185; CVE-2023-39419; CVE-2023-39181; CVE-2023-39182; CVE-2023-39187; CVE-2023-39188; CVE-2023-39184; CVE-2023-39186" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-39181,
        cve-res:CVE-2023-39182,
        cve-res:CVE-2023-39183,
        cve-res:CVE-2023-39184,
        cve-res:CVE-2023-39185,
        cve-res:CVE-2023-39186,
        cve-res:CVE-2023-39187,
        cve-res:CVE-2023-39188,
        cve-res:CVE-2023-39419 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: Solid Edge SE2023: All versions prior to V223.0 Update 7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-222-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-222-12" ;
    dcterms:issued "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Network Mirroring in Siemens RUGGEDCOM" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-24845" ;
    icsa:cweNumber "CWE-684" ;
    icsa:hasCVE cve-res:CVE-2023-24845 ;
    icsa:hasCWE cwe-res:CWE-684 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Siemens are affected: RUGGEDCOM i800: All versions prior to V4.3.8 RUGGEDCOM i800NC: All versions prior to V4.3.8 RUGGEDCOM i801: All versions prior to V4.3.8 RUGGEDCOM i801NC: All versions prior to V4.3.8 RUGGEDCOM i802: All versions prior to V4.3.8 RUGGEDCOM i802NC: All versions prior to V4.3.8 RUGGEDCOM i803: All versions prior to V4.3.8 RUGGEDCOM i803NC: All versions prior to V4.3.8 RUGGEDCOM M2100: All versions prior to V4.3.8 RUGGEDCOM M2100F: All versions RUGGEDCOM M2100NC: All versions prior to V4.3.8 RUGGEDCOM M2200: All versions prior to V4.3.8 RUGGEDCOM M2200F: All versions RUGGEDCOM M2200NC: All versions prior to V4.3.8 RUGGEDCOM M969: All versions prior to V4.3.8 RUGGEDCOM M969F: All versions RUGGEDCOM M969NC: All versions prior to V4.3.8 RUGGEDCOM RMC30: All versions prior to V4.3.8 RUGGEDCOM RMC30NC: All versions prior to V4.3.8 RUGGEDCOM RMC8388 V4.X: All versions prior to V4.3.8 RUGGEDCOM RMC8388 V5.X: All versions RUGGEDCOM RMC8388NC V4.X: All versions prior to V4.3.8 RUGGEDCOM RMC8388NC V5.X: All versions RUGGEDCOM RP110: All versions prior to V4.3.8 RUGGEDCOM RP110NC: All versions prior to V4.3.8 RUGGEDCOM RS1600: All versions RUGGEDCOM RS1600F: All versions RUGGEDCOM RS1600FNC: All versions RUGGEDCOM RS1600NC: All versions RUGGEDCOM RS1600T: All versions RUGGEDCOM RS1600TNC: All versions RUGGEDCOM RS400: All versions RUGGEDCOM RS400F: All versions RUGGEDCOM RS400NC: All versions RUGGEDCOM RS401: All versions RUGGEDCOM RS401NC: All versions RUGGEDCOM RS416: All versions prior to V4.3.8 RUGGEDCOM RS416F: All versions RUGGEDCOM RS416NC: All versions prior to V4.3.8 RUGGEDCOM RS416NC v2: All versions RUGGEDCOM RS416P: All versions prior to V4.3.8 RUGGEDCOM RS416PF: All versions RUGGEDCOM RS416PNC: All versions prior to V4.3.8 RUGGEDCOM RS416PNC v2: All versions RUGGEDCOM RS416Pv2: All versions RUGGEDCOM RS416v2: All versions RUGGEDCOM RS8000: All versions RUGGEDCOM RS8000A: All versions RUGGEDCOM RS8000ANC: All versions RUGGEDCOM RS8000H: All versions RUGGEDCOM RS8000HNC: All versions RUGGEDCOM RS8000NC: All versions RUGGEDCOM RS8000T: All versions RUGGEDCOM RS8000TNC: All versions RUGGEDCOM RS900: All versions prior to V4.3.8 RUGGEDCOM RS900: All versions with switch chip M88E6083 RUGGEDCOM RS900 (32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RS900 (32M) V5.X: All versions RUGGEDCOM RS900F: All versions RUGGEDCOM RS900G: All versions prior to V4.3.8 RUGGEDCOM RS900G (32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RS900G (32M) V5.X: All versions RUGGEDCOM RS900GF: All versions RUGGEDCOM RS900GNC: All versions prior to V4.3.8 RUGGEDCOM RS900GNC(32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RS900GNC(32M) V5.X: All versions RUGGEDCOM RS900GP: All versions prior to V4.3.8 RUGGEDCOM RS900GPF: All versions RUGGEDCOM RS900GPNC: All versions prior to V4.3.8 RUGGEDCOM RS900L: All versions prior to V4.3.8 RUGGEDCOM RS900L: All versions RUGGEDCOM RS900LNC: All versions prior to V4.3.8 RUGGEDCOM RS900LNC: All versions RUGGEDCOM RS900M-GETS-C01: All versions prior to V4.3.8 RUGGEDCOM RS900M-GETS-XX: All versions prior to V4.3.8 RUGGEDCOM RS900M-STND-C01: All versions prior to V4.3.8 RUGGEDCOM RS900M-STND-XX: All versions prior to V4.3.8 RUGGEDCOM RS900MNC-GETS-C01: All versions prior to V4.3.8 RUGGEDCOM RS900MNC-GETS-XX: All versions prior to V4.3.8 RUGGEDCOM RS900MNC-STND-XX: All versions prior to V4.3.8 RUGGEDCOM RS900MNC-STND-XX-C01: All versions prior to V4.3.8 RUGGEDCOM RS900NC: All versions prior to V4.3.8 RUGGEDCOM RS900NC: All versions RUGGEDCOM RS900NC(32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RS900NC(32M) V5.X: All versions RUGGEDCOM RS900W: All versions prior to V4.3.8 RUGGEDCOM RS910: All versions prior to V4.3.8 RUGGEDCOM RS910L: All versions prior to V4.3.8 RUGGEDCOM RS910LNC: All versions prior to V4.3.8 RUGGEDCOM RS910NC: All versions prior to V4.3.8 RUGGEDCOM RS910W: All versions prior to V4.3.8 RUGGEDCOM RS920L: All versions prior to V4.3.8 RUGGEDCOM RS920LNC: All versions prior to V4.3.8 RUGGEDCOM RS920W: All versions prior to V4.3.8 RUGGEDCOM RS930L: All versions prior to V4.3.8 RUGGEDCOM RS930LNC: All versions prior to V4.3.8 RUGGEDCOM RS930W: All versions prior to V4.3.8 RUGGEDCOM RS940G: All versions prior to V4.3.8 RUGGEDCOM RS940GF: All versions RUGGEDCOM RS940GNC: All versions prior to V4.3.8 RUGGEDCOM RS969: All versions prior to V4.3.8 RUGGEDCOM RS969NC: All versions prior to V4.3.8 RUGGEDCOM RSG2100: All versions prior to V4.3.8 RUGGEDCOM RSG2100 (32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2100 (32M) V5.X: All versions RUGGEDCOM RSG2100F: All versions RUGGEDCOM RSG2100NC: All versions prior to V4.3.8 RUGGEDCOM RSG2100NC(32M) V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2100NC(32M) V5.X: All versions RUGGEDCOM RSG2100P: All versions prior to V4.3.8 RUGGEDCOM RSG2100PF: All versions RUGGEDCOM RSG2100PNC: All versions prior to V4.3.8 RUGGEDCOM RSG2200: All versions prior to V4.3.8 RUGGEDCOM RSG2200F: All versions RUGGEDCOM RSG2200NC: All versions prior to V4.3.8 RUGGEDCOM RSG2288 V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2288 V5.X: All versions RUGGEDCOM RSG2288NC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2288NC V5.X: All versions RUGGEDCOM RSG2300 V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2300 V5.X: All versions RUGGEDCOM RSG2300F: All versions RUGGEDCOM RSG2300NC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2300NC V5.X: All versions RUGGEDCOM RSG2300P V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2300P V5.X: All versions RUGGEDCOM RSG2300PF: All versions RUGGEDCOM RSG2300PNC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2300PNC V5.X: All versions RUGGEDCOM RSG2488 V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2488 V5.X: All versions RUGGEDCOM RSG2488F: All versions RUGGEDCOM RSG2488NC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG2488NC V5.X: All versions RUGGEDCOM RSG907R: All versions RUGGEDCOM RSG908C: All versions RUGGEDCOM RSG909R: All versions RUGGEDCOM RSG910C: All versions RUGGEDCOM RSG920P V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG920P V5.X: All versions RUGGEDCOM RSG920PNC V4.X: All versions prior to V4.3.8 RUGGEDCOM RSG920PNC V5.X: All versions RUGGEDCOM RSL910: All versions RUGGEDCOM RSL910NC: All versions RUGGEDCOM RST2228: All versions RUGGEDCOM RST2228P: All versions RUGGEDCOM RST916C: All versions RUGGEDCOM RST916P: All version." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-222-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-227-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-227-01" ;
    dcterms:issued "2023-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Control Expert and Modicon M340, Momentum, MC80, M580 and M580 CPU Safety (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Commercial Facilities" ;
    icsa:cveNumber "CVE-2022-45789" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2022-45789 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Control Expert and Modicon M340, Momentum, MC80, M580 and M580 CPU Safety (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric Modicon M580 CPU (\"part numbers BMEP* and BMEH*\"): <SV4.20; Schneider Electric Modicon MC80 (BMKC80): vers:all/*; Schneider Electric Modicon M340 CPU (\"part numbers BMXP34*\"): <SV3.70; Schneider Electric Modicon M580 CPU Safety (\"part numbers BMEP58*S and BMEH58*S\"): <SV4.21; Schneider Electric EcoStruxure Control Expert: <V16.2_HF003; Schneider Electric Modicon Momentum Unity M1E Processor (\"171CBU*\"): <SV2.90" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-227-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-227-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-227-02" ;
    dcterms:issued "2023-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Armor PowerFlex" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2423" ;
    icsa:cweNumber "CWE-682" ;
    icsa:hasCVE cve-res:CVE-2023-2423 ;
    icsa:hasCWE cwe-res:CWE-682 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Armor PowerFlex" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected:Armor PowerFlex: v1.003." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-227-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-229-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-229-01" ;
    dcterms:issued "2023-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICONICS and Mitsubishi Electric Products" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-4450; CVE-2022-4304; CVE-2023-0401; CVE-2022-3602; CVE-2022-4203; CVE-2022-3786" ;
    icsa:cweNumber "CWE-208; CWE-120; CWE-415; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2022-3602,
        cve-res:CVE-2022-3786,
        cve-res:CVE-2022-4203,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0401 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-208,
        cwe-res:CWE-415,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ICONICS Product Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hyper Historian; ICONICS reports these vulnerabilities affect the following products using OpenSSL:ICONICS Suite including GENESIS64; AnalytiX; and MobileHMI: Version 10.97.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-229-01" ;
    icsa:vendor "ICONICS" ;
    icsa:year 2023 .

icsa-res:ICSA-23-229-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-229-03" ;
    dcterms:issued "2023-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schnieder Electric PowerLogic ION7400 PM8000 ION9000 Power Meters" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2022-46680" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2022-46680 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following components of Schneider Electric PowerLogic; are affected: PowerLogic ION9000: All versions prior to 4.0.0 PowerLogic ION7400: All versions prior to 4.0.0 PowerLogic PM8000: All versions prior to 4.0.0 PowerLogic ION8650: All versions PowerLogic ION8800: All versions Legacy ION products: All versions; a power meter" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-229-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-229-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-229-04" ;
    dcterms:issued "2023-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Walchem Intuition 9" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-32202; CVE-2023-38422" ;
    icsa:cweNumber "CWE-306; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-32202,
        cve-res:CVE-2023-38422 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intuition 9" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Intuition 9; a water treatment controller; are affected: Intuition 9: versions prior to v4.21" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-229-04" ;
    icsa:vendor "Walchem" ;
    icsa:year 2023 .

icsa-res:ICSA-23-234-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-234-01" ;
    dcterms:issued "2023-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy AFF66x" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2019-11477; CVE-2021-43523; CVE-2020-11868; CVE-2022-3204; CVE-2018-18066; CVE-2020-13817" ;
    icsa:cweNumber "CWE-79; CWE-330; CWE-190; CWE-346; CWE-476; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2018-18066,
        cve-res:CVE-2019-11477,
        cve-res:CVE-2020-11868,
        cve-res:CVE-2020-13817,
        cve-res:CVE-2021-43523,
        cve-res:CVE-2022-3204 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-330,
        cwe-res:CWE-346,
        cwe-res:CWE-400,
        cwe-res:CWE-476,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AFF66x" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports these vulnerabilities affect the following AFF660/665 products:AFF660/665: Firmware 03.0.02 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-234-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-234-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-234-02" ;
    dcterms:issued "2023-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trane Thermostats" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4212" ;
    icsa:cweNumber "CWE-74" ;
    icsa:hasCVE cve-res:CVE-2023-4212 ;
    icsa:hasCWE cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XL824, XL850, XL1050, and Pivot thermostats" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Trane reports this vulnerability affects the following thermostats:Trane Technologies XL824 Thermostat: Firmware versions 5.9.8 and earlierTrane Technologies XL850 Thermostat: Firmware versions 5.9.8 and earlierTrane Technologies XL1050 Thermostat: Firmware versions 5.9.8 and earlierTrane Technologies Pivot Thermostat: Firmware versions 1.8 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-234-02" ;
    icsa:vendor "Trane" ;
    icsa:year 2023 .

icsa-res:ICSA-23-234-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-234-03" ;
    dcterms:issued "2023-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager ThinServer" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2914; CVE-2023-2917; CVE-2023-2915" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-2914,
        cve-res:CVE-2023-2915,
        cve-res:CVE-2023-2917 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager ThinServer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports this vulnerability affects the following versions of ThinManager ThinServer; a thin client and remote desktop protocol (RDP) server management software: ThinManager ThinServer: Versions 11.0.0-11.0.6 ThinManager ThinServer: Versions 11.1.0-11.1.6 ThinManager ThinServer: Versions 11.2.0-11.2.6 ThinManager ThinServer: Versions 12.1.0-12.1.6 ThinManager ThinServer: Versions 12.0.0-12.0.5 ThinManager ThinServer: Versions 13.0.0-13.0.2 ThinManager ThinServer: Version 13.1.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-234-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-236-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-236-01" ;
    dcterms:issued "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "KNX Protocol" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Belgium" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-4346" ;
    icsa:cweNumber "CWE-645" ;
    icsa:hasCVE cve-res:CVE-2023-4346 ;
    icsa:hasCWE cwe-res:CWE-645 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KNX devices using KNX Connection Authorization" ;
    icsa:productDistribution "Europe" ;
    icsa:productsAffected "The following devices using KNX Protocol are affected: KNX devices using Connection Authorization Option 1 Style in which no BCU Key is currently set: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-236-01" ;
    icsa:vendor "KNX Association" ;
    icsa:year 2023 .

icsa-res:ICSA-23-236-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-236-02" ;
    dcterms:issued "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Opto 22 SNAP PAC S1" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-40706; CVE-2023-40707; CVE-2023-40709; CVE-2023-40708; CVE-2023-40710" ;
    icsa:cweNumber "CWE-284; CWE-307; CWE-521; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-40706,
        cve-res:CVE-2023-40707,
        cve-res:CVE-2023-40708,
        cve-res:CVE-2023-40709,
        cve-res:CVE-2023-40710 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-307,
        cwe-res:CWE-400,
        cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SNAP PAC S1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of SNAP PAC S1; an industrial programmable automation controller; is affected:SNAP PAC S1 Firmware: Version R10.3b" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-236-02" ;
    icsa:vendor "Opto 22" ;
    icsa:year 2023 .

icsa-res:ICSA-23-236-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-236-03" ;
    dcterms:issued "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "CODESYS Development System" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3662" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2023-3662 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Development System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS reports this vulnerability affects the following versions of CODESYS Development System:CODESYS Development System: versions from 3.5.17.0 and prior to 3.5.19.20" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-236-03" ;
    icsa:vendor "CODESYS GmbH" ;
    icsa:year 2023 .

icsa-res:ICSA-23-236-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-236-04" ;
    dcterms:issued "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "CODESYS Development System" ;
    icsa:CVSSScore "3.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3669" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2023-3669 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Development System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS reports this vulnerability affects the following versions of CODESYS Development System: CODESYS Development System: versions prior to 3.5.19.20" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-236-04" ;
    icsa:vendor "CODESYS GmbH" ;
    icsa:year 2023 .

icsa-res:ICSA-23-236-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-236-05" ;
    dcterms:issued "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "CODESYS Development System" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3663" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2023-3663 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS Development System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CODESYS reports this vulnerability affects the following versions of CODESYS Development System: CODESYS Development System: versions from 3.5.11.0 and prior to 3.5.19.20" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-236-05" ;
    icsa:vendor "CODESYS GmbH" ;
    icsa:year 2023 .

icsa-res:ICSA-23-236-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-236-06" ;
    dcterms:issued "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Input/Output Modules" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-1737" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-1737 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1734-AENT/1734-AENTR Series C, 1734-AENT/1734-AENTR Series B, 1738-AENT/ 1738-AENTR Series B, 1794-AENTR Series A, 1732E-16CFGM12QCWR Series A, 1732E-12X4M12QCDR Series A, 1732E-16CFGM12QCR Series A, 1732E-16CFGM12P5QCR Series A, 1732E-12X4M12P5QCDR Series A, 1732E-16CFGM12P5QCWR Series B, 1732E-IB16M12R Series B, 1732E-OB16M12R Series B, 1732E-16CFGM12R Series B, 1732E-IB16M12DR Series B, 1732E-OB16M12DR Series B, 1732E-8X8M12DR Series B, 1799ER-IQ10XOQ10 Series B" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of select Input/Output Modules from Rockwell Automation are affected:1734-AENT/1734-AENTR Series C: Versions 7.011 and prior1734-AENT/1734-AENTR Series B: Versions 5.019 and prior1738-AENT/ 1738-AENTR Series B: Versions 6.011 and prior1794-AENTR Series A: Versions 2.011 and prior1732E-16CFGM12QCWR Series A: Versions 3.011 and prior1732E-12X4M12QCDR Series A: Versions 3.011 and prior1732E-16CFGM12QCR Series A: Versions 3.011 and prior1732E-16CFGM12P5QCR Series A: Versions 3.011 and prior1732E-12X4M12P5QCDR Series A: Versions 3.011 and prior1732E-16CFGM12P5QCWR Series B: Versions 3.011 and prior1732E-IB16M12R Series B: Versions 3.011 and prior1732E-OB16M12R Series B: Versions 3.011 and prior1732E-16CFGM12R Series B: Versions 3.011 and prior1732E-IB16M12DR Series B: Versions 3.011 and prior1732E-OB16M12DR Series B: Versions 3.011 and prior1732E-8X8M12DR Series B: Versions 3.011 and prior1799ER-IQ10XOQ10 Series B: Versions 3.011 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-236-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-241-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-241-01" ;
    dcterms:issued "2023-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC CodeBeamer" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-4296" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-4296 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Codebeamer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PTC Codebeamer; Application Lifecycle Management (ALM) platform for product and software development; are affected:Codebeamer: v22.10-SP6 or lowerCodebeamer: v22.04-SP2 or lowerCodebeamer: v21.09-SP13 or lower" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-241-01" ;
    icsa:vendor "PTC" ;
    icsa:year 2023 .

icsa-res:ICSA-23-243-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-243-01" ;
    dcterms:issued "2023-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "ARDEREG Sistemas SCADA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Argentina" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-4485" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2023-4485 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sistemas SCADA" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "The following ARDEREG products are affected: Sistemas SCADA: Versions 2.203 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-243-01" ;
    icsa:vendor "ARDEREG" ;
    icsa:year 2023 .

icsa-res:ICSA-23-243-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-243-02" ;
    dcterms:issued "2023-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Digital CIMPLICITY" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-4487" ;
    icsa:cweNumber "CWE-114" ;
    icsa:hasCVE cve-res:CVE-2023-4487 ;
    icsa:hasCWE cwe-res:CWE-114 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CIMPLICITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following GE products are affected: GE Digital CIMPLICITY: v2023" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-243-02" ;
    icsa:vendor "GE Digital" ;
    icsa:year 2023 .

icsa-res:ICSA-23-243-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-243-03" ;
    dcterms:issued "2023-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Kepware KepServerEX (Update A)" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-29446; CVE-2023-29445; CVE-2023-29447; CVE-2023-29444" ;
    icsa:cweNumber "CWE-427; CWE-20; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2023-29444,
        cve-res:CVE-2023-29445,
        cve-res:CVE-2023-29446,
        cve-res:CVE-2023-29447 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-427,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kepware KepServerEX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an industrial automation control platform; The following versions of Kepware KepServerEX; are affected: Kepware KepServerEX: version 6.14.263.0 and prior ThingWorx Kepware Server: version 6.14.263.0 and prior ThingWorx Industrial Connectivity: version 8.0 to 8.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-243-03" ;
    icsa:vendor "PTC" ;
    icsa:year 2023 .

icsa-res:ICSA-23-243-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-243-04" ;
    dcterms:issued "2023-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-08-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digi RealPort Protocol" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-4299" ;
    icsa:cweNumber "CWE-836" ;
    icsa:hasCVE cve-res:CVE-2023-4299 ;
    icsa:hasCWE cwe-res:CWE-836 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Digi RealPort Protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Digi International reports that the following products using Digi RealPort Protocol are affected: Digi RealPort for Windows: version 4.8.488.0 and earlier Digi RealPort for Linux: version 1.9-40 and earlier Digi ConnectPort TS 8/16: versions prior to 2.26.2.4 Digi Passport Console Server: all versions Digi ConnectPort LTS 8/16/32: versions prior to 1.4.9 Digi CM Console Server: all versions Digi PortServer TS: all versions Digi PortServer TS MEI: all versions Digi PortServer TS MEI Hardened: all versions Digi PortServer TS M MEI: all versions Digi PortServer TS P MEI: all versions Digi One IAP Family: all versions Digi One IA: all versions Digi One SP IA: all versions Digi One SP: all versions Digi WR31: all versions Digi WR11 XT: all versions Digi WR44 R: all versions Digi WR21: all versions Digi Connect ES: versions prior to 2.26.2.4 Digi Connect SP: all versions Digi International reports that the following products do NOT use Digi RealPort Protocol are NOT affected: Digi 6350-SR: all versions Digi ConnectCore 8X products: all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-243-04" ;
    icsa:vendor "Digi International, Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-248-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-248-01" ;
    dcterms:issued "2023-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fujitsu Limited Real-time Video Transmission Gear IP series" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2023-38433" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2023-38433 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Real-time Video Transmission Gear \"IP series\"" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a hosted web application; The following versions of Real-time Video Transmission Gear \"IP series\"; are affected: Real-time Video Transmission Gear \"IP series\" IP-HE950E: firmware versions V01L001 to V01L053 Real-time Video Transmission Gear \"IP series\" IP-HE950D: firmware versions V01L001 to V01L053 Real-time Video Transmission Gear \"IP series\" IP-HE900E: firmware versions V01L001 to V01L010 Real-time Video Transmission Gear \"IP series\" IP-HE900D: firmware versions V01L001 to V01L004 Real-time Video Transmission Gear \"IP series\" IP-900E / IP-920E: firmware versions V01L001 to V02L061 Real-time Video Transmission Gear \"IP series\" IP-900D / IP-900â…¡D / IP-920D: firmware versions V01L001 to V02L061 Real-time Video Transmission Gear \"IP series\" IP-90: firmware versions V01L001 to V01L013 Real-time Video Transmission Gear \"IP series\" IP-9610: firmware versions V01L001 to V02L007." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-248-01" ;
    icsa:vendor "Fujitsu Limited" ;
    icsa:year 2023 .

icsa-res:ICSA-23-250-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-250-01" ;
    dcterms:issued "2023-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dover Fueling Solutions MAGLINK LX Console" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-41256; CVE-2023-36497; CVE-2023-38256" ;
    icsa:cweNumber "CWE-284; CWE-22; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2023-36497,
        cve-res:CVE-2023-38256,
        cve-res:CVE-2023-41256 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MAGLINK LX - Web Console Configuration" ;
    icsa:productDistribution "Europe, United Kingdom, Worldwide" ;
    icsa:productsAffected "The following versions of MAGLINK LX Web Console Configuration are affected: MAGLINK LX Web Console Configuration: version 2.5.1 MAGLINK LX Web Console Configuration: version 2.5.2 MAGLINK LX Web Console Configuration: version 2.5.3 MAGLINK LX Web Console Configuration: version 2.6.1 MAGLINK LX Web Console Configuration: version 2.11 MAGLINK LX Web Console Configuration: version 3.0 MAGLINK LX Web Console Configuration: version 3.2 MAGLINK LX Web Console Configuration: version 3.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-250-01" ;
    icsa:vendor "Dover Fueling Solutions (DFS)" ;
    icsa:year 2023 .

icsa-res:ICSA-23-250-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-250-02" ;
    dcterms:issued "2023-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Phoenix Contact TC ROUTER and TC CLOUD CLIENT" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3526; CVE-2023-3569" ;
    icsa:cweNumber "CWE-79; CWE-776" ;
    icsa:hasCVE cve-res:CVE-2023-3526,
        cve-res:CVE-2023-3569 ;
    icsa:hasCWE cwe-res:CWE-776,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TC ROUTER and TC CLOUD CLIENT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Phoenix contact reports that the following products are affected: TC ROUTER 3002T-4G: versions prior to 2.07.2 TC ROUTER 3002T-4G ATT: versions prior to 2.07.2 TC ROUTER 3002T-4G VZW: versions prior to 2.07.2 TC CLOUD CLIENT 1002-4G: versions prior to 2.07.2 TC CLOUD CLIENT 1002-4G ATT: versions prior to 2.07.2 TC CLOUD CLIENT 1002-4G VZW: versions prior to 2.07.2 CLOUD CLIENT 1101T-TX/TX: versions prior to 2.06.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-250-02" ;
    icsa:vendor "PHOENIX CONTACT" ;
    icsa:year 2023 .

icsa-res:ICSA-23-250-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-250-03" ;
    dcterms:issued "2023-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Socomec MOD3GP-SY-120K" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-39446; CVE-2023-38255; CVE-2023-41965; CVE-2023-40221; CVE-2023-39452; CVE-2023-41084; CVE-2023-38582" ;
    icsa:cweNumber "CWE-94; CWE-352; CWE-922; CWE-79; CWE-256; CWE-565" ;
    icsa:hasCVE cve-res:CVE-2023-38255,
        cve-res:CVE-2023-38582,
        cve-res:CVE-2023-39446,
        cve-res:CVE-2023-39452,
        cve-res:CVE-2023-40221,
        cve-res:CVE-2023-41084,
        cve-res:CVE-2023-41965 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-352,
        cwe-res:CWE-565,
        cwe-res:CWE-79,
        cwe-res:CWE-922,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MOD3GP-SY-120K" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Socomec products are affected: MODULYS GP (MOD3GP-SY-120K): Web firmware v01.12.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-250-03" ;
    icsa:vendor "Socomec" ;
    icsa:year 2023 .

icsa-res:ICSA-23-255-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-255-01" ;
    dcterms:issued "2023-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Lumada APM Edge" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-4304; CVE-2023-0286; CVE-2023-0215; CVE-2022-4450" ;
    icsa:cweNumber "CWE-416; CWE-843; CWE-203; CWE-415" ;
    icsa:hasCVE cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286 ;
    icsa:hasCWE cwe-res:CWE-203,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lumada Asset Performance Management (APM) Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Hitachi products are affected: Lumada APM Edge: Versions 4.0 and prior Lumada APM Edge: Version 6.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-255-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-255-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-255-02" ;
    dcterms:issued "2023-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fujitsu Software Infrastructure Manager" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-39903" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2023-39903 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Infrastructure Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Infrastructure Manager are affected: Infrastructure Manager: Advanced Edition V2.8.0.060 Infrastructure Manager: Advanced Edition for PRIMEFLEX V2.8.0.060 Infrastructure Manager: Essential Edition V2.8.0.060." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-255-02" ;
    icsa:vendor "Fujitsu Software" ;
    icsa:year 2023 .

icsa-res:ICSA-23-257-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-257-01" ;
    dcterms:issued "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC, SIPLUS Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-28831" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2023-28831 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SIPLUS Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected:SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00): All versions prior to v2.2SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00): All versions prior to v2.2SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): All versions prior to v2.9.7SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): All versions from v3.0.1 to v3.0.3SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): All versions prior to v2.9.7SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): All versions from v3.0.1 to v3.0.3SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions prior to v21.9.7SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): Versions 30.0.0 and priorSIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versionsSIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DM03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RL00-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RM03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1514SP-2 PN (6ES7514-2DN03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RM00-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RN03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1517H-3 PN (6ES7517-3HP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0):All versions prior to v3.0.3SIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1518HF-4 PN (6ES7518-4JP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0): All versions prior to v3.0.3SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK (6ES7518-4AP00-3AB0):All versions prior to v2.9.7SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK (6ES7518-4FP00-3AB0): All versions prior to v2.9.7SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN (6ES7513-2GL00-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN (6ES7513-2PL00-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN (6ES7516-2GN00-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN (6ES7516-2PN00-0AB0): All versions prior to v2.9.7SIMATIC S7-1500 Software Controller V2: All versions prior to v21.9.7SIMATIC S7-1500 Software Controller V3: All versionsSIMATIC S7-PLCSIM Advanced: All versionsSIPLUS ET 200SP CPU 1510SP F-1 PN (6AG1510-1SJ01-2AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL (6AG2510-1SJ01-1AB0):All versions prior to v2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-2AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-7AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-4AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-1AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-2AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-7AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-1AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-4AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-2AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-7AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-4AB0): All versions prior to v2.9.7SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-1AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-7AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-7AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK01-1AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK02-1AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK01-4AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK02-4AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK01-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK02-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-7AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-7AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL01-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL02-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM01-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM02-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1515F-2 PN RAIL (6AG2515-2FM02-4AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL (6AG2515-2FM01-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1515R-2 PN (6AG1515-2RM00-7AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL (6AG2515-2RM00-4AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-7AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-7AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL (6AG2516-3AN02-4AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL (6AG2516-3AN01-4AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN02-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN01-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-2AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-4AB0): All versions prior to v2.9.7SIPLUS S7-1500 CPU 1517H-3 PN (6AG1517-3HP00-4AB0): All versions prior to v3.0.3SIPLUS S7-1500 CPU 1518-4 PN/DP (6AG1518-4AP00-4AB0): All versions prior to v3.0.3SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): All versions prior to v3.0.3SIPLUS S7-1500 CPU 1518F-4 PN/DP (6AG1518-4FP00-4AB0): All versions prior to v3.0.3SIPLUS S7-1500 CPU 1518HF-4 PN (6AG1518-4JP00-4AB0): All versions prior to v3.0.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-257-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-257-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-257-02" ;
    dcterms:issued "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-41032; CVE-2023-41033" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-41032,
        cve-res:CVE-2023-41033 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Parasolid V34.1: all versions prior to V34.1.258 Parasolid V35.0: all versions prior to V35.0.253 Parasolid V35.0: all versions prior to V35.0.260 Parasolid V35.1: all versions prior to V35.1.184 Parasolid V35.1: all versions prior to V35.1.246 Parasolid V36.0: all versions prior to V36.0.142 Parasolid V36.0: all versions prior to V36.0.156.; a 3D geometric modeling tool; The following versions of Siemens Parasolid" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-257-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-257-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-257-03" ;
    dcterms:issued "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens QMS Automotive" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-40725; CVE-2023-40726; CVE-2023-40727; CVE-2023-40724; CVE-2023-40729; CVE-2023-40731; CVE-2023-40732; CVE-2023-40730; CVE-2023-40728; CVE-2022-43958" ;
    icsa:cweNumber "CWE-434; CWE-316; CWE-209; CWE-922; CWE-550; CWE-613; CWE-284; CWE-319; CWE-256; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2022-43958,
        cve-res:CVE-2023-40724,
        cve-res:CVE-2023-40725,
        cve-res:CVE-2023-40726,
        cve-res:CVE-2023-40727,
        cve-res:CVE-2023-40728,
        cve-res:CVE-2023-40729,
        cve-res:CVE-2023-40730,
        cve-res:CVE-2023-40731,
        cve-res:CVE-2023-40732 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-256,
        cwe-res:CWE-284,
        cwe-res:CWE-316,
        cwe-res:CWE-319,
        cwe-res:CWE-347,
        cwe-res:CWE-434,
        cwe-res:CWE-550,
        cwe-res:CWE-613,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "QMS Automotive" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: QMS Automotive: All versions prior to v12.39.; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-257-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-257-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-257-04" ;
    dcterms:issued "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 Product" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-31041; CVE-2022-32469; CVE-2022-30283; CVE-2022-32954; CVE-2022-29275; CVE-2017-5715; CVE-2022-30772; CVE-2022-35896; CVE-2022-32953; CVE-2022-32471; CVE-2022-35894; CVE-2022-35895; CVE-2022-32477; CVE-2022-36338; CVE-2023-27373; CVE-2022-32475; CVE-2022-35893; CVE-2022-24351; CVE-2022-27405; CVE-2022-24350; CVE-2022-32470; CVE-2023-24932; CVE-2021-38578" ;
    icsa:cweNumber "CWE-200; CWE-120; CWE-367; CWE-787; CWE-401; CWE-124; CWE-20; CWE-358; CWE-119; CWE-256; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2017-5715,
        cve-res:CVE-2021-38578,
        cve-res:CVE-2022-24350,
        cve-res:CVE-2022-24351,
        cve-res:CVE-2022-27405,
        cve-res:CVE-2022-29275,
        cve-res:CVE-2022-30283,
        cve-res:CVE-2022-30772,
        cve-res:CVE-2022-32469,
        cve-res:CVE-2022-32470,
        cve-res:CVE-2022-32471,
        cve-res:CVE-2022-32475,
        cve-res:CVE-2022-32477,
        cve-res:CVE-2022-32953,
        cve-res:CVE-2022-32954,
        cve-res:CVE-2022-35893,
        cve-res:CVE-2022-35894,
        cve-res:CVE-2022-35895,
        cve-res:CVE-2022-35896,
        cve-res:CVE-2022-36338,
        cve-res:CVE-2023-24932,
        cve-res:CVE-2023-27373,
        cve-res:CVE-2023-31041 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-124,
        cwe-res:CWE-125,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-256,
        cwe-res:CWE-358,
        cwe-res:CWE-367,
        cwe-res:CWE-401,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808 Product Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products contain affected versions of Insyde BIOS:RUGGEDCOM APE1808 ADM (6GK6015-0AL20-0GL0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808 ADM CC (6GK6015-0AL20-0GL1): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808 CKP (6GK6015-0AL20-0GK0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808 CKP CC (6GK6015-0AL20-0GK1): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808 CLOUDCONNECT (6GK6015-0AL20-0GM0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808 CLOUDCONNECT CC (6GK6015-0AL20-0GM1): BIOS versions < V1.0.212NRUGGEDCOM APE1808 ELAN (6GK6015-0AL20-0GP0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808 ELAN CC (6GK6015-0AL20-0GP1): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808 SAM-L (6GK6015-0AL20-0GN0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808 SAM-L CC (6GK6015-0AL20-0GN1): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808CLA-P (6GK6015-0AL20-1AA0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808CLA-P CC (6GK6015-0AL20-1AA1): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808CLA-S1 (6GK6015-0AL20-1AB0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808CLA-S1 CC (6GK6015-0AL20-1AB1): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808CLA-S3 (6GK6015-0AL20-1AD0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808CLA-S3 CC (6GK6015-0AL20-1AD1): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808CLA-S5 (6GK6015-0AL20-1AF0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808CLA-S5 CC (6GK6015-0AL20-1AF1): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808W10 (6GK6015-0AL20-0GJ0): BIOS versions prior to V1.0.212NRUGGEDCOM APE1808W10 CC (6GK6015-0AL20-0GJ1): BIOS versions prior to V1.0.212N." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-257-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-257-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-257-05" ;
    dcterms:issued "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC IPCs" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-40982" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2022-40982 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Field PG and SIMATIC IPC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SIMATIC Field PG M6: All Versions SIMATIC IPC BX-39A: All Versions SIMATIC IPC PX-39A: All Versions SIMATIC IPC PX-39A PRO: All Versions SIMATIC IPC RW-543A: All Versions SIMATIC IPC627E: All Versions SIMATIC IPC647E: All Versions SIMATIC IPC677E: All Versions SIMATIC IPC847E: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-257-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-257-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-257-06" ;
    dcterms:issued "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WIBU Systems CodeMeter" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-3935" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2023-3935 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WIBU Systems CodeMeter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: PSS(R)CAPE V14: All versions prior to V14.2023-08-23 PSS(R)CAPE V15: All versions prior to V15.0.22 PSS(R)E V34: All versions prior to V34.9.6 PSS(R)E V35: All versions PSS(R)ODMS V13.0: All versions PSS(R)ODMS V13.1: All versions prior to V13.1.12.1 SIMATIC PCS neo V3: All versions SIMATIC PCS neo V4: All versions SIMATIC WinCC OA V3.17: All versions SIMATIC WinCC OA V3.18: All versions SIMATIC WinCC OA V3.19: All versions prior to V3.19 P006 SIMIT Simulation Platform: All versions SINEC INS: All versions SINEMA Remote Connect: All versions.; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-257-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-257-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-257-07" ;
    dcterms:issued "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Pavilion8" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-29463" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-29463 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pavilion8" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a model predictive control software; are affected: Pavilion8: versions v5.17.00 and v5.17.01.; The following versions of Rockwell Automation Pavilion8" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-257-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-262-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-262-01" ;
    dcterms:issued "2023-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC PCS neo Administration Console" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-38558" ;
    icsa:cweNumber "CWE-538" ;
    icsa:hasCVE cve-res:CVE-2023-38558 ;
    icsa:hasCWE cwe-res:CWE-538 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS neo Administration Console" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected:SIMATIC PCS neo (Administration Console): V4.0SIMATIC PCS neo (Administration Console): V4.0 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-262-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-262-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-262-03" ;
    dcterms:issued "2023-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron Engineering Software Zip-Slip" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-1002205" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2018-1002205 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sysmac Studio, NX-IO Configurator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Omron engineering software are affected:Sysmac Studio: version 1.54 and priorNX-IO Configurator: version 1.22 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-262-03" ;
    icsa:vendor "Omron" ;
    icsa:year 2023 .

icsa-res:ICSA-23-262-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-262-04" ;
    dcterms:issued "2023-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron Engineering Software" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-45793" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2022-45793 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sysmac Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Omron engineering software are affected: Sysmac Studio: version 1.54 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-262-04" ;
    icsa:vendor "Omron" ;
    icsa:year 2023 .

icsa-res:ICSA-23-262-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-262-05" ;
    dcterms:issued "2023-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Omron CJ/CS/CP Series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-45790" ;
    icsa:cweNumber "CWE-799" ;
    icsa:hasCVE cve-res:CVE-2022-45790 ;
    icsa:hasCWE cwe-res:CWE-799 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sysmac CJ/CS/CP Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "programmable logic controllers; The following versions of Omron CJ/CS/CP series; are affected:Smart Security Manager: Versions 1.4 and prior to 1.31Smart Security Manager: Versions 1.5 and prior CJ2H-CPU ** (-EIP): version 1.4 and prior CJ2M-CPU ** : version 2.0 and prior CS1H/G-CPU ** CJ1G-CPU ** P: version 4.0 and prior CS1D-CPU ** H / -CPU ** P: version 1.3 and prior CS1D-CPU ** S: version 2.0 and prior CP1E-E / -N: version 1.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-262-05" ;
    icsa:vendor "Omron" ;
    icsa:year 2023 .

icsa-res:ICSA-23-264-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-264-01" ;
    dcterms:issued "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Real Time Automation 460 Series" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4523" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-4523 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "460MCBS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Real Time Automation products are affected: 460 Series: Versions prior to v8.9.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-264-01" ;
    icsa:vendor "Real Time Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-264-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-264-02" ;
    dcterms:issued "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power 7" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-38557" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2023-38557 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Spectrum Power 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Spectrum Power 7: versions prior to V23Q3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-264-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-264-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-264-03" ;
    dcterms:issued "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAScreen" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-5068" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-5068 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAScreen" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software configuration tool for Delta devices; are affected: DIAScreen: versions prior to v1.3.2.; Delta Electronics reports the following versions of DIAScreen" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-264-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-264-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-264-04" ;
    dcterms:issued "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Select Logix Communication Modules" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-2262" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-2262 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: 1756-EN2T Series A: versions 5.008 and prior 1756-EN2T Series A: version 5.028 1756-EN2T Series B: versions 5.008 and prior 1756-EN2T Series B: version 5.028 1756-EN2T Series C: versions 5.008 and prior 1756-EN2T Series C: version 5.028 1756-EN2T Series D: versions 11.002 and prior 1756-EN2TK Series A: versions 5.008 and prior 1756-EN2TK Series A: version 5.028 1756-EN2TK Series B: versions 5.008 and prior 1756-EN2TK Series B: version 5.028 1756-EN2TK Series C: versions 5.008 and prior 1756-EN2TK Series C: version 5.028 1756-EN2TK Series D: versions 11.002 and prior 1756-EN2TXT Series A: versions 5.008 and prior 1756-EN2TXT Series A: and version 5.028 1756-EN2TXT Series B: versions 5.008 and prior 1756-EN2TXT Series B: version 5.028 1756-EN2TXT Series C: versions 5.008 and prior 1756-EN2TXT Series C: version 5.028 1756-EN2TXT Series D: versions 11.002 and prior 1756-EN2TP Series A: versions 11.002 and prior 1756-EN2TPK Series A: versions 11.002 and prior 1756-EN2TPXT Series A: versions 11.002 and prior 1756-EN2TR Series A: versions 5.008 and prior 1756-EN2TR Series A: version 5.028 1756-EN2TR Series B: versions 5.008 and prior 1756-EN2TR Series B: version 5.028 1756-EN2TR Series C: versions 11.002 and prior 1756-EN2TRK Series A: versions 5.008 and prior 1756-EN2TRK Series A: version 5.028 1756-EN2TRK Series B: versions 5.008 and prior 1756-EN2TRK Series B: version 5.028 1756-EN2TRK Series C: versions 11.002 and prior 1756-EN2TRXT Series A: versions 5.008 and prior 1756-EN2TRXT Series A: version 5.028 1756-EN2TRXT Series B: versions 5.008 and prior 1756-EN2TRXT Series B: version 5.028 1756-EN2TRXT Series C: versions 11.002 and prior 1756-EN2F Series A: versions 5.008 and prior 1756-EN2F Series A: version 5.028 1756-EN2F Series B: versions 5.008 and prior 1756-EN2F Series B: version 5.028 1756-EN2F Series C: versions 11.002 and prior 1756-EN2FK Series A: versions 5.008 and prior 1756-EN2FK Series A: version 5.028 1756-EN2FK Series B: versions 5.008 and prior 1756-EN2FK Series B: version 5.028 1756-EN2FK Series C: versions 11.002 and prior 1756-EN3TR Series A: versions 5.008 and prior 1756-EN3TR Series A: version 5.028 1756-EN3TR Series B: versions 11.002 and prior 1756-EN3TRK Series A: versions 5.008 and prior 1756-EN3TRK Series A: version 5.028 1756-EN3TRK Series B: versions 11.002 and prior.; The following versions of Rockwell Automation Logix Communication Modules" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-264-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-264-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-264-05" ;
    dcterms:issued "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Connected Components Workbench" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-16013; CVE-2020-16017; CVE-2020-15999; CVE-2020-16009; CVE-2022-0609" ;
    icsa:cweNumber "CWE-416; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2020-15999,
        cve-res:CVE-2020-16009,
        cve-res:CVE-2020-16013,
        cve-res:CVE-2020-16017,
        cve-res:CVE-2022-0609 ;
    icsa:hasCWE cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Connected Components Workbench" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation Connected Components Workbench Smart Security Manager are affected: Connected Components Workbench: versions prior to R21." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-264-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-264-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-264-06" ;
    dcterms:issued "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View Machine Edition" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2071" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-2071 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View Machine Edition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: FactoryTalk View Machine Edition: v13.0 FactoryTalk View Machine Edition: v12.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-264-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-269-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-269-01" ;
    dcterms:issued "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Suprema BioStar 2" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-27167" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2023-27167 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BioStar 2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an access control system; are affected: BioStar 2: version 2.8.16; The following versions of Suprema BioStar 2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-269-01" ;
    icsa:vendor "Suprema Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-269-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-269-02" ;
    dcterms:issued "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Asset Suite 9" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-4816" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-4816 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Asset Suite 9" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports these vulnerabilities affect the following products: Asset Suite: Versions 9.6.3.11.1 and prior Asset Suite: Version 9.6.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-269-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-269-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-269-03" ;
    dcterms:issued "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FA Engineering Software (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4088" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2023-4088 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FA Engineering Software Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mitsubishi Electric FA Engineering Software Products are affected: AL-PCS/WIN-E: All versions CPU Module Logging Configuration Tool: All versions EZSocket: All versions FR Configurator2: All versions FX Configurator-EN: All versions FX Configurator-EN-L: All versions FX Configurator-FP: All versions GT Designer3 Version1(GOT1000): All versions GT Designer3 Version1(GOT2000): All versions GT SoftGOT1000 Version3: All versions GT SoftGOT2000 Version1: All versions GX LogViewer: All versions GX Works2: All versions GX Works3: All versions MELSOFT FieldDeviceConfigurator: All versions MELSOFT iQ AppPortal: All versions MELSOFT MaiLab: All versions MELSOFT Navigator: All versions MELSOFT Update Manager: All versions MX Component: All versions MX Sheet: All versions PX Developer: All versions RT ToolBox3: All versions RT VisualBox: All versions Data Transfer: All versions Data Transfer Classic: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-269-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-269-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-269-04" ;
    dcterms:issued "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech EKI-1524-CE series" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4203; CVE-2023-4202" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-4202,
        cve-res:CVE-2023-4203 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EKI-1524-CE, EKI-1522-CE, EKI-1521-CE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Advantech serial device servers are affected: EKI-1524-CE series: versions 1.24 and prior EKI-1522-CE series: versions 1.24 and prior EKI-1521-CE series: versions 1.24 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-269-04" ;
    icsa:vendor "Advantech" ;
    icsa:year 2023 .

icsa-res:ICSA-23-269-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-269-05" ;
    dcterms:issued "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baker Hughes Bently Nevada 3500" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-36857; CVE-2023-34437; CVE-2023-34441" ;
    icsa:cweNumber "CWE-294; CWE-319; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2023-34437,
        cve-res:CVE-2023-34441,
        cve-res:CVE-2023-36857 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-294,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Bently Nevada 3500 System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Bently Nevada 3500 System; are affected: Bently Nevada 3500 Rack (TDI Firmware): version 5.05; a real-time monitoring solution" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-269-05" ;
    icsa:vendor "Baker Hughes - Bently Nevada" ;
    icsa:year 2023 .

icsa-res:ICSA-23-271-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-271-01" ;
    dcterms:issued "2023-09-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PanelView 800" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater System; Telecommunications" ;
    icsa:cveNumber "CVE-2017-12652" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-12652 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PanelView 800" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: PanelView 800 2711R-T10T: V3.011 PanelView 800 2711R-T7T: V3.011 PanelView 800 2711R-T4T: V3.011; The following versions of Rockwell Automation PanelView 800; a graphics terminal" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-271-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-271-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-271-02" ;
    dcterms:issued "2023-09-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "DEXMA DexGate" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Spain" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-42666; CVE-2023-4108; CVE-2023-41088; CVE-2023-42435; CVE-2023-40153" ;
    icsa:cweNumber "CWE-352; CWE-200; CWE-287; CWE-79; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2023-40153,
        cve-res:CVE-2023-4108,
        cve-res:CVE-2023-41088,
        cve-res:CVE-2023-42435,
        cve-res:CVE-2023-42666 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-287,
        cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DEXGate" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of DEXGate is affected: DEXGate: Version 20130114" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-271-02" ;
    icsa:vendor "DEXMA" ;
    icsa:year 2023 .

icsa-res:ICSA-23-278-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-278-01" ;
    dcterms:issued "2023-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy AFS65x, AFF66x, AFS67x, and AFR67x Series Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-22823; CVE-2022-25314; CVE-2022-22826; CVE-2022-23852; CVE-2021-46143; CVE-2022-22822; CVE-2022-25235; CVE-2022-23990; CVE-2022-22825; CVE-2022-25236; CVE-2022-22824; CVE-2021-45960; CVE-2022-25315; CVE-2022-22827" ;
    icsa:cweNumber "CWE-116; CWE-682; CWE-190; CWE-668" ;
    icsa:hasCVE cve-res:CVE-2021-45960,
        cve-res:CVE-2021-46143,
        cve-res:CVE-2022-22822,
        cve-res:CVE-2022-22823,
        cve-res:CVE-2022-22824,
        cve-res:CVE-2022-22825,
        cve-res:CVE-2022-22826,
        cve-res:CVE-2022-22827,
        cve-res:CVE-2022-23852,
        cve-res:CVE-2022-23990,
        cve-res:CVE-2022-25235,
        cve-res:CVE-2022-25236,
        cve-res:CVE-2022-25314,
        cve-res:CVE-2022-25315 ;
    icsa:hasCWE cwe-res:CWE-116,
        cwe-res:CWE-190,
        cwe-res:CWE-668,
        cwe-res:CWE-682 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AFS65x, AFF66x, AFS67x, AFR67x Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Hitachi Energy products and versions are affected: AFF66X FW: 03.0.02 and prior AFS66X-S: All versions AFS660-C: All versions AFS66X-B: All versions AFS670-V20: All versions AFS65X: All versions AFS67X: All versions AFR677: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-278-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-278-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-278-02" ;
    dcterms:issued "2023-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Qognify NiceVision" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-2306" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2023-2306 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NiceVision" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: NiceVision: v3.1 and prior; an IP-video surveillance system; The following versions of Qoginfy NiceVision" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-278-02" ;
    icsa:vendor "Qognify" ;
    icsa:year 2023 .

icsa-res:ICSA-23-278-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-278-03" ;
    dcterms:issued "2023-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-4304; CVE-2022-4450" ;
    icsa:cweNumber "CWE-208; CWE-415" ;
    icsa:hasCVE cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450 ;
    icsa:hasCWE cwe-res:CWE-208,
        cwe-res:CWE-415 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CC-Link IE TSN Industrial Managed Switch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric products are affected: CC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT8F2: firmware version 05 and prior CC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT4: firmware version 05 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-278-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-01" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CP products" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-37194; CVE-2023-37195" ;
    icsa:cweNumber "CWE-284; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-37194,
        cve-res:CVE-2023-37195 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SIMATIC CP 1604 (6GK1160-4AA01): all versions SIMATIC CP 1616 (6GK1161-6AA02): all versions SIMATIC CP 1623 (6GK1162-3AA00): all versions SIMATIC CP 1626 (6GK1162-6AA01): all versions SIMATIC CP 1628 (6GK1162-8AA00): all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-02" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-22783; CVE-2023-22791; CVE-2023-22782; CVE-2023-22789; CVE-2023-22780; CVE-2023-22784; CVE-2023-22787; CVE-2023-22785; CVE-2023-22781; CVE-2023-22786; CVE-2023-22788; CVE-2023-22779; CVE-2023-22790" ;
    icsa:cweNumber "CWE-20; CWE-200; CWE-120; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2023-22779,
        cve-res:CVE-2023-22780,
        cve-res:CVE-2023-22781,
        cve-res:CVE-2023-22782,
        cve-res:CVE-2023-22783,
        cve-res:CVE-2023-22784,
        cve-res:CVE-2023-22785,
        cve-res:CVE-2023-22786,
        cve-res:CVE-2023-22787,
        cve-res:CVE-2023-22788,
        cve-res:CVE-2023-22789,
        cve-res:CVE-2023-22790,
        cve-res:CVE-2023-22791 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SCALANCE W1750D (JP) (6GK5750-2HX01-1AD0): versions prior to V8.10.0.6 SCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0): versions prior to V8.10.0.6 SCALANCE W1750D (USA) (6GK5750-2HX01-1AB0): versions prior to V8.10.0.6" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-03" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM A8000 Devices" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-42796" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2023-42796 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM A8000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SICAM A8000; a remote terminal unit; are affected: CP-8031 MASTER MODULE (6MF2803-1AA00): All versions prior to CPCI85 V05.11 CP-8050 MASTER MODULE (6MF2805-0AA00): All versions prior to CPCI85 V05.11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-04" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Xpedition Layout Browser" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-30900" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-30900 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Xpedition Layout Browser" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Xpedition Layout Browser are affected: Xpedition Layout Browser: All versions prior to VX.2.14" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-05" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Amesim" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-43625" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2023-43625 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Amesim" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Simcenter Amesim are affected: Simcenter Amesim: All versions prior to V2021.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-06" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM PAS/PQS" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-38640" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2023-38640 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM PAS/PQS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SICAM PAS/PQS are affected: SICAM PAS/PQS: Version 8.00 up to but not including 8.22." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-07" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE180" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-23574; CVE-2023-23903; CVE-2023-22843; CVE-2023-22378; CVE-2023-24471; CVE-2023-24015; CVE-2023-24477" ;
    icsa:cweNumber "CWE-89; CWE-79; CWE-20; CWE-384; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2023-22378,
        cve-res:CVE-2023-22843,
        cve-res:CVE-2023-23574,
        cve-res:CVE-2023-23903,
        cve-res:CVE-2023-24015,
        cve-res:CVE-2023-24471,
        cve-res:CVE-2023-24477 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-384,
        cwe-res:CWE-79,
        cwe-res:CWE-863,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: RUGGEDCOM APE1808 with Nozomi Guardian / CMC: versions prior to V22.6.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-08" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-44315; CVE-2022-30527" ;
    icsa:cweNumber "CWE-732; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2022-30527,
        cve-res:CVE-2023-44315 ;
    icsa:hasCWE cwe-res:CWE-732,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SINEC NMS: All versions prior to V2.0; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-09" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens CPCI85 Firmware of SICAM A8000 Devices" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-36380" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2023-36380 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CP-8050, CP-8031" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected if activated with debug support: CP-8031 MASTER MODULE (6MF2803-1AA00): All versions prior to CPCI85 V05.11 CP-8050 MASTER MODULE (6MF2805-0AA00): All versions prior to CPCI85 V05.11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-10" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Tecnomatix Plant Simulation" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-44083; CVE-2023-44087; CVE-2023-44081; CVE-2023-44086; CVE-2023-44085; CVE-2023-44082; CVE-2023-44084" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-44081,
        cve-res:CVE-2023-44082,
        cve-res:CVE-2023-44083,
        cve-res:CVE-2023-44084,
        cve-res:CVE-2023-44085,
        cve-res:CVE-2023-44086,
        cve-res:CVE-2023-44087 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tecnomatix Plant Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Tecnomatix Plant Simulation V2201: All versions prior to V2201.0009 Tecnomatix Plant Simulation V2302: All versions prior to V2302.0003; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-11" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Forgot Password Module" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-43623" ;
    icsa:cweNumber "CWE-203" ;
    icsa:hasCVE cve-res:CVE-2023-43623 ;
    icsa:hasCWE cwe-res:CWE-203 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Forgot Password Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Mendix Forgot Password (Mendix 7 compatible): All versions prior to V3.7.3. Mendix Forgot Password (Mendix 8 compatible): All versions prior to V4.1.3. Mendix Forgot Password (Mendix 9 compatible): All versions prior to V5.4.0. Mendix Forgot Password (Mendix 10 compatible): All versions prior to V5.4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-12" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Weintek cMT3000 HMI Web CGI" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-38584; CVE-2023-43492; CVE-2023-40145" ;
    icsa:cweNumber "CWE-78; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-38584,
        cve-res:CVE-2023-40145,
        cve-res:CVE-2023-43492 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "cMT3000 CMI Web CGI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Weintek products are affected: cMT-FHD: OS version 20210210 or prior. cMT-HDM: OS version 20210204 or prior. cMT3071: OS version 20210218 or prior. cMT3072: OS version 20210218 or prior. cMT3103: OS version 20210218 or prior. cMT3090: OS version 20210218 or prior. cMT3151: OS version 20210218 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-12" ;
    icsa:vendor "Weintek" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-13" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-F Series" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4562" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-4562 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "30; ESS: All versions. MELSEC-F FX3SA-xMy-CM x=10; R: All versions. MELSEC-F FX3UC-xMT/z x=16; 64; z=ES; DSS: All versions. MELSEC-F series FX3U-32MR/UA1; 128; 20; 40; 80; Mitsubishi Electric reports that the following versions of MELSEC-F series programmable controllers are affected if they are used with ethernet communication special adapter FX3U-ENET-ADP or ethernet communication block FX3U-ENET(-L). Some of these products are sold in limited regions; y=T; FX3UC-32MT-LT-2: All versions. MELSEC-F FX3UC-16MT/D-P4; R: All versions.; see the Mitsubishi Electric advisory for details: MELSEC-F series FX3U-xMy/z x=16; FX3UC-16MT/DSS-P4: All versions. MELSEC-F FX3G-xMy/z x=14; FX3GC-32MT/DSS: All versions. MELSEC-F FX3GE-xMy/z x=24; FX3U-64MR/UA1: All versions. MELSEC-F FX3U-32MS/ES; 32; 14; 60; 48; DSS: All versions. MELSEC-F FX3S-30My/z-2AD y=T; FX3U-64MS/ES: All versions. MELSEC-F FX3U-xMy/ES-A x=16; R; DSS: All versions. MELSEC-F FX3GA-xMy-CM x=24; DSS: All versions. MELSEC-F FX3UC-16MR/D-T; z=D; DS; FX3UC-16MR/DS-T: All versions. MELSEC-F FX3UC-32MT-LT; ESS; 24; R: All versions. MELSEC-F FX3GC-32MT/D; R: All versions. MELSEC-F FX3S-xMy/z x=10; DSS: All versions. MELSEC-F FX3G-xMy/ES-A x=14; 96" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-13" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-14" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hikvision Access Control and Intercom Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2023-28810; CVE-2023-28809" ;
    icsa:cweNumber "CWE-284; CWE-384" ;
    icsa:hasCVE cve-res:CVE-2023-28809,
        cve-res:CVE-2023-28810 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-384 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Access Control and Intercom Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Access Control and Intercom Products are affected: DS-K1T804AXX: V1.4.0_build221212 and prior. DS-K1T341AXX: V3.2.30_build221223 and prior. DS-K1T671XXX: V3.2.30_build221223 and prior. DS-K1T343XXX: V3.14.0_build230117 and prior. DS-K1T341C: V3.3.8_build230112 and prior. DS-K1T320XXX: V3.5.0_build220706 and prior. DS-KH63 Series: V2.2.8_build230219 and prior. DS-KH85 Series: V2.2.8_build230219 and prior. DS-KH62 Series: V1.4.62_build220414 and prior. DS-KH9310-WTE1(B): V2.1.76_build230204 and prior. DS-KH9510-WTE1(B): V2.1.76_build230204 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-14" ;
    icsa:vendor "Hikvision" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-15" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-4215" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2023-4215 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Advantech WebAccess; are affected: Advantech WebAccess: Version 9.1.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-15" ;
    icsa:vendor "Advantech" ;
    icsa:year 2023 .

icsa-res:ICSA-23-285-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-285-16" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-4516" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2023-4516 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGSS (Interactive Graphical SCADA System)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports these vulnerabilities affect the following IGSS (Interactive Graphical SCADA System) products: IGSS Update Service (IGSSupdateservice.exe): v16.0.0.23211 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-285-16" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-290-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-290-01" ;
    dcterms:issued "2023-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Monitoring Expert and Power Operation Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-5391" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-5391 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Monitoring Expert, EcoStruxure Power Operation with Advanced Reports, EcoStruxure Power SCADA Operation with Advanced Reports" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Schneider Electric EcoStruxure Power Monitoring Expert and Power Operation Products is affected: EcoStruxure Power Monitoring Expert: All versions prior to Hotfix-145271 EcoStruxure Power Operation with Advanced Reports: All versions prior to application of Hotfix-145271 EcoStruxure Power SCADA Operation with Advanced Reports: All versions prior to Hotfix-145271." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-290-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-290-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-290-02" ;
    dcterms:issued "2023-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Linx" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-29464" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-29464 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Linx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell products are affected: FactoryTalk Linx: v6.20 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-290-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-297-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-297-01" ;
    dcterms:issued "2023-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix 5800 and Stratix 5200 (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-20198; CVE-2023-20273" ;
    icsa:cweNumber "CWE-420; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2023-20198,
        cve-res:CVE-2023-20273 ;
    icsa:hasCWE cwe-res:CWE-420,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix 5800 and Stratix 5200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Stratix products and the contained Cisco IOS software are affected: Stratix 5800 (running Cisco IOS XE Software with the Web UI feature enabled): All versions Stratix 5200 (running Cisco IOS XE Software with the Web UI feature enabled): All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-297-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-299-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-299-01" ;
    dcterms:issued "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dingtian DT-R002" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-29593" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2022-29593 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DT-R002" ;
    icsa:productDistribution "Unknown" ;
    icsa:productsAffected "The following versions of Dingtian DT-R002; are affected: DT-R002: version 3.1.276A; a relay board" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-299-01" ;
    icsa:vendor "Dingtian" ;
    icsa:year 2023 .

icsa-res:ICSA-23-299-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-299-02" ;
    dcterms:issued "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Centralite Pearl Thermostat" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications" ;
    icsa:cveNumber "CVE-2023-24678" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2023-24678 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pearl Thermostat" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions Centralite Pearl Thermostat are affected: Pearl Thermostat: version 0x04075010" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-299-02" ;
    icsa:vendor "Centralite" ;
    icsa:year 2023 .

icsa-res:ICSA-23-299-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-299-03" ;
    dcterms:issued "2023-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-39943; CVE-2023-40222; CVE-2023-39936; CVE-2023-39427" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-39427,
        cve-res:CVE-2023-39936,
        cve-res:CVE-2023-39943,
        cve-res:CVE-2023-40222 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Ashlar-Vellum products are affected: Cobalt: Versions prior to v12 SP2 Build (1204.200) Cobalt Share: Versions prior to v12 SP2 Build (1204.200) Graphite: v13.0.48 and prior Xenon: Versions prior to v12 SP2 Build (1204.200) Argon: Versions prior to v12 SP2 Build (1204.200) Lithium: Versions prior to v12 SP2 Build (1204.200)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-299-03" ;
    icsa:vendor "Ashlar-Vellum" ;
    icsa:year 2023 .

icsa-res:ICSA-23-299-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-299-04" ;
    dcterms:issued "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-27858; CVE-2023-27854" ;
    icsa:cweNumber "CWE-125; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2023-27854,
        cve-res:CVE-2023-27858 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arena" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Arena; are affected: Arena: Version 16.20.00001; a simulation software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-299-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-299-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-299-05" ;
    dcterms:issued "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View Site Edition" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-46289" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-46289 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View Site Edition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of FactoryTalk View Site Edition are affected: FactoryTalk View Site Edition: V11.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-299-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-299-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-299-06" ;
    dcterms:issued "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Services Platform" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-46290" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-46290 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Services Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following products are affected: FactoryTalk Services Platform: v2.74" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-299-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-299-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-299-07" ;
    dcterms:issued "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sielco PolyEco FM Transmitter" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2023-5754; CVE-2023-46664; CVE-2023-0897; CVE-2023-46663; CVE-2023-46665; CVE-2023-46661; CVE-2023-46662" ;
    icsa:cweNumber "CWE-284; CWE-384; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2023-0897,
        cve-res:CVE-2023-46661,
        cve-res:CVE-2023-46662,
        cve-res:CVE-2023-46663,
        cve-res:CVE-2023-46664,
        cve-res:CVE-2023-46665,
        cve-res:CVE-2023-5754 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-307,
        cwe-res:CWE-384 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PolyEco1000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a FM transmitter; The following versions of Sielco PolyEco1000; are affected: PolyEco1000: CPU:2.0.6 FPGA:10.19 PolyEco1000: CPU:1.9.4 FPGA:10.19 PolyEco1000: CPU:1.9.3 FPGA:10.19 PolyEco500: CPU:1.7.0 FPGA:10.16 PolyEco300: CPU:2.0.2 FPGA:10.19 PolyEco300: CPU:2.0.0 FPGA:10.19" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-299-07" ;
    icsa:vendor "Sielco" ;
    icsa:year 2023 .

icsa-res:ICSA-23-299-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-299-08" ;
    dcterms:issued "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sielco Radio Link and Analog FM Transmitters" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2023-45228; CVE-2023-41966; CVE-2023-42769; CVE-2023-45317" ;
    icsa:cweNumber "CWE-284; CWE-352; CWE-267" ;
    icsa:hasCVE cve-res:CVE-2023-41966,
        cve-res:CVE-2023-42769,
        cve-res:CVE-2023-45228,
        cve-res:CVE-2023-45317 ;
    icsa:hasCWE cwe-res:CWE-267,
        cwe-res:CWE-284,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Analog FM Transmitters and Radio Link" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Sielco devices are affected: Analog FM transmitter: 2.12 (EXC5000GX) Analog FM transmitter: 2.12 (EXC120GX) Analog FM transmitter: 2.11 (EXC300GX) Analog FM transmitter: 2.10 (EXC1600GX) Analog FM transmitter: 2.10 (EXC2000GX) Analog FM transmitter: 2.08 (EXC1600GX) Analog FM transmitter: 2.08 (EXC1000GX) Analog FM transmitter: 2.07 (EXC3000GX) Analog FM transmitter: 2.06 (EXC5000GX) Analog FM transmitter: 1.7.7 (EXC30GT) Analog FM transmitter: 1.7.4 (EXC300GT) Analog FM transmitter: 1.7.4 (EXC100GT) Analog FM transmitter: 1.7.4 (EXC5000GT) Analog FM transmitter: 1.6.3 (EXC1000GT) Analog FM transmitter: 1.5.4 (EXC120GT) Radio Link: 2.06 (RTX19) Radio Link: 2.05 (RTX19) Radio Link: 2.00 (EXC19) Radio Link: 1.60 (RTX19) Radio Link: 1.59 (RTX19) Radio Link: 1.55 (EXC19)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-299-08" ;
    icsa:vendor "Sielco" ;
    icsa:year 2023 .

icsa-res:ICSA-23-304-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-304-02" ;
    dcterms:issued "2023-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "INEA ME RTU" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Slovenia" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Transportation Systems" ;
    icsa:cveNumber "CVE-2023-35762; CVE-2023-29155" ;
    icsa:cweNumber "CWE-78; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-29155,
        cve-res:CVE-2023-35762 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ME RTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Inea ME RTU are affected: ME RTU: versions 3.36b and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-304-02" ;
    icsa:vendor "INEA" ;
    icsa:year 2023 .

icsa-res:ICSA-23-304-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-304-03" ;
    dcterms:issued "2023-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Zavio IP Camera" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-4249; CVE-2023-43755; CVE-2023-3959; CVE-2023-39435; CVE-2023-45225" ;
    icsa:cweNumber "CWE-78; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-39435,
        cve-res:CVE-2023-3959,
        cve-res:CVE-2023-4249,
        cve-res:CVE-2023-43755,
        cve-res:CVE-2023-45225 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IP Camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Zavio IP Cameras are affected: CF7500: version M2.1.6.05 CF7300: version M2.1.6.05 CF7201: version M2.1.6.05 CF7501: version M2.1.6.05 CB3211: version M2.1.6.05 CB3212: version M2.1.6.05 CB5220: version M2.1.6.05 CB6231: version M2.1.6.05 B8520: version M2.1.6.05 B8220: version M2.1.6.05 CD321: version M2.1.6.05" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-304-03" ;
    icsa:vendor "Zavio" ;
    icsa:year 2023 .

icsa-res:ICSA-23-306-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-306-01" ;
    dcterms:issued "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Red Lion Crimson" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-5719" ;
    icsa:cweNumber "CWE-158" ;
    icsa:hasCVE cve-res:CVE-2023-5719 ;
    icsa:hasCWE cwe-res:CWE-158 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FlexEdge Gateway, DA50A, DA70A running Crimson" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Red Lion products are affected: Crimson: v3.2.0053.18 or prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-306-01" ;
    icsa:vendor "Red Lion" ;
    icsa:year 2023 .

icsa-res:ICSA-23-306-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-306-02" ;
    dcterms:issued "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4625" ;
    icsa:cweNumber "CWE-307" ;
    icsa:hasCVE cve-res:CVE-2023-4625 ;
    icsa:hasCWE cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F/iQ-R Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FX5UC-32MT/DSS-TS; FX5UC-32MR/DS-TS: All versions FX5UJ-xMy/z x=24; 64; z=ES; The following Mitsubishi Electric MELSEC iQ-F/iQ-R Series products are affected (Products with * are sold in limited regions): FX5U-xMy/z x=32; 40; DSS: All versions FX5UJ-xMy/ES-A* x=24; 80; y=T; ESS: All versions R00/01/02CPU: Versions 05 or later R04/08/16/32/120(EN)CPU: Versions 35 or later R08/16/32/120/PCPU: Versions 37 or later.; 60; R; DSS (Serial number 17X**** and later): All versions FX5UC-xMy/z x=32; DSS (Serial number 179**** and prior): Versions 1.060 or later FX5UC-xMy/z x=32; DSS (Serial number 179**** and prior): Versions 1.060 or later FX5UC-32MT/DS-TS; z=D; DSS (Serial number 17X**** and later): All versions FX5U-xMy/z x=32; DS; R: All versions FX5S-xMy/z x=30; ESS; 80*; 96" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-306-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-306-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-306-03" ;
    dcterms:issued "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC Series (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4699" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2023-4699 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FA products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "R; MELSEC-F series CPU modules are only affected when they are used with Ethernet communication special adapter FX3U-ENET-ADP or Ethernet communication block FX3U-ENET(-L); 40; Mitsubishi Electric reports that the following FA products are affected. However; DS; DSS\". Some of these products are sold in limited regions. See the Mitsubishi Electric advisory for details: MELSEC-F series CPU module FX3U-16MT/ES: All versions MELSEC-F series CPU module FX3U-32MT/ES: All versions MELSEC-F series CPU module FX3U-48MT/ES: All versions MELSEC-F series CPU module FX3U-64MT/ES: All versions MELSEC-F series CPU module FX3U-80MT/ES: All versions MELSEC-F series CPU module FX3U-128MT/ES: All versions MELSEC-F series CPU module FX3U-16MR/ES: All versions MELSEC-F series CPU module FX3U-32MR/ES: All versions MELSEC-F series CPU module FX3U-48MR/ES: All versions MELSEC-F series CPU module FX3U-64MR/ES: All versions MELSEC-F series CPU module FX3U-80MR/ES: All versions MELSEC-F series CPU module FX3U-128MR/ES: All versions MELSEC-F series CPU module FX3U-16MT/ESS: All versions MELSEC-F series CPU module FX3U-32MT/ESS: All versions MELSEC-F series CPU module FX3U-48MT/ESS: All versions MELSEC-F series CPU module FX3U-64MT/ESS: All versions MELSEC-F series CPU module FX3U-80MT/ESS: All versions MELSEC-F series CPU module FX3U-128MT/ESS: All versions MELSEC-F series CPU module FX3U-16MT/DS: All versions MELSEC-F series CPU module FX3U-32MT/DS: All versions MELSEC-F series CPU module FX3U-48MT/DS: All versions MELSEC-F series CPU module FX3U-64MT/DS: All versions MELSEC-F series CPU module FX3U-80MT/DS: All versions MELSEC-F series CPU module FX3U-128MT/DS: All versions MELSEC-F series CPU module FX3U-16MR/DS: All versions MELSEC-F series CPU module FX3U-32MR/DS: All versions MELSEC-F series CPU module FX3U-48MR/DS: All versions MELSEC-F series CPU module FX3U-64MR/DS: All versions MELSEC-F series CPU module FX3U-80MR/DS: All versions MELSEC-F series CPU module FX3U-128MR/DS: All versions MELSEC-F series CPU module FX3U-16MT/DSS: All versions MELSEC-F series CPU module FX3U-32MT/DSS: All versions MELSEC-F series CPU module FX3U-48MT/DSS: All versions MELSEC-F series CPU module FX3U-64MT/DSS: All versions MELSEC-F series CPU module FX3U-80MT/DSS: All versions MELSEC-F series CPU module FX3U-128MT/DSS: All versions MELSEC-F series CPU module FX3U-32MR/UA1: All versions MELSEC-F series CPU module FX3U-64MR/UA1: All versions MELSEC-F series CPU module FX3U-32MS/ES: All versions MELSEC-F series CPU module FX3U-64MS/ES: All versions MELSEC-F series CPU module FX3U-16MT/ES-A: All versions MELSEC-F series CPU module FX3U-32MT/ES-A: All versions MELSEC-F series CPU module FX3U-48MT/ES-A: All versions MELSEC-F series CPU module FX3U-64MT/ES-A: All versions MELSEC-F series CPU module FX3U-80MT/ES-A: All versions MELSEC-F series CPU module FX3U-128MT/ES-A: All versions MELSEC-F series CPU module FX3U-16MR/ES-A: All versions MELSEC-F series CPU module FX3U-32MR/ES-A: All versions MELSEC-F series CPU module FX3U-48MR/ES-A: All versions MELSEC-F series CPU module FX3U-64MR/ES-A: All versions MELSEC-F series CPU module FX3U-80MR/ES-A: All versions MELSEC-F series CPU module FX3U-128MR/ES-A: All versions MELSEC-F series CPU module FX3UC-16MT/D: All versions MELSEC-F series CPU module FX3UC-32MT/D: All versions MELSEC-F series CPU module FX3UC-64MT/D: All versions MELSEC-F series CPU module FX3UC-96MT/D: All versions MELSEC-F series CPU module FX3UC-16MT/DSS: All versions MELSEC-F series CPU module FX3UC-32MT/DSS: All versions MELSEC-F series CPU module FX3UC-64MT/DSS: All versions MELSEC-F series CPU module FX3UC-96MT/DSS: All versions MELSEC-F series CPU module FX3UC-16MR/D-T: All versions MELSEC-F series CPU module FX3UC-16MR/DS-T: All versions MELSEC-F series CPU module FX3UC-32MT-LT: All versions MELSEC-F series CPU module FX3UC-32MT-LT-2: All versions MELSEC-F series CPU module FX3UC-16MT/D-P4: All versions MELSEC-F series CPU module FX3UC-16MT/DSS-P4: All versions MELSEC-F series CPU module FX3G-14MT/ES: All versions MELSEC-F series CPU module FX3G-24MT/ES: All versions MELSEC-F series CPU module FX3G-40MT/ES: All versions MELSEC-F series CPU module FX3G-60MT/ES: All versions MELSEC-F series CPU module FX3G-14MR/ES: All versions MELSEC-F series CPU module FX3G-24MR/ES: All versions MELSEC-F series CPU module FX3G-40MR/ES: All versions MELSEC-F series CPU module FX3G-60MR/ES: All versions MELSEC-F series CPU module FX3G-14MT/ESS: All versions MELSEC-F series CPU module FX3G-24MT/ESS: All versions MELSEC-F series CPU module FX3G-40MT/ESS: All versions MELSEC-F series CPU module FX3G-60MT/ESS: All versions MELSEC-F series CPU module FX3G-14MT/DS: All versions MELSEC-F series CPU module FX3G-24MT/DS: All versions MELSEC-F series CPU module FX3G-40MT/DS: All versions MELSEC-F series CPU module FX3G-60MT/DS: All versions MELSEC-F series CPU module FX3G-14MR/DS: All versions MELSEC-F series CPU module FX3G-24MR/DS: All versions MELSEC-F series CPU module FX3G-40MR/DS: All versions MELSEC-F series CPU module FX3G-60MR/DS: All versions MELSEC-F series CPU module FX3G-14MT/DSS: All versions MELSEC-F series CPU module FX3G-24MT/DSS: All versions MELSEC-F series CPU module FX3G-40MT/DSS: All versions MELSEC-F series CPU module FX3G-60MT/DSS: All versions MELSEC-F series CPU module FX3G-14MT/ES-A: All versions MELSEC-F series CPU module FX3G-24MT/ES-A: All versions MELSEC-F series CPU module FX3G-40MT/ES-A: All versions MELSEC-F series CPU module FX3G-60MT/ES-A: All versions MELSEC-F series CPU module FX3G-14MR/ES-A: All versions MELSEC-F series CPU module FX3G-24MR/ES-A: All versions MELSEC-F series CPU module FX3G-40MR/ES-A: All versions MELSEC-F series CPU module FX3G-60MR/ES-A: All versions MELSEC-F series CPU module FX3GC-32MT/D: All versions MELSEC-F series CPU module FX3GC-32MT/DSS: All versions MELSEC-F series CPU module FX3GE-24MT/ES: All versions MELSEC-F series CPU module FX3GE-40MT/ES: All versions MELSEC-F series CPU module FX3GE-24MR/ES: All versions MELSEC-F series CPU module FX3GE-40MR/ES: All versions MELSEC-F series CPU module FX3GE-24MT/ESS: All versions MELSEC-F series CPU module FX3GE-40MT/ESS: All versions MELSEC-F series CPU module FX3GE-24MT/DS: All versions MELSEC-F series CPU module FX3GE-40MT/DS: All versions MELSEC-F series CPU module FX3GE-24MR/DS: All versions MELSEC-F series CPU module FX3GE-40MR/DS: All versions MELSEC-F series CPU module FX3GE-24MT/DSS: All versions MELSEC-F series CPU module FX3GE-40MT/DSS: All versions MELSEC-F series CPU module FX3GA-24MT-CM: All versions MELSEC-F series CPU module FX3GA-40MT-CM: All versions MELSEC-F series CPU module FX3GA-60MT-CM: All versions MELSEC-F series CPU module FX3GA-24MR-CM: All versions MELSEC-F series CPU module FX3GA-40MR-CM: All versions MELSEC-F series CPU module FX3GA-60MR-CM: All versions MELSEC-F series CPU module FX3S-10MT/ES: All versions MELSEC-F series CPU module FX3S-14MT/ES: All versions MELSEC-F series CPU module FX3S-20MT/ES: All versions MELSEC-F series CPU module FX3S-30MT/ES: All versions MELSEC-F series CPU module FX3S-10MR/ES: All versions MELSEC-F series CPU module FX3S-14MR/ES: All versions MELSEC-F series CPU module FX3S-20MR/ES: All versions MELSEC-F series CPU module FX3S-30MR/ES: All versions MELSEC-F series CPU module FX3S-10MT/ESS: All versions MELSEC-F series CPU module FX3S-14MT/ESS: All versions MELSEC-F series CPU module FX3S-20MT/ESS: All versions MELSEC-F series CPU module FX3S-30MT/ESS: All versions MELSEC-F series CPU module FX3S-10MT/DS: All versions MELSEC-F series CPU module FX3S-14MT/DS: All versions MELSEC-F series CPU module FX3S-20MT/DS: All versions MELSEC-F series CPU module FX3S-30MT/DS: All versions MELSEC-F series CPU module FX3S-10MR/DS: All versions MELSEC-F series CPU module FX3S-14MR/DS: All versions MELSEC-F series CPU module FX3S-20MR/DS: All versions MELSEC-F series CPU module FX3S-30MR/DS: All versions MELSEC-F series CPU module FX3S-10MT/DSS: All versions MELSEC-F series CPU module FX3S-14MT/DSS: All versions MELSEC-F series CPU module FX3S-20MT/DSS: All versions MELSEC-F series CPU module FX3S-30MT/DSS: All versions MELSEC-F series CPU module FX3S-30MT/ES-2AD: All versions MELSEC-F series CPU module FX3S-30MT/ESS-2AD: All versions MELSEC-F series CPU module FX3S-30MR/ES-2AD: All versions MELSEC-F series CPU module FX3SA-10MT-CM: All versions MELSEC-F series CPU module FX3SA-14MT-CM: All versions MELSEC-F series CPU module FX3SA-20MT-CM: All versions MELSEC-F series CPU module FX3SA-30MT-CM: All versions MELSEC-F series CPU module FX3SA-10MR-CM: All versions MELSEC-F series CPU module FX3SA-14MR-CM: All versions MELSEC-F series CPU module FX3SA-20MR-CM: All versions MELSEC-F series CPU module FX3SA-30MR-CM: All versions MELSEC iQ-F series FX5U-32MT/ES: All versions MELSEC iQ-F series FX5U-64MT/ES: All versions MELSEC iQ-F series FX5U-80MT/ES: All versions MELSEC iQ-F series FX5U-32MR/ES: All versions MELSEC iQ-F series FX5U-64MR/ES: All versions MELSEC iQ-F series FX5U-80MR/ES: All versions MELSEC iQ-F series FX5U-32MT/DS: All versions MELSEC iQ-F series FX5U-64MT/DS: All versions MELSEC iQ-F series FX5U-80MT/DS: All versions MELSEC iQ-F series FX5U-32MR/DS: All versions MELSEC iQ-F series FX5U-64MR/DS: All versions MELSEC iQ-F series FX5U-80MR/DS: All versions MELSEC iQ-F series FX5U-32MT/ESS: All versions MELSEC iQ-F series FX5U-64MT/ESS: All versions MELSEC iQ-F series FX5U-80MT/ESS: All versions MELSEC iQ-F series FX5U-32MT/DSS: All versions MELSEC iQ-F series FX5U-64MT/DSS: All versions MELSEC iQ-F series FX5U-80MT/DSS: All versions MELSEC iQ-F series FX5UC-32MT/D: All versions MELSEC iQ-F series FX5UC-64MT/D: All versions MELSEC iQ-F series FX5UC-96MT/D: All versions MELSEC iQ-F series FX5UC-32MT/DSS: All versions MELSEC iQ-F series FX5UC-64MT/DSS: All versions MELSEC iQ-F series FX5UC-96MT/DSS: All versions MELSEC iQ-F series FX5UC-32MT/DS-TS: All versions MELSEC iQ-F series FX5UC-32MT/DSS-TS: All versions MELSEC iQ-F series FX5UC-32MR/DS-TS: All versions MELSEC iQ-F series FX5UJ-24MT/ES: All versions MELSEC iQ-F series FX5UJ-40MT/ES: All versions MELSEC iQ-F series FX5UJ-60MT/ES: All versions MELSEC iQ-F series FX5UJ-24MR/ES: All versions MELSEC iQ-F series FX5UJ-40MR/ES: All versions MELSEC iQ-F series FX5UJ-60MR/ES: All versions MELSEC iQ-F series FX5UJ-24MT/ESS: All versions MELSEC iQ-F series FX5UJ-40MT/ESS: All versions MELSEC iQ-F series FX5UJ-60MT/ESS: All versions MELSEC iQ-F series FX5UJ-24MT/DS: All versions MELSEC iQ-F series FX5UJ-40MT/DS: All versions MELSEC iQ-F series FX5UJ-60MT/DS: All versions MELSEC iQ-F series FX5UJ-24MR/DS: All versions MELSEC iQ-F series FX5UJ-40MR/DS: All versions MELSEC iQ-F series FX5UJ-60MR/DS: All versions MELSEC iQ-F series FX5UJ-24MT/DSS: All versions MELSEC iQ-F series FX5UJ-40MT/DSS: All versions MELSEC iQ-F series FX5UJ-60MT/DSS: All versions MELSEC iQ-F series FX5UJ-24MT/ES-A: All versions MELSEC iQ-F series FX5UJ-40MT/ES-A: All versions MELSEC iQ-F series FX5UJ-60MT/ES-A: All versions MELSEC iQ-F series FX5UJ-24MR/ES-A: All versions MELSEC iQ-F series FX5UJ-40MR/ES-A: All versions MELSEC iQ-F series FX5UJ-60MR/ES-A: All versions MELSEC iQ-F series FX5S-30MT/ES: All versions MELSEC iQ-F series FX5S-40MT/ES: All versions MELSEC iQ-F series FX5S-60MT/ES: All versions MELSEC iQ-F series FX5S-80MT/ES: All versions MELSEC iQ-F series FX5S-30MR/ES: All versions MELSEC iQ-F series FX5S-40MR/ES: All versions MELSEC iQ-F series FX5S-60MR/ES: All versions MELSEC iQ-F series FX5S-80MR/ES: All versions MELSEC iQ-F series FX5S-30MT/ESS: All versions MELSEC iQ-F series FX5S-40MT/ESS: All versions MELSEC iQ-F series FX5S-60MT/ESS: All versions MELSEC iQ-F series FX5S-80MT/ESS: All versions MELSEC iQ-F series FX5-40SSC-G: All versions MELSEC iQ-F series FX5-80SSC-G: All versions MELSEC iQ-F series FX5-40SSC-S: All versions MELSEC iQ-F series FX5-80SSC-S: All versions MELSEC iQ-R series CPU module R04/08/16/32/120(EN)CPU: All versions MELSEC iQ-R series CPU module R08/16/32/120PCPU: All versions MELSEC iQ-R series CPU module R16/32/64MTCPU: All versions MELSEC iQ-R series RD78G4/8/16/32/64/HV/HW: All versions MELSEC iQ-R series RD77MS2/4/8/16: All versions MELSEC iQ-R series RD77GF4/8/16/32: All versions MELSEC iQ-L series LD78G4/16: All versions MELSEC Q series Q172/173DSCPU: All versions MELSEC Q series Q170MSCPU: All versions MELSEC Q series QD77MS2/4/16: All versions MELSEC Q series QD77GF4/8/16: All versions MELSEC L LD77MS2/4/16: All versions Mitsubishi Electric CNC M800V/M80V series M800VW BND-2051W000-**: All versions Mitsubishi Electric CNC M800V/M80V series M800VS BND-2052W000-**: All versions Mitsubishi Electric CNC M800V/M80V series M80V BND-2053W000-**: All versions Mitsubishi Electric CNC M800V/M80V series M80VW BND-2054W000-**: All versions Mitsubishi Electric CNC M800/M80/E80 series M800W BND-2005W000-**: All versions Mitsubishi Electric CNC M800/M80/E80 series M800S BND-2006W000-**: All versions Mitsubishi Electric CNC M800/M80/E80 series M80 BND-2007W000-**: All versions Mitsubishi Electric CNC M800/M80/E80 series M80W BND-2008W000-**: All versions Mitsubishi Electric CNC M800/M80/E80 series E80 BND-2009W000-**: All versions Mitsubishi Electric CNC M700V/M70V/E70 series M750VW BND-1015W002-**: All versions Mitsubishi Electric CNC M700V/M70V/E70 series M730VW/M720VW BND-1015W000-**: All versions Mitsubishi Electric CNC M700V/M70V/E70 series M750VS BND-1012W002-**: All versions Mitsubishi Electric CNC M700V/M70V/E70 series M730VS /M720VS BND-1012W000-**: All versions Mitsubishi Electric CNC M700V/M70V/E70 series M70V BND-1018W000-**: All versions Mitsubishi Electric CNC M700V/M70V/E70 series E70 BND-1022W000-**: All versions.; ESS; y=T; z=ES; with the exception of \"FX3GE-xMy/z x=24" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-306-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-306-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-306-04" ;
    dcterms:issued "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Franklin Fueling System TS-550" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-5846" ;
    icsa:cweNumber "CWE-916" ;
    icsa:hasCVE cve-res:CVE-2023-5846 ;
    icsa:hasCWE cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TS-550" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: TS-550: All versions prior to 1.9.23.8960; The following versions of Franklin Fueling System TS-550" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-306-04" ;
    icsa:vendor "Franklin Fueling System" ;
    icsa:year 2023 .

icsa-res:ICSA-23-306-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-306-05" ;
    dcterms:issued "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Weintek EasyBuilder Pro" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-5777" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2023-5777 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EasyBuilder Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Weintek products are affected: EasyBuilder Pro: Versions prior to v6.07.02 EasyBuilder Pro: Versions 6.08.01.592 and prior EasyBuilder Pro: Versions 6.08.02.470 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-306-05" ;
    icsa:vendor "Weintek" ;
    icsa:year 2023 .

icsa-res:ICSA-23-306-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-306-06" ;
    dcterms:issued "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SpaceLogic C-Bus Toolkit" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-5402; CVE-2023-5399" ;
    icsa:cweNumber "CWE-269; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2023-5399,
        cve-res:CVE-2023-5402 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SpaceLogic C-Bus Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Schneider Electric products are affected: SpaceLogic C-Bus Toolkit: Versions 1.16.3 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-306-06" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-311-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-311-01" ;
    dcterms:issued "2023-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE MiCOM S1 Agile" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-0898" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2023-0898 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MiCOM S1 Agile" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of General Electric MiCOM S1 Agile is affected: MiCOM S1 Agile: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-311-01" ;
    icsa:vendor "GE" ;
    icsa:year 2023 .

icsa-res:ICSA-23-313-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-313-01" ;
    dcterms:issued "2023-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Quantum HD Unity" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4804" ;
    icsa:cweNumber "CWE-489" ;
    icsa:hasCVE cve-res:CVE-2023-4804 ;
    icsa:hasCWE cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Quantum HD Unity" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Johnson Controls Quantum HD Unity products are affected: Quantum HD Unity Compressor control panels (Q5): All versions prior to v11.22 Quantum HD Unity Compressor control panels (Q6): All versions prior to v12.22 Quantum HD Unity AcuAir control panels(Q5): All versions prior to v11.12 Quantum HD Unity AcuAir control panels(Q6): All versions prior to v12.12 Quantum HD Unity Condenser/Vessel control panels (Q5): All versions prior to v11.11 Quantum HD Unity Condenser/Vessel control panels (Q6): All versions prior to v12.11 Quantum HD Unity Evaporator control panels (Q5): All versions prior to v11.11 Quantum HD Unity Evaporator control panels (Q6): All versions prior to v12.11 Quantum HD Unity Engine Room control panels (Q5): All versions prior to v11.11 Quantum HD Unity Engine Room control panels (Q6): All versions prior to v12.11 Quantum HD Unity Interface control panels (Q5): All versions prior to v11.11 Quantum HD Unity Interface control panels (Q6): All versions prior to v12.11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-313-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-313-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-313-02" ;
    dcterms:issued "2023-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy eSOMS" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-5514; CVE-2023-5515; CVE-2023-5516" ;
    icsa:cweNumber "CWE-209; CWE-497" ;
    icsa:hasCVE cve-res:CVE-2023-5514,
        cve-res:CVE-2023-5515,
        cve-res:CVE-2023-5516 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-497 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "eSOMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Hitachi Energy products are affected: eSOMS: v6.3.13 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-313-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-318-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-318-01" ;
    dcterms:issued "2023-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Operations Control Logger" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-34982; CVE-2023-33873" ;
    icsa:cweNumber "CWE-250; CWE-73" ;
    icsa:hasCVE cve-res:CVE-2023-33873,
        cve-res:CVE-2023-34982 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Operations Control Logger" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "impacting the following products: AVEVA SystemPlatform: 2020 R2 SP1 P01 and prior AVEVA Historian: 2020 R2 SP1 P01 and prior AVEVA Application Server: 2020 R2 SP1 P01 and prior AVEVA InTouch: 2020 R2 SP1 P01 and prior AVEVA Enterprise Licensing (formerly known as License Manager): version 3.7.002 and prior AVEVA Manufacturing Execution System (formerly known as Wonderware MES): 2020 P01 and prior AVEVA Recipe Management: 2020 R2 Update 1 Patch 2 and prior AVEVA Batch Management: 2020 SP1 and prior AVEVA Edge (formerly known as Indusoft Web Studio): 2020 R2 SP1 P01 and prior AVEVA Worktasks (formerly known as Workflow Management): 2020 U2 and prior AVEVA Plant SCADA (formerly known as Citect): 2020 R2 Update 15 and prior AVEVA Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds): 2020 R1 and prior AVEVA Communication Drivers Pack: 2020 R2 SP1 and prior AVEVA Telemetry Server: 2020 R2 SP1 and prior.; AVEVA has created a security update to address vulnerabilities in the AVEVA Operations Control Logger (formerly known as ArchestrA Logger)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-318-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2023 .

icsa-res:ICSA-23-318-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-318-02" ;
    dcterms:issued "2023-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation SIS Workstation and ISaGRAF Workbench" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2015-9268" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2015-9268 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIS Workstation and ISaGRAF Workbench" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following versions of SIS Workstation and ISaGRAF Workbench Code are affected: Safety Instrumented System Workstation: v1.2 up to but not including v2.00 ISaGRAF Workbench: v6.6.9 up to but not including v6.06.10" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-318-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-01" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Red Lion Sixnet RTUs" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-40151; CVE-2023-42770" ;
    icsa:cweNumber "CWE-749; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2023-40151,
        cve-res:CVE-2023-42770 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sixnet RTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Red Lion products are affected: ST-IPm-8460: Firmware 6.0.202 and later ST-IPm-6350: Firmware version 4.9.114 and later VT-mIPm-135-D: Firmware version 4.9.114 and later VT-mIPm-245-D: Firmware version 4.9.114 and later VT-IPm2m-213-D: Firmware version 4.9.114 and later VT-IPm2m-113-D: Firmware version 4.9.114 and later" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-01" ;
    icsa:vendor "Red Lion" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-02" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MACH System Software" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-2622; CVE-2023-2621" ;
    icsa:cweNumber "CWE-29; CWE-266" ;
    icsa:hasCVE cve-res:CVE-2023-2621,
        cve-res:CVE-2023-2622 ;
    icsa:hasCWE cwe-res:CWE-266,
        cwe-res:CWE-29 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MACH System Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Hitachi Energy products are affected: MACH SSW: Version 5.0 to 7.17.0.0 MACH SSW: Version 7.10.0.0 to 7.18.0.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-03" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo CC product family" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2021-20094; CVE-2023-3935; CVE-2021-20093" ;
    icsa:cweNumber "CWE-122; CWE-126" ;
    icsa:hasCVE cve-res:CVE-2021-20093,
        cve-res:CVE-2021-20094,
        cve-res:CVE-2023-3935 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-126 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo CC product family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected by vulnerabilities in the underlying third-party component WIBU Systems CodeMeter Runtime: Desigo CC product family V5.0: All versions Desigo CC product family V5.1: All versions Desigo CC product family V6: All versions Desigo CC product family V7: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-04" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Runtime" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-45794" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2023-45794 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix 7, Mendix 8, Mendix 9, Mendix 10" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Mendix Applications using Mendix 7: all versions prior to V7.23.37 Mendix Applications using Mendix 8: all versions prior to V8.18.27 Mendix Applications using Mendix 9: all versions prior to V9.24.10 Mendix Applications using Mendix 10: all versions prior to V10.4.0; The following versions of Siemens Mendix Applications" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-05" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W700" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-47522" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2022-47522 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W700" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0): All versions SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0): All versions SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6): All versions SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0): All versions SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0): All versions SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0): All versions SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0): All versions SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6): All versions SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0): All versions SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0): All versions SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0): All versions SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0): All versions SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0): All versions SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0): All versions SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0): All versions SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0): All versions SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0): All versions SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0): All versions SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0): All versions SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0): All versions SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0): All versions SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0): All versions SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0): All versions SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0): All versions SCALANCE WAM763-1 (6GK5763-1AL00-7DA0): All versions SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0): All versions SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0): All versions SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0): All versions SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0): All versions SCALANCE WUM763-1 (6GK5763-1AL00-3AA0): All versions SCALANCE WUM763-1 (6GK5763-1AL00-3DA0): All versions SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0): All versions SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0): All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-06" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC PCS neo" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-46099; CVE-2023-46098; CVE-2023-46096; CVE-2023-46097" ;
    icsa:cweNumber "CWE-306; CWE-942; CWE-89; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-46096,
        cve-res:CVE-2023-46097,
        cve-res:CVE-2023-46098,
        cve-res:CVE-2023-46099 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-79,
        cwe-res:CWE-89,
        cwe-res:CWE-942 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS neo" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC PCS neo: Versions prior to V4.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-07" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OPC UA Modeling Editor (SiOME)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-46590" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2023-46590 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC UA Modeling Editor (SiOME)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: OPC UA Modelling Editor (SiOME): versions prior to V2.8; The following versions of Siemens OPC UA Modeling Editor (SiOME)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-08" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE Family Products" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-44321; CVE-2023-2650; CVE-2023-44322; CVE-2022-4450; CVE-2023-44374; CVE-2023-44373; CVE-2022-4304; CVE-2023-0401; CVE-2023-44320; CVE-2023-0217; CVE-2023-44319; CVE-2023-0216; CVE-2022-4203; CVE-2023-44317; CVE-2023-44318" ;
    icsa:cweNumber "CWE-328; CWE-252; CWE-425; CWE-770; CWE-415; CWE-321; CWE-326; CWE-567; CWE-74; CWE-400; CWE-125; CWE-476; CWE-349" ;
    icsa:hasCVE cve-res:CVE-2022-4203,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0216,
        cve-res:CVE-2023-0217,
        cve-res:CVE-2023-0401,
        cve-res:CVE-2023-2650,
        cve-res:CVE-2023-44317,
        cve-res:CVE-2023-44318,
        cve-res:CVE-2023-44319,
        cve-res:CVE-2023-44320,
        cve-res:CVE-2023-44321,
        cve-res:CVE-2023-44322,
        cve-res:CVE-2023-44373,
        cve-res:CVE-2023-44374 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-252,
        cwe-res:CWE-321,
        cwe-res:CWE-326,
        cwe-res:CWE-328,
        cwe-res:CWE-349,
        cwe-res:CWE-400,
        cwe-res:CWE-415,
        cwe-res:CWE-425,
        cwe-res:CWE-476,
        cwe-res:CWE-567,
        cwe-res:CWE-74,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "E/IP) (6GK5213-3BF00-2TB2): Versions prior to V4.5 SCALANCE XB213-3LD (SC; PN) (6GK5205-3BF00-2AB2): Versions prior to V4.5 SCALANCE XB208 (E/IP) (6GK5208-0BA00-2TB2): Versions prior to V4.5 SCALANCE XB208 (PN) (6GK5208-0BA00-2AB2): Versions prior to V4.5 SCALANCE XB213-3 (SC; AC 230V) (6GK5324-0BA00-3AR3): Versions prior to V4.5 SCALANCE XR324WG (24 X FE; DC 24V) (6GK5324-0BA00-2AR3): Versions prior to V4.5 SCALANCE XR326-2C PoE WG (6GK5326-2QS00-3AR3): Versions prior to V4.5 SCALANCE XR326-2C PoE WG (without UL) (6GK5326-2QS00-3RR3): Versions prior to V4.5 SCALANCE XR328-4C WG (24xFE; PN) (6GK5205-3BD00-2AB2): Versions prior to V4.5 SCALANCE XB205-3LD (SC; E/IP) (6GK5205-3BB00-2TB2): Versions prior to V4.5 SCALANCE XB205-3 (ST; The following products of Siemens; AC230V) (6GK5328-4FS00-3RR3): Versions prior to V4.5 SCALANCE XR328-4C WG (24XFE; PN) (6GK5205-3BB00-2AB2): Versions prior to V4.5 SCALANCE XB205-3 (ST; E/IP) (6GK5205-3BF00-2TB2): Versions prior to V4.5 SCALANCE XB205-3LD (SC; DC 24V) (6GK5328-4SS00-2AR3): Versions prior to V4.5 SIPLUS NET SCALANCE XC206-2 (6AG1206-2BB00-7AC2): Versions prior to V4.5 SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2): Versions prior to V4.5 SIPLUS NET SCALANCE XC208 (6AG1208-0BA00-7AC2): Versions prior to V4.5 SIPLUS NET SCALANCE XC216-4C (6AG1216-4BS00-7AC2): Versions prior to V4.5; PN) (6GK5213-3BF00-2AB2): Versions prior to V4.5 SCALANCE XB216 (E/IP) (6GK5216-0BA00-2TB2): Versions prior to V4.5 SCALANCE XB216 (PN) (6GK5216-0BA00-2AB2): Versions prior to V4.5 SCALANCE XC206-2 (SC) (6GK5206-2BD00-2AC2): Versions prior to V4.5 SCALANCE XC206-2 (ST/BFOC) (6GK5206-2BB00-2AC2): Versions prior to V4.5 SCALANCE XC206-2G PoE (6GK5206-2RS00-2AC2): Versions prior to V4.5 SCALANCE XC206-2G PoE (54 V DC) (6GK5206-2RS00-5AC2): Versions prior to V4.5 SCALANCE XC206-2G PoE EEC (54 V DC) (6GK5206-2RS00-5FC2): Versions prior to V4.5 SCALANCE XC206-2SFP (6GK5206-2BS00-2AC2): Versions prior to V4.5 SCALANCE XC206-2SFP EEC (6GK5206-2BS00-2FC2): Versions prior to V4.5 SCALANCE XC206-2SFP G (6GK5206-2GS00-2AC2): Versions prior to V4.5 SCALANCE XC206-2SFP G (EIP DEF.) (6GK5206-2GS00-2TC2): Versions prior to V4.5 SCALANCE XC206-2SFP G EEC (6GK5206-2GS00-2FC2): Versions prior to V4.5 SCALANCE XC208 (6GK5208-0BA00-2AC2): Versions prior to V4.5 SCALANCE XC208EEC (6GK5208-0BA00-2FC2): Versions prior to V4.5 SCALANCE XC208G (6GK5208-0GA00-2AC2): Versions prior to V4.5 SCALANCE XC208G (EIP def.) (6GK5208-0GA00-2TC2): Versions prior to V4.5 SCALANCE XC208G EEC (6GK5208-0GA00-2FC2): Versions prior to V4.5 SCALANCE XC208G PoE (6GK5208-0RA00-2AC2): Versions prior to V4.5 SCALANCE XC208G PoE (54 V DC) (6GK5208-0RA00-5AC2): Versions prior to V4.5 SCALANCE XC216 (6GK5216-0BA00-2AC2): Versions prior to V4.5 SCALANCE XC216-3G PoE (6GK5216-3RS00-2AC2): Versions prior to V4.5 SCALANCE XC216-3G PoE (54 V DC) (6GK5216-3RS00-5AC2): Versions prior to V4.5 SCALANCE XC216-4C (6GK5216-4BS00-2AC2): Versions prior to V4.5 SCALANCE XC216-4C G (6GK5216-4GS00-2AC2): Versions prior to V4.5 SCALANCE XC216-4C G (EIP Def.) (6GK5216-4GS00-2TC2): Versions prior to V4.5 SCALANCE XC216-4C G EEC (6GK5216-4GS00-2FC2): Versions prior to V4.5 SCALANCE XC216EEC (6GK5216-0BA00-2FC2): Versions prior to V4.5 SCALANCE XC224 (6GK5224-0BA00-2AC2): Versions prior to V4.5 SCALANCE XC224-4C G (6GK5224-4GS00-2AC2): Versions prior to V4.5 SCALANCE XC224-4C G (EIP Def.) (6GK5224-4GS00-2TC2): Versions prior to V4.5 SCALANCE XC224-4C G EEC (6GK5224-4GS00-2FC2): Versions prior to V4.5 SCALANCE XF204 (6GK5204-0BA00-2GF2): Versions prior to V4.5 SCALANCE XF204 DNA (6GK5204-0BA00-2YF2): Versions prior to V4.5 SCALANCE XF204-2BA (6GK5204-2AA00-2GF2): Versions prior to V4.5 SCALANCE XF204-2BA DNA (6GK5204-2AA00-2YF2): Versions prior to V4.5 SCALANCE XP208 (6GK5208-0HA00-2AS6): Versions prior to V4.5 SCALANCE XP208 (Ethernet/IP) (6GK5208-0HA00-2TS6): Versions prior to V4.5 SCALANCE XP208EEC (6GK5208-0HA00-2ES6): Versions prior to V4.5 SCALANCE XP208PoE EEC (6GK5208-0UA00-5ES6): Versions prior to V4.5 SCALANCE XP216 (6GK5216-0HA00-2AS6): Versions prior to V4.5 SCALANCE XP216 (Ethernet/IP) (6GK5216-0HA00-2TS6): Versions prior to V4.5 SCALANCE XP216EEC (6GK5216-0HA00-2ES6): Versions prior to V4.5 SCALANCE XP216POE EEC (6GK5216-0UA00-5ES6): Versions prior to V4.5 SCALANCE XR324WG (24 x FE; E/IP) (6GK5205-3BD00-2TB2): Versions prior to V4.5 SCALANCE XB205-3 (ST; E/IP) (6GK5213-3BB00-2TB2): Versions prior to V4.5 SCALANCE XB213-3 (ST; 4XGE; AC 230V) (6GK5328-4SS00-3AR3): Versions prior to V4.5 SCALANCE XR328-4C WG (28xGE; AC230V) (6GK5328-4FS00-3AR3): Versions prior to V4.5 SCALANCE XR328-4C WG (24xFE; DC24V) (6GK5328-4FS00-2RR3): Versions prior to V4.5 SCALANCE XR328-4C WG (28xGE; 24V) (6GK5328-4FS00-2AR3): Versions prior to V4.5 SCALANCE XR328-4C WG (24xFE; PN) (6GK5213-3BD00-2AB2): Versions prior to V4.5 SCALANCE XB213-3 (ST; PN) (6GK5213-3BB00-2AB2): Versions prior to V4.5 SCALANCE XB213-3LD (SC; E/IP) (6GK5213-3BD00-2TB2): Versions prior to V4.5 SCALANCE XB213-3 (SC; 4xGE; are affected: SCALANCE XB205-3 (SC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-09" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-28807; CVE-2023-43505; CVE-2023-2932; CVE-2023-46601; CVE-2020-35460; CVE-2022-28809; CVE-2023-2931; CVE-2023-22669; CVE-2023-43503; CVE-2023-22670; CVE-2023-0933; CVE-2023-1530; CVE-2022-23095; CVE-2022-28808; CVE-2020-25020; CVE-2023-43504" ;
    icsa:cweNumber "CWE-22; CWE-611; CWE-120; CWE-416; CWE-122; CWE-787; CWE-284; CWE-190; CWE-319; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-25020,
        cve-res:CVE-2020-35460,
        cve-res:CVE-2022-23095,
        cve-res:CVE-2022-28807,
        cve-res:CVE-2022-28808,
        cve-res:CVE-2022-28809,
        cve-res:CVE-2023-0933,
        cve-res:CVE-2023-1530,
        cve-res:CVE-2023-22669,
        cve-res:CVE-2023-22670,
        cve-res:CVE-2023-2931,
        cve-res:CVE-2023-2932,
        cve-res:CVE-2023-43503,
        cve-res:CVE-2023-43504,
        cve-res:CVE-2023-43505,
        cve-res:CVE-2023-46601 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-319,
        cwe-res:CWE-416,
        cwe-res:CWE-611,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: COMOS: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-10" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 4 7SJ66" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-12260; CVE-2019-12263; CVE-2019-12265; CVE-2019-12256; CVE-2019-12262; CVE-2019-12255; CVE-2019-12259; CVE-2019-12258; CVE-2019-12261" ;
    icsa:cweNumber "CWE-120; CWE-401; CWE-362; CWE-346; CWE-384; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2019-12255,
        cve-res:CVE-2019-12256,
        cve-res:CVE-2019-12258,
        cve-res:CVE-2019-12259,
        cve-res:CVE-2019-12260,
        cve-res:CVE-2019-12261,
        cve-res:CVE-2019-12262,
        cve-res:CVE-2019-12263,
        cve-res:CVE-2019-12265 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-346,
        cwe-res:CWE-362,
        cwe-res:CWE-384,
        cwe-res:CWE-401,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 4 7SJ66" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following SIPROTEC products are affected due to vulnerabilities in the underlying Wind River VxWorks network stack: SIPROTEC 4 7SJ66: versions prior to V4.41" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-11" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Studio Pro" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4863" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-4863 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Studio Pro 7, 8, 9, 10." ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Mendix Studio Pro 7: Versions prior to V7.23.37 Mendix Studio Pro 8: Versions prior to V8.18.27 Mendix Studio Pro 9: Versions prior to V9.24.0 Mendix Studio Pro 10: Versions prior to V10.3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-12" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PNI" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-33126; CVE-2023-24936; CVE-2022-41032; CVE-2023-33135; CVE-2022-30184; CVE-2023-33128; CVE-2023-29331; CVE-2023-24897; CVE-2023-21808; CVE-2023-28260; CVE-2023-24895; CVE-2022-37434; CVE-2023-32032" ;
    icsa:cweNumber "CWE-20; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-30184,
        cve-res:CVE-2022-37434,
        cve-res:CVE-2022-41032,
        cve-res:CVE-2023-21808,
        cve-res:CVE-2023-24895,
        cve-res:CVE-2023-24897,
        cve-res:CVE-2023-24936,
        cve-res:CVE-2023-28260,
        cve-res:CVE-2023-29331,
        cve-res:CVE-2023-32032,
        cve-res:CVE-2023-33126,
        cve-res:CVE-2023-33128,
        cve-res:CVE-2023-33135 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC PNI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SINEC PNI: Versions prior to V2.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-13" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC MV500" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-23218; CVE-2022-44793; CVE-2022-44792; CVE-2022-23219; CVE-2023-35788; CVE-2023-2975; CVE-2023-3446; CVE-2023-3817" ;
    icsa:cweNumber "CWE-120; CWE-834; CWE-287; CWE-1333; CWE-787; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2022-23218,
        cve-res:CVE-2022-23219,
        cve-res:CVE-2022-44792,
        cve-res:CVE-2022-44793,
        cve-res:CVE-2023-2975,
        cve-res:CVE-2023-3446,
        cve-res:CVE-2023-35788,
        cve-res:CVE-2023-3817 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-1333,
        cwe-res:CWE-287,
        cwe-res:CWE-476,
        cwe-res:CWE-787,
        cwe-res:CWE-834 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC MV500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SIMATIC MV500 family: Versions prior to V3.3.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-320-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-320-14" ;
    dcterms:issued "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 Devices" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-29245; CVE-2023-32649; CVE-2023-2567" ;
    icsa:cweNumber "CWE-20; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2023-2567,
        cve-res:CVE-2023-29245,
        cve-res:CVE-2023-32649 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following components of Siemens are affected: RUGGEDCOM APE1808 with Nozomi Guardian / CMC: All versions before V22.6.3 or 23.1.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-320-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-325-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-325-01" ;
    dcterms:issued "2023-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO PFC200 Series" ;
    icsa:CVSSScore "2.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2023-4089" ;
    icsa:cweNumber "CWE-610" ;
    icsa:hasCVE cve-res:CVE-2023-4089 ;
    icsa:hasCWE cwe-res:CWE-610 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PFC200 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "up to and including FW26 PFC200: Versions later than FW16; up to and including FW26 PFC100: Versions later than FW16; up to and including FW26 Touch Panel 600 Standard Line: Versions later than FW16; WAGO reports the following products are affected: Compact Controller CC100: Versions later than FW19; up to and including FW26 Touch Panel 600 Advanced Line: Versions later than FW16; up to and including FW26; up to and including FW26 Touch Panel 600 Marine Line: Versions later than FW16; up to and including FW26 Edge Controller: Versions later than FW18" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-325-01" ;
    icsa:vendor "WAGO" ;
    icsa:year 2023 .

icsa-res:ICSA-23-325-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-325-02" ;
    dcterms:issued "2023-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Tellus Lite V-Simulator" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-35127; CVE-2023-40152; CVE-2023-5299" ;
    icsa:cweNumber "CWE-284; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-35127,
        cve-res:CVE-2023-40152,
        cve-res:CVE-2023-5299 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-284,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tellus Lite V-Simulator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Fuji Electric reports that the following versions of Tellus Lite V-Simulator remote monitoring software are affected: Tellus Lite V-Simulator: versions prior to V4.0.19.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-325-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-331-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-331-01" ;
    dcterms:issued "2023-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics InfraSuite Device Master" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-39226; CVE-2023-46690; CVE-2023-47279; CVE-2023-47207" ;
    icsa:cweNumber "CWE-502; CWE-749; CWE-35" ;
    icsa:hasCVE cve-res:CVE-2023-39226,
        cve-res:CVE-2023-46690,
        cve-res:CVE-2023-47207,
        cve-res:CVE-2023-47279 ;
    icsa:hasCWE cwe-res:CWE-35,
        cwe-res:CWE-502,
        cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InfraSuite Device Master" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: InfraSuite Device Master: Versions 1.0.7 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-331-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-331-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-331-02" ;
    dcterms:issued "2023-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Franklin Electric Fueling Systems Colibri" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-5885" ;
    icsa:cweNumber "CWE-35" ;
    icsa:hasCVE cve-res:CVE-2023-5885 ;
    icsa:hasCWE cwe-res:CWE-35 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Colibri" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a discontinued fuel inventory monitoring system; are affected: FFS Colibri: all versions.; The following versions of FFS Colibri" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-331-02" ;
    icsa:vendor "Franklin Electric Fueling Systems" ;
    icsa:year 2023 .

icsa-res:ICSA-23-331-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-331-03" ;
    dcterms:issued "2023-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GX Works2" ;
    icsa:CVSSScore "2.9"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-5274; CVE-2023-5275" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-5274,
        cve-res:CVE-2023-5275 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GX Works2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GX Works2: all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-331-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-334-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-334-01" ;
    dcterms:issued "2023-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DOPSoft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-5944" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-5944 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics products are affected: DOPSoft: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-334-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-334-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-334-02" ;
    dcterms:issued "2023-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa STARDOM" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-5915" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-5915 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "STARDOM FCN/FCJ" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a network control system; The following versions of Yokogawa STARDOM FCN/FCJ; are affected: STARDOM FCN/FCJ: versions R1.01 through R4.31" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-334-02" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2023 .

icsa-res:ICSA-23-334-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-334-03" ;
    dcterms:issued "2023-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC KEPServerEx" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-5908; CVE-2023-5909" ;
    icsa:cweNumber "CWE-122; CWE-297" ;
    icsa:hasCVE cve-res:CVE-2023-5908,
        cve-res:CVE-2023-5909 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-297 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KEPServerEX, ThingWorx, OPC-Aggregator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: KEPServerEX: v6.14.263.0 and prior ThingWorx Kepware Server: v6.14.263.0 and prior ThingWorx Industrial Connectivity: All versions OPC-Aggregator: v6.14 and prior ThingWorx Kepware Edge: v1.7 and prior Rockwell Automation KEPServer Enterprise: Versions v6.14.263.0 and prior GE Digital Industrial Gateway Server: Versions v7.614 and prior Software Toolbox TOP Server: Versions v6.14.263.0 and prior; The following PTC Kepware products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-334-03" ;
    icsa:vendor "PTC" ;
    icsa:year 2023 .

icsa-res:ICSA-23-334-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-334-04" ;
    dcterms:issued "2023-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FA Engineering Software Products" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-5247" ;
    icsa:cweNumber "CWE-73" ;
    icsa:hasCVE cve-res:CVE-2023-5247 ;
    icsa:hasCWE cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FA Engineering Software Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the following versions of FA Engineering Software Products are affected: GX Works3: All versions MELSOFT iQ AppPortal: All versions MELSOFT Navigator: All versions Motion Control Setting (Software packaged with GX Works3): All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-334-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-339-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-339-01" ;
    dcterms:issued "2023-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Zebra ZTC Industrial ZT400 and Desktop GK420d" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4957" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2023-4957 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ZTC Industrial ZT410, ZTC Desktop GK420d" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Zebra ZTC industrial and desktop printers are affected: ZTC Industrial ZT410: All versions ZTC Desktop GK420d: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-339-01" ;
    icsa:vendor "Zebra Technologies" ;
    icsa:year 2023 .

icsa-res:ICSA-23-341-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-341-01" ;
    dcterms:issued "2023-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FA Engineering Software Products" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-33149; CVE-2022-21151" ;
    icsa:cweNumber "CWE-203; CWE-1037" ;
    icsa:hasCVE cve-res:CVE-2021-33149,
        cve-res:CVE-2022-21151 ;
    icsa:hasCWE cwe-res:CWE-1037,
        cwe-res:CWE-203 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELIPC , MELSEC iQ-R, and MELSEC Q Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "refer to Mitsubishi Electric's security bulletin. MELIPC MI5122-VW: All Versions MELIPC MI2012-W: All Versions MELIPC MI1002-W: All Versions MELIPC MI3321G-W: All Versions MELIPC MI3315G-W: All Versions MELSEC iQ-R R102WCPU-W: All Versions MELSEC Q Q24DHCCPU-V: All Versions MELSEC Q Q24DHCCPU-VG: All Versions MELSEC Q Q24DHCCPU-LS: All Versions MELSEC Q Q26DHCCPU-LS: All Versions; Mitsubishi Electric reports the following versions of FA Engineering Software Products are affected. For the correspondence table of the affected products and each vulnerability" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-341-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-341-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-341-02" ;
    dcterms:issued "2023-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schweitzer Engineering Laboratories SEL-411L" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-2265" ;
    icsa:cweNumber "CWE-1021" ;
    icsa:hasCVE cve-res:CVE-2023-2265 ;
    icsa:hasCWE cwe-res:CWE-1021 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SEL-411L" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Schweitzer Engineering Laboratories SEL-411L are affected: R118: V0 - V4 R119: V0 - V5 R120: V0 - V6 R121: V0 - V3 R122: V0 - V3 R123: V0 - V3 R124: V0 - V3 R125: V0 - V3 R126: V0 - V4 R127: V0 - V2 R128: V0 - V1 R129: V0 - V1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-341-02" ;
    icsa:vendor "Schweitzer Engineering Laboratories" ;
    icsa:year 2023 .

icsa-res:ICSA-23-341-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-341-03" ;
    dcterms:issued "2023-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys and Facility Explorer (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4486" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-4486 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Metasys and Facility Explorer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Johnson Controls Metasys and Facility Explorer are affected: Metasys NAE55 engines: Versions prior to 12.0.4 Metasys SNE engines: Versions prior to 12.0.4 Metasys SNC engines: Versions prior to 12.0.4 Facility Explorer F4-SNC: Versions prior to 11.0.6 Facility Explorer F4-SNC: Versions prior to 12.0.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-341-03" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-341-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-341-05" ;
    dcterms:issued "2023-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "ControlbyWeb Relay" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-6333" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-6333 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "X-332 and X-301" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ControlByWeb Relay are affected: X-332-24I: Firmware 1.06 X-301-I: Firmware 1.15 X-301-24I: Firmware 1.15" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-341-05" ;
    icsa:vendor "ControlByWeb" ;
    icsa:year 2023 .

icsa-res:ICSA-23-341-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-341-06" ;
    dcterms:issued "2023-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sierra Wireless AirLink with ALEOS firmware" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Emergency Services; Energy; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-40459; CVE-2023-40461; CVE-2023-40463; CVE-2023-40464; CVE-2023-40460; CVE-2023-40462; CVE-2023-40458" ;
    icsa:cweNumber "CWE-79; CWE-321; CWE-835; CWE-798; CWE-617; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2023-40458,
        cve-res:CVE-2023-40459,
        cve-res:CVE-2023-40460,
        cve-res:CVE-2023-40461,
        cve-res:CVE-2023-40462,
        cve-res:CVE-2023-40463,
        cve-res:CVE-2023-40464 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-476,
        cwe-res:CWE-617,
        cwe-res:CWE-79,
        cwe-res:CWE-798,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AirLink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Sierra Wireless AirLink router with ALEOS firmware are affected: AirLink ALEOS firmware: All versions prior to 4.9.9 AirLink ALEOS firmware: All versions prior to 4.17.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-341-06" ;
    icsa:vendor "Sierra Wireless" ;
    icsa:year 2023 .

icsa-res:ICSA-23-346-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-346-01" ;
    dcterms:issued "2023-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Easy UPS Online Monitoring Software" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-6407" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2023-6407 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Easy UPS Online Monitoring Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following versions of Easy UPS Online Monitoring Software are affected: Easy UPS Online Monitoring Software (Windows 10; 11; 2019; Windows Server 2016; 2022): 2.6-GA-01-23116 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-346-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-01" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cambium ePMP 5GHz Force 300-25 Radio (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2023-6691" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2023-6691 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ePMP Force 300-25" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Cambium ePMP Force 300-25 radio are affected: ePMP Force 300-25: version 4.7.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-01" ;
    icsa:vendor "Cambium Networks" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-02" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Kantech Gen1 ioSmart" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0248" ;
    icsa:cweNumber "CWE-401" ;
    icsa:hasCVE cve-res:CVE-2023-0248 ;
    icsa:hasCWE cwe-res:CWE-401 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kantech Gen1 ioSmart card reader" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Kantech Gen1 ioSmart card reader are affected: Kantech Gen1 ioSmart card reader: firmware versions prior to 1.7.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-02" ;
    icsa:vendor "Sensormatic Electronics LLC (Subsidiary of Johnson Controls)" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-03" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens User Management Component (UMC)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-46285; CVE-2023-46281; CVE-2023-46282; CVE-2023-46284; CVE-2023-46283" ;
    icsa:cweNumber "CWE-942; CWE-20; CWE-120; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-46281,
        cve-res:CVE-2023-46282,
        cve-res:CVE-2023-46283,
        cve-res:CVE-2023-46284,
        cve-res:CVE-2023-46285 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20,
        cwe-res:CWE-79,
        cwe-res:CWE-942 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "User Management Component (UMC)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Opcenter Quality: all versions SIMATIC PCS neo: versions prior to v4.1 SINUMERIK Integrate RunMyHMI /Automotive: all versions Totally Integrated Automation Portal (TIA Portal) v14: all versions Totally Integrated Automation Portal (TIA Portal) v15.1: all versions Totally Integrated Automation Portal (TIA Portal) v16: all versions Totally Integrated Automation Portal (TIA Portal) v17: all versions Totally Integrated Automation Portal (TIA Portal) v18: versions prior to V18 update 3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-04" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! and SIPLUS LOGO!" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-42784" ;
    icsa:cweNumber "CWE-1319" ;
    icsa:hasCVE cve-res:CVE-2022-42784 ;
    icsa:hasCWE cwe-res:CWE-1319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! and SIPLUS LOGO! Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: LOGO! 12/24RCE (6ED1052-1MD08-0BA1): Versions v8.3 and prior LOGO! 12/24RCEo (6ED1052-2MD08-0BA1): Versions v8.3 and prior LOGO! 24CE (6ED1052-1CC08-0BA1): Versions v8.3 and prior LOGO! 24CEo (6ED1052-2CC08-0BA1): Versions v8.3 and prior LOGO! 24RCE (6ED1052-1HB08-0BA1): Versions v8.3 and prior LOGO! 24RCEo (6ED1052-2HB08-0BA1): Versions v8.3 and prior LOGO! 230RCE (6ED1052-1FB08-0BA1): Versions v8.3 and prior LOGO! 230RCEo (6ED1052-2FB08-0BA1): Versions v8.3 and prior SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1): Versions v8.3 and prior SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1): Versions v8.3 and prior SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1): Versions v8.3 and prior SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1): Versions v8.3 and prior SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1): Versions v8.3 and prior SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1): Versions v8.3 and prior SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1): Versions v8.3 and prior SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1): Versions v8.3 and prior; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-05" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC and SIPLUS Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-47375; CVE-2022-47374" ;
    icsa:cweNumber "CWE-805; CWE-674" ;
    icsa:hasCVE cve-res:CVE-2022-47374,
        cve-res:CVE-2022-47375 ;
    icsa:hasCWE cwe-res:CWE-674,
        cwe-res:CWE-805 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC and SIPLUS products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0): All versions SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0): All versions SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0): All versions SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0): All versions SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0): All versions SIMATIC PC-Station Plus: All versions SINAMICS S120 (incl. SIPLUS variants): All versions prior to SP3 HF15 SIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0): All versions SIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0): All versions; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-06" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-28831" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2023-28831 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK MC, SINUMERIK ONE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SINUMERIK MC: All versions prior to V1.22 SINUMERIK ONE: All versions prior to V6.22" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-07" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 (TIA Portal)" ;
    icsa:CVSSScore "4.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-46141" ;
    icsa:cweNumber "CWE-316" ;
    icsa:hasCVE cve-res:CVE-2022-46141 ;
    icsa:hasCWE cwe-res:CWE-316 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC STEP 7 (TIA Portal)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens product is affected: SIMATIC STEP 7 (TIA Portal): All versions prior to V19" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-08" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Web Server of Industrial Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-38380" ;
    icsa:cweNumber "CWE-401" ;
    icsa:hasCVE cve-res:CVE-2023-38380 ;
    icsa:hasCWE cwe-res:CWE-401 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP, SINAMICS, SIPLUS NET CP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SIMATIC CP 1242-7 V2 (incl. SIPLUS variants): All versions SIMATIC CP 1243-1 (incl. SIPLUS variants): All versions SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants): All versions SIMATIC CP 1243-1 IEC (incl. SIPLUS variants): All versions SIMATIC CP 1243-7 LTE: All versions SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0): All versions SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0): All versions SINAMICS S210 (6SL5...): Versions V6.1 up to but not including V6.1 HF2 SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0): All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-09" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simantic S7-1500 CPU family" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-46156" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2023-46156 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simantic S7-1500 CPU family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): All versions prior to V3.1.0 SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): All versions prior to V3.1.0 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0): All versions SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0): All versions SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0): All versions SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0): All versions SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0): All versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0): All versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0): All versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0): All versions SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0): All versions SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0): All versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0): All versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0): All versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0): All versions SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0): All versions SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0): All versions SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0): All versions SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CM03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0): All versions SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0): All versions SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK00-0AB0): All versions SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK01-0AB0): All versions SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DM03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL00-0AB0): All versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0): All versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0): All versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL00-0AB0): All versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0): All versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0): All versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RL00-0AB0): All versions SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RM03-0AB0): All versions SIMATIC S7-1500 CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1514SP-2 PN (6ES7514-2DN03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM00-0AB0): All versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0): All versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0): All versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM00-0AB0): All versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0): All versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0): All versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RM00-0AB0): All versions SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RN03-0AB0): All versions SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0): All versions SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0): All versions SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN00-0AB0): All versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0): All versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0): All versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN00-0AB0): All versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0): All versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0): All versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP01-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1517H-3 PN (6ES7517-3HP00-0AB0): All versions SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0):All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1518HF-4 PN (6ES7518-4JP00-0AB0): All versions SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0): All versions prior to V3.1.0 SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK (6ES7518-4AP00-3AB0): All versions SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK (6ES7518-4FP00-3AB0): All versions SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN (6ES7513-2GL00-0AB0): All versions SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN (6ES7513-2PL00-0AB0): All versions SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN (6ES7516-2GN00-0AB0): All versions SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN (6ES7516-2PN00-0AB0): All versions SIMATIC S7-1500 Software Controller: All versions SIMATIC S7-PLCSIM Advanced: All versions prior to V6.0 SIPLUS ET 200SP CPU 1510SP F-1 PN (6AG1510-1SJ01-2AB0): All versions SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL (6AG2510-1SJ01-1AB0): All versions SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-2AB0): All versions SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-7AB0): All versions SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-1AB0): All versions SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-4AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK00-2AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-2AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-7AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-1AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-4AB0): All versions SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-2AB0): All versions SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-7AB0): All versions SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-1AB0): All versions SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-4AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK00-2AB0): All versio" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-10" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-1010022; CVE-2020-29562; CVE-2020-26116; CVE-2020-21913; CVE-2020-12723; CVE-2021-33574; CVE-2023-40283; CVE-2023-5981; CVE-2023-23915; CVE-2021-4209; CVE-2022-27778; CVE-2017-17512; CVE-2022-1473; CVE-2021-36085; CVE-2021-3998; CVE-2023-0361; CVE-2020-15358; CVE-2023-38546; CVE-2017-16931; CVE-2022-22827; CVE-2019-3860; CVE-2022-22822; CVE-2016-10228; CVE-2022-25236; CVE-2021-3426; CVE-2023-3611; CVE-2019-3859; CVE-2020-25709; CVE-2020-8315; CVE-2016-5131; CVE-2020-28196; CVE-2023-3446; CVE-2017-18258; CVE-2019-6109; CVE-2021-36690; CVE-2021-33560; CVE-2022-22576; CVE-2023-5156; CVE-2021-28041; CVE-2021-23336; CVE-2021-22925; CVE-2019-5018; CVE-2020-12762; CVE-2021-45960; CVE-2019-19925; CVE-2016-3709; CVE-2019-19126; CVE-2023-25136; CVE-2023-27534; CVE-2020-13630; CVE-2022-25313; CVE-2020-10531; CVE-2022-29155; CVE-2019-19880.; CVE-2019-17543; CVE-2020-19186; CVE-2019-6111; CVE-2021-3177; CVE-2019-1010023; CVE-2018-20843; CVE-2022-42898; CVE-2019-5436; CVE-2023-32636; CVE-2018-14567; CVE-2019-13565; CVE-2021-3537; CVE-2023-26604; CVE-2019-6110; CVE-2019-13057; CVE-2019-9936; CVE-2020-19188; CVE-2022-28321; CVE-2020-7595; CVE-2013-0340; CVE-2020-36228; CVE-2019-9923; CVE-2019-5482; CVE-2022-32208; CVE-2019-16056; CVE-2021-43396; CVE-2020-36225; CVE-2021-35942; CVE-2020-36223; CVE-2022-30115; CVE-2023-39189; CVE-2023-39194; CVE-2019-6488; CVE-2021-22901; CVE-2019-19645; CVE-2022-2068; CVE-2023-44487; CVE-2019-19646; CVE-2021-22947; CVE-2022-1271; CVE-2021-22924; CVE-2021-36084; CVE-2019-15847; CVE-2019-7309; CVE-2020-36230; CVE-2021-20227; CVE-2022-35252; CVE-2019-20367; CVE-2021-3826; CVE-2019-9937; CVE-2020-27618; CVE-2022-40303; CVE-2020-13632; CVE-2019-25013; CVE-2022-25314; CVE-2023-4016; CVE-2023-42755; CVE-2022-32206; CVE-2019-15903; CVE-2023-1206; CVE-2021-3999; CVE-2021-37750; CVE-2022-43680; CVE-2022-1343; CVE-2019-17498; CVE-2023-23916; CVE-2020-13777; CVE-2020-8286; CVE-2022-22823; CVE-2020-14422; CVE-2022-43552; CVE-2023-28531; CVE-2022-35260; CVE-2023-4921; CVE-2021-20193; CVE-2022-42915; CVE-2023-27533; CVE-2021-22923; CVE-2019-3857; CVE-2021-46848; CVE-2020-13435; CVE-2021-36086; CVE-2019-16905; CVE-2019-19880; CVE-2022-40304; CVE-2023-38408; CVE-2019-17595; CVE-2019-19603; CVE-2023-45322; CVE-2022-0778; CVE-2023-27371; CVE-2022-32205; CVE-2021-20305; CVE-2023-3817; CVE-2019-20795; CVE-2020-13871; CVE-2022-32221; CVE-2020-36224; CVE-2020-29363; CVE-2020-1752; CVE-2023-0215; CVE-2022-27779; CVE-2019-20218; CVE-2023-0464; CVE-2018-25032; CVE-2023-42754; CVE-2020-8177; CVE-2019-8457; CVE-2023-39615; CVE-2020-9327; CVE-2022-22825; CVE-2022-42916; CVE-2021-3997; CVE-2020-22218; CVE-2022-23218; CVE-2022-0391; CVE-2023-32665; CVE-2021-22922; CVE-2022-25315; CVE-2022-23852; CVE-2020-13529; CVE-2023-4806; CVE-2021-4189; CVE-2019-5443; CVE-2022-32207; CVE-2019-9169; CVE-2020-15523; CVE-2020-6096; CVE-2022-45873; CVE-2023-27535; CVE-2020-8169; CVE-2022-3715; CVE-2022-40674; CVE-2020-8284; CVE-2023-0466; CVE-2021-22890; CVE-2018-12886; CVE-2023-31085; CVE-2022-24407; CVE-2023-32611; CVE-2021-3518; CVE-2021-27645; CVE-2019-1010024; CVE-2021-20231; CVE-2021-33910; CVE-2022-27943; CVE-2020-36229; CVE-2021-27219; CVE-2019-20388; CVE-2022-26488; CVE-2020-25710; CVE-2017-16932; CVE-2021-28153; CVE-2021-41617; CVE-2022-23308; CVE-2023-35945; CVE-2016-10228.; CVE-2020-12062; CVE-2019-19924; CVE-2017-9049; CVE-2019-19242; CVE-2022-1304; CVE-2023-4039; CVE-2019-16168; CVE-2013-4235; CVE-2022-22826; CVE-2023-23914; CVE-2021-3516; CVE-2020-11501; CVE-2019-9947; CVE-2021-46195; CVE-2023-2650; CVE-2019-12904; CVE-2021-27212; CVE-2022-27775; CVE-2019-3858; CVE-2020-25692; CVE-2020-35525; CVE-2018-18928; CVE-2022-23219; CVE-2020-13434; CVE-2020-10543; CVE-2019-19923; CVE-2020-15801; CVE-2019-9674; CVE-2022-2509; CVE-2022-35737; CVE-2020-36221; CVE-2021-36087; CVE-2021-3326; CVE-2021-46143; CVE-2021-3733; CVE-2021-20232; CVE-2021-22876; CVE-2019-9948; CVE-2021-38604; CVE-2019-19244; CVE-2019-18276; CVE-2023-2953; CVE-2019-3855; CVE-2022-25235; CVE-2020-36227; CVE-2022-48560; CVE-2023-34319; CVE-2018-20482; CVE-2016-10739; CVE-2021-43618; CVE-2022-37454; CVE-2016-10009.; CVE-2019-1010180; CVE-2021-22897; CVE-2019-19926; CVE-2023-29383; CVE-2023-25139; CVE-2023-4813; CVE-2022-2274; CVE-2021-22926; CVE-2019-17594; CVE-2021-3517; CVE-2020-8285; CVE-2021-32292; CVE-2019-1010025; CVE-2023-45853; CVE-2022-45061; CVE-2020-36226; CVE-2023-28484; CVE-2021-36222; CVE-2019-9636; CVE-2020-11655; CVE-2023-27536; CVE-2022-0563; CVE-2023-4807; CVE-2019-19959; CVE-2020-36222; CVE-2022-27782; CVE-2023-29491; CVE-2019-20907; CVE-2020-19909; CVE-2022-37434; CVE-2023-0687; CVE-2020-19190; CVE-2019-9740; CVE-2020-1751; CVE-2023-5717; CVE-2023-24329; CVE-2023-39193; CVE-2022-3821; CVE-2022-1434; CVE-2019-19317; CVE-2020-19189; CVE-2023-45871; CVE-2023-4911; CVE-2023-4527; CVE-2019-18224; CVE-2022-46908; CVE-2022-2097; CVE-2020-19187; CVE-2020-19185; CVE-2023-0465; CVE-2020-8231; CVE-2020-24977; CVE-2021-3541; CVE-2021-4122; CVE-2020-1712; CVE-2016-9318; CVE-2023-29469; CVE-2019-19956; CVE-2019-5435; CVE-2020-29361; CVE-2020-29362; CVE-2021-27218; CVE-2017-9048; CVE-2019-3862; CVE-2020-14145; CVE-2018-0495; CVE-2019-5481; CVE-2021-33294; CVE-2020-10735; CVE-2017-7376; CVE-2021-3737; CVE-2018-19591; CVE-2020-13631; CVE-2023-1077; CVE-2023-29499; CVE-2017-9047; CVE-2022-4450; CVE-2023-39128; CVE-2022-48522; CVE-2021-3580; CVE-2022-22824; CVE-2020-13776; CVE-2022-29824; CVE-2021-3520; CVE-2017-1000082.; CVE-2022-23990; CVE-2020-8492; CVE-2020-29573; CVE-2015-20107; CVE-2020-12243; CVE-2019-5188; CVE-2020-24659; CVE-2019-19906; CVE-2022-27781; CVE-2017-7375; CVE-2021-22946; CVE-2022-27774; CVE-2020-10878; CVE-2018-14404; CVE-2017-0663; CVE-2023-35001; CVE-2019-18348; CVE-2023-38545; CVE-2023-5678; CVE-2019-13627; CVE-2023-3212; CVE-2022-1292; CVE-2021-28861; CVE-2014-7209; CVE-2021-31239; CVE-2016-3189; CVE-2020-15778; CVE-2022-27780; CVE-2016-1839.; CVE-2017-9050; CVE-2020-10029; CVE-2023-0286; CVE-2022-48303; CVE-2023-3772; CVE-2020-21047; CVE-2022-43551; CVE-2020-11656; CVE-2023-4623; CVE-2020-35527; CVE-2021-46828; CVE-2016-4658; CVE-2019-12900; CVE-2023-34969; CVE-2022-4304; CVE-2021-22945; CVE-2019-3863; CVE-2019-3856; CVE-2023-3609; CVE-2019-10160; CVE-2021-37600; CVE-2019-11360; CVE-2023-32643; CVE-2023-27538; CVE-2023-39192; CVE-2019-12290; CVE-2019-5094; CVE-2021-22898; CVE-2021-28363; CVE-2022-27776; CVE-2023-27537; CVE-2019-3861" ;
    icsa:cweNumber "CWE-776; CWE-427; CWE-122; CWE-693; CWE-400; CWE-407; CWE-668; CWE-674; CWE-200; CWE-502; CWE-522; CWE-120; CWE-834; CWE-77; CWE-787; CWE-908; CWE-195; CWE-772; CWE-369; CWE-331; CWE-434; CWE-706; CWE-89; CWE-426; CWE-311; CWE-754; CWE-404; CWE-290; CWE-763; CWE-20; CWE-193; CWE-93; CWE-269; CWE-287; CWE-755; CWE-909; CWE-191; CWE-125; CWE-354; CWE-129; CWE-59; CWE-416; CWE-79; CWE-276; CWE-617; CWE-1333; CWE-367; CWE-665; CWE-401; CWE-330; CWE-326; CWE-74; CWE-190; CWE-121; CWE-601; CWE-440; CWE-252; CWE-611; CWE-682; CWE-273; CWE-1286; CWE-681; CWE-119; CWE-116; CWE-295; CWE-415; CWE-704; CWE-476; CWE-22; CWE-770; CWE-209; CWE-838; CWE-835; CWE-843; CWE-918; CWE-172; CWE-78; CWE-345; CWE-319; CWE-203; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2013-0340,
        cve-res:CVE-2013-4235,
        cve-res:CVE-2014-7209,
        cve-res:CVE-2015-20107,
        <http://w3id.org/sepses/resource/cve/CVE-2016-10009.>,
        cve-res:CVE-2016-10228,
        <http://w3id.org/sepses/resource/cve/CVE-2016-10228.>,
        cve-res:CVE-2016-10739,
        <http://w3id.org/sepses/resource/cve/CVE-2016-1839.>,
        cve-res:CVE-2016-3189,
        cve-res:CVE-2016-3709,
        cve-res:CVE-2016-4658,
        cve-res:CVE-2016-5131,
        cve-res:CVE-2016-9318,
        cve-res:CVE-2017-0663,
        <http://w3id.org/sepses/resource/cve/CVE-2017-1000082.>,
        cve-res:CVE-2017-16931,
        cve-res:CVE-2017-16932,
        cve-res:CVE-2017-17512,
        cve-res:CVE-2017-18258,
        cve-res:CVE-2017-7375,
        cve-res:CVE-2017-7376,
        cve-res:CVE-2017-9047,
        cve-res:CVE-2017-9048,
        cve-res:CVE-2017-9049,
        cve-res:CVE-2017-9050,
        cve-res:CVE-2018-0495,
        cve-res:CVE-2018-12886,
        cve-res:CVE-2018-14404,
        cve-res:CVE-2018-14567,
        cve-res:CVE-2018-18928,
        cve-res:CVE-2018-19591,
        cve-res:CVE-2018-20482,
        cve-res:CVE-2018-20843,
        cve-res:CVE-2018-25032,
        cve-res:CVE-2019-1010022,
        cve-res:CVE-2019-1010023,
        cve-res:CVE-2019-1010024,
        cve-res:CVE-2019-1010025,
        cve-res:CVE-2019-1010180,
        cve-res:CVE-2019-10160,
        cve-res:CVE-2019-11360,
        cve-res:CVE-2019-12290,
        cve-res:CVE-2019-12900,
        cve-res:CVE-2019-12904,
        cve-res:CVE-2019-13057,
        cve-res:CVE-2019-13565,
        cve-res:CVE-2019-13627,
        cve-res:CVE-2019-15847,
        cve-res:CVE-2019-15903,
        cve-res:CVE-2019-16056,
        cve-res:CVE-2019-16168,
        cve-res:CVE-2019-16905,
        cve-res:CVE-2019-17498,
        cve-res:CVE-2019-17543,
        cve-res:CVE-2019-17594,
        cve-res:CVE-2019-17595,
        cve-res:CVE-2019-18224,
        cve-res:CVE-2019-18276,
        cve-res:CVE-2019-18348,
        cve-res:CVE-2019-19126,
        cve-res:CVE-2019-19242,
        cve-res:CVE-2019-19244,
        cve-res:CVE-2019-19317,
        cve-res:CVE-2019-19603,
        cve-res:CVE-2019-19645,
        cve-res:CVE-2019-19646,
        cve-res:CVE-2019-19880,
        <http://w3id.org/sepses/resource/cve/CVE-2019-19880.>,
        cve-res:CVE-2019-19906,
        cve-res:CVE-2019-19923,
        cve-res:CVE-2019-19924,
        cve-res:CVE-2019-19925,
        cve-res:CVE-2019-19926,
        cve-res:CVE-2019-19956,
        cve-res:CVE-2019-19959,
        cve-res:CVE-2019-20218,
        cve-res:CVE-2019-20367,
        cve-res:CVE-2019-20388,
        cve-res:CVE-2019-20795,
        cve-res:CVE-2019-20907,
        cve-res:CVE-2019-25013,
        cve-res:CVE-2019-3855,
        cve-res:CVE-2019-3856,
        cve-res:CVE-2019-3857,
        cve-res:CVE-2019-3858,
        cve-res:CVE-2019-3859,
        cve-res:CVE-2019-3860,
        cve-res:CVE-2019-3861,
        cve-res:CVE-2019-3862,
        cve-res:CVE-2019-3863,
        cve-res:CVE-2019-5018,
        cve-res:CVE-2019-5094,
        cve-res:CVE-2019-5188,
        cve-res:CVE-2019-5435,
        cve-res:CVE-2019-5436,
        cve-res:CVE-2019-5443,
        cve-res:CVE-2019-5481,
        cve-res:CVE-2019-5482,
        cve-res:CVE-2019-6109,
        cve-res:CVE-2019-6110,
        cve-res:CVE-2019-6111,
        cve-res:CVE-2019-6488,
        cve-res:CVE-2019-7309,
        cve-res:CVE-2019-8457,
        cve-res:CVE-2019-9169,
        cve-res:CVE-2019-9636,
        cve-res:CVE-2019-9674,
        cve-res:CVE-2019-9740,
        cve-res:CVE-2019-9923,
        cve-res:CVE-2019-9936,
        cve-res:CVE-2019-9937,
        cve-res:CVE-2019-9947,
        cve-res:CVE-2019-9948,
        cve-res:CVE-2020-10029,
        cve-res:CVE-2020-10531,
        cve-res:CVE-2020-10543,
        cve-res:CVE-2020-10735,
        cve-res:CVE-2020-10878,
        cve-res:CVE-2020-11501,
        cve-res:CVE-2020-11655,
        cve-res:CVE-2020-11656,
        cve-res:CVE-2020-12062,
        cve-res:CVE-2020-12243,
        cve-res:CVE-2020-12723,
        cve-res:CVE-2020-12762,
        cve-res:CVE-2020-13434,
        cve-res:CVE-2020-13435,
        cve-res:CVE-2020-13529,
        cve-res:CVE-2020-13630,
        cve-res:CVE-2020-13631,
        cve-res:CVE-2020-13632,
        cve-res:CVE-2020-13776,
        cve-res:CVE-2020-13777,
        cve-res:CVE-2020-13871,
        cve-res:CVE-2020-14145,
        cve-res:CVE-2020-14422,
        cve-res:CVE-2020-15358,
        cve-res:CVE-2020-15523,
        cve-res:CVE-2020-15778,
        cve-res:CVE-2020-15801,
        cve-res:CVE-2020-1712,
        cve-res:CVE-2020-1751,
        cve-res:CVE-2020-1752,
        cve-res:CVE-2020-19185,
        cve-res:CVE-2020-19186,
        cve-res:CVE-2020-19187,
        cve-res:CVE-2020-19188,
        cve-res:CVE-2020-19189,
        cve-res:CVE-2020-19190,
        cve-res:CVE-2020-19909,
        cve-res:CVE-2020-21047,
        cve-res:CVE-2020-21913,
        cve-res:CVE-2020-22218,
        cve-res:CVE-2020-24659,
        cve-res:CVE-2020-24977,
        cve-res:CVE-2020-25692,
        cve-res:CVE-2020-25709,
        cve-res:CVE-2020-25710,
        cve-res:CVE-2020-26116,
        cve-res:CVE-2020-27618,
        cve-res:CVE-2020-28196,
        cve-res:CVE-2020-29361,
        cve-res:CVE-2020-29362,
        cve-res:CVE-2020-29363,
        cve-res:CVE-2020-29562,
        cve-res:CVE-2020-29573,
        cve-res:CVE-2020-35525,
        cve-res:CVE-2020-35527,
        cve-res:CVE-2020-36221,
        cve-res:CVE-2020-36222,
        cve-res:CVE-2020-36223,
        cve-res:CVE-2020-36224,
        cve-res:CVE-2020-36225,
        cve-res:CVE-2020-36226,
        cve-res:CVE-2020-36227,
        cve-res:CVE-2020-36228,
        cve-res:CVE-2020-36229,
        cve-res:CVE-2020-36230,
        cve-res:CVE-2020-6096,
        cve-res:CVE-2020-7595,
        cve-res:CVE-2020-8169,
        cve-res:CVE-2020-8177,
        cve-res:CVE-2020-8231,
        cve-res:CVE-2020-8284,
        cve-res:CVE-2020-8285,
        cve-res:CVE-2020-8286,
        cve-res:CVE-2020-8315,
        cve-res:CVE-2020-8492,
        cve-res:CVE-2020-9327,
        cve-res:CVE-2021-20193,
        cve-res:CVE-2021-20227,
        cve-res:CVE-2021-20231,
        cve-res:CVE-2021-20232,
        cve-res:CVE-2021-20305,
        cve-res:CVE-2021-22876,
        cve-res:CVE-2021-22890,
        cve-res:CVE-2021-22897,
        cve-res:CVE-2021-22898,
        cve-res:CVE-2021-22901,
        cve-res:CVE-2021-22922,
        cve-res:CVE-2021-22923,
        cve-res:CVE-2021-22924,
        cve-res:CVE-2021-22925,
        cve-res:CVE-2021-22926,
        cve-res:CVE-2021-22945,
        cve-res:CVE-2021-22946,
        cve-res:CVE-2021-22947,
        cve-res:CVE-2021-23336,
        cve-res:CVE-2021-27212,
        cve-res:CVE-2021-27218,
        cve-res:CVE-2021-27219,
        cve-res:CVE-2021-27645,
        cve-res:CVE-2021-28041,
        cve-res:CVE-2021-28153,
        cve-res:CVE-2021-28363,
        cve-res:CVE-2021-28861,
        cve-res:CVE-2021-31239,
        cve-res:CVE-2021-3177,
        cve-res:CVE-2021-32292,
        cve-res:CVE-2021-3326,
        cve-res:CVE-2021-33294,
        cve-res:CVE-2021-33560,
        cve-res:CVE-2021-33574,
        cve-res:CVE-2021-33910,
        cve-res:CVE-2021-3426,
        cve-res:CVE-2021-3516,
        cve-res:CVE-2021-3517,
        cve-res:CVE-2021-3518,
        cve-res:CVE-2021-3520,
        cve-res:CVE-2021-3537,
        cve-res:CVE-2021-3541,
        cve-res:CVE-2021-3580,
        cve-res:CVE-2021-35942,
        cve-res:CVE-2021-36084,
        cve-res:CVE-2021-36085,
        cve-res:CVE-2021-36086,
        cve-res:CVE-2021-36087,
        cve-res:CVE-2021-36222,
        cve-res:CVE-2021-36690,
        cve-res:CVE-2021-3733,
        cve-res:CVE-2021-3737,
        cve-res:CVE-2021-37600,
        cve-res:CVE-2021-37750,
        cve-res:CVE-2021-3826,
        cve-res:CVE-2021-38604,
        cve-res:CVE-2021-3997,
        cve-res:CVE-2021-3998,
        cve-res:CVE-2021-3999,
        cve-res:CVE-2021-4122,
        cve-res:CVE-2021-41617,
        cve-res:CVE-2021-4189,
        cve-res:CVE-2021-4209,
        cve-res:CVE-2021-43396,
        cve-res:CVE-2021-43618,
        cve-res:CVE-2021-45960,
        cve-res:CVE-2021-46143,
        cve-res:CVE-2021-46195,
        cve-res:CVE-2021-46828,
        cve-res:CVE-2021-46848,
        cve-res:CVE-2022-0391,
        cve-res:CVE-2022-0563,
        cve-res:CVE-2022-0778,
        cve-res:CVE-2022-1271,
        cve-res:CVE-2022-1292,
        cve-res:CVE-2022-1304,
        cve-res:CVE-2022-1343,
        cve-res:CVE-2022-1434,
        cve-res:CVE-2022-1473,
        cve-res:CVE-2022-2068,
        cve-res:CVE-2022-2097,
        cve-res:CVE-2022-22576,
        cve-res:CVE-2022-2274,
        cve-res:CVE-2022-22822,
        cve-res:CVE-2022-22823,
        cve-res:CVE-2022-22824,
        cve-res:CVE-2022-22825,
        cve-res:CVE-2022-22826,
        cve-res:CVE-2022-22827,
        cve-res:CVE-2022-23218,
        cve-res:CVE-2022-23219,
        cve-res:CVE-2022-23308,
        cve-res:CVE-2022-23852,
        cve-res:CVE-2022-23990,
        cve-res:CVE-2022-24407,
        cve-res:CVE-2022-2509,
        cve-res:CVE-2022-25235,
        cve-res:CVE-2022-25236,
        cve-res:CVE-2022-25313,
        cve-res:CVE-2022-25314,
        cve-res:CVE-2022-25315,
        cve-res:CVE-2022-26488,
        cve-res:CVE-2022-27774,
        cve-res:CVE-2022-27775,
        cve-res:CVE-2022-27776,
        cve-res:CVE-2022-27778,
        cve-res:CVE-2022-27779,
        cve-res:CVE-2022-27780,
        cve-res:CVE-2022-27781,
        cve-res:CVE-2022-27782,
        cve-res:CVE-2022-27943,
        cve-res:CVE-2022-28321,
        cve-res:CVE-2022-29155,
        cve-res:CVE-2022-29824,
        cve-res:CVE-2022-30115,
        cve-res:CVE-2022-32205,
        cve-res:CVE-2022-32206,
        cve-res:CVE-2022-32207,
        cve-res:CVE-2022-32208,
        cve-res:CVE-2022-32221,
        cve-res:CVE-2022-35252,
        cve-res:CVE-2022-35260,
        cve-res:CVE-2022-35737,
        cve-res:CVE-2022-3715,
        cve-res:CVE-2022-37434,
        cve-res:CVE-2022-37454,
        cve-res:CVE-2022-3821,
        cve-res:CVE-2022-40303,
        cve-res:CVE-2022-40304,
        cve-res:CVE-2022-40674,
        cve-res:CVE-2022-42898,
        cve-res:CVE-2022-42915,
        cve-res:CVE-2022-42916,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-43551,
        cve-res:CVE-2022-43552,
        cve-res:CVE-2022-43680,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2022-45061,
        cve-res:CVE-2022-45873,
        cve-res:CVE-2022-46908,
        cve-res:CVE-2022-48303,
        cve-res:CVE-2022-48522,
        cve-res:CVE-2022-48560,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0361,
        cve-res:CVE-2023-0464,
        cve-res:CVE-2023-0465,
        cve-res:CVE-2023-0466,
        cve-res:CVE-2023-0687,
        cve-res:CVE-2023-1077,
        cve-res:CVE-2023-1206,
        cve-res:CVE-2023-23914,
        cve-res:CVE-2023-23915,
        cve-res:CVE-2023-23916,
        cve-res:CVE-2023-24329,
        cve-res:CVE-2023-25136,
        cve-res:CVE-2023-25139,
        cve-res:CVE-2023-2650,
        cve-res:CVE-2023-26604,
        cve-res:CVE-2023-27371,
        cve-res:CVE-2023-27533,
        cve-res:CVE-2023-27534,
        cve-res:CVE-2023-27535,
        cve-res:CVE-2023-27536,
        cve-res:CVE-2023-27537,
        cve-res:CVE-2023-27538,
        cve-res:CVE-2023-28484,
        cve-res:CVE-2023-28531,
        cve-res:CVE-2023-29383,
        cve-res:CVE-2023-29469,
        cve-res:CVE-2023-29491,
        cve-res:CVE-2023-29499,
        cve-res:CVE-2023-2953,
        cve-res:CVE-2023-31085,
        cve-res:CVE-2023-3212,
        cve-res:CVE-2023-32611,
        cve-res:CVE-2023-32636,
        cve-res:CVE-2023-32643,
        cve-res:CVE-2023-32665,
        cve-res:CVE-2023-34319,
        cve-res:CVE-2023-3446,
        cve-res:CVE-2023-34969,
        cve-res:CVE-2023-35001,
        cve-res:CVE-2023-35945,
        cve-res:CVE-2023-3609,
        cve-res:CVE-2023-3611,
        cve-res:CVE-2023-3772,
        cve-res:CVE-2023-3817,
        cve-res:CVE-2023-38408,
        cve-res:CVE-2023-38545,
        cve-res:CVE-2023-38546,
        cve-res:CVE-2023-39128,
        cve-res:CVE-2023-39189,
        cve-res:CVE-2023-39192,
        cve-res:CVE-2023-39193,
        cve-res:CVE-2023-39194,
        cve-res:CVE-2023-39615,
        cve-res:CVE-2023-4016,
        cve-res:CVE-2023-40283,
        cve-res:CVE-2023-4039,
        cve-res:CVE-2023-42754,
        cve-res:CVE-2023-42755,
        cve-res:CVE-2023-44487,
        cve-res:CVE-2023-4527,
        cve-res:CVE-2023-45322,
        cve-res:CVE-2023-45853,
        cve-res:CVE-2023-45871,
        cve-res:CVE-2023-4623,
        cve-res:CVE-2023-4806,
        cve-res:CVE-2023-4807,
        cve-res:CVE-2023-4813,
        cve-res:CVE-2023-4911,
        cve-res:CVE-2023-4921,
        cve-res:CVE-2023-5156,
        cve-res:CVE-2023-5678,
        cve-res:CVE-2023-5717,
        cve-res:CVE-2023-5981 ;
    icsa:hasCWE cwe-res:CWE-116,
        cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-1286,
        cwe-res:CWE-129,
        cwe-res:CWE-1333,
        cwe-res:CWE-172,
        cwe-res:CWE-190,
        cwe-res:CWE-191,
        cwe-res:CWE-193,
        cwe-res:CWE-195,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-203,
        cwe-res:CWE-209,
        cwe-res:CWE-22,
        cwe-res:CWE-252,
        cwe-res:CWE-269,
        cwe-res:CWE-273,
        cwe-res:CWE-276,
        cwe-res:CWE-287,
        cwe-res:CWE-290,
        cwe-res:CWE-295,
        cwe-res:CWE-311,
        cwe-res:CWE-319,
        cwe-res:CWE-326,
        cwe-res:CWE-327,
        cwe-res:CWE-330,
        cwe-res:CWE-331,
        cwe-res:CWE-345,
        cwe-res:CWE-354,
        cwe-res:CWE-367,
        cwe-res:CWE-369,
        cwe-res:CWE-400,
        cwe-res:CWE-401,
        cwe-res:CWE-404,
        cwe-res:CWE-407,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-426,
        cwe-res:CWE-427,
        cwe-res:CWE-434,
        cwe-res:CWE-440,
        cwe-res:CWE-476,
        cwe-res:CWE-502,
        cwe-res:CWE-522,
        cwe-res:CWE-59,
        cwe-res:CWE-601,
        cwe-res:CWE-611,
        cwe-res:CWE-617,
        cwe-res:CWE-665,
        cwe-res:CWE-668,
        cwe-res:CWE-674,
        cwe-res:CWE-681,
        cwe-res:CWE-682,
        cwe-res:CWE-693,
        cwe-res:CWE-704,
        cwe-res:CWE-706,
        cwe-res:CWE-74,
        cwe-res:CWE-754,
        cwe-res:CWE-755,
        cwe-res:CWE-763,
        cwe-res:CWE-77,
        cwe-res:CWE-770,
        cwe-res:CWE-772,
        cwe-res:CWE-776,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-79,
        cwe-res:CWE-834,
        cwe-res:CWE-835,
        cwe-res:CWE-838,
        cwe-res:CWE-843,
        cwe-res:CWE-89,
        cwe-res:CWE-908,
        cwe-res:CWE-909,
        cwe-res:CWE-918,
        cwe-res:CWE-93 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0): All versions prior to V3.1.0; are affected: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): All versions prior to V3.1.0; SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): All versions prior to V3.1.0.; SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0): All versions prior to V3.1.0; The following products of Siemens; SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): All versions prior to V3.1.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-11" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-46156" ;
    icsa:cweNumber "CWE-416" ;
    icsa:hasCVE cve-res:CVE-2023-46156 ;
    icsa:hasCWE cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK MC, SINUMERIK ONE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SINUMERIK MC: All versions SINUMERIK ONE: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-12" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM Q100 Devices" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-31238; CVE-2023-30901" ;
    icsa:cweNumber "CWE-732; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2023-30901,
        cve-res:CVE-2023-31238 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "POWER METER SICAM Q100, POWER METER SICAM Q100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: POWER METER SICAM Q100 (7KG9501-0AA01-2AA1): All versions prior to V2.60 POWER METER SICAM Q100 (7KG9501-0AA31-2AA1): All versions prior to V2.60; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-13" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE and RUGGEDCOM M-800/S615 Family" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-44317; CVE-2023-49692" ;
    icsa:cweNumber "CWE-78; CWE-349" ;
    icsa:hasCVE cve-res:CVE-2023-44317,
        cve-res:CVE-2023-49692 ;
    icsa:hasCWE cwe-res:CWE-349,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE M-800/S615 Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions prior to V7.2.2 RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions prior to V7.2.2 SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions prior to V7.2.2 SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versons prior to V7.2.2 SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions prior to V7.2.2 SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions prior to V7.2.2 SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions prior to V7.2.2 SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions prior to V7.2.2 SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions prior to V7.2.2 SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions prior to V7.2.2 SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2): All versions prior to V7.2.2 SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions prior to V7.2.2 SCALANCE M876-4 (6GK5876-4AA10-2BA2): All versions prior to V7.2.2 SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions prior to V7.2.2 SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions prior to V7.2.2 SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): All versions prior to V7.2.2 SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions prior to V7.2.2 SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions prior to V7.2.2 SCALANCE S615 (6GK5615-0AA00-2AA2): All versions prior to V7.2.2 SCALANCE S615 EEC (6GK5615-0AA01-2AA2): All versions prior to V7.2.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-14" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM and SCALANCE M-800/S615 Family" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-44322; CVE-2022-46143; CVE-2023-44374; CVE-2023-44373; CVE-2023-44320; CVE-2023-49691; CVE-2023-44319; CVE-2023-44321; CVE-2023-44318" ;
    icsa:cweNumber "CWE-328; CWE-252; CWE-321; CWE-567; CWE-74; CWE-78; CWE-1284; CWE-425; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-46143,
        cve-res:CVE-2023-44318,
        cve-res:CVE-2023-44319,
        cve-res:CVE-2023-44320,
        cve-res:CVE-2023-44321,
        cve-res:CVE-2023-44322,
        cve-res:CVE-2023-44373,
        cve-res:CVE-2023-44374,
        cve-res:CVE-2023-49691 ;
    icsa:hasCWE cwe-res:CWE-1284,
        cwe-res:CWE-252,
        cwe-res:CWE-321,
        cwe-res:CWE-328,
        cwe-res:CWE-400,
        cwe-res:CWE-425,
        cwe-res:CWE-567,
        cwe-res:CWE-74,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE M-800/S615 Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions prior to V8.0 RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions prior to V8.0 RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions prior to V8.0 SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions prior to V8.0 SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions prior to V8.0 SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions prior to V8.0 SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions prior to V8.0 SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions prior to V8.0 SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions prior to V8.0 SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions prior to V8.0 SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2): All versions prior to V8.0 SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2): All versions SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions prior to V8.0 SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions SCALANCE M876-4 (6GK5876-4AA10-2BA2): All versions prior to V8.0 SCALANCE M876-4 (6GK5876-4AA10-2BA2): All versions SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions prior to V8.0 SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions prior to V8.0 SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): All versions prior to V8.0 SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): All versions SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions prior to V8.0 SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions prior to V8.0 SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions SCALANCE S615 (6GK5615-0AA00-2AA2): All versions prior to V8.0 SCALANCE S615 (6GK5615-0AA00-2AA2): All versions SCALANCE S615 EEC (6GK5615-0AA01-2AA2): All versions prior to V8.0 SCALANCE S615 EEC (6GK5615-0AA01-2AA2): All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-15" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Unitronics Vision and Samba Series (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Israel" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-6448" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2023-6448 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vision Series, Samba Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Unitronics products are affected: VisiLogic: Versions prior to 9.9.00 OS: Versions prior to 12.38." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-15" ;
    icsa:vendor "Unitronics" ;
    icsa:year 2023 .

icsa-res:ICSA-23-348-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-348-16" ;
    dcterms:issued "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC INS" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0464; CVE-2023-48427; CVE-2023-48429; CVE-2023-48428; CVE-2023-27538; CVE-2023-48431; CVE-2023-48430" ;
    icsa:cweNumber "CWE-20; CWE-78; CWE-392; CWE-394; CWE-295; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2023-0464,
        cve-res:CVE-2023-27538,
        cve-res:CVE-2023-48427,
        cve-res:CVE-2023-48428,
        cve-res:CVE-2023-48429,
        cve-res:CVE-2023-48430,
        cve-res:CVE-2023-48431 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-295,
        cwe-res:CWE-392,
        cwe-res:CWE-394,
        cwe-res:CWE-754,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC INS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SINEC INS: Versions prior to V1.0 SP2 Update 2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-348-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2023 .

icsa-res:ICSA-23-353-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-353-01" ;
    dcterms:issued "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Subnet Solutions Inc. PowerSYSTEM Center" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-6631" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2023-6631 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerSYSTEM Center" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a multi-function management platform; are affected: PowerSYSTEM Center: 2020 v5.0.x through 5.16.x.; The following versions of PowerSYSTEM Center" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-353-01" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2023 .

icsa-res:ICSA-23-353-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-353-02" ;
    dcterms:issued "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "EFACEC BCU 500" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Portugal" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-50707; CVE-2023-6689" ;
    icsa:cweNumber "CWE-352; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-50707,
        cve-res:CVE-2023-6689 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BCU 500" ;
    icsa:productDistribution "Multiple" ;
    icsa:productsAffected "an automation and control IED; The following version of EFACEC BCU 500; is affected: BCU 500: version 4.07." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-353-02" ;
    icsa:vendor "EFACEC" ;
    icsa:year 2023 .

icsa-res:ICSA-23-353-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-353-03" ;
    dcterms:issued "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "EFACEC UC 500E" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Portugal" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-50706; CVE-2023-50705; CVE-2023-50704; CVE-2023-50703" ;
    icsa:cweNumber "CWE-284; CWE-319; CWE-601; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2023-50703,
        cve-res:CVE-2023-50704,
        cve-res:CVE-2023-50705,
        cve-res:CVE-2023-50706 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-319,
        cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UC 500" ;
    icsa:productDistribution "Multiple" ;
    icsa:productsAffected "The following version of EFACEC UC 500E; a HMI; is affected: UC 500E: version 10.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-353-03" ;
    icsa:vendor "EFACEC" ;
    icsa:year 2023 .

icsa-res:ICSA-23-353-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-353-04" ;
    dcterms:issued "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Open Design Alliance Drawing SDK" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-22669; CVE-2023-26495; CVE-2023-22670" ;
    icsa:cweNumber "CWE-416; CWE-122" ;
    icsa:hasCVE cve-res:CVE-2023-22669,
        cve-res:CVE-2023-22670,
        cve-res:CVE-2023-26495 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Drawing SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ODA Drawing SDK are affected: Drawing SDK: Versions prior to 2024.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-353-04" ;
    icsa:vendor "Open Design Alliance" ;
    icsa:year 2023 .

icsa-res:ICSA-23-353-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-353-05" ;
    dcterms:issued "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "EuroTel ETL3100 Radio Transmitter" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2023-6929; CVE-2023-6930; CVE-2023-6928" ;
    icsa:cweNumber "CWE-284; CWE-639; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2023-6928,
        cve-res:CVE-2023-6929,
        cve-res:CVE-2023-6930 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-307,
        cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ETL3100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions EuroTel ETL3100 radio transmitter are affected: ETL3100: version v01c01 ETL3100: version v01x37." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-353-05" ;
    icsa:vendor "EuroTel" ;
    icsa:year 2023 .

icsa-res:ICSA-23-355-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-355-01" ;
    dcterms:issued "2023-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "FXC AE1021/AE1021PE" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Information Technology; Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-49897" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2023-49897 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AE1021, AE1021PE" ;
    icsa:productDistribution "Japan" ;
    icsa:productsAffected "a wireless LAN router; The following versions of FXC AE1021; are affected: AE1021PE firmware: version 2.0.9 and earlier AE1021 firmware: version 2.0.9 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-355-01" ;
    icsa:vendor "FXC" ;
    icsa:year 2023 .

icsa-res:ICSA-23-355-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-23-355-02" ;
    dcterms:issued "2023-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "QNAP VioStor NVR" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-47565" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2023-47565 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VioStor NVR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of QNAP VioStor NVR; are affected: VioStor NVR QVR firmware: All versions prior to 4.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-355-02" ;
    icsa:vendor "QNAP" ;
    icsa:year 2023 .

icsa-res:ICSA-24-004-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-004-01" ;
    dcterms:issued "2024-01-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Activation" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3935; CVE-2023-38545" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-38545,
        cve-res:CVE-2023-3935 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Activation Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Factory Talk are affected: Factory Talk: V4.00 (Utilizes Wibu-Systems CodeMeter <7.60c)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-004-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-004-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-004-02" ;
    dcterms:issued "2024-01-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Factory Automation Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-4304; CVE-2022-4450; CVE-2023-0286" ;
    icsa:cweNumber "CWE-843; CWE-208; CWE-415" ;
    icsa:hasCVE cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0286 ;
    icsa:hasCWE cwe-res:CWE-208,
        cwe-res:CWE-415,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Factory Automation Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2022-4450).; The following Factory Automation products are affected: GT SoftGOT2000: Versions 1.275M to 1.290C (CVE-2023-0286) OPC UA Data Collector: Versions 1.04E and prior (CVE-2023-0286) MX OPC Server UA (Software packaged with MC Works64): Versions 3.05F and later (Packaged with MC Works64 Version 4.03D and later) (CVE-2022-4304) OPC UA Server Unit: All versions (CVE-2022-4304) FX5-OPC: Versions 1.006 and prior (CVE-2022-4304" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-004-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-011-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-011-03" ;
    dcterms:issued "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rapid Software LLC Rapid SCADA" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-21764; CVE-2024-21852; CVE-2024-21794; CVE-2024-21866; CVE-2024-22016; CVE-2024-21869; CVE-2024-22096" ;
    icsa:cweNumber "CWE-22; CWE-732; CWE-209; CWE-23; CWE-798; CWE-256; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2024-21764,
        cve-res:CVE-2024-21794,
        cve-res:CVE-2024-21852,
        cve-res:CVE-2024-21866,
        cve-res:CVE-2024-21869,
        cve-res:CVE-2024-22016,
        cve-res:CVE-2024-22096 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-22,
        cwe-res:CWE-23,
        cwe-res:CWE-256,
        cwe-res:CWE-601,
        cwe-res:CWE-732,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rapid SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rapid SCADA; an open-source industrial automation platform; are affected: Rapid SCADA: Version 5.8.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-011-03" ;
    icsa:vendor "Rapid Software LLC" ;
    icsa:year 2024 .

icsa-res:ICSA-24-011-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-011-04" ;
    dcterms:issued "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-7206" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-7206 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Horner Automation products are affected: Cscape: Versions 9.90 SP10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-011-04" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-011-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-011-05" ;
    dcterms:issued "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Easergy Studio" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-7032" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-7032 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Easergy Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Easergy Studio: Versions prior to v9.3.5.; The following versions of Schneider Electric Easergy Studio; a power relay protection control software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-011-05" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-011-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-011-06" ;
    dcterms:issued "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-51745; CVE-2023-51439; CVE-2023-51744; CVE-2023-51746" ;
    icsa:cweNumber "CWE-125; CWE-121; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2023-51439,
        cve-res:CVE-2023-51744,
        cve-res:CVE-2023-51745,
        cve-res:CVE-2023-51746 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go, Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: JT2Go: All versions prior to V14.3.0.6 Teamcenter Visualization V13.3: All versions prior to V13.3.0.13 Teamcenter Visualization V14.1: All versions prior to V14.1.0.12 Teamcenter Visualization V14.2: All versions prior to V14.2.0.9 Teamcenter Visualization V14.3: All versions prior to V14.3.0.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-011-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-011-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-011-07" ;
    dcterms:issued "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power 7" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-44120" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2023-44120 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Spectrum Power 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Spectrum Power 7: All versions prior to V23Q4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-011-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-011-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-011-08" ;
    dcterms:issued "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM A8000" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-42797" ;
    icsa:cweNumber "CWE-908" ;
    icsa:hasCVE cve-res:CVE-2023-42797 ;
    icsa:hasCWE cwe-res:CWE-908 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM A8000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products; are affected: CP-8031 MASTER MODULE (6MF2803-1AA00): All versions prior to CPCI85 V05.20 CP-8050 MASTER MODULE (6MF2805-0AA00): All versions prior to CPCI85 V05.20." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-011-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-011-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-011-09" ;
    dcterms:issued "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CN 4100" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-49251; CVE-2023-49252; CVE-2023-49621" ;
    icsa:cweNumber "CWE-20; CWE-639; CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2023-49251,
        cve-res:CVE-2023-49252,
        cve-res:CVE-2023-49621 ;
    icsa:hasCWE cwe-res:CWE-1392,
        cwe-res:CWE-20,
        cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CN 4100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SIMATIC CN 4100: Versions prior to V2.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-011-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-011-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-011-10" ;
    dcterms:issued "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-51438" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-51438 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products with maxView Storage Manager on Windows; are affected: SIMATIC IPC647E: All versions prior to V4.14.00.26068 SIMATIC IPC847E: All versions prior to V4.14.00.26068 SIMATIC IPC1047E: All versions prior to V4.14.00.26068." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-011-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-011-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-011-11" ;
    dcterms:issued "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-49132; CVE-2023-49128; CVE-2023-49129; CVE-2023-49121; CVE-2023-49124; CVE-2023-49131; CVE-2023-49130; CVE-2023-49122; CVE-2023-49127; CVE-2023-49126; CVE-2023-49123" ;
    icsa:cweNumber "CWE-824; CWE-122; CWE-787; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-49121,
        cve-res:CVE-2023-49122,
        cve-res:CVE-2023-49123,
        cve-res:CVE-2023-49124,
        cve-res:CVE-2023-49126,
        cve-res:CVE-2023-49127,
        cve-res:CVE-2023-49128,
        cve-res:CVE-2023-49129,
        cve-res:CVE-2023-49130,
        cve-res:CVE-2023-49131,
        cve-res:CVE-2023-49132 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Solid Edge SE2023: All versions prior to V223.0 Update 10.; The following Siemens products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-011-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-016-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-016-01" ;
    dcterms:issued "2024-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "SEW-EURODRIVE MOVITOOLS MotionStudio (Update A)" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2024-1167" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2024-1167 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MOVITOOLS MotionStudio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MOVITOOLS MotionStudio are affected: MOVITOOLS MotionStudio: Version 6.5.0.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-016-01" ;
    icsa:vendor "SEW-EURODRIVE" ;
    icsa:year 2024 .

icsa-res:ICSA-24-016-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-016-02" ;
    dcterms:issued "2024-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Integration Objects OPC UA Server Toolkit (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-7234" ;
    icsa:cweNumber "CWE-117" ;
    icsa:hasCVE cve-res:CVE-2023-7234 ;
    icsa:hasCWE cwe-res:CWE-117 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC UA Server Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OPC library designed to allow creation of OPC DA; The following versions of OPC UA Server Toolkit; DX and HDA servers software; are affected: OPC UA Server Toolkit: versions 1.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-016-02" ;
    icsa:vendor "Integration Objects" ;
    icsa:year 2024 .

icsa-res:ICSA-24-018-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-018-01" ;
    dcterms:issued "2024-01-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PI Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-31274; CVE-2023-34348" ;
    icsa:cweNumber "CWE-703; CWE-772" ;
    icsa:hasCVE cve-res:CVE-2023-31274,
        cve-res:CVE-2023-34348 ;
    icsa:hasCWE cwe-res:CWE-703,
        cwe-res:CWE-772 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of AVEVA PI Server; are affected: PI Server: 2023 PI Server: 2018 SP3 P05 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-018-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2024 .

icsa-res:ICSA-24-023-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-023-01" ;
    dcterms:issued "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "APsystems Energy Communication Unit (ECU-C) Power Control Software" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-44037" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2022-44037 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Energy communication Unit (ECU-C) Power Control Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following APsystems products are affected: Energy Communication Unit Power Control Software: C1.2.2 Energy Communication Unit Power Control Software: v3.11.4 Energy Communication Unit Power Control Software: W2.1.NA Energy Communication Unit Power Control Software: v4.1SAA Energy Communication Unit Power Control Software: v4.1NA." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-023-01" ;
    icsa:vendor "APsystems" ;
    icsa:year 2024 .

icsa-res:ICSA-24-023-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-023-02" ;
    dcterms:issued "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Crestron AM-300" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-6926" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2023-6926 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AM-300" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Crestron AirMedia Presentation System products are affected: AM-300: Version 1.4499.00018." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-023-02" ;
    icsa:vendor "Crestron" ;
    icsa:year 2024 .

icsa-res:ICSA-24-023-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-023-03" ;
    dcterms:issued "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Voltronic Power ViewPower Pro" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-51572; CVE-2023-51571; CVE-2023-51570; CVE-2023-51573" ;
    icsa:cweNumber "CWE-502; CWE-749; CWE-78; CWE-306" ;
    icsa:hasCVE cve-res:CVE-2023-51570,
        cve-res:CVE-2023-51571,
        cve-res:CVE-2023-51572,
        cve-res:CVE-2023-51573 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-502,
        cwe-res:CWE-749,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ViewPower Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: ViewPower Pro: 2.0-22165.; an Uninterruptable Power Supply (UPS) management software; The following versions of ViewPower Pro" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-023-03" ;
    icsa:vendor "Voltronic Power" ;
    icsa:year 2024 .

icsa-res:ICSA-24-023-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-023-05" ;
    dcterms:issued "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Lantronix XPort" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2023-7237" ;
    icsa:cweNumber "CWE-261" ;
    icsa:hasCVE cve-res:CVE-2023-7237 ;
    icsa:hasCWE cwe-res:CWE-261 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XPort" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of XPort; are affected: XPort Device Server Configuration Manager: Version 2.0.0.13.; a device server configuration manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-023-05" ;
    icsa:vendor "Lantronix" ;
    icsa:year 2024 .

icsa-res:ICSA-24-025-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-025-01" ;
    dcterms:issued "2024-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Opteev MachineSense FeverWarn" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health Sector" ;
    icsa:cveNumber "CVE-2023-49610; CVE-2023-49115; CVE-2023-47867; CVE-2023-6221; CVE-2023-49617; CVE-2023-46706" ;
    icsa:cweNumber "CWE-306; CWE-20; CWE-284; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2023-46706,
        cve-res:CVE-2023-47867,
        cve-res:CVE-2023-49115,
        cve-res:CVE-2023-49610,
        cve-res:CVE-2023-49617,
        cve-res:CVE-2023-6221 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-284,
        cwe-res:CWE-306,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MachineSense FeverWarn" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "an IoT-based skin temperature scanning system; The following components of the FeverWarn ecosystem; are affected: FeverWarn: ESP32 FeverWarn: RaspberryPi FeverWarn: DataHub RaspberryPi." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-025-01" ;
    icsa:vendor "MachineSense LLC." ;
    icsa:year 2024 .

icsa-res:ICSA-24-025-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-025-02" ;
    dcterms:issued "2024-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "SystemK NVR 504/508/516" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-7227" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2023-7227 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NVR 504/508/516" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SystemK NVR; a network video recorder; are affected: NVR 504: 2.3.5SK.30084998 NVR 508: 2.3.5SK.30084998 NVR 516: 2.3.5SK.30084998." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-025-02" ;
    icsa:vendor "SystemK" ;
    icsa:year 2024 .

icsa-res:ICSA-24-030-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-030-01" ;
    dcterms:issued "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson Rosemount GC370XA, GC700XA, GC1500XA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Chemical" ;
    icsa:cveNumber "CVE-2023-43609; CVE-2023-46687; CVE-2023-51761; CVE-2023-49716" ;
    icsa:cweNumber "CWE-77; CWE-285; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-43609,
        cve-res:CVE-2023-46687,
        cve-res:CVE-2023-49716,
        cve-res:CVE-2023-51761 ;
    icsa:hasCWE cwe-res:CWE-285,
        cwe-res:CWE-287,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rosemount GC370XA, GC700XA, GC1500XA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Emerson Rosemount Gas Chromatographs are affected: GC370XA: Version 4.1.5 GC700XA: Version 4.1.5 GC1500XA: Version 4.1.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-030-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2024 .

icsa-res:ICSA-24-030-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-030-02" ;
    dcterms:issued "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FA Engineering Software Products (Update D)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-6943; CVE-2023-6942" ;
    icsa:cweNumber "CWE-306; CWE-470" ;
    icsa:hasCVE cve-res:CVE-2023-6942,
        cve-res:CVE-2023-6943 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-470 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EZSocket, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GX Works2, GX Works3, MELSOFT Navigator, MT Works2, MX Component, MX OPC Server DA/UA (Software packaged with MC Works64)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mitsubishi Electric FA Engineering Software Products are affected: EZSocket: Versions 3.0 to 5.92 GT Designer3 Version1(GOT1000): Versions 1.325P and prior GT Designer3 Version1(GOT2000): Versions 1.320J and prior GX Works2: Versions 1.11M to 1.626C GX Works3: Versions 1.106L and prior MELSOFT Navigator: Versions 1.04E to 2.102G MT Works2: Versions 1.190Y and prior MX Component: Versions 4.00A to 5.007H MX OPC Server DA/UA (Software packaged with MC Works64): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-030-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-030-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-030-03" ;
    dcterms:issued "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC WS Series Ethernet Interface Module" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-6374" ;
    icsa:cweNumber "CWE-294" ;
    icsa:hasCVE cve-res:CVE-2023-6374 ;
    icsa:hasCWE cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC WS Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mitsubishi Electric MELSEC WS Series Ethernet Interface Modules; are affected: WS0-GETH00200: All serial numbers." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-030-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-030-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-030-04" ;
    dcterms:issued "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitron Systems Security Camera DVR" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-22768; CVE-2024-22771; CVE-2024-22772; CVE-2024-22770; CVE-2024-23842; CVE-2024-22769" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-22768,
        cve-res:CVE-2024-22769,
        cve-res:CVE-2024-22770,
        cve-res:CVE-2024-22771,
        cve-res:CVE-2024-22772,
        cve-res:CVE-2024-23842 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DVR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: DVR HVR-4781: Versions 1.03 through 4.02 DVR HVR-8781: Versions 1.03 through 4.02 DVR HVR-16781: Versions 1.03 through 4.02 DVR LGUVR-4H: Versions 1.02 through 4.02 DVR LGUVR-8H: Versions 1.02 through 4.02 DVR LGUVR-16H: Versions 1.02 through 4.02.; a digital video recorder; The following versions of Hitron Systems DVR" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-030-04" ;
    icsa:vendor "Hitron Systems" ;
    icsa:year 2024 .

icsa-res:ICSA-24-030-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-030-05" ;
    dcterms:issued "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix and GuardLogix" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024 21916" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2024%2021916 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix, GuardLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation ControlLogix and GuardLogix programmable logic controllers are affected: ControlLogix 5570: Firmware version 20.011 ControlLogix 5570 redundant: Firmware versions 20.054_kit1 GuardLogix 5570: Firmware version 20.011." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-030-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-030-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-030-06" ;
    dcterms:issued "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Service Platform" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical manufacturing" ;
    icsa:cveNumber "CVE-2024-21917" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2024-21917 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Service Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: FactoryTalk Service Platform: Versions prior to v6.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-030-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-030-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-030-07" ;
    dcterms:issued "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation LP30/40/50 and BM40 Operator Interface" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-47393; CVE-2022-47387; CVE-2022-47389; CVE-2022-47383; CVE-2022-47392; CVE-2022-47378; CVE-2022-47390; CVE-2022-47388; CVE-2022-47382; CVE-2022-47385; CVE-2022-47381; CVE-2022-47379; CVE-2022-47380; CVE-2022-47386; CVE-2022-47384" ;
    icsa:cweNumber "CWE-1288; CWE-787; CWE-121; CWE-822" ;
    icsa:hasCVE cve-res:CVE-2022-47378,
        cve-res:CVE-2022-47379,
        cve-res:CVE-2022-47380,
        cve-res:CVE-2022-47381,
        cve-res:CVE-2022-47382,
        cve-res:CVE-2022-47383,
        cve-res:CVE-2022-47384,
        cve-res:CVE-2022-47385,
        cve-res:CVE-2022-47386,
        cve-res:CVE-2022-47387,
        cve-res:CVE-2022-47388,
        cve-res:CVE-2022-47389,
        cve-res:CVE-2022-47390,
        cve-res:CVE-2022-47392,
        cve-res:CVE-2022-47393 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-1288,
        cwe-res:CWE-787,
        cwe-res:CWE-822 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LP30, LP40, LP50, and BM40 Operator Panels" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: LP30 Operator Panel: Versions prior to V3.5.19.0 LP40 Operator Pane: Versions prior to V3.5.19.0 LP50 Operator Panel: Versions prior to V3.5.19.0 BM40 Operator Panel: Versions prior to V3.5.19.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-030-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-032-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-032-01" ;
    dcterms:issued "2024-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Gessler GmbH WEB-MASTER" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2024-1040; CVE-2024-1039" ;
    icsa:cweNumber "CWE-1391; CWE-328" ;
    icsa:hasCVE cve-res:CVE-2024-1039,
        cve-res:CVE-2024-1040 ;
    icsa:hasCWE cwe-res:CWE-1391,
        cwe-res:CWE-328 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WEB-MASTER" ;
    icsa:productDistribution "Worlwide" ;
    icsa:productsAffected "are affected: WEB-MASTER: version 7.9.; an emergency lighting management system; The following versions of Gessler GmbH WEB-MASTER" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-032-01" ;
    icsa:vendor "Gessler GmbH" ;
    icsa:year 2024 .

icsa-res:ICSA-24-032-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-032-03" ;
    dcterms:issued "2024-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Edge products (formerly known as InduSoft Web Studio)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-6132" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2023-6132 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA Edge products (formerly known as InduSoft Web Studio)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following AVEVA Edge products (formerly known as InduSoft Web Studio) are affected: AVEVA Edge: 2020 R2 SP2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-032-03" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2024 .

icsa-res:ICSA-24-037-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-037-01" ;
    dcterms:issued "2024-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "HID Global Encoders" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2024-22388" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2024-22388 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iCLASS SE, OMNIKEY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following HID products are affected when configured as an encoder: iCLASS SE CP1000 Encoder: All versions iCLASS SE Readers: All versions iCLASS SE Reader Modules: All versions iCLASS SE Processors: All versions OMNIKEY 5427CK Readers: All versions OMNIKEY 5127CK Readers: All versions OMNIKEY 5023 Readers: All versions OMNIKEY 5027 Readers: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-037-01" ;
    icsa:vendor "HID Global" ;
    icsa:year 2024 .

icsa-res:ICSA-24-037-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-037-02" ;
    dcterms:issued "2024-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "HID Global Reader Configuration Cards" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2024-23806" ;
    icsa:cweNumber "CWE-285" ;
    icsa:hasCVE cve-res:CVE-2024-23806 ;
    icsa:hasCWE cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Reader Configuration Cards" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following HID products are affected: HID iCLASS SE reader configuration cards: All versions OMNIKEY Secure Elements reader configuration cards: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-037-02" ;
    icsa:vendor "HID Global" ;
    icsa:year 2024 .

icsa-res:ICSA-24-039-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-039-01" ;
    dcterms:issued "2024-02-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Qolsys IQ Panel 4, IQ4 HUB" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-0242" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2024-0242 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IQ Panel 4, IQ4 Hub" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Inc; are affected: Qolsys IQ Panel 4: Versions prior to 4.4.2 Qolsys IQ4 Hub: Versions prior to 4.4.2.; a subsidiary of Johnson Controls; The following products from Qolsys" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-039-01" ;
    icsa:vendor "Qolsys, Inc. (Subsidiary of Johnson Controls)" ;
    icsa:year 2024 .

icsa-res:ICSA-24-044-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-044-01" ;
    dcterms:issued "2024-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series Safety CPU and SIL2 Process CPU (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-6815" ;
    icsa:cweNumber "CWE-266" ;
    icsa:hasCVE cve-res:CVE-2023-6815 ;
    icsa:hasCWE cwe-res:CWE-266 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-R Series Safety CPU and SIL2 Process CPU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports that the following MELSEC iQ-R Series products are affected: MELSEC iQ-R Series Safety CPU R08SFCPU: all versions MELSEC iQ-R Series Safety CPU R16SFCPU: all versions MELSEC iQ-R Series Safety CPU R32SFCPU: all versions MELSEC iQ-R Series Safety CPU R120SFCPU: all versions MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU: all versions MELSEC iQ-R Series SIL2 Process CPU R16PSFCPU: all versions MELSEC iQ-R Series SIL2 Process CPU R32PSFCPU: all versions MELSEC iQ-R Series SIL2 Process CPU R120PSFCPU: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-044-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-01" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W1750D" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-45623; CVE-2023-45615; CVE-2023-45624; CVE-2023-45627; CVE-2023-45618; CVE-2023-45619; CVE-2023-45622; CVE-2023-45617; CVE-2023-45614; CVE-2023-45626; CVE-2023-45621; CVE-2023-45625; CVE-2023-45620; CVE-2023-45616" ;
    icsa:cweNumber "CWE-20; CWE-120; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2023-45614,
        cve-res:CVE-2023-45615,
        cve-res:CVE-2023-45616,
        cve-res:CVE-2023-45617,
        cve-res:CVE-2023-45618,
        cve-res:CVE-2023-45619,
        cve-res:CVE-2023-45620,
        cve-res:CVE-2023-45621,
        cve-res:CVE-2023-45622,
        cve-res:CVE-2023-45623,
        cve-res:CVE-2023-45624,
        cve-res:CVE-2023-45625,
        cve-res:CVE-2023-45626,
        cve-res:CVE-2023-45627 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-20,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SCALANCE W1750D (JP) (6GK5750-2HX01-1AD0): All versions SCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0): All versions SCALANCE W1750D (USA) (6GK5750-2HX01-1AB0): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-02" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIDIS Prime" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2022-29862; CVE-2020-1967; CVE-2022-0778; CVE-2019-19135; CVE-2020-1971" ;
    icsa:cweNumber "CWE-835; CWE-476; CWE-330" ;
    icsa:hasCVE cve-res:CVE-2019-19135,
        cve-res:CVE-2020-1967,
        cve-res:CVE-2020-1971,
        cve-res:CVE-2022-0778,
        cve-res:CVE-2022-29862 ;
    icsa:hasCWE cwe-res:CWE-330,
        cwe-res:CWE-476,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIDIS Prime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIDIS Prime: All versions prior to V4.0.400." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-03" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RTLS Gateways" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2020-11896" ;
    icsa:cweNumber "CWE-130" ;
    icsa:hasCVE cve-res:CVE-2020-11896 ;
    icsa:hasCWE cwe-res:CWE-130 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RTLS Gateway RTLS4030G, SIMATIC RTLS Gateway RTLS4430G" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FCC; CMIIT (6GT2701-5DB23): All versions SIMATIC RTLS Gateway RTLS4030G; ETSI; ETSI (6GT2701-5DB03): All versions SIMATIC RTLS Gateway RTLS4030G; ISED; FCC (6GT2701-5DB13): All versions SIMATIC RTLS Gateway RTLS4030G; ISED (6GT2701-5DB33): All versions SIMATIC RTLS Gateway RTLS4430G; Chirp; The following Siemens products are affected: SIMATIC RTLS Gateway RTLS4030G; IP65 (6GT2701-5CB03): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-04" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens CP343-1 Devices" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-51440" ;
    icsa:cweNumber "CWE-940" ;
    icsa:hasCVE cve-res:CVE-2023-51440 ;
    icsa:hasCWE cwe-res:CWE-940 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP 343-1, SIMATIC CP 343-1Lean, SIPLUS NET CP 343-1, SIPLUS NET CP 343-1 Lean" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC CP 343-1 (6GK7343-1EX30-0XE0): All versions SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0): All versions SIPLUS NET CP 343-1 (6AG1343-1EX30-7XE0): All versions SIPLUS NET CP 343-1 Lean (6AG1343-1CX10-2XE0): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-05" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Location Intelligence" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2024-23816" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2024-23816 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Location Intelligence Perpetual Large, Location Intelligence Perpetual Medium, Location Intelligence Perpetual Non-Prod, Location Intelligence Perpetual Small, Location Intelligence SUS Large, Location Intelligence SUS Medium, Location Intelligence SUS Non-Prod, Location Intelligence SUS Small" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0): All versions prior to V4.3 Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0): All versions prior to V4.3 Location Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0): All versions prior to V4.3 Location Intelligence Perpetual Small (9DE5110-8CA11-1AX0): All versions prior to V4.3 Location Intelligence SUS Large (9DE5110-8CA13-1BX0): All versions prior to V4.3 Location Intelligence SUS Medium (9DE5110-8CA12-1BX0): All versions prior to V4.3 Location Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0): All versions prior to V4.3 Location Intelligence SUS Small (9DE5110-8CA11-1BX0): All versions prior to V4.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-06" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Unicam FX" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2024-22042" ;
    icsa:cweNumber "CWE-648" ;
    icsa:hasCVE cve-res:CVE-2024-22042 ;
    icsa:hasCWE cwe-res:CWE-648 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Unicam FX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Unicam FX: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-07" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Tecnomatix Plant Simulation" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-23797; CVE-2024-23796; CVE-2024-23804; CVE-2024-23798; CVE-2024-23795; CVE-2024-23801; CVE-2024-23799; CVE-2024-23800; CVE-2024-23802; CVE-2024-23803" ;
    icsa:cweNumber "CWE-122; CWE-787; CWE-121; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-23795,
        cve-res:CVE-2024-23796,
        cve-res:CVE-2024-23797,
        cve-res:CVE-2024-23798,
        cve-res:CVE-2024-23799,
        cve-res:CVE-2024-23800,
        cve-res:CVE-2024-23801,
        cve-res:CVE-2024-23802,
        cve-res:CVE-2024-23803,
        cve-res:CVE-2024-23804 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-476,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tecnomatix Plant Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-23797; CVE-2024-23796; CVE-2024- 23802; CVE-2024-23803).; CVE-2024-23804) Tecnomatix Plant Simulation V2302: Versions prior to V2302.0007 (CVE-2024-23799; CVE-2024-23798; CVE-2024-23804) Tecnomatix Plant Simulation V2201: All versions (CVE-2024-23799; CVE-2024-23801; CVE-2024-23800; CVE-2024-23803) Tecnomatix Plant Simulation V2302: Versions prior to V2302.0006 (CVE-2024-23795; The following Siemens products are affected: Tecnomatix Plant Simulation V2201: Versions prior to V2201.0012 (CVE-2024-23795" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-08" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-5253" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2023-5253 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products with Nozomi Guardian/CMC are affected: RUGGEDCOM APE1808: All versions prior to 23.3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-09" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE SC-600 Family" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-44322; CVE-2023-49692; CVE-2023-44373; CVE-2023-44317; CVE-2023-44320; CVE-2023-49691; CVE-2023-44319; CVE-2023-44321" ;
    icsa:cweNumber "CWE-328; CWE-74; CWE-78; CWE-400; CWE-349; CWE-425; CWE-252" ;
    icsa:hasCVE cve-res:CVE-2023-44317,
        cve-res:CVE-2023-44319,
        cve-res:CVE-2023-44320,
        cve-res:CVE-2023-44321,
        cve-res:CVE-2023-44322,
        cve-res:CVE-2023-44373,
        cve-res:CVE-2023-49691,
        cve-res:CVE-2023-49692 ;
    icsa:hasCWE cwe-res:CWE-252,
        cwe-res:CWE-328,
        cwe-res:CWE-349,
        cwe-res:CWE-400,
        cwe-res:CWE-425,
        cwe-res:CWE-74,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE SC-600 Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2023-44322): Versions prior to V3.1 SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (CVE-2023-44321): All versions SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (CVE-2023-44317; CVE-2023-49692): Versions prior to V3.0.2 SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (CVE-2023-44319; CVE-2023-49692): Versions prior to V3.0.2 SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (CVE-2023-44319; CVE-2023-44322): Versions prior to V3.1 SCALANCE SC646-2C (6GK5646-2GS00-2AC2)(CVE-2023-44321): All versions.; CVE-2023-44322): Versions prior to V3.1 SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (CVE-2023-44321): All versions SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (CVE-2023-44317; CVE-2023-44322): Versions prior to V3.1 SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (CVE-2023-44321): All versions SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (CVE-2023-44317; CVE-2023-44373; CVE-2023-44320; CVE-2023-49692): Versions prior to V3.0.2 SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (CVE-2023-44319; CVE-2023-49692): Versions prior to V3.0.2 SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (CVE-2023-44319; CVE-2023-49692): Versions prior to V3.0.2 SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (CVE-2023-44319; CVE-2023-49691; CVE-2023-44322): Versions prior to V3.1 SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (CVE-2023-44321): All versions SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (CVE-2023-44317; CVE-2023-49692): Versions prior to V3.0.2 SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (CVE-2023-44319; CVE-2023-44322): Versions prior to V3.1 SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (CVE-2023-44321): All versions SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (CVE-2023-44317; The following Siemens products are affected: SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (CVE-2023-44317" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-10" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-24920; CVE-2024-24925; CVE-2024-24924; CVE-2024-24922; CVE-2024-24921; CVE-2024-24923" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-787; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2024-24920,
        cve-res:CVE-2024-24921,
        cve-res:CVE-2024-24922,
        cve-res:CVE-2024-24923,
        cve-res:CVE-2024-24924,
        cve-res:CVE-2024-24925 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-24921; The following Siemens products are affected: Simcenter Femap: Versions prior to V2401.0000 (CVE-2024-24920; CVE-2024-24925).; CVE-2024-24923) Simcenter Femap: Versions prior to V2306.0001 (CVE-2024-24923) Simcenter Femap: Versions prior to V2306.0000 (CVE-2024-24924; CVE-2024-24922" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-11" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE XCM-/XRM-300" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-23934; CVE-2023-22742; CVE-2022-41409; CVE-2023-25690; CVE-2023-24538; CVE-2021-4037; CVE-2023-4128; CVE-2022-4743; CVE-2022-36760; CVE-2022-46392; CVE-2023-31147; CVE-2023-1206; CVE-2021-36369; CVE-2023-1380; CVE-2023-3863; CVE-2023-1990; CVE-2023-40283; CVE-2023-0160; CVE-2022-3437; CVE-2022-41860; CVE-2023-35788; CVE-2023-0361; CVE-2023-25727; CVE-2023-36054; CVE-2022-1348; CVE-2022-48434; CVE-2023-26081; CVE-2022-41717; CVE-2023-0568; CVE-2023-32573; CVE-2023-33203; CVE-2022-34903; CVE-2022-37436; CVE-2023-3611; CVE-2022-45919; CVE-2022-41715; CVE-2020-10735; CVE-2023-0494; CVE-2023-0662; CVE-2022-1015; CVE-2023-29405; CVE-2022-39260; CVE-2023-3111; CVE-2023-1393; CVE-2023-3141; CVE-2022-29536; CVE-2023-29406; CVE-2023-21255; CVE-2022-32148; CVE-2022-44370; CVE-2023-1859; CVE-2023-28450; CVE-2021-45451; CVE-2022-41556; CVE-2022-26691; CVE-2023-2194; CVE-2022-4744; CVE-2023-36617; CVE-2021-3445; CVE-2023-1838; CVE-2022-36021; CVE-2022-3515; CVE-2023-1611; CVE-2023-27534; CVE-2023-2953; CVE-2023-29402; CVE-2022-29162; CVE-2023-3301; CVE-2023-3268; CVE-2022-23471; CVE-2022-36227; CVE-2022-37454; CVE-2022-23521; CVE-2022-28739; CVE-2022-2880; CVE-2023-30456; CVE-2022-41861; CVE-2022-4415; CVE-2022-46393; CVE-2023-22490; CVE-2023-34872; CVE-2023-25588; CVE-2023-4194; CVE-2023-30086; CVE-2022-39189; CVE-2022-41862; CVE-2023-30772; CVE-2023-35001; CVE-2022-37797; CVE-2021-3638; CVE-2023-22745; CVE-2023-35789; CVE-2023-3212; CVE-2023-26965; CVE-2023-37920; CVE-2023-1670; CVE-2023-0590; CVE-2023-29409; CVE-2023-25153; CVE-2023-3090; CVE-2023-31130; CVE-2023-3776; CVE-2023-23454; CVE-2022-45061; CVE-2022-28737; CVE-2022-29187; CVE-2023-29404; CVE-2023-35824; CVE-2023-28466; CVE-2023-1855; CVE-2023-28487; CVE-2023-31489; CVE-2022-4900; CVE-2022-24834; CVE-2023-31124; CVE-2022-29154; CVE-2022-41903; CVE-2023-27535; CVE-2023-23931; CVE-2022-48303; CVE-2022-45142; CVE-2023-31436; CVE-2023-25155; CVE-2023-36664; CVE-2023-2861; CVE-2022-4904; CVE-2022-41723; CVE-2023-27536; CVE-2006-20001; CVE-2023-3006; CVE-2022-3294; CVE-2023-20593; CVE-2023-38559; CVE-2021-43666; CVE-2023-23946; CVE-2023-25193; CVE-2023-34256; CVE-2023-3390; CVE-2022-47629; CVE-2023-2269; CVE-2023-34969; CVE-2023-35828; CVE-2023-27522; CVE-2023-0330; CVE-2023-32067; CVE-2023-0567; CVE-2023-3316; CVE-2022-38725; CVE-2023-32233; CVE-2023-35823; CVE-2023-2124; CVE-2022-2586; CVE-2022-42919; CVE-2023-2002; CVE-2022-28738; CVE-2023-31084; CVE-2023-3247; CVE-2023-28486; CVE-2022-34918; CVE-2023-1989" ;
    icsa:cweNumber "CWE-94; CWE-415; CWE-59; CWE-416; CWE-122; CWE-276; CWE-79; CWE-704; CWE-311; CWE-347; CWE-476; CWE-400; CWE-754; CWE-407; CWE-22; CWE-444; CWE-668; CWE-770; CWE-1333; CWE-401; CWE-330; CWE-436; CWE-124; CWE-20; CWE-190; CWE-74; CWE-843; CWE-362; CWE-1284; CWE-522; CWE-252; CWE-212; CWE-113; CWE-120; CWE-824; CWE-787; CWE-284; CWE-131; CWE-908; CWE-78; CWE-116; CWE-345; CWE-327; CWE-203; CWE-863; CWE-732; CWE-287; CWE-282; CWE-667; CWE-697; CWE-369; CWE-125; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2006-20001,
        cve-res:CVE-2020-10735,
        cve-res:CVE-2021-3445,
        cve-res:CVE-2021-36369,
        cve-res:CVE-2021-3638,
        cve-res:CVE-2021-4037,
        cve-res:CVE-2021-43666,
        cve-res:CVE-2021-45451,
        cve-res:CVE-2022-1015,
        cve-res:CVE-2022-1348,
        cve-res:CVE-2022-23471,
        cve-res:CVE-2022-23521,
        cve-res:CVE-2022-24834,
        cve-res:CVE-2022-2586,
        cve-res:CVE-2022-26691,
        cve-res:CVE-2022-28737,
        cve-res:CVE-2022-28738,
        cve-res:CVE-2022-28739,
        cve-res:CVE-2022-2880,
        cve-res:CVE-2022-29154,
        cve-res:CVE-2022-29162,
        cve-res:CVE-2022-29187,
        cve-res:CVE-2022-29536,
        cve-res:CVE-2022-32148,
        cve-res:CVE-2022-3294,
        cve-res:CVE-2022-3437,
        cve-res:CVE-2022-34903,
        cve-res:CVE-2022-34918,
        cve-res:CVE-2022-3515,
        cve-res:CVE-2022-36021,
        cve-res:CVE-2022-36227,
        cve-res:CVE-2022-36760,
        cve-res:CVE-2022-37436,
        cve-res:CVE-2022-37454,
        cve-res:CVE-2022-37797,
        cve-res:CVE-2022-38725,
        cve-res:CVE-2022-39189,
        cve-res:CVE-2022-39260,
        cve-res:CVE-2022-41409,
        cve-res:CVE-2022-41556,
        cve-res:CVE-2022-41715,
        cve-res:CVE-2022-41717,
        cve-res:CVE-2022-41723,
        cve-res:CVE-2022-41860,
        cve-res:CVE-2022-41861,
        cve-res:CVE-2022-41862,
        cve-res:CVE-2022-41903,
        cve-res:CVE-2022-42919,
        cve-res:CVE-2022-4415,
        cve-res:CVE-2022-44370,
        cve-res:CVE-2022-45061,
        cve-res:CVE-2022-45142,
        cve-res:CVE-2022-45919,
        cve-res:CVE-2022-46392,
        cve-res:CVE-2022-46393,
        cve-res:CVE-2022-4743,
        cve-res:CVE-2022-4744,
        cve-res:CVE-2022-47629,
        cve-res:CVE-2022-48303,
        cve-res:CVE-2022-48434,
        cve-res:CVE-2022-4900,
        cve-res:CVE-2022-4904,
        cve-res:CVE-2023-0160,
        cve-res:CVE-2023-0330,
        cve-res:CVE-2023-0361,
        cve-res:CVE-2023-0494,
        cve-res:CVE-2023-0567,
        cve-res:CVE-2023-0568,
        cve-res:CVE-2023-0590,
        cve-res:CVE-2023-0662,
        cve-res:CVE-2023-1206,
        cve-res:CVE-2023-1380,
        cve-res:CVE-2023-1393,
        cve-res:CVE-2023-1611,
        cve-res:CVE-2023-1670,
        cve-res:CVE-2023-1838,
        cve-res:CVE-2023-1855,
        cve-res:CVE-2023-1859,
        cve-res:CVE-2023-1989,
        cve-res:CVE-2023-1990,
        cve-res:CVE-2023-2002,
        cve-res:CVE-2023-20593,
        cve-res:CVE-2023-2124,
        cve-res:CVE-2023-21255,
        cve-res:CVE-2023-2194,
        cve-res:CVE-2023-22490,
        cve-res:CVE-2023-2269,
        cve-res:CVE-2023-22742,
        cve-res:CVE-2023-22745,
        cve-res:CVE-2023-23454,
        cve-res:CVE-2023-23931,
        cve-res:CVE-2023-23934,
        cve-res:CVE-2023-23946,
        cve-res:CVE-2023-24538,
        cve-res:CVE-2023-25153,
        cve-res:CVE-2023-25155,
        cve-res:CVE-2023-25193,
        cve-res:CVE-2023-25588,
        cve-res:CVE-2023-25690,
        cve-res:CVE-2023-25727,
        cve-res:CVE-2023-26081,
        cve-res:CVE-2023-26965,
        cve-res:CVE-2023-27522,
        cve-res:CVE-2023-27534,
        cve-res:CVE-2023-27535,
        cve-res:CVE-2023-27536,
        cve-res:CVE-2023-28450,
        cve-res:CVE-2023-28466,
        cve-res:CVE-2023-28486,
        cve-res:CVE-2023-28487,
        cve-res:CVE-2023-2861,
        cve-res:CVE-2023-29402,
        cve-res:CVE-2023-29404,
        cve-res:CVE-2023-29405,
        cve-res:CVE-2023-29406,
        cve-res:CVE-2023-29409,
        cve-res:CVE-2023-2953,
        cve-res:CVE-2023-3006,
        cve-res:CVE-2023-30086,
        cve-res:CVE-2023-30456,
        cve-res:CVE-2023-30772,
        cve-res:CVE-2023-3090,
        cve-res:CVE-2023-31084,
        cve-res:CVE-2023-3111,
        cve-res:CVE-2023-31124,
        cve-res:CVE-2023-31130,
        cve-res:CVE-2023-31147,
        cve-res:CVE-2023-3141,
        cve-res:CVE-2023-31436,
        cve-res:CVE-2023-31489,
        cve-res:CVE-2023-32067,
        cve-res:CVE-2023-3212,
        cve-res:CVE-2023-32233,
        cve-res:CVE-2023-3247,
        cve-res:CVE-2023-32573,
        cve-res:CVE-2023-3268,
        cve-res:CVE-2023-3301,
        cve-res:CVE-2023-3316,
        cve-res:CVE-2023-33203,
        cve-res:CVE-2023-3390,
        cve-res:CVE-2023-34256,
        cve-res:CVE-2023-34872,
        cve-res:CVE-2023-34969,
        cve-res:CVE-2023-35001,
        cve-res:CVE-2023-35788,
        cve-res:CVE-2023-35789,
        cve-res:CVE-2023-35823,
        cve-res:CVE-2023-35824,
        cve-res:CVE-2023-35828,
        cve-res:CVE-2023-36054,
        cve-res:CVE-2023-3611,
        cve-res:CVE-2023-36617,
        cve-res:CVE-2023-36664,
        cve-res:CVE-2023-3776,
        cve-res:CVE-2023-37920,
        cve-res:CVE-2023-38559,
        cve-res:CVE-2023-3863,
        cve-res:CVE-2023-40283,
        cve-res:CVE-2023-4128,
        cve-res:CVE-2023-4194 ;
    icsa:hasCWE cwe-res:CWE-113,
        cwe-res:CWE-116,
        cwe-res:CWE-120,
        cwe-res:CWE-122,
        cwe-res:CWE-124,
        cwe-res:CWE-125,
        cwe-res:CWE-1284,
        cwe-res:CWE-131,
        cwe-res:CWE-1333,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-203,
        cwe-res:CWE-212,
        cwe-res:CWE-22,
        cwe-res:CWE-252,
        cwe-res:CWE-276,
        cwe-res:CWE-282,
        cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-311,
        cwe-res:CWE-327,
        cwe-res:CWE-330,
        cwe-res:CWE-345,
        cwe-res:CWE-347,
        cwe-res:CWE-354,
        cwe-res:CWE-362,
        cwe-res:CWE-369,
        cwe-res:CWE-400,
        cwe-res:CWE-401,
        cwe-res:CWE-407,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-436,
        cwe-res:CWE-444,
        cwe-res:CWE-476,
        cwe-res:CWE-522,
        cwe-res:CWE-59,
        cwe-res:CWE-667,
        cwe-res:CWE-668,
        cwe-res:CWE-697,
        cwe-res:CWE-704,
        cwe-res:CWE-732,
        cwe-res:CWE-74,
        cwe-res:CWE-754,
        cwe-res:CWE-770,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-79,
        cwe-res:CWE-824,
        cwe-res:CWE-843,
        cwe-res:CWE-863,
        cwe-res:CWE-908,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE XCM-/XRM-300" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "12xFO) (6GK5334-3TS01-3AR3): versions prior to V2.4.; are affected: SCALANCE XCH328 (6GK5328-4TS01-2EC2): versions prior to V2.4 SCALANCE XCM324 (6GK5324-8TS01-2AC2): versions prior to V2.4 SCALANCE XCM328 (6GK5328-4TS01-2AC2): versions prior to V2.4 SCALANCE XCM332 (6GK5332-0GA01-2AC2): versions prior to V2.4 SCALANCE XRH334 (24 V DC; 8xFO; 12xFO) (6GK5334-3TS01-2AR3): versions prior to V2.4 SCALANCE XRM334 (230 V AC; Siemens reports that the following versions of SCALANCE XCM-/XRM-300; 8xFO) (6GK5334-2TS01-4AR3): versions prior to V2.4 SCALANCE XRM334 (2x230 V AC; 8xFO) (6GK5334-2TS01-2AR3): versions prior to V2.4 SCALANCE XRM334 (24 V DC; 12xFO) (6GK5334-3TS01-4AR3): versions prior to V2.4 SCALANCE XRM334 (24 V DC; 8xFO) (6GK5334-2TS01-3AR3): versions prior to V2.4 SCALANCE XRM334 (230 V AC; switches used to connect industrial components; CC) (6GK5334-2TS01-2ER3): versions prior to V2.4 SCALANCE XRM334 (2x230 V AC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-12" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC, OpenPCS" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-48363; CVE-2023-48364" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2023-48363,
        cve-res:CVE-2023-48364 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, OpenPCS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: OpenPCS 7 V9.1: All versions SIMATIC BATCH V9.1: All versions SIMATIC PCS 7 V9.1: All versions SIMATIC Route Control V9.1: All versions SIMATIC WinCC Runtime Professional V18: All versions SIMATIC WinCC Runtime Professional V19: All versions SIMATIC WinCC V7.4: All versions SIMATIC WinCC V7.5: All versions prior to V7.5 SP2 Update 15 SIMATIC WinCC V8.0: All versions prior V8.0 SP4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-13" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-49125; CVE-2024-22043" ;
    icsa:cweNumber "CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2023-49125,
        cve-res:CVE-2024-22043 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: Parasolid V35.0: all versions prior to V35.0.263 Parasolid V35.0: all versions prior to V35.0.251 Parasolid V35.1: all versions prior to V35.1.252 Parasolid V35.1: all versions prior to V35.1.170 Parasolid V36.0: all versions prior to V36.0.198." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-14" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Polarion ALM" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-23813; CVE-2023-50236" ;
    icsa:cweNumber "CWE-276; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2023-50236,
        cve-res:CVE-2024-23813 ;
    icsa:hasCWE cwe-res:CWE-276,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Polarion ALM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Polarion ALM: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-15" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-23810; CVE-2023-28319; CVE-2023-32005; CVE-2023-28709; CVE-2023-25690; CVE-2023-27536; CVE-2023-28321; CVE-2023-39418; CVE-2023-1255; CVE-2023-2454; CVE-2023-30584; CVE-2023-31147; CVE-2023-2975; CVE-2023-34035; CVE-2023-3446; CVE-2024-23812; CVE-2023-41080; CVE-2023-30590; CVE-2023-32559; CVE-2023-2455; CVE-2022-4450; CVE-2023-32003; CVE-2023-30585; CVE-2023-32558; CVE-2022-4304; CVE-2023-0217; CVE-2023-27522; CVE-2023-32004; CVE-2023-30589; CVE-2023-38545; CVE-2023-0216; CVE-2023-32002; CVE-2023-3817; CVE-2023-46120; CVE-2023-28322; CVE-2023-32067; CVE-2023-2650; CVE-2023-30587; CVE-2023-30583; CVE-2023-38199; CVE-2023-39417; CVE-2023-38039; CVE-2023-31130; CVE-2023-27538; CVE-2023-30581; CVE-2023-0215; CVE-2023-38546; CVE-2023-30586; CVE-2023-32006; CVE-2023-27534; CVE-2023-30588; CVE-2023-27533; CVE-2023-0401; CVE-2023-30582; CVE-2023-35945; CVE-2023-31124; CVE-2023-27535; CVE-2023-28320; CVE-2023-27537; CVE-2023-0286; CVE-2024-23811; CVE-2022-4203" ;
    icsa:cweNumber "CWE-434; CWE-89; CWE-415; CWE-416; CWE-122; CWE-311; CWE-476; CWE-400; CWE-22; CWE-444; CWE-770; CWE-1333; CWE-326; CWE-330; CWE-124; CWE-20; CWE-74; CWE-362; CWE-843; CWE-193; CWE-601; CWE-834; CWE-78; CWE-863; CWE-732; CWE-862; CWE-287; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-4203,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0216,
        cve-res:CVE-2023-0217,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0401,
        cve-res:CVE-2023-1255,
        cve-res:CVE-2023-2454,
        cve-res:CVE-2023-2455,
        cve-res:CVE-2023-25690,
        cve-res:CVE-2023-2650,
        cve-res:CVE-2023-27522,
        cve-res:CVE-2023-27533,
        cve-res:CVE-2023-27534,
        cve-res:CVE-2023-27535,
        cve-res:CVE-2023-27536,
        cve-res:CVE-2023-27537,
        cve-res:CVE-2023-27538,
        cve-res:CVE-2023-28319,
        cve-res:CVE-2023-28320,
        cve-res:CVE-2023-28321,
        cve-res:CVE-2023-28322,
        cve-res:CVE-2023-28709,
        cve-res:CVE-2023-2975,
        cve-res:CVE-2023-30581,
        cve-res:CVE-2023-30582,
        cve-res:CVE-2023-30583,
        cve-res:CVE-2023-30584,
        cve-res:CVE-2023-30585,
        cve-res:CVE-2023-30586,
        cve-res:CVE-2023-30587,
        cve-res:CVE-2023-30588,
        cve-res:CVE-2023-30589,
        cve-res:CVE-2023-30590,
        cve-res:CVE-2023-31124,
        cve-res:CVE-2023-31130,
        cve-res:CVE-2023-31147,
        cve-res:CVE-2023-32002,
        cve-res:CVE-2023-32003,
        cve-res:CVE-2023-32004,
        cve-res:CVE-2023-32005,
        cve-res:CVE-2023-32006,
        cve-res:CVE-2023-32067,
        cve-res:CVE-2023-32558,
        cve-res:CVE-2023-32559,
        cve-res:CVE-2023-34035,
        cve-res:CVE-2023-3446,
        cve-res:CVE-2023-35945,
        cve-res:CVE-2023-38039,
        cve-res:CVE-2023-3817,
        cve-res:CVE-2023-38199,
        cve-res:CVE-2023-38545,
        cve-res:CVE-2023-38546,
        cve-res:CVE-2023-39417,
        cve-res:CVE-2023-39418,
        cve-res:CVE-2023-41080,
        cve-res:CVE-2023-46120,
        cve-res:CVE-2024-23810,
        cve-res:CVE-2024-23811,
        cve-res:CVE-2024-23812 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-124,
        cwe-res:CWE-125,
        cwe-res:CWE-1333,
        cwe-res:CWE-193,
        cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-287,
        cwe-res:CWE-295,
        cwe-res:CWE-311,
        cwe-res:CWE-326,
        cwe-res:CWE-330,
        cwe-res:CWE-362,
        cwe-res:CWE-400,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-434,
        cwe-res:CWE-444,
        cwe-res:CWE-476,
        cwe-res:CWE-601,
        cwe-res:CWE-732,
        cwe-res:CWE-74,
        cwe-res:CWE-770,
        cwe-res:CWE-78,
        cwe-res:CWE-834,
        cwe-res:CWE-843,
        cwe-res:CWE-862,
        cwe-res:CWE-863,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following network management systems are affected: SINEC NMS: All versions prior to V2.0 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-046-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-046-16" ;
    dcterms:issued "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Service Platform" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-21915" ;
    icsa:cweNumber "CWE-279" ;
    icsa:hasCVE cve-res:CVE-2024-21915 ;
    icsa:hasCWE cwe-res:CWE-279 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Service Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of FactoryTalk Service Platform are affected: FactoryTalk Service Platform: versions prior to v2.74." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-046-16" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-051-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-051-01" ;
    dcterms:issued "2024-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Commend WS203VICM" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-21767; CVE-2024-22182; CVE-2024-23492" ;
    icsa:cweNumber "CWE-284; CWE-88; CWE-261" ;
    icsa:hasCVE cve-res:CVE-2024-21767,
        cve-res:CVE-2024-22182,
        cve-res:CVE-2024-23492 ;
    icsa:hasCWE cwe-res:CWE-261,
        cwe-res:CWE-284,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WS203VICM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Commend reports that the following versions of WS203VICM video door station are affected: WS203VICM: version 1.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-051-01" ;
    icsa:vendor "Commend" ;
    icsa:year 2024 .

icsa-res:ICSA-24-051-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-051-02" ;
    dcterms:issued "2024-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ethercat Zeek Plugin" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Multiple Critical Sectors" ;
    icsa:cveNumber "CVE-2023-7244; CVE-2023-7242; CVE-2023-7243" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-7242,
        cve-res:CVE-2023-7243,
        cve-res:CVE-2023-7244 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a plugin for Zeek; The following GitHub commits (versions) of ICSNPP - Ethercat Plugin; are affected: Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin: versions d78dda6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-051-02" ;
    icsa:vendor "CISA" ;
    icsa:year 2024 .

icsa-res:ICSA-24-051-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-051-03" ;
    dcterms:issued "2024-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Electrical Discharge Machines (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-21554" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-21554 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Electrical discharge machines" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MP Series MP1200 D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MP Series MP2400 D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MP Series MP4800 D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MX Series MX900 D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MP Series MP2400 D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Sinker EDM SV-P Series SV12P D-CUBES Series Standard system BRD-M60W000: versions A12 and prior; without Special Modification Patch BRD-C62W003-A0 installed Sinker EDM SG Series SG28 D-CUBES Series Standard system BRD-M60W000: versions A12 and prior; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MV Series MV2400R D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Sinker EDM SV-P Series SV8P D-CUBES Series Special system BRD-M63W000 to W022: all versions Sinker EDM SV-P Series SV12P D-CUBES Series Special system BRD-M63W000 to W022: all versions Sinker EDM SG Series SG8 D-CUBES Series Standard system BRD-M60W000: versions A12 and prior; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MV Series MV1200S D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MV Series MV2400S D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MV Series MV4800S D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MV Series MV1200R D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MV Series MV2400R D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MV Series MV4800R D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MP Series MP1200 D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MX Series MX2400 D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; Mitsubishi Electric reports that the following electrical discharge machines are affected by this vulnerability in Microsoft Message Queuing service: Wire-cut EDM MV Series MV1200S D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MP Series MP4800 D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MV Series MV4800S D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Sinker EDM SG Series SG12 D-CUBES Series Standard system BRD-M60W000: versions A12 and prior; without Special Modification Patch BRD-C62W003-A0 installed Sinker EDM SG Series SG8 D-CUBES Series Special system BRD-BRD-M63W000 to W022: all versions Sinker EDM SG Series SG12 D-CUBES Series Special system BRD-M63W000 to W022: all versions Sinker EDM SG Series SG28 D-CUBES Series Special system BRD-M63W000 to W022: all versions.; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MV Series MV2400S D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MV Series MV4800R D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MV Series MV1200R D-CUBES Series Standard system BRD-B60W000: versions B13 and prior; without Special Modification Patch BRD-C62W003-A0 installed Wire-cut EDM MX Series MX900 D-CUBES Series Special system BRD-B63W000 to W036: all versions Wire-cut EDM MX Series MX2400 D-CUBES Series Special system BRD-B63W000 to W036: all versions Sinker EDM SV-P Series SV8P D-CUBES Series Standard system BRD-M60W000: versions A12 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-051-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-053-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-053-01" ;
    dcterms:issued "2024-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-B DOPSoft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-1595" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2024-1595 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft-B DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: CNCSoft-B v1.0.0.4 DOPSoft: versions prior to v4.0.0.82." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-053-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-058-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-058-01" ;
    dcterms:issued "2024-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Multiple Factory Automation Products (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-7033" ;
    icsa:cweNumber "CWE-410" ;
    icsa:hasCVE cve-res:CVE-2023-7033 ;
    icsa:hasCWE cwe-res:CWE-410 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple Factory Automation products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mitsubishi Electric Factory Automation products are affected: MELSEC iQ-R series CPU module R00CPU: All Versions MELSEC iQ-R series CPU module R01CPU: All Versions MELSEC iQ-R series CPU module R02CPU: All Versions MELSEC iQ-R series CPU module R04 (EN)CPU: All Versions MELSEC iQ-R series CPU module R08 (EN)CPU: All Versions MELSEC iQ-R series CPU module R16 (EN)CPU: All Versions MELSEC iQ-R series CPU module R32(EN)CPU: All Versions MELSEC iQ-R series CPU module R120(EN)CPU: All Versions MELSEC iQ-R series CPU module R08SFCPU: All Versions MELSEC iQ-R series CPU module R16SFCPU: All Versions MELSEC iQ-R series CPU module R32SFCPU: All Versions MELSEC iQ-R series CPU module R120SFCPU: All Versions MELSEC iQ-R series CPU module R08PCPU: All Versions MELSEC iQ-R series CPU module R16PCPU: All Versions MELSEC iQ-R series CPU module R32PCPU: All Versions MELSEC iQ-R series CPU module R120PCPU: All Versions MELSEC iQ-R series CPU module R08PSFCPU: All Versions MELSEC iQ-R series CPU module R16PSFCPU: All Versions MELSEC iQ-R series CPU module R32PSFCPU: All Versions MELSEC iQ-R series CPU module R120PSFCPU: All Versions MELSEC iQ-L series CPU module L04HCPU(sold in limited regions): All Versions MELSEC iQ-L series CPU module L08HCPU(sold in limited regions): All Versions MELSEC iQ-L series CPU module L16HCPU(sold in limited regions): All Versions MELSEC iQ-L series CPU module L32HCPU(sold in limited regions): All Versions MELSEC iQ-R Ethernet Interface Module RJ71EN71: All Versions MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-T2: All Versions MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-SX: All Versions MELSEC iQ-R CC-Link IE TSN Master/Local Module RJ71GN11-EIP: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2B1-32D: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2B1-32T: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2B1-32TE: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DT: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2B1-32DTE: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2B1-16D: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2B1-16T: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2B1-16TE: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2S1-32D: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2S1-32T: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2S1-32TE: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DT: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2S1-32DTE: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2S1-16D: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2S1-16T: All Versions CC-Link IE TSN Remote I/O Module NZ2GN2S1-16TE: All Versions CC-Link IE TSN Remote I/O Module NZ2GNCF1-32D: All Versions CC-Link IE TSN Remote I/O Module NZ2GNCF1-32T: All Versions CC-Link IE TSN Remote I/O Module NZ2GNCE3-32D: All Versions CC-Link IE TSN Remote I/O Module NZ2GNCE3-32DT: All Versions CC-Link IE TSN Remote I/O Module NZ2GN12A4-16D: All Versions CC-Link IE TSN Remote I/O Module NZ2GN12A4-16DE: All Versions CC-Link IE TSN Remote I/O Module NZ2GN12A2-16T: All Versions CC-Link IE TSN Remote I/O Module NZ2GN12A2-16TE: All Versions CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DT: All Versions CC-Link IE TSN Remote I/O Module NZ2GN12A42-16DTE: All Versions CC-Link IE TSN Analog-Digital Converter Module NZ2GN2S-60AD4: All Versions CC-Link IE TSN Analog-Digital Converter Module NZ2GN2B-60AD4: All Versions CC-Link IE TSN Digital-Analog Converter Module NZ2GN2S-60DA4: All Versions CC-Link IE TSN Digital-Analog Converter Module NZ2GN2B-60DA4: All Versions CC-Link IE TSN - CC-Link IE Field Network Bridge Module NZ2GN-GFB: All Versions CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL: All Versions CC-Link IE TSN FPGA Module NZ2GN2S-D41P01: All Versions CC-Link IE TSN FPGA Module NZ2GN2S-D41D01: All Versions CC-Link IE TSN FPGA Module NZ2GN2S- D41PD02: All Versions CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300: All Versions CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60: All Versions MELSEC iQ-R Motion Module RD78G4: All Versions MELSEC iQ-R Motion Module RD78G8: All Versions MELSEC iQ-R Motion Module RD78G16: All Versions MELSEC iQ-R Motion Module RD78G32: All Versions MELSEC iQ-R Motion Module RD78G64: All Versions MELSEC iQ-R Motion Module RD78GHV: All Versions MELSEC iQ-R Motion Module RD78GHW: All Versions MELSEC iQ-L Motion Module LD78G4(sold in limited regions): All Versions MELSEC iQ-L Motion Module LD78G16(sold in limited regions): All Versions MELSEC iQ-F FX5 Motion Module FX5-40SSC-G: All Versions MELSEC iQ-F FX5 Motion Module FX5-80SSC-G: All Versions MELSEC iQ-F Series CPU module FX5U-32MT/ES: All Versions MELSEC iQ-F Series CPU module FX5U-32MT/DS: All Versions MELSEC iQ-F Series CPU module FX5U-32MT/ESS: All Versions MELSEC iQ-F Series CPU module FX5U-32MT/DSS: All Versions MELSEC iQ-F Series CPU module FX5U-32MR/ES: All Versions MELSEC iQ-F Series CPU module FX5U-32MR/DS: All Versions MELSEC iQ-F Series CPU module FX5U-64MT/ES: All Versions MELSEC iQ-F Series CPU module FX5U-64MT/DS: All Versions MELSEC iQ-F Series CPU module FX5U-64MT/ESS: All Versions MELSEC iQ-F Series CPU module FX5U-64MT/DSS: All Versions MELSEC iQ-F Series CPU module FX5U-64MR/ES: All Versions MELSEC iQ-F Series CPU module FX5U-64MR/DS: All Versions MELSEC iQ-F Series CPU module FX5U-80MT/ES: All Versions MELSEC iQ-F Series CPU module FX5U-80MT/DS: All Versions MELSEC iQ-F Series CPU module FX5U-80MT/ESS: All Versions MELSEC iQ-F Series CPU module FX5U-80MT/DSS: All Versions MELSEC iQ-F Series CPU module FX5U-80MR/ES: All Versions MELSEC iQ-F Series CPU module FX5U-80MR/DS: All Versions MELSEC iQ-F Series CPU module FX5UC-32MT/D: All Versions MELSEC iQ-F Series CPU module FX5UC-32MT/DSS: All Versions MELSEC iQ-F Series CPU module FX5UC-64MT/D: All Versions MELSEC iQ-F Series CPU module FX5UC-64MT/DSS: All Versions MELSEC iQ-F Series CPU module FX5UC-96MT/D: All Versions MELSEC iQ-F Series CPU module FX5UC-96MT/DSS: All Versions MELSEC iQ-F Series CPU module FX5UC-32MT/DS-TS: All Versions MELSEC iQ-F Series CPU module FX5UC-32MT/DSS-TS: All Versions MELSEC iQ-F Series CPU module FX5UC-32MR/DS-TS: All Versions MELSEC iQ-F Series CPU module FX5UJ-24MT/ES: All Versions MELSEC iQ-F Series CPU module FX5UJ-24MT/DS: All Versions MELSEC iQ-F Series CPU module FX5UJ-24MT/ESS: All Versions MELSEC iQ-F Series CPU module FX5UJ-24MT/DSS: All Versions MELSEC iQ-F Series CPU module FX5UJ-24MR/ES: All Versions MELSEC iQ-F Series CPU module FX5UJ-24MR/DS: All Versions MELSEC iQ-F Series CPU module FX5UJ-40MT/ES: All Versions MELSEC iQ-F Series CPU module FX5UJ-40MT/DS: All Versions MELSEC iQ-F Series CPU module FX5UJ-40MT/ESS: All Versions MELSEC iQ-F Series CPU module FX5UJ-40MT/DSS: All Versions MELSEC iQ-F Series CPU module FX5UJ-40MR/ES: All Versions MELSEC iQ-F Series CPU module FX5UJ-40MR/DS: All Versions MELSEC iQ-F Series CPU module FX5UJ-60MT/ES: All Versions MELSEC iQ-F Series CPU module FX5UJ-60MT/DS: All Versions MELSEC iQ-F Series CPU module FX5UJ-60MT/ESS: All Versions MELSEC iQ-F Series CPU module FX5UJ-60MT/DSS: All Versions MELSEC iQ-F Series CPU module FX5UJ-60MR/ES: All Versions MELSEC iQ-F Series CPU module FX5UJ-60MR/DS: All Versions MELSEC iQ-F Series CPU module FX5UJ-24MT/ES-A (sold in limited regions): All Versions MELSEC iQ-F Series CPU module FX5UJ-24MR/ES-A (sold in limited regions): All Versions MELSEC iQ-F Series CPU module FX5UJ-40MT/ES-A (sold in limited regions): All Versions MELSEC iQ-F Series CPU module FX5UJ-40MR/ES-A (sold in limited regions): All Versions MELSEC iQ-F Series CPU module FX5UJ-60MT/ES-A (sold in limited regions): All Versions MELSEC iQ-F Series CPU module FX5UJ-60MR/ES-A (sold in limited regions): All Versions MELSEC iQ-F Series CPU module FX5S-30MT/ES: All Versions MELSEC iQ-F Series CPU module FX5S-30MT/ESS: All Versions MELSEC iQ-F Series CPU module FX5S-30MR/ES: All Versions MELSEC iQ-F Series CPU module FX5S-40MT/ES: All Versions MELSEC iQ-F Series CPU module FX5S-40MT/ESS: All Versions MELSEC iQ-F Series CPU module FX5S-40MR/ES: All Versions MELSEC iQ-F Series CPU module FX5S-60MT/ES: All Versions MELSEC iQ-F Series CPU module FX5S-60MT/ESS: All Versions MELSEC iQ-F Series CPU module FX5S-60MR/ES: All Versions MELSEC iQ-F Series CPU module FX5S-80MT/ES (sold in limited regions): All versions MELSEC iQ-F Series CPU module FX5S-80MT/ESS (sold in limited regions): All versions MELSEC iQ-F Series CPU module FX5S-80MR/ES (sold in limited regions): All versions MELSEC iQ-F Series Ethernet module FX5-ENET: All Versions MELSEC iQ-F Series Ethernet/IP module FX5-ENET/IP: All Versions MELSEC iQ-F Series OPC UA Module FX5-OPC: All Versions MELSEC iQ-F Series CC-Link IE TSN master/local module FX5-CCLGN-MS: All Versions GOT2000 Series CC-Link IE TSN Communication Unit GT25-J71GN13-T2: All Versions FR-A800-E series inverters FR-A800-E series: All Versions FR-F800-E series inverters FR-F800-E series: All Versions FR-E800-E series inverters FR-E800-E series: All Versions INVERTER CC-Link IE TSN Plug-in option FR-A8NCG: All Versions INVERTER CC-Link IE TSN Safety Plug-in option FR-A8NCG-S: All Versions INVERTER CC-Link IE TSN communication function built-in type FR-A800-GN: All Versions MR-J5 series AC Servos MELSERVO MR-J5-A series: All Versions MR-J5 series AC Servos MELSERVO MR-J5-G series: All Versions MR-J5 series AC Servos MELSERVO MR-J5W-G series: All Versions MR-J5 series AC Servos MELSERVO MR-J5D-G series: All Versions MR-JET series AC Servos MELSERVO MR-JET-G series (sold in limited regions): All Versions MR-MD333G series AC Servos MELSERVO MR-MD333G series: All Versions MR-JE series AC Servos MELSERVO MR-JE-C series (sold in limited regions): All Versions MELSERVO-J4 AC Servos MELSERVO MR-J4-GF series: Version A4 or later Embedded Type Servo System Controller MR-EM441G series: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-058-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-060-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-060-01" ;
    dcterms:issued "2024-02-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-B" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-1941" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-1941 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft-B" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: CNCSoft-B: Versions 1.0.0.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-060-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-065-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-065-01" ;
    dcterms:issued "2024-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nice Linear eMerge E3-Series" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2019-7253; CVE-2019-7255; CVE-2019-7258; CVE-2019-7256; CVE-2019-7254; CVE-2019-7257; CVE-2019-7259; CVE-2019-7265; CVE-2019-7260; CVE-2019-7264; CVE-2019-7262; CVE-2019-7261" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-352; CWE-200; CWE-79; CWE-787; CWE-78; CWE-798; CWE-522; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2019-7253,
        cve-res:CVE-2019-7254,
        cve-res:CVE-2019-7255,
        cve-res:CVE-2019-7256,
        cve-res:CVE-2019-7257,
        cve-res:CVE-2019-7258,
        cve-res:CVE-2019-7259,
        cve-res:CVE-2019-7260,
        cve-res:CVE-2019-7261,
        cve-res:CVE-2019-7262,
        cve-res:CVE-2019-7264,
        cve-res:CVE-2019-7265 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-352,
        cwe-res:CWE-434,
        cwe-res:CWE-522,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-79,
        cwe-res:CWE-798,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Linear eMerge E3-Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Nice Linear eMerge E3-Series are affected: Linear eMerge E3-Series: versions 1.00-06 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-065-01" ;
    icsa:vendor "Nice" ;
    icsa:year 2024 .

icsa-res:ICSA-24-067-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-067-01" ;
    dcterms:issued "2024-03-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Chirp Systems Chirp Access (Update C)" ;
    icsa:CVSSScore "2.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-2197" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2024-2197 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Chirp Access" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Chirp Systems products are affected when deployed in non-networked beacon configurations: Chirp Access app (Android and iOS): All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-067-01" ;
    icsa:vendor "Chirp Systems" ;
    icsa:year 2024 .

icsa-res:ICSA-24-072-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-072-01" ;
    dcterms:issued "2024-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Design" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Information Technology; Healthcare and Public Health; Critical Manufacturing; Transportation Systems; Energy; Chemical" ;
    icsa:cveNumber "CVE-2024-2229" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-2229 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Design" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: EcoStruxure Power Design - Ecodial NL: All Versions EcoStruxure Power Design - Ecodial INT: All Versions EcoStruxure Power Design - Ecodial FR: All Versions.; an equipment management platform; The following versions of Schneider Electric - EcoStruxure Power Design - Ecodial" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-072-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-01" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SENTRON 7KM PAC3x20" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-21483" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2024-21483 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SENTRON 7KM PAC3120, SENTRON 7KM PAC3220" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0): Versions V3.2.3 and after but before V3.3.0 only when manufactured between LQN231003... and LQN231215... (with LQNYYMMDD...) SENTRON 7KM PAC3120 DC (7KM3120-1BA01-1EA0): Versions V3.2.3 and after but before V3.3.0 only when manufactured between LQN231003... and LQN231215... (with LQNYYMMDD...) SENTRON 7KM PAC3220 AC/DC (7KM3220-0BA01-1DA0): Versions V3.2.3 and after but before V3.3.0 only when manufactured between LQN231003... and LQN231215... (with LQNYYMMDD...) SENTRON 7KM PAC3220 DC (7KM3220-1BA01-1EA0): Versions V3.2.3 and after but before V3.3.0 only when manufactured between LQN231003... and LQN231215... (with LQNYYMMDD...).; power measuring devices; The following versions of Siemens SENTRON 7KM PAC3120 and PAC3220" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-02" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-49125" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-49125 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a product development tool; are affected: Solid Edge: Versions prior to V223.0.11.; The following versions of Siemens Solid Edge" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-03" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-23064; CVE-2022-32257" ;
    icsa:cweNumber "CWE-284; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-23064,
        cve-res:CVE-2022-32257 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SINEMA Remote Connect Server: Versions prior to V3.2; a remote management platform; SINEMA Remote Connect Server: Versions prior to V3.1.; The following versions of Siemens SINEMA Remote Connect Server" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-04" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Client" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-22045" ;
    icsa:cweNumber "CWE-538" ;
    icsa:hasCVE cve-res:CVE-2024-22045 ;
    icsa:hasCWE cwe-res:CWE-538 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a remote management platform; are affected: SINEMA Remote Connect Client: All versions prior to V3.1 SP1.; The following versions of Siemens SINEMA Remote Connect Client" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-05" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-44487; CVE-2024-21762; CVE-2023-47537; CVE-2023-44250; CVE-2024-23113; CVE-2023-38546; CVE-2023-38545" ;
    icsa:cweNumber "CWE-134; CWE-122; CWE-787; CWE-73; CWE-295; CWE-269; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-38545,
        cve-res:CVE-2023-38546,
        cve-res:CVE-2023-44250,
        cve-res:CVE-2023-44487,
        cve-res:CVE-2023-47537,
        cve-res:CVE-2024-21762,
        cve-res:CVE-2024-23113 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-134,
        cwe-res:CWE-269,
        cwe-res:CWE-295,
        cwe-res:CWE-400,
        cwe-res:CWE-73,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens RUGGEDCOM APE1808; an application hosting platform; are affected: RUGGEDCOM APE1808: All versions with Fortinet NGFW." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-06" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SENTRON" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-22044" ;
    icsa:cweNumber "CWE-912" ;
    icsa:hasCVE cve-res:CVE-2024-22044 ;
    icsa:hasCWE cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SENTRON" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens SENTRON products are affected: SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75): all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-07" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-24587; CVE-2021-0336; CVE-2021-0522; CVE-2022-20227; CVE-2021-0521; CVE-2021-0437; CVE-2021-0704; CVE-2021-0435; CVE-2021-0507; CVE-2022-20468; CVE-2021-0646; CVE-2021-0641; CVE-2021-0484; CVE-2021-0431; CVE-2021-0604; CVE-2021-0327; CVE-2021-1976; CVE-2021-0963; CVE-2021-0687; CVE-2021-0478; CVE-2021-0588; CVE-2021-0967; CVE-2020-10768; CVE-2021-0929; CVE-2022-20422; CVE-2021-0326; CVE-2022-20500; CVE-2022-20469; CVE-2017-18509; CVE-2021-0964; CVE-2021-29647; CVE-2020-14305; CVE-2021-0689; CVE-2021-0519; CVE-2020-29660; CVE-2021-0682; CVE-2021-0444; CVE-2021-0337; CVE-2021-0928; CVE-2021-39621; CVE-2021-39634; CVE-2022-20466; CVE-2021-0339; CVE-2021-0651; CVE-2021-0334; CVE-2021-39633; CVE-2021-0584; CVE-2022-20472; CVE-2021-1972; CVE-2022-20462; CVE-2021-0931; CVE-2021-0331; CVE-2021-0684; CVE-2021-0596; CVE-2021-0471; CVE-2021-0330; CVE-2020-15436; CVE-2021-0870; CVE-2021-0429; CVE-2021-0333; CVE-2021-0591; CVE-2021-0952; CVE-2021-39623; CVE-2022-20411; CVE-2021-0438; CVE-2022-20473; CVE-2021-39627; CVE-2022-20421; CVE-2021-0305; CVE-2021-0473; CVE-2021-0601; CVE-2021-39626; CVE-2021-0708; CVE-2021-0512; CVE-2021-0400; CVE-2021-0506; CVE-2022-20498; CVE-2022-20127; CVE-2021-0434; CVE-2021-0968; CVE-2021-0302; CVE-2021-0688; CVE-2021-0474; CVE-2021-0509; CVE-2021-0650; CVE-2022-20130; CVE-2021-0325; CVE-2021-0516; CVE-2022-20483; CVE-2021-0598; CVE-2021-33909; CVE-2021-0593; CVE-2021-0926; CVE-2021-0652; CVE-2021-0399; CVE-2021-0597; CVE-2021-0390; CVE-2021-0520; CVE-2021-0970; CVE-2021-0328; CVE-2021-0511; CVE-2021-0514; CVE-2021-39629; CVE-2020-14381; CVE-2021-0920; CVE-2021-0510; CVE-2021-0476; CVE-2021-0391; CVE-2021-0953; CVE-2021-0586; CVE-2021-0706; CVE-2022-20355; CVE-2021-0393; CVE-2017-14491; CVE-2021-0341; CVE-2020-0417; CVE-2021-0965; CVE-2020-29661; CVE-2021-0640; CVE-2021-0919; CVE-2021-0436; CVE-2021-0587; CVE-2021-0961; CVE-2021-38204; CVE-2021-0443; CVE-2021-0329; CVE-2021-0695; CVE-2021-0933; CVE-2021-0930; CVE-2021-0433; CVE-2020-25705; CVE-2020-26558; CVE-2021-0594; CVE-2021-0599; CVE-2021-0589; CVE-2021-0642; CVE-2021-0397; CVE-2020-11301; CVE-2020-0338; CVE-2021-0480; CVE-2022-20476; CVE-2021-0585; CVE-2022-20229; CVE-2021-0600; CVE-2021-0513; CVE-2021-0690; CVE-2021-0481; CVE-2021-0515; CVE-2021-0392; CVE-2021-0396; CVE-2020-26555; CVE-2021-0394; CVE-2021-0508; CVE-2021-0653; CVE-2022-20423; CVE-2021-0683; CVE-2021-0692" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-1188; CWE-311; CWE-754; CWE-668; CWE-665; CWE-326; CWE-330; CWE-835; CWE-20; CWE-190; CWE-362; CWE-74; CWE-502; CWE-1021; CWE-440; CWE-281; CWE-120; CWE-834; CWE-787; CWE-681; CWE-908; CWE-312; CWE-119; CWE-269; CWE-116; CWE-863; CWE-732; CWE-862; CWE-287; CWE-755; CWE-909; CWE-610; CWE-191; CWE-667; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2017-14491,
        cve-res:CVE-2017-18509,
        cve-res:CVE-2020-0338,
        cve-res:CVE-2020-0417,
        cve-res:CVE-2020-10768,
        cve-res:CVE-2020-11301,
        cve-res:CVE-2020-14305,
        cve-res:CVE-2020-14381,
        cve-res:CVE-2020-15436,
        cve-res:CVE-2020-24587,
        cve-res:CVE-2020-25705,
        cve-res:CVE-2020-26555,
        cve-res:CVE-2020-26558,
        cve-res:CVE-2020-29660,
        cve-res:CVE-2020-29661,
        cve-res:CVE-2021-0302,
        cve-res:CVE-2021-0305,
        cve-res:CVE-2021-0325,
        cve-res:CVE-2021-0326,
        cve-res:CVE-2021-0327,
        cve-res:CVE-2021-0328,
        cve-res:CVE-2021-0329,
        cve-res:CVE-2021-0330,
        cve-res:CVE-2021-0331,
        cve-res:CVE-2021-0333,
        cve-res:CVE-2021-0334,
        cve-res:CVE-2021-0336,
        cve-res:CVE-2021-0337,
        cve-res:CVE-2021-0339,
        cve-res:CVE-2021-0341,
        cve-res:CVE-2021-0390,
        cve-res:CVE-2021-0391,
        cve-res:CVE-2021-0392,
        cve-res:CVE-2021-0393,
        cve-res:CVE-2021-0394,
        cve-res:CVE-2021-0396,
        cve-res:CVE-2021-0397,
        cve-res:CVE-2021-0399,
        cve-res:CVE-2021-0400,
        cve-res:CVE-2021-0429,
        cve-res:CVE-2021-0431,
        cve-res:CVE-2021-0433,
        cve-res:CVE-2021-0434,
        cve-res:CVE-2021-0435,
        cve-res:CVE-2021-0436,
        cve-res:CVE-2021-0437,
        cve-res:CVE-2021-0438,
        cve-res:CVE-2021-0443,
        cve-res:CVE-2021-0444,
        cve-res:CVE-2021-0471,
        cve-res:CVE-2021-0473,
        cve-res:CVE-2021-0474,
        cve-res:CVE-2021-0476,
        cve-res:CVE-2021-0478,
        cve-res:CVE-2021-0480,
        cve-res:CVE-2021-0481,
        cve-res:CVE-2021-0484,
        cve-res:CVE-2021-0506,
        cve-res:CVE-2021-0507,
        cve-res:CVE-2021-0508,
        cve-res:CVE-2021-0509,
        cve-res:CVE-2021-0510,
        cve-res:CVE-2021-0511,
        cve-res:CVE-2021-0512,
        cve-res:CVE-2021-0513,
        cve-res:CVE-2021-0514,
        cve-res:CVE-2021-0515,
        cve-res:CVE-2021-0516,
        cve-res:CVE-2021-0519,
        cve-res:CVE-2021-0520,
        cve-res:CVE-2021-0521,
        cve-res:CVE-2021-0522,
        cve-res:CVE-2021-0584,
        cve-res:CVE-2021-0585,
        cve-res:CVE-2021-0586,
        cve-res:CVE-2021-0587,
        cve-res:CVE-2021-0588,
        cve-res:CVE-2021-0589,
        cve-res:CVE-2021-0591,
        cve-res:CVE-2021-0593,
        cve-res:CVE-2021-0594,
        cve-res:CVE-2021-0596,
        cve-res:CVE-2021-0597,
        cve-res:CVE-2021-0598,
        cve-res:CVE-2021-0599,
        cve-res:CVE-2021-0600,
        cve-res:CVE-2021-0601,
        cve-res:CVE-2021-0604,
        cve-res:CVE-2021-0640,
        cve-res:CVE-2021-0641,
        cve-res:CVE-2021-0642,
        cve-res:CVE-2021-0646,
        cve-res:CVE-2021-0650,
        cve-res:CVE-2021-0651,
        cve-res:CVE-2021-0652,
        cve-res:CVE-2021-0653,
        cve-res:CVE-2021-0682,
        cve-res:CVE-2021-0683,
        cve-res:CVE-2021-0684,
        cve-res:CVE-2021-0687,
        cve-res:CVE-2021-0688,
        cve-res:CVE-2021-0689,
        cve-res:CVE-2021-0690,
        cve-res:CVE-2021-0692,
        cve-res:CVE-2021-0695,
        cve-res:CVE-2021-0704,
        cve-res:CVE-2021-0706,
        cve-res:CVE-2021-0708,
        cve-res:CVE-2021-0870,
        cve-res:CVE-2021-0919,
        cve-res:CVE-2021-0920,
        cve-res:CVE-2021-0926,
        cve-res:CVE-2021-0928,
        cve-res:CVE-2021-0929,
        cve-res:CVE-2021-0930,
        cve-res:CVE-2021-0931,
        cve-res:CVE-2021-0933,
        cve-res:CVE-2021-0952,
        cve-res:CVE-2021-0953,
        cve-res:CVE-2021-0961,
        cve-res:CVE-2021-0963,
        cve-res:CVE-2021-0964,
        cve-res:CVE-2021-0965,
        cve-res:CVE-2021-0967,
        cve-res:CVE-2021-0968,
        cve-res:CVE-2021-0970,
        cve-res:CVE-2021-1972,
        cve-res:CVE-2021-1976,
        cve-res:CVE-2021-29647,
        cve-res:CVE-2021-33909,
        cve-res:CVE-2021-38204,
        cve-res:CVE-2021-39621,
        cve-res:CVE-2021-39623,
        cve-res:CVE-2021-39626,
        cve-res:CVE-2021-39627,
        cve-res:CVE-2021-39629,
        cve-res:CVE-2021-39633,
        cve-res:CVE-2021-39634,
        cve-res:CVE-2022-20127,
        cve-res:CVE-2022-20130,
        cve-res:CVE-2022-20227,
        cve-res:CVE-2022-20229,
        cve-res:CVE-2022-20355,
        cve-res:CVE-2022-20411,
        cve-res:CVE-2022-20421,
        cve-res:CVE-2022-20422,
        cve-res:CVE-2022-20423,
        cve-res:CVE-2022-20462,
        cve-res:CVE-2022-20466,
        cve-res:CVE-2022-20468,
        cve-res:CVE-2022-20469,
        cve-res:CVE-2022-20472,
        cve-res:CVE-2022-20473,
        cve-res:CVE-2022-20476,
        cve-res:CVE-2022-20483,
        cve-res:CVE-2022-20498,
        cve-res:CVE-2022-20500 ;
    icsa:hasCWE cwe-res:CWE-1021,
        cwe-res:CWE-116,
        cwe-res:CWE-1188,
        cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-191,
        cwe-res:CWE-20,
        cwe-res:CWE-269,
        cwe-res:CWE-281,
        cwe-res:CWE-287,
        cwe-res:CWE-295,
        cwe-res:CWE-311,
        cwe-res:CWE-312,
        cwe-res:CWE-326,
        cwe-res:CWE-330,
        cwe-res:CWE-362,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-440,
        cwe-res:CWE-502,
        cwe-res:CWE-610,
        cwe-res:CWE-665,
        cwe-res:CWE-667,
        cwe-res:CWE-668,
        cwe-res:CWE-681,
        cwe-res:CWE-732,
        cwe-res:CWE-74,
        cwe-res:CWE-754,
        cwe-res:CWE-755,
        cwe-res:CWE-787,
        cwe-res:CWE-834,
        cwe-res:CWE-835,
        cwe-res:CWE-862,
        cwe-res:CWE-863,
        cwe-res:CWE-908,
        cwe-res:CWE-909 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following SIMATIC mobile RFID reader products are affected: SIMATIC RF160B (6GT2003-0FA00): versions prior to V2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-08" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-44321; CVE-2023-44318" ;
    icsa:cweNumber "CWE-321; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-44318,
        cve-res:CVE-2023-44321 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PN) (6GK5205-3BF00-2AB2): All versions SCALANCE XB208 (E/IP) (6GK5208-0BA00-2TB2): All versions SCALANCE XB208 (PN) (6GK5208-0BA00-2AB2): All versions SCALANCE XB213-3 (SC; AC 230V) (6GK5328-4SS00-3AR3): All versions SCALANCE XR328-4C WG (28xGE; AC 230V) (6GK5324-0BA00-3AR3): All versions SCALANCE XR324WG (24 X FE; E/IP) (6GK5213-3BD00-2TB2): All versions SCALANCE XB213-3 (SC; PN) (6GK5213-3BD00-2AB2): All versions SCALANCE XB213-3 (ST; PN) (6GK5205-3BB00-2AB2): All versions SCALANCE XB205-3 (ST; The following products of Siemens; E/IP) (6GK5213-3BB00-2TB2): All versions SCALANCE XB213-3 (ST; E/IP) (6GK5213-3BF00-2TB2): All versions SCALANCE XB213-3LD (SC; DC24V) (6GK5328-4FS00-2RR3): All versions SCALANCE XR328-4C WG (28xGE; PN) (6GK5213-3BB00-2AB2): All versions SCALANCE XB213-3LD (SC; DC 24V) (6GK5328-4SS00-2AR3): All versions SIPLUS NET SCALANCE XC206-2 (6AG1206-2BB00-7AC2): All versions SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2): All versions SIPLUS NET SCALANCE XC208 (6AG1208-0BA00-7AC2): All versions SIPLUS NET SCALANCE XC216-4C (6AG1216-4BS00-7AC2): All versions.; PN) (6GK5205-3BD00-2AB2): All versions SCALANCE XB205-3LD (SC; E/IP) (6GK5205-3BF00-2TB2): All versions SCALANCE XB205-3LD (SC; E/IP) (6GK5205-3BD00-2TB2): All versions SCALANCE XB205-3 (ST; E/IP) (6GK5205-3BB00-2TB2): All versions SCALANCE XB205-3 (ST; PN) (6GK5213-3BF00-2AB2): All versions SCALANCE XB216 (E/IP) (6GK5216-0BA00-2TB2): All versions SCALANCE XB216 (PN) (6GK5216-0BA00-2AB2): All versions SCALANCE XC206-2 (SC) (6GK5206-2BD00-2AC2): All versions SCALANCE XC206-2 (ST/BFOC) (6GK5206-2BB00-2AC2): All versions SCALANCE XC206-2G PoE (6GK5206-2RS00-2AC2): All versions SCALANCE XC206-2G PoE (54 V DC) (6GK5206-2RS00-5AC2): All versions SCALANCE XC206-2G PoE EEC (54 V DC) (6GK5206-2RS00-5FC2): All versions SCALANCE XC206-2SFP (6GK5206-2BS00-2AC2): All versions SCALANCE XC206-2SFP EEC (6GK5206-2BS00-2FC2): All versions SCALANCE XC206-2SFP G (6GK5206-2GS00-2AC2): All versions SCALANCE XC206-2SFP G (EIP DEF.) (6GK5206-2GS00-2TC2): All versions SCALANCE XC206-2SFP G EEC (6GK5206-2GS00-2FC2): All versions SCALANCE XC208 (6GK5208-0BA00-2AC2): All versions SCALANCE XC208EEC (6GK5208-0BA00-2FC2): All versions SCALANCE XC208G (6GK5208-0GA00-2AC2): All versions SCALANCE XC208G (EIP def.) (6GK5208-0GA00-2TC2): All versions SCALANCE XC208G EEC (6GK5208-0GA00-2FC2): All versions SCALANCE XC208G PoE (6GK5208-0RA00-2AC2): All versions SCALANCE XC208G PoE (54 V DC) (6GK5208-0RA00-5AC2): All versions SCALANCE XC216 (6GK5216-0BA00-2AC2): All versions SCALANCE XC216-3G PoE (6GK5216-3RS00-2AC2): All versions SCALANCE XC216-3G PoE (54 V DC) (6GK5216-3RS00-5AC2): All versions SCALANCE XC216-4C (6GK5216-4BS00-2AC2): All versions SCALANCE XC216-4C G (6GK5216-4GS00-2AC2): All versions SCALANCE XC216-4C G (EIP Def.) (6GK5216-4GS00-2TC2): All versions SCALANCE XC216-4C G EEC (6GK5216-4GS00-2FC2): All versions SCALANCE XC216EEC (6GK5216-0BA00-2FC2): All versions SCALANCE XC224 (6GK5224-0BA00-2AC2): All versions SCALANCE XC224-4C G (6GK5224-4GS00-2AC2): All versions SCALANCE XC224-4C G (EIP Def.) (6GK5224-4GS00-2TC2): All versions SCALANCE XC224-4C G EEC (6GK5224-4GS00-2FC2): All versions SCALANCE XF204 (6GK5204-0BA00-2GF2): All versions SCALANCE XF204 DNA (6GK5204-0BA00-2YF2): All versions SCALANCE XF204-2BA (6GK5204-2AA00-2GF2): All versions SCALANCE XF204-2BA DNA (6GK5204-2AA00-2YF2): All versions SCALANCE XP208 (6GK5208-0HA00-2AS6): All versions SCALANCE XP208 (Ethernet/IP) (6GK5208-0HA00-2TS6): All versions SCALANCE XP208EEC (6GK5208-0HA00-2ES6): All versions SCALANCE XP208PoE EEC (6GK5208-0UA00-5ES6): All versions SCALANCE XP216 (6GK5216-0HA00-2AS6): All versions SCALANCE XP216 (Ethernet/IP) (6GK5216-0HA00-2TS6): All versions SCALANCE XP216EEC (6GK5216-0HA00-2ES6): All versions SCALANCE XP216POE EEC (6GK5216-0UA00-5ES6): All versions SCALANCE XR324WG (24 x FE; DC 24V) (6GK5324-0BA00-2AR3): All versions SCALANCE XR326-2C PoE WG (6GK5326-2QS00-3AR3): All versions SCALANCE XR326-2C PoE WG (without UL) (6GK5326-2QS00-3RR3): All versions SCALANCE XR328-4C WG (24xFE; 24V) (6GK5328-4FS00-2AR3): All versions SCALANCE XR328-4C WG (24xFE; 4XGE; AC230V) (6GK5328-4FS00-3RR3): All versions SCALANCE XR328-4C WG (24XFE; 4xGE; AC230V) (6GK5328-4FS00-3AR3): All versions SCALANCE XR328-4C WG (24xFE; are affected: SCALANCE XB205-3 (SC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-09" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Sinteso EN Cerberus PRO EN Fire Protection Systems" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-22040; CVE-2024-22039; CVE-2024-22041" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2024-22039,
        cve-res:CVE-2024-22040,
        cve-res:CVE-2024-22041 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sinteso EN, Cerberus PRO EN Fire Protection Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Cerberus PRO EN Engineering Tool: Versions prior to IP8 Cerberus PRO EN Engineering Tool: All versions Cerberus PRO EN Fire Panel FC72x: Versions prior to IP8 Cerberus PRO EN Fire Panel FC72x: Versions prior to IP8 SR4 Cerberus PRO EN X200 Cloud Distribution: Versions prior to V4.0.5016 Cerberus PRO EN X200 Cloud Distribution: Versions prior to V4.3.5618 Cerberus PRO EN X300 Cloud Distribution: Versions prior to V4.2.5015 Cerberus PRO EN X300 Cloud Distribution: Versions prior to V4.3.5617 Sinteso FS20 EN Engineering Tool: Versions prior to MP8 Sinteso FS20 EN Engineering Tool: All versions Sinteso FS20 EN Fire Panel FC20: Versions prior to MP8 Sinteso FS20 EN Fire Panel FC20: Versions prior to MP8 SR4 Sinteso FS20 EN X200 Cloud Distribution: Versions prior to V4.0.5016 Sinteso FS20 EN X200 Cloud Distribution: Versions prior to V4.3.5618 Sinteso FS20 EN X300 Cloud Distribution: Versions prior to V4.2.5015 Sinteso FS20 EN X300 Cloud Distribution: Versions prior to V4.3.5617 Sinteso Mobile: Versions prior to V3.0.0 Sinteso Mobile: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-10" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Control" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-45793" ;
    icsa:cweNumber "CWE-863" ;
    icsa:hasCVE cve-res:CVE-2023-45793 ;
    icsa:hasCWE cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance Control" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Siveillance Control: Versions V2.8 and after until V3.1.1.; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-11" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 with Fortigate NGFW Devices" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-25610; CVE-2023-36555; CVE-2023-29181; CVE-2022-41330; CVE-2023-29180; CVE-2022-42469; CVE-2023-37935; CVE-2022-41334; CVE-2022-41329; CVE-2023-22639; CVE-2023-22640; CVE-2023-26207; CVE-2023-28001; CVE-2023-29183; CVE-2023-40718; CVE-2023-36639; CVE-2023-33307; CVE-2023-33305; CVE-2023-22641; CVE-2023-41675; CVE-2022-41327; CVE-2022-42474; CVE-2023-27997; CVE-2023-29179; CVE-2023-29175; CVE-2022-43947; CVE-2023-41841; CVE-2023-33301; CVE-2023-29178; CVE-2022-39948; CVE-2023-33306; CVE-2022-41328; CVE-2022-45861; CVE-2022-43953; CVE-2022-42476; CVE-2023-33308; CVE-2023-36641; CVE-2023-28002" ;
    icsa:cweNumber "CWE-307; CWE-416; CWE-79; CWE-183; CWE-122; CWE-134; CWE-598; CWE-476; CWE-22; CWE-200; CWE-835; CWE-124; CWE-20; CWE-436; CWE-121; CWE-532; CWE-601; CWE-824; CWE-80; CWE-787; CWE-284; CWE-23; CWE-285; CWE-319; CWE-613; CWE-295; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2022-39948,
        cve-res:CVE-2022-41327,
        cve-res:CVE-2022-41328,
        cve-res:CVE-2022-41329,
        cve-res:CVE-2022-41330,
        cve-res:CVE-2022-41334,
        cve-res:CVE-2022-42469,
        cve-res:CVE-2022-42474,
        cve-res:CVE-2022-42476,
        cve-res:CVE-2022-43947,
        cve-res:CVE-2022-43953,
        cve-res:CVE-2022-45861,
        cve-res:CVE-2023-22639,
        cve-res:CVE-2023-22640,
        cve-res:CVE-2023-22641,
        cve-res:CVE-2023-25610,
        cve-res:CVE-2023-26207,
        cve-res:CVE-2023-27997,
        cve-res:CVE-2023-28001,
        cve-res:CVE-2023-28002,
        cve-res:CVE-2023-29175,
        cve-res:CVE-2023-29178,
        cve-res:CVE-2023-29179,
        cve-res:CVE-2023-29180,
        cve-res:CVE-2023-29181,
        cve-res:CVE-2023-29183,
        cve-res:CVE-2023-33301,
        cve-res:CVE-2023-33305,
        cve-res:CVE-2023-33306,
        cve-res:CVE-2023-33307,
        cve-res:CVE-2023-33308,
        cve-res:CVE-2023-36555,
        cve-res:CVE-2023-36639,
        cve-res:CVE-2023-36641,
        cve-res:CVE-2023-37935,
        cve-res:CVE-2023-40718,
        cve-res:CVE-2023-41675,
        cve-res:CVE-2023-41841 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-124,
        cwe-res:CWE-134,
        cwe-res:CWE-183,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-23,
        cwe-res:CWE-284,
        cwe-res:CWE-285,
        cwe-res:CWE-295,
        cwe-res:CWE-307,
        cwe-res:CWE-319,
        cwe-res:CWE-354,
        cwe-res:CWE-416,
        cwe-res:CWE-436,
        cwe-res:CWE-476,
        cwe-res:CWE-532,
        cwe-res:CWE-598,
        cwe-res:CWE-601,
        cwe-res:CWE-613,
        cwe-res:CWE-787,
        cwe-res:CWE-79,
        cwe-res:CWE-80,
        cwe-res:CWE-824,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808 devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens using Fortinet NGFW V7.4.1 and prior are affected: RUGGEDCOM APE1808: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-12" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAEnergie" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-28045; CVE-2024-25937; CVE-2024-23975; CVE-2024-28029; CVE-2024-28171; CVE-2024-25574; CVE-2024-25567; CVE-2024-28891; CVE-2024-28040; CVE-2024-23494" ;
    icsa:cweNumber "CWE-22; CWE-89; CWE-285; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-23494,
        cve-res:CVE-2024-23975,
        cve-res:CVE-2024-25567,
        cve-res:CVE-2024-25574,
        cve-res:CVE-2024-25937,
        cve-res:CVE-2024-28029,
        cve-res:CVE-2024-28040,
        cve-res:CVE-2024-28045,
        cve-res:CVE-2024-28171,
        cve-res:CVE-2024-28891 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-285,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAEnergie" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: DIAEnergie: Versions prior to v1.10.00.005." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-12" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-13" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Softing edgeConnector" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-0860; CVE-2023-38126" ;
    icsa:cweNumber "CWE-22; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2023-38126,
        cve-res:CVE-2024-0860 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "edgeConnector" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Softing edgeConnector are affected: Softing edgeConnector: Version 3.60 Softing edgeAggregator: Version 3.60." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-13" ;
    icsa:vendor "Softing Industrial Automation GmbH" ;
    icsa:year 2024 .

icsa-res:ICSA-24-074-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-074-14" ;
    dcterms:issued "2024-03-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-Q/L Series (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-0803; CVE-2024-0802; CVE-2024-1917; CVE-2024-1916; CVE-2024-1915" ;
    icsa:cweNumber "CWE-468; CWE-190" ;
    icsa:hasCVE cve-res:CVE-2024-0802,
        cve-res:CVE-2024-0803,
        cve-res:CVE-2024-1915,
        cve-res:CVE-2024-1916,
        cve-res:CVE-2024-1917 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-468 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-Q/L Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mitsubishi Electric MELSEC-Q/L Series; are affected: MELSEC-Q Series Q03UDECPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q04UDEHCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q06UDEHCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q10UDEHCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q13UDEHCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q20UDEHCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q26UDEHCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q50UDEHCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q100UDEHCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q03UDVCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q04UDVCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q06UDVCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q13UDVCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q26UDVCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q04UDPVCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q06UDPVCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q13UDPVCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-Q Series Q26UDPVCPU: The first 5 digits of serial No. \"26061\" and prior MELSEC-L Series L02CPU(-P): The first 5 digits of serial numbers \"26041\" and prior MELSEC-L Series L06CPU(-P): The first 5 digits of serial numbers \"26041\" and prior MELSEC-L Series L26CPU(-P): The first 5 digits of serial numbers \"26041\" and prior MELSEC-L Series L26CPU-(P)BT: The first 5 digits of serial numbers \"26041\" and prior.; a controller used for factory automation" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-074-14" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-079-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-079-01" ;
    dcterms:issued "2024-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Franklin Fueling System EVO 550/5000" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-2442" ;
    icsa:cweNumber "CWE-25" ;
    icsa:hasCVE cve-res:CVE-2024-2442 ;
    icsa:hasCWE cwe-res:CWE-25 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EVO 550, EVO 5000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Franklin Fueling System EVO 550 and EVO 5000; an automatic tank gauge (ATG); are affected: EVO 550: All versions prior to 2.26.3.8963 EVO 5000: All versions prior to 2.26.3.8963." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-079-01" ;
    icsa:vendor "Franklin Fueling System" ;
    icsa:year 2024 .

icsa-res:ICSA-24-081-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-081-01" ;
    dcterms:issued "2024-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-2453" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2024-2453 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebAccess/SCADA" ;
    icsa:productDistribution "East Asia, Europe, United States" ;
    icsa:productsAffected "a bowser-based SCADA software; are affected: WebAccess/SCADA: Version 9.1.5U.; The following versions of Advantech WebAccess/SCADA" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-081-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2024 .

icsa-res:ICSA-24-086-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-086-01" ;
    dcterms:issued "2024-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Automation-Direct C-MORE EA9 HMI" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-25138; CVE-2024-25136; CVE-2024-25137" ;
    icsa:cweNumber "CWE-22; CWE-256; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-25136,
        cve-res:CVE-2024-25137,
        cve-res:CVE-2024-25138 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-22,
        cwe-res:CWE-256 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "C-MORE EA9 HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "C-MORE EA9 HMI EA9-T8CL: Version 6.77 and prior; C-MORE EA9 HMI EA9-T15CL: Version 6.77 and prior; C-MORE EA9 HMI EA9-PGMSW: Version 6.77 and prior.; C-MORE EA9 HMI EA9-RHMI: Version 6.77 and prior; C-MORE EA9 HMI EA9-T10WCL: Version 6.77 and prior; a display system used for interfacing with controllers; are affected: C-MORE EA9 HMI EA9-T6CL: Version 6.77 and prior; C-MORE EA9 HMI EA0-T7CL-R: Version 6.77 and prior; C-MORE EA9 HMI EA9-T10CL: Version 6.77 and prior; C-MORE EA9 HMI EA9-T12CL: Version 6.77 and prior; C-MORE EA9 HMI EA9-T15CL-R: Version 6.77 and prior; The following versions of C-MORE EA9 HMI; C-MORE EA9 HMI EA9-T7CL: Version 6.77 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-086-01" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2024 .

icsa-res:ICSA-24-086-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-086-02" ;
    dcterms:issued "2024-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PowerFlex 527" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-2426; CVE-2024-2425; CVE-2024-2427" ;
    icsa:cweNumber "CWE-120; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-2425,
        cve-res:CVE-2024-2426,
        cve-res:CVE-2024-2427 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerFlex 527" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of PowerFlex 527 adjustable frequency AC drives are affected: PowerFlex 527: Versions v2.001.x and later." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-086-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-086-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-086-03" ;
    dcterms:issued "2024-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena Simulation" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Healthcare and Public Health; Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-21913; CVE-2024-21918; CVE-2024-21912; CVE-2024-21919; CVE-2024-21920; CVE-2024-2929" ;
    icsa:cweNumber "CWE-824; CWE-416; CWE-122; CWE-787; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-21912,
        cve-res:CVE-2024-21913,
        cve-res:CVE-2024-21918,
        cve-res:CVE-2024-21919,
        cve-res:CVE-2024-21920,
        cve-res:CVE-2024-2929 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arena Simulation Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of Arena Simulation Software are affected: Arena Simulation Software: version 16.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-086-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-086-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-086-04" ;
    dcterms:issued "2024-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View ME" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-21914" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-21914 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View ME" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an HMI software application; are affected: FactoryTalk View ME: prior to v14.; The following versions of FactoryTalk View ME" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-086-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-093-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-093-01" ;
    dcterms:issued "2024-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "IOSIX IO-1020 Micro ELD" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2024-31069; CVE-2024-28878; CVE-2024-30210" ;
    icsa:cweNumber "CWE-1392; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2024-28878,
        cve-res:CVE-2024-30210,
        cve-res:CVE-2024-31069 ;
    icsa:hasCWE cwe-res:CWE-1392,
        cwe-res:CWE-494 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IO-1020 Micro ELD" ;
    icsa:productDistribution "North America" ;
    icsa:productsAffected "The following IOSiX products are affected: IO-1020 Micro ELD: Versions prior to 360." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-093-01" ;
    icsa:vendor "IOSiX" ;
    icsa:year 2024 .

icsa-res:ICSA-24-095-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-095-01" ;
    dcterms:issued "2024-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Asset Suite 9" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-2244" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-2244 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Asset Suite 9" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi Energy's Asset Suite; an enterprise asset management tool; are affected: Asset Suite: Versions prior to 9.6.3.13 Asset Suite: Versions prior to 9.6.4.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-095-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-095-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-095-02" ;
    dcterms:issued "2024-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schweitzer Engineering Laboratories SEL" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-2103" ;
    icsa:cweNumber "CWE-1242" ;
    icsa:hasCVE cve-res:CVE-2024-2103 ;
    icsa:hasCWE cwe-res:CWE-1242 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SEL 700 series relays" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Schweitzer Engineering Laboratories products are affected: SEL-700BT Motor Bus Transfer Relay: R301-V0 up to but not including R301-V6 SEL-700BT Motor Bus Transfer Relay: R302-V0 up to but not including R302-V1 SEL-700G Generator Protection Relay: R100-V0 up to but not including R301-V6 SEL-700G Generator Protection Relay: R302-V0 up to but not including R302-V1 SEL-710-5 Motor Protection Relay: R100-V0 up to but not including R302-V1 SEL-751 Feeder Protection Relay: R101-V0 up to but not including R302-V3 SEL-751 Feeder Protection Relay: R400-V0 up to but not including R400-V2 SEL-787-2/-3/-4 Transformer Protection Relay: R100-V0 up to but not including R302-V1 SEL-787Z High-Impedance Differential Relay: R302-V0 up to but not including R302-V3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-095-02" ;
    icsa:vendor "Schweitzer Engineering Laboratories" ;
    icsa:year 2024 .

icsa-res:ICSA-24-100-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-100-01" ;
    dcterms:issued "2024-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "SUBNET PowerSYSTEM Server and Substation Server" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-3313" ;
    icsa:cweNumber "CWE-1357" ;
    icsa:hasCVE cve-res:CVE-2024-3313 ;
    icsa:hasCWE cwe-res:CWE-1357 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerSYSTEM Server, Substation Server 2021" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SUBNET Solutions reports that the following products use components with vulnerabilities: PowerSYSTEM Server: version 4.07.00 and prior Substation Server 2021: version 4.07.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-100-01" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-102-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-102-01" ;
    dcterms:issued "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-6932; CVE-2023-6931; CVE-2023-45898; CVE-2024-0727; CVE-2023-5678; CVE-2023-6121; CVE-2023-6817" ;
    icsa:cweNumber "CWE-416; CWE-20; CWE-787; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2023-45898,
        cve-res:CVE-2023-5678,
        cve-res:CVE-2023-6121,
        cve-res:CVE-2023-6817,
        cve-res:CVE-2023-6931,
        cve-res:CVE-2023-6932,
        cve-res:CVE-2024-0727 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-416,
        cwe-res:CWE-754,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Siemens SIMATIC S7-1500 TM MFP (GNU/Linux subsystem): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-102-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-102-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-102-02" ;
    dcterms:issued "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-50821" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2023-50821 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS 7, SIMATIC WinCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SIMATIC PCS 7 and SIMATIC WinCC; a SCADA system; are affected: Siemens SIMATIC PCS 7 V9.1: All versions before V9.1 SP2 UC04 Siemens SIMATIC WinCC Runtime Professional V17: All versions Siemens SIMATIC WinCC Runtime Professional V18: All versions Siemens SIMATIC WinCC Runtime Professional V19: All versions before V19 Update 1 Siemens SIMATIC WinCC V7.5: All versions before V7.5 SP2 Update 16 Siemens SIMATIC WinCC V8.0: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-102-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-102-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-102-03" ;
    dcterms:issued "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 before V11.0.1" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0008; CVE-2023-6790; CVE-2022-0028; CVE-2023-38046; CVE-2023-6791; CVE-2023-0005" ;
    icsa:cweNumber "CWE-79; CWE-610; CWE-497; CWE-73; CWE-406; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2022-0028,
        cve-res:CVE-2023-0005,
        cve-res:CVE-2023-0008,
        cve-res:CVE-2023-38046,
        cve-res:CVE-2023-6790,
        cve-res:CVE-2023-6791 ;
    icsa:hasCWE cwe-res:CWE-406,
        cwe-res:CWE-497,
        cwe-res:CWE-522,
        cwe-res:CWE-610,
        cwe-res:CWE-73,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens RUGGEDCOM APE1808; an application hosting platform; are affected: Siemens RUGGEDCOM APE1808: All versions with Palo Alto Networks Virtual NGFW before V11.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-102-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-102-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-102-04" ;
    dcterms:issued "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-6789; CVE-2023-48795; CVE-2023-38802; CVE-2023-6793; CVE-2024-0008" ;
    icsa:cweNumber "CWE-222; CWE-79; CWE-613; CWE-269; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2023-38802,
        cve-res:CVE-2023-48795,
        cve-res:CVE-2023-6789,
        cve-res:CVE-2023-6793,
        cve-res:CVE-2024-0008 ;
    icsa:hasCWE cwe-res:CWE-222,
        cwe-res:CWE-269,
        cwe-res:CWE-613,
        cwe-res:CWE-754,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-0008) Siemens RUGGEDCOM APE1808: All versions with Palo Alto Networks Virtual NGFW that are configured with BGP routing features enabled (CVE-2023-38802).; CVE-2023-6793; are affected: Siemens RUGGEDCOM APE1808: All versions with Palo Alto Networks Virtual NGFW configured with support for the CHACHA20-POLY1305 algorithm or any Encrypt-then-MAC algorithms (CVE-2023-48795) Siemens RUGGEDCOM APE1808: All versions with Palo Alto Networks Virtual NGFW (CVE-2023-6789; The following versions of Siemens RUGGEDCOM APE1808; an application hosting platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-102-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-102-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-102-05" ;
    dcterms:issued "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Scalance W1750D" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-35981; CVE-2023-35980; CVE-2023-35982" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2023-35980,
        cve-res:CVE-2023-35981,
        cve-res:CVE-2023-35982 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Scalance W1750D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Siemens SCALANCE W1750D (JP) (6GK5750-2HX01-1AD0): All versions prior to V8.10.0.9 Siemens SCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0): All versions prior to V8.10.0.9 Siemens SCALANCE W1750D (USA) (6GK5750-2HX01-1AB0): All versions prior to V8.10.0.9.; a direct access point; The following products of Siemens Scalance W1750D" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-102-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-102-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-102-06" ;
    dcterms:issued "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-26277; CVE-2024-26276; CVE-2024-26275" ;
    icsa:cweNumber "CWE-125; CWE-476; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2024-26275,
        cve-res:CVE-2024-26276,
        cve-res:CVE-2024-26277 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-476,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Siemens Parasolid V35.1: Versions prior to V35.1.254 Siemens Parasolid V36.0: Versions prior to V36.0.207 Siemens Parasolid V36.1: Versions prior to V36.1.147." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-102-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-102-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-102-07" ;
    dcterms:issued "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-31978; CVE-2023-5678" ;
    icsa:cweNumber "CWE-22; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2023-5678,
        cve-res:CVE-2024-31978 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SINEC NMS: All versions prior to V2.0 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-102-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-102-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-102-08" ;
    dcterms:issued "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Telecontrol Server Basic" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-32025; CVE-2022-46908; CVE-2022-43514; CVE-2023-36785; CVE-2022-40304; CVE-2023-0465; CVE-2023-0466; CVE-2023-3446; CVE-2023-4807; CVE-2022-44725; CVE-2023-36049; CVE-2023-36728; CVE-2023-21528; CVE-2023-36794; CVE-2023-36792; CVE-2022-4450; CVE-2023-32026; CVE-2022-4304; CVE-2023-21704; CVE-2023-23384; CVE-2023-29469; CVE-2023-29349; CVE-2023-5678; CVE-2022-40303; CVE-2023-21568; CVE-2023-32028; CVE-2023-36417; CVE-2023-36796; CVE-2023-0215; CVE-2022-43513; CVE-2023-21713; CVE-2023-29356; CVE-2023-21705; CVE-2023-36873; CVE-2023-36420; CVE-2023-36730; CVE-2023-38169; CVE-2023-0464; CVE-2023-21718; CVE-2023-28484; CVE-2023-32027; CVE-2023-36788; CVE-2023-0286; CVE-2023-36793; CVE-2023-36560; CVE-2023-39615; CVE-2023-36899" ;
    icsa:cweNumber "CWE-22; CWE-119; CWE-415; CWE-416; CWE-1333; CWE-326; CWE-20; CWE-190; CWE-73; CWE-311; CWE-295; CWE-476; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2022-40303,
        cve-res:CVE-2022-40304,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-43513,
        cve-res:CVE-2022-43514,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2022-44725,
        cve-res:CVE-2022-46908,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0464,
        cve-res:CVE-2023-0465,
        cve-res:CVE-2023-0466,
        cve-res:CVE-2023-21528,
        cve-res:CVE-2023-21568,
        cve-res:CVE-2023-21704,
        cve-res:CVE-2023-21705,
        cve-res:CVE-2023-21713,
        cve-res:CVE-2023-21718,
        cve-res:CVE-2023-23384,
        cve-res:CVE-2023-28484,
        cve-res:CVE-2023-29349,
        cve-res:CVE-2023-29356,
        cve-res:CVE-2023-29469,
        cve-res:CVE-2023-32025,
        cve-res:CVE-2023-32026,
        cve-res:CVE-2023-32027,
        cve-res:CVE-2023-32028,
        cve-res:CVE-2023-3446,
        cve-res:CVE-2023-36049,
        cve-res:CVE-2023-36417,
        cve-res:CVE-2023-36420,
        cve-res:CVE-2023-36560,
        cve-res:CVE-2023-36728,
        cve-res:CVE-2023-36730,
        cve-res:CVE-2023-36785,
        cve-res:CVE-2023-36788,
        cve-res:CVE-2023-36792,
        cve-res:CVE-2023-36793,
        cve-res:CVE-2023-36794,
        cve-res:CVE-2023-36796,
        cve-res:CVE-2023-36873,
        cve-res:CVE-2023-36899,
        cve-res:CVE-2023-38169,
        cve-res:CVE-2023-39615,
        cve-res:CVE-2023-4807,
        cve-res:CVE-2023-5678 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-1333,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-295,
        cwe-res:CWE-311,
        cwe-res:CWE-326,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-73,
        cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Telecontrol Server Basic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens TeleControl Server Basic V3: versions prior to V3.1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-102-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-102-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-102-09" ;
    dcterms:issued "2024-04-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 5015-AENFTXT (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-2424" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-2424 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "5015-AENFTXT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation ethernet/IP adapter products are affected: 5015-AENFTXT: v2.011 to v2.012." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-102-09" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-107-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-107-01" ;
    dcterms:issued "2024-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Measuresoft ScadaPro" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-3746" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2024-3746 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScadaPro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: ScadaPro: version 6.9.0.0.; The following versions of ScadaPro; a supervisory control and data acquisition (SCADA) system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-107-01" ;
    icsa:vendor "Measuresoft" ;
    icsa:year 2024 .

icsa-res:ICSA-24-107-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-107-02" ;
    dcterms:issued "2024-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Electrolink FM/DAB/TV Transmitter" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2024-22186; CVE-2024-3741; CVE-2024-3742; CVE-2024-1491; CVE-2024-22179; CVE-2024-21846; CVE-2024-21872" ;
    icsa:cweNumber "CWE-306; CWE-565; CWE-312; CWE-302" ;
    icsa:hasCVE cve-res:CVE-2024-1491,
        cve-res:CVE-2024-21846,
        cve-res:CVE-2024-21872,
        cve-res:CVE-2024-22179,
        cve-res:CVE-2024-22186,
        cve-res:CVE-2024-3741,
        cve-res:CVE-2024-3742 ;
    icsa:hasCWE cwe-res:CWE-302,
        cwe-res:CWE-306,
        cwe-res:CWE-312,
        cwe-res:CWE-565 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FM/DAB/TV Transmitter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2kW Medium DAB Transmitter 2.5kW; 20kW; 10kW; 250W; 5kW High Power DAB Transmitter 100W; 100W; 30kW Modular FM Transmitter 15W - 40kW Digital FM Transmitter BI; BIII VHF TV Transmitter 10W - 5kW UHF TV Transmitter.; Compact DAB Transmitter 500W; 2kW Compact FM Transmitter 3kW; 1kW; 5kW; 4kW; The following Electrolink transmitters are affected: 10W; 500W; 3kW; 15kW" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-107-02" ;
    icsa:vendor "Electrolink" ;
    icsa:year 2024 .

icsa-res:ICSA-24-107-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-107-03" ;
    dcterms:issued "2024-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix and GuardLogix (Update A)" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-3493" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-3493 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, 1756-EN4TR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "programmable logic controllers; are affected: ControlLogix 5580: Version V35.011 GuardLogix 5580: Version V35.011 CompactLogix 5380: Version V35.011 1756-EN4TR: Version V5.001 Compact GuardLogix 5380: V35.011 ControlLogix 5580 Process: V35.011 CompactLogix 5380 Process: V35.011 CompactLogix 5480: V35.011.; The following versions of Rockwell Automation ControlLogix and GuardLogix" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-107-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-107-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-107-04" ;
    dcterms:issued "2024-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "RoboDK RoboDK" ;
    icsa:CVSSScore "3.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-0257" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2024-0257 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RoboDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a robotics development software; The following versions of RoboDK; are affected: RoboDK: RoboDK v5.5.4 (Windows 64 bit)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-107-04" ;
    icsa:vendor "RoboDK" ;
    icsa:year 2024 .

icsa-res:ICSA-24-109-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-109-01" ;
    dcterms:issued "2024-04-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Unitronics Vision Legacy Series (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Israel" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-1480" ;
    icsa:cweNumber "CWE-257" ;
    icsa:hasCVE cve-res:CVE-2024-1480 ;
    icsa:hasCWE cwe-res:CWE-257 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vision Legacy series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Unitronics Vision Legacy series PLCs are affected: Vision 230: All versions Vision 280: All versions Vision 290: All versions Vision 530: All versions Vision 120: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-109-01" ;
    icsa:vendor "Unitronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-116-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-116-01" ;
    dcterms:issued "2024-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Multiple Vulnerabilities in Hitachi Energy RTU500 Series" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-1531; CVE-2024-1532" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2024-1531,
        cve-res:CVE-2024-1532 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi's RTU500 series CMU Firmware are affected: RTU500 series CMU Firmware: Version 12.0.1 - 12.0.14 RTU500 series CMU Firmware: Version 12.2.1 - 12.2.11 RTU500 series CMU Firmware: Version 12.4.1 - 12.4.11 RTU500 series CMU Firmware: Version 12.6.1 - 12.6.9 RTU500 series CMU Firmware: Version 12.7.1 - 12.7.6 RTU500 series CMU Firmware: Version 13.2.1 - 13.2.6 RTU500 series CMU Firmware: Version 13.4.1 - 13.4.4 RTU500 series CMU Firmware: Version 13.5.1 - 13.5.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-116-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-116-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-116-02" ;
    dcterms:issued "2024-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MACH SCM (Update A)" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-0400; CVE-2024-2097" ;
    icsa:cweNumber "CWE-94; CWE-95" ;
    icsa:hasCVE cve-res:CVE-2024-0400,
        cve-res:CVE-2024-2097 ;
    icsa:hasCWE cwe-res:CWE-94,
        cwe-res:CWE-95 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MACH SCM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MACH SCM; are affected: MACH SCM: Versions 4.0 to 4.5.x MACH SCM: Versions 4.6 to 4.38 MACH SCM Tools: Versions 1.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-116-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-116-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-116-03" ;
    dcterms:issued "2024-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 Devices Configured with Palo Alto Networks Virtual NGFW" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-3400" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-3400 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: RUGGEDCOM APE1808: All versions with Palo Alto Networks Virtual NGFW configured with GlobalProtect gateway or GlobalProtect portal (or both).; The following versions of Siemens RUGGEDCOM APE1808; an application hosting platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-116-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-116-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-116-04" ;
    dcterms:issued "2024-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-5398; CVE-2023-5392; CVE-2023-5397; CVE-2023-5393; CVE-2023-5406; CVE-2023-5407; CVE-2023-5390; CVE-2023-5405; CVE-2023-5394; CVE-2023-5389; CVE-2023-5396" ;
    icsa:cweNumber "CWE-36; CWE-122; CWE-130; CWE-787; CWE-20; CWE-121; CWE-119; CWE-805; CWE-749; CWE-1295; CWE-1327" ;
    icsa:hasCVE cve-res:CVE-2023-5389,
        cve-res:CVE-2023-5390,
        cve-res:CVE-2023-5392,
        cve-res:CVE-2023-5393,
        cve-res:CVE-2023-5394,
        cve-res:CVE-2023-5396,
        cve-res:CVE-2023-5397,
        cve-res:CVE-2023-5398,
        cve-res:CVE-2023-5405,
        cve-res:CVE-2023-5406,
        cve-res:CVE-2023-5407 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-1295,
        cwe-res:CWE-130,
        cwe-res:CWE-1327,
        cwe-res:CWE-20,
        cwe-res:CWE-36,
        cwe-res:CWE-749,
        cwe-res:CWE-787,
        cwe-res:CWE-805 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "LX; R211.2; Honeywell reports these vulnerabilities affect the following versions of Experion PKS; R16x up to and including R162.10 Safety Manager SC: R210.X; Safety Manager; R212.1.; and Safety Manager SC: Experion PKS: All releases prior to R510.2 HF14 Experion PKS: All releases prior to R511.5 TCU4 HF4 Experion PKS: All releases prior to R520.1 TCU5 Experion PKS: All releases prior to R520.2 TCU4 HF2 Experion LX: All releases prior to R511.5 TCU4 HF4 Experion LX: All releases prior to R520.1 TCU5 Experion LX: All releases prior to R520.2 TCU4 HF2 PlantCruise by Experion: All releases prior to R511.5 TCU4 HF4 PlantCruise by Experion: All releases prior to R520.1 TCU5 PlantCruise by Experion: All releases prior to R520.2 TCU4 HF2 Safety Manager: R15x; R211.1; PlantCruise" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-116-04" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2024 .

icsa-res:ICSA-24-121-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-121-01" ;
    dcterms:issued "2024-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-G2 DOPSoft (Update A)" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-58319; CVE-2024-4192" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-4192,
        cve-res:CVE-2025-58319 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft-G2 DOPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: CNCSoft-G2: Versions 2.0.0.5 (with DOPSoft v5.0.0.93) and prior (CVE-2024-4192) CNCSoft-G2: Versions 2.1.0.27 and prior (CVE-2025-58319).; The following versions of Delta Electronics CNCSoft-G2; a Human-Machine Interface (HMI) software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-121-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-123-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-123-01" ;
    dcterms:issued "2024-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "CyberPower PowerPanel" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-31409; CVE-2024-31856; CVE-2024-31410; CVE-2024-32042; CVE-2024-32047; CVE-2024-33615; CVE-2024-32053; CVE-2024-34025" ;
    icsa:cweNumber "CWE-89; CWE-321; CWE-23; CWE-257; CWE-259; CWE-285; CWE-798; CWE-489" ;
    icsa:hasCVE cve-res:CVE-2024-31409,
        cve-res:CVE-2024-31410,
        cve-res:CVE-2024-31856,
        cve-res:CVE-2024-32042,
        cve-res:CVE-2024-32047,
        cve-res:CVE-2024-32053,
        cve-res:CVE-2024-33615,
        cve-res:CVE-2024-34025 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-257,
        cwe-res:CWE-259,
        cwe-res:CWE-285,
        cwe-res:CWE-321,
        cwe-res:CWE-489,
        cwe-res:CWE-798,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerPanel" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: PowerPanel: 4.9.0 and prior.; The following versions of PowerPanel; a business management software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-123-01" ;
    icsa:vendor "CyberPower" ;
    icsa:year 2024 .

icsa-res:ICSA-24-123-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-123-02" ;
    dcterms:issued "2024-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAEnergie" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-34033; CVE-2024-34032; CVE-2024-34031" ;
    icsa:cweNumber "CWE-22; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2024-34031,
        cve-res:CVE-2024-34032,
        cve-res:CVE-2024-34033 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAEnergie" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics DIAEnergie; an industrial energy management system; are affected: DIAEnergie: Versions v1.10.00.005." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-123-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-128-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-128-01" ;
    dcterms:issued "2024-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Codebeamer" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-3951" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-3951 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Codebeamer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an application lifecycle management platform; The following versions of PTC Codebeamer; are affected: Codebeamer: version 22.10 SP9 and prior Codebeamer: version 2.0.0.3 and prior Codebeamer: version 2.1.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-128-01" ;
    icsa:vendor "PTC" ;
    icsa:year 2024 .

icsa-res:ICSA-24-128-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-128-02" ;
    dcterms:issued "2024-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "SUBNET Substation Server" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-26024" ;
    icsa:cweNumber "CWE-1357" ;
    icsa:hasCVE cve-res:CVE-2024-26024 ;
    icsa:hasCWE cwe-res:CWE-1357 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Substation Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SUBNET Solutions reports that the following products use components with vulnerabilities: Substation Server: 2.23.10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-128-02" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-130-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-130-01" ;
    dcterms:issued "2024-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Historian SE" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-31274; CVE-2023-34348" ;
    icsa:cweNumber "CWE-703; CWE-772" ;
    icsa:hasCVE cve-res:CVE-2023-31274,
        cve-res:CVE-2023-34348 ;
    icsa:hasCWE cwe-res:CWE-703,
        cwe-res:CWE-772 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Historian SE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation FactoryTalk Historian SE; a data management application; are affected: FactoryTalk Historian SE: Versions v9.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-130-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-130-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-130-02" ;
    dcterms:issued "2024-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "alpitronic Hypercharger EV Charger" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2024-4622" ;
    icsa:cweNumber "CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2024-4622 ;
    icsa:hasCWE cwe-res:CWE-1392 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hypercharger EV charger" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hypercharger EV charger; are affected: Hypercharger EV charger: all versions.; a high power charging station" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-130-02" ;
    icsa:vendor "alpitronic" ;
    icsa:year 2024 .

icsa-res:ICSA-24-130-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-130-03" ;
    dcterms:issued "2024-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics InfraSuite Device Master" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-46604" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-46604 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InfraSuite Device Master" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: InfraSuite Device Master: Versions 1.0.10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-130-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-135-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-135-01" ;
    dcterms:issued "2024-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Remote Access" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-3640" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2024-3640 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Remote Access" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation's FactoryTalk Remote Access are affected: FactoryTalk Remote Access: v13.5.0.174 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-135-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-135-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-135-02" ;
    dcterms:issued "2024-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "SUBNET PowerSYSTEM Center and Substation Server" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-28042" ;
    icsa:cweNumber "CWE-1357" ;
    icsa:hasCVE cve-res:CVE-2024-28042 ;
    icsa:hasCWE cwe-res:CWE-1357 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerSYSTEM Center" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SUBNET Solutions reports that the following products use components with vulnerabilities: PowerSYSTEM Center: Update 19 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-135-02" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-135-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-135-03" ;
    dcterms:issued "2024-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Software House C-CURE 9000" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-0912" ;
    icsa:cweNumber "CWE-532" ;
    icsa:hasCVE cve-res:CVE-2024-0912 ;
    icsa:hasCWE cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Software House C-CURE 9000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Software House C-CURE 9000: v3.00.2.; a security management system; Johnson Controls reports that the following versions of Software House C-CURE 9000" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-135-03" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-135-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-135-04" ;
    dcterms:issued "2024-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Multiple FA Engineering Software Products (Update F)" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States, Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-51778; CVE-2023-51777; CVE-2024-22106; CVE-2024-22105; CVE-2024-26314; CVE-2024-22102; CVE-2024-25087; CVE-2024-22103; CVE-2024-25086; CVE-2024-22104; CVE-2023-51776; CVE-2024-25088" ;
    icsa:cweNumber "CWE-269; CWE-787; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-51776,
        cve-res:CVE-2023-51777,
        cve-res:CVE-2023-51778,
        cve-res:CVE-2024-22102,
        cve-res:CVE-2024-22103,
        cve-res:CVE-2024-22104,
        cve-res:CVE-2024-22105,
        cve-res:CVE-2024-22106,
        cve-res:CVE-2024-25086,
        cve-res:CVE-2024-25087,
        cve-res:CVE-2024-25088,
        cve-res:CVE-2024-26314 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-400,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Multiple FA Engineering Software Products (Update F)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CPU Module Logging Configuration Tool <=1.154L | CSGL (GX Works2 connection configuration) <=2.5 | CW Configurator <=1.019V | Data Transfer <=3.58L | Data Transfer Classic <=1.00A | EZSocket <=5.92 | FR Configurator SW3 | FR Configurator2 <=1.32J | GENESIS64 <=10.97.3 | GT Designer3 Version1 (GOT1000) <=1.310Y | GT Designer3 Version1 (GOT2000) <=1.317F | GT SoftGOT1000 Version3 <=3.310Y | GT SoftGOT2000 Version1 <=1.315D | GX Developer | GX LogViewer <=1.154L | GX Works2 <=1.622Y | GX Works3 <=1.106L | iQ Works (MELSOFT Navigator) <=2.102G | MI Configurator | Numerical Control Device Communication Software (FCSB1224) <=A8 | MR Configurator (SETUP221) | MR Configurator2 <=1.150G | Position Board Utility2 (MRZJW3-MC2-UTL) <=3.40 | MX Component <=5.007H | MX OPC Server DA/UA (Software packaged with MC Works64) | PX Developer/Monitor Tool <=1.58L | RT ToolBox3 <=2.20W | RT VisualBox <=1.11M | Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) <=4.14Q | MELSECNET/H Interface Board software package (SW0DNC-MNETH-B) <=36N | CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B) <=1.25B | CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J) <=1.18U | CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B) <=1.31H | C Controller Interface Module utility (SW1DNC-QSCCF-B) <=2.10 | MELSOFT EM Software Development Kit (SW1DND-EMSDK-B) <=1.020W | MT Works2 <=1.200J | ICONICS Suite <=10.97.3 | CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-B) <=1.18U" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-135-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-01" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-32637; CVE-2024-32636; CVE-2024-32635" ;
    icsa:cweNumber "CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-32635,
        cve-res:CVE-2024-32636,
        cve-res:CVE-2024-32637 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Siemens Parasolid V35.1: Versions prior to V35.1.256 Siemens Parasolid V36.0: Versions prior to V36.0.208 Siemens Parasolid V36.1: Versions prior to V36.1.173.; a design and simulation product; The following versions of Siemens Parasolid" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-02" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM Products" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-31485; CVE-2024-31486; CVE-2024-31484" ;
    icsa:cweNumber "CWE-170; CWE-77; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2024-31484,
        cve-res:CVE-2024-31485,
        cve-res:CVE-2024-31486 ;
    icsa:hasCWE cwe-res:CWE-170,
        cwe-res:CWE-312,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CPC80 Central Processing/Communication, CPCI85 Central Processing/Communication, OPUPI0 AMQP/MQTT, SICORE Base system" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of multiple Siemens SICAM products are affected: CPC80 Central Processing/Communication: All versions prior to V16.41 CPCI85 Central Processing/Communication: All versions prior to V5.30 OPUPI0 AMQP/MQTT: All versions prior to V5.30 SICORE Base system: All versions prior to V1.3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-03" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-34086; CVE-2024-34085" ;
    icsa:cweNumber "CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-34085,
        cve-res:CVE-2024-34086 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go, Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Teamcenter Visualization and JT2Go; 3d file viewers; are affected: JT2Go: All versions prior to V2312.0001 Teamcenter Visualization V14.1: All versions prior to V14.1.0.13 Teamcenter Visualization V14.2: All versions prior to V14.2.0.10 Teamcenter Visualization V14.3: All versions prior to V14.3.0.7 Teamcenter Visualization V2312: All versions prior to V2312.0001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-04" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Polarion ALM" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-33647" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2024-33647 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Polarion ALM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Polarion ALM; are affected: Polarion ALM: All versions prior to V2404.0.; an application lifecycle management software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-05" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Nastran" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-33577" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-33577 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Nastran" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Simcenter Nastran 2306: All versions Simcenter Nastran 2312: All versions Simcenter Nastran 2406: All versions prior to V2406.90.; a finite element analysis program; The following versions of Siemens Simcenter Nastran" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-06" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CN 4100 Before V3.0" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-32741; CVE-2024-32740; CVE-2024-32742" ;
    icsa:cweNumber "CWE-798; CWE-259; CWE-1326" ;
    icsa:hasCVE cve-res:CVE-2024-32740,
        cve-res:CVE-2024-32741,
        cve-res:CVE-2024-32742 ;
    icsa:hasCWE cwe-res:CWE-1326,
        cwe-res:CWE-259,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CN 4100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SIMATIC CN 4100; are affected: SIMATIC CN 4100: All versions prior to V3.0.; a communication node" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-07" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RTLS Locating Manager" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2023-46219; CVE-2024-30208; CVE-2024-33495; CVE-2023-4807; CVE-2024-30209; CVE-2023-33953; CVE-2024-33494; CVE-2024-33499; CVE-2024-33497; CVE-2023-38545; CVE-2023-5678; CVE-2024-33498; CVE-2023-29409; CVE-2024-33496; CVE-2023-5363; CVE-2023-38039; CVE-2024-30206; CVE-2024-33583; CVE-2023-38546; CVE-2023-46218; CVE-2024-30207" ;
    icsa:cweNumber "CWE-732; CWE-912; CWE-494; CWE-834; CWE-770; CWE-122; CWE-321; CWE-20; CWE-73; CWE-311; CWE-400; CWE-345; CWE-319; CWE-522; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2023-29409,
        cve-res:CVE-2023-33953,
        cve-res:CVE-2023-38039,
        cve-res:CVE-2023-38545,
        cve-res:CVE-2023-38546,
        cve-res:CVE-2023-46218,
        cve-res:CVE-2023-46219,
        cve-res:CVE-2023-4807,
        cve-res:CVE-2023-5363,
        cve-res:CVE-2023-5678,
        cve-res:CVE-2024-30206,
        cve-res:CVE-2024-30207,
        cve-res:CVE-2024-30208,
        cve-res:CVE-2024-30209,
        cve-res:CVE-2024-33494,
        cve-res:CVE-2024-33495,
        cve-res:CVE-2024-33496,
        cve-res:CVE-2024-33497,
        cve-res:CVE-2024-33498,
        cve-res:CVE-2024-33499,
        cve-res:CVE-2024-33583 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-20,
        cwe-res:CWE-311,
        cwe-res:CWE-319,
        cwe-res:CWE-321,
        cwe-res:CWE-345,
        cwe-res:CWE-400,
        cwe-res:CWE-494,
        cwe-res:CWE-522,
        cwe-res:CWE-73,
        cwe-res:CWE-732,
        cwe-res:CWE-754,
        cwe-res:CWE-770,
        cwe-res:CWE-834,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RTLS Locating Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "operation; are affected: Siemens SIMATIC RTLS Locating Manager (6GT2780-0DA00): Versions prior to V3.0.1.1 Siemens SIMATIC RTLS Locating Manager (6GT2780-0DA10): Versions prior to V3.0.1.1 Siemens SIMATIC RTLS Locating Manager (6GT2780-0DA20): Versions prior to V3.0.1.1 Siemens SIMATIC RTLS Locating Manager (6GT2780-0DA30): Versions prior to V3.0.1.1 Siemens SIMATIC RTLS Locating Manager (6GT2780-1EA10): Versions prior to V3.0.1.1 Siemens SIMATIC RTLS Locating Manager (6GT2780-1EA20): Versions prior to V3.0.1.1 Siemens SIMATIC RTLS Locating Manager (6GT2780-1EA30): Versions prior to V3.0.1.1.; a configuration; and maintenance tool; The following versions of SIMATIC RTLS Locating Manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-08" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PS/IGES Parasolid Translator Component" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-32062; CVE-2024-32061; CVE-2024-32055; CVE-2024-32064; CVE-2024-32059; CVE-2024-32066; CVE-2024-32057; CVE-2024-32060; CVE-2024-32063; CVE-2024-32065; CVE-2024-32058" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-843" ;
    icsa:hasCVE cve-res:CVE-2024-32055,
        cve-res:CVE-2024-32057,
        cve-res:CVE-2024-32058,
        cve-res:CVE-2024-32059,
        cve-res:CVE-2024-32060,
        cve-res:CVE-2024-32061,
        cve-res:CVE-2024-32062,
        cve-res:CVE-2024-32063,
        cve-res:CVE-2024-32064,
        cve-res:CVE-2024-32065,
        cve-res:CVE-2024-32066 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PS/IGES Parasolid Translator Component" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following single-format translator toolkits are affected: PS/IGES Parasolid Translator Component: versions prior to V27.1.215." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-09" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-33490; CVE-2024-34773; CVE-2024-33491; CVE-2024-33493; CVE-2024-34772; CVE-2024-33492; CVE-2024-33489; CVE-2024-34771" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-33489,
        cve-res:CVE-2024-33490,
        cve-res:CVE-2024-33491,
        cve-res:CVE-2024-33492,
        cve-res:CVE-2024-33493,
        cve-res:CVE-2024-34771,
        cve-res:CVE-2024-34772,
        cve-res:CVE-2024-34773 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-33490; are affected: Solid Edge: All versions prior to V224.0 Update 5 (CVE-2024-33489; CVE-2024-33491; The following products of Siemens; CVE-2024-33492; CVE-2024-34773) Solid Edge: All versions prior to V224.0 Update 4 (CVE-2024-34772).; CVE-2024-33493) Solid Edge: All versions prior to V224.0 Update 2 (CVE-2024-34771" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-10" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM CROSSBOW" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-27941; CVE-2024-27940; CVE-2024-27947; CVE-2024-27944; CVE-2024-27942; CVE-2024-27945; CVE-2024-27943; CVE-2024-27946; CVE-2024-27939" ;
    icsa:cweNumber "CWE-22; CWE-862; CWE-89; CWE-200; CWE-306; CWE-73" ;
    icsa:hasCVE cve-res:CVE-2024-27939,
        cve-res:CVE-2024-27940,
        cve-res:CVE-2024-27941,
        cve-res:CVE-2024-27942,
        cve-res:CVE-2024-27943,
        cve-res:CVE-2024-27944,
        cve-res:CVE-2024-27945,
        cve-res:CVE-2024-27946,
        cve-res:CVE-2024-27947 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-73,
        cwe-res:CWE-862,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM CROSSBOW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: RUGGEDCOM CROSSBOW: Versions prior to V5.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-11" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-0218; CVE-2023-6916" ;
    icsa:cweNumber "CWE-20; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2023-6916,
        cve-res:CVE-2024-0218 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products using Nozomi Guardian/CMC before 23.4.1; are affected: RUGGEDCOMAPE1808LNX (6GK6015-0AL200GH0): All versions RUGGEDCOM APE1808LNX CC (6GK60150AL20-0GH1): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-12" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Emergency Services" ;
    icsa:cveNumber "CVE-2024-22040; CVE-2024-22039; CVE-2024-22041" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2024-22039,
        cve-res:CVE-2024-22040,
        cve-res:CVE-2024-22041 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cerberus PRO UL and Desigo Fire Safety UL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Siemens Cerberus PRO UL Compact Panel FC922/924: All versions prior to MP4 Siemens Cerberus PRO UL Engineering Tool: All versions prior to MP4 Siemens Cerberus PRO UL X300 Cloud Distribution: All versions prior to V4.3.0001 Siemens Desigo Fire Safety UL Compact Panel FC2025/2050: All versions prior to MP4 Siemens Desigo Fire Safety UL Engineering Tool: All versions prior to MP4 Siemens Desigo Fire Safety UL X300 Cloud Distribution: All versions prior to V4.3.0001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-13" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-46280" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-46280 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "S7-PCT, SCT, SIMATIC, SINAMICS, SINUMERIK, and TIA Portal Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: Siemens S7-PCT: All versions Siemens Security Configuration Tool (SCT): All versions Siemens SIMATIC Automation Tool: All versions Siemens SIMATIC BATCH V9.1: All versions prior to V9.1.2.5 Siemens SIMATIC NET PC Software: All versions Siemens SIMATIC PCS 7 V9.1: All versions Siemens SIMATIC PDM V9.2: All versions prior to V9.2 SP2 Upd3 Siemens SIMATIC Route Control V9.1: All versions prior to V9.1.2.5 Siemens SIMATIC STEP 7 V5: All versions Siemens SIMATIC WinCC OA V3.17: All versions Siemens SIMATIC WinCC OA V3.18: All versions prior to V3.18 P025 Siemens SIMATIC WinCC OA V3.19: All versions prior to V3.19 P010 Siemens SIMATIC WinCC Runtime Advanced: All versions Siemens SIMATIC WinCC Runtime Professional V16: All versions Siemens SIMATIC WinCC Runtime Professional V17: All versions Siemens SIMATIC WinCC Runtime Professional V18: All versions Siemens SIMATIC WinCC Runtime Professional V19: All versions Siemens SIMATIC WinCC Unified PC Runtime: All versions Siemens SIMATIC WinCC V7.4: All versions Siemens SIMATIC WinCC V7.5: All versions Siemens SIMATIC WinCC V8.0: All versions Siemens SINAMICS Startdrive: All versions prior to V19 SP1 Siemens SINUMERIK ONE virtual: All versions prior to V6.23 Siemens SINUMERIK PLC Programming Tool: All versions Siemens TIA Portal Cloud Connector: All versions prior to V2.0 Siemens Totally Integrated Automation Portal (TIA Portal) V15.1: All versions Siemens Totally Integrated Automation Portal (TIA Portal) V16: All versions Siemens Totally Integrated Automation Portal (TIA Portal) V17: All versions Siemens Totally Integrated Automation Portal (TIA Portal) V18: All versions Siemens Totally Integrated Automation Portal (TIA Portal) V19: All versions prior to V19 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-137-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-137-14" ;
    dcterms:issued "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View SE" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-4609" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-4609 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View SE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "monitoring software; The following versions of Rockwell Automation's FactoryTalk View SE; are affected: FactoryTalk View SE: Versions prior to 14.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-137-14" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-142-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-142-01" ;
    dcterms:issued "2024-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS LAquis SCADA" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-5040" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2024-5040 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "an HMI program; The following versions of LAquis SCADA; are affected: LAquis SCADA: Versions 4.7.1.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-142-01" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2024 .

icsa-res:ICSA-24-144-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-144-01" ;
    dcterms:issued "2024-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect Productivity PLCs" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2024-22187; CVE-2024-24958; CVE-2024-24955; CVE-2024-24962; CVE-2024-21785; CVE-2024-24959; CVE-2024-24851; CVE-2024-24963; CVE-2024-24947; CVE-2024-23601; CVE-2024-23315; CVE-2024-24954; CVE-2024-24956; CVE-2024-24946; CVE-2024-24957" ;
    icsa:cweNumber "CWE-284; CWE-121; CWE-805; CWE-489; CWE-345" ;
    icsa:hasCVE cve-res:CVE-2024-21785,
        cve-res:CVE-2024-22187,
        cve-res:CVE-2024-23315,
        cve-res:CVE-2024-23601,
        cve-res:CVE-2024-24851,
        cve-res:CVE-2024-24946,
        cve-res:CVE-2024-24947,
        cve-res:CVE-2024-24954,
        cve-res:CVE-2024-24955,
        cve-res:CVE-2024-24956,
        cve-res:CVE-2024-24957,
        cve-res:CVE-2024-24958,
        cve-res:CVE-2024-24959,
        cve-res:CVE-2024-24962,
        cve-res:CVE-2024-24963 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-284,
        cwe-res:CWE-345,
        cwe-res:CWE-489,
        cwe-res:CWE-805 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Productivity PLCs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AutomationDirect reports the following versions of Productivity PLCs are affected: Productivity 3000 P3-550E CPU: FW 1.2.10.9 Productivity 3000 P3-550E CPU: SW 4.1.1.10 Productivity 3000 P3-550 CPU: FW 1.2.10.9 Productivity 3000 P3-550 CPU: SW 4.1.1.10 Productivity 3000 P3-530 CPU: FW 1.2.10.9 Productivity 3000 P3-530 CPU: SW 4.1.1.10 Productivity 2000 P2-550 CPU: FW 1.2.10.10 Productivity 2000 P2-550 CPU: SW 4.1.1.10 Productivity 1000 P1-550 CPU: FW 1.2.10.10 Productivity 1000 P1-550 CPU: SW 4.1.1.10 Productivity 1000 P1-540 CPU: FW 1.2.10.10 Productivity 1000 P1-540 CPU: SW 4.1.1.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-144-01" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2024 .

icsa-res:ICSA-24-149-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-149-01" ;
    dcterms:issued "2024-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Campbell Scientific CSI Web Server" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Food and Agriculture; Water and Wastewater Systems; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-5434; CVE-2024-5433" ;
    icsa:cweNumber "CWE-22; CWE-261" ;
    icsa:hasCVE cve-res:CVE-2024-5433,
        cve-res:CVE-2024-5434 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-261 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CSI Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Campbell Scientific CSI Web Server and RTMC (Real-Time Monitoring and Control) Pro; which contains the CSI Web Server are affected: Campbell Scientific CSI Web Server: Versions 1.6 and prior RTMC Pro: Version 5.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-149-01" ;
    icsa:vendor "Campbell Scientific" ;
    icsa:year 2024 .

icsa-res:ICSA-24-151-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-151-01" ;
    dcterms:issued "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "LenelS2 NetBox" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-2421; CVE-2024-2422; CVE-2024-2420" ;
    icsa:cweNumber "CWE-88; CWE-78; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2024-2420,
        cve-res:CVE-2024-2421,
        cve-res:CVE-2024-2422 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-78,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NetBox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: NetBox: All versions prior to 5.6.2.; a Carrier Brand; The following products of LenelS2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-151-01" ;
    icsa:vendor "LenelS2" ;
    icsa:year 2024 .

icsa-res:ICSA-24-151-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-151-02" ;
    dcterms:issued "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Monitouch V-SFT (Update A)" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-5271; CVE-2024-5597; CVE-2024-34171" ;
    icsa:cweNumber "CWE-843; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-34171,
        cve-res:CVE-2024-5271,
        cve-res:CVE-2024-5597 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Monitouch V-SFT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Monitouch V-SFT: Versions prior to 6.2.3.0.; a screen configuration software; The following versions of Fuji Electric's Monitouch V-SFT" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-151-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-151-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-151-03" ;
    dcterms:issued "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inosoft VisiWin" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical manufacturing" ;
    icsa:cveNumber "CVE-2023-31468" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2023-31468 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VisiWin" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Inosoft products are affected: VisiWin 7: All versions prior to version 2024-1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-151-03" ;
    icsa:vendor "Inosoft" ;
    icsa:year 2024 .

icsa-res:ICSA-24-151-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-151-04" ;
    dcterms:issued "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Westermo EDW-100" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-36081; CVE-2024-36080" ;
    icsa:cweNumber "CWE-522; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2024-36080,
        cve-res:CVE-2024-36081 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EDW-100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a Serial to Ethernet converter; are affected: EDW-100: All versions.; The following versions of Westermo EDW-100" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-151-04" ;
    icsa:vendor "Westermo" ;
    icsa:year 2024 .

icsa-res:ICSA-24-156-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-156-01" ;
    dcterms:issued "2024-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Uniview NVR301-04S2-P4 (Update A)" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-3850" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-3850 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NVR301-04S2-P4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Uniview NVR; is affected: NVR301-04S2-P4: Versions prior to NVR-B3801.20.17.240507.; a network video recorder" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-156-01" ;
    icsa:vendor "Uniview" ;
    icsa:year 2024 .

icsa-res:ICSA-24-158-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-158-01" ;
    dcterms:issued "2024-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson PACSystem and Fanuc" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-30266; CVE-2022-30265; CVE-2022-30263; CVE-2022-30268" ;
    icsa:cweNumber "CWE-345; CWE-319; CWE-522; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2022-30263,
        cve-res:CVE-2022-30265,
        cve-res:CVE-2022-30266,
        cve-res:CVE-2022-30268 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-345,
        cwe-res:CWE-494,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PACSystem, Fanuc" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2022-30266) PACSystem RX3i: All versions (CVE-2022-30263; CVE-2022-30265) PACSystem VersaMax: All versions (CVE-2022-30263; CVE-2022-30266; CVE-2022-30265) PACSystem RXi: All versions (CVE-2022-30263; CVE-2022-30266).; CVE-2022-30265) Fanuc VersaMax: All versions (CVE-2022-30263; CVE-2022-30265) PACSystem RSTi-EP: All versions (CVE-2022-30263; The following Emerson products are affected: PAC Machine Edition: All versions (CVE-2022-30263; CVE-2022-30268" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-158-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2024 .

icsa-res:ICSA-24-158-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-158-02" ;
    dcterms:issued "2024-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson Ovation" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-30267; CVE-2022-29966" ;
    icsa:cweNumber "CWE-306; CWE-345" ;
    icsa:hasCVE cve-res:CVE-2022-29966,
        cve-res:CVE-2022-30267 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ovation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Emerson products are affected: Ovation: Version 3.8.0 Feature Pack 1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-158-02" ;
    icsa:vendor "Emerson" ;
    icsa:year 2024 .

icsa-res:ICSA-24-158-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-158-03" ;
    dcterms:issued "2024-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-2650" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2023-2650 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CC-Link IE TSN Industrial Managed Switch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CC-Link IE TSN Industrial Managed Switch are affected: NZ2MHG-TSNT8F2: Versions 05 and prior NZ2MHG-TSNT4: Versions 05 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-158-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-158-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-158-04" ;
    dcterms:issued "2024-06-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Software House iStar Pro Door Controller (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32752" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2024-32752 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Software House iStar Pro, Edge, eX, Ultra and Ultra LT controllers, ICU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Edge and eX door controllers: all versions Software House iStar Ultra and Ultra LT door controllers: Firmware prior to 6.6.B iSTAR Configuration Utility (ICU) Tool: All versions.; Johnson Controls reports that the following products are affected: Software House iStar Pro" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-158-04" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-163-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-163-01" ;
    dcterms:issued "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix, GuardLogix, and CompactLogix" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-5659" ;
    icsa:cweNumber "CWE-670" ;
    icsa:hasCVE cve-res:CVE-2024-5659 ;
    icsa:hasCWE cwe-res:CWE-670 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix, GuardLogix, CompactLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following controllers are affected: ControlLogix 5580: V34.011 GuardLogix 5580: V34.011 1756-EN4: V4.001 CompactLogix 5380: V34.011 Compact GuardLogix 5380: V34.011 CompactLogix 5380: V34.011 ControlLogix 5580: V34.011 CompactLogix 5480: V34.011." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-163-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-163-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-163-02" ;
    dcterms:issued "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PI Web API" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-3468" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-3468 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Web API" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of AVEVA PI Web API; are affected: AVEVA PI Web API: Versions 2023 and prior.; a RESTful interface to the PI system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-163-02" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2024 .

icsa-res:ICSA-24-163-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-163-03" ;
    dcterms:issued "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PI Asset Framework Client" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-3467" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-3467 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Asset Framework Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of AVEVA PI Asset Framework Client; a tool to model either physical or logical objects; are affected: PI Asset Framework Client: 2023 PI Asset Framework Client: 2018 SP3 P04 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-163-03" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2024 .

icsa-res:ICSA-24-163-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-163-04" ;
    dcterms:issued "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Intrado 911 Emergency Gateway" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Emergency Services" ;
    icsa:cveNumber "CVE-2024-1839" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2024-1839 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "911 Emergency Gateway (EGW)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Intrado's 911 Emergency Gateway are affected: 911 Emergency Gateway (EGW): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-163-04" ;
    icsa:vendor "Intrado" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-01" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Applications" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Defense Industrial Base; Energy; Financial Services; Government Facilities; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-33500" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2024-33500 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Applications" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products; are affected: Siemens Mendix Applications using Mendix 9: Versions prior to V9.24.22 and after V9.3.0 Siemens Mendix Applications using Mendix 10: Versions prior to V10.11.0 Siemens Mendix Applications using Mendix 10 (V10.6): Versions prior V10.6.9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-02" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-200 SMART Devices" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-35292" ;
    icsa:cweNumber "CWE-330" ;
    icsa:hasCVE cve-res:CVE-2024-35292 ;
    icsa:hasCWE cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-200 SMART devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens programmable logic controllers are affected: Siemens SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1): All versions Siemens SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1): All versions Siemens SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA1): All versions Siemens SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1): All versions Siemens SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1): All versions Siemens SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1): All versions Siemens SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA1): All versions Siemens SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0): All versions Siemens SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-03" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Administrator" ;
    icsa:CVSSScore "4.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-38533" ;
    icsa:cweNumber "CWE-379" ;
    icsa:hasCVE cve-res:CVE-2023-38533 ;
    icsa:hasCWE cwe-res:CWE-379 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIA Administrator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens TIA Administrator; a web-based framework; are affected: TIA Administrator: All versions prior to V3 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-04" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens ST7 ScadaConnect" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-33126; CVE-2023-33135; CVE-2023-44487; CVE-2022-40304; CVE-2023-0465; CVE-2023-0466; CVE-2023-3446; CVE-2023-32032; CVE-2023-36049; CVE-2023-35390; CVE-2023-36794; CVE-2023-38180; CVE-2023-36792; CVE-2023-36558; CVE-2023-21808; CVE-2023-29469; CVE-2023-5678; CVE-2023-24936; CVE-2022-40303; CVE-2023-36038; CVE-2023-29331; CVE-2023-24897; CVE-2023-33170; CVE-2023-36799; CVE-2023-36796; CVE-2023-24895; CVE-2023-0464; CVE-2023-35391; CVE-2023-28484; CVE-2023-33128; CVE-2023-36435; CVE-2023-38171; CVE-2023-38178; CVE-2023-36793; CVE-2023-33127; CVE-2023-28260; CVE-2023-39615" ;
    icsa:cweNumber "CWE-119; CWE-415; CWE-1333; CWE-20; CWE-190; CWE-311; CWE-400; CWE-295; CWE-476; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2022-40303,
        cve-res:CVE-2022-40304,
        cve-res:CVE-2023-0464,
        cve-res:CVE-2023-0465,
        cve-res:CVE-2023-0466,
        cve-res:CVE-2023-21808,
        cve-res:CVE-2023-24895,
        cve-res:CVE-2023-24897,
        cve-res:CVE-2023-24936,
        cve-res:CVE-2023-28260,
        cve-res:CVE-2023-28484,
        cve-res:CVE-2023-29331,
        cve-res:CVE-2023-29469,
        cve-res:CVE-2023-32032,
        cve-res:CVE-2023-33126,
        cve-res:CVE-2023-33127,
        cve-res:CVE-2023-33128,
        cve-res:CVE-2023-33135,
        cve-res:CVE-2023-33170,
        cve-res:CVE-2023-3446,
        cve-res:CVE-2023-35390,
        cve-res:CVE-2023-35391,
        cve-res:CVE-2023-36038,
        cve-res:CVE-2023-36049,
        cve-res:CVE-2023-36435,
        cve-res:CVE-2023-36558,
        cve-res:CVE-2023-36792,
        cve-res:CVE-2023-36793,
        cve-res:CVE-2023-36794,
        cve-res:CVE-2023-36796,
        cve-res:CVE-2023-36799,
        cve-res:CVE-2023-38171,
        cve-res:CVE-2023-38178,
        cve-res:CVE-2023-38180,
        cve-res:CVE-2023-39615,
        cve-res:CVE-2023-44487,
        cve-res:CVE-2023-5678 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-1333,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-295,
        cwe-res:CWE-311,
        cwe-res:CWE-400,
        cwe-res:CWE-415,
        cwe-res:CWE-476,
        cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ST7 ScadaConnect" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products; are affected: Siemens ST7 ScadaConnect (6NH7997-5DA10-0AA0): Versions prior to 1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-05" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SITOP UPS1600" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-26552; CVE-2023-26554; CVE-2023-26553" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-26552,
        cve-res:CVE-2023-26553,
        cve-res:CVE-2023-26554 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0), SITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0), SITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0), SITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0): All versions prior to V2.5.4 SITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0): All versions prior to V2.5.4 SITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0): All versions prior to V2.5.4 SITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0) All versions prior to V2.5.4.; an uninterruptible power supply; The following versions of Siemens SITOP UPS1600" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-06" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIM 1531 IRC" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-28319; CVE-2022-1015; CVE-2021-47178; CVE-2022-40304; CVE-2023-0465; CVE-2023-35829; CVE-2023-0466; CVE-2023-21255; CVE-2022-4450; CVE-2022-39189; CVE-2023-2269; CVE-2022-4304; CVE-2023-35828; CVE-2023-0160; CVE-2023-35788; CVE-2024-0775; CVE-2023-52474; CVE-2023-41910; CVE-2023-1017; CVE-2022-40303; CVE-2023-50763; CVE-2023-0215; CVE-2022-45887; CVE-2023-35823; CVE-2022-45886; CVE-2023-0464; CVE-2023-2124; CVE-2023-35824; CVE-2023-27321; CVE-2022-40225; CVE-2023-0286; CVE-2022-45919" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-787; CWE-326; CWE-667; CWE-835; CWE-20; CWE-681; CWE-190; CWE-311; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-47178,
        cve-res:CVE-2022-1015,
        cve-res:CVE-2022-39189,
        cve-res:CVE-2022-40225,
        cve-res:CVE-2022-40303,
        cve-res:CVE-2022-40304,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2022-45886,
        cve-res:CVE-2022-45887,
        cve-res:CVE-2022-45919,
        cve-res:CVE-2023-0160,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0464,
        cve-res:CVE-2023-0465,
        cve-res:CVE-2023-0466,
        cve-res:CVE-2023-1017,
        cve-res:CVE-2023-2124,
        cve-res:CVE-2023-21255,
        cve-res:CVE-2023-2269,
        cve-res:CVE-2023-27321,
        cve-res:CVE-2023-28319,
        cve-res:CVE-2023-35788,
        cve-res:CVE-2023-35823,
        cve-res:CVE-2023-35824,
        cve-res:CVE-2023-35828,
        cve-res:CVE-2023-35829,
        cve-res:CVE-2023-41910,
        cve-res:CVE-2023-50763,
        cve-res:CVE-2023-52474,
        cve-res:CVE-2024-0775 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-295,
        cwe-res:CWE-311,
        cwe-res:CWE-326,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-667,
        cwe-res:CWE-681,
        cwe-res:CWE-787,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPLUS TIM 1531 IRC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0): All versions prior to 2.4.8 SIPLUS TIM 1531 IRC (6GK7543-1MX00-0XE0): All versions prior to 2.4.8.; The following versions of SIPLUS TIM 1531 IRC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-07" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PowerSys" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-36266" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-36266 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerSys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: Siemens PowerSys: versions prior to V3.11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-08" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Defense Industrial Base; Energy" ;
    icsa:cveNumber "CVE-2024-26277; CVE-2024-26276; CVE-2024-26275" ;
    icsa:cweNumber "CWE-125; CWE-476; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2024-26275,
        cve-res:CVE-2024-26276,
        cve-res:CVE-2024-26277 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-476,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization and JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products; are affected: Siemens JT2Go: All versions prior to V2312.0004 Siemens Teamcenter Visualization V14.2: All Versions Siemens Teamcenter Visualization V14.3: All versions prior to V14.3.0.9 Siemens Teamcenter Visualization V2312: All versions prior to V2312.0004." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-09" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM AK3/BC/TM" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-31484" ;
    icsa:cweNumber "CWE-170" ;
    icsa:hasCVE cve-res:CVE-2024-31484 ;
    icsa:hasCWE cwe-res:CWE-170 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM AK3, SICAM BC and SICAM TM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Siemens CPCX26 Central Processing/Communication: Versions prior to V06.02 Siemens ETA4 Ethernet Interface IEC60870-5-104: Versions prior to V10.46 Siemens ETA5 Ethernet Int. 1x100TX IEC61850 Ed.2: Versions prior to V03.27 Siemens PCCX26 Ax 1703 PE; Contr; The following products of Siemens; Communication Element: Versions prior to V06.05." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-10" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC and SIPLUS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Transportation; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-2097; CVE-2022-40304; CVE-2022-42328; CVE-2022-3643; CVE-2023-0465; CVE-2023-0466; CVE-2023-38380; CVE-2022-4450; CVE-2022-4304; CVE-2022-3545; CVE-2023-29469; CVE-2023-41910; CVE-2022-40303; CVE-2022-44793; CVE-2023-50763; CVE-2023-0215; CVE-2023-0464; CVE-2023-28484; CVE-2022-42329; CVE-2022-3623; CVE-2022-44792; CVE-2023-0286; CVE-2022-3435" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-401; CWE-326; CWE-667; CWE-835; CWE-74; CWE-362; CWE-190; CWE-20; CWE-295; CWE-119; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2022-2097,
        cve-res:CVE-2022-3435,
        cve-res:CVE-2022-3545,
        cve-res:CVE-2022-3623,
        cve-res:CVE-2022-3643,
        cve-res:CVE-2022-40303,
        cve-res:CVE-2022-40304,
        cve-res:CVE-2022-42328,
        cve-res:CVE-2022-42329,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2022-44792,
        cve-res:CVE-2022-44793,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0464,
        cve-res:CVE-2023-0465,
        cve-res:CVE-2023-0466,
        cve-res:CVE-2023-28484,
        cve-res:CVE-2023-29469,
        cve-res:CVE-2023-38380,
        cve-res:CVE-2023-41910,
        cve-res:CVE-2023-50763 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-295,
        cwe-res:CWE-326,
        cwe-res:CWE-362,
        cwe-res:CWE-401,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-667,
        cwe-res:CWE-74,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SIPLUS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Siemens SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0): All versions prior to V2.3 Siemens SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0): All versions prior to V2.3 Siemens SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0): All versions prior to V2.3 Siemens SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0): All versions prior to V2.3 Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0): All versions prior to V2.3 Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0): All versions prior to V2.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-11" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE XM-400, XR-500" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Nuclear Reactors; Materials; and Waste" ;
    icsa:cveNumber "CVE-2023-0464; CVE-2022-4450; CVE-2022-4304; CVE-2022-2097; CVE-2023-0215; CVE-2023-0286; CVE-2023-0465; CVE-2023-0466" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-326; CWE-20; CWE-295" ;
    icsa:hasCVE cve-res:CVE-2022-2097,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0464,
        cve-res:CVE-2023-0465,
        cve-res:CVE-2023-0466 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-295,
        cwe-res:CWE-326,
        cwe-res:CWE-415,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE XM-400/XR-500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products; 24V (6GK5526-8GS00-2AR2): All versions prior to V6.6.1 Siemens SCALANCE XR526-8C; 2x230V (6GK5524-8GS00-4AR2): All versions prior to V6.6.1 Siemens SCALANCE XR524-8C; 2x230V (L3 int.) (6GK5526-8GR00-4AR2): All versions prior to V6.6.1 Siemens SCALANCE XR526-8C; L3 int.) (6GK5552-0AR00-2AR2): All versions prior to V6.6.1 Siemens SCALANCE XR552-12M (6GK5552-0AA00-2AR2): All versions prior to V6.6.1.; 1x230V (L3 int.) (6GK5526-8GR00-3AR2): All versions prior to V6.6.1 Siemens SCALANCE XR526-8C; 1x230V (6GK5524-8GS00-3AR2): All versions prior to V6.6.1 Siemens SCALANCE XR524-8C; 24V (6GK5524-8GS00-2AR2): All versions prior to V6.6.1 Siemens SCALANCE XR524-8C; 24V (L3 int.) (6GK5524-8GR00-2AR2): All versions prior to V6.6.1 Siemens SCALANCE XR526-8C; 1x230V (6GK5526-8GS00-3AR2): All versions prior to V6.6.1 Siemens SCALANCE XR526-8C; 1x230V (L3 int.) (6GK5524-8GR00-3AR2): All versions prior to V6.6.1 Siemens SCALANCE XR524-8C; 2x230V (6GK5526-8GS00-4AR2): All versions prior to V6.6.1 Siemens SCALANCE XR526-8C; 24V (L3 int.) (6GK5526-8GR00-2AR2): All versions prior to V6.6.1 Siemens SCALANCE XR528-6M (2HR2) (6GK5528-0AA00-2HR2): All versions prior to V6.6.1 Siemens SCALANCE XR528-6M (2HR2; 2x230V (L3 int.) (6GK5524-8GR00-4AR2): All versions prior to V6.6.1 Siemens SCALANCE XR524-8C; L3 int.) (6GK5528-0AR00-2HR2): All versions prior to V6.6.1 Siemens SCALANCE XR528-6M (6GK5528-0AA00-2AR2): All versions prior to V6.6.1 Siemens SCALANCE XR528-6M (L3 int.) (6GK5528-0AR00-2AR2): All versions prior to V6.6.1 Siemens SCALANCE XR552-12M (2HR2) (6GK5552-0AA00-2HR2): All versions prior to V6.6.1 Siemens SCALANCE XR552-12M (2HR2) (6GK5552-0AR00-2HR2): All versions prior to V6.6.1 Siemens SCALANCE XR552-12M (2HR2; are affected: Siemens SCALANCE XM408-4C (6GK5408-4GP00-2AM2): All versions prior to V6.6.1 Siemens SCALANCE XM408-4C (L3 int.) (6GK5408-4GQ00-2AM2): All versions prior to V6.6.1 Siemens SCALANCE XM408-8C (6GK5408-8GS00-2AM2): All versions prior to V6.6.1 Siemens SCALANCE XM408-8C (L3 int.) (6GK5408-8GR00-2AM2): All versions prior to V6.6.1 Siemens SCALANCE XM416-4C (6GK5416-4GS00-2AM2): All versions prior to V6.6.1 Siemens SCALANCE XM416-4C (L3 int.) (6GK5416-4GR00-2AM2): All versions prior to V6.6.1 Siemens SCALANCE XR524-8C" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-12" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W700" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Nuclear Reactors; Materials; and Waste" ;
    icsa:cveNumber "CVE-2023-44374; CVE-2023-44373; CVE-2022-46144; CVE-2023-49691; CVE-2023-44319; CVE-2023-44317; CVE-2023-44318" ;
    icsa:cweNumber "CWE-328; CWE-664; CWE-321; CWE-567; CWE-74; CWE-78; CWE-349" ;
    icsa:hasCVE cve-res:CVE-2022-46144,
        cve-res:CVE-2023-44317,
        cve-res:CVE-2023-44318,
        cve-res:CVE-2023-44319,
        cve-res:CVE-2023-44373,
        cve-res:CVE-2023-44374,
        cve-res:CVE-2023-49691 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-328,
        cwe-res:CWE-349,
        cwe-res:CWE-567,
        cwe-res:CWE-664,
        cwe-res:CWE-74,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W700 devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Siemens SCALANCE WAM763-1 (6GK5763-1AL00-7DA0): All Versions Siemens SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0): All Versions Siemens SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0): All Versions Siemens SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0): All Versions Siemens SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0): All Versions Siemens SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0): All Versions Siemens SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0): All Versions Siemens SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0): All Versions Siemens SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0): All Versions Siemens SCALANCE WUM763-1 (6GK5763-1AL00-3AA0): All Versions Siemens SCALANCE WUM763-1 (6GK5763-1AL00-3DA0): All Versions Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0): All Versions Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0): All Versions Siemens SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0): All Versions Siemens SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0): All Versions Siemens SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0): All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-13" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC Traffic Analyzer" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-35212; CVE-2024-35211; CVE-2024-35207; CVE-2022-41742; CVE-2024-35208; CVE-2024-35210; CVE-2024-35209; CVE-2024-35206" ;
    icsa:cweNumber "CWE-352; CWE-787; CWE-614; CWE-613; CWE-20; CWE-749; CWE-319; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2022-41742,
        cve-res:CVE-2024-35206,
        cve-res:CVE-2024-35207,
        cve-res:CVE-2024-35208,
        cve-res:CVE-2024-35209,
        cve-res:CVE-2024-35210,
        cve-res:CVE-2024-35211,
        cve-res:CVE-2024-35212 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-522,
        cwe-res:CWE-613,
        cwe-res:CWE-614,
        cwe-res:CWE-749,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC Traffic Analyzer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SINEC Traffic Analyzer (6GK8822-1BG01-0BA0): Versions prior to V1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-14" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Tellus Lite V-Simulator" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37022; CVE-2024-37029" ;
    icsa:cweNumber "CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-37022,
        cve-res:CVE-2024-37029 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tellus Lite V-Simulator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Fuji Electric Tellus Lite V-Simulator; a remote monitoring and operation software; are affected: Tellus Lite V-Simulator: Versions prior to v4.0.20.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-14" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-16" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View SE" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37367" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-37367 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View SE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of FactoryTalk Software are affected: FactoryTalk View SE: v12.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-16" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-17" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View SE" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37369" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2024-37369 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View SE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of FactoryTalk Software are affected: FactoryTalk View SE: v12.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-17" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-18" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View SE" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37368" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-37368 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View SE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of FactoryTalk Software are affected: FactoryTalk View SE: v11.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-18" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-165-19 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-165-19" ;
    dcterms:issued "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Motorola Solutions Vigilant License Plate Readers" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Emergency Services" ;
    icsa:cveNumber "CVE-2024-38282; CVE-2024-38279; CVE-2024-38283; CVE-2024-38285; CVE-2024-38280; CVE-2024-38281; CVE-2024-38284" ;
    icsa:cweNumber "CWE-798; CWE-294; CWE-288; CWE-311; CWE-313; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2024-38279,
        cve-res:CVE-2024-38280,
        cve-res:CVE-2024-38281,
        cve-res:CVE-2024-38282,
        cve-res:CVE-2024-38283,
        cve-res:CVE-2024-38284,
        cve-res:CVE-2024-38285 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-294,
        cwe-res:CWE-311,
        cwe-res:CWE-313,
        cwe-res:CWE-522,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vigilant Fixed LPR Coms Box (BCAV1F2-C600)" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of Motorola Vigilant License Plate Readers are affected: Vigilant Fixed LPR Coms Box (BCAV1F2-C600): Versions 3.1.171.9 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-165-19" ;
    icsa:vendor "Motorola Solutions" ;
    icsa:year 2024 .

icsa-res:ICSA-24-170-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-170-01" ;
    dcterms:issued "2024-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "RAD Data Communications SecFlow-2" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Israel" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2019-6268" ;
    icsa:cweNumber "CWE-29" ;
    icsa:hasCVE cve-res:CVE-2019-6268 ;
    icsa:hasCWE cwe-res:CWE-29 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SecFlow-2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following RAD Data Communications products are affected: SecFlow-2: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-170-01" ;
    icsa:vendor "RAD Data Communications" ;
    icsa:year 2024 .

icsa-res:ICSA-24-172-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-172-01" ;
    dcterms:issued "2024-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CENTUM" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2024-5650" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2024-5650 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CENTUM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a distributed control system (DCS); are affected: CENTUM CS 3000 (Including CENTUM CS 3000 Entry Class): Version R3.08.10 to R3.09.50 CENTUM VP (Including CENTUM VP Entry Class): Version R4.01.00 to R4.03.00 CENTUM VP (Including CENTUM VP Entry Class): Version R5.01.00 to R5.04.20 CENTUM VP (Including CENTUM VP Entry Class): Version R6.01.00 to R6.11.10.; The following versions of Yokogawa CENTUM" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-172-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2024 .

icsa-res:ICSA-24-172-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-172-02" ;
    dcterms:issued "2024-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "CAREL Boss-Mini" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-3643" ;
    icsa:cweNumber "CWE-73" ;
    icsa:hasCVE cve-res:CVE-2023-3643 ;
    icsa:hasCWE cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Boss-Mini" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CAREL Boss-Mini; are affected: Boss-Mini: Version 1.4.0 (Build 6221).; a local supervisor solution" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-172-02" ;
    icsa:vendor "CAREL" ;
    icsa:year 2024 .

icsa-res:ICSA-24-172-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-172-03" ;
    dcterms:issued "2024-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Westermo L210-F2G" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-32943; CVE-2024-37183; CVE-2024-35246" ;
    icsa:cweNumber "CWE-799; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2024-32943,
        cve-res:CVE-2024-35246,
        cve-res:CVE-2024-37183 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-799 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "L210-F2G Lynx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Westermo L210-F2G industrial ethernet switches are affected: L210-F2G Lynx: version 4.21.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-172-03" ;
    icsa:vendor "Westermo" ;
    icsa:year 2024 .

icsa-res:ICSA-24-177-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-177-01" ;
    dcterms:issued "2024-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB 800xA Base (Update A)" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Dams; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-3036" ;
    icsa:cweNumber "CWE-1284" ;
    icsa:hasCVE cve-res:CVE-2024-3036 ;
    icsa:hasCWE cwe-res:CWE-1284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB 800xA Base (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "6.0.3-10; 6.2.0-0; 6.1.1-3; 800xA Base <=6.1.1-2; <=6.0.3-9" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-177-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2024 .

icsa-res:ICSA-24-177-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-177-02" ;
    dcterms:issued "2024-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Creo Elements/Direct License Server (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2024-6071" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2024-6071 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Creo Elements/Direct License Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PTC reports that the following versions of Creo Elements/Direct License Server are affected; note that this vulnerability does not impact \"PTC Creo License Server\" (lmadmin; lmgrd): Creo Elements/Direct Drafting: versions 15.00 through 20.7 Creo Elements/Direct Model Manager / Drawing Manager: versions 15.00 through 20.7 Creo Elements/Direct Modeling: versions 15.00 through 20.7 Creo Elements/Direct WorkManager / DDM: versions 15.00 through 20.4 Creo Elements/Direct License Server (MEls): version 20.7.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-177-02" ;
    icsa:vendor "PTC" ;
    icsa:year 2024 .

icsa-res:ICSA-24-179-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-179-01" ;
    dcterms:issued "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "TELSAT marKoni FM Transmitter" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2024-39373; CVE-2024-39374; CVE-2024-39376; CVE-2024-39375" ;
    icsa:cweNumber "CWE-798; CWE-77; CWE-603; CWE-284" ;
    icsa:hasCVE cve-res:CVE-2024-39373,
        cve-res:CVE-2024-39374,
        cve-res:CVE-2024-39375,
        cve-res:CVE-2024-39376 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-603,
        cwe-res:CWE-77,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Markoni-D (Compact) FM Transmitters, Markoni-DH (Exciter+Amplifiers) FM Transmitters" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of TELSAT marKoni FM Transmitters are affected: Markoni-D (Compact) FM Transmitters: All versions prior to 2.0.1 Markoni-DH (Exciter+Amplifiers) FM Transmitters: All versions prior to 2.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-179-01" ;
    icsa:vendor "marKoni" ;
    icsa:year 2024 .

icsa-res:ICSA-24-179-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-179-02" ;
    dcterms:issued "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "SDG Technologies PnPSCADA" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "South Africa" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-2882" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2024-2882 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PnPSCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: PnPSCADA: Versions prior to 4.; a web-based SCADA HMI; The following versions of SDG Technologies PnPSCADA" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-179-02" ;
    icsa:vendor "SDG Technologies" ;
    icsa:year 2024 .

icsa-res:ICSA-24-179-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-179-03" ;
    dcterms:issued "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa FAST/TOOLS and CI Server" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2024-4105; CVE-2024-4106" ;
    icsa:cweNumber "CWE-79; CWE-258" ;
    icsa:hasCVE cve-res:CVE-2024-4105,
        cve-res:CVE-2024-4106 ;
    icsa:hasCWE cwe-res:CWE-258,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FAST/TOOLS and CI Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: FAST/TOOLS RVSVRN Package: Versions R9.01 through R10.04 FAST/TOOLS UNSVRN Package: Versions R9.01 through R10.04 FAST/TOOLS HMIWEB Package: Versions R9.01 through R10.04 FAST/TOOLS FTEES Package: Versions R9.01 through R10.04 FAST/TOOLS HMIMOB Package: Versions R9.01 through R10.04 CI Server: Versions R1.01.00 through R1.03.00.; SCADA software environments; The following versions of Yokogawa FAST/TOOLS and CI Server" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-179-03" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2024 .

icsa-res:ICSA-24-179-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-179-04" ;
    dcterms:issued "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Illustra Essentials Gen 4 (Update A)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32755" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-32755 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Illustra Essentials Gen 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports that the following versions of Illustra Essentials Gen 4 IP camera are affected: Illustra Essentials Gen 4: all versions up to Illustra.Ess4.01.02.10.5982." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-179-04" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-179-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-179-05" ;
    dcterms:issued "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Illustra Essentials Gen 4 (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32756" ;
    icsa:cweNumber "CWE-257" ;
    icsa:hasCVE cve-res:CVE-2024-32756 ;
    icsa:hasCWE cwe-res:CWE-257 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Illustra Essentials Gen 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Illustra Essentials Gen 4: versions up to Illustra.Ess4.01.02.10.5982.; Johnson Controls reports that the following versions of Illustra Essential Gen 4; an IP camera" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-179-05" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-179-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-179-06" ;
    dcterms:issued "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Illustra Essentials Gen 4 (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32757" ;
    icsa:cweNumber "CWE-532" ;
    icsa:hasCVE cve-res:CVE-2024-32757 ;
    icsa:hasCWE cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Illustra Essentials Gen 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports that the following versions of Illustra Essential Gen 4 IP cameras are affected: Illustra Essential Gen 4: version Illustra.Ess4.01.02.10.5982 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-179-06" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-179-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-179-07" ;
    dcterms:issued "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Illustra Essentials Gen 4 (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32932" ;
    icsa:cweNumber "CWE-257" ;
    icsa:hasCVE cve-res:CVE-2024-32932 ;
    icsa:hasCWE cwe-res:CWE-257 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Illustra Essentials Gen 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports that the following versions of Illustra Essentials IP cameras are affected: Illustra Essential Gen 4: versions Illustra.Ess4.01.02.10.5982 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-179-07" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-184-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-184-01" ;
    dcterms:issued "2024-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Kantech Door Controllers" ;
    icsa:CVSSScore "3.1"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-32754" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2024-32754 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kantech KT1, KT2, KT400 Door Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products by Kantech; are affected: Kantech KT1 Door Controller Rev01: Versions 2.09.01 and prior Kantech KT2 Door Controller Rev01: Versions 2.09.01 and prior Kantech KT400 Door Controller Rev01: Versions 3.01.16 and prior.; a subsidiary of Johnson Controls" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-184-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-184-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-184-02" ;
    dcterms:issued "2024-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-4708" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2024-4708 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "myPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following mySCADA products are affected: myPRO: Versions prior to 8.31.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-184-02" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2024 .

icsa-res:ICSA-24-184-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-184-03" ;
    dcterms:issued "2024-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E)" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-1182; CVE-2023-2650; CVE-2024-1574; CVE-2024-1573; CVE-2023-4807" ;
    icsa:cweNumber "CWE-770; CWE-306; CWE-427; CWE-470; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2023-2650,
        cve-res:CVE-2023-4807,
        cve-res:CVE-2024-1182,
        cve-res:CVE-2024-1573,
        cve-res:CVE-2024-1574 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-347,
        cwe-res:CWE-427,
        cwe-res:CWE-470,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "<=10.97.2 | GENESIS32 <=9.7 | BizViz <=9.7 | IoTWorX 10.95; <=10.97.2 | MobileHMI 10.97.2; <=10.97.3 | GENESIS64 10.97.2; ICONICS Suite 10.97.2; <=10.97.2; <=10.97.3 | AnalytiX 10.97.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-184-03" ;
    icsa:vendor "Mitsubishi Electric Iconics Digital Solutions" ;
    icsa:year 2024 .

icsa-res:ICSA-24-191-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-191-01" ;
    dcterms:issued "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-G2 (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-12858; CVE-2024-39881; CVE-2024-39882; CVE-2025-22880; CVE-2024-39880; CVE-2024-39883" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-12858,
        cve-res:CVE-2024-39880,
        cve-res:CVE-2024-39881,
        cve-res:CVE-2024-39882,
        cve-res:CVE-2024-39883,
        cve-res:CVE-2025-22880 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft-G2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics CNCSoft-G2; CVE-2024-39881; are affected: CNCSoft-G2: Version 2.0.0.5 (CVE-2024-39880; CVE-2024-39882; CVE-2024-39883) CNCSoft-G2: Version 2.1.0.10 and prior (CVE-2025-22880) CNCSoft-G2: Version 2.1.0.16 and prior (CVE-2024-12858).; a human-machine interface (HMI) software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-191-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-191-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-191-02" ;
    dcterms:issued "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELIPC Series MI5122-VW" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-3904" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2024-3904 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MI5122-VW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: MI5122-VW: Firmware versions \"05\" up to and including \"07\".; The following versions of Mitsubishi Electric MELIPC Series MI5122-VW; an industrial PC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-191-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-191-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-191-03" ;
    dcterms:issued "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Illustra Pro Gen 4" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-32753" ;
    icsa:cweNumber "CWE-1395" ;
    icsa:hasCVE cve-res:CVE-2024-32753 ;
    icsa:hasCWE cwe-res:CWE-1395 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Illustra Pro Gen 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports that the following versions of Illustra Pro Gen 4 Camera are affected: Illustra Pro Gen 4 Camera: Version SS016.05.03.01.0010 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-191-03" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-191-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-191-04" ;
    dcterms:issued "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Software House C-CURE 9000" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32759" ;
    icsa:cweNumber "CWE-1391" ;
    icsa:hasCVE cve-res:CVE-2024-32759 ;
    icsa:hasCWE cwe-res:CWE-1391 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Software House C-CURE 9000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Johnson Controls products are affected: Software House C-CURE 9000: Version 2.80 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-191-04" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-191-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-191-05" ;
    dcterms:issued "2024-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Inc. Software House C-CURE 9000 (Update B)" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32861" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2024-32861 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Software House C-CURE 9000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Johnson Controls Inc. products are affected when the optional C-CURE IQ Web and/or C-CURE Portal is installed: Software House C-CURE 9000 Site Server: Version 2.80 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-191-05" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-01" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Remote Connect Server" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Nuclear Reactors; Materials; and Waste" ;
    icsa:cveNumber "CVE-2024-39872; CVE-2024-39865; CVE-2022-32260; CVE-2024-39876; CVE-2024-39867; CVE-2024-39874; CVE-2024-39870; CVE-2024-39868; CVE-2024-39873; CVE-2024-39875; CVE-2024-39871; CVE-2024-39866; CVE-2024-39869" ;
    icsa:cweNumber "CWE-434; CWE-732; CWE-267; CWE-307; CWE-770; CWE-286; CWE-378; CWE-602; CWE-425; CWE-754; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2022-32260,
        cve-res:CVE-2024-39865,
        cve-res:CVE-2024-39866,
        cve-res:CVE-2024-39867,
        cve-res:CVE-2024-39868,
        cve-res:CVE-2024-39869,
        cve-res:CVE-2024-39870,
        cve-res:CVE-2024-39871,
        cve-res:CVE-2024-39872,
        cve-res:CVE-2024-39873,
        cve-res:CVE-2024-39874,
        cve-res:CVE-2024-39875,
        cve-res:CVE-2024-39876 ;
    icsa:hasCWE cwe-res:CWE-267,
        cwe-res:CWE-286,
        cwe-res:CWE-307,
        cwe-res:CWE-378,
        cwe-res:CWE-425,
        cwe-res:CWE-434,
        cwe-res:CWE-602,
        cwe-res:CWE-732,
        cwe-res:CWE-754,
        cwe-res:CWE-770,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Siemens SINEMA Remote Connect Server: All versions prior to V3.2 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-02" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE 1808" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-21754; CVE-2024-23111; CVE-2023-46720; CVE-2024-26010" ;
    icsa:cweNumber "CWE-79; CWE-121; CWE-916" ;
    icsa:hasCVE cve-res:CVE-2023-46720,
        cve-res:CVE-2024-21754,
        cve-res:CVE-2024-23111,
        cve-res:CVE-2024-26010 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-79,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE 1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Siemens RUGGEDCOM APE1808: All versions with Fortinet NGFW." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-03" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-7066" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-7066 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization, JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Siemens JT2Go: Versions prior to v14.3.0.8 Siemens Teamcenter Visualization V14.1: Versions prior to v14.1.0.14 Siemens Teamcenter Visualization V14.2: Versions prior to v14.2.0.10 Siemens Teamcenter Visualization V14.3: Versions prior to v14.3.0.8 Siemens Teamcenter Visualization V2312: Versions prior to v2312.0002.; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-04" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-33653; CVE-2024-32062; CVE-2024-32061; CVE-2024-33577; CVE-2024-32055; CVE-2024-32056; CVE-2024-32064; CVE-2024-32059; CVE-2024-33654; CVE-2024-32066; CVE-2024-32057; CVE-2024-32060; CVE-2024-32063; CVE-2024-32065; CVE-2024-32058" ;
    icsa:cweNumber "CWE-787; CWE-843; CWE-121; CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-32055,
        cve-res:CVE-2024-32056,
        cve-res:CVE-2024-32057,
        cve-res:CVE-2024-32058,
        cve-res:CVE-2024-32059,
        cve-res:CVE-2024-32060,
        cve-res:CVE-2024-32061,
        cve-res:CVE-2024-32062,
        cve-res:CVE-2024-32063,
        cve-res:CVE-2024-32064,
        cve-res:CVE-2024-32065,
        cve-res:CVE-2024-32066,
        cve-res:CVE-2024-33577,
        cve-res:CVE-2024-33653,
        cve-res:CVE-2024-33654 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Simcenter Femap: Versions prior to V2406." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-05" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE, RUGGEDCOM, SIPLUS, and SINEC" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Communications" ;
    icsa:cveNumber "CVE-2024-3596" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2024-3596 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE, RUGGEDCOM, SIPLUS, and SINEC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2x230V (6GK5524-8GS00-4AR2): All versions SCALANCE XR524-8C; 24V (6GK5524-8GS00-2AR2): All versions SCALANCE XR524-8C; 8xFO) (6GK5334-2TS01-4AR3): All versions SCALANCE XRM334 (2x230 V AC; AC 230V) (6GK5328-4SS00-3AR3): All versions SCALANCE XR328-4C WG (28xGE; 8xFO) (6GK5334-2TS01-2AR3): All versions SCALANCE XRM334 (24 V DC; ports on rear) (6GK5324-0GG10-1HR2): Versions prior to V4.1.8 SCALANCE XR324-12M (230V; ports on front) (6GK5324-4QG10-1CR2): Versions prior to V4.1.8 SCALANCE XR324-12M (24V; are affected: RUGGEDCOM CROSSBOW: All versions RUGGEDCOM i800: All versions RUGGEDCOM i800NC: All versions RUGGEDCOM i801: All versions RUGGEDCOM i801NC: All versions RUGGEDCOM i802: All versions RUGGEDCOM i802NC: All versions RUGGEDCOM i803: All versions RUGGEDCOM i803NC: All versions RUGGEDCOM M969: All versions RUGGEDCOM M969NC: All versions RUGGEDCOM M2100: All versions RUGGEDCOM M2100NC: All versions RUGGEDCOM M2200: All versions RUGGEDCOM M2200NC: All versions RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions RUGGEDCOM RMC30: All versions RUGGEDCOM RMC30NC: All versions RUGGEDCOM RMC8388 V4.X: All versions RUGGEDCOM RMC8388 V5.X: All versions RUGGEDCOM RMC8388NC V4.X: All versions RUGGEDCOM RMC8388NC V5.X: All versions RUGGEDCOM ROX MX5000: All versions RUGGEDCOM ROX MX5000RE: All versions RUGGEDCOM ROX RX1400: All versions RUGGEDCOM ROX RX1500: All versions RUGGEDCOM ROX RX1501: All versions RUGGEDCOM ROX RX1510: All versions RUGGEDCOM ROX RX1511: All versions RUGGEDCOM ROX RX1512: All versions RUGGEDCOM ROX RX1524: All versions RUGGEDCOM ROX RX1536: All versions RUGGEDCOM ROX RX5000: All versions RUGGEDCOM RP110: All versions* RUGGEDCOM RP110NC: All versions RUGGEDCOM RS400: All versions RUGGEDCOM RS400NC: All versions RUGGEDCOM RS401: All versions RUGGEDCOM RS401NC: All versions RUGGEDCOM RS416: All versions RUGGEDCOM RS416NC: All versions RUGGEDCOM RS416NCv2 V4.X: All versions RUGGEDCOM RS416NCv2 V5.X: All versions RUGGEDCOM RS416P: All versions RUGGEDCOM RS416PNC: All versions RUGGEDCOM RS416PNCv2 V4.X: All versions RUGGEDCOM RS416PNCv2 V5.X: All versions RUGGEDCOM RS416Pv2 V4.X: All versions RUGGEDCOM RS416Pv2 V5.X: All versions RUGGEDCOM RS416v2 V4.X: All versions RUGGEDCOM RS416v2 V5.X: All versions RUGGEDCOM RS900: All versions RUGGEDCOM RS900 (32M) V4.X: All versions RUGGEDCOM RS900 (32M) V5.X: All versions RUGGEDCOM RS900G: All versions RUGGEDCOM RS900G (32M) V4.X: All versions RUGGEDCOM RS900G (32M) V5.X: All versions RUGGEDCOM RS900GNC: All versions RUGGEDCOM RS900GNC(32M) V4.X: All versions RUGGEDCOM RS900GNC(32M) V5.X: All versions RUGGEDCOM RS900GP: All versions RUGGEDCOM RS900GPNC: All versions RUGGEDCOM RS900M-GETS-C01: All versions RUGGEDCOM RS900M-GETS-XX: All versions RUGGEDCOM RS900M-STND-C01: All versions RUGGEDCOM RS900M-STND-XX: All versions RUGGEDCOM RS900MNC-GETS-C01: All versions RUGGEDCOM RS900MNC-GETS-XX: All versions RUGGEDCOM RS900MNC-STND-XX: All versions RUGGEDCOM RS900MNC-STND-XX-C01: All versions RUGGEDCOM RS900NC: All versions RUGGEDCOM RS900NC(32M) V4.X: All versions RUGGEDCOM RS900NC(32M) V5.X: All versions RUGGEDCOM RS900W: All versions RUGGEDCOM RS910: All versions RUGGEDCOM RS910NC: All versions RUGGEDCOM RS910W: All versions RUGGEDCOM RS940G: All versions RUGGEDCOM RS940GNC: All versions RUGGEDCOM RS1600: All versions RUGGEDCOM RS1600F: All versions RUGGEDCOM RS1600FNC: All versions RUGGEDCOM RS1600NC: All versions RUGGEDCOM RS1600T: All versions RUGGEDCOM RS1600TNC: All versions RUGGEDCOM RS8000: All versions RUGGEDCOM RS8000A: All versions RUGGEDCOM RS8000ANC: All versions RUGGEDCOM RS8000H: All versions RUGGEDCOM RS8000HNC: All versions RUGGEDCOM RS8000NC: All versions RUGGEDCOM RS8000T: All versions RUGGEDCOM RS8000TNC: All versions RUGGEDCOM RSG907R: All versions RUGGEDCOM RSG908C: All versions RUGGEDCOM RSG909R: All versions RUGGEDCOM RSG910C: All versions RUGGEDCOM RSG920P V4.X: All versions RUGGEDCOM RSG920P V5.X: All versions RUGGEDCOM RSG920PNC V4.X: All versions RUGGEDCOM RSG920PNC V5.X: All versions RUGGEDCOM RSG2100: All versions RUGGEDCOM RSG2100 (32M) V4.X: All versions RUGGEDCOM RSG2100 (32M) V5.X: All versions RUGGEDCOM RSG2100NC: All versions RUGGEDCOM RSG2100NC(32M) V4.X: All versions RUGGEDCOM RSG2100NC(32M) V5.X: All versions RUGGEDCOM RSG2100P: All versions RUGGEDCOM RSG2100PNC: All versions RUGGEDCOM RSG2200: All versions RUGGEDCOM RSG2200NC: All versions RUGGEDCOM RSG2288 V4.X: All versions RUGGEDCOM RSG2288 V5.X: All versions RUGGEDCOM RSG2288NC V4.X: All versions RUGGEDCOM RSG2288NC V5.X: All versions RUGGEDCOM RSG2300 V4.X: All versions RUGGEDCOM RSG2300 V5.X: All versions RUGGEDCOM RSG2300NC V4.X: All versions RUGGEDCOM RSG2300NC V5.X: All versions RUGGEDCOM RSG2300P V4.X: All versions RUGGEDCOM RSG2300P V5.X: All versions RUGGEDCOM RSG2300PNC V4.X: All versions RUGGEDCOM RSG2300PNC V5.X: All versions RUGGEDCOM RSG2488 V4.X: All versions RUGGEDCOM RSG2488 V5.X: All versions RUGGEDCOM RSG2488NC V4.X: All versions RUGGEDCOM RSG2488NC V5.X: All versions RUGGEDCOM RSL910: All versions RUGGEDCOM RSL910NC: All versions RUGGEDCOM RST916C: All versions RUGGEDCOM RST916P: All versions RUGGEDCOM RST2228: All versions RUGGEDCOM RST2228P: All versions SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2): All versions SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2): All versions SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2): All versions SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2): All versions SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2): All versions SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions SCALANCE M876-3 (6GK5876-3AA02-2BA2): All versions SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions SCALANCE M876-4 (6GK5876-4AA10-2BA2): All versions SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1): All versions SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1): All versions SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): All versions SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1): All versions SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1): All versions SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1): All versions SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2): All versions SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2): All versions SCALANCE SC622-2C (6GK5622-2GS00-2AC2): All versions SCALANCE SC626-2C (6GK5626-2GS00-2AC2): All versions SCALANCE SC632-2C (6GK5632-2GS00-2AC2): All versions SCALANCE SC636-2C (6GK5636-2GS00-2AC2): All versions SCALANCE SC642-2C (6GK5642-2GS00-2AC2): All versions SCALANCE SC646-2C (6GK5646-2GS00-2AC2): All versions SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0): All versions SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0): All versions SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6): All versions SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0): All versions SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6): All versions SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0): All versions SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0): All versions SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0): All versions SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0): All versions SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0): All versions SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0): All versions SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0): All versions SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0): All versions SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6): All versions SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0): All versions SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0): All versions SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0): All versions SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0): All versions SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0): All versions SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0): All versions SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0): All versions SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0): All versions SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0): All versions SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0): All versions SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0): All versions SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0): All versions SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0): All versions SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0): All versions SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0): All versions SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0): All versions SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0): All versions SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0): All versions SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0): All versions SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0): All versions SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0): All versions SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0): All versions SCALANCE WAM763-1 (6GK5763-1AL00-7DA0): All versions SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0): All versions SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0): All versions SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0): All versions SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0): All versions SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0): All versions SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0): All versions SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0): All versions SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0): All versions SCALANCE WUM763-1 (6GK5763-1AL00-3AA0): All versions SCALANCE WUM763-1 (6GK5763-1AL00-3DA0): All versions SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0): All versions SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0): All versions SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0): All versions SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0): All versions SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0): All versions SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3): Versions prior to V4.1.8 SCALANCE X302-7 EEC (2x 24V; The following products of Siemens; coated) (6GK5302-7GD00-4GA3): Versions prior to V4.1.8 SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3): Versions prior to V4.1.8 SCALANCE X302-7 EEC (24V; ports on front) (6GK5324-4GG00-4ER2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; E/IP) (6GK5213-3BF00-2TB2): All versions SCALANCE XB213-3LD (SC; coated) (6GK5302-7GD00-3GA3): Versions prior to V4.1.8 SCALANCE X304-2FE (6GK5304-2BD00-2AA3): Versions prior to V4.1.8 SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3): Versions prior to V4.1.8 SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3): Versions prior to V4.1.8 SCALANCE X307-2 EEC (2x 24V; 8xFO; ports on rear) (6GK5324-4GG00-3JR2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; 24V (L3 int.) (6GK5524-8GR00-2AR2): All versions SCALANCE XR526-8C; ports on front) (6GK5324-4GG00-1ER2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-4GG00-2JR2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (2x 24V; 2x230V (6GK5526-8GS00-4AR2): All versions SCALANCE XR526-8C; E/IP) (6GK5205-3BB00-2TB2): All versions SCALANCE XB205-3 (ST; 2x230V (L3 int.) (6GK5524-8GR00-4AR2): All versions SCALANCE XR524-8C; ports on rear) (6GK5324-4GG10-4JR2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (24V; 12xFO) (6GK5334-3TS01-2AR3): All versions SCALANCE XRM334 (230 V AC; 8xFO) (6GK5334-2TS01-3AR3): All versions SCALANCE XRM334 (230 V AC; ports on front) (6GK5324-0GG10-1AR2): Versions prior to V4.1.8 SCALANCE XR324-12M (24V; ports on rear) (6GK5324-0GG10-3HR2): Versions prior to V4.1.8 SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2): Versions prior to V4.1.8 SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2): Versions prior to V4.1.8 SCALANCE XR324WG (24 x FE; DC 24V) (6GK5328-4SS00-2AR3): All versions SCALANCE XR524-8C; ports on front) (6GK5324-4GG00-2ER2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-0GG00-1AR2): Versions prior to V4.1.8 SCALANCE XR324-12M (24V; ports on front) (6GK5324-4QG10-1AR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE (24V; 1x230V (6GK5524-8GS00-3AR2): All versions SCALANCE XR524-8C; CC) (6GK5334-2TS01-2ER3): All versions SCALANCE XRM334 (2x230 V AC; ports on front) (6GK5324-0GG00-3AR2): Versions prior to V4.1.8 SCALANCE XR324-12M (230V; 1x230V (L3 int.) (6GK5526-8GR00-3AR2): All versions SCALANCE XR526-8C; ports on rear) (6GK5324-4GG10-3JR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE (24V; ports on rear) (6GK5324-4QG10-3HR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE TS (24V; PN) (6GK5213-3BF00-2AB2): All versions SCALANCE XB216 (E/IP) (6GK5216-0BA00-2TB2): All versions SCALANCE XB216 (PN) (6GK5216-0BA00-2AB2): All versions SCALANCE XC206-2 (SC) (6GK5206-2BD00-2AC2): All versions SCALANCE XC206-2 (ST/BFOC) (6GK5206-2BB00-2AC2): All versions SCALANCE XC206-2G PoE (6GK5206-2RS00-2AC2): All versions SCALANCE XC206-2G PoE (54 V DC) (6GK5206-2RS00-5AC2): All versions SCALANCE XC206-2G PoE EEC (54 V DC) (6GK5206-2RS00-5FC2): All versions SCALANCE XC206-2SFP (6GK5206-2BS00-2AC2): All versions SCALANCE XC206-2SFP EEC (6GK5206-2BS00-2FC2): All versions SCALANCE XC206-2SFP G (6GK5206-2GS00-2AC2): All versions SCALANCE XC206-2SFP G (EIP DEF.) (6GK5206-2GS00-2TC2): All versions SCALANCE XC206-2SFP G EEC (6GK5206-2GS00-2FC2): All versions SCALANCE XC208 (6GK5208-0BA00-2AC2): All versions SCALANCE XC208EEC (6GK5208-0BA00-2FC2): All versions SCALANCE XC208G (6GK5208-0GA00-2AC2): All versions SCALANCE XC208G (EIP def.) (6GK5208-0GA00-2TC2): All versions SCALANCE XC208G EEC (6GK5208-0GA00-2FC2): All versions SCALANCE XC208G PoE (6GK5208-0RA00-2AC2): All versions SCALANCE XC208G PoE (54 V DC) (6GK5208-0RA00-5AC2): All versions SCALANCE XC216 (6GK5216-0BA00-2AC2): All versions SCALANCE XC216-3G PoE (6GK5216-3RS00-2AC2): All versions SCALANCE XC216-3G PoE (54 V DC) (6GK5216-3RS00-5AC2): All versions SCALANCE XC216-4C (6GK5216-4BS00-2AC2): All versions SCALANCE XC216-4C G (6GK5216-4GS00-2AC2): All versions SCALANCE XC216-4C G (EIP Def.) (6GK5216-4GS00-2TC2): All versions SCALANCE XC216-4C G EEC (6GK5216-4GS00-2FC2): All versions SCALANCE XC216EEC (6GK5216-0BA00-2FC2): All versions SCALANCE XC224 (6GK5224-0BA00-2AC2): All versions SCALANCE XC224-4C G (6GK5224-4GS00-2AC2): All versions SCALANCE XC224-4C G (EIP Def.) (6GK5224-4GS00-2TC2): All versions SCALANCE XC224-4C G EEC (6GK5224-4GS00-2FC2): All versions SCALANCE XCH328 (6GK5328-4TS01-2EC2): All versions SCALANCE XCM324 (6GK5324-8TS01-2AC2): All versions SCALANCE XCM328 (6GK5328-4TS01-2AC2): All versions SCALANCE XCM332 (6GK5332-0GA01-2AC2): All versions SCALANCE XF204 (6GK5204-0BA00-2GF2): All versions SCALANCE XF204 DNA (6GK5204-0BA00-2YF2): All versions SCALANCE XF204-2BA (6GK5204-2AA00-2GF2): All versions SCALANCE XF204-2BA DNA (6GK5204-2AA00-2YF2): All versions SCALANCE XM408-4C (6GK5408-4GP00-2AM2): All versions SCALANCE XM408-4C (L3 int.) (6GK5408-4GQ00-2AM2): All versions SCALANCE XM408-8C (6GK5408-8GS00-2AM2): All versions SCALANCE XM408-8C (L3 int.) (6GK5408-8GR00-2AM2): All versions SCALANCE XM416-4C (6GK5416-4GS00-2AM2): All versions SCALANCE XM416-4C (L3 int.) (6GK5416-4GR00-2AM2): All versions SCALANCE XP208 (6GK5208-0HA00-2AS6): All versions SCALANCE XP208 (Ethernet/IP) (6GK5208-0HA00-2TS6): All versions SCALANCE XP208EEC (6GK5208-0HA00-2ES6): All versions SCALANCE XP208PoE EEC (6GK5208-0UA00-5ES6): All versions SCALANCE XP216 (6GK5216-0HA00-2AS6): All versions SCALANCE XP216 (Ethernet/IP) (6GK5216-0HA00-2TS6): All versions SCALANCE XP216EEC (6GK5216-0HA00-2ES6): All versions SCALANCE XP216POE EEC (6GK5216-0UA00-5ES6): All versions SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-4QG00-3HR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE (230V; PN) (6GK5213-3BB00-2AB2): All versions SCALANCE XB213-3LD (SC; 2x230V (L3 int.) (6GK5526-8GR00-4AR2): All versions SCALANCE XR526-8C; E/IP) (6GK5205-3BF00-2TB2): All versions SCALANCE XB205-3LD (SC; 24V) (6GK5328-4FS00-2AR3): All versions SCALANCE XR328-4C WG (24xFE; coated) (6GK5307-2FD00-1GA3): Versions prior to V4.1.8 SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3): Versions prior to V4.1.8 SCALANCE X307-2 EEC (230V; ports on front) (6GK5324-4GG10-3ER2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; 4XGE; 24V (L3 int.) (6GK5526-8GR00-2AR2): All versions SCALANCE XR528-6M (2HR2) (6GK5528-0AA00-2HR2): All versions SCALANCE XR528-6M (2HR2; 12xFO) (6GK5334-3TS01-4AR3): All versions SCALANCE XRM334 (24 V DC; 24V (6GK5526-8GS00-2AR2): All versions SCALANCE XR526-8C; ports on rear) (6GK5324-4QG00-1HR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE (24V; AC230V) (6GK5328-4FS00-3AR3): All versions SCALANCE XR328-4C WG (24xFE; ports on rear) (6GK5324-4GG00-1JR2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-0GG00-3HR2): Versions prior to V4.1.8 SCALANCE XR324-12M (230V; ports on front) (6GK5324-0GG10-3AR2): Versions prior to V4.1.8 SCALANCE XR324-12M (230V; 1x230V (6GK5526-8GS00-3AR2): All versions SCALANCE XR526-8C; AC 230V) (6GK5324-0BA00-3AR3): All versions SCALANCE XR324WG (24 X FE; 12xFO) (6GK5334-3TS01-3AR3): All versions SINEC INS: All versions when RADIUS Server feature is enabled SIPLUS NET SCALANCE X308-2 (6AG1308-2FL10-4AA3): Versions prior to V4.1.8 SIPLUS NET SCALANCE XC206-2 (6AG1206-2BB00-7AC2): All versions SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2): All versions SIPLUS NET SCALANCE XC208 (6AG1208-0BA00-7AC2): All versions SIPLUS NET SCALANCE XC216-4C (6AG1216-4BS00-7AC2): All versions.; ports on front) (6GK5324-4GG10-2ER2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-4GG10-4ER2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on front) (6GK5324-4QG10-3AR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE (230V; E/IP) (6GK5213-3BB00-2TB2): All versions SCALANCE XB213-3 (ST; DC24V) (6GK5328-4FS00-2RR3): All versions SCALANCE XR328-4C WG (28xGE; PN) (6GK5205-3BD00-2AB2): All versions SCALANCE XB205-3LD (SC; 1x230V (L3 int.) (6GK5524-8GR00-3AR2): All versions SCALANCE XR524-8C; E/IP) (6GK5205-3BD00-2TB2): All versions SCALANCE XB205-3 (ST; DC 24V) (6GK5324-0BA00-2AR3): All versions SCALANCE XR326-2C PoE WG (6GK5326-2QS00-3AR3): All versions SCALANCE XR326-2C PoE WG (without UL) (6GK5326-2QS00-3RR3): All versions SCALANCE XR328-4C WG (24xFE; coated) (6GK5302-7GD00-1GA3): Versions prior to V4.1.8 SCALANCE X302-7 EEC (230V) (6GK5302-7GD00-3EA3): Versions prior to V4.1.8 SCALANCE X302-7 EEC (230V; AC230V) (6GK5328-4FS00-3RR3): All versions SCALANCE XR328-4C WG (24XFE; ports on front) (6GK5324-4QG00-1CR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE TS (24V; ports on front) (6GK5324-4QG00-1AR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE (24V; ports on rear) (6GK5324-4GG10-2JR2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; coated) (6GK5307-2FD00-4GA3): Versions prior to V4.1.8 SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3): Versions prior to V4.1.8 SCALANCE X307-2 EEC (24V; PN) (6GK5205-3BF00-2AB2): All versions SCALANCE XB208 (E/IP) (6GK5208-0BA00-2TB2): All versions SCALANCE XB208 (PN) (6GK5208-0BA00-2AB2): All versions SCALANCE XB213-3 (SC; ports on rear) (6GK5324-0GG00-1HR2): Versions prior to V4.1.8 SCALANCE XR324-12M (24V; L3 int.) (6GK5528-0AR00-2HR2): All versions SCALANCE XR528-6M (6GK5528-0AA00-2AR2): All versions SCALANCE XR528-6M (L3 int.) (6GK5528-0AR00-2AR2): All versions SCALANCE XR552-12M (2HR2) (6GK5552-0AA00-2HR2): All versions SCALANCE XR552-12M (2HR2) (6GK5552-0AR00-2HR2): All versions SCALANCE XR552-12M (2HR2; ports on front) (6GK5324-4QG00-3AR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE (230V; E/IP) (6GK5213-3BD00-2TB2): All versions SCALANCE XB213-3 (SC; PN) (6GK5213-3BD00-2AB2): All versions SCALANCE XB213-3 (ST; PN) (6GK5205-3BB00-2AB2): All versions SCALANCE XB205-3 (ST; ports on front) (6GK5324-4GG00-3ER2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; L3 int.) (6GK5552-0AR00-2AR2): All versions SCALANCE XR552-12M (6GK5552-0AA00-2AR2): All versions SCALANCE XRH334 (24 V DC; coated) (6GK5307-2FD00-3GA3): Versions prior to V4.1.8 SCALANCE X307-3 (6GK5307-3BL00-2AA3): Versions prior to V4.1.8 SCALANCE X307-3 (6GK5307-3BL10-2AA3): Versions prior to V4.1.8 SCALANCE X307-3LD (6GK5307-3BM00-2AA3): Versions prior to V4.1.8 SCALANCE X307-3LD (6GK5307-3BM10-2AA3): Versions prior to V4.1.8 SCALANCE X308-2 (6GK5308-2FL00-2AA3): Versions prior to V4.1.8 SCALANCE X308-2 (6GK5308-2FL10-2AA3): Versions prior to V4.1.8 SCALANCE X308-2LD (6GK5308-2FM00-2AA3): Versions prior to V4.1.8 SCALANCE X308-2LD (6GK5308-2FM10-2AA3): Versions prior to V4.1.8 SCALANCE X308-2LH (6GK5308-2FN00-2AA3): Versions prior to V4.1.8 SCALANCE X308-2LH (6GK5308-2FN10-2AA3): Versions prior to V4.1.8 SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3): Versions prior to V4.1.8 SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3): Versions prior to V4.1.8 SCALANCE X308-2M (6GK5308-2GG00-2AA2): Versions prior to V4.1.8 SCALANCE X308-2M (6GK5308-2GG10-2AA2): Versions prior to V4.1.8 SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2): Versions prior to V4.1.8 SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2): Versions prior to V4.1.8 SCALANCE X308-2M TS (6GK5308-2GG00-2CA2): Versions prior to V4.1.8 SCALANCE X308-2M TS (6GK5308-2GG10-2CA2): Versions prior to V4.1.8 SCALANCE X310 (6GK5310-0FA00-2AA3): Versions prior to V4.1.8 SCALANCE X310 (6GK5310-0FA10-2AA3): Versions prior to V4.1.8 SCALANCE X310FE (6GK5310-0BA00-2AA3): Versions prior to V4.1.8 SCALANCE X310FE (6GK5310-0BA10-2AA3): Versions prior to V4.1.8 SCALANCE X320-1 FE (6GK5320-1BD00-2AA3): Versions prior to V4.1.8 SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3): Versions prior to V4.1.8 SCALANCE X408-2 (6GK5408-2FD00-2AA2): Versions prior to V4.1.8 SCALANCE XB205-3 (SC; ports on rear) (6GK5324-4QG10-1HR2): Versions prior to V4.1.8 SCALANCE XR324-4M PoE (230V; coated) (6GK5302-7GD00-2GA3): Versions prior to V4.1.8 SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3): Versions prior to V4.1.8 SCALANCE X302-7 EEC (2x 230V; ports on rear) (6GK5324-4GG10-1JR2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG00-4JR2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; coated) (6GK5307-2FD00-2GA3): Versions prior to V4.1.8 SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3): Versions prior to V4.1.8 SCALANCE X307-2 EEC (2x 230V; 4xGE; ports on front) (6GK5324-4GG10-1ER2): Versions prior to V4.1.8 SCALANCE XR324-4M EEC (24V" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-06" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Communications" ;
    icsa:cveNumber "CVE-2024-38278; CVE-2023-52237; CVE-2024-39675; CVE-2023-52238" ;
    icsa:cweNumber "CWE-200; CWE-266; CWE-497" ;
    icsa:hasCVE cve-res:CVE-2023-52237,
        cve-res:CVE-2023-52238,
        cve-res:CVE-2024-38278,
        cve-res:CVE-2024-39675 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-266,
        cwe-res:CWE-497 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-38278) RUGGEDCOM RST916C: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS400NC: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS910LNC: All versions (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RS900G: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900G (32M) V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900G (32M) V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG2100: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2100 (32M) V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2100 (32M) V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS910L: All versions (CVE-2023-52237; CVE-2024-38278).; CVE-2024-38278) RUGGEDCOM RSG2288NC V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2288NC V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416v2 V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG2300PNC V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2300PNC V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG920PNC V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG920PNC V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS920LNC: All versions (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG2100NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2100NC(32M) V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2100NC(32M) V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RMC8388 V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RMC8388 V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416NCv2 V4.X: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS910NC: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416P: Versions prior to V4.3.10 (CVE-2023-52237; are affected: RUGGEDCOM i800: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM i800NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM i801: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM i801NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM i802: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM i802NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM i803: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM i803NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM M969: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM M969NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM M2100: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM M2100NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM M2200: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM M2200NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RMC30: Versions prior to V4.3.10 (CVE-2023-52237; The following products of Siemens; CVE-2024-39675) RUGGEDCOM RS416NC: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG2488 V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2488 V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416v2 V4.X: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS930L: All versions (CVE-2023-52237) RUGGEDCOM RS930LNC: All versions (CVE-2023-52237) RUGGEDCOM RS930W: All versions (CVE-2023-52237) RUGGEDCOM RS940G: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS940GNC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS969: All versions (CVE-2023-52237) RUGGEDCOM RS969NC: All versions (CVE-2023-52237) RUGGEDCOM RS1600: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS1600F: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS1600FNC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS1600NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS1600T: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS1600TNC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS8000: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS8000A: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS8000ANC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS8000H: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS8000HNC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS8000NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS8000T: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS8000TNC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG907R: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RMC30NC: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416PNCv2 V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416Pv2 V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSL910: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSL910NC: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278; CVE-2024-39675) RUGGEDCOM RS416PNCv2 V4.X: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG910C: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG2100P: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2100PNC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2200: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2200NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2288 V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2288 V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS920L: All versions (CVE-2023-52237; CVE-2023-52238; CVE-2024-38278) RUGGEDCOM RSG920P V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG920P V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RS900W: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS910: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG2488NC V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2488NC V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS910W: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RP110: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416Pv2 V4.X: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RS900GNC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900GNC(32M) V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900GNC(32M) V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG2300P V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2300P V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RP110NC: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS401NC: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG2300NC V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2300NC V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS920W: All versions (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG908C: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG2300 V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RSG2300 V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RS900GP: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900GPNC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900L: All versions (CVE-2023-52237) RUGGEDCOM RS900LNC: All versions (CVE-2023-52237) RUGGEDCOM RS900M-GETS-C01: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900M-GETS-XX: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900M-STND-C01: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900M-STND-XX: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900MNC-GETS-C01: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900MNC-GETS-XX: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900MNC-STND-XX: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900MNC-STND-XX-C01: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900NC: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900NC(32M) V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900NC(32M) V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RST916P: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS401: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RST2228P: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RMC8388NC V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RMC8388NC V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416PNC: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS400: Versions prior to V4.3.10 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RSG909R: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS900: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900 (32M) V4.X: Versions prior to V4.3.10 (CVE-2023-52237) RUGGEDCOM RS900 (32M) V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-39675) RUGGEDCOM RS416NCv2 V5.X: Versions prior to V5.9.0 (CVE-2023-52237; CVE-2024-38278) RUGGEDCOM RST2228: Versions prior to V5.9.0 (CVE-2023-52237" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-07" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC and SIMIT" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical manufacturing" ;
    icsa:cveNumber "CVE-2023-52891" ;
    icsa:cweNumber "CWE-1325" ;
    icsa:hasCVE cve-res:CVE-2023-52891 ;
    icsa:hasCWE cwe-res:CWE-1325 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SIMIT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SIMATIC Energy Manager Basic: Versions prior to V7.5 SIMATIC Energy Manager PRO: Versions prior to V7.5 SIMATIC IPC DiagBase: All versions SIMATIC IPC DiagMonitor: All versions SIMIT V10: All versions SIMIT V11: Versions prior to V11.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-08" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Encryption Module" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-39888" ;
    icsa:cweNumber "CWE-547" ;
    icsa:hasCVE cve-res:CVE-2024-39888 ;
    icsa:hasCWE cwe-res:CWE-547 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Encryption" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: Mendix Encryption: Versions V10.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-09" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-39571; CVE-2024-39570" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-39570,
        cve-res:CVE-2024-39571 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: SINEMA Remote Connect Server: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-10" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT Open and PLM XML SDK" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37997; CVE-2024-37996" ;
    icsa:cweNumber "CWE-121; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-37996,
        cve-res:CVE-2024-37997 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT Open and PLM XML SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: JT Open: All versions PLM XML SDK: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-11" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE 1808" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-48795" ;
    icsa:cweNumber "CWE-222" ;
    icsa:hasCVE cve-res:CVE-2023-48795 ;
    icsa:hasCWE cwe-res:CWE-222 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: RUGGEDCOM APE1808: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-12" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Portal and SIMATIC STEP 7" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-32737" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-32737 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIA Portal and SIMATIC STEP 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Totally Integrated Automation Portal (TIA Portal): All versions Totally Integrated Automation Portal (TIA Portal) V18: All versions SIMATIC STEP 7 Safety V18: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-13" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Portal, SIMATIC, and SIRIUS" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems." ;
    icsa:cveNumber "CVE-2023-32735" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-32735 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIA Portal, SIMATIC, and SIRIUS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Siemens SIMATIC STEP 7 (TIA Portal) V16: All versions prior to V16 Update 7 Siemens SIMATIC STEP 7 (TIA Portal) V17: All versions prior to V17 Update 7 Siemens SIMATIC STEP 7 (TIA Portal)Â V18: All versions prior to V18 Update 2 Siemens SIMATIC STEP 7 Safety V16: All versions prior to V16 Update 7 Siemens SIMATIC STEP 7 Safety V17: All versions prior to V17 Update 7 Siemens SIMATIC STEP 7 Safety V18: All versions prior to V18 Update 2 Siemens SIMATIC WinCC (TIA Portal) V16: All versions prior to V16 Update 7 Siemens SIMATIC WinCC (TIA Portal) V17: All versions prior to V17 Update 7 Siemens SIMATIC WinCC (TIA Portal) V18: All versions prior to V18 Update 2 Siemens SIMATIC WinCC Unified V16: All versions prior to V16 Update 7 Siemens SIMATIC WinCC Unified V17: All versions prior to V17 Update 7 Siemens SIMATIC WinCC Unified V18: All versions prior to V18 Update 2 Siemens SIMOCODE ES V16: All versions prior to V16 Update 7 Siemens SIMOCODE ES V17: All versions prior to V17 Update 7 Siemens SIMOCODE ES V18: All versions prior to V18 Update 2 Siemens SIMOTION SCOUT TIA V5.4 SP1: All versions Siemens SIMOTION SCOUT TIA V5.4 SP3: All versions Siemens SIMOTION SCOUT TIA V5.5 SP1: All versions Siemens SINAMICS Startdrive V16: All versions Siemens SINAMICS Startdrive V17: All versions Siemens SINAMICS Startdrive V18: All versions Siemens SIRIUS Safety ES V17: All versions prior to V17 Update 7 Siemens SIRIUS Safety ES V18: All versions prior to V18 Update 2 Siemens SIRIUS Soft Starter ES V17: All versions prior to V17 Update 7 Siemens SIRIUS Soft Starter ES V18: All versions prior to V18 Update 2 Siemens Soft Starter ES V16: All versions prior to V16 Update 7 Siemens TIA Portal Cloud V3.0: All versions prior to V18 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-14" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-38867" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2024-38867 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Siemens SIPROTEC 5 6MD84 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 6MD85 (CP200): All versions Siemens SIPROTEC 5 6MD85 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 6MD86 (CP200): All versions Siemens SIPROTEC 5 6MD86 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 6MD89 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 6MU85 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 7KE85 (CP200): All versions Siemens SIPROTEC 5 7KE85 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 7SA82 (CP100): All versions Siemens SIPROTEC 5 7SA82 (CP150): All versions prior to V9.65 Siemens SIPROTEC 5 7SA84 (CP200): All versions Siemens SIPROTEC 5 7SA86 (CP200): All versions Siemens SIPROTEC 5 7SA86 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7SA87 (CP200): All versions Siemens SIPROTEC 5 7SA87 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7SD82 (CP100): All versions Siemens SIPROTEC 5 7SD82 (CP150): All versions prior to V9.65 Siemens SIPROTEC 5 7SD84 (CP200): All versions Siemens SIPROTEC 5 7SD86 (CP200): All versions Siemens SIPROTEC 5 7SD86 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7SD87 (CP200): All versions Siemens SIPROTEC 5 7SD87 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7SJ81 (CP100): All versions prior to V8.89 Siemens SIPROTEC 5 7SJ81 (CP150): All versions prior to V9.65 Siemens SIPROTEC 5 7SJ82 (CP100): All versions prior to V8.89 Siemens SIPROTEC 5 7SJ82 (CP150): All versions prior to V9.65 Siemens SIPROTEC 5 7SJ85 (CP200): All versions Siemens SIPROTEC 5 7SJ85 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7SJ86 (CP200): All versions Siemens SIPROTEC 5 7SJ86 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7SK82 (CP100): All versions prior to V8.89 Siemens SIPROTEC 5 7SK82 (CP150): All versions prior to V9.65 Siemens SIPROTEC 5 7SK85 (CP200): All versions Siemens SIPROTEC 5 7SK85 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7SL82 (CP100): All versions Siemens SIPROTEC 5 7SL82 (CP150): All versions prior to V9.65 Siemens SIPROTEC 5 7SL86 (CP200): All versions Siemens SIPROTEC 5 7SL86 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7SL87 (CP200): All versions Siemens SIPROTEC 5 7SL87 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7SS85 (CP200): All versions Siemens SIPROTEC 5 7SS85 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 7ST85 (CP200): All versions Siemens SIPROTEC 5 7ST85 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 7ST86 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 7SX82 (CP150): All versions prior to V9.65 Siemens SIPROTEC 5 7SX85 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7UM85 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 7UT82 (CP100): All versions Siemens SIPROTEC 5 7UT82 (CP150): All versions prior to V9.65 Siemens SIPROTEC 5 7UT85 (CP200): All versions Siemens SIPROTEC 5 7UT85 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7UT86 (CP200): All versions Siemens SIPROTEC 5 7UT86 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7UT87 (CP200): All versions Siemens SIPROTEC 5 7UT87 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7VE85 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 7VK87 (CP200): All versions Siemens SIPROTEC 5 7VK87 (CP300): All versions prior to V9.65 Siemens SIPROTEC 5 7VU85 (CP300): All versions prior to V9.64 Siemens SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1): All versions installed on CP200 devices Siemens SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1): All versions prior to V8.89 installed on CP100 devices Siemens SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1): All versions prior to V9.62 installed on CP150 and CP300 devices Siemens SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1): All versions installed on CP200 devices Siemens SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1): All versions prior to V8.89 installed on CP100 devices Siemens SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1): All versions prior to V9.62 installed on CP150 and CP300 devices Siemens SIPROTEC 5 Communication Module ETH-BD-2FO: All versions prior to V9.62 Siemens SIPROTEC 5 Compact 7SX800 (CP050): All versions prior to V9.64." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-15" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-39569; CVE-2024-39567; CVE-2024-39568" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-39567,
        cve-res:CVE-2024-39568,
        cve-res:CVE-2024-39569 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following versions of SINEMA Remote Connect management platform are affected: SINEMA Remote Connect Client: versions prior to V3.2 HF1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-16" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC WinCC" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-30321" ;
    icsa:cweNumber "CWE-359" ;
    icsa:hasCVE cve-res:CVE-2024-30321 ;
    icsa:hasCWE cwe-res:CWE-359 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC WinCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following versions of SIMATIC WinCC are affected: Siemens SIMATIC PCS 7 V9.1: all versions Siemens SIMATIC WinCC Runtime Professional V18: all versions Siemens SIMATIC WinCC Runtime Professional V19: all versions Siemens SIMATIC WinCC V7.4: versions prior to V7.4 SP1 Update 23 Siemens SIMATIC WinCC V7.5: versions prior to V7.5 SP2 Update 17 Siemens SIMATIC WinCC V8.0: versions prior to V8.0 Update 5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-17" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC STEP 7 (TIA Portal)" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-45147" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2022-45147 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC STEP 7 (TIA Portal)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC PCS neo V4.0: all versions SIMATIC STEP 7 V16: all versions SIMATIC STEP 7 V17: all versions SIMATIC STEP 7 V18: versions prior to V18 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-18" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager ThinServer" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-5990; CVE-2024-5989; CVE-2024-5988" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-5988,
        cve-res:CVE-2024-5989,
        cve-res:CVE-2024-5990 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager ThinServer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "11.2.0; 12.1.0; 12.0.0; The vulnerabilities exist in the following versions of ThinManger ThinServer: ThinManager ThinServer: Versions 11.1.0; 13.1.0; CVE-2024-5989) ThinManager ThinServer: Versions 11.1.0; 13.0.0; 13.1.0 (CVE-2024-5990).; 13.2.0 (CVE-2024-5988" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-18" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-19 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-19" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk System Services and Policy Manager" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6325; CVE-2024-6236" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2024-6236,
        cve-res:CVE-2024-6325 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk System Services and Policy Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation FactoryTalk products are affected: FactoryTalk System Services: v6.40 FactoryTalk Policy Manager: v6.40." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-19" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-193-20 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-193-20" ;
    dcterms:issued "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "HMS Industrial Networks Anybus-CompactCom 30" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6558" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-6558 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Anybus-CompactCom 30" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected if they include a web server: Anybus-CompactCom 30: All versions.; The following versions of Anybus-CompactCom 30; an industrial communication interface" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-193-20" ;
    icsa:vendor "HMS Industrial Networks" ;
    icsa:year 2024 .

icsa-res:ICSA-24-198-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-198-01" ;
    dcterms:issued "2024-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Pavilion8" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6435" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2024-6435 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pavilion8" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a Model Predictive Control (MPC) solution; are affected: Pavilion 8: Versions 5.15.00 to 5.20.00.; The following versions of Rockwell Automation Pavilion 8" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-198-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-200-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-200-01" ;
    dcterms:issued "2024-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSOFT MaiLab and MELSOFT VIXIO (Update A)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-4807" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2023-4807 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSOFT MaiLab, MELSOFT VIXIO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the following versions of MELSOFT MaiLab and MELSOFT VIXIO are affected: MELSOFT MaiLab SW1DND-MAILAB-M: Versions 1.00A to 1.05F MELSOFT MaiLab SW1DND-MAILABPR-M: Versions 1.00A to 1.05F MELSOFT VIXIO SW1DND-AIVILE-M: Versions 1.00A to 1.03D MELSOFT VIXIO SW1DND-AIVIIN-M: Versions 1.00A to 1.03D." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-200-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-200-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-200-02" ;
    dcterms:issued "2024-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Subnet Solutions PowerSYSTEM Center" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-26136" ;
    icsa:cweNumber "CWE-1321" ;
    icsa:hasCVE cve-res:CVE-2023-26136 ;
    icsa:hasCWE cwe-res:CWE-1321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Subnet PowerSYSTEM Center" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Subnet PowerSYSTEM Center are affected: PowerSYSTEM Center 2020: Update 20 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-200-02" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-205-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-205-01" ;
    dcterms:issued "2024-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "National Instruments IO Trace" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Defense Industrial Base; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-5602" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-5602 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IO Trace" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following National Instruments I/O TRACE bundled products are affected: I/O TRACE: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-205-01" ;
    icsa:vendor "National Instruments Corp (NI)" ;
    icsa:year 2024 .

icsa-res:ICSA-24-205-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-205-02" ;
    dcterms:issued "2024-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy AFS/AFR Series Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-0215; CVE-2022-4304; CVE-2023-0286; CVE-2022-4450" ;
    icsa:cweNumber "CWE-416; CWE-843; CWE-203; CWE-415" ;
    icsa:hasCVE cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286 ;
    icsa:hasCWE cwe-res:CWE-203,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AFS650, AFS660, AFS665, AFS670, AFS675, AFS677, AFR677" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Hitachi Energy AFS/AFR are affected: AFS650: Version 9.1.08 and prior AFS660-C: Version 7.1.05 and prior AFS665-B: Version 7.1.05 and prior AFS670-V2: Version 7.1.05 and prior AFS670: Version 9.1.08 and prior AFS675: Version 9.1.08 and prior AFS677: Version 9.1.08 and prior AFR677: Version 9.1.08 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-205-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-205-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-205-03" ;
    dcterms:issued "2024-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "National Instruments LabVIEW" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Defense Industrial Base; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-4081; CVE-2024-4079; CVE-2024-4080" ;
    icsa:cweNumber "CWE-119; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-4079,
        cve-res:CVE-2024-4080,
        cve-res:CVE-2024-4081 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LabVIEW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following National Instruments LabVIEW products are affected: LabVIEW: Versions 24.1f0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-205-03" ;
    icsa:vendor "National Instruments Corp (NI)" ;
    icsa:year 2024 .

icsa-res:ICSA-24-207-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-207-01" ;
    dcterms:issued "2024-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM Products" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37998; CVE-2024-39601" ;
    icsa:cweNumber "CWE-306; CWE-620" ;
    icsa:hasCVE cve-res:CVE-2024-37998,
        cve-res:CVE-2024-39601 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-620 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CPCI85 for CP-8031/CP-8050, CPCI85, SICORE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens SICAM product versions are affected: CPCI85 Central Processing/Communication: All versions prior to V5.40 SICORE Base system: All versions prior to V1.4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-207-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-207-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-207-02" ;
    dcterms:issued "2024-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-07-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Positron Broadcast Signal Processor" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2024-7007" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2024-7007 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Broadcast Signal Processor TRA7005" ;
    icsa:productDistribution "Italy" ;
    icsa:productsAffected "The following versions of Positron Broadcast Signal Processor are affected: Broadcast Signal Processor TRA7005: v1.20." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-207-02" ;
    icsa:vendor "Positron S.R.L" ;
    icsa:year 2024 .

icsa-res:ICSA-24-214-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-214-01" ;
    dcterms:issued "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision Client and exacqVision Server" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32758" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2024-32758 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision Client, exacqVision Server key" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports that the following versions of exacqVision client and exacqVision server are affected: exacqVision client: All versions exacqVision server: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-214-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-214-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-214-02" ;
    dcterms:issued "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision Server Web Service" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32862" ;
    icsa:cweNumber "CWE-942" ;
    icsa:hasCVE cve-res:CVE-2024-32862 ;
    icsa:hasCWE cwe-res:CWE-942 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision Web Service" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports that the following versions of exacqVision Web Service are affected: exacqVision Web Service: 22.12.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-214-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-214-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-214-03" ;
    dcterms:issued "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision Web Service" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32863" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2024-32863 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision Web Service" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Johnson Controls exacqVision Web Service are affected: exacqVision Web Service: Versions 24.03 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-214-03" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-214-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-214-04" ;
    dcterms:issued "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision Web Service" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32864" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2024-32864 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision Web Service" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Johnson Controls exacqVision Web Service are affected: exacqVision Web Service: Versions 24.03 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-214-04" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-214-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-214-05" ;
    dcterms:issued "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision Web Service" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32865" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2024-32865 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "exacqVision Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Johnson Controls exacqVision Server are affected: exacqVision Server: Versions 24.03 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-214-05" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-214-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-214-06" ;
    dcterms:issued "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls exacqVision Web Service" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2024-32931" ;
    icsa:cweNumber "CWE-598" ;
    icsa:hasCVE cve-res:CVE-2024-32931 ;
    icsa:hasCWE cwe-res:CWE-598 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Web Service" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Johnson Controls exacqVision Web Service are affected: exacqVision Web Service: Versions 24.03 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-214-06" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-214-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-214-07" ;
    dcterms:issued "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVTECH IP Camera" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Financial Services; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-7029" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-7029 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IP camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following AVTECH IP camera was identified as being affected; it is suspected that prior versions of other IP cameras and NVR (network video recorder) products are also affected: AVM1203: firmware version FullImg-1023-1007-1011-1009 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-214-07" ;
    icsa:vendor "AVTECH SECURITY Corporation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-214-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-214-08" ;
    dcterms:issued "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Vonets WiFi Bridges" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2024-41936; CVE-2024-39791; CVE-2024-41161; CVE-2024-39815; CVE-2024-42001; CVE-2024-29082; CVE-2024-37023" ;
    icsa:cweNumber "CWE-22; CWE-77; CWE-703; CWE-284; CWE-121; CWE-798; CWE-425" ;
    icsa:hasCVE cve-res:CVE-2024-29082,
        cve-res:CVE-2024-37023,
        cve-res:CVE-2024-39791,
        cve-res:CVE-2024-39815,
        cve-res:CVE-2024-41161,
        cve-res:CVE-2024-41936,
        cve-res:CVE-2024-42001 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-425,
        cwe-res:CWE-703,
        cwe-res:CWE-77,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VAR1200-H, VAR1200-L, VAR600-H, VAP11AC, VAP11G-500S, VBG1200, VAP11S-5G, VAP11S, VAR11N-300, VAP11G-300, VAP11N-300, VAP11G, VAP11G-500, VBG1200, VAP11AC, VGA-1000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "At least the following Vonets products are affected: VAR1200-H: Versions 3.3.23.6.9 and prior VAR1200-L: Versions 3.3.23.6.9 and prior VAR600-H: Versions 3.3.23.6.9 and prior VAP11AC: Versions 3.3.23.6.9 and prior VAP11G-500S: Versions 3.3.23.6.9 and prior VBG1200: Versions 3.3.23.6.9 and prior VAP11S-5G: Versions 3.3.23.6.9 and prior VAP11S: Versions 3.3.23.6.9 and prior VAR11N-300: Versions 3.3.23.6.9 and prior VAP11G-300: Versions 3.3.23.6.9 and prior VAP11N-300: Versions 3.3.23.6.9 and prior VAP11G: Versions 3.3.23.6.9 and prior VAP11G-500: Versions 3.3.23.6.9 and prior VBG1200: Versions 3.3.23.6.9 and prior VAP11AC: Versions 3.3.23.6.9 and prior VGA-1000: Versions 3.3.23.6.9 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-214-08" ;
    icsa:vendor "Vonets" ;
    icsa:year 2024 .

icsa-res:ICSA-24-214-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-214-09" ;
    dcterms:issued "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix Controllers" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6242" ;
    icsa:cweNumber "CWE-420" ;
    icsa:hasCVE cve-res:CVE-2024-6242 ;
    icsa:hasCWE cwe-res:CWE-420 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix, GuardLogix, and 1756 ControlLogix I/O Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Series A/B (signed version): Version v5.027 1756-EN2TR; Series A/B (unsigned version): Version v5.007 1756-EN2TR; GuardLogix; Series C: Version V10.009 1756-EN2TR; Series C: Version V10.007 1756-EN3TR; Series B (unsigned version): Version v5.007 1756-EN2T; and 1756 ControlLogix I/O Modules are affected: ControlLogix: Version V28 GuardLogix: Version V31 1756-EN4TR: Version V2 1756-EN2T; Series B (signed version): Version v5.027 1756-EN2T; Series A/B (unsigned version): Version v5.007 1756-EN3TR; Series B: Version V10.007 1756-EN2TP; Series D: Version V10.006 1756-EN2F; Series A/B/C (unsigned version): Version v5.007 1756-EN2F; Series A/B/C (signed version): Version v5.027 1756-EN2F; Series A/B (signed version): Version v5.027 1756-EN3TR; Series A: Version V10.020.; The following versions of ControlLogix" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-214-09" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-219-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-219-01" ;
    dcterms:issued "2024-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAScreen" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-7502" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-7502 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAScreen" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics DIAScreen visualization software are affected: DIAScreen: Versions prior to 1.4.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-219-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-221-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-221-01" ;
    dcterms:issued "2024-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dorsett Controls InfoScan" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-39287; CVE-2024-42408; CVE-2024-42493" ;
    icsa:cweNumber "CWE-22; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2024-39287,
        cve-res:CVE-2024-42408,
        cve-res:CVE-2024-42493 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InfoScan" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "and v1.35.; The following Dorsett Controls products are affected: InfoScan: v1.32; v1.33" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-221-01" ;
    icsa:vendor "Dorsett Controls" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-01" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA SuiteLink Server" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7113" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2024-7113 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SuiteLink Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following AVEVA products with AVEVA SuiteLink Server installed; are affected: SuiteLink: Versions 3.7.0 and prior Historian: Versions 2023 R2 P01 and prior InTouch: Versions 2023 R2 P01 and prior Application Server: Versions 2023 R2 P01 and prior Communication Drivers Pack: Versions 2023 R2 and prior Batch Management: Versions 2023 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-02" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation AADvance Standalone OPC-DA Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2006-0743; CVE-2018-1285" ;
    icsa:cweNumber "CWE-134; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2006-0743,
        cve-res:CVE-2018-1285 ;
    icsa:hasCWE cwe-res:CWE-134,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AADvance Standalone OPC-DA Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation AADvance Standalone OPC-DA Server are affected: AADvance Standalone OPC-DA Server: Versions v2.01.510 and later." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-03" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation GuardLogix/ControlLogix 5580 Controller" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-40619" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2024-40619 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix 5580, GuardLogix 5580" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "programmable logic controllers; The following versions of Rockwell Automation GuardLogix/ControlLogix 5580; are affected: ControlLogix 5580: Versions v34.011 and later GuardLogix 5580: Versions v34.011 and later." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-04" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Pavilion8" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-40620" ;
    icsa:cweNumber "CWE-311" ;
    icsa:hasCVE cve-res:CVE-2024-40620 ;
    icsa:hasCWE cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pavilion8" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Pavilion8: Versions v5.20 and later.; The following versions Rockwell Automation Pavilion8; a model predictive control software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-05" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation DataMosaix Private Cloud" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6078" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-6078 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataMosaix Private Cloud" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation's DataMosaix Private Cloud are affected: DataMosaix Private Cloud: Versions prior to 7.07." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-06" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View Site Edition (Update A)" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-7513" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2024-7513 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View Site Edition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an HMI application; Rockwell Automation reports that the following versions of FactoryTalk; are affected: FactoryTalk View SE: version 13.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-07" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Micro850/870" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7567" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-7567 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Micro850/870" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of Micro850/870 programmable controllers are affected: PLC - Micro850/870 (2080 -L50E/2080 -L70E): versions prior to v22.011." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-08" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ocean Data Systems Dream Report" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Chemical; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-6619; CVE-2024-6618" ;
    icsa:cweNumber "CWE-22; CWE-732" ;
    icsa:hasCVE cve-res:CVE-2024-6618,
        cve-res:CVE-2024-6619 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Dream Report 2023" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a report generating and delivery software; are affected: Dream Report 2023: Version 23.0.17795.1010 and prior AVEVA Reports for Operations 2023: Version 23.0.17795.1010.; The following components of Ocean Data Systems Dream Report" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-08" ;
    icsa:vendor "Ocean Data Systems" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-09" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, Compact GuardLogix 5380" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7507" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-7507 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix, GuardLogix 5580, CompactLogix, Compact GuardLogix 5380" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "v35.013; v34.014 ControlLogix 5580 (1756 - L8z): Versions prior to v36.011; v34.014 Compact GuardLogix 5380 (5069 - L3zS2): Versions prior to v36.011; The following Rockwell Automation products are affected: CompactLogix 5380 (5069 - L3z): Versions prior to v36.011; v34.014 GuardLogix 5580 (1756 - L8z): Versions prior to v36.011; v34.014.; v34.014 CompactLogix 5480 (5069 - L4): Versions prior to v36.011" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-09" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-226-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-226-10" ;
    dcterms:issued "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, and Compact GuardLogix 5380" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7515" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-7515 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CompactLogix 5380, ControlLogix 5580, GuardLogix 5580, Compact GuardLogix 5380, CompactLogix 5480" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "v35.013; v34.014 ControlLogix 5580 (1756 - L8z): Versions prior to v36.011; v34.014 Compact GuardLogix 5380 (5069 - L3zS2): Versions prior to v36.011; The following Rockwell Automation products are affected: CompactLogix 5380 (5069 - L3z): Versions prior to v36.011; v34.014 GuardLogix 5580 (1756 - L8z): Versions prior to v36.011; v34.014.; v34.014 CompactLogix 5480 (5069 - L4): Versions prior to v36.011" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-226-10" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-01" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE M-800, RUGGEDCOM RM1224" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-41977; CVE-2024-41976; CVE-2023-44321; CVE-2024-41978" ;
    icsa:cweNumber "CWE-532; CWE-20; CWE-488; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-44321,
        cve-res:CVE-2024-41976,
        cve-res:CVE-2024-41977,
        cve-res:CVE-2024-41978 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-400,
        cwe-res:CWE-488,
        cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM RM1224, SCALANCE M-800 Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): Versions prior to V8.1 Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): Versions prior to V8.1 Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2): Versions prior to V8.1 Siemens SCALANCE M812-1 ADSL-Router family: Versions prior to V8.1 Siemens SCALANCE M816-1 ADSL-Router family: Versions prior to V8.1 Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): Versions prior to V8.1 Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2): Versions prior to V8.1 Siemens SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2): Versions prior to V8.1 Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2): Versions prior to V8.1 Siemens SCALANCE M876-3 (6GK5876-3AA02-2BA2): Versions prior to V8.1 Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): Versions prior to V8.1 Siemens SCALANCE M876-4 (6GK5876-4AA10-2BA2): Versions prior to V8.1 Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): Versions prior to V8.1 Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): Versions prior to V8.1 Siemens SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1): Versions prior to V8.1 Siemens SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1): Versions prior to V8.1 Siemens SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): Versions prior to V8.1 Siemens SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1): Versions prior to V8.1 Siemens SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1): Versions prior to V8.1 Siemens SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1): Versions prior to V8.1 Siemens SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): Versions prior to V8.1 Siemens SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): Versions prior to V8.1 Siemens SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2): Versions prior to V8.1 Siemens SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2): Versions prior to V8.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-02" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens INTRALOG WMS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-0056; CVE-2024-30045" ;
    icsa:cweNumber "CWE-122; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2024-0056,
        cve-res:CVE-2024-30045 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "INTRALOG WMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Siemens INTRALOG WMS: Versions prior to V4.; The following version of Siemens INTRALOG WMS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-03" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-32637; CVE-2024-32636; CVE-2024-32635" ;
    icsa:cweNumber "CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-32635,
        cve-res:CVE-2024-32636,
        cve-res:CVE-2024-32637 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization and JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Teamcenter Visualization and JT2Go; are affected: Siemens JT2Go: Versions prior to V2312.0005 Siemens Teamcenter Visualization V14.2: Versions prior to V14.2.0.12 Siemens Teamcenter Visualization V14.3: Versions prior to V14.3.0.10 Siemens Teamcenter Visualization V2312: Versions prior to V2312.0005." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-04" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC Traffic Analyzer" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-41907; CVE-2024-41906; CVE-2024-41903; CVE-2024-41904; CVE-2024-41905" ;
    icsa:cweNumber "CWE-307; CWE-284; CWE-358; CWE-524; CWE-269" ;
    icsa:hasCVE cve-res:CVE-2024-41903,
        cve-res:CVE-2024-41904,
        cve-res:CVE-2024-41905,
        cve-res:CVE-2024-41906,
        cve-res:CVE-2024-41907 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-284,
        cwe-res:CWE-307,
        cwe-res:CWE-358,
        cwe-res:CWE-524 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC Traffic Analyzer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: Siemens SINEC Traffic Analyzer (6GK8822-1BG01-0BA0): versions prior to V2.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-05" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! V8.3 BM Devices" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-39922" ;
    icsa:cweNumber "CWE-256" ;
    icsa:hasCVE cve-res:CVE-2024-39922 ;
    icsa:hasCWE cwe-res:CWE-256 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! V8.3 BM Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Siemens LOGO! 12/24RCE (6ED1052-1MD08-0BA1): All versions Siemens LOGO! 12/24RCEo (6ED1052-2MD08-0BA1): All versions Siemens LOGO! 24CE (6ED1052-1CC08-0BA1): All versions Siemens LOGO! 24CEo (6ED1052-2CC08-0BA1): All versions Siemens LOGO! 24RCE (6ED1052-1HB08-0BA1): All versions Siemens LOGO! 24RCEo (6ED1052-2HB08-0BA1): All versions Siemens LOGO! 230RCE (6ED1052-1FB08-0BA1): All versions Siemens LOGO! 230RCEo (6ED1052-2FB08-0BA1): All versions Siemens SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1): All versions Siemens SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1): All versions Siemens SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1): All versions Siemens SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1): All versions Siemens SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1): All versions Siemens SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1): All versions Siemens SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1): All versions Siemens SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1): All versions.; The following products of Siemens" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-06" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-6378; CVE-2023-42795; CVE-2023-44487; CVE-2023-42794; CVE-2023-5870; CVE-2023-52425; CVE-2023-34050; CVE-2024-41938; CVE-2023-46589; CVE-2023-43622; CVE-2024-36398; CVE-2024-41939; CVE-2024-41940; CVE-2023-46120; CVE-2023-5869; CVE-2023-5868; CVE-2023-6481; CVE-2023-4611; CVE-2023-45648; CVE-2023-45802; CVE-2023-52426; CVE-2024-25062; CVE-2024-41941; CVE-2024-28182; CVE-2023-31122; CVE-2023-39615; CVE-2024-0985; CVE-2023-46280; CVE-2024-28757" ;
    icsa:cweNumber "CWE-22; CWE-119; CWE-776; CWE-770; CWE-416; CWE-250; CWE-20; CWE-271; CWE-502; CWE-125; CWE-400; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2023-31122,
        cve-res:CVE-2023-34050,
        cve-res:CVE-2023-39615,
        cve-res:CVE-2023-42794,
        cve-res:CVE-2023-42795,
        cve-res:CVE-2023-43622,
        cve-res:CVE-2023-44487,
        cve-res:CVE-2023-45648,
        cve-res:CVE-2023-45802,
        cve-res:CVE-2023-4611,
        cve-res:CVE-2023-46120,
        cve-res:CVE-2023-46280,
        cve-res:CVE-2023-46589,
        cve-res:CVE-2023-52425,
        cve-res:CVE-2023-52426,
        cve-res:CVE-2023-5868,
        cve-res:CVE-2023-5869,
        cve-res:CVE-2023-5870,
        cve-res:CVE-2023-6378,
        cve-res:CVE-2023-6481,
        cve-res:CVE-2024-0985,
        cve-res:CVE-2024-25062,
        cve-res:CVE-2024-28182,
        cve-res:CVE-2024-28757,
        cve-res:CVE-2024-36398,
        cve-res:CVE-2024-41938,
        cve-res:CVE-2024-41939,
        cve-res:CVE-2024-41940,
        cve-res:CVE-2024-41941 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-250,
        cwe-res:CWE-271,
        cwe-res:CWE-400,
        cwe-res:CWE-416,
        cwe-res:CWE-502,
        cwe-res:CWE-770,
        cwe-res:CWE-776,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens; are affected: SINEC NMS: versions prior to V3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-07" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Location Intelligence" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-41682; CVE-2024-41683; CVE-2024-41681" ;
    icsa:cweNumber "CWE-307; CWE-521; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2024-41681,
        cve-res:CVE-2024-41682,
        cve-res:CVE-2024-41683 ;
    icsa:hasCWE cwe-res:CWE-307,
        cwe-res:CWE-326,
        cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Location Intelligence" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Location Intelligence; a web-based application software; are affected: Location Intelligence: All versions prior to V4.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-08" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-26495; CVE-2023-5180" ;
    icsa:cweNumber "CWE-416; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-26495,
        cve-res:CVE-2023-5180 ;
    icsa:hasCWE cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a unified data platform; The following versions of Siemens COMOS; are affected: COMOS: All versions prior to V10.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-09" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens NX" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-41908" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-41908 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens NX; are affected: NX: All versions prior to V2406.3000.; an integrated toolset" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-10" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Historian Web Server" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6456" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2024-6456 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Historian Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Historian Server: Version 2023 R2 Historian Server: Versions 2023 to 2023 P03 Historian Server: Versions 2020 to 2020 R2 SP1 P01.; a Process database; The following versions of AVEVA Historian Server" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-10" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2024 .

icsa-res:ICSA-24-228-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-228-11" ;
    dcterms:issued "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Kepware ThingWorx Kepware Server" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6098" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2024-6098 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kepware ThingWorx Kepware Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PTC reports that the following products and versions are affected: PTC Kepware ThingWorx Kepware Server: V6 PTC Kepware KEPServerEX: V6 Software Toolbox TOP Server: V6 GE IGS: V7.6x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-228-11" ;
    icsa:vendor "PTC" ;
    icsa:year 2024 .

icsa-res:ICSA-24-235-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-235-01" ;
    dcterms:issued "2024-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Emulate3D" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6079" ;
    icsa:cweNumber "CWE-610" ;
    icsa:hasCVE cve-res:CVE-2024-6079 ;
    icsa:hasCWE cwe-res:CWE-610 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Emulate3D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is affected: Emulate3D: Versions 17.00.00.13276.; a Digital Twin technology; The following version of Rockwell Automation Emulate3D" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-235-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-235-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-235-02" ;
    dcterms:issued "2024-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 5015 – AENFTXT" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6089" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-6089 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "5015 - AENFTXT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation 5015 - AENFTXT; a part of the FLEXHA 5000 I/O Modules; are affected: 5015 - AENFTXT: Version 2.011." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-235-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-235-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-235-03" ;
    dcterms:issued "2024-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "MOBOTIX P3 and Mx6 Cameras" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-34873" ;
    icsa:cweNumber "CWE-146" ;
    icsa:hasCVE cve-res:CVE-2023-34873 ;
    icsa:hasCWE cwe-res:CWE-146 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "P3 Cameras, Mx6 Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MX-V5.1.0.99-r4 Mx6 D26: MX-V5.0.0.127; MX-V4.3.0.15; MX-V4.3.4.66; MX-V4.1.6.27; MX-V4.1.10.35; MX-V4.1.10.28; MX-V4.4.2.73 P3 V15D: MX-V4.1.4.11; MX-V4.4.2.73 P3 i25: MX-V4.1.4.11; MX-V4.4.2.34; MX-V5.0.0.133; MX-V4.4.2.73 P3 T25M: MX-V4.1.4.11; MX-V4.3.2.77; MX-V4.3.2.45; MX-V4.4.2.73 P3 M25M: MX-V4.1.4.11; MX-V4.4.2.51.r1; MX-V4.4.2.73 Mx6 D16: MX-V5.0.0.127; MX-V4.3.2.68; MX-V4.4.2.73 P3 D14Di: MX-V4.1.4.11; MX-V4.4.2.69; MX-V4.3.2.53; MX-V5.0.0.130; MX-V5.1.0.99-r4 Mx6 T26: MX-V5.0.0.127; MX-V4.4.2.73 P3 Q25M: MX-V4.1.4.11; MX-V5.1.0.99-r4 Mx6 i26: MX-V5.0.0.127; MX-V4.1.4.70; MX-V4.4.2.73 P3 Q24M: MX-V4.1.4.11; MX-V4.4.2.73 P3 M15: MX-V4.1.4.11; MX-V4.3.4.83; MX-V4.2.1.43; MX-V4.4.2.73 P3 v25: MX-V4.1.4.11; MX-V5.1.0.99-r4 Mx6 M26: MX-V5.0.0.127; The following products of MOBOTIX are affected: P3 D24M: MX-V4.1.4.11; MX-V5.1.0.99-r4 Mx6 v26: MX-V5.0.0.127; MX-V4.4.1.56; MX-V4.4.2.73 P3 c25: MX-V4.1.4.11; MX-V4.4.2.73 P3 D15Di: MX-V4.1.4.11; MX-V5.1.0.99-r4 Mx6 M16: MX-V5.0.0.127; MX-V5.1.0.99-r4.; MX-V4.4.2.73 P3 S14: MX-V4.1.4.11; MX-V5.0.1.53; MX-V5.1.0.99-r3; MX-V5.1.0.99-r4 Mx6 S26: MX-V5.0.0.127; MX-V4.3.2.72; MX-V4.4.2.73 P3 T24M: MX-V4.1.4.11; MX-V5.1.0.99-r4 Mx6 c26: MX-V5.0.0.127; MX-V4.2.1.61; MX-V4.4.2.73 P3 M15-Thermal: MX-V4.1.4.11; MX-V5.1.0.99-r4 Mx6 Q26: MX-V5.0.0.127; MX-V4.3.4.50; MX-V4.4.0.31; MX-V4.4.1.55; MX-V4.4.2.73 P3 p25: MX-V4.1.4.11; MX-V5.1.0.99-r4 Mx6 V16: MX-V5.0.0.127; MX-V4.4.2.73 P3 M24M: MX-V4.1.4.11; MX-V5.0.2.14; MX-V4.1.6.25; MX-V5.1.0.99-r4 Mx6 p26: MX-V5.0.0.127; MX-V4.1.9.29; MX-V4.4.0.31.r1; MX-V5.1.0.99; MX-V4.4.2.73 P3 V14D: MX-V4.1.4.11; MX-V4.4.2.73 P3 S15: MX-V4.1.4.11; MX-V4.4.2.73 P3 D25M: MX-V4.1.4.11; MX-V5.1.0.99-r4 Mx6 S16: MX-V5.0.0.127" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-235-03" ;
    icsa:vendor "MOBOTIX" ;
    icsa:year 2024 .

icsa-res:ICSA-24-235-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-235-04" ;
    dcterms:issued "2024-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Avtec Outpost 0810" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2024-42418; CVE-2024-39776" ;
    icsa:cweNumber "CWE-321; CWE-219" ;
    icsa:hasCVE cve-res:CVE-2024-39776,
        cve-res:CVE-2024-42418 ;
    icsa:hasCWE cwe-res:CWE-219,
        cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Outpost 0810, Outpost Uploader Utility" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Avtec products are affected: Outpost 0810: Versions prior to v5.0.0 Outpost Uploader Utility: Versions prior to v5.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-235-04" ;
    icsa:vendor "Avtec" ;
    icsa:year 2024 .

icsa-res:ICSA-24-242-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-242-01" ;
    dcterms:issued "2024-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager ThinServer" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7987; CVE-2024-7986; CVE-2024-7988" ;
    icsa:cweNumber "CWE-20; CWE-269; CWE-732" ;
    icsa:hasCVE cve-res:CVE-2024-7986,
        cve-res:CVE-2024-7987,
        cve-res:CVE-2024-7988 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-269,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager ThinServer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a client management software; The following versions of Rockwell Automation ThinManager ThinServer; are affected: ThinManager ThinServer: Versions 11.1.0 to 11.1.7 ThinManager ThinServer: Versions 11.2.0 to 11.2.8 ThinManager ThinServer: Versions 12.0.0 to 12.0.6 ThinManager ThinServer: Versions 12.1.0 to 12.1.7 ThinManager ThinServer: Versions 13.0.0 to 13.0.4 ThinManager ThinServer: Versions 13.1.0 to 13.1.2 ThinManager ThinServer: Versions 13.2.0 to 13.2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-242-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-242-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-242-02" ;
    dcterms:issued "2024-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DTN Soft" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8255" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-8255 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DTN Soft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics DTN Soft; are affected: DTN Soft: Version 2.0.1 and prior.; a temperature control" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-242-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-247-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-247-01" ;
    dcterms:issued "2024-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "LOYTEC Electronics LINX Series" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-46389; CVE-2023-46385; CVE-2023-46386; CVE-2023-46382; CVE-2023-46380; CVE-2023-46388; CVE-2023-46384; CVE-2023-46381; CVE-2023-46387; CVE-2023-46383" ;
    icsa:cweNumber "CWE-306; CWE-319; CWE-284; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2023-46380,
        cve-res:CVE-2023-46381,
        cve-res:CVE-2023-46382,
        cve-res:CVE-2023-46383,
        cve-res:CVE-2023-46384,
        cve-res:CVE-2023-46385,
        cve-res:CVE-2023-46386,
        cve-res:CVE-2023-46387,
        cve-res:CVE-2023-46388,
        cve-res:CVE-2023-46389 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-306,
        cwe-res:CWE-312,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LINX series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Loytec products are affected: LINX-151: All versions LINX-212: All versions LVIS-3ME12-A1: All versions LIOB-586: All versions LIOB-580 V2: All versions LIOB-588: All versions L-INX Configurator: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-247-01" ;
    icsa:vendor "LOYTEC electronics GmbH" ;
    icsa:year 2024 .

icsa-res:ICSA-24-249-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-249-01" ;
    dcterms:issued "2024-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hughes Network Systems WL3000 Fusion Software" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2024-39278; CVE-2024-42495" ;
    icsa:cweNumber "CWE-522; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2024-39278,
        cve-res:CVE-2024-42495 ;
    icsa:hasCWE cwe-res:CWE-311,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WL3000 Fusion Software" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Hughes Network Systems work streams are affected: WL3000 Fusion Software: Versions prior to 2.7.0.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-249-01" ;
    icsa:vendor "Hughes Network Systems" ;
    icsa:year 2024 .

icsa-res:ICSA-24-254-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-254-01" ;
    dcterms:issued "2024-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Viessmann Climate Solutions SE Vitogate 300" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2023-5702; CVE-2023-45852; CVE-2023-5222" ;
    icsa:cweNumber "CWE-798; CWE-77; CWE-425" ;
    icsa:hasCVE cve-res:CVE-2023-45852,
        cve-res:CVE-2023-5222,
        cve-res:CVE-2023-5702 ;
    icsa:hasCWE cwe-res:CWE-425,
        cwe-res:CWE-77,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vitogate 300" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Viessmann Climate Solutions SE Vitogate 300; are affected: Viessmann Vitogate 300: Versions 2.1.3.0 and prior.; a solution to connecting boilers and heat pumps to a building management system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-254-01" ;
    icsa:vendor "Viessmann Climate Solutions SE" ;
    icsa:year 2024 .

icsa-res:ICSA-24-254-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-254-02" ;
    dcterms:issued "2024-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "iniNet Solutions SpiderControl SCADA Web Server" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8232" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2024-8232 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SpiderControl SCADA Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an HMI program; The following versions of SpiderControl; are affected: SpiderControl SCADA Web Server: Versions v2.09 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-254-02" ;
    icsa:vendor "iniNet Solutions GmbH" ;
    icsa:year 2024 .

icsa-res:ICSA-24-254-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-254-03" ;
    dcterms:issued "2024-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation SequenceManager" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-4609" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2024-4609 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SequenceManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SequenceManager: Versions prior to 2.0.; a logix controller-based batch and sequencing solution; The following versions of SequenceManager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-254-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-01" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-42345" ;
    icsa:cweNumber "CWE-384" ;
    icsa:hasCVE cve-res:CVE-2024-42345 ;
    icsa:hasCWE cwe-res:CWE-384 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following versions of SINEMA Remote Connect Server; are affected: SINEMA Remote Connect Server: versions prior to V3.2 SP2.; a remote network management platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-02" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-41171" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2024-41171 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK ONE, SINUMERIK 840D, SINUMERIK 828D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an automation system; are affected: SINUMERIK 828D V4: All versions SINUMERIK 828D V5: All versions prior to V5.24 SINUMERIK 840D sl V4: All versions SINUMERIK ONE: All versions prior to V6.24.; The following versions of Siemens SINUMERIK products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-03" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens User Management Component (UMC)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-33698" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2024-33698 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC Information Server, SIMATIC PCS neo, SINEC NMS, Totally Integrated Automation Portal (TIA Portal)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens User Managements Components are affected: SIMATIC Information Server 2022: All versions SIMATIC Information Server 2024: All versions SIMATIC PCS neo V4.0: All versions SIMATIC PCS neo V4.1: All versions prior to V4.1 Update 2 SIMATIC PCS neo V5.0: All versions SINEC NMS: All versions Totally Integrated Automation Portal (TIA Portal) V16: All versions Totally Integrated Automation Portal (TIA Portal) V17: All versions prior to V17 Update 8 Totally Integrated Automation Portal (TIA Portal) V18: All versions Totally Integrated Automation Portal (TIA Portal) V19: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-04" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK Systems" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-43781" ;
    icsa:cweNumber "CWE-532" ;
    icsa:hasCVE cve-res:CVE-2024-43781 ;
    icsa:hasCWE cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SINUMERIK systems are affected: SINUMERIK 828D V4: All versions prior to V4.95 SP3 SINUMERIK 840D sl V4: All versions prior to V4.95 SP3 in connection with using Create MyConfig (CMC) V4.8 SP1 HF6 and prior SINUMERIK ONE prior to V6.23: All versions prior to V6.23 in connection with using Create MyConfig (CMC) V6.6 and prior SINUMERIK ONE prior to V6.15 SP4: All versions prior to V6.15 SP4 in connection with using Create MyConfig (CMC) V6.6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-05" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Runtime" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-49069" ;
    icsa:cweNumber "CWE-204" ;
    icsa:hasCVE cve-res:CVE-2023-49069 ;
    icsa:hasCWE cwe-res:CWE-204 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Mendix Runtime; are affected: Mendix Runtime V8: All versions only if the basic authentication mechanism is used by the application Mendix Runtime V9: All versions prior to V9.24.26 only if the basic authentication mechanism is used by the application Mendix Runtime V10: All versions prior to V10.14.0 only if the basic authentication mechanism is used by the application Mendix Runtime V10.6: All versions prior to V10.6.12 only if the basic authentication mechanism is used by the application Mendix Runtime V10.12: All versions prior to V10.12.2 only if the basic authentication mechanism is used by the application." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-06" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Automation License Manager" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-44087" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2024-44087 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation License Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Automation License Manager V5: All versions Automation License Manager V6.0: All versions Automation License Manager V6.2: All versions prior to V6.2 Upd3.; The following versions of Siemens Automation License Manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-07" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RFID Readers" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37993; CVE-2024-37990; CVE-2024-37995; CVE-2024-37991; CVE-2024-37994; CVE-2024-37992" ;
    icsa:cweNumber "CWE-703; CWE-912; CWE-200; CWE-284" ;
    icsa:hasCVE cve-res:CVE-2024-37990,
        cve-res:CVE-2024-37991,
        cve-res:CVE-2024-37992,
        cve-res:CVE-2024-37993,
        cve-res:CVE-2024-37994,
        cve-res:CVE-2024-37995 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-703,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RFID Readers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following SIMATIC RFID Readers are affected: SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0): versions prior to V4.2 SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0): versions prior to V4.2 SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0): versions prior to V4.2 SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0): versions prior to V4.2 SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0): versions prior to V4.2 SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0): versions prior to V4.2 SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0): versions prior to V4.2 SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0): versions prior to V4.2 SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0): versions prior to V4.2 SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0): versions prior to V4.2 SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0): versions prior to V4.2 SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0): versions prior to V4.2 SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0): versions prior to V4.2 SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0): versions prior to V4.2 Siemens SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0): versions prior to V4.2 SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0): versions prior to V4.2 SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0): versions prior to V4.2 SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0): versions prior to V4.2 SIMATIC RF166C (6GT2002-0EE20): versions prior to V2.2 SIMATIC RF185C (6GT2002-0JE10): versions prior to V2.2 SIMATIC RF186C (6GT2002-0JE20): versions prior to V2.2 SIMATIC RF186CI (6GT2002-0JE50): versions prior to V2.2 SIMATIC RF188C (6GT2002-0JE40): versions prior to V2.2 SIMATIC RF188CI (6GT2002-0JE60): versions prior to V2.2 SIMATIC RF360R (6GT2801-5BA30): versions prior to V2.2 SIMATIC RF1140R (6GT2831-6CB00): versions prior to V1.1 SIMATIC RF1170R (6GT2831-6BB00): versions prior to V1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-08" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-38355" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-38355 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following industrial products are affected: AI Model Deployer: versions prior to V1.1 Data Flow Monitoring Industrial Edge Device User Interface (DFM IED UI): versions prior to V0.0.6 LiveTwin Industrial Edge app (6AV2170-0BL00-0AA0): versions prior to V2.4 SIMATIC PCS neo V4.1: versions prior to V4.1 Update 2 SIMATIC PCS neo V5.0: all versions SIMATIC WinCC Runtime Professional V17: all versions SIMATIC WinCC Runtime Professional V18: all versions SIMATIC WinCC Runtime Professional V19: all versions SIMATIC WinCC Runtime Professional V20: all versions SIMATIC WinCC V7.4 with installed WebRH: All versions SIMATIC WinCC V7.5: all versions SIMATIC WinCC V8.0: all versions TIA Administrator: versions prior to V3.0 SP3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-09" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC, SIPLUS, and TIM" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing;" ;
    icsa:cveNumber "CVE-2023-28827; CVE-2023-30755; CVE-2023-30756" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2023-28827,
        cve-res:CVE-2023-30755,
        cve-res:CVE-2023-30756 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC, SIPLUS, and TIM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: SIMATIC CP 1242-7 V2 (incl. SIPLUS variants): Versions prior to V3.5.20 SIMATIC CP 1243-1 (incl. SIPLUS variants): Versions prior to V3.5.20 SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants): Versions prior to V3.5.20 SIMATIC CP 1243-1 IEC (incl. SIPLUS variants): Versions prior to V3.5.20 SIMATIC CP 1243-7 LTE: Versions prior to V3.5.20 SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0): Versions prior to V3.5.20 SIMATIC HMI Comfort Panels (incl. SIPLUS variants): All versions SIMATIC IPC DiagBase: All versions SIMATIC IPC DiagMonitor: All versions SIMATIC WinCC Runtime Advanced: All versions SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0): Versions prior to V2.4.8 TIM 1531 IRC (6GK7543-1MX00-0XE0): Versions prior to V2.4.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-10" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-2004; CVE-2024-2398; CVE-2024-32006; CVE-2024-2466; CVE-2024-42344; CVE-2024-2379; CVE-2023-46850" ;
    icsa:cweNumber "CWE-532; CWE-772; CWE-416; CWE-297; CWE-613; CWE-20; CWE-295" ;
    icsa:hasCVE cve-res:CVE-2023-46850,
        cve-res:CVE-2024-2004,
        cve-res:CVE-2024-2379,
        cve-res:CVE-2024-2398,
        cve-res:CVE-2024-2466,
        cve-res:CVE-2024-32006,
        cve-res:CVE-2024-42344 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-295,
        cwe-res:CWE-297,
        cwe-res:CWE-416,
        cwe-res:CWE-532,
        cwe-res:CWE-613,
        cwe-res:CWE-772 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Siemens are affected: SINEMA Remote Connect Client: Versions prior to V3.2 SP2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-11" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Management" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-45032" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2024-45032 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Edge Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Industrial Edge Management Pro: Versions prior to V1.9.5 Industrial Edge Management Virtual: Versions prior to V2.3.1-1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-12" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Tecnomatix Plant Simulation" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-41170" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-41170 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tecnomatix Plant Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Plant Simulation V2302: versions prior to V2302.0015 Plant Simulation V2404: versions prior to V2404.0004." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-13" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W700" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical Sector; Critical Manufacturing; Energy Sector; Nuclear Reactors; Materials; and Waste" ;
    icsa:cveNumber "CVE-2023-44373" ;
    icsa:cweNumber "CWE-74" ;
    icsa:hasCVE cve-res:CVE-2023-44373 ;
    icsa:hasCWE cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W700" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following SCALANCE W700 802.11 AX Family products are affected: SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0): All versions prior to V2.4.0 SCALANCE WAM763-1 (6GK5763-1AL00-7DA0): All versions prior to V2.4.0 SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0): All versions prior to V2.4.0 SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0): All versions prior to V2.4.0 SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0): All versions prior to V2.4.0 SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0): All versions prior to V2.4.0 SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0): All versions prior to V2.4.0 SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0): All versions prior to V2.4.0 SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0): All versions prior to V2.4.0 SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0): All versions prior to V2.4.0 SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0): All versions prior to V2.4.0 SCALANCE WUB762-1 (6GK5762-1AJ00-2AA0): All versions prior to V2.4.0 SCALANCE WUM763-1 (6GK5763-1AL00-3AA0): All versions prior to V2.4.0 SCALANCE WUM763-1 (6GK5763-1AL00-3DA0): All versions prior to V2.4.0 SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0): All versions prior to V2.4.0 SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0): All versions prior to V2.4.0 SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0): All versions prior to V2.4.0 SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0): All versions prior to V2.4.0 SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0): All versions prior to V2.4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-14" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC SCADA and PCS 7 Systems" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-35783" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2024-35783 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC SCADA and PCS 7 Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC BATCH V9.1: All versions SIMATIC Information Server 2020: All versions SIMATIC Information Server 2022: All versions SIMATIC PCS 7 V9.1: All versions SIMATIC Process Historian 2020: All versions SIMATIC Process Historian 2022: All versions SIMATIC WinCC Runtime Professional V18: All versions SIMATIC WinCC Runtime Professional V19: All versions SIMATIC WinCC V7.4: All versions SIMATIC WinCC V7.5: All versions prior to V7.5 SP2 Update 18 SIMATIC WinCC V8.0: All versions prior to V8.0 Update 5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-15" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Products" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6387" ;
    icsa:cweNumber "CWE-364" ;
    icsa:hasCVE cve-res:CVE-2024-6387 ;
    icsa:hasCWE cwe-res:CWE-364 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Edge Management OS (IEM-OS), SINEMA Remote Connect Server, SINUMERIK ONE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Industrial Edge Management OS (IEM-OS): All versions SINEMA Remote Connect Server: All versions prior to V3.2 SP2 SINUMERIK ONE: All versions prior to V6.24." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-16" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Third Party Component in SICAM and SITIPE Products" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-34057" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2024-34057 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IEC 61850 Client libraries from Triangle MicroWorks affecting SICAM and SITIPE products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SICAM A8000 Device Firmware ETI5 Ethernet Int. 1x100TX IEC61850: All versions prior to V05.30 SICAM EGS Device Firmware ETI5: All versions prior to V05.30 SICAM 8 Software Solution: ETI5 All versions prior to V05.30 SICAM SCC: All versions prior to V10.0 SITIPE AT: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-17" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect DirectLogic H2-DM1E" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams; Food and Agriculture" ;
    icsa:cveNumber "CVE-2024-43099; CVE-2024-45368" ;
    icsa:cweNumber "CWE-294; CWE-384" ;
    icsa:hasCVE cve-res:CVE-2024-43099,
        cve-res:CVE-2024-45368 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-384 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DirectLogic H2-DM1E" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a programmable logic controller; are affected: DirectLogic H2-DM1E: Versions 2.8.0 and prior.; The following versions of DirectLogic H2-DM1E" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-17" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-18" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6077" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-6077 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380, CompactLogix 5480, 1756-EN4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following controllers are affected: CompactLogix 5380: v.32 .011 CompactLogix 5380 Process: v.33.011 Compact GuardLogix 5380 SIL 2: v.32.013 Compact GuardLogix 5380 SIL 3: v.32.011 CompactLogix 5480: v.32.011 ControlLogix 5580: v.32.011 ControlLogix 5580 Process: v.33.011 GuardLogix 5580: v.32.011 1756-EN4: v2.001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-18" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-19 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-19" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation OptixPanel" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8533" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2024-8533 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OptixPanel" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following operator panels are affected: 2800C OptixPanel Compact: version 4.0.0.325 2800S OptixPanel Standard: version 4.0.0.350 Embedded Edge Compute Module: version 4.0.0.347." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-19" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-20 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-20" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation AADvance Trusted SIS Workstation" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-40481; CVE-2023-31102" ;
    icsa:cweNumber "CWE-20; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-31102,
        cve-res:CVE-2023-40481 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AADvance Trusted SIS Workstation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: AADvance Trusted SIS Workstation: 2.00.01 and prior.; a manufacturing controller management suite; The following versions of AADvance Trusted SIS Workstation" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-20" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-21 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-21" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 5015-U8IHFT" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-45825" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-45825 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "5015-U8IHFT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an I/O module; The following versions of 5015-U8IHFT; are affected: 5015-U8IHFT: Versions 1.012 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-21" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-22 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-22" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Batch View" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-45823" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-45823 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Batch View" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: FactoryTalk Batch View: 2.01.00 and prior.; a manufacturing process batch solution; The following versions of Rockwell Automation FactoryTalk Batch View" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-22" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-23 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-23" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View Site" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-45824" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-45824 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "V14.0.; are affected: FactoryTalk View Site Edition: Versions V12.0; The following versions of Rockwell Automation FactoryTalk View Site; V13.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-23" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-24 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-24" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Pavilion8" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7960; CVE-2024-7961" ;
    icsa:cweNumber "CWE-269; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2024-7960,
        cve-res:CVE-2024-7961 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pavilion8" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a model predictive control software; are affected: Pavilion8: All versions prior to V5.20.; The following versions of Rockwell Automation Pavilion8" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-24" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-256-25 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-256-25" ;
    dcterms:issued "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-45826" ;
    icsa:cweNumber "CWE-610" ;
    icsa:hasCVE cve-res:CVE-2024-45826 ;
    icsa:hasCWE cwe-res:CWE-610 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation ThinManager; are affected: ThinManager: Versions V13.1.0 to 13.1.2 ThinManager: Versions V13.2.0 to 13.2.1.; a visualization resource manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-256-25" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-261-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-261-01" ;
    dcterms:issued "2024-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-200 SMART Devices" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-43647" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-43647 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-200 SMART Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SIMATIC S7-200 SMART Devices are affected: SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0): All versions SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0): All Versions SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0): All Versions SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1): All Versions SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0): All Versions SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1): All Versions SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0): All Versions SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA1): All Versions SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0): All Versions SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1): All Versions SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0): All Versions SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1): All Versions SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0): All Versions SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1): All Versions SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0): All Versions SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA1): All Versions SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0): All Versions SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1): All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-261-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-261-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-261-02" ;
    dcterms:issued "2024-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Millbeck Communications Proroute H685t-w" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2024-38380; CVE-2024-45682" ;
    icsa:cweNumber "CWE-79; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-38380,
        cve-res:CVE-2024-45682 ;
    icsa:hasCWE cwe-res:CWE-77,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proroute H685t-w" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Millbeck Communications Proroute H685t-w; a 4G router; are affected: Proroute H685t-w: Version 3.2.334." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-261-02" ;
    icsa:vendor "Millbeck Communications" ;
    icsa:year 2024 .

icsa-res:ICSA-24-261-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-261-03" ;
    dcterms:issued "2024-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa Dual-redundant Platform for Computer (PC2CKM)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2024-8110" ;
    icsa:cweNumber "CWE-252" ;
    icsa:hasCVE cve-res:CVE-2024-8110 ;
    icsa:hasCWE cwe-res:CWE-252 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Dual-redundant Platform for Computer (PC2CKM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a dual-redundant platform computer; The following versions of Yokogawa PC2CKM; are affected: Dual-redundant Platform for Computer (PC2CKM): R1.01.00 to R2.03.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-261-03" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2024 .

icsa-res:ICSA-24-263-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-263-01" ;
    dcterms:issued "2024-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLogix 5 and RSLogix 500" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7847" ;
    icsa:cweNumber "CWE-345" ;
    icsa:hasCVE cve-res:CVE-2024-7847 ;
    icsa:hasCWE cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSLogix 5 and RSLogix 500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation RSLogix 5 and RSLogix 500; are affected: RSLogix 500: All versions RSLogix Micro Developer and Starter: All versions RSLogix 5: All versions.; a programming software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-263-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-263-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-263-02" ;
    dcterms:issued "2024-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "IDEC Products (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-28957; CVE-2024-41927" ;
    icsa:cweNumber "CWE-319; CWE-340" ;
    icsa:hasCVE cve-res:CVE-2024-28957,
        cve-res:CVE-2024-41927 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-340 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IDEC Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of IDEC products are affected: FC6A Series MICROSmart All-in-One CPU module: Ver.2.60 and prior FC6B Series MICROSmart All-in-One CPU module: Ver.2.60 and prior FC6A Series MICROSmart Plus CPU module: Ver.2.40 and prior FC6B Series MICROSmart Plus CPU module: Ver.2.60 and prior FT1A Series SmartAXIS Pro/Lite: Ver.2.41 and prior (affected only by CVE-2024-41927) SX8R Bus Coupler Module: Ver.2.1.0 and prior (affected only by CVE-2024-28957)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-263-02" ;
    icsa:vendor "IDEC Corporation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-263-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-263-03" ;
    dcterms:issued "2024-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "IDEC CORPORATION WindLDR and WindO/I-NV4" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-41716" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2024-41716 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WindLDR, WindO/I-NV4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of WindLDR and WindO/I-NV4 are affected: WindLDR: Ver.9.1.0 and prior WindO/I-NV4: Ver.3.0.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-263-03" ;
    icsa:vendor "IDEC Corporation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-263-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-263-04" ;
    dcterms:issued "2024-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "MegaSys Computer Technologies Telenium Online Web Application (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Information Technology; Communications" ;
    icsa:cveNumber "CVE-2025-8769" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-8769 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Telenium Online Web Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following MegaSys Computer Technologies products are affected: Telenium Online Web Application: versions 8.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-263-04" ;
    icsa:vendor "MegaSys Computer Technologies" ;
    icsa:year 2024 .

icsa-res:ICSA-24-263-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-263-05" ;
    dcterms:issued "2024-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Kastle Systems Access Control System" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2024-45862; CVE-2024-45861" ;
    icsa:cweNumber "CWE-798; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2024-45861,
        cve-res:CVE-2024-45862 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Access Control System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Kastle Systems Access Control System are affected: Access Control System: Firmware before May 1; 2024." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-263-05" ;
    icsa:vendor "Kastle Systems" ;
    icsa:year 2024 .

icsa-res:ICSA-24-268-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-268-01" ;
    dcterms:issued "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "OPW Fuel Management Systems SiteSentinel" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-8310" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2024-8310 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiteSentinel" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following OPW Fuel Management Systems products are affected: SiteSentinel: Versions prior to 17Q2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-268-01" ;
    icsa:vendor "OPW Fuel Management Systems" ;
    icsa:year 2024 .

icsa-res:ICSA-24-268-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-268-02" ;
    dcterms:issued "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Alisonic Sibylla" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2024-8630" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2024-8630 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sibylla" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Sibylla: All Versions.; an automated tank gauge; The following versions of Sibylla" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-268-02" ;
    icsa:vendor "Alisonic" ;
    icsa:year 2024 .

icsa-res:ICSA-24-268-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-268-03" ;
    dcterms:issued "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Franklin Fueling Systems TS-550 EVO" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-8497" ;
    icsa:cweNumber "CWE-36" ;
    icsa:hasCVE cve-res:CVE-2024-8497 ;
    icsa:hasCWE cwe-res:CWE-36 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TS-550 EVO Automatic Tank Gauge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Franklin Fueling Systems products are affected: TS-550 EVO: Versions prior to 2.26.4.8967." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-268-03" ;
    icsa:vendor "Franklin Fueling System" ;
    icsa:year 2024 .

icsa-res:ICSA-24-268-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-268-04" ;
    dcterms:issued "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-43693; CVE-2024-41725; CVE-2024-43692; CVE-2024-45373; CVE-2024-45066; CVE-2024-43423" ;
    icsa:cweNumber "CWE-79; CWE-77; CWE-288; CWE-259; CWE-269" ;
    icsa:hasCVE cve-res:CVE-2024-41725,
        cve-res:CVE-2024-43423,
        cve-res:CVE-2024-43692,
        cve-res:CVE-2024-43693,
        cve-res:CVE-2024-45066,
        cve-res:CVE-2024-45373 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-269,
        cwe-res:CWE-288,
        cwe-res:CWE-77,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ProGauge MAGLINK LX CONSOLE" ;
    icsa:productDistribution "North America" ;
    icsa:productsAffected "are affected: ProGauge MAGLINK LX CONSOLE: Versions 3.4.2.2.6 and prior ProGauge MAGLINK LX4 CONSOLE: Versions 4.17.9e and prior.; tank gauge consoles; The following versions of Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-268-04" ;
    icsa:vendor "Dover Fueling Solutions (DFS)" ;
    icsa:year 2024 .

icsa-res:ICSA-24-268-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-268-05" ;
    dcterms:issued "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Moxa MXview One" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-6787; CVE-2024-6786; CVE-2024-6785" ;
    icsa:cweNumber "CWE-313; CWE-24; CWE-367" ;
    icsa:hasCVE cve-res:CVE-2024-6785,
        cve-res:CVE-2024-6786,
        cve-res:CVE-2024-6787 ;
    icsa:hasCWE cwe-res:CWE-24,
        cwe-res:CWE-313,
        cwe-res:CWE-367 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MXview One, MXview One Central Manager Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Moxa products are affected: MXview One Series: Versions 1.4.0 and prior MXview One Central Manager Series: Version 1.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-268-05" ;
    icsa:vendor "Moxa" ;
    icsa:year 2024 .

icsa-res:ICSA-24-268-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-268-06" ;
    dcterms:issued "2024-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "OMNTEC Proteus Tank Monitoring (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6981" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2024-6981 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Proteus Tank Monitoring" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Proteus Tank Monitoring is affected: OMNTEC Proteus Tank Monitoring: OEL8000III K/X ATG Generation 3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-268-06" ;
    icsa:vendor "OMNTEC Mfg., Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-270-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-270-01" ;
    dcterms:issued "2024-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech ADAM-5550" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-38308; CVE-2024-37187" ;
    icsa:cweNumber "CWE-79; CWE-261" ;
    icsa:hasCVE cve-res:CVE-2024-37187,
        cve-res:CVE-2024-38308 ;
    icsa:hasCWE cwe-res:CWE-261,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ADAM-5550" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Advantech's ADAM; are affected: Advantech ADAM 5550: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-270-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2024 .

icsa-res:ICSA-24-270-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-270-02" ;
    dcterms:issued "2024-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech ADAM-5630" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-39275; CVE-2024-34542; CVE-2024-28948; CVE-2024-39364" ;
    icsa:cweNumber "CWE-306; CWE-352; CWE-261; CWE-539" ;
    icsa:hasCVE cve-res:CVE-2024-28948,
        cve-res:CVE-2024-34542,
        cve-res:CVE-2024-39275,
        cve-res:CVE-2024-39364 ;
    icsa:hasCWE cwe-res:CWE-261,
        cwe-res:CWE-306,
        cwe-res:CWE-352,
        cwe-res:CWE-539 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ADAM-5630" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Advantech's ADAM are affected: Advantech ADAM-5630: versions prior to v2.5.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-270-02" ;
    icsa:vendor "Advantech" ;
    icsa:year 2024 .

icsa-res:ICSA-24-270-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-270-03" ;
    dcterms:issued "2024-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Atelmo Atemio AM 520 HD Full HD Satellite Receiver" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-9166" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2024-9166 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Atemio AM 520 HD Full HD Satellite Receiver" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "are affected: Atemio AM 520 HD: TitanNit 2.01 and prior.; a satellite receiver; The following versions of Atelmo Atemio AM 520 HD" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-270-03" ;
    icsa:vendor "Atelmo" ;
    icsa:year 2024 .

icsa-res:ICSA-24-270-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-270-04" ;
    dcterms:issued "2024-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "goTenna Pro X and Pro X2 (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Government Facilities" ;
    icsa:cveNumber "CVE-2024-47122; CVE-2024-47127; CVE-2024-47128; CVE-2024-47129; CVE-2024-47124; CVE-2024-47121; CVE-2024-47123; CVE-2024-47130; CVE-2024-47125; CVE-2024-47126" ;
    icsa:cweNumber "CWE-922; CWE-201; CWE-306; CWE-204; CWE-521; CWE-923; CWE-1390; CWE-319; CWE-353; CWE-338" ;
    icsa:hasCVE cve-res:CVE-2024-47121,
        cve-res:CVE-2024-47122,
        cve-res:CVE-2024-47123,
        cve-res:CVE-2024-47124,
        cve-res:CVE-2024-47125,
        cve-res:CVE-2024-47126,
        cve-res:CVE-2024-47127,
        cve-res:CVE-2024-47128,
        cve-res:CVE-2024-47129,
        cve-res:CVE-2024-47130 ;
    icsa:hasCWE cwe-res:CWE-1390,
        cwe-res:CWE-201,
        cwe-res:CWE-204,
        cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-338,
        cwe-res:CWE-353,
        cwe-res:CWE-521,
        cwe-res:CWE-922,
        cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro series" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "are affected: goTenna Pro App: versions 1.6.1 and prior.; mesh networking device; The following versions of goTenna Pro series" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-270-04" ;
    icsa:vendor "goTenna" ;
    icsa:year 2024 .

icsa-res:ICSA-24-270-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-270-05" ;
    dcterms:issued "2024-09-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "goTenna Pro ATAK Plugin (Update A)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Government Facilities" ;
    icsa:cveNumber "CVE-2024-45723; CVE-2024-45374; CVE-2024-45838; CVE-2024-43108; CVE-2024-41722; CVE-2024-43694; CVE-2024-41715; CVE-2024-43814; CVE-2024-41931" ;
    icsa:cweNumber "CWE-922; CWE-201; CWE-204; CWE-521; CWE-1390; CWE-319; CWE-353; CWE-338" ;
    icsa:hasCVE cve-res:CVE-2024-41715,
        cve-res:CVE-2024-41722,
        cve-res:CVE-2024-41931,
        cve-res:CVE-2024-43108,
        cve-res:CVE-2024-43694,
        cve-res:CVE-2024-43814,
        cve-res:CVE-2024-45374,
        cve-res:CVE-2024-45723,
        cve-res:CVE-2024-45838 ;
    icsa:hasCWE cwe-res:CWE-1390,
        cwe-res:CWE-201,
        cwe-res:CWE-204,
        cwe-res:CWE-319,
        cwe-res:CWE-338,
        cwe-res:CWE-353,
        cwe-res:CWE-521,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro ATAK Plugin" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "a mesh networking device; The following versions of goTenna Pro ATAK Plugin; are affected: goTenna Pro ATAK Plugin: Versions 1.9.12 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-270-05" ;
    icsa:vendor "goTenna" ;
    icsa:year 2024 .

icsa-res:ICSA-24-275-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-275-01" ;
    dcterms:issued "2024-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Optigo Networks ONS-S8 Spectra Aggregation Switch" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-41925; CVE-2024-45367" ;
    icsa:cweNumber "CWE-1390; CWE-98" ;
    icsa:hasCVE cve-res:CVE-2024-41925,
        cve-res:CVE-2024-45367 ;
    icsa:hasCWE cwe-res:CWE-1390,
        cwe-res:CWE-98 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ONS-S8 - Spectra Aggregation Switch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: ONS-S8 - Spectra Aggregation Switch: 1.3.7 and prior.; an OT network management device; The following versions of ONS-S8 - Spectra Aggregation Switch" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-275-01" ;
    icsa:vendor "Optigo Networks" ;
    icsa:year 2024 .

icsa-res:ICSA-24-275-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-275-02" ;
    dcterms:issued "2024-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F FX5-OPC" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-0727" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-0727 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F FX5-OPC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mitsubishi Electric products are affected: MELSEC iQ-F FX5-OPC: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-275-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-277-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-277-01" ;
    dcterms:issued "2024-10-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "TEM Opera Plus FM Family Transmitter" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2024-41987; CVE-2024-41988" ;
    icsa:cweNumber "CWE-306; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2024-41987,
        cve-res:CVE-2024-41988 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Opera Plus FM Family Transmitter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a FM Transmitter; The following versions of TEM Opera Plus FM Family Transmitter; are affected: Opera Plus FM Family Transmitter: Version 35.45." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-277-01" ;
    icsa:vendor "TEM" ;
    icsa:year 2024 .

icsa-res:ICSA-24-277-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-277-02" ;
    dcterms:issued "2024-10-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Subnet Solutions Inc. PowerSYSTEM Center" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-28168; CVE-2021-3749; CVE-2023-45857" ;
    icsa:cweNumber "CWE-1333; CWE-352; CWE-918" ;
    icsa:hasCVE cve-res:CVE-2020-28168,
        cve-res:CVE-2021-3749,
        cve-res:CVE-2023-45857 ;
    icsa:hasCWE cwe-res:CWE-1333,
        cwe-res:CWE-352,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerSYSTEM Center" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PowerSYSTEM Center are affected: PowerSYSTEM Center: PSC 2020 v5.21.x and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-277-02" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-277-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-277-03" ;
    dcterms:issued "2024-10-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAEnergie" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-42417; CVE-2024-43699" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2024-42417,
        cve-res:CVE-2024-43699 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAEnergie" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: DIAEnergie: Versions v1.10.01.008 and prior.; The following versions of Delta Electronics DIAEnergie; an industrial energy management system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-277-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-01" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 and S7-1200 CPUs" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-46886" ;
    icsa:cweNumber "CWE-601" ;
    icsa:hasCVE cve-res:CVE-2024-46886 ;
    icsa:hasCWE cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 and S7-1200 CPUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following SIMATIC S7-1500 and S7-1200 CPUs are affected: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): versions prior to V3.1.4 SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): versions prior to V3.1.4 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): all versions SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0): all versions SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0): all versions SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0): all versions SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0): all versions SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0): all versions SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0): all versions SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0): all versions SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0): all versions SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0): all versions SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0): all versions SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0): all versions SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0): all versions SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0): all versions SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0): all versions SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0): all versions SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0): all versions SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0): all versions SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0): all versions SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0): all versions SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0): all versions SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0): all versions SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0): all versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0): all versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0): all versions SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0): all versions SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0): all versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0): all versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0): all versions SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0): all versions SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0): all versions SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0): all versions SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CM03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0): all versions SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK01-0AB0): all versions SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DM03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0): all versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0): all versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0): all versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0): all versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1513pro F-2 PN (6ES7513-2GM03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1513pro-2 PN (6ES7513-2PM03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1514SP-2 PN (6ES7514-2DN03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0): all versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0): all versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0): all versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0): all versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0): all versions SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0): all versions SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0): all versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0): all versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0): all versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0): all versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516pro F-2 PN (6ES7516-2GP03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516pro-2 PN (6ES7516-2PP03-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP01-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): all versions SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0): all versions SIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): all versions SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0): all versions SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0): versions prior to V3.1.4 SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK (6ES7518-4AP00-3AB0): all versions SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK (6ES7518-4FP00-3AB0): all versions SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN (6ES7513-2GL00-0AB0): all versions SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN (6ES7513-2PL00-0AB0): all versions SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN (6ES7516-2GN00-0AB0): all versions SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN (6ES7516-2PN00-0AB0): all versions SIMATIC S7-1500 Software Controller CPU 1507S F V2: all versions SIMATIC S7-1500 Software Controller CPU 1507S F V3: all versions SIMATIC S7-1500 Software Controller CPU 1507S V2: all versions SIMATIC S7-1500 Software Controller CPU 1507S V3: all versions SIMATIC S7-1500 Software Controller CPU 1508S F V2: all versions SIMATIC S7-1500 Software Controller CPU 1508S F V3: all versions SIMATIC S7-1500 Software Controller CPU 1508S T V3: all versions SIMATIC S7-1500 Software Controller CPU 1508S TF V3: all versions SIMATIC S7-1500 Software Controller CPU 1508S V2: all versions SIMATIC S7-1500 Software Controller CPU 1508S V3: all versions SIMATIC S7-1500 Software Controller Linux V2: all versions SIMATIC S7-1500 Software Controller Linux V3: all versions SIMATIC S7-PLCSIM Advanced: all versions SIPLUS ET 200SP CPU 1510SP F-1 PN (6AG1510-1SJ01-2AB0): all versions SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL (6AG2510-1SJ01-1AB0): all versions SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-2AB0): all versions SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-7AB0): all versions SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-1AB0): all versions SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-4AB0): all versions SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-2AB0): all versions SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-7AB0): all versions SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-1AB0): all versions SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-4AB0): all versions SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-2AB0): all versions SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-7AB0): all versions SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-1AB0): all versions SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-4AB0): all versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-2AB0): all versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-7AB0): all versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-2AB0): all versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-7AB0): all versions SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK01-1AB0): all versions SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK02-1AB0): all versions SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK01-4AB0): all versions SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK02-4AB0): all versions SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK01-2AB0): all versions SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK02-2AB0): all versions SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-2AB0): all versions SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-7AB0): all versions SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-2AB0): all versions SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-7AB0): all versions SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL01-2AB0): all versions SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL02-2AB0): all versions SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM01-2AB0): all versions SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM02-2AB0): all versions SIPLUS S7-1500 CPU 1515F-2 PN RAIL (6AG2515-2FM02-4AB0): all versions SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL (6AG2515-2FM01-2AB0): all versions SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL (6AG2515-2RM00-4AB0): all versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-2AB0): all versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-7AB0): all versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-2AB0): all versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-7AB0): all versions SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL (6AG2516-3AN02-4AB0): all versions SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL (6AG2516-3AN01-4AB0): all versions SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN01-2AB0): all versions SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN02-2AB0): all versions SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-2AB0): all versions SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-4AB0): all versions SIPLUS S7-1500 CPU 1518-4 PN/DP (6AG1518-4AP00-4AB0): versions prior to V3.1.4 SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): all versions SIPLUS S7-1500 CPU 1518F-4 PN/DP (6AG1518-4FP00-4AB0): versions prior to V3.1.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-02" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Nastran" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-47046; CVE-2024-41981" ;
    icsa:cweNumber "CWE-119; CWE-122" ;
    icsa:hasCVE cve-res:CVE-2024-41981,
        cve-res:CVE-2024-47046 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Nastran" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following versions of Simcenter Nastran finite element method (FEM) solver are affected: Simcenter Nastran 2306: All versions Simcenter Nastran 2312: All versions Simcenter Nastran 2406: Versions prior to V2406.5000." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-03" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and JT2Go" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37997; CVE-2024-37996" ;
    icsa:cweNumber "CWE-121; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-37996,
        cve-res:CVE-2024-37997 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization and JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Teamcenter Visualization and JT2Go are affected: JT2Go: All versions prior to V2406.0003 Teamcenter Visualization V14.2: All versions prior to V14.2.0.13 Teamcenter Visualization V14.3: All versions prior to V14.3.0.11 Teamcenter Visualization V2312: All versions prior to V2312.0008 Teamcenter Visualization V2406: All versions prior to V2406.0003." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-04" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SENTRON PAC3200 Devices" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-41798" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-41798 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SENTRON 7KM PAC3200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens SENTRON PAC3200 devices are affected: SENTRON 7KM PAC3200: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-05" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Questa and ModelSim" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-47195; CVE-2024-47196; CVE-2024-47194" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2024-47194,
        cve-res:CVE-2024-47195,
        cve-res:CVE-2024-47196 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Questa and ModelSim" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Questa and ModelSim are affected: ModelSim: All versions prior to V2024.3 Questa: All versions prior to V2024.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-06" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC Security Monitor" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-47562; CVE-2024-47565; CVE-2024-47563; CVE-2024-47553" ;
    icsa:cweNumber "CWE-22; CWE-77; CWE-88; CWE-183" ;
    icsa:hasCVE cve-res:CVE-2024-47553,
        cve-res:CVE-2024-47562,
        cve-res:CVE-2024-47563,
        cve-res:CVE-2024-47565 ;
    icsa:hasCWE cwe-res:CWE-183,
        cwe-res:CWE-22,
        cwe-res:CWE-77,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC Security Monitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a modular cyber security software; The following versions of Siemens SINEC Security Monitor; are affected: SINEC Security Monitor: All versions prior to V4.9.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-07" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens JT2Go" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-41902" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-41902 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "JT2Go" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: JT2Go: All versions prior to V2406.0003.; The following versions of Siemens JT2Go; a 3D viewing tool" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-08" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens HiMed Cockpit" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-52952" ;
    icsa:cweNumber "CWE-424" ;
    icsa:hasCVE cve-res:CVE-2023-52952 ;
    icsa:hasCWE cwe-res:CWE-424 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HiMed Cockpit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: HiMed Cockpit 12 pro (J31032-K2017-H259): Versions V11.5.1 up to but not including V11.6.2 HiMed Cockpit 14 pro+ (J31032-K2017-H435): Versions V11.5.1 up to but not including V11.6.2 HiMed Cockpit 18 pro (J31032-K2017-H260): Versions V11.5.1 up to but not including V11.6.2 HiMed Cockpit 18 pro+ (J31032-K2017-H436): Versions V11.5.1 up to but not including V11.6.2.; a multimedia terminal; The following versions of Siemens HiMed Cockpit" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-09" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens PSS SINCAL" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-45182; CVE-2024-45181" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2024-45181,
        cve-res:CVE-2024-45182 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PSS SINCAL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected if WibuKey dongles are used: PSS SINCAL: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-10" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 CPUs" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-46887" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2024-46887 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 CPUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): Versions prior to V3.1.4 SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): Versions prior to V3.1.4 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0): All versions SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0): All versions SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0): All versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0): All versions SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0): All versions SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0): All versions SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0): All versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0): All versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0): All versions SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0): All versions SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0): All versions SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0): All versions SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CM03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0): All versions SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DK01-0AB0): All versions SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DM03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0): All versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0): All versions SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0): All versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0): All versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1513pro F-2 PN (6ES7513-2GM03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1513pro-2 PN (6ES7513-2PM03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1514SP-2 PN (6ES7514-2DN03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0): All versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0): All versions SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0): All versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0): All versions SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0): All versions SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0): All versions SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0): All versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0): All versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0): All versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0): All versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516pro F-2 PN (6ES7516-2GP03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516pro-2 PN (6ES7516-2PP03-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP01-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): All versions SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0): All versions SIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): All versions SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0): All versions SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0): Versions prior to V3.1.4 SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK (6ES7518-4AP00-3AB0): All versions SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK (6ES7518-4FP00-3AB0): All versions SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN (6ES7513-2GL00-0AB0): All versions SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN (6ES7513-2PL00-0AB0): All versions SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN (6ES7516-2GN00-0AB0): All versions SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN (6ES7516-2PN00-0AB0): All versions SIMATIC S7-1500 Software Controller V2: All versions SIMATIC S7-1500 Software Controller V3: All versions SIMATIC S7-PLCSIM Advanced: All versions SIPLUS ET 200SP CPU 1510SP F-1 PN (6AG1510-1SJ01-2AB0): All versions SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL (6AG2510-1SJ01-1AB0): All versions SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-2AB0): All versions SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-7AB0): All versions SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-1AB0): All versions SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-4AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-2AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-7AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-1AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-4AB0): All versions SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-2AB0): All versions SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-7AB0): All versions SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-1AB0): All versions SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-4AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-2AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-7AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-2AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-7AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK01-1AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK02-1AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK01-4AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK02-4AB0): All versions SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK01-2AB0): All versions SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK02-2AB0): All versions SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-2AB0): All versions SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-7AB0): All versions SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-2AB0): All versions SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-7AB0): All versions SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL01-2AB0): All versions SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL02-2AB0): All versions SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM01-2AB0): All versions SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM02-2AB0): All versions SIPLUS S7-1500 CPU 1515F-2 PN RAIL (6AG2515-2FM02-4AB0): All versions SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL (6AG2515-2FM01-2AB0): All versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-2AB0): All versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-7AB0): All versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-2AB0): All versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-7AB0): All versions SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL (6AG2516-3AN02-4AB0): All versions SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL (6AG2516-3AN01-4AB0): All versions SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN01-2AB0): All versions SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN02-2AB0): All versions SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-2AB0): All versions SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-4AB0): All versions SIPLUS S7-1500 CPU 1518-4 PN/DP (6AG1518-4AP00-4AB0): Versions prior to V3.1.4 SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): All versions SIPLUS S7-1500 CPU 1518F-4 PN/DP (6AG1518-4FP00-4AB0): Versions prior to V3.1.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-11" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-4465" ;
    icsa:cweNumber "CWE-863" ;
    icsa:hasCVE cve-res:CVE-2024-4465 ;
    icsa:hasCWE cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products with Nozomi Guardian / CMC before 24.3.1 are affected: RUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0): All versions RUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-12" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Sentron Powercenter 1000" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-6874" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2023-6874 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sentron Powercenter 1000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SENTRON Powercenter 1000 (7KN1110-0MC00): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-13" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Tecnomatix Plant Simulation" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-45475; CVE-2024-45471; CVE-2024-45470; CVE-2024-45463; CVE-2024-45469; CVE-2024-45473; CVE-2024-45466; CVE-2024-45472; CVE-2024-45476; CVE-2024-45467; CVE-2024-45464; CVE-2024-45465; CVE-2024-45468; CVE-2024-45474" ;
    icsa:cweNumber "CWE-119; CWE-125; CWE-787; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-45463,
        cve-res:CVE-2024-45464,
        cve-res:CVE-2024-45465,
        cve-res:CVE-2024-45466,
        cve-res:CVE-2024-45467,
        cve-res:CVE-2024-45468,
        cve-res:CVE-2024-45469,
        cve-res:CVE-2024-45470,
        cve-res:CVE-2024-45471,
        cve-res:CVE-2024-45472,
        cve-res:CVE-2024-45473,
        cve-res:CVE-2024-45474,
        cve-res:CVE-2024-45475,
        cve-res:CVE-2024-45476 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-476,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tecnomatix Plant Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following versions of Tecnomatix Plant Simulation are affected: Tecnomatix Plant Simulation V2302: Versions prior to V2302.0016 Tecnomatix Plant Simulation V2404: Versions prior to V2404.0005." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-14" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Zelio Soft 2" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8422; CVE-2024-8518" ;
    icsa:cweNumber "CWE-416; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-8422,
        cve-res:CVE-2024-8518 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Zelio Soft 2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Schneider Electric Zelio Soft 2 are affected: Zelio Soft 2: Versions prior to 5.4.2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-14" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-15" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation DataMosaix Private Cloud" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7952; CVE-2024-7956; CVE-2024-7953" ;
    icsa:cweNumber "CWE-862; CWE-200; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2024-7952,
        cve-res:CVE-2024-7953,
        cve-res:CVE-2024-7956 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-862,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataMosaix Private Cloud" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of DataMosaix Private Cloud are affected: DataMosaix Private Cloud: Versions 7.07 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-15" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-16" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation DataMosaix Private Cloud" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-19244; CVE-2019-17543; CVE-2019-9923; CVE-2019-18276; CVE-2019-14855; CVE-2019-9893" ;
    icsa:cweNumber "CWE-1357; CWE-787; CWE-326; CWE-273; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2019-14855,
        cve-res:CVE-2019-17543,
        cve-res:CVE-2019-18276,
        cve-res:CVE-2019-19244,
        cve-res:CVE-2019-9893,
        cve-res:CVE-2019-9923 ;
    icsa:hasCWE cwe-res:CWE-1357,
        cwe-res:CWE-273,
        cwe-res:CWE-326,
        cwe-res:CWE-476,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataMosaix Private Cloud" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of DataMosaix Private Cloud are affected: DataMosaix Private Cloud: Versions 7.07 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-16" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-17" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Verve Asset Manager" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Water and Wastewater Systems; Healthcare and Public Health; Energy" ;
    icsa:cveNumber "CVE-2024-9412" ;
    icsa:cweNumber "CWE-842" ;
    icsa:hasCVE cve-res:CVE-2024-9412 ;
    icsa:hasCWE cwe-res:CWE-842 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Verve Asset Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of Verve Asset Manager are affected: Verve Asset Manager: Versions 1.38 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-17" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-18" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix Controllers" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8626" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-8626 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Compact GuardLogix, CompactLogix, ControlLogix, GuardLogix, 1756-EN4TR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation Logix Controllers; are affected: CompactLogix 5380: All versions later than v33.011 up to v33.015 Compact GuardLogix 5380: All versions later than v33.011 up to v33.015 CompactLogix 5480: All versions later than v33.011 up to v33.015 ControlLogix 5580: All versions later than v33.011 up to v33.015 GuardLogix 5580: All versions later than v33.011 up to v33.015 1756-EN4TR: Version v3.002." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-18" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-19 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-19" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PowerFlex 6000T" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-9124" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2024-9124 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerFlex 6000T" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation PowerFlex 6000T are affected: PowerFlex 6000T: Versions 8.001; 9.001.; 8.002" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-19" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-20 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-20" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6207" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-6207 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "V36.011 Compact GuardLogix 5380 SIL 2: Versions prior to V33.017; V36.011 GuardLogix 5580: Versions prior to V33.017; V36.011.; V35.013; V34.014; V36.011 CompactLogix 5380: Versions prior to V33.017; V36.011 CompactLogix 5480: Versions prior to V33.017; V36.011 ControlLogix 5580 Process: Versions prior to V33.017; The following Rockwell Automation products are affected: ControlLogix 5580: Versions prior to V33.017; V36.011 Compact GuardLogix 5380 SIL 3: Versions prior to V33.017; V36.011 FactoryTalk Logix Echo: Versions prior to V33.017" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-20" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-284-21 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-284-21" ;
    dcterms:issued "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-G2" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-47966; CVE-2024-47965; CVE-2024-47964; CVE-2024-47963; CVE-2024-47962" ;
    icsa:cweNumber "CWE-122; CWE-787; CWE-121; CWE-457; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-47962,
        cve-res:CVE-2024-47963,
        cve-res:CVE-2024-47964,
        cve-res:CVE-2024-47965,
        cve-res:CVE-2024-47966 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-457,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft-G2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: CNCSoft-G2: Version 2.1.0.10.; The following versions of Delta Electronics CNCSoft-G2; a Human-Machine Interface (HMI) software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-284-21" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-289-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-289-01" ;
    dcterms:issued "2024-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Video Camera" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-3506" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2024-3506 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance Video Camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Siveillance Video Camera are affected: Siveillance Video Camera: All versions prior to V13.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-289-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-289-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-289-02" ;
    dcterms:issued "2024-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Data Center Expert" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-8531; CVE-2024-8530" ;
    icsa:cweNumber "CWE-306; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2024-8530,
        cve-res:CVE-2024-8531 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Data Center Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Data Center Expert: Versions 8.1.1.3 and prior.; Schneider Electric reports that the following versions of Data Center Expert; a monitoring software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-289-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-291-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-291-01" ;
    dcterms:issued "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Elvaco M-Bus Metering Gateway CMe3100 (Update A)" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-49399; CVE-2024-49397; CVE-2024-49398; CVE-2024-49396" ;
    icsa:cweNumber "CWE-434; CWE-79; CWE-306; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2024-49396,
        cve-res:CVE-2024-49397,
        cve-res:CVE-2024-49398,
        cve-res:CVE-2024-49399 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-434,
        cwe-res:CWE-522,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "M-Bus Metering Gateway CMe3100" ;
    icsa:productDistribution "Multiple" ;
    icsa:productsAffected "a metering gateway are affected: CMe3100: Version 1.12. 1.; The following versions of Elvaco CMe3100" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-291-01" ;
    icsa:vendor "Elvaco" ;
    icsa:year 2024 .

icsa-res:ICSA-24-291-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-291-02" ;
    dcterms:issued "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "LCDS LAquis SCADA" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-9414" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-9414 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LAquis SCADA" ;
    icsa:productDistribution "South America" ;
    icsa:productsAffected "an HMI program; The following versions of LAquis SCADA; are affected: LAquis SCADA: Version 4.7.1.511." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-291-02" ;
    icsa:vendor "LCDS - Leao Consultoria e Desenvolvimento de Sistemas Ltda ME" ;
    icsa:year 2024 .

icsa-res:ICSA-24-291-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-291-03" ;
    dcterms:issued "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric CNC Series (Update D)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7316" ;
    icsa:cweNumber "CWE-1284" ;
    icsa:hasCVE cve-res:CVE-2024-7316 ;
    icsa:hasCWE cwe-res:CWE-1284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric CNC Series (Update D)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric CNC M800V/M80V Series M800VW (BND-2051W000-**) <=B1 | Mitsubishi Electric CNC M800V/M80V Series M800VS (BND-2052W000-**) <=B1 | Mitsubishi Electric CNC M800V/M80V Series M80V (BND-2053W000-**) <=B1 | Mitsubishi Electric CNC M800V/M80V Series M80VW (BND-2054W000-**) <=B1 | Mitsubishi Electric CNC M800/M80/E80 Series M800W (BND-2005W000-**) <=FH | Mitsubishi Electric CNC M800/M80/E80 Series M800S (BND-2006W000-**) <=FH | Mitsubishi Electric CNC M800/M80/E80 Series M80 (BND-2007W000-**) <=FH | Mitsubishi Electric CNC M800/M80/E80 Series M80W (BND-2008W000-**) <=FH | Mitsubishi Electric CNC M800/M80/E80 Series E80 (BND-2009W000-**) <=FH | Mitsubishi Electric CNC C80 Series C80 (BND-2036W000-**) <=BJ | Mitsubishi Electric CNC M700V/M70V/E70 Series M750VW (BND-1015W002-**) <=LG | Mitsubishi Electric CNC M700V/M70V/E70 Series M730VW (BND-1015W000-**) <=LG | Mitsubishi Electric CNC M700V/M70V/E70 Series M720VW (BND-1015W000-**) <=LG | Mitsubishi Electric CNC M700V/M70V/E70 Series M750VS (BND-1012W002-**) <=LG | Mitsubishi Electric CNC M700V/M70V/E70 Series M730VS (BND-1012W000-**) <=LG | Mitsubishi Electric CNC M700V/M70V/E70 Series M720VS (BND-1012W000-**) <=LG | Mitsubishi Electric CNC M700V/M70V/E70 Series M70V (BND-1018W000-**) <=LG | Mitsubishi Electric CNC M700V/M70V/E70 Series E70 (BND-1022W000-**) <=LG" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-291-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-291-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-291-04" ;
    dcterms:issued "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "HMS Networks EWON FLEXY 202" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2024-7755" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2024-7755 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EWON FLEXY 202" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an industrial modular gateway; The following versions of EWON FLEXY 202; are affected: EWON FLEXY 202: Firmware Version 14.2s0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-291-04" ;
    icsa:vendor "HMS Networks" ;
    icsa:year 2024 .

icsa-res:ICSA-24-291-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-291-05" ;
    dcterms:issued "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Kieback&Peter DDC4000 Series" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Communications; Financial Services; Food and Agriculture; Government Facilities; Healthcare and Public Health; Information Technology" ;
    icsa:cveNumber "CVE-2024-41717; CVE-2024-43812; CVE-2024-43698" ;
    icsa:cweNumber "CWE-1391; CWE-22; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2024-41717,
        cve-res:CVE-2024-43698,
        cve-res:CVE-2024-43812 ;
    icsa:hasCWE cwe-res:CWE-1391,
        cwe-res:CWE-22,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DDC4000 Series" ;
    icsa:productDistribution "Europe, the Middle East and Asia." ;
    icsa:productsAffected "The following Kieback&Peter DDC4000 series products are affected: DDC4002 : Versions 1.12.14 and prior DDC4100 : Versions 1.7.4 and prior DDC4200 : Versions 1.12.14 and prior DDC4200-L : Versions 1.12.14 and prior DDC4400 : Versions 1.12.14 and prior DDC4002e : Versions 1.17.6 and prior DDC4200e : Versions 1.17.6 and prior DDC4400e : Versions 1.17.6 and prior DDC4020e : Versions 1.17.6 and prior DDC4040e : Versions 1.17.6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-291-05" ;
    icsa:vendor "Kieback&Peter" ;
    icsa:year 2024 .

icsa-res:ICSA-24-296-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-296-01" ;
    dcterms:issued "2024-10-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States, Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-7587" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2024-7587 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric GENESIS32: <=9.70.300.23; Mitsubishi Electric ICONICS Suite: <=10.97.3; Mitsubishi Electric MobileHMI: <=10.97.3; Mitsubishi Electric GENESIS64: <=10.97.3; Mitsubishi Electric MC Works64: vers:all/*; Mitsubishi Electric Iconics Digital Solutions GENESIS32: <=9.70.300.23; Mitsubishi Electric Iconics Digital Solutions Hyper Historian: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3; Mitsubishi Electric Hyper Historian: <=10.97.3; Mitsubishi Electric AnalytiX: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions AnalytiX: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions MobileHMI: <=10.97.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-296-01" ;
    icsa:vendor "Mitsubishi Electric Iconics Digital Solutions" ;
    icsa:year 2024 .

icsa-res:ICSA-24-298-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-298-01" ;
    dcterms:issued "2024-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "VIMESA VHF/FM Transmitter Blue Plus" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Spain" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2024-9692" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2024-9692 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VHF/FM Transmitter Blue Plus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is affected: VHF/FM Transmitter Blue Plus: Version v9.7.1.; The following version of VIMESA VHF/FM Transmitter Blue Plus; a VHF/FM Transmitter" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-298-01" ;
    icsa:vendor "VIMESA" ;
    icsa:year 2024 .

icsa-res:ICSA-24-298-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-298-02" ;
    dcterms:issued "2024-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "iniNet Solutions SpiderControl SCADA PC HMI Editor" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-10313" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2024-10313 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SpiderControl SCADA PC HMI Editor" ;
    icsa:productDistribution "Europe" ;
    icsa:productsAffected "The following versions of iniNet Solutions SpiderControl SCADA PC HMI Editor; a software management platform; are affected: SpiderControl SCADA PC HMI Editor: Version 8.10.00.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-298-02" ;
    icsa:vendor "iniNet Solutions GmbH" ;
    icsa:year 2024 .

icsa-res:ICSA-24-298-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-298-03" ;
    dcterms:issued "2024-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Deep Sea Electronics DSE855" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-5947" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2024-5947 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DSE855" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: DSE855: Version 1.0.26.; The following versions of Deep Sea Electronics DSE855; an ethernet communications device" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-298-03" ;
    icsa:vendor "Deep Sea Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-303-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-303-01" ;
    dcterms:issued "2024-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens InterMesh Subscriber Devices" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2024-47902; CVE-2024-47903; CVE-2024-47904; CVE-2024-47901" ;
    icsa:cweNumber "CWE-306; CWE-250; CWE-78; CWE-266" ;
    icsa:hasCVE cve-res:CVE-2024-47901,
        cve-res:CVE-2024-47902,
        cve-res:CVE-2024-47903,
        cve-res:CVE-2024-47904 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-266,
        cwe-res:CWE-306,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InterMesh" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a wireless alarm reporting system; are affected: InterMesh 7177 Hybrid 2.0 Subscriber: All versions prior to V8.2.12 InterMesh 7707 Fire Subscriber: All versions prior to V7.2.12.; The following versions of Siemens InterMesh Subscriber Devices" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-303-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-303-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-303-02" ;
    dcterms:issued "2024-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Solar-Log Base 15" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-46344" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-46344 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Base 15" ;
    icsa:productDistribution "Multiple" ;
    icsa:productsAffected "The following versions of Solar-Log Base 15 are affected: Base 15: Firmware 6.0.1 Build 161." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-303-02" ;
    icsa:vendor "Solar-Log" ;
    icsa:year 2024 .

icsa-res:ICSA-24-303-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-303-03" ;
    dcterms:issued "2024-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics InfraSuite Device Master" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-10456" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-10456 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InfraSuite Device Master" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: InfraSuite Device Master: Versions 1.0.12 and prior.; a real-time device monitoring software; The following versions of InfraSuite Device Master" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-303-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-305-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-305-01" ;
    dcterms:issued "2024-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-10-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk ThinManager" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-10387; CVE-2024-10386" ;
    icsa:cweNumber "CWE-306; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-10386,
        cve-res:CVE-2024-10387 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk ThinManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation FactoryTalk product versions are affected: ThinManager: Versions 11.2.0 to 11.2.9 ThinManager: Versions 12.0.0 to 12.0.7 ThinManager: Versions 12.1.0 to 12.1.8 ThinManager: Versions 13.0.0 to 13.0.5 ThinManager: Versions 13.1.0 to 13.1.3 ThinManager: Versions 13.2.0 to 13.2.2 ThinManager: Version 14.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-305-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-312-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-312-01" ;
    dcterms:issued "2024-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Beckhoff Automation TwinCAT Package Manager" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8934" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2024-8934 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TwinCAT Package Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Beckhoff Automation products are affected: TwinCAT Package Manager: Versions prior to 1.0.603.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-312-01" ;
    icsa:vendor "Beckhoff Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-312-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-312-02" ;
    dcterms:issued "2024-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAScreen" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-47131; CVE-2024-39354; CVE-2024-39605" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-39354,
        cve-res:CVE-2024-39605,
        cve-res:CVE-2024-47131 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAScreen" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "which is a component of Delta's DIAStudio Smart Machine Suite integrated engineering software package; The following versions of DIAScreen; are affected: DIAScreen: versions prior to v1.5.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-312-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-312-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-312-03" ;
    dcterms:issued "2024-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Bosch Rexroth IndraDrive" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-48989" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-48989 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IndraDrive" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Bosch Rexroth reports that the following versions of IndraDrive; servo drive system; are affected: Bosch Rexroth AG IndraDrive FWA-INDRV* - MP*: 17VRS < 20V36." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-312-03" ;
    icsa:vendor "Bosch Rexroth" ;
    icsa:year 2024 .

icsa-res:ICSA-24-317-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-317-01" ;
    dcterms:issued "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Subnet Solutions PowerSYSTEM Center" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-45490; CVE-2024-45491; CVE-2024-45492" ;
    icsa:cweNumber "CWE-190; CWE-611" ;
    icsa:hasCVE cve-res:CVE-2024-45490,
        cve-res:CVE-2024-45491,
        cve-res:CVE-2024-45492 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerSYSTEM Center" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an OT device management platform; The following versions of SUBNET PowerSYSTEM Center; are affected: PowerSYSTEM Center PSC 2020: v5.22.x and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-317-01" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-317-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-317-02" ;
    dcterms:issued "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy TRO600" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-41156; CVE-2024-41153" ;
    icsa:cweNumber "CWE-212; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-41153,
        cve-res:CVE-2024-41156 ;
    icsa:hasCWE cwe-res:CWE-212,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TRO600 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Hitachi Energy are affected: Hitachi Energy TRO600 series firmware versions: 9.0.1.0 - 9.2.0.0 (CVE-2024-41156) Hitachi Energy TRO600 series firmware versions: 9.1.0.0 - 9.2.0.0 (CVE-2024-41153)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-317-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-317-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-317-03" ;
    dcterms:issued "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View ME" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37365" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-37365 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View ME" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "when using default folder privileges: v14.0 and prior.; Rockwell Automation reports that the following versions of FactoryTalk Software are affected: FactoryTalk View ME" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-317-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-01" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM CROSSBOW" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-0232; CVE-2023-7104" ;
    icsa:cweNumber "CWE-416; CWE-122" ;
    icsa:hasCVE cve-res:CVE-2023-7104,
        cve-res:CVE-2024-0232 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM CROSSBOW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM CROSSBOW Station Access Controller (SAC): Versions prior to 5.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-02" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPORT" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-47783" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2024-47783 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPORT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Siemens SIPORT: Versions prior to V3.4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-03" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OZW672 and OZW772 Web Server" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical manufacturing" ;
    icsa:cveNumber "CVE-2024-36140" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-36140 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OZW672 and OZW772 Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: OZW672: versions prior to V5.2 OZW772: versions prior to V5.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-04" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-2004; CVE-2023-5678; CVE-2024-2398; CVE-2023-46219; CVE-2024-2466; CVE-2023-6237; CVE-2023-5363; CVE-2024-47808; CVE-2024-0727; CVE-2024-2379; CVE-2024-24795; CVE-2023-6129; CVE-2024-27316; CVE-2023-4807; CVE-2023-46218; CVE-2023-46280; CVE-2023-38709" ;
    icsa:cweNumber "CWE-732; CWE-113; CWE-770; CWE-772; CWE-787; CWE-297; CWE-20; CWE-311; CWE-400; CWE-295; CWE-125; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2023-38709,
        cve-res:CVE-2023-46218,
        cve-res:CVE-2023-46219,
        cve-res:CVE-2023-46280,
        cve-res:CVE-2023-4807,
        cve-res:CVE-2023-5363,
        cve-res:CVE-2023-5678,
        cve-res:CVE-2023-6129,
        cve-res:CVE-2023-6237,
        cve-res:CVE-2024-0727,
        cve-res:CVE-2024-2004,
        cve-res:CVE-2024-2379,
        cve-res:CVE-2024-2398,
        cve-res:CVE-2024-2466,
        cve-res:CVE-2024-24795,
        cve-res:CVE-2024-27316,
        cve-res:CVE-2024-47808 ;
    icsa:hasCWE cwe-res:CWE-113,
        cwe-res:CWE-125,
        cwe-res:CWE-20,
        cwe-res:CWE-295,
        cwe-res:CWE-297,
        cwe-res:CWE-311,
        cwe-res:CWE-400,
        cwe-res:CWE-732,
        cwe-res:CWE-754,
        cwe-res:CWE-770,
        cwe-res:CWE-772,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Siemens SINEC NMS: versions prior to V3.0 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-05" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-47942; CVE-2024-47941; CVE-2024-47940" ;
    icsa:cweNumber "CWE-427; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-47940,
        cve-res:CVE-2024-47941,
        cve-res:CVE-2024-47942 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: Solid Edge SE2024: versions prior to V224.0 Update 9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-06" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE M-800 Family" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Communications" ;
    icsa:cveNumber "CVE-2021-3506; CVE-2024-2511; CVE-2024-4603; CVE-2024-50572; CVE-2024-5594; CVE-2023-28450; CVE-2024-50558; CVE-2024-50561; CVE-2024-50557; CVE-2024-50560; CVE-2024-28882; CVE-2024-50559; CVE-2024-4741; CVE-2024-26306; CVE-2023-49441; CVE-2024-26925" ;
    icsa:cweNumber "CWE-22; CWE-834; CWE-772; CWE-416; CWE-79; CWE-203; CWE-667; CWE-284; CWE-20; CWE-190; CWE-74; CWE-311; CWE-125; CWE-117; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2021-3506,
        cve-res:CVE-2023-28450,
        cve-res:CVE-2023-49441,
        cve-res:CVE-2024-2511,
        cve-res:CVE-2024-26306,
        cve-res:CVE-2024-26925,
        cve-res:CVE-2024-28882,
        cve-res:CVE-2024-4603,
        cve-res:CVE-2024-4741,
        cve-res:CVE-2024-50557,
        cve-res:CVE-2024-50558,
        cve-res:CVE-2024-50559,
        cve-res:CVE-2024-50560,
        cve-res:CVE-2024-50561,
        cve-res:CVE-2024-50572,
        cve-res:CVE-2024-5594 ;
    icsa:hasCWE cwe-res:CWE-117,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-203,
        cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-311,
        cwe-res:CWE-400,
        cwe-res:CWE-416,
        cwe-res:CWE-667,
        cwe-res:CWE-74,
        cwe-res:CWE-772,
        cwe-res:CWE-79,
        cwe-res:CWE-834 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE M-800 Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): versions prior to V8.2 RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): versions prior to V8.2 SCALANCE M804PB (6GK5804-0AP00-2AA2): versions prior to V8.2 SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2): versions prior to V8.2 SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2): versions prior to V8.2 SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2): versions prior to V8.2 SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2): versions prior to V8.2 SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): versions prior to V8.2 SCALANCE M874-2 (6GK5874-2AA00-2AA2): versions prior to V8.2 SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2): versions prior to V8.2 SCALANCE M874-3 (6GK5874-3AA00-2AA2): versions prior to V8.2 SCALANCE M876-3 (6GK5876-3AA02-2BA2): versions prior to V8.2 SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): versions prior to V8.2 SCALANCE M876-4 (6GK5876-4AA10-2BA2): versions prior to V8.2 SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): versions prior to V8.2 SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): versions prior to V8.2 SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1): versions prior to V8.2 SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1): versions prior to V8.2 SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): versions prior to V8.2 SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1): versions prior to V8.2 SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1): versions prior to V8.2 SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1): versions prior to V8.2 SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): versions prior to V8.2 SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): versions prior to V8.2 SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2): versions prior to V8.2 SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2): versions prior to V8.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-07" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Engineering Platforms" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-32736" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-32736 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Engineering Platforms" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC S7-PLCSIM V16: all versions SIMATIC S7-PLCSIM V17: all versions SIMATIC STEP 7 Safety V16: all versions SIMATIC STEP 7 Safety V17: versions prior to V17 Update 8 SIMATIC STEP 7 Safety V18: versions prior to V18 Update 5 SIMATIC STEP 7 V16: all versions SIMATIC STEP 7 V17: versions prior to V17 Update 8 SIMATIC STEP 7 V18: versions prior to V18 Update 5 SIMATIC WinCC Unified V16: all versions SIMATIC WinCC Unified V17: versions prior to V17 Update 8 SIMATIC WinCC Unified V18: versions prior to V18 Update 5 SIMATIC WinCC V16: all versions SIMATIC WinCC V17: versions prior to V17 Update 8 SIMATIC WinCC V18: versions prior to V18 Update 5 SIMOCODE ES V16: all versions SIMOCODE ES V17: versions prior to V17 Update 8 SIMOCODE ES V18: all versions SIMOTION SCOUT TIA V5.4 SP1: all versions SIMOTION SCOUT TIA V5.4 SP3: all versions SIMOTION SCOUT TIA V5.5 SP1: all versions SINAMICS Startdrive V16: all versions SINAMICS Startdrive V17: all versions SINAMICS Startdrive V18: all versions SIRIUS Safety ES V17: versions prior to V17 Update 8 SIRIUS Safety ES V18: all versions SIRIUS Soft Starter ES V17: versions prior to V17 Update 8 SIRIUS Soft Starter ES V18: all versions TIA Portal Cloud V16: all versions TIA Portal Cloud V17: versions prior to V4.6.0.1 TIA Portal Cloud V18: versions prior to V4.6.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-08" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC INS" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-39331; CVE-2023-32005; CVE-2023-44487; CVE-2023-47038; CVE-2024-21892; CVE-2024-46890; CVE-2024-5535; CVE-2024-27980; CVE-2023-47039; CVE-2023-2975; CVE-2023-6129; CVE-2023-5679; CVE-2023-3446; CVE-2023-3341; CVE-2023-4807; CVE-2023-5680; CVE-2024-21896; CVE-2023-50868; CVE-2023-32559; CVE-2024-24806; CVE-2024-2511; CVE-2023-32003; CVE-2023-48795; CVE-2024-27982; CVE-2023-32558; CVE-2024-46894; CVE-2023-7104; CVE-2024-22017; CVE-2023-32004; CVE-2023-52389; CVE-2023-4236; CVE-2023-45143; CVE-2024-0727; CVE-2023-39332; CVE-2023-32002; CVE-2024-21890; CVE-2023-5678; CVE-2023-3817; CVE-2024-46892; CVE-2024-0232; CVE-2024-27983; CVE-2023-6237; CVE-2023-39333; CVE-2023-50387; CVE-2023-5517; CVE-2023-6516; CVE-2024-46891; CVE-2023-32006; CVE-2024-22019; CVE-2024-46889; CVE-2023-46809; CVE-2023-47100; CVE-2024-46888; CVE-2023-4408; CVE-2024-21891; CVE-2024-22025; CVE-2024-4741; CVE-2024-24758; CVE-2023-38552" ;
    icsa:cweNumber "CWE-94; CWE-416; CWE-122; CWE-321; CWE-27; CWE-311; CWE-617; CWE-754; CWE-400; CWE-22; CWE-444; CWE-200; CWE-1333; CWE-250; CWE-20; CWE-190; CWE-918; CWE-385; CWE-834; CWE-787; CWE-789; CWE-78; CWE-732; CWE-222; CWE-287; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2023-2975,
        cve-res:CVE-2023-32002,
        cve-res:CVE-2023-32003,
        cve-res:CVE-2023-32004,
        cve-res:CVE-2023-32005,
        cve-res:CVE-2023-32006,
        cve-res:CVE-2023-32558,
        cve-res:CVE-2023-32559,
        cve-res:CVE-2023-3341,
        cve-res:CVE-2023-3446,
        cve-res:CVE-2023-3817,
        cve-res:CVE-2023-38552,
        cve-res:CVE-2023-39331,
        cve-res:CVE-2023-39332,
        cve-res:CVE-2023-39333,
        cve-res:CVE-2023-4236,
        cve-res:CVE-2023-4408,
        cve-res:CVE-2023-44487,
        cve-res:CVE-2023-45143,
        cve-res:CVE-2023-46809,
        cve-res:CVE-2023-47038,
        cve-res:CVE-2023-47039,
        cve-res:CVE-2023-47100,
        cve-res:CVE-2023-4807,
        cve-res:CVE-2023-48795,
        cve-res:CVE-2023-50387,
        cve-res:CVE-2023-50868,
        cve-res:CVE-2023-52389,
        cve-res:CVE-2023-5517,
        cve-res:CVE-2023-5678,
        cve-res:CVE-2023-5679,
        cve-res:CVE-2023-5680,
        cve-res:CVE-2023-6129,
        cve-res:CVE-2023-6237,
        cve-res:CVE-2023-6516,
        cve-res:CVE-2023-7104,
        cve-res:CVE-2024-0232,
        cve-res:CVE-2024-0727,
        cve-res:CVE-2024-21890,
        cve-res:CVE-2024-21891,
        cve-res:CVE-2024-21892,
        cve-res:CVE-2024-21896,
        cve-res:CVE-2024-22017,
        cve-res:CVE-2024-22019,
        cve-res:CVE-2024-22025,
        cve-res:CVE-2024-24758,
        cve-res:CVE-2024-24806,
        cve-res:CVE-2024-2511,
        cve-res:CVE-2024-27980,
        cve-res:CVE-2024-27982,
        cve-res:CVE-2024-27983,
        cve-res:CVE-2024-46888,
        cve-res:CVE-2024-46889,
        cve-res:CVE-2024-46890,
        cve-res:CVE-2024-46891,
        cve-res:CVE-2024-46892,
        cve-res:CVE-2024-46894,
        cve-res:CVE-2024-4741,
        cve-res:CVE-2024-5535 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-1333,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-222,
        cwe-res:CWE-250,
        cwe-res:CWE-27,
        cwe-res:CWE-287,
        cwe-res:CWE-311,
        cwe-res:CWE-321,
        cwe-res:CWE-385,
        cwe-res:CWE-400,
        cwe-res:CWE-416,
        cwe-res:CWE-444,
        cwe-res:CWE-613,
        cwe-res:CWE-617,
        cwe-res:CWE-732,
        cwe-res:CWE-754,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-789,
        cwe-res:CWE-834,
        cwe-res:CWE-918,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC INS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Siemens products are affected: SINEC INS: versions prior to V1.0 SP2 Update 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-09" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power 7" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-29119" ;
    icsa:cweNumber "CWE-266" ;
    icsa:hasCVE cve-res:CVE-2024-29119 ;
    icsa:hasCWE cwe-res:CWE-266 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Spectrum Power 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Spectrum Power 7 are affected: Spectrum Power 7: All versions prior to V24Q3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-10" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TeleControl Server" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-44102" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-44102 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TeleControl Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of TeleControl Server are affected: PP TeleControl Server Basic 8 to 32 V3.1 (6NH9910-0AA31-0AB1): versions prior to V3.1.2.1 PP TeleControl Server Basic 32 to 64 V3.1 (6NH9910-0AA31-0AF1): versions prior to V3.1.2.1 PP TeleControl Server Basic 64 to 256 V3.1 (6NH9910-0AA31-0AC1): versions prior to V3.1.2.1 PP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-0AD1): versions prior to V3.1.2.1 PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1): versions prior to V3.1.2.1 TeleControl Server Basic 8 V3.1 (6NH9910-0AA31-0AA0): versions prior to V3.1.2.1 TeleControl Server Basic 32 V3.1 (6NH9910-0AA31-0AF0): versions prior to V3.1.2.1 TeleControl Server Basic 64 V3.1 (6NH9910-0AA31-0AB0): versions prior to V3.1.2.1 TeleControl Server Basic 256 V3.1 (6NH9910-0AA31-0AC0): versions prior to V3.1.2.1 TeleControl Server Basic 1000 V3.1 (6NH9910-0AA31-0AD0): versions prior to V3.1.2.1 TeleControl Server Basic 5000 V3.1 (6NH9910-0AA31-0AE0): versions prior to V3.1.2.1 TeleControl Server Basic Serv Upgr (6NH9910-0AA31-0GA1): versions prior to V3.1.2.1 TeleControl Server Basic Upgr V3.1 (6NH9910-0AA31-0GA0): versions prior to V3.1.2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-11" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CP" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-50310" ;
    icsa:cweNumber "CWE-863" ;
    icsa:hasCVE cve-res:CVE-2024-50310 ;
    icsa:hasCWE cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of SIMATIC CP is affected: SIMATIC CP1543-1: V4.0 (6GK7543-1AX10-0XE0)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-12" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Runtime" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-50313" ;
    icsa:cweNumber "CWE-362" ;
    icsa:hasCVE cve-res:CVE-2024-50313 ;
    icsa:hasCWE cwe-res:CWE-362 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mendix Runtime are affected: Mendix Runtime: V8 Mendix Runtime: V9 Mendix Runtime: V10 Mendix Runtime: V10.6 Mendix Runtime: V10.12." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-13" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Verve Asset Manager" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-37287" ;
    icsa:cweNumber "CWE-1395" ;
    icsa:hasCVE cve-res:CVE-2024-37287 ;
    icsa:hasCWE cwe-res:CWE-1395 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Verve Asset Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Verve Asset Manager are affected: Verve Asset Manager: Versions 1.39 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-13" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-14" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Updater" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-10945; CVE-2024-10944; CVE-2024-10943" ;
    icsa:cweNumber "CWE-922; CWE-358; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-10943,
        cve-res:CVE-2024-10944,
        cve-res:CVE-2024-10945 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-358,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Updater" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FactoryTalk are affected: FactoryTalk Updater - Web Client: Version 4.00.00 FactoryTalk Updater - Client: All versions FactoryTalk Updater - Agent: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-14" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-15" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena Input Analyzer" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6068" ;
    icsa:cweNumber "CWE-1284" ;
    icsa:hasCVE cve-res:CVE-2024-6068 ;
    icsa:hasCWE cwe-res:CWE-1284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arena Input Analyzer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation Input Analyzer (Arena); an event simulation and automation software; are affected: Arena Input Analyzer: v16.20.03 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-15" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-16" ;
    dcterms:issued "2024-10-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MSM (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-2398; CVE-2019-5097" ;
    icsa:cweNumber "CWE-835; CWE-772" ;
    icsa:hasCVE cve-res:CVE-2019-5097,
        cve-res:CVE-2024-2398 ;
    icsa:hasCWE cwe-res:CWE-772,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy MSM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Affected Products: None" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-16" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-319-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-319-17" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "2N Access Commander (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Government Facilities; Commercial Facilities; Communications; Information Technology" ;
    icsa:cveNumber "CVE-2024-47256; CVE-2024-47254; CVE-2024-47255; CVE-2024-47253" ;
    icsa:cweNumber "CWE-22; CWE-345; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2024-47253,
        cve-res:CVE-2024-47254,
        cve-res:CVE-2024-47255,
        cve-res:CVE-2024-47256 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-321,
        cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Access Commander" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Access Commander: Versions 3.1.1.2 and prior Access Commander: Versions 1.14 and prior (CVE-2024-47256).; an IP access control system; The following versions of 2N Access Commander" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-319-17" ;
    icsa:vendor "2N" ;
    icsa:year 2024 .

icsa-res:ICSA-24-324-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-324-01" ;
    dcterms:issued "2024-11-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8403" ;
    icsa:cweNumber "CWE-1287" ;
    icsa:hasCVE cve-res:CVE-2024-8403 ;
    icsa:hasCWE cwe-res:CWE-1287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric MELSEC iQ-F Series (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP: >=1.100|<=1.104; Mitsubishi Electric MELSEC iQ-F Series FX5-ENET: >=1.100|<=1.200" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-324-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-326-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-326-01" ;
    dcterms:issued "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Automated Logic WebCTRL Premium Server" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8526; CVE-2024-8525" ;
    icsa:cweNumber "CWE-434; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2024-8525,
        cve-res:CVE-2024-8526 ;
    icsa:hasCWE cwe-res:CWE-434,
        cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebCTRL Premium Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Automated Logic products are affected: Automated Logic WebCTRL® Server : Version 7.0 Carrier i-Vu: Version 7.0 Automated Logic SiteScan Web: Version 7.0 Automated Logic WebCTRL for OEMs: Version 7.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-326-01" ;
    icsa:vendor "Automated Logic" ;
    icsa:year 2024 .

icsa-res:ICSA-24-326-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-326-02" ;
    dcterms:issued "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "OSCAT Basic Library" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-6876" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-6876 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OSCAT Basic Library" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: CODESYS OSCAT Basic Library: Version 3.3.5.0 oscat.de OSCAT Basic Library: Versions 3.3.5 and prior oscat.de OSCAT Basic Library: Versions 335 and prior.; The following versions CODESYS OSCAT" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-326-02" ;
    icsa:vendor "CODESYS GmbH" ;
    icsa:year 2024 .

icsa-res:ICSA-24-326-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-326-03" ;
    dcterms:issued "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M340, MC80, and Momentum Unity M1E & EcoStruxure (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-8935; CVE-2024-8933" ;
    icsa:cweNumber "CWE-924; CWE-290" ;
    icsa:hasCVE cve-res:CVE-2024-8933,
        cve-res:CVE-2024-8935 ;
    icsa:hasCWE cwe-res:CWE-290,
        cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon M340, MC80, and Momentum Unity M1E" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxureâ„¢ Control Expert Versions prior to 16.2 HF003" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-326-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-326-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-326-04" ;
    dcterms:issued "2024-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M340, MC80, and Momentum Unity M1E (Update B)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-8937; CVE-2024-8938; CVE-2024-8936" ;
    icsa:cweNumber "CWE-119; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-8936,
        cve-res:CVE-2024-8937,
        cve-res:CVE-2024-8938 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon M340, MC80, and Momentum Unity M1E" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-8937; Versions prior to SV2.80  (CVE-2024-8937; CVE-2024-8938); Modicon MC80 (part numbers BMKC80); Versions prior to SV2.1 (CVE-2024-8937; Modicon M340 CPU (part numbers BMXP34*); Versions prior to SV3.65 (CVE-2024-8936; CVE-2024-8938).; CVE-2024-8938); Modicon Momentum Unity M1E Processor (171CBU*)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-326-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-326-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-326-05" ;
    dcterms:issued "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure IT Gateway" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Information Technology; Healthcare and Public Health; Critical Manufacturing; Transportation Systems; Energy; Chemical" ;
    icsa:cveNumber "CVE-2024-10575" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2024-10575 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure IT Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following versions of EcoStruxure IT Gateway are affected: EcoStruxure IT Gateway: 1.21.0.6 EcoStruxure IT Gateway: 1.22.0.3 EcoStruxure IT Gateway: 1.22.1.5 EcoStruxure IT Gateway: 1.23.0.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-326-05" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-326-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-326-06" ;
    dcterms:issued "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerLogic PM5300 Series" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-9409" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-9409 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerLogic PM5300 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following PowerLogic energy meters are affected: PowerLogic PM5320: Versions 2.3.8 and prior PowerLogic PM5340: Versions 2.3.8 and prior PowerLogic PM5341: Versions 2.6.6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-326-06" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-326-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-326-07" ;
    dcterms:issued "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO Manager" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-47407; CVE-2024-52034; CVE-2024-50054; CVE-2024-47138; CVE-2024-45369" ;
    icsa:cweNumber "CWE-306; CWE-35; CWE-78; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-45369,
        cve-res:CVE-2024-47138,
        cve-res:CVE-2024-47407,
        cve-res:CVE-2024-50054,
        cve-res:CVE-2024-52034 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-306,
        cwe-res:CWE-35,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "myPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following mySCADA products are affected: myPRO Manager: Versions prior to 1.3 myPRO Runtime: Versions prior to 9.2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-326-07" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2024 .

icsa-res:ICSA-24-331-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-331-01" ;
    dcterms:issued "2024-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC" ;
    icsa:CVSSScore "9.5"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-22764; CVE-2021-22763" ;
    icsa:cweNumber "CWE-640; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2021-22763,
        cve-res:CVE-2021-22764 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-640 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerLogic PM5500 and PowerLogic PM8ECC" ;
    icsa:productDistribution "Multiple" ;
    icsa:productsAffected "The following versions of PowerLogic PM55xx power metering devices and PowerLogic PM8ECC ethernet communication module are affected: PM5560: Versions prior to v2.7.8 PM5561: Versions prior to v10.7.3 PM5562: v2.5.4 and prior PM5563: Versions prior to v2.7.8 PM8ECC: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-331-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-331-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-331-02" ;
    dcterms:issued "2024-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerLogic P5" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-5559" ;
    icsa:cweNumber "CWE-327" ;
    icsa:hasCVE cve-res:CVE-2024-5559 ;
    icsa:hasCWE cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerLogic P5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following products are affected: Schneider Electric PowerLogic P5: Versions 01.500.104 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-331-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-331-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-331-03" ;
    dcterms:issued "2024-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Control Expert, EcoStruxure Process Expert, and Modicon M340, M580 and M580 Safety PLCs (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-27975; CVE-2023-6408; CVE-2023-6409" ;
    icsa:cweNumber "CWE-798; CWE-924; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2023-27975,
        cve-res:CVE-2023-6408,
        cve-res:CVE-2023-6409 ;
    icsa:hasCWE cwe-res:CWE-522,
        cwe-res:CWE-798,
        cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Control Expert, EcoStruxure Process Expert, and Modicon M340, M580 and M580 Safety PLCs (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Modicon M580 CPU (part numbers BMEP* and BMEH* excluding M580 CPU Safety) Versions prior to sv4.20; EcoStruxure Control Expert Versions prior to v16.0; EcoStruxure Process Expert Versions prior to v2023; Modicon MC80 (part numbers BMKC80) All Versions; Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions prior to SV4.21; Modicon M340 CPU (part numbers BMXP34*) Versions prior to sv3.60" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-331-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-331-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-331-04" ;
    dcterms:issued "2024-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MicroSCADA Pro/X SYS600 (Update A)" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-7940; CVE-2024-3982; CVE-2024-3980; CVE-2024-4872; CVE-2024-7941" ;
    icsa:cweNumber "CWE-22; CWE-306; CWE-294; CWE-943; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2024-3980,
        cve-res:CVE-2024-3982,
        cve-res:CVE-2024-4872,
        cve-res:CVE-2024-7940,
        cve-res:CVE-2024-7941 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-294,
        cwe-res:CWE-306,
        cwe-res:CWE-601,
        cwe-res:CWE-943 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroSCADA Pro/X SYS600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-3982) Hitachi Energy MicroSCADA Pro/X SYS600: Version 10.2 to Version 10.5 (CVE-2024-7940) Hitachi Energy MicroSCADA Pro/X SYS600: Version 10.5 (CVE-2024-7941) Hitachi Energy MicroSCADA Pro/X SYS600: Version 9.4 FP1 (CVE-2024-3980) Hitachi Energy MicroSCADA Pro/X SYS600: Version 9.4 FP2 HF1 to Version 9.4 FP2 HF5 (CVE-2024-4872; The following Hitachi Energy products are affected: Hitachi Energy MicroSCADA Pro/X SYS600: Version 10.0 to Version 10.5 (CVE-2024-4872; CVE-2024-3980).; CVE-2024-3980" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-331-04" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-331-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-331-05" ;
    dcterms:issued "2024-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 Scripting Interface" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-1514" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2023-1514 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 Scripting Interface" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Hitachi Energy are affected: RTU500 Scripting Interface: Version 1.0.1.30 RTU500 Scripting Interface: Version 1.0.2 RTU500 Scripting Interface: Version 1.1.1 RTU500 Scripting Interface: Version 1.2.1 RTU500 Scripting Interface: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-331-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-338-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-338-01" ;
    dcterms:issued "2024-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ruijie Reyee OS (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2024-47547; CVE-2024-47043; CVE-2024-47146; CVE-2024-45722; CVE-2024-47791; CVE-2024-42494; CVE-2024-46874; CVE-2024-52324; CVE-2024-48874; CVE-2024-51727" ;
    icsa:cweNumber "CWE-155; CWE-280; CWE-922; CWE-1391; CWE-640; CWE-359; CWE-402; CWE-242; CWE-918; CWE-826" ;
    icsa:hasCVE cve-res:CVE-2024-42494,
        cve-res:CVE-2024-45722,
        cve-res:CVE-2024-46874,
        cve-res:CVE-2024-47043,
        cve-res:CVE-2024-47146,
        cve-res:CVE-2024-47547,
        cve-res:CVE-2024-47791,
        cve-res:CVE-2024-48874,
        cve-res:CVE-2024-51727,
        cve-res:CVE-2024-52324 ;
    icsa:hasCWE cwe-res:CWE-1391,
        cwe-res:CWE-155,
        cwe-res:CWE-242,
        cwe-res:CWE-280,
        cwe-res:CWE-359,
        cwe-res:CWE-402,
        cwe-res:CWE-640,
        cwe-res:CWE-826,
        cwe-res:CWE-918,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Reyee OS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Ruijie product is affected: Reyee OS: Versions 2.206.x up to but not including 2.320.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-338-01" ;
    icsa:vendor "Ruijie" ;
    icsa:year 2024 .

icsa-res:ICSA-24-338-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-338-02" ;
    dcterms:issued "2024-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-2552; CVE-2024-2550; CVE-2024-9474; CVE-2024-0012" ;
    icsa:cweNumber "CWE-306; CWE-22; CWE-78; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-0012,
        cve-res:CVE-2024-2550,
        cve-res:CVE-2024-2552,
        cve-res:CVE-2024-9474 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-476,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-2552; CVE-2024-9474).; The following Siemens products are affected: RUGGEDCOM APE1808: all versions (CVE-2024-2550) RUGGEDCOM APE1808: all versions (CVE-2024-0012" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-338-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-338-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-338-03" ;
    dcterms:issued "2024-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Open Automation Software" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-11220" ;
    icsa:cweNumber "CWE-279" ;
    icsa:hasCVE cve-res:CVE-2024-11220 ;
    icsa:hasCWE cwe-res:CWE-279 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Open Automation Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an HMI; and IoT solution; SCADA; The following versions of Open Automation Software; are affected: Open Automation Software: prior to V20.00.0076." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-338-03" ;
    icsa:vendor "Open Automation Software" ;
    icsa:year 2024 .

icsa-res:ICSA-24-338-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-338-04" ;
    dcterms:issued "2024-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States, Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8299; CVE-2024-9852; CVE-2024-8300" ;
    icsa:cweNumber "CWE-427; CWE-561" ;
    icsa:hasCVE cve-res:CVE-2024-8299,
        cve-res:CVE-2024-8300,
        cve-res:CVE-2024-9852 ;
    icsa:hasCWE cwe-res:CWE-427,
        cwe-res:CWE-561 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric ICONICS Suite: <=10.97.3; Mitsubishi Electric MC Works64: vers:all/*; Mitsubishi Electric GENESIS32: vers:all/*; Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3; Mitsubishi Electric GENESIS64: <= 10.97.3; Mitsubishi Electric Hyper Historian: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions Hyper Historian: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions GENESIS32: vers:all/*; Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-338-04" ;
    icsa:vendor "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-338-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-338-05" ;
    dcterms:issued "2024-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Monitouch V-SFT (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-11790; CVE-2024-11789; CVE-2024-11795; CVE-2024-11792; CVE-2024-11794; CVE-2024-11797; CVE-2024-11791; CVE-2024-11787; CVE-2024-11793; CVE-2024-11796" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-11787,
        cve-res:CVE-2024-11789,
        cve-res:CVE-2024-11790,
        cve-res:CVE-2024-11791,
        cve-res:CVE-2024-11792,
        cve-res:CVE-2024-11793,
        cve-res:CVE-2024-11794,
        cve-res:CVE-2024-11795,
        cve-res:CVE-2024-11796,
        cve-res:CVE-2024-11797 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Monitouch V-SFT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "is affected: Monitouch V-SFT: Version 6.2.3.0 and prior.; The following version of Fuji Electric's Monitouch V-SFT; a screen configuration software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-338-05" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-338-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-338-06" ;
    dcterms:issued "2024-12-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Tellus Lite V-Simulator (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-11799; CVE-2024-11802; CVE-2024-11803; CVE-2024-11801; CVE-2024-11800" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-11799,
        cve-res:CVE-2024-11800,
        cve-res:CVE-2024-11801,
        cve-res:CVE-2024-11802,
        cve-res:CVE-2024-11803 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tellus Lite V-Simulator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a remote monitoring and operation software. The following versions are affected: Tellus Lite: Version 4.0.20.0.; VS5Sim is a simulator of V-SFT Ver5 packaged with Fuji Electric Tellus Lite V-Simulator" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-338-06" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-340-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-340-01" ;
    dcterms:issued "2024-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect C-More EA9 Programming Software" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-11610; CVE-2024-11611; CVE-2024-11609" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-11609,
        cve-res:CVE-2024-11610,
        cve-res:CVE-2024-11611 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "C-More EA9 Programming Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AutomationDirect reports that the following versions of C-more EA9 series programming software are affected: C-More EA9 Programming Software: version 6.78 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-340-01" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2024 .

icsa-res:ICSA-24-340-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-340-02" ;
    dcterms:issued "2024-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Planet Technology Planet WGS-804HPT" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-52558; CVE-2024-52320; CVE-2024-48871" ;
    icsa:cweNumber "CWE-191; CWE-78; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-48871,
        cve-res:CVE-2024-52320,
        cve-res:CVE-2024-52558 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-191,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Planet WGS-804HPT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an industrial switch; are affected: Planet WGS-804HPT: Version v1.305b210531.; The following versions of Planet WGS-804HPT" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-340-02" ;
    icsa:vendor "Planet Technology" ;
    icsa:year 2024 .

icsa-res:ICSA-24-345-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-345-01" ;
    dcterms:issued "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "MOBATIME Network Master Clock" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-12286" ;
    icsa:cweNumber "CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2024-12286 ;
    icsa:hasCWE cwe-res:CWE-1392 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Network Master Clock - DTS 4801" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a primary clock used to synchronize with secondary clocks; are affected: Network Master Clock - DTS 4801: FW Version 00020419.01.02020154.; The following versions of Network Master Clock - DTS 4801" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-345-01" ;
    icsa:vendor "MOBATIME" ;
    icsa:year 2024 .

icsa-res:ICSA-24-345-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-345-02" ;
    dcterms:issued "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Foxboro DCS Core Control Services" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-5681; CVE-2024-5680; CVE-2024-5679" ;
    icsa:cweNumber "CWE-20; CWE-787; CWE-129" ;
    icsa:hasCVE cve-res:CVE-2024-5679,
        cve-res:CVE-2024-5680,
        cve-res:CVE-2024-5681 ;
    icsa:hasCWE cwe-res:CWE-129,
        cwe-res:CWE-20,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Foxboro DCS Core Control Services" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: EcoStruxure Foxboro DCS Core Control Services: Versions 9.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-345-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-345-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-345-03" ;
    dcterms:issued "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric FoxRTU Station" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater; Chemical" ;
    icsa:cveNumber "CVE-2024-2602" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2024-2602 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FoxRTU Station" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electricreports that the following products are affected: FoxRTU Station: < 9.3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-345-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-345-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-345-04" ;
    dcterms:issued "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "National Instruments LabVIEW" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Defense Industrial Base; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-10494; CVE-2024-10495; CVE-2024-10496" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-10494,
        cve-res:CVE-2024-10495,
        cve-res:CVE-2024-10496 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LabVIEW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following National Instruments products are affected: LabVIEW 2024: Versions Q3 (24.3f0) and prior LabVIEW 2023: All versions LabVIEW 2022: All versions LabVIEW 2021 (EOL) and below: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-345-04" ;
    icsa:vendor "National Instruments Corp (NI)" ;
    icsa:year 2024 .

icsa-res:ICSA-24-345-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-345-05" ;
    dcterms:issued "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-12212; CVE-2024-9508" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-12212,
        cve-res:CVE-2024-9508 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Horner Automation products are affected: Cscape: Versions 10.0.363.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-345-05" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-345-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-345-06" ;
    dcterms:issued "2024-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena (Update C)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-11364; CVE-2025-6377; CVE-2024-11156; CVE-2026-6071; CVE-2024-12175; CVE-2024-11158; CVE-2024-12672; CVE-2025-6376; CVE-2024-12130; CVE-2024-11157; CVE-2024-11155" ;
    icsa:cweNumber "CWE-1395; CWE-416; CWE-665; CWE-787; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-11155,
        cve-res:CVE-2024-11156,
        cve-res:CVE-2024-11157,
        cve-res:CVE-2024-11158,
        cve-res:CVE-2024-11364,
        cve-res:CVE-2024-12130,
        cve-res:CVE-2024-12175,
        cve-res:CVE-2024-12672,
        cve-res:CVE-2025-6376,
        cve-res:CVE-2025-6377,
        cve-res:CVE-2026-6071 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-1395,
        cwe-res:CWE-416,
        cwe-res:CWE-665,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Arena (Update C)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Arena <=16.20.00 | Arena <=16.20.03 | Arena <=16.20.05 | Arena <=16.20.06 | Arena <=16.20.08 | Arena 32 bit <=16.20.07 | Arena 32 bit <=16.20.06" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-345-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-01" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens CPCI85 Central Processing/Communication" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-53832" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2024-53832 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CPCI85 Central Processing/Communication" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens CPCI85 Central Processing/Communication: All versions prior to V05.30." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-02" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Engineering Platforms" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-52051" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-52051 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Engineering Platforms" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIMATIC STEP 7 Safety V18: All versions Siemens SIMATIC STEP 7 Safety V19: All versions Siemens SIMATIC S7-PLCSIM V18: All versions Siemens SIMOCODE ES V18: All versions Siemens SIMATIC WinCC Unified V17: All versions Siemens SINAMICS Startdrive V18: All versions Siemens SIMATIC STEP 7 V17: All versions Siemens SIMATIC WinCC V19: All versions Siemens SIRIUS Safety ES V17 (TIA Portal): All versions Siemens TIA Portal Cloud V19: All versions Siemens SIRIUS Safety ES V18 (TIA Portal): All versions Siemens SIMATIC STEP 7 V19: All versions Siemens SIRIUS Soft Starter ES V18 (TIA Portal): All versions Siemens SIRIUS Safety ES V19 (TIA Portal): All versions Siemens SIMOTION SCOUT TIA V5.4 SP3: All versions Siemens SIMOTION SCOUT TIA V5.5 SP1: All versions Siemens SINAMICS Startdrive V17: All versions Siemens TIA Portal Cloud V17: All versions Siemens SIMOCODE ES V17: All versions Siemens SIMATIC STEP 7 Safety V17: All versions Siemens SIRIUS Soft Starter ES V19 (TIA Portal): All versions Siemens SIMATIC WinCC Unified PC Runtime V19: All versions Siemens SIMATIC WinCC V18: All versions Siemens SIMATIC WinCC Unified PC Runtime V18: All versions Siemens SINAMICS Startdrive V19: All versions Siemens SIRIUS Soft Starter ES V17 (TIA Portal): All versions Siemens SIMOTION SCOUT TIA V5.6 SP1: All versions Siemens SIMATIC WinCC Unified V18: All versions Siemens SIMATIC WinCC V17: All versions Siemens TIA Portal Cloud V18: All versions Siemens SIMATIC STEP 7 V18: All versions Siemens SIMATIC WinCC Unified V19: All versions Siemens SIMOCODE ES V19: All versions Siemens SIMATIC S7-PLCSIM V17: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-03" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX II" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-28398" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2020-28398 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens that the following products are affected: Siemens RUGGEDCOM ROX RX1500: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX RX1512: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX RX1501: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX MX5000RE: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX RX1400: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX RX5000: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX RX1536: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX RX1524: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX RX1510: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX RX1511: All versions prior to V2.16.0 Siemens RUGGEDCOM ROX MX5000: All versions prior to V2.16.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-04" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-54091" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-54091 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Parasolid V36.1: Versions prior to V36.1.225 Parasolid V37.0: Versions prior to V37.0.173 Parasolid V37.1: Versions prior to V37.1.109." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-05" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Engineering Platforms" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-49849" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-49849 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Engineering Platforms" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following engineering platforms are affected: SIMATIC STEP 7 Safety V17: All versions SIMATIC STEP 7 Safety V18: All versions SIMATIC S7-PLCSIM V17: All versions SIMATIC WinCC V19: All versions SIMATIC WinCC Unified V16: All versions SIMOTION SCOUT TIA V5.4 SP3: All versions SIMATIC STEP 7 Safety V19: All versions SIMATIC WinCC V17: All versions SIMOTION SCOUT TIA V5.6 SP1: All versions SIRIUS Soft Starter ES V17 (TIA Portal): All versions SIRIUS Soft Starter ES V18 (TIA Portal): All versions SINAMICS Startdrive V16: All versions SIMATIC STEP 7 V17: All versions SINAMICS Startdrive V19: All versions SINAMICS Startdrive V17: All versions SIMOCODE ES V17: All versions SIMOCODE ES V18: All versions TIA Portal Cloud V19: All versions SIMOTION SCOUT TIA V5.4 SP1: All versions SIRIUS Safety ES V18 (TIA Portal): All versions TIA Portal Cloud V16: All versions SIMATIC WinCC V18: All versions SIMATIC STEP 7 Safety V16: All versions SIRIUS Safety ES V17 (TIA Portal): All versions SIRIUS Soft Starter ES V19 (TIA Portal): All versions TIA Portal Cloud V18: All versions SIMATIC STEP 7 V19: All versions SIMATIC WinCC V16: All versions SIMATIC STEP 7 V18: All versions SIMOTION SCOUT TIA V5.5 SP1: All versions SINAMICS Startdrive V18: All versions SIMOCODE ES V19: All versions SIMATIC WinCC Unified V17: All versions SIMATIC WinCC Unified V19: All versions TIA Portal Cloud V17: All versions SIRIUS Safety ES V19 (TIA Portal): All versions SIMATIC STEP 7 V16: All versions SIMATIC WinCC Unified V18: All versions SIMOCODE ES V16: All versions SIMATIC S7-PLCSIM V16: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-06" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-47046; CVE-2024-41981" ;
    icsa:cweNumber "CWE-119; CWE-122" ;
    icsa:hasCVE cve-res:CVE-2024-41981,
        cve-res:CVE-2024-47046 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Simcenter Femap V2306: All versions Simcenter Femap V2401: All versions Simcenter Femap V2406: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-07" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge SE2024" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-54094; CVE-2024-54095; CVE-2024-54093" ;
    icsa:cweNumber "CWE-122; CWE-191" ;
    icsa:hasCVE cve-res:CVE-2024-54093,
        cve-res:CVE-2024-54094,
        cve-res:CVE-2024-54095 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-191 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge SE2024" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Solid Edge SE2024 are affected: Solid Edge SE2024: All versions prior to V224.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-08" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-49704; CVE-2024-54005" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2024-49704,
        cve-res:CVE-2024-54005 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: COMOS V10.4.0: All versions COMOS V10.4.1: All versions COMOS V10.4.2: All versions COMOS V10.4.3: Versions prior to V10.4.3.0.47 COMOS V10.4.4: Versions prior to V10.4.4.2 COMOS V10.4.4.1: Versions prior to V10.4.4.1.21 COMOS V10.3: Versions prior to V10.3.3.5.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-09" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-52571; CVE-2024-45463; CVE-2024-53041; CVE-2024-45469; CVE-2024-45473; CVE-2024-45476; CVE-2024-45467; CVE-2024-52566; CVE-2024-45464; CVE-2024-52569; CVE-2024-52567; CVE-2024-45474; CVE-2024-45475; CVE-2024-45471; CVE-2024-45470; CVE-2024-52573; CVE-2024-52572; CVE-2024-52574; CVE-2024-52568; CVE-2024-45465; CVE-2024-52570; CVE-2024-45468; CVE-2024-52565; CVE-2024-53242; CVE-2024-45466; CVE-2024-45472" ;
    icsa:cweNumber "CWE-416; CWE-787; CWE-121; CWE-119; CWE-125; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-45463,
        cve-res:CVE-2024-45464,
        cve-res:CVE-2024-45465,
        cve-res:CVE-2024-45466,
        cve-res:CVE-2024-45467,
        cve-res:CVE-2024-45468,
        cve-res:CVE-2024-45469,
        cve-res:CVE-2024-45470,
        cve-res:CVE-2024-45471,
        cve-res:CVE-2024-45472,
        cve-res:CVE-2024-45473,
        cve-res:CVE-2024-45474,
        cve-res:CVE-2024-45475,
        cve-res:CVE-2024-45476,
        cve-res:CVE-2024-52565,
        cve-res:CVE-2024-52566,
        cve-res:CVE-2024-52567,
        cve-res:CVE-2024-52568,
        cve-res:CVE-2024-52569,
        cve-res:CVE-2024-52570,
        cve-res:CVE-2024-52571,
        cve-res:CVE-2024-52572,
        cve-res:CVE-2024-52573,
        cve-res:CVE-2024-52574,
        cve-res:CVE-2024-53041,
        cve-res:CVE-2024-53242 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-52569; Siemens reports that the following products are affected: Teamcenter Visualization V2406: Versions prior to V2406.0005 (CVE-2024-52565; CVE-2024-52571; CVE-2024-52573; CVE-2024-52574) Teamcenter Visualization V14.2: Versions prior to V14.2.0.14 Teamcenter Visualization V14.3: Versions prior to V14.3.0.12 Teamcenter Visualization V2312: Versions prior to V2312.0008.; CVE-2024-52572; CVE-2024-52566; CVE-2024-52568; CVE-2024-52570; CVE-2024-52567" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-347-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-347-10" ;
    dcterms:issued "2024-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SENTRON Powercenter 1000 (Update A)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-6657" ;
    icsa:cweNumber "CWE-821" ;
    icsa:hasCVE cve-res:CVE-2024-6657 ;
    icsa:hasCWE cwe-res:CWE-821 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SENTRON Powercenter 1000 (Not affected)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are NOT affected: SENTRON Powercenter 1000 (7KN1110-0MC00): All versions SENTRON Powercenter 1100 (7KN1111-0MC00): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-347-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-352-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-352-01" ;
    dcterms:issued "2024-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "ThreatQuotient ThreatQ Platform" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2024-39703" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-39703 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThreatQ Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: ThreatQ Platform: Versions prior to 5.29.3.; The following versions of ThreatQuotient ThreatQ Platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-352-01" ;
    icsa:vendor "ThreatQuotient Inc." ;
    icsa:year 2024 .

icsa-res:ICSA-24-352-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-352-02" ;
    dcterms:issued "2024-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy TropOS Devices Series 1400/2400/6400" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2013-5211" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2013-5211 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TropOS Devices Series 1400/2400/6400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products of Hitachi Energy are affected: TropOS devices series 1400/2400/6400: All versions prior to 8.9.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-352-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-352-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-352-03" ;
    dcterms:issued "2024-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PowerMonitor 1000 Remote" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-12373; CVE-2024-12371; CVE-2024-12372" ;
    icsa:cweNumber "CWE-420; CWE-120; CWE-122" ;
    icsa:hasCVE cve-res:CVE-2024-12371,
        cve-res:CVE-2024-12372,
        cve-res:CVE-2024-12373 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-122,
        cwe-res:CWE-420 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerMonitor 1000 Remote" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following versions of PowerMonitor 1000 Remote are affected: PM1k 1408-BC3A-485: Versions prior to 4.020 PM1k 1408-BC3A-ENT: Versions prior to 4.020 PM1k 1408-TS3A-485: Versions prior to 4.020 PM1k 1408-TS3A-ENT: Versions prior to 4.020 PM1k 1408-EM3A-485: Versions prior to 4.020 PM1k 1408-EM3A-ENT: Versions prior to 4.020 PM1k 1408-TR1A-485: Versions prior to 4.020 PM1k 1408-TR2A-485: Versions prior to 4.020 PM1k 1408-EM1A-485: Versions prior to 4.020 PM1k 1408-EM2A-485: Versions prior to 4.020 PM1k 1408-TR1A-ENT: Versions prior to 4.020 PM1k 1408-TR2A-ENT: Versions prior to 4.020 PM1k 1408-EM1A-ENT: Versions prior to 4.020 PM1k 1408-EM2A-ENT: Versions prior to 4.020." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-352-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2024 .

icsa-res:ICSA-24-352-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-352-04" ;
    dcterms:issued "2024-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon (Update B)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-11737" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-11737 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon M241 / M251 / M258 / LMC058" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Modicon Controllers M241: Versions prior to 5.2.11.29 Modicon Controllers M251: Versions prior to 5.2.11.29 Modicon Controllers M258: Versions prior to 5.0.4.19 Modicon Controllers LMC058: Versions prior to 5.0.4.19." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-352-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-354-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-354-01" ;
    dcterms:issued "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 series CMU" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-6711" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2023-6711 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 series CMU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Hitachi Energy products are affected: RTU500 series CMU Firmware: Versions 12.0.1 through 12.0.14 RTU500 series CMU Firmware: Versions 12.2.1 through 12.2.11 RTU500 series CMU Firmware: Versions 12.4.1 through 12.4.11 RTU500 series CMU Firmware: Versions 12.6.1 through 12.6.9 RTU500 series CMU Firmware: Versions 12.7.1 through 12.7.6 RTU500 series CMU Firmware: Versions 13.2.1 through 13.2.6 RTU500 series CMU Firmware: Versions 13.4.1 through 13.4.3 RTU500 series CMU Firmware: Version 13.5.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-354-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-354-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-354-02" ;
    dcterms:issued "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy SDM600" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-2377; CVE-2024-2378" ;
    icsa:cweNumber "CWE-863; CWE-346" ;
    icsa:hasCVE cve-res:CVE-2024-2377,
        cve-res:CVE-2024-2378 ;
    icsa:hasCWE cwe-res:CWE-346,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SDM600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: Hitachi Energy SDM600: Versions prior to 1.3.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-354-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-24-354-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-354-03" ;
    dcterms:issued "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DTM Soft" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-12677" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-12677 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DTM Soft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: DTM Soft: Versions 1.30 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-354-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2024 .

icsa-res:ICSA-24-354-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-354-04" ;
    dcterms:issued "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens User Management Component" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-49775" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2024-49775 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "User Management Component (UMC)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Opcenter Execution Foundation: All versions Opcenter Intelligence: All versions Opcenter Quality: All versions Opcenter RDL: All versions SIMATIC PCS neo V4.0: All versions SIMATIC PCS neo V4.1: All versions SIMATIC PCS neo V5.0: All versions prior to V5.0 Update 1 SINEC NMS: All versions Totally Integrated Automation Portal (TIA Portal) V16: All versions Totally Integrated Automation Portal (TIA Portal) V17: All versions Totally Integrated Automation Portal (TIA Portal) V18: All versions Totally Integrated Automation Portal (TIA Portal) V19: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-354-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2024 .

icsa-res:ICSA-24-354-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-354-05" ;
    dcterms:issued "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tibbo AggreGate Network Manager" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-12700" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2024-12700 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AggreGate Network Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Tibbo products are affected: Aggregate Network Manager: Versions 6.34.02 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-354-05" ;
    icsa:vendor "Tibbo" ;
    icsa:year 2024 .

icsa-res:ICSA-24-354-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-354-06" ;
    dcterms:issued "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Accutech Manager" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-6918" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2024-6918 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Accutech Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric Accutech Manager: Versions 2.08.01 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-354-06" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-24-354-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-24-354-07" ;
    dcterms:issued "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Controllers (Update A)" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; and Energy" ;
    icsa:cveNumber "CVE-2024-6528" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-6528 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric Modicon Controllers M258 / LMC058: Versions prior to 5.0.4.19 Schneider Electric Modicon Controllers M262: Versions prior to 5.2.8.26 Schneider Electric Modicon Controllers M251: Versions prior to 5.2.11.24 Schneider Electric Modicon Controllers M241: Versions prior to 5.2.11.24." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-24-354-07" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-25-007-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-007-01" ;
    dcterms:issued "2025-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB ASPECT-Enterprise, NEXUS, and MATRIX Series Products" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-51550; CVE-2024-51544; CVE-2024-11317; CVE-2024-51543; CVE-2024-6515; CVE-2024-48847; CVE-2024-6209; CVE-2024-51548; CVE-2024-48840; CVE-2024-51549; CVE-2024-6298; CVE-2024-48846; CVE-2024-11316; CVE-2024-48845; CVE-2024-48839; CVE-2024-51542; CVE-2024-51555; CVE-2024-48843; CVE-2024-6784; CVE-2024-51551; CVE-2024-48844; CVE-2024-51541; CVE-2024-6516; CVE-2024-51545; CVE-2024-51554; CVE-2024-51546" ;
    icsa:cweNumber "CWE-94; CWE-434; CWE-79; CWE-943; CWE-384; CWE-352; CWE-770; CWE-1287; CWE-15; CWE-36; CWE-918; CWE-193; CWE-522; CWE-1393; CWE-552; CWE-319; CWE-328; CWE-521; CWE-98; CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2024-11316,
        cve-res:CVE-2024-11317,
        cve-res:CVE-2024-48839,
        cve-res:CVE-2024-48840,
        cve-res:CVE-2024-48843,
        cve-res:CVE-2024-48844,
        cve-res:CVE-2024-48845,
        cve-res:CVE-2024-48846,
        cve-res:CVE-2024-48847,
        cve-res:CVE-2024-51541,
        cve-res:CVE-2024-51542,
        cve-res:CVE-2024-51543,
        cve-res:CVE-2024-51544,
        cve-res:CVE-2024-51545,
        cve-res:CVE-2024-51546,
        cve-res:CVE-2024-51548,
        cve-res:CVE-2024-51549,
        cve-res:CVE-2024-51550,
        cve-res:CVE-2024-51551,
        cve-res:CVE-2024-51554,
        cve-res:CVE-2024-51555,
        cve-res:CVE-2024-6209,
        cve-res:CVE-2024-6298,
        cve-res:CVE-2024-6515,
        cve-res:CVE-2024-6516,
        cve-res:CVE-2024-6784 ;
    icsa:hasCWE cwe-res:CWE-1287,
        cwe-res:CWE-1392,
        cwe-res:CWE-1393,
        cwe-res:CWE-15,
        cwe-res:CWE-193,
        cwe-res:CWE-319,
        cwe-res:CWE-328,
        cwe-res:CWE-352,
        cwe-res:CWE-36,
        cwe-res:CWE-384,
        cwe-res:CWE-434,
        cwe-res:CWE-521,
        cwe-res:CWE-522,
        cwe-res:CWE-552,
        cwe-res:CWE-770,
        cwe-res:CWE-79,
        cwe-res:CWE-918,
        cwe-res:CWE-94,
        cwe-res:CWE-943,
        cwe-res:CWE-98 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ASPECT-Enterprise, NEXUS, and MATRIX series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-51550; ABB reports the following products are affected: ABB NEXUS Series: NEXUS-3-x <=3.08.02 (CVE-2024-6515; CVE-2024-51544; CVE-2024-48847) ABB ASPECT-Enterprise: ASP-ENT-x <=3.08.02 (CVE-2024-6515; CVE-2024-51555).; CVE-2024-11317) ABB MATRIX Series: MAT-x <=3.08.02 (CVE-2024-6515; CVE-2024-48847) ABB MATRIX Series: MAT-x <=3.07.02 (CVE-2024-48845; CVE-2024-51543; CVE-2024-11317) ABB NEXUS Series: NEX-2x <=3.07.02 (CVE-2024-48845; CVE-2024-11317) ABB NEXUS Series: NEXUS-3-x <=3.08.01 (CVE-2024-6209; CVE-2024-51555) ABB NEXUS Series: NEX-2x <=3.08.01 (CVE-2024-6209; CVE-2024-51555) ABB ASPECT-Enterprise: ASP-ENT-x <=3.08.01 (CVE-2024-6209; CVE-2024-48847) ABB ASPECT-Enterprise: ASP-ENT-x <=3.07.02 (CVE-2024-48845; CVE-2024-51548; CVE-2024-11317) ABB MATRIX Series: MAT-x <=3.08.01 (CVE-2024-6209; CVE-2024-48840; CVE-2024-51549; CVE-2024-6298; CVE-2024-48846; CVE-2024-11316; CVE-2024-48839; CVE-2024-51542; CVE-2024-48843; CVE-2024-6784; CVE-2024-48847) ABB NEXUS Series: NEXUS-3-x <=3.07.02 (CVE-2024-48845; CVE-2024-51551; CVE-2024-48844; CVE-2024-51555) ABB NEXUS Series: NEX-2x <=3.08.02 (CVE-2024-6515; CVE-2024-51541; CVE-2024-6516; CVE-2024-51545; CVE-2024-51554; CVE-2024-51546" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-007-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-007-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-007-02" ;
    dcterms:issued "2025-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nedap Librix Ecoreader" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-12757" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2024-12757 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ecoreader" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Ecoreader are affected: Ecoreader: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-007-02" ;
    icsa:vendor "Nedap Librix" ;
    icsa:year 2025 .

icsa-res:ICSA-25-010-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-010-01" ;
    dcterms:issued "2025-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerChute Serial Shutdown" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-10511" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-10511 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerChute Serial Shutdown" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following versions of PowerChute Serial Shutdown are affected: PowerChute Serial Shutdown: Versions 1.2.0.301 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-010-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-010-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-010-02" ;
    dcterms:issued "2025-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Harmony HMI and Pro-face HMI Products" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-11999" ;
    icsa:cweNumber "CWE-1104" ;
    icsa:hasCVE cve-res:CVE-2024-11999 ;
    icsa:hasCWE cwe-res:CWE-1104 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Harmony HMI and Pro-face HMI Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following versions of Harmony HMI and Pro-face HMI are affected: Harmony HMIST6: All versions Harmony HMISTM6: All versions Harmony HMIG3U: All versions Harmony HMIG3X: All versions Harmony HMISTO7 series with Ecostruxure Operator Terminal Expert runtime: All versions PFXST6000: All versions PFXSTM6000: All versions PFXSP5000: All versions PFXGP4100 series with Pro-face BLUE runtime: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-010-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-010-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-010-03" ;
    dcterms:issued "2025-01-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DRASimuCAD (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-12836; CVE-2024-12835; CVE-2024-12834" ;
    icsa:cweNumber "CWE-843; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-12834,
        cve-res:CVE-2024-12835,
        cve-res:CVE-2024-12836 ;
    icsa:hasCWE cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DRASimuCAD" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DRASimuCAD; are affected: DRASimuCAD : Version 1.02.00.00 and prior.; a robotic simulation platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-010-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-014-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-014-01" ;
    dcterms:issued "2025-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy FOXMAN-UN" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-2012; CVE-2024-28021; CVE-2024-28023; CVE-2024-28024; CVE-2024-28020; CVE-2024-2011; CVE-2024-2013; CVE-2024-28022" ;
    icsa:cweNumber "CWE-307; CWE-122; CWE-286; CWE-88; CWE-288; CWE-259; CWE-312; CWE-295" ;
    icsa:hasCVE cve-res:CVE-2024-2011,
        cve-res:CVE-2024-2012,
        cve-res:CVE-2024-2013,
        cve-res:CVE-2024-28020,
        cve-res:CVE-2024-28021,
        cve-res:CVE-2024-28022,
        cve-res:CVE-2024-28023,
        cve-res:CVE-2024-28024 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-259,
        cwe-res:CWE-286,
        cwe-res:CWE-288,
        cwe-res:CWE-295,
        cwe-res:CWE-307,
        cwe-res:CWE-312,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FOXMAN-UN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-2012; CVE-2024-28021; Hitachi Energy reports that the following products are affected: Hitachi Energy FOXMAN-UN: All versions prior to R15A Hitachi Energy FOXMAN-UN: R15B (CVE-2024-28020; CVE-2024-28023) Hitachi Energy FOXMAN-UN: R16A Hitachi Energy FOXMAN-UN: R16B (CVE-2024-28020; CVE-2024-28024) Hitachi Energy FOXMAN-UN: R15B PC4 (CVE-2024-2013; CVE-2024-28023).; CVE-2024-28024) Hitachi Energy FOXMAN-UN: R16B PC2 (CVE-2024-2013; CVE-2024-2011; CVE-2024-28022" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-014-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-014-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-014-02" ;
    dcterms:issued "2025-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Vijeo Designer (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-8306" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2024-8306 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vijeo Designer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Vijeo Designer: All versions prior to 6.3 SP1 EcoStruxure Machine Expert (with Vijeo Designer): All versions prior to v2.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-014-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-014-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-014-03" ;
    dcterms:issued "2025-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-8401" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-8401 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Monitoring Expert, EcoStruxure Power Operation, EcoStruxure Power SCADA Operation 2020" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric EcoStruxure Power Monitoring Expert (PME) 2021: All versions prior to 2021 CU1 Schneider Electric EcoStruxure Power Monitoring Expert (PME) 2020: All versions prior to 2020 CU3 Schneider Electric EcoStruxure Power Operation (EPO) 2022: All versions prior to 2022 CU4 Schneider Electric EcoStruxure Power Operation (EPO) 2022 - Advanced Reporting and Dashboards Module: All versions prior to 2022 CU4 Schneider Electric EcoStruxure Power Operation (EPO) 2021: All versions prior to 2021 CU3 Hotfix 2 Schneider Electric EcoStruxure Power Operation (EPO) 2021 - Advanced Reporting and Dashboards Module: All versions prior to 2021 CU3 Hotfix 2 Schneider Electric EcoStruxure Power SCADA Operation 2020 (PSO) - Advanced Reporting and Dashboards Module: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-014-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-014-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-014-04" ;
    dcterms:issued "2025-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Belledonne Communications Linphone-Desktop" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-0430" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2025-0430 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Linphone-Desktop" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Linphone-Desktop is affected: Linphone-Desktop: Version 5.2.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-014-04" ;
    icsa:vendor "Belledonne Communications" ;
    icsa:year 2025 .

icsa-res:ICSA-25-016-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-016-01" ;
    dcterms:issued "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix LDAP" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-56841" ;
    icsa:cweNumber "CWE-90" ;
    icsa:hasCVE cve-res:CVE-2024-56841 ;
    icsa:hasCWE cwe-res:CWE-90 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix LDAP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Mendix LDAP: All versions prior to 1.1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-016-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-016-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-016-02" ;
    dcterms:issued "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Management" ;
    icsa:CVSSScore "2.1"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-45385" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2024-45385 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Edge Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Industrial Edge Management OS (IEM-OS): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-016-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-016-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-016-03" ;
    dcterms:issued "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Video Camera" ;
    icsa:CVSSScore "5.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-12569" ;
    icsa:cweNumber "CWE-532" ;
    icsa:hasCVE cve-res:CVE-2024-12569 ;
    icsa:hasCWE cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance Video Camera Drivers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siveillance Video Device Pack: Versions prior to V13.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-016-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-016-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-016-04" ;
    dcterms:issued "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5 Products" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-53649" ;
    icsa:cweNumber "CWE-552" ;
    icsa:hasCVE cve-res:CVE-2024-53649 ;
    icsa:hasCWE cwe-res:CWE-552 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIPROTEC 5 6MD84 (CP300): Versions prior to 9.80 Siemens SIPROTEC 5 7SA87 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7SD82 (CP100): Versions 7.80 and after Siemens SIPROTEC 5 7SD82 (CP150): Versions prior to 9.80 Siemens SIPROTEC 5 7SD86 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7SD87 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7SJ81 (CP100): Versions 7.80 and after Siemens SIPROTEC 5 7SJ81 (CP150): Versions prior to 9.80 Siemens SIPROTEC 5 7SJ82 (CP100): Versions 7.80 and after Siemens SIPROTEC 5 7SJ82 (CP150): Versions prior to 9.80 Siemens SIPROTEC 5 7SJ85 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 6MD85 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7SJ86 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7SK82 (CP100): Versions 7.80 and after Siemens SIPROTEC 5 7SK82 (CP150): Versions prior to 9.80 Siemens SIPROTEC 5 7SK85 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7SL82 (CP100): Versions 7.80 and after Siemens SIPROTEC 5 7SL82 (CP150): Versions prior to 9.80 Siemens SIPROTEC 5 7SL86 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7SL87 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7SS85 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7ST85 (CP300): All versions Siemens SIPROTEC 5 6MD86 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7ST86 (CP300): Versions prior to 9.80 Siemens SIPROTEC 5 7SX82 (CP150): Versions prior to 9.80 Siemens SIPROTEC 5 7SX85 (CP300): Versions prior to 9.80 Siemens SIPROTEC 5 7SY82 (CP150): Versions prior to 9.80 Siemens SIPROTEC 5 7UM85 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7UT82 (CP100): Versions 7.80 and after Siemens SIPROTEC 5 7UT82 (CP150): Versions prior to V9.80 Siemens SIPROTEC 5 7UT85 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7UT86 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7UT87 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 6MD89 (CP300): Versions 7.80 and after Siemens SIPROTEC 5 7VE85 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7VK87 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7VU85 (CP300): Versions prior to 9.80 Siemens SIPROTEC 5 Compact 7SX800 (CP050): Versions prior to V9.80 Siemens SIPROTEC 5 6MU85 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7KE85 (CP300): Versions 7.80 up to but not including 9.80 Siemens SIPROTEC 5 7SA82 (CP100): Versions 7.80 and after Siemens SIPROTEC 5 7SA82 (CP150): Versions prior to 9.80 Siemens SIPROTEC 5 7SA86 (CP300): Versions 7.80 up to but not including 9.80." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-016-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-016-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-016-05" ;
    dcterms:issued "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Alpha5 SMART" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-34579" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-34579 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alpha5 SMART" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Fuji Electric Alpha5 SMART; are affected: Alpha5 SMART: Versions 4.5 and prior.; a servo drive system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-016-05" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-016-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-016-06" ;
    dcterms:issued "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-2462" ;
    icsa:cweNumber "CWE-297" ;
    icsa:hasCVE cve-res:CVE-2024-2462 ;
    icsa:hasCWE cwe-res:CWE-297 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FOX61x, FOXCST, FOXMAN-UN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: FOX61x: Versions prior to R16B FOXCST: Versions prior to 16.2.1 FOXMAN-UN: R15A and prior FOXMAN-UN: R15B PC4 and prior FOXMAN-UN: R16A FOXMAN-UN: R16B PC2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-016-06" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-016-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-016-07" ;
    dcterms:issued "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy FOX61x Products" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-2461" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2024-2461 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FOX61x Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports the following products are affected: Hitachi Energy FOX61x: R15A and prior Hitachi Energy FOX61x: R15B Hitachi Energy FOX61x: R16A Hitachi Energy FOX61x: R16B Revision E." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-016-07" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-016-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-016-08" ;
    dcterms:issued "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Data Center Expert" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8531; CVE-2024-8530" ;
    icsa:cweNumber "CWE-306; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2024-8530,
        cve-res:CVE-2024-8531 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Data Center Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric Data Center Expert: 8.1.1.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-016-08" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-021-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-021-01" ;
    dcterms:issued "2025-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Traffic Alert and Collision Avoidance System (TCAS) II" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2024-9310; CVE-2024-11166" ;
    icsa:cweNumber "CWE-807; CWE-15" ;
    icsa:hasCVE cve-res:CVE-2024-11166,
        cve-res:CVE-2024-9310 ;
    icsa:hasCWE cwe-res:CWE-15,
        cwe-res:CWE-807 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Collision Avoidance Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following revisions of TCAS II are affected: TCAS II: Versions 7.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-021-01" ;
    icsa:vendor "Traffic Alert and Collision Avoidance System (TCAS) II" ;
    icsa:year 2025 .

icsa-res:ICSA-25-021-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-021-02" ;
    dcterms:issued "2025-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 CPUs" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-47100" ;
    icsa:cweNumber "CWE-352" ;
    icsa:hasCVE cve-res:CVE-2024-47100 ;
    icsa:hasCWE cwe-res:CWE-352 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 CPUs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0): Versions prior to V4.7 SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0): Versions prior to V4.7 SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0): Versions prior to V4.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-021-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-021-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-021-03" ;
    dcterms:issued "2025-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "ZF Roll Stability Support Plus (RSSPlus)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2024-12054" ;
    icsa:cweNumber "CWE-305" ;
    icsa:hasCVE cve-res:CVE-2024-12054 ;
    icsa:hasCWE cwe-res:CWE-305 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RSSPlus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of RSSPlus are affected: RSSPlus 2M: build dates 01/08 through at least 01/23." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-021-03" ;
    icsa:vendor "ZF" ;
    icsa:year 2025 .

icsa-res:ICSA-25-023-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-023-01" ;
    dcterms:issued "2025-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO Manager" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-20014; CVE-2025-20061" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-20014,
        cve-res:CVE-2025-20061 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "myPRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following mySCADA products are affected: myPRO Manager: Versions prior to 1.3 myPRO Runtime: Versions prior to 9.2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-023-01" ;
    icsa:vendor "mySCADA" ;
    icsa:year 2025 .

icsa-res:ICSA-25-023-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-023-02" ;
    dcterms:issued "2024-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 Series Product (Update B)" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-2617" ;
    icsa:cweNumber "CWE-358" ;
    icsa:hasCVE cve-res:CVE-2024-2617 ;
    icsa:hasCWE cwe-res:CWE-358 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy RTU500 Series Product" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RTU500 series CMU Firmware version 13.5.1 - 13.5.3; RTU500 series CMU Firmware version 13.2.1 - 13.2.7; RTU500 series CMU Firmware version 13.4.1 - 13.4.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-023-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2024 .

icsa-res:ICSA-25-023-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-023-03" ;
    dcterms:issued "2025-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EVlink Home Smart and Schneider Charge" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2024-8070" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2024-8070 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EVlink Home Smart and Schneider Charge" ;
    icsa:productDistribution "Europe, Asia Pacific, Middle East, and Africa" ;
    icsa:productsAffected "Schneider Electric reports that the following EVlink Home Smart and Schneider Charge charging stations are affected: EVlink Home Smart: All versions prior to 2.0.6.0.0 Schneider Charge: All versions prior to 1.13.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-023-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-023-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-023-04" ;
    dcterms:issued "2025-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Easergy Studio" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Healthcare and Public Health; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-9002" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2024-9002 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Easergy Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following Easergy Studio products are affected: Easergy Studio: Versions 9.3.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-023-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-023-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-023-05" ;
    dcterms:issued "2025-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Build Rapsody (Update A)" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-11139" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2024-11139 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Build Rapsody" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: EcoStruxure Power Build Rapsody: Version v2.7.5 ES and prior EcoStruxure Power Build Rapsody: Version v2.7.1 FR and prior EcoStruxure Power Build Rapsody: Version v2.5.2 NL and prior EcoStruxure Power Build Rapsody: Version v2.6.4 INT and prior.; Schneider Electric reports the following versions of EcoStruxure Power Build; a configuration program for panel builders" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-023-05" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-023-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-023-06" ;
    dcterms:issued "2025-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "HMS Networks Ewon Flexy 202" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-0432" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2025-0432 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ewon Flexy 202" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following HMS Networks products are affected: Ewon Flexy 202: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-023-06" ;
    icsa:vendor "HMS Networks" ;
    icsa:year 2025 .

icsa-res:ICSA-25-028-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-028-01" ;
    dcterms:issued "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "B&R Automation Runtime" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8603" ;
    icsa:cweNumber "CWE-327" ;
    icsa:hasCVE cve-res:CVE-2024-8603 ;
    icsa:hasCWE cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automation Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "B&R reports that the following products are affected: B&R Automation Runtime: versions prior to 6.1 B&R mapp View: versions prior to 6.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-028-01" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2025 .

icsa-res:ICSA-25-028-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-028-02" ;
    dcterms:issued "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Power Logic" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-10497; CVE-2024-10498" ;
    icsa:cweNumber "CWE-119; CWE-639" ;
    icsa:hasCVE cve-res:CVE-2024-10497,
        cve-res:CVE-2024-10498 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Power Logic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric Power Logic: v0.62.7 (CVE-2024-10497) Schneider Electric Power Logic: v0.62.7 and prior (CVE-2024-10498)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-028-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-028-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-028-03" ;
    dcterms:issued "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-24479; CVE-2025-24480" ;
    icsa:cweNumber "CWE-78; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2025-24479,
        cve-res:CVE-2025-24480 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation FactoryTalk View ME are affected: FactoryTalk View ME: All versions prior to 15.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-028-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-028-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-028-04" ;
    dcterms:issued "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-24482; CVE-2025-24481" ;
    icsa:cweNumber "CWE-94; CWE-732" ;
    icsa:hasCVE cve-res:CVE-2025-24481,
        cve-res:CVE-2025-24482 ;
    icsa:hasCWE cwe-res:CWE-732,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation Factory Talk are affected: FactoryTalk: All versions prior to 15.0 FactoryTalk View SE: All versions prior to 15.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-028-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-028-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-028-05" ;
    dcterms:issued "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation DataMosaix Private Cloud" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-11932; CVE-2020-11656" ;
    icsa:cweNumber "CWE-1395; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2020-11656,
        cve-res:CVE-2024-11932 ;
    icsa:hasCWE cwe-res:CWE-1395,
        cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DataMosaix Private Cloud" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following versions of DataMosaix Private Cloud are affected: DataEdgePlatform DataMosaix Private Cloud: Version 7.11 and prior (CVE-2025-0659) DataEdgePlatform DataMosaix Private Cloud: Versions 7.09 and prior (CVE-2020-11656)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-028-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-028-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-028-06" ;
    dcterms:issued "2025-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric RemoteConnect and SCADAPack x70 Utilities (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-12703" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-12703 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric RemoteConnect and SCADAPack x70 Utilities" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RemoteConnect and SCADAPack x70 Utilities - RemoteConnect versions prior to R3.4.2; RemoteConnect and SCADAPack x70 Utilities - Security Administrator All Versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-028-06" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-030-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-030-01" ;
    dcterms:issued "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy UNEM" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-2012; CVE-2024-28021; CVE-2024-28023; CVE-2024-28024; CVE-2024-28020; CVE-2024-2011; CVE-2024-2013; CVE-2024-28022" ;
    icsa:cweNumber "CWE-307; CWE-122; CWE-286; CWE-88; CWE-288; CWE-259; CWE-312; CWE-295" ;
    icsa:hasCVE cve-res:CVE-2024-2011,
        cve-res:CVE-2024-2012,
        cve-res:CVE-2024-2013,
        cve-res:CVE-2024-28020,
        cve-res:CVE-2024-28021,
        cve-res:CVE-2024-28022,
        cve-res:CVE-2024-28023,
        cve-res:CVE-2024-28024 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-259,
        cwe-res:CWE-286,
        cwe-res:CWE-288,
        cwe-res:CWE-295,
        cwe-res:CWE-307,
        cwe-res:CWE-312,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UNEM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: UNEM: Versions R15A and prior UNEM: R15B (CVE-2024-28022; CVE-2024-2012; CVE-2024-28021; CVE-2024-28020) UNEM: R16B PC2 (CVE-2024-2013; CVE-2024-28023).; CVE-2024-28023) UNEM: R16A UNEM: R16B (CVE-2024-28022; CVE-2024-28024; CVE-2024-28020) UNEM: R15B PC4 (CVE-2024-2013; CVE-2024-2011" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-030-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-030-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-030-02" ;
    dcterms:issued "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "New Rock Technologies Cloud Connected Devices" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Communications; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-0681; CVE-2025-0680" ;
    icsa:cweNumber "CWE-155; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-0680,
        cve-res:CVE-2025-0681 ;
    icsa:hasCWE cwe-res:CWE-155,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cloud Connected Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of New Rock Technologies Cloud Connected Devices are affected: OM500 IP-PBX: All versions MX8G VoIP Gateway: All versions NRP1302/P Desktop IP Phone: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-030-02" ;
    icsa:vendor "New Rock Technologies" ;
    icsa:year 2025 .

icsa-res:ICSA-25-030-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-030-03" ;
    dcterms:issued "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-8884" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2024-8884 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Harmony Industrial PC, Pro-face Industrial PC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: System Monitor application in Harmony Industrial PC: All versions System Monitor application in Pro-face Industrial PC: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-030-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-030-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-030-04" ;
    dcterms:issued "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation KEPServer" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3825" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2023-3825 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KEPServer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation's KEPServer are affected: KEPServer: Versions 6.0 - 6.14.263." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-030-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-030-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-030-05" ;
    dcterms:issued "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk AssetCentre" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-0498; CVE-2025-0497; CVE-2025-0477" ;
    icsa:cweNumber "CWE-522; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2025-0477,
        cve-res:CVE-2025-0497,
        cve-res:CVE-2025-0498 ;
    icsa:hasCWE cwe-res:CWE-326,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk AssetCentre" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation FactoryTalk AssetCentre are affected: FactoryTalk AssetCentre: All versions prior to V15.00.001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-030-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-035-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-035-01" ;
    dcterms:issued "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Western Telematic Inc NPS Series, DSM Series, CPM Series" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-0630" ;
    icsa:cweNumber "CWE-73" ;
    icsa:hasCVE cve-res:CVE-2025-0630 ;
    icsa:hasCWE cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NPS Series, DSM Series, CPM Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Western Telematic Inc products are affected: Network Power Switch (NPS Series): Firmware Version 6.62 and prior Console Server (DSM Series): Firmware Version 6.62 and prior Console Server + PDU Combo Unit (CPM Series): Firmware Version 6.62 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-035-01" ;
    icsa:vendor "Western Telematic Inc" ;
    icsa:year 2025 .

icsa-res:ICSA-25-035-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-035-02" ;
    dcterms:issued "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation GuardLogix 5380 and 5580 (Update A)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-24478" ;
    icsa:cweNumber "CWE-755" ;
    icsa:hasCVE cve-res:CVE-2025-24478 ;
    icsa:hasCWE cwe-res:CWE-755 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GuardLogix 5380 and 5580" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "V36.011.; V35.013; V34.014; The following Rockwell Automation products are affected: GuardLogix 5580 (SIL 3 with the safety partner 3): Versions prior to V33.017; V36.011 Compact GuardLogix 5380 SIL 3: Versions prior to V33.017" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-035-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-035-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-035-03" ;
    dcterms:issued "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Elber Communications Equipment" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-0675; CVE-2025-0674" ;
    icsa:cweNumber "CWE-912; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-0674,
        cve-res:CVE-2025-0675 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Communications Equipment" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Elber Communications Equipment are affected: Signum DVB-S/S2 IRD: Versions 1.999 and prior Cleber/3 Broadcast Multi-Purpose Platform: Version 1.0 Reble610 M/ODU XPIC IP-ASI-SDH: Version 0.01 ESE DVB-S/S2 Satellite Receiver: Versions 1.5.179 and prior Wayber Analog/Digital Audio STL: Version 4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-035-03" ;
    icsa:vendor "Elber" ;
    icsa:year 2025 .

icsa-res:ICSA-25-035-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-035-04" ;
    dcterms:issued "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-11425" ;
    icsa:cweNumber "CWE-131" ;
    icsa:hasCVE cve-res:CVE-2024-11425 ;
    icsa:hasCWE cwe-res:CWE-131 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "BMENOR2200H and EVLink Pro AC are affected: Modicon M580 CPU (part numbers BMEP* and BMEH*; excluding M580 CPU Safety): Versions prior to SV4.30 Modicon M580 CPU Safety (part numbers BMEP58-S and BMEH58-S): Versions prior to SV4.21 BMENOR2200H: Versions prior to SV4.02.01 EVLink Pro AC: Versions prior to v1.3.10.; The following versions of Modicon M580 PLCs" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-035-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-035-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-035-05" ;
    dcterms:issued "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Web Designer for Modicon" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-12476" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2024-12476 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Web Designer for Modicon" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Web Designer for Modicon are affected: Web Designer for BMXNOR0200H: All versions Web Designer for BMXNOE0110(H): All versions Web Designer for BMENOC0311(C): All versions Web Designer for BMENOC0321(C): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-035-05" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-035-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-035-06" ;
    dcterms:issued "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-12142" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2024-12142 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric BMXNOR0200H Ethernet / Serial RTU module: <SV1.70IR26; Schneider Electric Modicon M340 Firmware Version SV3.70 installed on Modicon M340 processors (part numbers BMXP34*): vers:all/*; Schneider Electric Modicon M340 Firmware Versions prior to SV3.70 installed on Modicon M340 processors (part numbers BMXP34*): vers:all/*; Schneider Electric BMXNOE0100 Modbus/TCP Ethernet Modicon M340 module: <SV3.60; Schneider Electric Modicon M340 processors (part numbers BMXP34*): <SV3.70; Schneider Electric BMXNOE0110 Modbus/TCP Ethernet Modicon M340 FactoryCast module: <SV6.80" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-035-06" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-035-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-035-07" ;
    dcterms:issued "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Pro-Face GP-Pro EX and Remote HMI (Update A)" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-12399" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2024-12399 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro-face GP-Pro EX and Remote HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Pro-face GP-Pro EX and Remote HMI are affected: Pro-face GP-Pro EX: All versions prior to 5.00.100 Pro-face Remote HMI: All versions prior to 1.70.000." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-035-07" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-035-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-035-08" ;
    dcterms:issued "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect C-more EA9 HMI" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-0960" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2025-0960 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "C-more EA9 HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Automation Direct products are affected: C-more EA9 HMI EA9-T6CL: v6.79 and prior C-more EA9 HMI EA9-T7CL-R: v6.79 and prior C-more EA9 HMI EA9-T7CL: v6.79 and prior C-more EA9 HMI EA9-T8CL: v6.79 and prior C-more EA9 HMI EA9-T10CL: v6.79 and prior C-more EA9 HMI EA9-T10WCL: v6.79 and prior C-more EA9 HMI EA9-T12CL: v6.79 and prior C-more EA9 HMI EA9-T15CL-R: v6.79 and prior C-more EA9 HMI EA9-T15CL: v6.79 and prior C-more EA9 HMI EA9-RHMI: v6.79 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-035-08" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2025 .

icsa-res:ICSA-25-037-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-037-01" ;
    dcterms:issued "2025-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update B)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-9005" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-9005 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Monitoring Expert (PME)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following products are affected: Schneider Electric EcoStruxure Power Monitoring Expert (PME): 2022 Schneider Electric EcoStruxure Power Monitoring Expert (PME): Versions 2021 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-037-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-037-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-037-02" ;
    dcterms:issued "2025-01-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure (Update D)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-2658" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2024-2658 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Machine Expert versions prior to v2.5.0.1; EcoStruxure Machine Expert Twin versions prior to v2.3; EcoStruxure Machine Expert Safety All versions; EcoStruxure Process Expert Versions prior to 2023; EcoStruxure Process Expert Versions prior to 2023 (v4.8.0.5715); EcoStruxure OPC UA Server Expert Versions prior to SV2.01SP3; EcoStruxure Architecture Builder Versions prior to V7.0.18; Pro-face BLUE Versions prior to V4.0; EcoStruxure Machine SCADA Expert Asset Link All versions; Zelio Soft 2 Versions prior to v5.4.3; Vijeo Designer Version prior to V6.3SP1 HF1; EcoStruxure Operator Terminal Expert Versions prior to V4.0; EcoStruxure Control Expert Asset Link Versions prior to V4.0 SP1; EcoStruxure Process Expert for AVEVA System Platform All versions; EcoStruxure Control Expert Versions prior to V16.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-037-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-037-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-037-03" ;
    dcterms:issued "2025-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Drive Composer" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-48510" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2024-48510 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Drive Composer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the following Drive Composer products are affected: Drive Composer entry: Version 2.9.0.1 and prior Drive Composer pro: Version 2.9.0.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-037-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-037-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-037-04" ;
    dcterms:issued "2025-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trimble Cityworks (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Water and Wastewater Systems; Energy; Transportation Systems; Government Facilities; Communications" ;
    icsa:cveNumber "CVE-2025-0994" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-0994 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cityworks" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an asset and work management system; The following versions of Trimble Cityworks; are affected: Cityworks: All versions prior to 15.8.9 Cityworks with office companion: All versions prior to 23.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-037-04" ;
    icsa:vendor "Trimble" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-01" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 CPU Family" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-24812; CVE-2025-24811" ;
    icsa:cweNumber "CWE-404; CWE-1286" ;
    icsa:hasCVE cve-res:CVE-2025-24811,
        cve-res:CVE-2025-24812 ;
    icsa:hasCWE cwe-res:CWE-1286,
        cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 CPU Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0): vers:all/<V4.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-02" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "iemens SIMATIC" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-37482" ;
    icsa:cweNumber "CWE-203" ;
    icsa:hasCVE cve-res:CVE-2023-37482 ;
    icsa:hasCWE cwe-res:CWE-203 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following SIMATIC products are affected: Siemens SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RM03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1513pro-2 PN (6ES7513-2PM03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP (6AG1518-4AP00-4AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1517H-3 PN (6ES7517-3HP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0): vers:all/<V4.7 Siemens SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1500 CPU 1517H-3 PN (6AG1517-3HP00-4AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1512SP-1 PN (6ES7512-1DM03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0): vers:all/<V4.7 Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): vers:all/>=V30.1.0 Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1516pro-2 PN (6ES7516-2PP03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1513pro F-2 PN (6ES7513-2GM03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP01-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1514SP-2 PN (6ES7514-2DN03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0): vers:all/<V4.7 Siemens SIMATIC S7-PLCSIM Advanced: vers:all/>=V6.0|<V7.0 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CM03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RN03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1500 CPU 1518HF-4 PN (6AG1518-4JP00-4AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0): vers:all/<V4.7 Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0): vers:all/<V4.7 Siemens SIPLUS S7-1500 CPU 1518F-4 PN/DP (6AG1518-4FP00-4AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1518HF-4 PN (6ES7518-4JP00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0): vers:all/<V4.7 Siemens SIMATIC S7-1500 CPU 1516pro F-2 PN (6ES7516-2GP03-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0): vers:all/>=V3.1.0|<V3.1.2 Siemens SIMATIC S7-1500 Software Controller: vers:all/>=V30.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-03" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-53651" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2024-53651 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens SIPROTEC 5 7SK85 (CP300): vers:all/* Siemens SIPROTEC 5 7SJ81 (CP100): vers:all/* Siemens SIPROTEC 5 7SL86 (CP300): vers:all/* Siemens SIPROTEC 5 7SL86 (CP200): vers:all/* Siemens SIPROTEC 5 7SJ86 (CP300): vers:all/* Siemens SIPROTEC 5 7SK82 (CP100): vers:all/* Siemens SIPROTEC 5 6MD84 (CP300): vers:all/* Siemens SIPROTEC 5 7SA87 (CP200): vers:all/* Siemens SIPROTEC 5 7ST85 (CP300): vers:all/* Siemens SIPROTEC 5 7SD87 (CP200): vers:all/* Siemens SIPROTEC 5 7UT87 (CP300): vers:all/* Siemens SIPROTEC 5 6MD89 (CP300): vers:all/* Siemens SIPROTEC 5 7SD82 (CP100): vers:all/* Siemens SIPROTEC 5 6MD85 (CP300): vers:all/* Siemens SIPROTEC 5 7ST86 (CP300): vers:all/* Siemens SIPROTEC 5 7SJ82 (CP150): vers:all/* Siemens SIPROTEC 5 7UT86 (CP200): vers:all/* Siemens SIPROTEC 5 7SX85 (CP300): vers:all/* Siemens SIPROTEC 5 7SD87 (CP300): vers:all/* Siemens SIPROTEC 5 7VU85 (CP300): vers:all/* Siemens SIPROTEC 5 6MU85 (CP300): vers:all/* Siemens SIPROTEC 5 7SD86 (CP300): vers:all/* Siemens SIPROTEC 5 7UT86 (CP300): vers:all/* Siemens SIPROTEC 5 7VK87 (CP200): vers:all/* Siemens SIPROTEC 5 7UT85 (CP300): vers:all/* Siemens SIPROTEC 5 7UT82 (CP150): vers:all/* Siemens SIPROTEC 5 7SA87 (CP300): vers:all/* Siemens SIPROTEC 5 7SJ81 (CP150): vers:all/* Siemens SIPROTEC 5 7SJ82 (CP100): vers:all/* Siemens SIPROTEC 5 7SA82 (CP100): vers:all/* Siemens SIPROTEC 5 7UT87 (CP200): vers:all/* Siemens SIPROTEC 5 7SX82 (CP150): vers:all/* Siemens SIPROTEC 5 7SD86 (CP200): vers:all/* Siemens SIPROTEC 5 7SL87 (CP300): vers:all/* Siemens SIPROTEC 5 6MD85 (CP200): vers:all/* Siemens SIPROTEC 5 7ST85 (CP200): vers:all/* Siemens SIPROTEC 5 Compact 7SX800 (CP050): vers:all/* Siemens SIPROTEC 5 6MD86 (CP300): vers:all/* Siemens SIPROTEC 5 7SD82 (CP150): vers:all/* Siemens SIPROTEC 5 7KE85 (CP300): vers:all/* Siemens SIPROTEC 5 7SL82 (CP100): vers:all/* Siemens SIPROTEC 5 7SL82 (CP150): vers:all/* Siemens SIPROTEC 5 7VE85 (CP300): vers:all/* Siemens SIPROTEC 5 7KE85 (CP200): vers:all/* Siemens SIPROTEC 5 7SA86 (CP200): vers:all/* Siemens SIPROTEC 5 7SL87 (CP200): vers:all/* Siemens SIPROTEC 5 7SY82 (CP150): vers:all/* Siemens SIPROTEC 5 6MD86 (CP200): vers:all/* Siemens SIPROTEC 5 7SJ86 (CP200): vers:all/* Siemens SIPROTEC 5 7SA86 (CP300): vers:all/* Siemens SIPROTEC 5 7UM85 (CP300): vers:all/* Siemens SIPROTEC 5 7SS85 (CP300): vers:all/* Siemens SIPROTEC 5 7SK82 (CP150): vers:all/* Siemens SIPROTEC 5 7UT82 (CP100): vers:all/* Siemens SIPROTEC 5 7SS85 (CP200): vers:all/* Siemens SIPROTEC 5 7SJ85 (CP200): vers:all/* Siemens SIPROTEC 5 7UT85 (CP200): vers:all/* Siemens SIPROTEC 5 7SK85 (CP200): vers:all/* Siemens SIPROTEC 5 7VK87 (CP300): vers:all/* Siemens SIPROTEC 5 7SJ85 (CP300): vers:all/* Siemens SIPROTEC 5 7SA82 (CP150): vers:all/*." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-04" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-53648" ;
    icsa:cweNumber "CWE-489" ;
    icsa:hasCVE cve-res:CVE-2024-53648 ;
    icsa:hasCWE cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIPROTEC 5 7SK85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SJ81 (CP100): All versions Siemens SIPROTEC 5 7SL86 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SL86 (CP200): All versions Siemens SIPROTEC 5 7SJ86 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SK82 (CP100): All versions Siemens SIPROTEC 5 6MD84 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SA87 (CP200): All versions Siemens SIPROTEC 5 7ST85 (CP300): All versions Siemens SIPROTEC 5 7SD87 (CP200): All versions Siemens SIPROTEC 5 7UT87 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 6MD89 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SD82 (CP100): All versions Siemens SIPROTEC 5 6MD85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7ST86 (CP300): All versions Siemens SIPROTEC 5 7SJ82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7UT86 (CP200): All versions Siemens SIPROTEC 5 7SX85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SD87 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7VU85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 6MU85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SD86 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7UT86 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7VK87 (CP200): All versions Siemens SIPROTEC 5 7UT85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7UT82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SA87 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SJ81 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SJ82 (CP100): All versions Siemens SIPROTEC 5 7SA82 (CP100): All versions Siemens SIPROTEC 5 7UT87 (CP200): All versions Siemens SIPROTEC 5 7SX82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SD86 (CP200): All versions Siemens SIPROTEC 5 7SL87 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 6MD85 (CP200): All versions Siemens SIPROTEC 5 7ST85 (CP200): All versions Siemens SIPROTEC 5 Compact 7SX800 (CP050): All versions prior to V9.90 Siemens SIPROTEC 5 6MD86 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SD82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7KE85 (CP300): All versions Siemens SIPROTEC 5 7SL82 (CP100): All versions Siemens SIPROTEC 5 7SL82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7VE85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7KE85 (CP200): All versions Siemens SIPROTEC 5 7SA86 (CP200): All versions Siemens SIPROTEC 5 7SL87 (CP200): All versions Siemens SIPROTEC 5 7SY82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 6MD86 (CP200): All versions Siemens SIPROTEC 5 7SJ86 (CP200): All versions Siemens SIPROTEC 5 7SA86 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7UM85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SS85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SK82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7UT82 (CP100): All versions Siemens SIPROTEC 5 7SS85 (CP200): All versions Siemens SIPROTEC 5 7SJ85 (CP200): All versions Siemens SIPROTEC 5 7UT85 (CP200): All versions Siemens SIPROTEC 5 7SK85 (CP200): All versions Siemens SIPROTEC 5 7VK87 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SJ85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SA82 (CP150): All versions prior to V9.90." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-05" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5 Devices" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-54015" ;
    icsa:cweNumber "CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2024-54015 ;
    icsa:hasCWE cwe-res:CWE-1392 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIPROTEC 5 7VE85 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7SS85 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2): All versions prior to V9.90 Siemens SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2): All versions prior to V9.90 Siemens SIPROTEC 5 7UT82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7UT85 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 6MD84 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SJ82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SL86 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7KE85 (CP300): Versions later than and including V8.80 Siemens SIPROTEC 5 7SJ86 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 6MD86 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7SX82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SL87 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7SA82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SL82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SJ85 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7ST85 (CP300): Versions later than and including V8.80 Siemens SIPROTEC 5 7ST86 (CP300): All versions Siemens SIPROTEC 5 7SD82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SK85 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 Compact 7SX800 (CP050): Version V9.50 up to but not including V9.90 Siemens SIPROTEC 5 6MD85 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 6MU85 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7SK82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SA87 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7VK87 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7VU85 (CP300): All versions prior to V9.90 Siemens SIPROTEC 5 7SA86 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7SD87 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 Communication Module ETH-BD-2FO: Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 6MD89 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7UM85 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7SJ81 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7UT86 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7SX85 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7UT87 (CP300): Version V8.80 up to but not including V9.90 Siemens SIPROTEC 5 7SY82 (CP150): All versions prior to V9.90 Siemens SIPROTEC 5 7SD86 (CP300): Version V8.80 up to but not including V9.90." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-06" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 Devices" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-52963; CVE-2024-36504; CVE-2024-46665; CVE-2024-46670; CVE-2024-48884; CVE-2024-48885; CVE-2024-46666; CVE-2024-46669; CVE-2024-54021; CVE-2024-46668" ;
    icsa:cweNumber "CWE-22; CWE-113; CWE-770; CWE-201; CWE-787; CWE-190; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-36504,
        cve-res:CVE-2024-46665,
        cve-res:CVE-2024-46666,
        cve-res:CVE-2024-46668,
        cve-res:CVE-2024-46669,
        cve-res:CVE-2024-46670,
        cve-res:CVE-2024-48884,
        cve-res:CVE-2024-48885,
        cve-res:CVE-2024-52963,
        cve-res:CVE-2024-54021 ;
    icsa:hasCWE cwe-res:CWE-113,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-201,
        cwe-res:CWE-22,
        cwe-res:CWE-770,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens RUGGEDCOM APE1808: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-07" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-23363" ;
    icsa:cweNumber "CWE-601" ;
    icsa:hasCVE cve-res:CVE-2025-23363 ;
    icsa:hasCWE cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Teamcenter: All versions prior to V14.3.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-08" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OpenV2G" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-24956" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2025-24956 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenV2G" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens OpenV2G: All versions prior to V0.9.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-09" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE W700" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-2663; CVE-2023-44322; CVE-2024-5535; CVE-2024-9143; CVE-2022-40304; CVE-2023-0465; CVE-2023-4623; CVE-2023-0466; CVE-2023-1118; CVE-2023-1206; CVE-2023-3446; CVE-2023-6129; CVE-2024-26306; CVE-2025-24532; CVE-2023-1380; CVE-2023-31085; CVE-2024-2511; CVE-2024-50572; CVE-2022-4450; CVE-2022-47929; CVE-2023-1073; CVE-2023-23455; CVE-2022-4304; CVE-2023-28578; CVE-2023-48795; CVE-2023-45863; CVE-2024-50561; CVE-2025-24499; CVE-2024-0727; CVE-2024-4741; CVE-2023-35001; CVE-2023-29469; CVE-2024-33016; CVE-2023-1074; CVE-2023-5678; CVE-2023-0045; CVE-2024-6119; CVE-2022-39842; CVE-2022-43750; CVE-2022-2588; CVE-2022-3524; CVE-2023-1670; CVE-2022-40303; CVE-2023-0590; CVE-2023-7250; CVE-2024-23814; CVE-2023-44320; CVE-2023-31315; CVE-2023-6237; CVE-2023-2194; CVE-2022-47069; CVE-2023-5363; CVE-2023-5717; CVE-2023-39192; CVE-2023-4921; CVE-2023-0215; CVE-2022-39188; CVE-2023-23454; CVE-2023-39193; CVE-2023-45853; CVE-2023-51385; CVE-2023-0464; CVE-2024-4603; CVE-2023-28484; CVE-2023-23559; CVE-2023-42754; CVE-2024-50560; CVE-2023-0286; CVE-2023-3611; CVE-2023-26545; CVE-2023-51384; CVE-2023-43522" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-79; CWE-183; CWE-476; CWE-754; CWE-400; CWE-404; CWE-200; CWE-1333; CWE-401; CWE-326; CWE-20; CWE-362; CWE-190; CWE-843; CWE-74; CWE-425; CWE-252; CWE-834; CWE-304; CWE-787; CWE-284; CWE-923; CWE-684; CWE-78; CWE-119; CWE-203; CWE-222; CWE-610; CWE-369; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-2588,
        cve-res:CVE-2022-2663,
        cve-res:CVE-2022-3524,
        cve-res:CVE-2022-39188,
        cve-res:CVE-2022-39842,
        cve-res:CVE-2022-40303,
        cve-res:CVE-2022-40304,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-43750,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2022-47069,
        cve-res:CVE-2022-47929,
        cve-res:CVE-2023-0045,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0464,
        cve-res:CVE-2023-0465,
        cve-res:CVE-2023-0466,
        cve-res:CVE-2023-0590,
        cve-res:CVE-2023-1073,
        cve-res:CVE-2023-1074,
        cve-res:CVE-2023-1118,
        cve-res:CVE-2023-1206,
        cve-res:CVE-2023-1380,
        cve-res:CVE-2023-1670,
        cve-res:CVE-2023-2194,
        cve-res:CVE-2023-23454,
        cve-res:CVE-2023-23455,
        cve-res:CVE-2023-23559,
        cve-res:CVE-2023-26545,
        cve-res:CVE-2023-28484,
        cve-res:CVE-2023-28578,
        cve-res:CVE-2023-29469,
        cve-res:CVE-2023-31085,
        cve-res:CVE-2023-31315,
        cve-res:CVE-2023-3446,
        cve-res:CVE-2023-35001,
        cve-res:CVE-2023-3611,
        cve-res:CVE-2023-39192,
        cve-res:CVE-2023-39193,
        cve-res:CVE-2023-42754,
        cve-res:CVE-2023-43522,
        cve-res:CVE-2023-44320,
        cve-res:CVE-2023-44322,
        cve-res:CVE-2023-45853,
        cve-res:CVE-2023-45863,
        cve-res:CVE-2023-4623,
        cve-res:CVE-2023-48795,
        cve-res:CVE-2023-4921,
        cve-res:CVE-2023-51384,
        cve-res:CVE-2023-51385,
        cve-res:CVE-2023-5363,
        cve-res:CVE-2023-5678,
        cve-res:CVE-2023-5717,
        cve-res:CVE-2023-6129,
        cve-res:CVE-2023-6237,
        cve-res:CVE-2023-7250,
        cve-res:CVE-2024-0727,
        cve-res:CVE-2024-23814,
        cve-res:CVE-2024-2511,
        cve-res:CVE-2024-26306,
        cve-res:CVE-2024-33016,
        cve-res:CVE-2024-4603,
        cve-res:CVE-2024-4741,
        cve-res:CVE-2024-50560,
        cve-res:CVE-2024-50561,
        cve-res:CVE-2024-50572,
        cve-res:CVE-2024-5535,
        cve-res:CVE-2024-6119,
        cve-res:CVE-2024-9143,
        cve-res:CVE-2025-24499,
        cve-res:CVE-2025-24532 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-1333,
        cwe-res:CWE-183,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-203,
        cwe-res:CWE-222,
        cwe-res:CWE-252,
        cwe-res:CWE-284,
        cwe-res:CWE-295,
        cwe-res:CWE-304,
        cwe-res:CWE-326,
        cwe-res:CWE-362,
        cwe-res:CWE-369,
        cwe-res:CWE-400,
        cwe-res:CWE-401,
        cwe-res:CWE-404,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-425,
        cwe-res:CWE-476,
        cwe-res:CWE-610,
        cwe-res:CWE-684,
        cwe-res:CWE-74,
        cwe-res:CWE-754,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-79,
        cwe-res:CWE-834,
        cwe-res:CWE-843,
        cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE W700" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0): All versions prior to v3.0.0 Siemens SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0): All versions prior to v3.0.0 Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0):All versions prior to v3.0.0 Siemens SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0): All versions prior to v3.0.0 Siemens SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0): All versions prior to v3.0.0 Siemens SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0): All versions prior to v3.0.0 Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0):All versions prior to v3.0.0 Siemens SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0): All versions prior to v3.0.0 Siemens SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0): All versions prior to v3.0.0 Siemens SCALANCE WAM763-1 (6GK5763-1AL00-7DA0): All versions prior to v3.0.0 Siemens SCALANCE WAM766-1 (6GK5766-1GE00-7DA0): All versions prior to v3.0.0 Siemens SCALANCE WUM766-1 (6GK5766-1GE00-3DA0): All versions prior to v3.0.0 Siemens SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0): All versions prior to v3.0.0 Siemens SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0): All versions prior to v3.0.0 Siemens SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0): All versions prior to v3.0.0 Siemens SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0): All versions prior to v3.0.0 Siemens SCALANCE WUM763-1 (6GK5763-1AL00-3AA0): All versions prior to v3.0.0 Siemens SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0): All versions prior to v3.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-10" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Questa and ModelSim" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-53977" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2024-53977 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Questa, ModelSim" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Questa: All versions prior to V2025.1 Siemens ModelSim: All versions prior to V2025.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-11" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens APOGEE PXC and TALON TC Series" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-54089; CVE-2024-54090" ;
    icsa:cweNumber "CWE-125; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2024-54089,
        cve-res:CVE-2024-54090 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APOGEE PXC and TALON TC Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: APOGEE PXC Series (P2 Ethernet): All versions APOGEE PXC Series (BACnet): All versions TALON TC Series (BACnet): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-12" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-23403" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2025-23403 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SMATIC IPC DiagMonitor: All versions SIMATIC IPC DiagBase: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-13" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC PCS neo and TIA Administrator" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-45386" ;
    icsa:cweNumber "CWE-613" ;
    icsa:hasCVE cve-res:CVE-2024-45386 ;
    icsa:hasCWE cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS neo and TIA Administrator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMOCODE ES V19: Versions prior to V19 Update 1 TIA Administrator: Versions 3.0.4 and prior SIMATIC PCS neo V4.1: Versions prior to V4.1 Update 2 SIMATIC PCS neo V4.0: All versions SIRIUS Safety ES V19 (TIA Portal): Versions prior to V19 Update 1 SIRIUS Soft Starter ES V19 (TIA Portal): Versions prior to V19 Update 1 SIMATIC PCS neo V5.0: Versions prior to V5.0 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-14" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Opcenter Intelligence" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-22127; CVE-2022-22128; CVE-2025-26490; CVE-2023-46604; CVE-2025-26491" ;
    icsa:cweNumber "CWE-22; CWE-532; CWE-287; CWE-918; CWE-502" ;
    icsa:hasCVE cve-res:CVE-2022-22127,
        cve-res:CVE-2022-22128,
        cve-res:CVE-2023-46604,
        cve-res:CVE-2025-26490,
        cve-res:CVE-2025-26491 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-287,
        cwe-res:CWE-502,
        cwe-res:CWE-532,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Opcenter Intelligence" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Opcenter Intelligence: All versions prior to V2501." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-15" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "ORing IAP-420" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-5411; CVE-2024-5410" ;
    icsa:cweNumber "CWE-79; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-5410,
        cve-res:CVE-2024-5411 ;
    icsa:hasCWE cwe-res:CWE-77,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IAP-420" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ORing products are affected: IAP-420: Versions 2.01e and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-15" ;
    icsa:vendor "ORing" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-16" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO Manager" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czech Republic" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-23411; CVE-2025-25067; CVE-2025-24865; CVE-2025-22896" ;
    icsa:cweNumber "CWE-306; CWE-352; CWE-78; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2025-22896,
        cve-res:CVE-2025-23411,
        cve-res:CVE-2025-24865,
        cve-res:CVE-2025-25067 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-312,
        cwe-res:CWE-352,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "myPRO Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following mySCADA products are affected: myPRO Manager: Versions prior to 1.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-16" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-17" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Outback Power Mojave Inverter" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-26473; CVE-2025-25281; CVE-2025-24861" ;
    icsa:cweNumber "CWE-598; CWE-77; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2025-24861,
        cve-res:CVE-2025-25281,
        cve-res:CVE-2025-26473 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-598,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mojave Inverter" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "are affected: Outback Power Mojave Inverter: All versions.; a system for managing power in a residential grid-connected battery backup system; The following versions of Outback Power Mojave Inverter" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-17" ;
    icsa:vendor "Outback Power" ;
    icsa:year 2025 .

icsa-res:ICSA-25-044-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-044-18" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dingtian DT-R0 Series" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-1283" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-1283 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DT-R0 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Dingtian DT-R0 Series are affected: DT-R002: Version V3.1.3044A DT-R008: Version V3.1.1759A DT-R016: Version V3.1.2776A DT-R032: Version V3.1.3826A." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-044-18" ;
    icsa:vendor "Dingtian" ;
    icsa:year 2025 .

icsa-res:ICSA-25-051-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-051-01" ;
    dcterms:issued "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB ASPECT-Enterprise, NEXUS, and MATRIX Series" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-51547" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2024-51547 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ASPECT-Enterprise, NEXUS, and MATRIX series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected """ABB reports the following products are affected:ABB ASPECT®-Enterprise ASP-ENT-x: Versions 3.08.03 and prior; ABB MATRIX Series MAT-x: Versions 3.08.03 and prior.; ABB NEXUS Series NEX-2x: Versions 3.08.03 and prior\r
ABB NEXUS Series: Versions 3.08.03 and prior""" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-051-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-051-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-051-02" ;
    dcterms:issued "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB FLXEON Controllers" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-48841; CVE-2024-48852; CVE-2024-48849" ;
    icsa:cweNumber "CWE-532; CWE-77; CWE-1385" ;
    icsa:hasCVE cve-res:CVE-2024-48841,
        cve-res:CVE-2024-48849,
        cve-res:CVE-2024-48852 ;
    icsa:hasCWE cwe-res:CWE-1385,
        cwe-res:CWE-532,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FLXEON Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the following products are affected: FLXEON Controllers FBXi: Version 9.3.4 and prior; FLXEON Controllers FBTi: Version 9.3.4 and prior; FLXEON Controllers FBVi: Version 9.3.4 and prior; FLXEON Controllers CBXi: Version 9.3.4 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-051-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-051-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-051-03" ;
    dcterms:issued "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Carrier Block Load" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-10930" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2024-10930 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Block Load" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Carrier product; which is a HVAC load calculation program; are affected: Block Load: Version 4.16." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-051-03" ;
    icsa:vendor "Carrier" ;
    icsa:year 2025 .

icsa-res:ICSA-25-051-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-051-04" ;
    dcterms:issued "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass Integrated" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems; Energy; Healthcare and Public Health; Financial Services; Government Facilities" ;
    icsa:cveNumber "CVE-2024-48510" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2024-48510 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass integrated" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SiPass integrated V2.90: Versions prior to V2.90.3.19. SiPass integrated V2.95: Versions prior to V2.95.3.15" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-051-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-051-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-051-05" ;
    dcterms:issued "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rapid Response Monitoring My Security Account App" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Emergency Services" ;
    icsa:cveNumber "CVE-2025-0352" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2025-0352 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "My Security Account App" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rapid Response Monitoring products are affected: My Security Account App API: Versions prior to 7/29/24." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-051-05" ;
    icsa:vendor "Rapid Response Monitoring" ;
    icsa:year 2025 .

icsa-res:ICSA-25-051-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-051-06" ;
    dcterms:issued "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Elseta Vinci Protocol Analyzer" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Lithuania" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Communications" ;
    icsa:cveNumber "CVE-2025-1265" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-1265 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vinci Protocol Analyzer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Elseta products are affected: Vinci Protocol Analyzer: Versions prior to 3.2.3.19." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-051-06" ;
    icsa:vendor "Elseta" ;
    icsa:year 2025 .

icsa-res:ICSA-25-056-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-056-01" ;
    dcterms:issued "2025-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation PowerFlex 755" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-0631" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2025-0631 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerFlex 755" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of PowerFlex 755; a motor application control drive software; is affected: PowerFlex 755: Versions 16.002.279 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-056-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-058-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-058-01" ;
    dcterms:issued "2025-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Communication Modules for Modicon M580 and Quantum controllers (Update B)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-29999" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-29999 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Communication modules for Modicon M580 and Quantum controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following communication modules for Modicon M580 and Quantum controllers are affected by a vulnerability in VxWorks operating system: Modicon M580 communication modules BMENOC BMENOC0321: Versions prior to SV1.10 Modicon M580 communication modules BMECRA BMECRA31210: Versions prior to SV02.80 Modicon M580/Quantum communication modules BMXCRA BMXCRA31200: Versions prior to SV02.80 Modicon M580/Quantum communication modules BMXCRA BMXCRA31210: Versions prior to SV02.80 140CRA31200 (Quantum RIO Drop) 140CRA31200: Versions prior to V02.80 140CRA31908 (M580 Quantum S908 RIO Drop Adapter) 140CRA31908: Versions prior to V02.80." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-058-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-063-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-063-01" ;
    dcterms:issued "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Carrier Block Load" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-10930" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2024-10930 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Block Load" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "v4.10 to 4.16.; The following Carrier product; are affected: Block Load: Version 4.00; which is a HVAC load calculation program" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-063-01" ;
    icsa:vendor "Carrier" ;
    icsa:year 2025 .

icsa-res:ICSA-25-063-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-063-02" ;
    dcterms:issued "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Keysight Ixia Vision Product Family (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2025-24525; CVE-2025-24521; CVE-2025-24494; CVE-2025-21095; CVE-2025-23416" ;
    icsa:cweNumber "CWE-22; CWE-611; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2025-21095,
        cve-res:CVE-2025-23416,
        cve-res:CVE-2025-24494,
        cve-res:CVE-2025-24521,
        cve-res:CVE-2025-24525 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-321,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ixia Vision Product Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Keysight reports the following versions of the Vision Network Packet Broker product family are affected: Ixia Vision Product Family: Version 6.3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-063-02" ;
    icsa:vendor "Keysight Technologies Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-063-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-063-03" ;
    dcterms:issued "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MACH PS700" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-28388" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2023-28388 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MACH PS700" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports the following products are affected: MACH PS700: Version v2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-063-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-063-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-063-04" ;
    dcterms:issued "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy XMC20" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-2461" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2024-2461 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XMC20" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "co5ne_r16b04_02) and older including all subversions.; Hitachi Energy reports that the following products are affected: XMC20: R15A and prior including all subversions XMC20: R15B XMC20: R16A XMC20: R16B Revision C (cent2_r16b04_02" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-063-04" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-063-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-063-05" ;
    dcterms:issued "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy UNEM/ECST" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-2462" ;
    icsa:cweNumber "CWE-297" ;
    icsa:hasCVE cve-res:CVE-2024-2462 ;
    icsa:hasCWE cwe-res:CWE-297 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XMC20, ECST, UNEM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: XMC20: Versions prior to R16B ECST: Versions prior to 16.2.1 UNEM: Versions prior to R15A UNEM: R15A UNEM: R15B PC4 and prior UNEM: R16A UNEM: R16B PC2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-063-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-063-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-063-06" ;
    dcterms:issued "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-G2" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-22881" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2025-22881 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft-G2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a human-machine interface; are affected: CNCSoft-G2: Versions V2.1.0.10 and prior.; Delta Electronics reports that the following versions of CNCSoft-G2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-063-06" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-063-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-063-07" ;
    dcterms:issued "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "GMOD Apollo" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Government Facilities; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-23410; CVE-2025-20002; CVE-2025-21092; CVE-2025-24924" ;
    icsa:cweNumber "CWE-306; CWE-23; CWE-266; CWE-209" ;
    icsa:hasCVE cve-res:CVE-2025-20002,
        cve-res:CVE-2025-21092,
        cve-res:CVE-2025-23410,
        cve-res:CVE-2025-24924 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-23,
        cwe-res:CWE-266,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Apollo" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following GMOD products are affected: Apollo: All versions prior to 2.8.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-063-07" ;
    icsa:vendor "GMOD" ;
    icsa:year 2025 .

icsa-res:ICSA-25-063-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-063-08" ;
    dcterms:issued "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Edimax IC-7100 IP Camera" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-1316" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-1316 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IC-7100 IP Camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Edimax products are affected: IC-7100 IP Camera: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-063-08" ;
    icsa:vendor "Edimax" ;
    icsa:year 2025 .

icsa-res:ICSA-25-065-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-065-01" ;
    dcterms:issued "2025-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy PCU400" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-4450; CVE-2022-4304; CVE-2023-0401; CVE-2023-0217; CVE-2023-0286; CVE-2023-0215; CVE-2023-0216; CVE-2022-4203" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-843; CWE-125; CWE-203; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2022-4203,
        cve-res:CVE-2022-4304,
        cve-res:CVE-2022-4450,
        cve-res:CVE-2023-0215,
        cve-res:CVE-2023-0216,
        cve-res:CVE-2023-0217,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0401 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-203,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PCU400, PCULogger" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PCU400: Version 9.4.1 and prior; Hitachi Energy reports that the following products are affected: PCU400: Version 6.5 K and prior; PCULogger: Version 1.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-065-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-065-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-065-02" ;
    dcterms:issued "2025-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Relion 670/650/SAM600-IO" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2021-35534" ;
    icsa:cweNumber "CWE-274" ;
    icsa:hasCVE cve-res:CVE-2021-35534 ;
    icsa:hasCWE cwe-res:CWE-274 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Relion 670/650/SAM600-IO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Relion 670/650/SAM600-IO series: Version 2.2.5 up to revision 2.2.5.1; Relion 650 series: Version 1.0 all revisions.; Relion 670 series: Version 2.2.3 revisions up to 2.2.3.4; Relion 650 series: Version 1.1 all revisions; Relion 670/650/SAM600-IO series: Version 2.2.1 all revisions up to but not including version 2.2.1.8.; Relion 670 series: Version 2.2.2 all revisions up to but not including 2.2.2.5; Relion 650 series: Version 1.2 all revisions; Hitachi Energy reports the following products are affected: Relion 670/650 series: Version 2.2.0 all revisions; Relion 650 series: Version 1.3 all revisions up to but not including version 1.3.0.8.; Relion 670 series: Version 2.0 all revisions up to but not including version 2.0.0.14.; Relion 670/650 series Version 2.2.4 all revisions up to but not including version 2.2.4.3.; Relion 670/650 series: Version 2.1 all revisions up to but not including version 2.1.0.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-065-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-070-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-070-01" ;
    dcterms:issued "2025-03-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Uni-Telway Driver (Update D)" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-10083" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-10083 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Uni-Telway Driver" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric Schneider Electric Uni-Telway driver installed on Schneider Electric EcoStruxure Process Expert: vers:all/*; Schneider Electric Schneider Electric Uni-Telway driver: vers:all/*; Schneider Electric Schneider Electric Uni-Telway driver installed on Schneider Electric EcoStruxure Control Expert: vers:all/*; Schneider Electric Schneider Electric Uni-Telway driver installed on Schneider Electric EcoStruxure Process Expert for AVEVA System Platform: vers:all/*; Schneider Electric Schneider Electric Uni-Telway driver installed on Schneider Electric OPC Factory Server: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-070-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-070-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-070-02" ;
    dcterms:issued "2025-03-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Optigo Networks Visual BACnet Capture Tool/Optigo Visual Networks Capture Tool (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2025-2081; CVE-2025-2080; CVE-2025-2079" ;
    icsa:cweNumber "CWE-547; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-2079,
        cve-res:CVE-2025-2080,
        cve-res:CVE-2025-2081 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-547 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Optigo Networks Visual BACnet Capture Tool/Optigo Visual Networks Capture Tool (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Optigo Networks Optigo Visual Networks Capture Tool: 3.1.2rc11; Optigo Networks Visual BACnet Capture Tool: 3.1.2rc11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-070-02" ;
    icsa:vendor "Optigo Networks" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-01" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization and Tecnomatrix Plant Simulation" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-23399; CVE-2025-23402; CVE-2025-27438; CVE-2025-23396; CVE-2025-23400; CVE-2025-23397; CVE-2025-23398; CVE-2025-23401" ;
    icsa:cweNumber "CWE-119; CWE-416; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-23396,
        cve-res:CVE-2025-23397,
        cve-res:CVE-2025-23398,
        cve-res:CVE-2025-23399,
        cve-res:CVE-2025-23400,
        cve-res:CVE-2025-23401,
        cve-res:CVE-2025-23402,
        cve-res:CVE-2025-27438 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization and Tecnomatrix Plant Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Teamcenter Visualization V14.3: Versions prior to V14.3.0.13 Teamcenter Visualization V2312: Versions prior to V2312.0009 Teamcenter Visualization V2406: Versions prior to V2406.0007 Teamcenter Visualization V2412: Versions prior to V2412.0002 Tecnomatix Plant Simulation V2302: Versions prior to V2302.0021 Tecnomatix Plant Simulation V2404: Versions prior to V2404.0010." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-02" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-28882; CVE-2024-5594" ;
    icsa:cweNumber "CWE-117; CWE-772" ;
    icsa:hasCVE cve-res:CVE-2024-28882,
        cve-res:CVE-2024-5594 ;
    icsa:hasCWE cwe-res:CWE-117,
        cwe-res:CWE-772 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: SINEMA Remote Connect Server: Versions prior to V3.2 SP3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-03" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 TM MFP" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-41055; CVE-2024-42154; CVE-2024-41049; CVE-2024-41046; CVE-2024-42161" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-457; CWE-805; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2024-41046,
        cve-res:CVE-2024-41049,
        cve-res:CVE-2024-41055,
        cve-res:CVE-2024-42154,
        cve-res:CVE-2024-42161 ;
    icsa:hasCWE cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-457,
        cwe-res:CWE-476,
        cwe-res:CWE-805 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 TM MFP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC S7-1500 TM MFP - BIOS: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-04" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-27494; CVE-2025-27493; CVE-2024-52285" ;
    icsa:cweNumber "CWE-306; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2024-52285,
        cve-res:CVE-2025-27493,
        cve-res:CVE-2025-27494 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass integrated AC5102 (ACC-G2), SiPass integrated ACC-AP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-27494) Siemens SiPass integrated ACC-AP: All versions prior to V6.4.8 (CVE-2024-52285) Siemens SiPass integrated ACC-AP: All versions prior to V6.4.9 (CVE-2025-27493; CVE-2025-27494).; Siemens reports that the following products are affected: Siemens SiPass integrated AC5102 (ACC-G2): All versions prior to V6.4.8 (CVE-2024-52285) Siemens SiPass integrated AC5102 (ACC-G2): All versions prior to V6.4.9 (CVE-2025-27493" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-05" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS S200" ;
    icsa:CVSSScore "9.5"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-56336" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-56336 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS S200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SINAMICS S200: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-06" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE LPE9403" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-27395; CVE-2025-27392; CVE-2025-27398; CVE-2025-27394; CVE-2025-27397; CVE-2025-27393; CVE-2025-27396" ;
    icsa:cweNumber "CWE-273; CWE-22; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-27392,
        cve-res:CVE-2025-27393,
        cve-res:CVE-2025-27394,
        cve-res:CVE-2025-27395,
        cve-res:CVE-2025-27396,
        cve-res:CVE-2025-27397,
        cve-res:CVE-2025-27398 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-273,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE LPE9403" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SCALANCE LPE9403 (6GK5998-3GS00-2AC2): Versions prior to V4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-07" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE M-800 and SC-600 Families" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-23384" ;
    icsa:cweNumber "CWE-187" ;
    icsa:hasCVE cve-res:CVE-2025-23384 ;
    icsa:hasCWE cwe-res:CWE-187 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE M-800 family (incl. S615, MUM-800 and RM1224), SCALANCE SC-600 family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SCALANCE SC-600 family: All versions Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions prior to V8.2.1 Siemens SCALANCE M876-3 (6GK5876-3AA02-2BA2): vers: All versions prior to V8.2.1 Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions prior to V8.2.1 Siemens SCALANCE M876-4 (6GK5876-4AA10-2BA2): All versions prior to V8.2.1 Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions prior to V8.2.1 Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions prior to V8.2.1 Siemens SCALANCE MUB852-1 (A1) (6GK5852-1EA10-1AA1): All versions prior to V8.2.1 Siemens SCALANCE MUB852-1 (B1) (6GK5852-1EA10-1BA1): All versions prior to V8.2.1 Siemens SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1): All versions prior to V8.2.1 Siemens SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1): All versions prior to V8.2.1 Siemens SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): All versions prior to V8.2.1 Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions prior to V8.2.1 Siemens SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1): All versions prior to V8.2.1 Siemens SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1): All versions prior to V8.2.1 Siemens SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1): All versions prior to V8.2.1 Siemens SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions prior to V8.2.1 Siemens SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions prior to V8.2.1 Siemens SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2): All versions prior to V8.2.1 Siemens SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2): All versions prior to V8.2.1 Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions prior to V8.2.1 Siemens SCALANCE M812-1 ADSL-Router family: All versions prior to V8.2.1 Siemens SCALANCE M816-1 ADSL-Router family: All versions prior to V8.2.1 Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions prior to V8.2.1 Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions prior to V8.2.1 Siemens SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2): All versions prior to V8.2.1 Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions prior to V8.2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-08" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Tecnomatix Plant Simulation" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-25267; CVE-2025-25266" ;
    icsa:cweNumber "CWE-552" ;
    icsa:hasCVE cve-res:CVE-2025-25266,
        cve-res:CVE-2025-25267 ;
    icsa:hasCWE cwe-res:CWE-552 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tecnomatix Plant Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Tecnomatix Plant Simulation V2302: All versions prior to V2302.0021 Siemens Tecnomatix Plant Simulation V2404: All versions prior to V2404.0010." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-09" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OPC UA" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-42513; CVE-2024-42512" ;
    icsa:cweNumber "CWE-305; CWE-208" ;
    icsa:hasCVE cve-res:CVE-2024-42512,
        cve-res:CVE-2024-42513 ;
    icsa:hasCWE cwe-res:CWE-208,
        cwe-res:CWE-305 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC UA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Industrial Edge for Machine Tools (formerly known as \"SINUMERIK Edge\"): All versions (CVE-2024-42513) SIMIT V11: All versions (CVE-2024-42512) SIMATIC BRAUMAT: All versions from V8.0 SP1 up to but not including V8.1 (CVE-2024-42513) SIMATIC Energy Manager PRO: All versions from V7.5 up to but not including V7.5 Update 2 SIMATIC Energy Manager PRO: All versions after V7.2 Update 6 SIMATIC IPC DiagMonitor: All versions (CVE-2024-42513) SIMATIC SISTAR: All versions from V8.0 SP1 up to but not including V8.1 (CVE-2024-42513) SIMATIC WinCC Unified V18: All versions (CVE-2024-42513) SIMATIC WinCC Unified V19: All versions before V19 Update 4 (CVE-2024-42513) SIMATIC WinCC V8.0: All versions before V8.0 Update 3 (CVE-2024-42513)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-10" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Client" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-27459; CVE-2024-24974; CVE-2024-4877; CVE-2024-1305; CVE-2024-28882; CVE-2024-27903" ;
    icsa:cweNumber "CWE-434; CWE-772; CWE-420; CWE-923; CWE-190; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-1305,
        cve-res:CVE-2024-24974,
        cve-res:CVE-2024-27459,
        cve-res:CVE-2024-27903,
        cve-res:CVE-2024-28882,
        cve-res:CVE-2024-4877 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-190,
        cwe-res:CWE-420,
        cwe-res:CWE-434,
        cwe-res:CWE-772,
        cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SINEMA Remote Connect Client: All versions below V3.2 SP3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-11" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC IPC Family, ITP1000, and Field PGs" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-56181; CVE-2024-56182" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2024-56181,
        cve-res:CVE-2024-56182 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC IPC Family, SIMATIC ITP1000, SIMATIC Field PGs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIMATIC Field PG M5: All versions Siemens SIMATIC IPC377G: All versions Siemens SIMATIC IPC427E: All versions Siemens SIMATIC IPC477E: All versions Siemens SIMATIC IPC477E PRO: All versions Siemens SIMATIC IPC527G: All versions Siemens SIMATIC IPC627E: Versions prior to 25.02.15 Siemens SIMATIC IPC647E: Versions prior to V25.02.15 Siemens SIMATIC IPC677E: Versions prior to V25.02.15 Siemens SIMATIC IPC847E: Versions prior to V25.02.15 Siemens SIMATIC IPC3000 SMART V3: All versions Siemens SIMATIC Field PG M6: Versions prior to V26.01.12 (CVE-2024-56182) Siemens SIMATIC IPC BX-21A: Versions prior to V31.01.07 Siemens SIMATIC IPC BX-32A: Versions prior to V29.01.07 Siemens SIMATIC IPC BX-39A: Versions prior to V29.01.07 Siemens SIMATIC IPC BX-59A: Versions prior to V32.01.04 Siemens SIMATIC IPC PX-32A: Versions prior to V29.01.07 Siemens SIMATIC IPC PX-39A: Versions prior to V29.01.07 Siemens SIMATIC IPC PX-39A PRO: Versions prior to V29.01.07 Siemens SIMATIC IPC RC-543B: All versions Siemens SIMATIC IPC RW-543A: All versions Siemens SIMATIC ITP1000: All versions Siemens SIMATIC IPC127E: All versions Siemens SIMATICÂ IPC277G PRO: All versions Siemens SIMATIC IPC227E: All versions Siemens SIMATIC IPC227G: All versions Siemens SIMATIC IPC277E: All versions Siemens SIMATIC IPC277G: All versions Siemens SIMATIC IPC327G: All versions Siemens SIMATIC IPC347G: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-072-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-072-12" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sungrow iSolarCloud Android App and WiNet Firmware" ;
    icsa:CVSSScore "9.5"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-50688; CVE-2024-50696; CVE-2024-50698; CVE-2024-50694; CVE-2024-50687; CVE-2024-50691; CVE-2024-50692; CVE-2024-50685; CVE-2024-50690; CVE-2024-50697; CVE-2024-50689; CVE-2024-50686; CVE-2024-50693; CVE-2024-50684; CVE-2024-50695" ;
    icsa:cweNumber "CWE-798; CWE-639; CWE-122; CWE-121; CWE-259; CWE-295; CWE-327; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2024-50684,
        cve-res:CVE-2024-50685,
        cve-res:CVE-2024-50686,
        cve-res:CVE-2024-50687,
        cve-res:CVE-2024-50688,
        cve-res:CVE-2024-50689,
        cve-res:CVE-2024-50690,
        cve-res:CVE-2024-50691,
        cve-res:CVE-2024-50692,
        cve-res:CVE-2024-50693,
        cve-res:CVE-2024-50694,
        cve-res:CVE-2024-50695,
        cve-res:CVE-2024-50696,
        cve-res:CVE-2024-50697,
        cve-res:CVE-2024-50698 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-259,
        cwe-res:CWE-295,
        cwe-res:CWE-327,
        cwe-res:CWE-494,
        cwe-res:CWE-639,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iSolarCloud Android App, WiNet Firmware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Sungrow software products are affected: iSolarCloud Android App: Version 2.1.6 and prior WiNet Firmware: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-072-12" ;
    icsa:vendor "Sungrow" ;
    icsa:year 2025 .

icsa-res:ICSA-25-077-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-077-01" ;
    dcterms:issued "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI)" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-0813" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2025-0813 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Automation System User Interface (EPAS-UI)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: EcoStruxure Power Automation System User Interface (EPAS-UI): Version v2.1 up to and including v2.9." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-077-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-077-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-077-02" ;
    dcterms:issued "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Lifecycle Services with VMware" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-22225; CVE-2025-22224; CVE-2025-22226" ;
    icsa:cweNumber "CWE-125; CWE-367; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2025-22224,
        cve-res:CVE-2025-22225,
        cve-res:CVE-2025-22226 ;
    icsa:hasCWE cwe-res:CWE-123,
        cwe-res:CWE-125,
        cwe-res:CWE-367 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Data Center (IDC) with VMware, VersaVirtual Appliance (VVA) with VMware, Threat Detection Managed Services (TDMS) with VMware, Endpoint Protection Service with RA Proxy &amp; VMware, Engineered and Integrated Solutions with VMware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation Lifecycle Services with VMware are affected: Industrial Data Center (IDC) with VMware: Generations 1 through 4 VersaVirtual Appliance (VVA) with VMware: Series A and B Threat Detection Managed Services (TDMS) with VMware: All versions Endpoint Protection Service with RA Proxy & VMware only: All versions Engineered and Integrated Solutions with VMware: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-077-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-077-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-077-03" ;
    dcterms:issued "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Automation System" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-1960" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2025-1960 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebHMI - Deployed with EcoStruxure Power Automation System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following products are affected because they use WebHMI v4.1.0.0 and prior: EcoStruxure Power Automation System: Versions 2.6.30.19 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-077-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-077-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-077-04" ;
    dcterms:issued "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Panel Server" ;
    icsa:CVSSScore "4.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-2002" ;
    icsa:cweNumber "CWE-532" ;
    icsa:hasCVE cve-res:CVE-2025-2002 ;
    icsa:hasCWE cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Panel Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following versions of EcoStruxure Panel Server are affected: EcoStruxure Panel Server: Versions v2.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-077-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-077-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-077-05" ;
    dcterms:issued "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric ASCO 5310/5350 Remote Annunciator" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-1059; CVE-2025-1070; CVE-2025-1058; CVE-2025-1060" ;
    icsa:cweNumber "CWE-434; CWE-319; CWE-770; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2025-1058,
        cve-res:CVE-2025-1059,
        cve-res:CVE-2025-1060,
        cve-res:CVE-2025-1070 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-434,
        cwe-res:CWE-494,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ASCO 5310 / 5350" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following products are affected: Schneider Electric ASCO 5310 Single-Channel Remote Annunciator: All versions Schneider Electric ASCO 5350 Eight Channel Remote Annunciator: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-077-05" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-079-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-079-01" ;
    dcterms:issued "2025-02-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Process Expert (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-0327" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2025-0327 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Process Expert 2023 versions prior to v4.8.0.5715; EcoStruxure Process Expert for AVEVA System Platform version 2020 R2; EcoStruxure Process Expert for AVEVA System Platform version 2021; EcoStruxure Process Expert for AVEVA System Platform 2023; EcoStruxure Process Expert version 2020 R2; EcoStruxure Process Expert version 2021" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-079-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-079-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-079-02" ;
    dcterms:issued "2025-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Enerlin’X IFE and eIFE" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-0816; CVE-2025-0814; CVE-2025-0815" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-0814,
        cve-res:CVE-2025-0815,
        cve-res:CVE-2025-0816 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Enerlin'X IFE interface and Enerlin'X eIFE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Enerlin'X IFE interface and Enerlin'X eIFE are affected: Enerlin'X IFE interface: All versions Enerlin'X eIFE: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-079-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-079-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-079-03" ;
    dcterms:issued "2025-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-25175" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2025-25175 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Simcenter Femap V2401: Versions prior to V2401.0003 Simcenter Femap V2406: Versions prior to V2406.0002." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-079-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-079-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-079-04" ;
    dcterms:issued "2025-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "SMA Sunny Portal" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-0731" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2025-0731 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sunny Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2024.; The following versions of SMA Sunny Portal are affected: Sunny Portal: All versions before December 19" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-079-04" ;
    icsa:vendor "SMA Solar Technology AG" ;
    icsa:year 2025 .

icsa-res:ICSA-25-084-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-084-01" ;
    dcterms:issued "2025-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB RMC-100" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-24999" ;
    icsa:cweNumber "CWE-1321" ;
    icsa:hasCVE cve-res:CVE-2022-24999 ;
    icsa:hasCWE cwe-res:CWE-1321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RMC-100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the following products are affected when the REST interface is enabled: RMC-100: Versions 2105457-036 to 2105457-044 RMC-100 LITE: Versions 2106229-010 to 2106229-016." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-084-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-084-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-084-02" ;
    dcterms:issued "2025-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Verve Asset Manager" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-1449" ;
    icsa:cweNumber "CWE-1287" ;
    icsa:hasCVE cve-res:CVE-2025-1449 ;
    icsa:hasCWE cwe-res:CWE-1287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Verve Asset Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following versions of Verve Asset Manager are affected: Verve Asset Manager: Versions 1.39 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-084-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-084-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-084-03" ;
    dcterms:issued "2025-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 440G TLS-Z" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2020-27212" ;
    icsa:cweNumber "CWE-74" ;
    icsa:hasCVE cve-res:CVE-2020-27212 ;
    icsa:hasCWE cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "440G TLS-Z" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following products are affected by a vulnerability because they use STMicroelectronics STM32L4 devices: 440G TLS-Z: Version v6.001." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-084-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-084-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-084-04" ;
    dcterms:issued "2025-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inaba Denki Sangyo CHOCO TEI WATCHER Mini" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-25211; CVE-2025-24852; CVE-2025-24517; CVE-2025-26689" ;
    icsa:cweNumber "CWE-425; CWE-603; CWE-257; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2025-24517,
        cve-res:CVE-2025-24852,
        cve-res:CVE-2025-25211,
        cve-res:CVE-2025-26689 ;
    icsa:hasCWE cwe-res:CWE-257,
        cwe-res:CWE-425,
        cwe-res:CWE-521,
        cwe-res:CWE-603 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CHOCO TEI WATCHER mini" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of CHOCO TEI WATCHER are affected: CHOCO TEI WATCHER mini (IB-MCT001): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-084-04" ;
    icsa:vendor "Inaba Denki Sangyo Co., Ltd." ;
    icsa:year 2025 .

icsa-res:ICSA-25-091-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-091-01" ;
    dcterms:issued "2025-04-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Lifecycle Services with Veeam Backup and Replication" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-23120" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-23120 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lifecycle Services with Veeam Backup and Replication" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following Lifecycle Services with Veeam Backup and Replication are affected: Industrial Data Center (IDC) with Veeam: Generations 1 - 5 VersaVirtual Appliance (VVA) with Veeam: Series A - C." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-091-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-093-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-093-01" ;
    dcterms:issued "2025-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 Series (Update B)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-1445; CVE-2024-10037; CVE-2024-11499; CVE-2024-12169" ;
    icsa:cweNumber "CWE-410; CWE-476; CWE-820" ;
    icsa:hasCVE cve-res:CVE-2024-10037,
        cve-res:CVE-2024-11499,
        cve-res:CVE-2024-12169,
        cve-res:CVE-2025-1445 ;
    icsa:hasCWE cwe-res:CWE-410,
        cwe-res:CWE-476,
        cwe-res:CWE-820 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-12169) RTU500 series CMU: Versions 13.5.1 - 13.5.3 (CVE-2024-10037; The following Hitachi Energy products are affected: RTU500 series CMU: Versions 12.0.1 - 12.0.14 (CVE-2024-10037) RTU500 series CMU: Versions 12.2.1 - 12.2.12 (CVE-2024-10037) RTU500 series CMU: Versions 12.4.1 - 12.4.11 (CVE-2024-10037) RTU500 series CMU: Versions 12.6.1 - 12.6.10 (CVE-2024-10037) RTU500 series CMU: Versions 12.7.1 - 12.7.7 (CVE-2024-10037) RTU500 series CMU: Versions 13.2.1 - 13.2.7 (CVE-2024-10037) RTU500 series CMU: Versions 13.4.1 - 13.4.4 (CVE-2024-10037; CVE-2024-11499; CVE-2024-12169) RTU500 series CMU: Versions 13.6.1 (CVE-2024-10037; CVE-2025-1445).; CVE-2024-12169) RTU500 series CMU: Versions 13.7.1 (CVE-2024-11499) RTU500 series CMU: Versions 13.7.1 - 13.7.4 (CVE-2024-12169" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-093-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-093-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-093-02" ;
    dcterms:issued "2025-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy TRMTracker" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-27631; CVE-2025-27633; CVE-2025-27632" ;
    icsa:cweNumber "CWE-79; CWE-74; CWE-90" ;
    icsa:hasCVE cve-res:CVE-2025-27631,
        cve-res:CVE-2025-27632,
        cve-res:CVE-2025-27633 ;
    icsa:hasCWE cwe-res:CWE-74,
        cwe-res:CWE-79,
        cwe-res:CWE-90 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TRMTracker" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products are affected: TRMTracker: Versions 6.2.04 and prior TRMTracker: Versions 6.3.0 and 6.3.01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-093-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-093-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-093-03" ;
    dcterms:issued "2025-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB ACS880 Drives Containing CODESYS RTS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-37548; CVE-2023-37549; CVE-2023-37556; CVE-2023-37550; CVE-2023-37559; CVE-2023-37557; CVE-2023-37552; CVE-2023-37546; CVE-2023-37545; CVE-2022-4046; CVE-2023-37553; CVE-2023-37554; CVE-2023-37547; CVE-2023-37555; CVE-2023-37558" ;
    icsa:cweNumber "CWE-119; CWE-20; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-4046,
        cve-res:CVE-2023-37545,
        cve-res:CVE-2023-37546,
        cve-res:CVE-2023-37547,
        cve-res:CVE-2023-37548,
        cve-res:CVE-2023-37549,
        cve-res:CVE-2023-37550,
        cve-res:CVE-2023-37552,
        cve-res:CVE-2023-37553,
        cve-res:CVE-2023-37554,
        cve-res:CVE-2023-37555,
        cve-res:CVE-2023-37556,
        cve-res:CVE-2023-37557,
        cve-res:CVE-2023-37558,
        cve-res:CVE-2023-37559 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ACS880 Drives with IEC 61131-3 license" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the following low-voltage DC drive and power controller products contain a vulnerable version of CODESYS Runtime: ABB ACS880 Drives ACS880 Primary Control Program AINLX: Versions prior to v3.47 ABB ACS880 Drives ACS880 Primary Control Program YINLX: Versions prior to v1.30 ABB ACS880 Drives ACS880 IGBT Supply Control Program AISLX: Versions prior to v3.43 ABB ACS880 Drives ACS880 IGBT Supply Control Program ALHLX: Versions prior to v3.43 ABB ACS880 Drives ACS880 IGBT Supply Control Program YISLX: Versions prior v1.30 ABB ACS880 Drives ACS880 IGBT Supply Control Program YLHLX: Versions prior v1.30 ABB ACS880 Drives ACS880 Position Control Program APCLX: Versions up to and including v1.04.0.5 ABB ACS880 Drives ACS880 Test Bench Control Program ATBLX: Versions up to and including v3.44.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-093-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-093-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-093-04" ;
    dcterms:issued "2025-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Low Voltage DC Drives and Power Controllers CODESYS RTS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-37548; CVE-2023-37549; CVE-2023-37556; CVE-2023-37550; CVE-2023-37559; CVE-2023-37557; CVE-2023-37552; CVE-2023-37546; CVE-2023-37545; CVE-2022-4046; CVE-2023-37553; CVE-2023-37554; CVE-2023-37547; CVE-2023-37555; CVE-2023-37558" ;
    icsa:cweNumber "CWE-119; CWE-20; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-4046,
        cve-res:CVE-2023-37545,
        cve-res:CVE-2023-37546,
        cve-res:CVE-2023-37547,
        cve-res:CVE-2023-37548,
        cve-res:CVE-2023-37549,
        cve-res:CVE-2023-37550,
        cve-res:CVE-2023-37552,
        cve-res:CVE-2023-37553,
        cve-res:CVE-2023-37554,
        cve-res:CVE-2023-37555,
        cve-res:CVE-2023-37556,
        cve-res:CVE-2023-37557,
        cve-res:CVE-2023-37558,
        cve-res:CVE-2023-37559 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DCT880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3), DCT880 memory unit incl. Power Optimizer, DCS880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3), DCS880 memory unit incl. DEMag, DCS880 memory unit incl. DCC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the following low-voltage DC drive and power controller products contain a vulnerable version of the CODESYS Runtime: DCT880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3): All versions DCT880 memory unit incl. Power Optimizer: All versions DCS880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3): All versions DCS880 memory unit incl. DEMag: All versions DCS880 memory unit incl. DCC: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-093-04" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-093-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-093-05" ;
    dcterms:issued "2025-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "B&R APROL" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-45483; CVE-2024-45484; CVE-2024-8313; CVE-2024-45481; CVE-2024-10206; CVE-2024-8314; CVE-2024-10209; CVE-2024-10210; CVE-2024-45480; CVE-2024-45482; CVE-2024-10207; CVE-2024-10208; CVE-2024-8315" ;
    icsa:cweNumber "CWE-94; CWE-732; CWE-770; CWE-280; CWE-306; CWE-79; CWE-829; CWE-497; CWE-488; CWE-73; CWE-918; CWE-791" ;
    icsa:hasCVE cve-res:CVE-2024-10206,
        cve-res:CVE-2024-10207,
        cve-res:CVE-2024-10208,
        cve-res:CVE-2024-10209,
        cve-res:CVE-2024-10210,
        cve-res:CVE-2024-45480,
        cve-res:CVE-2024-45481,
        cve-res:CVE-2024-45482,
        cve-res:CVE-2024-45483,
        cve-res:CVE-2024-45484,
        cve-res:CVE-2024-8313,
        cve-res:CVE-2024-8314,
        cve-res:CVE-2024-8315 ;
    icsa:hasCWE cwe-res:CWE-280,
        cwe-res:CWE-306,
        cwe-res:CWE-488,
        cwe-res:CWE-497,
        cwe-res:CWE-73,
        cwe-res:CWE-732,
        cwe-res:CWE-770,
        cwe-res:CWE-79,
        cwe-res:CWE-791,
        cwe-res:CWE-829,
        cwe-res:CWE-918,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APROL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "B&R reports that the following products are affected: B&R APROL: All versions prior to 4.4-01 (CVE-2024-45483; CVE-2024-45484; CVE-2024-8313; CVE-2024-10206; CVE-2024-8314; CVE-2024-10210).; CVE-2024-10209) B&R APROL: All versions 4.4-00P1 and prior (CVE-2024-45482) B&R APROL: All versions 4.4-00P5 and prior (CVE-2024-45481; CVE-2024-45480; CVE-2024-10207; CVE-2024-10208; CVE-2024-8315" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-093-05" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2025 .

icsa-res:ICSA-25-100-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-100-01" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens License Server" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-29999; CVE-2025-30000" ;
    icsa:cweNumber "CWE-295; CWE-269" ;
    icsa:hasCVE cve-res:CVE-2025-29999,
        cve-res:CVE-2025-30000 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "License Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: License Server (SLS): All versions before V4.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-100-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-100-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-100-02" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIDIS Prime" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2022-21658; CVE-2023-5678; CVE-2024-21319; CVE-2024-30105; CVE-2024-0232; CVE-2024-5535; CVE-2023-7104; CVE-2023-5363; CVE-2024-9143; CVE-2024-0727; CVE-2023-2975; CVE-2023-3446; CVE-2024-0056; CVE-2023-4807" ;
    icsa:cweNumber "CWE-200; CWE-416; CWE-122; CWE-787; CWE-476; CWE-684; CWE-20; CWE-606; CWE-319; CWE-400; CWE-363; CWE-440; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2022-21658,
        cve-res:CVE-2023-2975,
        cve-res:CVE-2023-3446,
        cve-res:CVE-2023-4807,
        cve-res:CVE-2023-5363,
        cve-res:CVE-2023-5678,
        cve-res:CVE-2023-7104,
        cve-res:CVE-2024-0056,
        cve-res:CVE-2024-0232,
        cve-res:CVE-2024-0727,
        cve-res:CVE-2024-21319,
        cve-res:CVE-2024-30105,
        cve-res:CVE-2024-5535,
        cve-res:CVE-2024-9143 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-319,
        cwe-res:CWE-354,
        cwe-res:CWE-363,
        cwe-res:CWE-400,
        cwe-res:CWE-416,
        cwe-res:CWE-440,
        cwe-res:CWE-476,
        cwe-res:CWE-606,
        cwe-res:CWE-684,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIDIS Prime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIDIS Prime: All versions before V4.0.700." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-100-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-100-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-100-03" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-54091" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-54091 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge SE2024, Solid Edge SE2025" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Solid Edge SE2024: All versions prior to V224.0 Update 12 Siemens Solid Edge SE2025: All versions prior to V225.0 Update 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-100-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-100-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-100-04" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Devices" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-54092" ;
    icsa:cweNumber "CWE-1390" ;
    icsa:hasCVE cve-res:CVE-2024-54092 ;
    icsa:hasCWE cwe-res:CWE-1390 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Edge Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Industrial Edge Own Device (IEOD): All versions prior to V1.21.1-1-a Siemens Industrial Edge Virtual Device: All versions prior to V1.21.1-1-a Siemens SCALANCE LPE9413 (6GK5998-3GS01-2AC2): All versions Siemens SIMATIC IPC127E Industrial Edge Device: All versions prior to V3.0 Siemens SIMATIC IPC227E Industrial Edge Device: All versions prior V3.0 Siemens SIMATIC IPC427E Industrial Edge Device: All versions Siemens SIMATIC IPC847E Industrial Edge Device: All versions prior V3.0 Siemens SIMATIC IPC BX-39A Industrial Edge Device: All versions prior V3.0 Siemens SIMATIC IPC BX-59A Industrial Edge Device: All versions prior V3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-100-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-100-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-100-05" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Insights Hub Private Cloud" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-1098; CVE-2025-1097; CVE-2025-24514; CVE-2025-24513; CVE-2025-1974" ;
    icsa:cweNumber "CWE-20; CWE-653" ;
    icsa:hasCVE cve-res:CVE-2025-1097,
        cve-res:CVE-2025-1098,
        cve-res:CVE-2025-1974,
        cve-res:CVE-2025-24513,
        cve-res:CVE-2025-24514 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-653 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Insights Hub Private Cloud" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Insights Hub Private Cloud: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-100-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-100-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-100-06" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SENTRON 7KT PAC1260 Data Manager" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-41791; CVE-2024-41790; CVE-2024-41792; CVE-2024-41796; CVE-2024-41795; CVE-2024-41794; CVE-2024-41793; CVE-2024-41789; CVE-2024-41788" ;
    icsa:cweNumber "CWE-22; CWE-352; CWE-306; CWE-620; CWE-78; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2024-41788,
        cve-res:CVE-2024-41789,
        cve-res:CVE-2024-41790,
        cve-res:CVE-2024-41791,
        cve-res:CVE-2024-41792,
        cve-res:CVE-2024-41793,
        cve-res:CVE-2024-41794,
        cve-res:CVE-2024-41795,
        cve-res:CVE-2024-41796 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-352,
        cwe-res:CWE-620,
        cwe-res:CWE-78,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SENTRON 7KT PAC1260 Data Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SENTRON 7KT PAC1260 Data Manager: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-100-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-100-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-100-07" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-2288; CVE-2025-2829; CVE-2025-2293; CVE-2025-2287; CVE-2025-3287; CVE-2025-3285; CVE-2025-2285; CVE-2025-3289; CVE-2025-2286; CVE-2025-3286; CVE-2025-3288" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-457; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-2285,
        cve-res:CVE-2025-2286,
        cve-res:CVE-2025-2287,
        cve-res:CVE-2025-2288,
        cve-res:CVE-2025-2293,
        cve-res:CVE-2025-2829,
        cve-res:CVE-2025-3285,
        cve-res:CVE-2025-3286,
        cve-res:CVE-2025-3287,
        cve-res:CVE-2025-3288,
        cve-res:CVE-2025-3289 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-457,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arena" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following versions of Arena simulation software are affected: Arena: Versions 16.20.08 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-100-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-100-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-100-08" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Subnet Solutions PowerSYSTEM Center" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-31935; CVE-2025-31354" ;
    icsa:cweNumber "CWE-502; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-31354,
        cve-res:CVE-2025-31935 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerSYSTEM Center (PSC) 2020" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Subnet Solutions products are affected: PowerSYSTEM Center 2020: Versions 5.24.x and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-100-08" ;
    icsa:vendor "SUBNET Solutions Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-100-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-100-09" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Arctic Wireless Gateways" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-47615; CVE-2023-47612; CVE-2024-6387; CVE-2023-47613; CVE-2023-47611; CVE-2023-47614; CVE-2023-47616; CVE-2023-47610" ;
    icsa:cweNumber "CWE-22; CWE-200; CWE-120; CWE-362; CWE-269" ;
    icsa:hasCVE cve-res:CVE-2023-47610,
        cve-res:CVE-2023-47611,
        cve-res:CVE-2023-47612,
        cve-res:CVE-2023-47613,
        cve-res:CVE-2023-47614,
        cve-res:CVE-2023-47615,
        cve-res:CVE-2023-47616,
        cve-res:CVE-2024-6387 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-269,
        cwe-res:CWE-362 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arctic Wireless Gateways" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2023-47615; CVE-2023-47612; 3.4.11; CVE-2023-47611; CVE-2023-47613; CVE-2023-47614; CVE-2023-47616).; 3.4.13 (CVE-2024-6387) Arctic Wireless Gateways ARG600; ARC600; ARR600: All versions with Telit PLS62-W wireless modem module (CVE-2023-47610; ABB reports there are vulnerabilities in the Telit PL62-W wireless modem module used in the following products: Arctic ARP600; 3.4.12; ARR600: Firmware versions 3.4.10" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-100-09" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-105-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-105-01" ;
    dcterms:issued "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Runtime" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-30280" ;
    icsa:cweNumber "CWE-204" ;
    icsa:hasCVE cve-res:CVE-2025-30280 ;
    icsa:hasCWE cwe-res:CWE-204 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Mendix Runtime: V10: Versions prior to 10.21 Mendix Runtime V8: All versions Mendix Runtime V9: All versions Mendix Runtime V10.6: All versions Mendix Runtime V10.12: All versions Mendix Runtime V10.18: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-105-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-105-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-105-02" ;
    dcterms:issued "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Device Kit" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-54092" ;
    icsa:cweNumber "CWE-1390" ;
    icsa:hasCVE cve-res:CVE-2024-54092 ;
    icsa:hasCWE cwe-res:CWE-1390 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Edge Device Kit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Industrial Edge Device Kit - arm64 V1.19: All versions Industrial Edge Device Kit - x86-64 V1.21: Versions prior to V1.21.1-1 Industrial Edge Device Kit - arm64 V1.17: All versions Industrial Edge Device Kit - arm64 V1.21: Versions prior to V1.21.1-1 Industrial Edge Device Kit - x86-64 V1.19: All versions Industrial Edge Device Kit - arm64 V1.18: All versions Industrial Edge Device Kit - x86-64 V1.20: Versions prior to V1.20.2-1 Industrial Edge Device Kit - arm64 V1.20: Versions prior to V1.20.2-1 Industrial Edge Device Kit - x86-64 V1.18: All versions Industrial Edge Device Kit - x86-64 V1.17: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-105-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-105-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-105-03" ;
    dcterms:issued "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-23814" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-23814 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Base Module (6ES7972-5AA10-0AB0): All versions SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0): Versions prior to V4.4 SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0): All versions SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0): Versions prior to V4.4 SIMATIC ET 200pro IM 154-3 PN HF (6ES7154-3AB00-0AB0): All versions SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0): All versions SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0): All versions SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0): All versions SIWAREX WP522 ST (7MH4980-2AA01): All versions SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0): Versions prior to V4.4 SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0): Versions prior to V4.4.; Modem Module ST (6ES7972-5AA51-0AB0): All versions SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0): All versions SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0): All versions SIMATIC ET 200S IM 151-3 PN ST (6ES7151-3AA23-0AB0): All versions SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0): Versions prior to V4.4 SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA00-0AB0): All versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-2AB0): All versions SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0): Versions prior to V4.4 SIWAREX WP241 (7MH4960-4AA01): All versions SIDOOR ATE530S COATED: All versions SIWAREX WP521 ST (7MH4980-1AA01): All versions SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0): All versions SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0): Versions prior to V4.4 SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL00-0AB0): All versions SIMATIC Power Line Booster PLB; Siemens reports that the following products are affected: SIMOCODE pro V PROFINET: All versions SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0): Versions prior to V4.4 SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0): Versions prior to V4.4 SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0): All versions SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0): Versions prior to V4.4 SIDOOR ATD430W: All versions SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0): All versions SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0): All versions SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0): All versions SIPLUS HCS4300 CIM4310 (6BK1943-1AA00-0AA0): All versions SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU01-0BN0): All versions SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN00-2AB0): All versions SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0): All versions SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0): All versions SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0): All versions SIMATIC ET 200pro IM 154-4 PN HF (6ES7154-4AB10-0AB0): All versions SIPLUS ET 200M IM 153-4 PN IO HF (6AG1153-4BA00-7XB0): All versions SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0): Versions prior to V4.4 SIPLUS ET 200SP IM 155-6 PN ST (6AG1155-6AU00-7BN0): All versions SIPLUS ET 200SP IM 155-6 PN ST (6AG1155-6AU01-7BN0): All versions SIMATIC CFU DIQ (6ES7655-5PX31-1XX0): Versions prior to V2.0.0 SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0): All versions SIPLUS ET 200SP IM 155-6 PN ST BA (6AG1155-6AA00-7BN0): All versions SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0): All versions SIMATIC ET 200SP IM 155-6 PN HS (6ES7155-6AU00-0DN0): All versions SIPLUS ET 200S IM151-3 PN HF (6AG1151-3BA23-7AB0): All versions SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0): Versions prior to V4.4 SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0): Versions prior to V4.4 SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA00-0BN0): All versions SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0): All versions SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0): Versions prior to V4.4 SIMATIC ET 200M IM 153-4 PN IO ST (6ES7153-4AA01-0XB0): All versions SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0): All versions SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0): Versions prior to V4.4 SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA01-0AB0): All versions SIMATIC TDC CPU555: All versions SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0): Versions prior to V4.4 SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0): All versions SIPLUS ET 200SP IM 155-6 PN ST TX RAIL (6AG2155-6AU01-4BN0): All versions SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0): Versions prior to V4.4 SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0): All versions SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0): Versions prior to V4.4 SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0): All versions SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0): Versions prior to V4.4 SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL00-2AB0): All versions SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0): All versions SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0): Versions prior to V4.4 SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0): All versions SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0): All versions SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0): Versions prior to V4.4 SIWAREX WP251 (7MH4960-6AA01): All versions SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0): Versions prior to V4.4 SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL00-2AB0): All versions SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants): Versions priror to V1.3 SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0): All versions SIMATIC TDC CP51M1: All versions SIPLUS ET 200MP IM 155-5 PN ST (6AG1155-5AA00-7AB0): All versions SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0): All versions SIPLUS ET 200MP IM 155-5 PN ST TX RAIL (6AG2155-5AA00-4AB0): All versions SIPLUS ET 200MP IM 155-5 PN ST TX RAIL (6AG2155-5AA01-4AB0): All versions SIPLUS ET 200SP IM 155-6 PN ST TX RAIL (6AG2155-6AU00-4BN0): All versions SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0): Versions prior to V4.4 SIPLUS ET 200M IM 153-4 PN IO ST (6AG1153-4AA01-7XB0): All versions SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0): All versions SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-7AB0): All versions SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0): Versions prior to V4.4 SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM00-0AB0): All versions SIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0): All versions SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0): All versions SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0): Versions prior to V4.4 SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0): Versions prior to V4.4 SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0): Versions prior to V4.4 SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0): All versions SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL (6AG2155-6AA00-4BN0): All versions SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK00-2AB0): All versions SIMATIC ET 200S IM 151-3 PN HS (6ES7151-3BA60-0AB0): All versions SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0): Versions prior to V4.4 SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0): All versions SIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0): All versions SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0): Versions prior to V4.4 SIMATIC ET 200MP IM 155-5 PN BA (6ES7155-5AA00-0AA0): All versions SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN00-0AB0): All versions SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK00-2AB0): All versions SIMATIC ET 200M IM 153-4 PN IO HF (6ES7153-4BA00-0XB0): All versions SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0): Versions prior to V4.4 SIMATIC CFU PA (6ES7655-5PX11-1XX0): Versions prior to V2.0 SIMATIC ET 200S IM 151-3 PN HF (6ES7151-3BA23-0AB0): All versions SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants): Versions prior to V8.3 SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0): Versions prior to V4.4 SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0): Versions prior to V4.4 SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0): Versions prior to V4.4 SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM00-0AB0): All versions SIWAREX WP231 (7MH4960-2AA01): All versions SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0): Versions prior to V4.4 SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0): All versions SIMATIC CFU PA (6ES7655-5PX11-0XX0): Versions prior to V2.0.0 SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0): Versions prior to V4.4 SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0): All versions SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0): All versions SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0): Versions prior to V4.4 SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0): Versions prior to V4.4 SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0): Versions prior to V4.4 SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0): All versions SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0): Versions prior to V4.4 SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants): All versions SINUMERIK 840D sl: All versions SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0): All versions SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL00-0AB0): All versions SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0): Versions prior to V4.4 SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants): All versions SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0): Versions prior to V4.4 SIMATIC ET 200S IM 151-3 PN FO (6ES7151-3BB23-0AB0): All versions SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0): All versions SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK00-0AB0): All versions SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0): All versions SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0): All versions SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0): Versions prior to V4.4 SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0): Versions prior to V4.4 SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0): All versions SIPLUS ET 200S IM151-3 PN ST (6AG1151-3AA23-2AB0): All versions SIMATIC ET 200SP IM 155-6 PN BA (6ES7155-6AR00-0AN0): All versions SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0): All versions SIPLUS ET 200SP IM 155-6 PN ST BA (6AG1155-6AA01-7BN0): All versions SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN00-0AB0): All versions SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0): Versions prior to V4.4 SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0): All versions SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants): All versions SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0): Versions prior to V4.4 SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants): All versions SIPLUS HCS4200 CIM4210C (6BK1942-1AA00-0AA1): All versions SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL (6AG2155-6AA01-4BN0): All versions SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU00-0BN0): All versions SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0): All versions SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0): Versions prior to V4.4 SIDOOR ATE530G COATED (6FB1221-5SM10-7BP0): All versions SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA01-0BN0): All versions SIPLUS ET 200MP IM 155-5 PN ST (6AG1155-5AA01-7AB0): All versions SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0): Versions prior to V4.4 SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0): Versions prior to V4.4 SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0): All versions SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK00-2AB0): All versions SIPLUS HCS4200 CIM4210 (6BK1942-1AA00-0AA0): All versions SIMATIC Power Line Booster PLB" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-105-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-105-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-105-04" ;
    dcterms:issued "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Growatt Cloud Applications" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-27568; CVE-2025-30257; CVE-2025-24487; CVE-2025-30511; CVE-2025-31357; CVE-2025-31360; CVE-2025-30254; CVE-2025-31945; CVE-2025-27939; CVE-2025-30510; CVE-2025-24850; CVE-2025-27719; CVE-2025-27927; CVE-2025-27565; CVE-2025-24297; CVE-2025-31941; CVE-2025-31950; CVE-2025-31949; CVE-2025-27929; CVE-2025-30512; CVE-2025-25276; CVE-2025-26857; CVE-2025-30514; CVE-2025-31147; CVE-2025-27561; CVE-2025-24315; CVE-2025-31654; CVE-2025-27938; CVE-2025-31933; CVE-2025-27575" ;
    icsa:cweNumber "CWE-79; CWE-639; CWE-351; CWE-15" ;
    icsa:hasCVE cve-res:CVE-2025-24297,
        cve-res:CVE-2025-24315,
        cve-res:CVE-2025-24487,
        cve-res:CVE-2025-24850,
        cve-res:CVE-2025-25276,
        cve-res:CVE-2025-26857,
        cve-res:CVE-2025-27561,
        cve-res:CVE-2025-27565,
        cve-res:CVE-2025-27568,
        cve-res:CVE-2025-27575,
        cve-res:CVE-2025-27719,
        cve-res:CVE-2025-27927,
        cve-res:CVE-2025-27929,
        cve-res:CVE-2025-27938,
        cve-res:CVE-2025-27939,
        cve-res:CVE-2025-30254,
        cve-res:CVE-2025-30257,
        cve-res:CVE-2025-30510,
        cve-res:CVE-2025-30511,
        cve-res:CVE-2025-30512,
        cve-res:CVE-2025-30514,
        cve-res:CVE-2025-31147,
        cve-res:CVE-2025-31357,
        cve-res:CVE-2025-31360,
        cve-res:CVE-2025-31654,
        cve-res:CVE-2025-31933,
        cve-res:CVE-2025-31941,
        cve-res:CVE-2025-31945,
        cve-res:CVE-2025-31949,
        cve-res:CVE-2025-31950 ;
    icsa:hasCWE cwe-res:CWE-15,
        cwe-res:CWE-351,
        cwe-res:CWE-639,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cloud Applications" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Growatt products are affected: Growatt cloud portal: Versions prior to 3.6.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-105-04" ;
    icsa:vendor "Growatt" ;
    icsa:year 2025 .

icsa-res:ICSA-25-105-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-105-05" ;
    dcterms:issued "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Lantronix XPort (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-2567" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-2567 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XPort" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Lantronix products are affected: XPort: Versions 6.5.0.7 to 7.0.0.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-105-05" ;
    icsa:vendor "Lantronix" ;
    icsa:year 2025 .

icsa-res:ICSA-25-105-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-105-06" ;
    dcterms:issued "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "National Instruments LabVIEW" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-2631; CVE-2025-2632" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-2631,
        cve-res:CVE-2025-2632 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LabVIEW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LabVIEW are affected: LabVIEW: 2025 Q1 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-105-06" ;
    icsa:vendor "National Instruments Corp (NI)" ;
    icsa:year 2025 .

icsa-res:ICSA-25-105-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-105-07" ;
    dcterms:issued "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics COMMGR (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-3495" ;
    icsa:cweNumber "CWE-338" ;
    icsa:hasCVE cve-res:CVE-2025-3495 ;
    icsa:hasCWE cwe-res:CWE-338 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMMGR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: COMMGR (Version 1): All versions COMMGR (Version 2): Versions v2.9.0 and prior.; The following versions of COMMGR; a software management platform that contain virtual PLCs" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-105-07" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-105-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-105-08" ;
    dcterms:issued "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB M2M Gateway" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-40674; CVE-2023-25690; CVE-2023-29007; CVE-2023-20593; CVE-2022-42898; CVE-2023-3341; CVE-2022-25147; CVE-2020-22218; CVE-2023-38408; CVE-2022-42703; CVE-2023-48795; CVE-2023-42753; CVE-2023-20569; CVE-2022-38178; CVE-2023-35001; CVE-2022-37434; CVE-2023-22809; CVE-2023-2828; CVE-2022-43750; CVE-2023-3609; CVE-2022-2795; CVE-2012-4929; CVE-2013-0169; CVE-2023-24329; CVE-2023-40217; CVE-2022-38177; CVE-2022-4378; CVE-2023-32233; CVE-2021-25220; CVE-2022-2964; CVE-2023-20032; CVE-2022-41974; CVE-2022-3564; CVE-1999-0524; CVE-2022-29154; CVE-2022-41903; CVE-2016-10009; CVE-2023-0286; CVE-2022-2526; CVE-2021-26401; CVE-2023-25652; CVE-2022-23521" ;
    icsa:cweNumber "CWE-426; CWE-416; CWE-428; CWE-400; CWE-22; CWE-444; CWE-200; CWE-770; CWE-209; CWE-401; CWE-326; CWE-74; CWE-190; CWE-362; CWE-843; CWE-20; CWE-212; CWE-120; CWE-787; CWE-131; CWE-119; CWE-269; CWE-203; CWE-354" ;
    icsa:hasCVE cve-res:CVE-1999-0524,
        cve-res:CVE-2012-4929,
        cve-res:CVE-2013-0169,
        cve-res:CVE-2016-10009,
        cve-res:CVE-2020-22218,
        cve-res:CVE-2021-25220,
        cve-res:CVE-2021-26401,
        cve-res:CVE-2022-23521,
        cve-res:CVE-2022-25147,
        cve-res:CVE-2022-2526,
        cve-res:CVE-2022-2795,
        cve-res:CVE-2022-29154,
        cve-res:CVE-2022-2964,
        cve-res:CVE-2022-3564,
        cve-res:CVE-2022-37434,
        cve-res:CVE-2022-38177,
        cve-res:CVE-2022-38178,
        cve-res:CVE-2022-40674,
        cve-res:CVE-2022-41903,
        cve-res:CVE-2022-41974,
        cve-res:CVE-2022-42703,
        cve-res:CVE-2022-42898,
        cve-res:CVE-2022-43750,
        cve-res:CVE-2022-4378,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-20032,
        cve-res:CVE-2023-20569,
        cve-res:CVE-2023-20593,
        cve-res:CVE-2023-22809,
        cve-res:CVE-2023-24329,
        cve-res:CVE-2023-25652,
        cve-res:CVE-2023-25690,
        cve-res:CVE-2023-2828,
        cve-res:CVE-2023-29007,
        cve-res:CVE-2023-32233,
        cve-res:CVE-2023-3341,
        cve-res:CVE-2023-35001,
        cve-res:CVE-2023-3609,
        cve-res:CVE-2023-38408,
        cve-res:CVE-2023-40217,
        cve-res:CVE-2023-42753,
        cve-res:CVE-2023-48795 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-131,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-203,
        cwe-res:CWE-209,
        cwe-res:CWE-212,
        cwe-res:CWE-22,
        cwe-res:CWE-269,
        cwe-res:CWE-326,
        cwe-res:CWE-354,
        cwe-res:CWE-362,
        cwe-res:CWE-400,
        cwe-res:CWE-401,
        cwe-res:CWE-416,
        cwe-res:CWE-426,
        cwe-res:CWE-428,
        cwe-res:CWE-444,
        cwe-res:CWE-74,
        cwe-res:CWE-770,
        cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "M2M Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the following products are affected: M2M Gateway ARM600: Versions 4.1.2 up to and including 5.0.3 M2M Gateway SW: Versions 5.0.1 up to and including 5.0.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-105-08" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-105-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-105-09" ;
    dcterms:issued "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Europe B.V. smartRTU" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-3232; CVE-2025-3128" ;
    icsa:cweNumber "CWE-306; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-3128,
        cve-res:CVE-2025-3232 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "smartRTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric Europe reports following versions of smartRTU are affected: smartRTU: Versions 3.37 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-105-09" ;
    icsa:vendor "Mitsubishi Electric Europe B.V." ;
    icsa:year 2025 .

icsa-res:ICSA-25-107-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-107-01" ;
    dcterms:issued "2025-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Trio Q Licensed Data Radio" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-2441; CVE-2025-2442; CVE-2025-2440" ;
    icsa:cweNumber "CWE-922; CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2025-2440,
        cve-res:CVE-2025-2441,
        cve-res:CVE-2025-2442 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Trio Q Licensed Data Radio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric Trio Q Licensed Data Radio: Versions prior to 2.7.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-107-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-107-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-107-02" ;
    dcterms:issued "2025-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Sage Series" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-37037; CVE-2024-37036; CVE-2024-37040; CVE-2024-5560; CVE-2024-37038; CVE-2024-37039" ;
    icsa:cweNumber "CWE-22; CWE-120; CWE-276; CWE-787; CWE-125; CWE-252" ;
    icsa:hasCVE cve-res:CVE-2024-37036,
        cve-res:CVE-2024-37037,
        cve-res:CVE-2024-37038,
        cve-res:CVE-2024-37039,
        cve-res:CVE-2024-37040,
        cve-res:CVE-2024-5560 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-22,
        cwe-res:CWE-252,
        cwe-res:CWE-276,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sage series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Sage 1410: Versions C3414-500-S02K5_P8 and prior Sage 1430: Versions C3414-500-S02K5_P8 and prior Sage 1450: Versions C3414-500-S02K5_P8 and prior Sage 2400: Versions C3414-500-S02K5_P8 and prior Sage 4400: Versions C3414-500-S02K5_P8 and prior Sage 3030 Magnum: Versions C3414-500-S02K5_P8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-107-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-107-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-107-03" ;
    dcterms:issued "2025-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric ConneXium Network Manager" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-2223; CVE-2025-2222" ;
    icsa:cweNumber "CWE-552; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-2222,
        cve-res:CVE-2025-2223 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-552 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ConneXium Network Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric ConneXium Network Manager: Version 2.0.01 (CVE-2025-2222) Schneider Electric ConneXium Network Manager: All versions (CVE-2025-2223)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-107-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-107-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-107-04" ;
    dcterms:issued "2025-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa Recorder Products" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2025-1863" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-1863 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GX10, GX20, GP10, GP20, GM Data Acquisition System, DX1000, DX2000, DX1000N, FX1000, μR10000, μR20000, MW100, DX1000T, DX2000T, CX1000, CX2000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Yokogawa recorder products are affected: GX10 / GX20 / GP10 / GP20 Paperless Recorders: Versions R5.04.01 and earlier GM Data Acquisition System: Versions R5.05.01 and earlier DX1000 / DX2000 / DX1000N Paperless Recorders: Versions R4.21 and earlier FX1000 Paperless Recorders: Versions R1.31 and earlier μR10000 / μR20000 Chart Recorders: Versions R1.51 and earlier MW100 Data Acquisition Units: All versions DX1000T / DX2000T Paperless Recorders: All versions CX1000 / CX2000 Paperless Recorders: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-107-04" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2025 .

icsa-res:ICSA-25-112-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-112-01" ;
    dcterms:issued "2025-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TeleControl Server Basic SQL" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-32834; CVE-2025-32863; CVE-2025-32830; CVE-2025-32845; CVE-2025-32837; CVE-2025-32839; CVE-2025-27539; CVE-2025-31349; CVE-2025-32823; CVE-2025-27540; CVE-2025-32833; CVE-2025-32835; CVE-2025-32843; CVE-2025-32856; CVE-2025-30003; CVE-2025-30030; CVE-2025-32867; CVE-2025-31343; CVE-2025-32836; CVE-2025-32844; CVE-2025-32855; CVE-2025-32859; CVE-2025-32828; CVE-2025-30002; CVE-2025-32860; CVE-2025-30031; CVE-2025-32848; CVE-2025-27495; CVE-2025-32822; CVE-2025-32865; CVE-2025-32872; CVE-2025-31352; CVE-2025-32846; CVE-2025-32831; CVE-2025-32475; CVE-2025-32847; CVE-2025-32854; CVE-2025-32849; CVE-2025-32864; CVE-2025-32866; CVE-2025-32841; CVE-2025-31351; CVE-2025-32861; CVE-2025-32862; CVE-2025-31353; CVE-2025-32832; CVE-2025-32852; CVE-2025-32857; CVE-2025-32868; CVE-2025-32825; CVE-2025-32869; CVE-2025-32853; CVE-2025-32851; CVE-2025-32871; CVE-2025-29905; CVE-2025-31350; CVE-2025-32838; CVE-2025-32842; CVE-2025-32840; CVE-2025-32829; CVE-2025-30032; CVE-2025-32870; CVE-2025-32850; CVE-2025-32826; CVE-2025-32827; CVE-2025-32858; CVE-2025-32824" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2025-27495,
        cve-res:CVE-2025-27539,
        cve-res:CVE-2025-27540,
        cve-res:CVE-2025-29905,
        cve-res:CVE-2025-30002,
        cve-res:CVE-2025-30003,
        cve-res:CVE-2025-30030,
        cve-res:CVE-2025-30031,
        cve-res:CVE-2025-30032,
        cve-res:CVE-2025-31343,
        cve-res:CVE-2025-31349,
        cve-res:CVE-2025-31350,
        cve-res:CVE-2025-31351,
        cve-res:CVE-2025-31352,
        cve-res:CVE-2025-31353,
        cve-res:CVE-2025-32475,
        cve-res:CVE-2025-32822,
        cve-res:CVE-2025-32823,
        cve-res:CVE-2025-32824,
        cve-res:CVE-2025-32825,
        cve-res:CVE-2025-32826,
        cve-res:CVE-2025-32827,
        cve-res:CVE-2025-32828,
        cve-res:CVE-2025-32829,
        cve-res:CVE-2025-32830,
        cve-res:CVE-2025-32831,
        cve-res:CVE-2025-32832,
        cve-res:CVE-2025-32833,
        cve-res:CVE-2025-32834,
        cve-res:CVE-2025-32835,
        cve-res:CVE-2025-32836,
        cve-res:CVE-2025-32837,
        cve-res:CVE-2025-32838,
        cve-res:CVE-2025-32839,
        cve-res:CVE-2025-32840,
        cve-res:CVE-2025-32841,
        cve-res:CVE-2025-32842,
        cve-res:CVE-2025-32843,
        cve-res:CVE-2025-32844,
        cve-res:CVE-2025-32845,
        cve-res:CVE-2025-32846,
        cve-res:CVE-2025-32847,
        cve-res:CVE-2025-32848,
        cve-res:CVE-2025-32849,
        cve-res:CVE-2025-32850,
        cve-res:CVE-2025-32851,
        cve-res:CVE-2025-32852,
        cve-res:CVE-2025-32853,
        cve-res:CVE-2025-32854,
        cve-res:CVE-2025-32855,
        cve-res:CVE-2025-32856,
        cve-res:CVE-2025-32857,
        cve-res:CVE-2025-32858,
        cve-res:CVE-2025-32859,
        cve-res:CVE-2025-32860,
        cve-res:CVE-2025-32861,
        cve-res:CVE-2025-32862,
        cve-res:CVE-2025-32863,
        cve-res:CVE-2025-32864,
        cve-res:CVE-2025-32865,
        cve-res:CVE-2025-32866,
        cve-res:CVE-2025-32867,
        cve-res:CVE-2025-32868,
        cve-res:CVE-2025-32869,
        cve-res:CVE-2025-32870,
        cve-res:CVE-2025-32871,
        cve-res:CVE-2025-32872 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TeleControl Server Basic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: TeleControl Server Basic: versions prior to V3.1.2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-112-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-112-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-112-02" ;
    dcterms:issued "2025-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TeleControl Server Basic" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-29931" ;
    icsa:cweNumber "CWE-130" ;
    icsa:hasCVE cve-res:CVE-2025-29931 ;
    icsa:hasCWE cwe-res:CWE-130 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TeleControl Server Basic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: TeleControl Server Basic: Versions prior to V3.1.2.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-112-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-112-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-112-03" ;
    dcterms:issued "2025-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wiser Home Controller WHC-5918A" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-6407" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2024-6407 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wiser Home Controller WHC-5918A" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following products are affected: Wiser Home Controller WHC-5918A: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-112-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-112-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-112-04" ;
    dcterms:issued "2025-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB MV Drives" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-37548; CVE-2023-37549; CVE-2023-37556; CVE-2023-37550; CVE-2023-37559; CVE-2023-37557; CVE-2023-37552; CVE-2023-37546; CVE-2023-37545; CVE-2022-4046; CVE-2023-37553; CVE-2023-37554; CVE-2023-37547; CVE-2023-37555; CVE-2023-37558" ;
    icsa:cweNumber "CWE-119; CWE-20; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2022-4046,
        cve-res:CVE-2023-37545,
        cve-res:CVE-2023-37546,
        cve-res:CVE-2023-37547,
        cve-res:CVE-2023-37548,
        cve-res:CVE-2023-37549,
        cve-res:CVE-2023-37550,
        cve-res:CVE-2023-37552,
        cve-res:CVE-2023-37553,
        cve-res:CVE-2023-37554,
        cve-res:CVE-2023-37555,
        cve-res:CVE-2023-37556,
        cve-res:CVE-2023-37557,
        cve-res:CVE-2023-37558,
        cve-res:CVE-2023-37559 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-20,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MV Drives" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the following MV Drives are affected by CODESYS RTS (Runtime System) vulnerabilities: ACS6080: LAAAA 2.10.0 to LAAAB 5.06.1 ACS5000: LAAAB 4.03.0 to LAAAB 5.06.1 ACS6000: LAAAA 2.10.0 to LAAAB 5.06.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-112-04" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-114-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-114-01" ;
    dcterms:issued "2019-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Controllers (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2019-6806; CVE-2019-6828; CVE-2019-6830; CVE-2019-6808; CVE-2018-7842; CVE-2018-7844; CVE-2018-7848; CVE-2019-6829; CVE-2018-7845; CVE-2018-7843; CVE-2018-7854; CVE-2019-6807; CVE-2018-7847; CVE-2018-7852; CVE-2018-7849; CVE-2018-7850; CVE-2018-7857; CVE-2018-7853; CVE-2018-7856; CVE-2018-7855; CVE-2019-6809; CVE-2018-7846" ;
    icsa:cweNumber "CWE-200; CWE-290; CWE-284; CWE-248; CWE-807; CWE-501; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2018-7842,
        cve-res:CVE-2018-7843,
        cve-res:CVE-2018-7844,
        cve-res:CVE-2018-7845,
        cve-res:CVE-2018-7846,
        cve-res:CVE-2018-7847,
        cve-res:CVE-2018-7848,
        cve-res:CVE-2018-7849,
        cve-res:CVE-2018-7850,
        cve-res:CVE-2018-7852,
        cve-res:CVE-2018-7853,
        cve-res:CVE-2018-7854,
        cve-res:CVE-2018-7855,
        cve-res:CVE-2018-7856,
        cve-res:CVE-2018-7857,
        cve-res:CVE-2019-6806,
        cve-res:CVE-2019-6807,
        cve-res:CVE-2019-6808,
        cve-res:CVE-2019-6809,
        cve-res:CVE-2019-6828,
        cve-res:CVE-2019-6829,
        cve-res:CVE-2019-6830 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-200,
        cwe-res:CWE-248,
        cwe-res:CWE-284,
        cwe-res:CWE-290,
        cwe-res:CWE-501,
        cwe-res:CWE-807 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "vers:intdot/<2.80; vers:all/* () | PLC Simulator PLC Simulator () | EcoStruxure Control Expert vers:intdot/<15.1; vers:intdot/<4.20; vers:all/* () | Modicon MC80 Controller () | Modicon MC80 Firmware vers:intdot/<1.80; 4.20; vers:all/* () | Modicon Quantum Safety Controller () | Modicon Quantum Safety Firmware vers:all/* () | Modicon Premium Controller () | Modicon Premium Firmware vers:intdot/<3.20; Modicon M580 Controller () | Modicon M580 Firmware vers:intdot/<2.90; vers:intdot/<3.60; 1.80; 15.1 (); 3.60; 3.20; vers:intdot/<3.01; vers:all/* () | Modicon M340 Controller () | Modicon M340 Firmware vers:intdot/<3.10; vers:all/* () | Modicon Momentum Unity M1E Processor (part numbers 171CBU*) Controller () | Modicon Momentum Unity M1E Processor Firmware vers:generic/ | Modicon Quantum Controller () | Modicon Quantum Controller () | Modicon Quantum Controller () | Modicon Quantum Controller () | Modicon Quantum Controller () | Modicon Quantum Controller () | Modicon Quantum Controller () | Modicon Quantum Controller () | Modicon Quantum Controller () | Modicon Quantum Controller () | Modicon Quantum Firmware vers:intdot/<3.60" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-114-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2019 .

icsa-res:ICSA-25-114-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-114-02" ;
    dcterms:issued "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "ALBEDO Telecom Net.Time - PTP/NTP Clock" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Spain" ;
    icsa:criticalInfrastructureSector "Communications; Financial Services; Information Technology" ;
    icsa:cveNumber "CVE-2025-2185" ;
    icsa:cweNumber "CWE-613" ;
    icsa:hasCVE cve-res:CVE-2025-2185 ;
    icsa:hasCWE cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Net.Time - PTP/NTP clock" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Net.Time - PTP/NTP clock is affected: Net.Time - PTP/NTP clock (Serial No. NBC0081P): Software release 1.4.4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-114-02" ;
    icsa:vendor "ALBEDO Telecom" ;
    icsa:year 2025 .

icsa-res:ICSA-25-114-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-114-03" ;
    dcterms:issued "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Vestel AC Charger" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Turkey" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-3606" ;
    icsa:cweNumber "CWE-497" ;
    icsa:hasCVE cve-res:CVE-2025-3606 ;
    icsa:hasCWE cwe-res:CWE-497 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AC Charger" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of AC Charger are affected: AC Charger EVC04: Version 3.75.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-114-03" ;
    icsa:vendor "Vestel" ;
    icsa:year 2025 .

icsa-res:ICSA-25-114-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-114-04" ;
    dcterms:issued "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Nice Linear eMerge E3" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2024-9441" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2024-9441 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Linear eMerge E3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Nice Linear eMerge E3 are affected: Linear eMerge E3: Versions 1.00-07 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-114-04" ;
    icsa:vendor "Nice" ;
    icsa:year 2025 .

icsa-res:ICSA-25-114-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-114-05" ;
    dcterms:issued "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls ICU" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2025-26382" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-26382 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ICU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the following versions of ICU are affected: ICU: Versions prior to 6.9.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-114-05" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-114-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-114-06" ;
    dcterms:issued "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Planet Technology Network Products" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-46273; CVE-2025-46272; CVE-2025-46275; CVE-2025-46274; CVE-2025-46271" ;
    icsa:cweNumber "CWE-798; CWE-306; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-46271,
        cve-res:CVE-2025-46272,
        cve-res:CVE-2025-46273,
        cve-res:CVE-2025-46274,
        cve-res:CVE-2025-46275 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-78,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Planet Technology Network Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Planet Technology products are affected: UNI-NMS-Lite: Versions 1.0b211018 and prior NMS-500: All Versions NMS-1000V: All Versions WGS-804HPT-V2: Versions 2.305b250121 and prior WGS-4215-8T2S: Versions 1.305b241115 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-114-06" ;
    icsa:vendor "Planet Technology" ;
    icsa:year 2025 .

icsa-res:ICSA-25-119-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-119-01" ;
    dcterms:issued "2025-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-3618; CVE-2025-3617" ;
    icsa:cweNumber "CWE-119; CWE-276" ;
    icsa:hasCVE cve-res:CVE-2025-3617,
        cve-res:CVE-2025-3618 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ThinManager; a software management platform; are affected: ThinManager: Version 14.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-119-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-119-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-119-02" ;
    dcterms:issued "2025-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics ISPSoft" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-22882; CVE-2025-22884; CVE-2025-22883" ;
    icsa:cweNumber "CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-22882,
        cve-res:CVE-2025-22883,
        cve-res:CVE-2025-22884 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ISPSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ISPSoft are affected: ISPSoft: Versions 3.19 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-119-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-121-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-121-01" ;
    dcterms:issued "2025-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "KUNBUS GmbH Revolution Pi (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-24522; CVE-2025-36558; CVE-2025-35996; CVE-2025-32011" ;
    icsa:cweNumber "CWE-306; CWE-97; CWE-305" ;
    icsa:hasCVE cve-res:CVE-2025-24522,
        cve-res:CVE-2025-32011,
        cve-res:CVE-2025-35996,
        cve-res:CVE-2025-36558 ;
    icsa:hasCWE cwe-res:CWE-305,
        cwe-res:CWE-306,
        cwe-res:CWE-97 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Revolution Pi" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of KUNBUS Revolution Pi are affected: Revolution Pi OS Bookworm: Versions 01/2025 and earlier (CVE-2025-24522) Revolution Pi PiCtory: Versions 2.5.0 through 2.11.1 (CVE-2025-32011) Revolution Pi PiCtory: Versions 2.11.1 and earlier (CVE-2025-35996; CVE-2025-36558)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-121-01" ;
    icsa:vendor "KUNBUS" ;
    icsa:year 2025 .

icsa-res:ICSA-25-126-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-126-01" ;
    dcterms:issued "2025-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Optigo Networks ONS NC600" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-4041" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2025-4041 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ONS NC600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Optigo Networks ONS NC600 are affected: ONS NC600: Versions 4.2.1-084 through 4.7.2-330." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-126-01" ;
    icsa:vendor "Optigo Networks" ;
    icsa:year 2025 .

icsa-res:ICSA-25-126-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-126-02" ;
    dcterms:issued "2025-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Milesight UG65-868M-EA" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-4043" ;
    icsa:cweNumber "CWE-1274" ;
    icsa:hasCVE cve-res:CVE-2025-4043 ;
    icsa:hasCWE cwe-res:CWE-1274 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "UG65-868M-EA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of UG65-868M-EA; an industrial gateway; are affected: UG65-868M-EA: Firmware versions prior to 60.0.0.46." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-126-02" ;
    icsa:vendor "Milesight" ;
    icsa:year 2025 .

icsa-res:ICSA-25-126-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-126-03" ;
    dcterms:issued "2025-05-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "BrightSign Players (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Financial Services; Food and Agriculture; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-54756; CVE-2025-3925" ;
    icsa:cweNumber "CWE-250; CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2025-3925,
        cve-res:CVE-2025-54756 ;
    icsa:hasCWE cwe-res:CWE-1392,
        cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BrightSign Players (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "BrightSign BrightSign OS series 4 players: <v8.5.53.1; BrightSign BrightSign OS series 5 players: <v9.0.166" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-126-03" ;
    icsa:vendor "BrightSign" ;
    icsa:year 2025 .

icsa-res:ICSA-25-128-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-128-01" ;
    dcterms:issued "2025-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-4098" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-4098 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Cscape: Version 10.0 (10.0.415.2) SP1.; The following versions of Horner Automation Cscape; a control system application programming software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-128-01" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-128-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-128-02" ;
    dcterms:issued "2025-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 series" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-5768; CVE-2023-5767; CVE-2023-5769" ;
    icsa:cweNumber "CWE-79; CWE-1285" ;
    icsa:hasCVE cve-res:CVE-2023-5767,
        cve-res:CVE-2023-5768,
        cve-res:CVE-2023-5769 ;
    icsa:hasCWE cwe-res:CWE-1285,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports the following products are affected: RTU500 series: Versions 12.0.1 to 12.0.14 RTU500 series: Versions 12.2.1 to 12.2.11 RTU500 series: Versions 12.4.1 to 12.4.11 RTU500 series: Versions 12.6.1 to 12.6.9 RTU500 series: Versions 12.7.1 to 12.7.6 RTU500 series: Versions 13.2.1 to 13.2.6 RTU500 series: Versions 13.4.1 to 13.4.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-128-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-128-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-128-03" ;
    dcterms:issued "2025-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Multiple FA Products (Update D)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-3511" ;
    icsa:cweNumber "CWE-1284" ;
    icsa:hasCVE cve-res:CVE-2025-3511 ;
    icsa:hasCWE cwe-res:CWE-1284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Multiple FA Products (Update D)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32D <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32T <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32D <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32T <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32D <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32T <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCE3-32D <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A4-16D <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A2-16T <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16D <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16T <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16D <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16T <=09 | Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE <=09 | Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4 <=07 | Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4 <=07 | Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4 <=07 | Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4 <=07 | Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41P01 01 | Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41D01 01 | Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41PD02 01 | Mitsubishi Electric CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300 <=1.08J | Mitsubishi Electric CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60 <=1.08J | Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2 <=26 | Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP <=10 | Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX <=05 | Mitsubishi Electric MELSEC iQ-R Series Ethernet Interface Module RJ71EN71 <=85 | Mitsubishi Electric CC-Link IE TSN master/local Station Communication LSI CP610 NZ2GACP610-60 <=05 | Mitsubishi Electric CC-Link IE TSN master/local Station Communication LSI CP610 NZ2KT-NPETNG51 <=05 | Mitsubishi Electric MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS <=1.020 | Mitsubishi Electric MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET <=1.200 | Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP <=1.106 | Mitsubishi Electric MELSEC iQ-R Series CPU module R04ENCPU (Network Part) <=85 | Mitsubishi Electric MELSEC iQ-R Series CPU module R08ENCPU (Network Part) <=85 | Mitsubishi Electric MELSEC iQ-R Series CPU module R16ENCPU (Network Part) <=85 | Mitsubishi Electric MELSEC iQ-R Series CPU module R32ENCPU (Network Part) <=85 | Mitsubishi Electric MELSEC iQ-R Series CPU module R120ENCPU (Network Part) <=85" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-128-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-133-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-133-01" ;
    dcterms:issued "2025-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Service Suite" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-28615; CVE-2022-26377; CVE-2022-30556; CVE-2022-29404; CVE-2023-25690; CVE-2022-28330; CVE-2006-20001; CVE-2023-27522; CVE-2022-36760; CVE-2022-37436; CVE-2023-31122; CVE-2022-31813; CVE-2022-28614; CVE-2023-45802; CVE-2022-30522; CVE-2023-43622" ;
    icsa:cweNumber "CWE-404; CWE-444; CWE-200; CWE-113; CWE-770; CWE-787; CWE-789; CWE-190; CWE-125; CWE-400; CWE-348" ;
    icsa:hasCVE cve-res:CVE-2006-20001,
        cve-res:CVE-2022-26377,
        cve-res:CVE-2022-28330,
        cve-res:CVE-2022-28614,
        cve-res:CVE-2022-28615,
        cve-res:CVE-2022-29404,
        cve-res:CVE-2022-30522,
        cve-res:CVE-2022-30556,
        cve-res:CVE-2022-31813,
        cve-res:CVE-2022-36760,
        cve-res:CVE-2022-37436,
        cve-res:CVE-2023-25690,
        cve-res:CVE-2023-27522,
        cve-res:CVE-2023-31122,
        cve-res:CVE-2023-43622,
        cve-res:CVE-2023-45802 ;
    icsa:hasCWE cwe-res:CWE-113,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-200,
        cwe-res:CWE-348,
        cwe-res:CWE-400,
        cwe-res:CWE-404,
        cwe-res:CWE-444,
        cwe-res:CWE-770,
        cwe-res:CWE-787,
        cwe-res:CWE-789 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Service Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports the following products are affected: Service Suite: Versions 9.8.1.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-133-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-133-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-133-02" ;
    dcterms:issued "2023-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Relion 670/650/SAM600-IO Series (Update B)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-4518" ;
    icsa:cweNumber "CWE-1284" ;
    icsa:hasCVE cve-res:CVE-2023-4518 ;
    icsa:hasCWE cwe-res:CWE-1284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy Relion 670/650/SAM600-IO Series (Update C)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Relion 670/650 series version 2.1 revisions up to 2.1.0.5; Relion 670 series version 2.2.3.x below 2.2.3.7; Relion 670/650 series version 2.2.4.x below 2.2.4.4; Relion 670 series version 2.2.2.x below 2.2.2.6; Relion 670 series version 2.0 revisions up to 2.0.0.13; Relion 670/650/SAM600-IO series version 2.2.5.x below 2.2.5.6; Relion 670 series version 2.2.0 all revisions; Relion 670/650/SAM600-IO series version 2.2.1 revisions up to 2.2.1.8" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-133-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-25-133-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-133-03" ;
    dcterms:issued "2025-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MACH GWS Products" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-4872; CVE-2024-7940; CVE-2024-3982; CVE-2024-3980" ;
    icsa:cweNumber "CWE-294; CWE-22; CWE-306; CWE-943" ;
    icsa:hasCVE cve-res:CVE-2024-3980,
        cve-res:CVE-2024-3982,
        cve-res:CVE-2024-4872,
        cve-res:CVE-2024-7940 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-294,
        cwe-res:CWE-306,
        cwe-res:CWE-943 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MACH GWS products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-3982) MACH GWS: Versions 3.1.0.0 to 3.3.0.0 (CVE-2024-7940).; CVE-2024-3980) MACH GWS: Versions 2.2.0.0 to 2.4.0.0 (CVE-2024-4872; CVE-2024-3980; CVE-2024-3980) MACH GWS: Versions 3.0.0.0 to 3.3.0.0 (CVE-2024-4872; The following versions of Hitachi Energy products are affected: MACH GWS: Version 2.1.0.0 (CVE-2024-4872" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-133-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-133-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-133-04" ;
    dcterms:issued "2025-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Automation Builder (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-3394; CVE-2025-3395" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2025-3394,
        cve-res:CVE-2025-3395 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Automation Builder (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All ABB Automation Builder <= 2.8.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-133-04" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-01" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 Devices" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-52963; CVE-2024-32122" ;
    icsa:cweNumber "CWE-787; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2024-32122,
        cve-res:CVE-2024-52963 ;
    icsa:hasCWE cwe-res:CWE-522,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: RUGGEDCOM APE1808: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-02" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens INTRALOG WMS" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-38095; CVE-2024-30105; CVE-2024-43485; CVE-2024-35264; CVE-2024-43483; CVE-2024-20672; CVE-2024-0056; CVE-2024-38081" ;
    icsa:cweNumber "CWE-407; CWE-59; CWE-416; CWE-20; CWE-319; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-0056,
        cve-res:CVE-2024-20672,
        cve-res:CVE-2024-30105,
        cve-res:CVE-2024-35264,
        cve-res:CVE-2024-38081,
        cve-res:CVE-2024-38095,
        cve-res:CVE-2024-43483,
        cve-res:CVE-2024-43485 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-319,
        cwe-res:CWE-400,
        cwe-res:CWE-407,
        cwe-res:CWE-416,
        cwe-res:CWE-59 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "INTRALOG WMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens INTRALOG WMS: All versions prior to v5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-03" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens BACnet ATEC Devices" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-40556" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-40556 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BACnet ATEC Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following BACnet ATEC products are affected: Siemens BACnet ATEC 550-440: All versions Siemens BACnet ATEC 550-441: All versions Siemens BACnet ATEC 550-445: All versions Siemens BACnet ATEC 550-446: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-04" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-23815" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2024-23815 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Desigo CC: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-05" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC and SICAM" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-3596" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2024-3596 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC and SICAM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products using the RADIUS protocol are affected: CPC80 Central Processing/Communication: All versions CPCI85 Central Processing/Communication: All versions POWER METER SICAM Q100 family: All versions prior to V2.70 POWER METER SICAM Q200 family: All versions Powerlink IP: All versions SICAM GridPass: All versions prior to V2.50 SICORE Base system: All versions SIPROTEC 5 Compact 7SX800 (CP050): All versions SIPROTEC 5 7SA82 (CP100): Versions V7.80 and after SIPROTEC 5 7SD82 (CP100): Versions V7.80 and after SIPROTEC 5 7SJ81 (CP100): Versions V7.80 and after SIPROTEC 5 7SJ82 (CP100): Versions V7.80 and after SIPROTEC 5 7SK82 (CP100): Versions V7.80 and after SIPROTEC 5 7SL82 (CP100): Versions V7.80 and after SIPROTEC 5 7UT82 (CP100): Versions V7.80 and after SIPROTEC 5 7SA82 (CP150): All versions SIPROTEC 5 7SD82 (CP150): All versions SIPROTEC 5 7SJ81 (CP150): All versions SIPROTEC 5 7SJ82 (CP150): All versions SIPROTEC 5 7SK82 (CP150): All versions SIPROTEC 5 7SL82 (CP150): All versions SIPROTEC 5 7SX82 (CP150): All versions SIPROTEC 5 7SY82 (CP150): All versions SIPROTEC 5 7UT82 (CP150): All versions SIPROTEC 5 6MD84 (CP300): All versions SIPROTEC 5 6MD85 (CP300): Versions V7.80 and after SIPROTEC 5 6MD86 (CP300): Versions V7.80 and after SIPROTEC 5 6MD89 (CP300): Versions V7.80 and after SIPROTEC 5 6MD89 (CP300) V9.6: Versions prior to V9.68 SIPROTEC 5 6MU85 (CP300): All versions SIPROTEC 5 7KE85 (CP300): Versions V7.80 and after SIPROTEC 5 7SA86 (CP300): Versions V7.80 and after SIPROTEC 5 7SA87 (CP300): Versions V7.80 and after SIPROTEC 5 7SD86 (CP300): Versions V7.80 and after SIPROTEC 5 7SD87 (CP300): Versions V7.80 and after SIPROTEC 5 7SJ85 (CP300): Versions V7.80 and after SIPROTEC 5 7SJ86 (CP300): Versions V7.80 and after SIPROTEC 5 7SK85 (CP300): Versions V7.80 and after SIPROTEC 5 7SL86 (CP300): Versions V7.80 and after SIPROTEC 5 7SL87 (CP300): Versions V7.80 and after SIPROTEC 5 7SS85 (CP300): Versions V7.80 and after SIPROTEC 5 7ST85 (CP300): Versions prior to V9.68 SIPROTEC 5 7ST86 (CP300): Versions prior to V9.83 SIPROTEC 5 7SX85 (CP300): All versions SIPROTEC 5 7UM85 (CP300): Versions V7.80 and after SIPROTEC 5 7UT85 (CP300): Versions V7.80 and after SIPROTEC 5 7UT86 (CP300): Versions V7.80 and after SIPROTEC 5 7UT87 (CP300): Versions V7.80 and after SIPROTEC 5 7VE85 (CP300): Versions V7.80 and after SIPROTEC 5 7VK87 (CP300): Versions V7.80 and after SIPROTEC 5 7VU85 (CP300): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-06" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter Visualization" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-32454" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-32454 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Teamcenter Visualization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Teamcenter Visualization V14.3: All versions prior to V14.3.0.14 Siemens Teamcenter Visualization V2312: All versions prior to V2312.0010 Siemens Teamcenter Visualization V2406: All versions prior to V2406.0008 Siemens Teamcenter Visualization V2412: All versions prior to V2412.0004." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-07" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens IPC RS-828A" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-54085" ;
    icsa:cweNumber "CWE-290" ;
    icsa:hasCVE cve-res:CVE-2024-54085 ;
    icsa:hasCWE cwe-res:CWE-290 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IPC RS-828A" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following rugged industrial PCs are affected: SIMATIC IPC RS-828A: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-08" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens VersiCharge AC Series EV Chargers" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-31930; CVE-2025-31929" ;
    icsa:cweNumber "CWE-1188; CWE-1326" ;
    icsa:hasCVE cve-res:CVE-2025-31929,
        cve-res:CVE-2025-31930 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-1326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VersiCharge AC Series EV Chargers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "25ft (8EM1315-5HG14-1GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3): All versions (CVE-2025-31929) Siemens UL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3): All versions (CVE-2025-31929) Siemens VersiCharge Blue 80A AC Cellular (8EM1315-7BG16-1FH2): All versions (CVE-2025-31929) Siemens VersiCharge Blue 80A AC Cellular (8EM1315-7BG16-1FH2): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1): All versions (CVE-2025-31929).; 15118; 25ft (8EM1310-5CG14-1GA1): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Parent 48A; Siemens reports that the following products are affected: Siemens IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0): All versions (CVE-2025-31929) Siemens IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0): All versions (CVE-2025-31929) Siemens IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1): All versions (CVE-2025-31929) Siemens IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2): All versions (CVE-2025-31929) Siemens IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1): All versions (CVE-2025-31929) Siemens IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0): All versions (CVE-2025-31929) Siemens IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1): All versions (CVE-2025-31929) Siemens IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2): All versions (CVE-2025-31929) Siemens IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0): All versions (CVE-2025-31929) Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1): All versions (CVE-2025-31929) Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0): All versions (CVE-2025-31929) Siemens IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1): All versions (CVE-2025-31929) Siemens IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1): All versions prior to V2.135 (CVE-2025-31930) Siemens IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2): All versions (CVE-2025-31929) Siemens IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2): All versions (CVE-2025-31929) Siemens UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1): All versions (CVE-2025-31929) Siemens UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0): All versions (CVE-2025-31929) Siemens UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0): All versions (CVE-2025-31929) Siemens UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2): All versions (CVE-2025-31929) Siemens UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2): All versions (CVE-2025-31929) Siemens UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2): All versions (CVE-2025-31929) Siemens UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Parent 48A; 25ft (8EM1314-5CG14-2FA2): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Parent 48A; 25ft (8EM1315-5HG14-1GA2): All versions (CVE-2025-31929) Siemens IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2): All versions (CVE-2025-31929) Siemens UL Commercial Parent 48A; 15118 25ft Sim (8EM1310-5CG14-1GA2): All versions (CVE-2025-31929) Siemens UL Commercial Parent 48A; 15118 25ft Sim (8EM1310-5CG14-1GA2): All versions prior to V2.135 (CVE-2025-31930) Siemens UL Commercial Parent 48A; 25ft (8EM1310-5CG14-1GA1): All versions (CVE-2025-31929) Siemens UL Commercial Parent 48A; 25ft (8EM1314-5CG14-2FA2): All versions (CVE-2025-31929) Siemens UL Commercial Parent 48A" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-09" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens User Management Component (UMC)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-30176; CVE-2025-30175; CVE-2025-30174" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-30174,
        cve-res:CVE-2025-30175,
        cve-res:CVE-2025-30176 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "User Management Component (UMC)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIMATIC PCS neo V4.1: All versions Siemens SIMATIC PCS neo V5.0: All versions Siemens SINEC NMS: All versions Siemens SINEMA Remote Connect: All versions Siemens Totally Integrated Automation Portal (TIA Portal) V17: All versions Siemens Totally Integrated Automation Portal (TIA Portal) V18: All versions Siemens Totally Integrated Automation Portal (TIA Portal) V19: All versions Siemens Totally Integrated Automation Portal (TIA Portal) V20: All versions Siemens User Management Component (UMC): All versions prior to V2.15.1.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-10" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OZW Web Servers" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-26389; CVE-2025-26390" ;
    icsa:cweNumber "CWE-89; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-26389,
        cve-res:CVE-2025-26390 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OZW Web Servers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: OZW672: Versions prior to V8.0 (CVE-2025-26389) OZW672: Versions prior to V6.0 (CVE-2025-26390) OZW772: Versions prior to V8.0 (CVE-2025-26389) OZW772: Versions prior to V6.0 (CVE-2025-26390)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-11" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Polarion" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-51445; CVE-2024-51446; CVE-2024-51447; CVE-2024-51444" ;
    icsa:cweNumber "CWE-79; CWE-611; CWE-89; CWE-204" ;
    icsa:hasCVE cve-res:CVE-2024-51444,
        cve-res:CVE-2024-51445,
        cve-res:CVE-2024-51446,
        cve-res:CVE-2024-51447 ;
    icsa:hasCWE cwe-res:CWE-204,
        cwe-res:CWE-611,
        cwe-res:CWE-79,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Polarion" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-51445; Siemens reports that the following products are affected: Polarion V2310: All versions Polarion V2404: Versions prior to V2404.4 (CVE-2024-51444; CVE-2024-51446) Polarion V2404: Versions prior to V2404.2 (CVE-2024-51447)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-12" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC PCS neo" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40566" ;
    icsa:cweNumber "CWE-613" ;
    icsa:hasCVE cve-res:CVE-2025-40566 ;
    icsa:hasCWE cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC PCS neo" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC PCS neo V4.1: All versions prior to V4.1 Update 3 SIMATIC PCS neo V5.0: All versions prior to V5.0 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-13" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-24009; CVE-2025-24008; CVE-2025-24007" ;
    icsa:cweNumber "CWE-732; CWE-327; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2025-24007,
        cve-res:CVE-2025-24008,
        cve-res:CVE-2025-24009 ;
    icsa:hasCWE cwe-res:CWE-311,
        cwe-res:CWE-327,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIRIUS 3RK3 Modular Safety System (MSS), SIRIUS Safety Relays 3SK2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIRIUS 3RK3 Modular Safety System (MSS): All versions SIRIUS Safety Relays 3SK2: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-14" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens APOGEE PXC and TALON TC Series" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities; Healthcare and Public Health; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-40555" ;
    icsa:cweNumber "CWE-440" ;
    icsa:hasCVE cve-res:CVE-2025-40555 ;
    icsa:hasCWE cwe-res:CWE-440 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "APOGEE PXC and TALON TC Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens APOGEE PXC+TALON TC Series: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-15" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix OIDC SSOICSA-25-135-16 Siemens MS/TP Point Pickup Module" ;
    icsa:CVSSScore "2.1"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Financial Services; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-40571" ;
    icsa:cweNumber "CWE-266" ;
    icsa:hasCVE cve-res:CVE-2025-40571 ;
    icsa:hasCWE cwe-res:CWE-266 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix OIDC SSO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens Mendix OIDC SSO (Mendix 9 compatible): All versions Siemens Mendix OIDC SSO (Mendix 10 compatible): All versions before V4.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-16" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens MS/TP Point Pickup Module" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities; Healthcare and Public Health; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-24510" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-24510 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MS/TP Point Pickup Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens MS/TP Point Pickup Module: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-17" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX II" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-33025; CVE-2025-32469; CVE-2025-33024" ;
    icsa:cweNumber "CWE-602" ;
    icsa:hasCVE cve-res:CVE-2025-32469,
        cve-res:CVE-2025-33024,
        cve-res:CVE-2025-33025 ;
    icsa:hasCWE cwe-res:CWE-602 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected ". 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Siemens reports that the following products are affected: RUGGEDCOM ROX MX5000: Versions prior to V2.16.5 RUGGEDCOM ROX RX1536: Versions prior to V2.16.5 RUGGEDCOM ROX RX5000: Versions prior to V2.16.5 RUGGEDCOM ROX MX5000RE: Versions prior to V2.16.5 RUGGEDCOM ROX RX1400: Versions prior to V2.16.5 RUGGEDCOM ROX RX1500: Versions prior to V2.16.5 RUGGEDCOM ROX RX1501: Versions prior to V2.16.5 RUGGEDCOM ROX RX1510: Versions prior to V2.16.5 RUGGEDCOM ROX RX1511: Versions prior to V2.16.5 RUGGEDCOM ROX RX1512: Versions prior to V2.16.5 RUGGEDCOM ROX RX1524: Versions prior to V2.16.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-18" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE LPE9403" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40582; CVE-2025-40573; CVE-2025-40575; CVE-2025-40577; CVE-2025-40572; CVE-2025-40576; CVE-2025-40583; CVE-2025-40574; CVE-2025-40580; CVE-2025-40579; CVE-2025-40581; CVE-2025-40578" ;
    icsa:cweNumber "CWE-732; CWE-121; CWE-288; CWE-457; CWE-78; CWE-319; CWE-35; CWE-476; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-40572,
        cve-res:CVE-2025-40573,
        cve-res:CVE-2025-40574,
        cve-res:CVE-2025-40575,
        cve-res:CVE-2025-40576,
        cve-res:CVE-2025-40577,
        cve-res:CVE-2025-40578,
        cve-res:CVE-2025-40579,
        cve-res:CVE-2025-40580,
        cve-res:CVE-2025-40581,
        cve-res:CVE-2025-40582,
        cve-res:CVE-2025-40583 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-288,
        cwe-res:CWE-319,
        cwe-res:CWE-35,
        cwe-res:CWE-457,
        cwe-res:CWE-476,
        cwe-res:CWE-732,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE LPE9403" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-40582; CVE-2025-40583).; CVE-2025-40573; Siemens reports that the following products are affected: SCALANCE LPE9403 (6GK5998-3GS00-2AC2): All versions (CVE-2025-40572; CVE-2025-40575; CVE-2025-40577; CVE-2025-40576; CVE-2025-40574; CVE-2025-40580) SCALANCE LPE9403 (6GK5998-3GS00-2AC2): All versions (CVE-2025-40581; CVE-2025-40579; CVE-2025-40578" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-18" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-19 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-19" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "ECOVACS DEEBOT Vacuum and Base Station (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-30200; CVE-2025-30199; CVE-2025-30198" ;
    icsa:cweNumber "CWE-321; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2025-30198,
        cve-res:CVE-2025-30199,
        cve-res:CVE-2025-30200 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-494 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DEEBOT Vacuum and Base Station" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ECOVACS reports the following DEEBOT vacuum and base station devices are affected: X1S PRO: Versions prior to 2.5.38 X1 PRO OMNI: Versions prior to 2.5.38 X1 OMNI: Versions prior to 2.4.45 X1 TURBO: Versions prior to 2.4.45 T10 Series: Versions prior to 1.11.0 T20 Series: Versions prior to 1.25.0 T30 Series: Versions prior to 1.100.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-19" ;
    icsa:vendor "ECOVACS" ;
    icsa:year 2025 .

icsa-res:ICSA-25-135-20 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-135-20" ;
    dcterms:issued "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Build Rapsody" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-3916" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-3916 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Build Rapsody" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Schneider Electric EcoStruxure Power Build Rapsody is affected: EcoStruxure Power Build Rapsody: Version v2.7.12 FR and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-135-20" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-01" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABUP IoT Cloud Platform" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-4692" ;
    icsa:cweNumber "CWE-266" ;
    icsa:hasCVE cve-res:CVE-2025-4692 ;
    icsa:hasCWE cwe-res:CWE-266 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABUP Internet of Things (IoT) Cloud Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ABUP products are affected: ABUP IoT Cloud Platform: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-01" ;
    icsa:vendor "ABUP" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-02" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "National Instruments Circuit Design Suite" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Defense Industrial Base; Government Facilities" ;
    icsa:cveNumber "CVE-2025-30417; CVE-2025-30419; CVE-2025-30420; CVE-2025-30418; CVE-2025-30421" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-30417,
        cve-res:CVE-2025-30418,
        cve-res:CVE-2025-30419,
        cve-res:CVE-2025-30420,
        cve-res:CVE-2025-30421 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Circuit Design Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following National Instruments products are affected: Circuit Design Suite: Versions 14.3.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-02" ;
    icsa:vendor "National Instruments Corp (NI)" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-03" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Danfoss AK-SM 8xxA Series (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-41451; CVE-2025-41450; CVE-2025-41452" ;
    icsa:cweNumber "CWE-77; CWE-15; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2025-41450,
        cve-res:CVE-2025-41451,
        cve-res:CVE-2025-41452 ;
    icsa:hasCWE cwe-res:CWE-15,
        cwe-res:CWE-287,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AK-SM 8xxA Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-41452).; The following versions of AK-SM 8xxA series are affected: AK-SM 8xxA Series: Versions prior to R4.2 (CVE-2025-41450) AK-SM 8xxA Series: Versions prior to 4.3.1 (CVE-2025-41451" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-03" ;
    icsa:vendor "Danfoss" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-04" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Iconics Digital Solutions / Mitsubishi Electric GENESIS64 (Update E)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-0921" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2025-0921 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Iconics Digital Solutions / Mitsubishi Electric GENESIS64 (Update E)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric GENESIS64: vers:all/*; Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric GENESIS32: vers:all/*; Mitsubishi Electric MC Works64 vers:all/*; Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric BizViz: vers:all/*; Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric ICONICS Suite: vers:all/*; Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric GENESIS: 11.00" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-04" ;
    icsa:vendor "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-05" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Video" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-1688" ;
    icsa:cweNumber "CWE-311" ;
    icsa:hasCVE cve-res:CVE-2025-1688 ;
    icsa:hasCWE cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siveillance Video" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Siveillance Video: Versions V24.1 and later." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-06" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PrismaSeT Active - Wireless Panel Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-4041" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2023-4041 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PrismaSeT Active - Wireless Panel Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Schneider Electric products are affected: PrismaSeT Active - Wireless Panel Server: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-06" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-07" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-32433" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-32433 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Galaxy VS, Galaxy VL, Galaxy VXL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Schneider Electric products are affected: Galaxy VS: Versions prior to v6.118.0 and prior Galaxy VL: Versions prior to v18.5.0 and prior Galaxy VXL: Versions prior to v15.21.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-07" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-08" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Controllers (Update B)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-2875" ;
    icsa:cweNumber "CWE-610" ;
    icsa:hasCVE cve-res:CVE-2025-2875 ;
    icsa:hasCWE cwe-res:CWE-610 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Controllers M241/M251/M258/LMC058" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric Modicon Controllers M241: Versions prior to 5.3.12.48 Schneider Electric Modicon Controllers M251: Versions prior to 5.3.12.48 Schneider Electric Modicon Controllers M258: Versions prior to 5.0.4.19 Schneider Electric Modicon Controllers LMC058: Versions prior to 5.0.4.19." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-08" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-09" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect MB-Gateway" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-36535" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-36535 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MB-Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following AutomationDirect product is affected: MB-Gateway: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-09" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-10" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Vertiv Liebert RDU101 and UNITY" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Energy" ;
    icsa:cveNumber "CVE-2025-46412; CVE-2025-41426" ;
    icsa:cweNumber "CWE-121; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-41426,
        cve-res:CVE-2025-46412 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Liebert RDU101 and Liebert UNITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Vertiv products are affected: Liebert RDU101: Versions 1.9.0.0 and prior Liebert IS-UNITY: Versions 8.4.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-10" ;
    icsa:vendor "Vertiv" ;
    icsa:year 2025 .

icsa-res:ICSA-25-140-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-140-11" ;
    dcterms:issued "2025-05-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Assured Telematics Inc (ATI) Fleet Management System (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-4364" ;
    icsa:cweNumber "CWE-497" ;
    icsa:hasCVE cve-res:CVE-2025-4364 ;
    icsa:hasCWE cwe-res:CWE-497 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Fleet Management System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2025.; The following product is affected: Fleet Management System: Versions prior to February 6th" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-140-11" ;
    icsa:vendor "Assured Telematics Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-142-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-142-01" ;
    dcterms:issued "2025-05-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Lantronix Device Installer" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2025-4338" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2025-4338 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Device Installer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Lantronix products are affected: Device Installer: Versions 4.4.0.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-142-01" ;
    icsa:vendor "Lantronix" ;
    icsa:year 2025 .

icsa-res:ICSA-25-142-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-142-02" ;
    dcterms:issued "2025-05-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Historian ThingWorx" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-1285" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2018-1285 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "95057C-FTHTWXCT11" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation FactoryTalk Historian ThingWorx are affected: 95057C-FTHTWXCT11: Versions v4.02.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-142-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-146-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-146-01" ;
    dcterms:issued "2025-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls iSTAR Configuration Utility (ICU) Tool" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-26383" ;
    icsa:cweNumber "CWE-457" ;
    icsa:hasCVE cve-res:CVE-2025-26383 ;
    icsa:hasCWE cwe-res:CWE-457 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iSTAR Configuration Utility (ICU) tool" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the following versions of ICU are affected: ICU: All versions prior to 6.9.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-146-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-148-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-148-01" ;
    dcterms:issued "2025-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-31807" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2022-31807 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SiPass integrated AC5102 (ACC-G2): All versions Siemens SiPass integrated ACC-AP: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-148-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-148-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-148-02" ;
    dcterms:issued "2025-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass Integrated" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2022-31812" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-31812 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass integrated" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SiPass integrated: Versions prior to V2.95.3.18." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-148-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-148-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-148-03" ;
    dcterms:issued "2025-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Consilium Safety CS5000 Fire Panel (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-46352; CVE-2025-41438" ;
    icsa:cweNumber "CWE-1188; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2025-41438,
        cve-res:CVE-2025-46352 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CS5000 Fire Panel" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Consilium Safety product is affected: CS5000 Fire Panel: All versions prior to R1.17.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-148-03" ;
    icsa:vendor "Consilium Safety" ;
    icsa:year 2025 .

icsa-res:ICSA-25-148-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-148-04" ;
    dcterms:issued "2025-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Instantel Micromate (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-1907" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-1907 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Micromate" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Micromate are affected: Micromate: All versions prior to 11.0BD and 11.0CB." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-148-04" ;
    icsa:vendor "Instantel" ;
    icsa:year 2025 .

icsa-res:ICSA-25-153-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-153-01" ;
    dcterms:issued "2025-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Wiser Home Automation" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy" ;
    icsa:cveNumber "CVE-2023-4041" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2023-4041 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wiser AvatarOn 6K Freelocate, Wiser Cuadro H 5P Socket" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Schneider Electric products are affected: Wiser AvatarOn 6K Freelocate: All versions Wiser Cuadro H 5P Socket: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-153-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-153-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-153-02" ;
    dcterms:issued "2025-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Build Rapsody" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-3916" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-3916 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Build Rapsody" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Schneider Electric product is affected: EcoStruxure Power Build Rapsody: v2.7.12 FR and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-153-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-153-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-153-03" ;
    dcterms:issued "2025-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-3755" ;
    icsa:cweNumber "CWE-1285" ;
    icsa:hasCVE cve-res:CVE-2025-3755 ;
    icsa:hasCWE cwe-res:CWE-1285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FX5UC-32MT/DSS-TS; FX5UC-32MR/DS-TS: All versions FX5UJ-xMy/z x=24; DSS: All versions FX5UC-32MT/DS-TS; 64; z=ES; DSS: All versions.; 80[Note *1]; 40; 80; y=T; The following versions of Mitsubishi Electric MELSEC iQ-F Series are affected. Products with [Note *1] are sold in limited regions: FX5U-xMy/z x=32; z= ES; 60; DSS: All versions FX5UC-xMy/z x=32; R; z=D; DSS: All versions FX5UJ-xMy/ES-A[Note *1] x=24; DS; R: All versions FX5S-xMy/z x=30; ESS; 96" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-153-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-155-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-155-01" ;
    dcterms:issued "2025-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "CyberData 011209 SIP Emergency Intercom" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Emergency Services; Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-30507; CVE-2025-30515; CVE-2025-30184; CVE-2025-30183; CVE-2025-26468" ;
    icsa:cweNumber "CWE-89; CWE-306; CWE-288; CWE-35; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2025-26468,
        cve-res:CVE-2025-30183,
        cve-res:CVE-2025-30184,
        cve-res:CVE-2025-30507,
        cve-res:CVE-2025-30515 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-306,
        cwe-res:CWE-35,
        cwe-res:CWE-522,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "011209 SIP Emergency Intercom" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following CyberData products are affected: 011209 SIP Emergency Intercom: Versions prior to 22.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-155-01" ;
    icsa:vendor "CyberData" ;
    icsa:year 2025 .

icsa-res:ICSA-25-155-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-155-02" ;
    dcterms:issued "2025-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Relion 670, 650 series and SAM600-IO Product" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-28895; CVE-2020-35198" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2020-28895,
        cve-res:CVE-2020-35198 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Relion 670, Relion 650, SAM600-IO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: Relion 670/650/SAM600-IO series: Version 2.2.5 revisions up to 2.2.5.1 Relion 670/650 series: Version 2.2.4 revisions up to 2.2.4.2 Relion 670 series: Version 2.2.3 revisions up to 2.2.3.4 Relion 670 series: Version 2.2.2 revisions up to 2.2.2.4 Relion 670/650/SAM600-IO series: Version 2.2.1 revisions up to 2.2.1.7 Relion 670/650 series version 2.2.0: All revisions Relion 670/650 series version 2.1: All revisions Relion 670 series version 2.0: All revisions Relion 670 series version 1.2: All revisions Relion 670 series version 1.1: All revisions Relion 650 series version 1.3: All revisions Relion 650 series version 1.2: All revisions Relion 650 series version 1.1: All revisions Relion 650 series version 1.0: All revisions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-155-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-160-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-160-01" ;
    dcterms:issued "2025-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "SinoTrack GPS Receiver" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-5485; CVE-2025-5484" ;
    icsa:cweNumber "CWE-204; CWE-1390" ;
    icsa:hasCVE cve-res:CVE-2025-5484,
        cve-res:CVE-2025-5485 ;
    icsa:hasCWE cwe-res:CWE-1390,
        cwe-res:CWE-204 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "All Known SinoTrack Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following SinoTrack products are affected: SinoTrack IOT PC Platform: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-160-01" ;
    icsa:vendor "SinoTrack" ;
    icsa:year 2025 .

icsa-res:ICSA-25-160-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-160-02" ;
    dcterms:issued "2023-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy’s Relion 670, 650, SAM600-IO series (Update A)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2022-4304" ;
    icsa:cweNumber "CWE-203" ;
    icsa:hasCVE cve-res:CVE-2022-4304 ;
    icsa:hasCWE cwe-res:CWE-203 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy Relion 670, 650, SAM600-IO Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Relion 670/650 series version 2.2.0 all revisions; Relion 670 series version 2.2.3 revisions up to 2.2.3.6; Relion 670/650 series version 2.2.4 revisions up to 2.2.4.3; Relion 670/650/SAM600-IO series version 2.2.5 revisions up to 2.2.5.5; Relion 670 series version 2.2.2 revisions up to 2.2.2.5; Relion 670/650/SAM600-IO series version 2.2.1 revisions up to 2.2.1.8" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-160-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2023 .

icsa-res:ICSA-25-162-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-01" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Tecnomatix Plant Simulation" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-32454" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-32454 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tecnomatix Plant Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Tecnomatix Plant Simulation V2404: All versions prior to V2404.0013." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-162-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-02" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-0133" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-0133 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens RUGGEDCOM APE1808: All versions with Palo Alto Networks Virtual NGFW with an enabled GlobalProtect gateway or portal." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-162-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-03" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE and RUGGEDCOM" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-41797" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2024-41797 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE and RUGGEDCOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "24xSFP; 8xFO) (6GK5334-2TS01-2AR3): All versions prior to V3.1 Siemens SCALANCE XRM334 (24 V DC; 8xSFP+) (6GK5334-5TS01-2AR3): All versions prior to V3.1 Siemens SCALANCE XRM334 (230 V AC; 12xFO) (6GK5334-3TS01-2AR3): All versions prior to V3.1 Siemens SCALANCE XRM334 (24V DC; 8xFO; 8xFO) (6GK5334-2TS01-4AR3): All versions prior to V3.1 Siemens SCALANCE XRM334 (2x230 V AC; 2x10G; CC) (6GK5334-2TS01-2ER3): All versions prior to V3.1 Siemens SCALANCE XRM334 (2x230 V AC; Siemens reports that the following products are affected: Siemens RUGGEDCOM RST2428P (6GK6242-6PA00): All versions prior to V3.1 Siemens SCALANCE XCM324 (6GK5324-8TS01-2AC2): All versions prior to V3.1 Siemens SCALANCE XCM328 (6GK5328-4TS01-2AC2): All versions prior to V3.1 Siemens SCALANCE XCM332 (6GK5332-0GA01-2AC2): All versions prior to V3.1 Siemens SCALANCE XR302-32 (6GK5334-5TS00-2AR3): All versions prior to V3.1 Siemens SCALANCE XR302-32 (6GK5334-5TS00-3AR3): All versions prior to V3.1 Siemens SCALANCE XR302-32 (6GK5334-5TS00-4AR3): All versions prior to V3.1 Siemens SCALANCE XR322-12 (6GK5334-3TS00-2AR3): All versions prior to V3.1 Siemens SCALANCE XR322-12 (6GK5334-3TS00-3AR3): All versions prior to V3.1 Siemens SCALANCE XR322-12 (6GK5334-3TS00-4AR3): All versions prior to V3.1 Siemens SCALANCE XR326-8 (6GK5334-2TS00-2AR3): All versions prior to V3.1 Siemens SCALANCE XC316-8 (6GK5324-8TS00-2AC2): All versions prior to V3.1 Siemens SCALANCE XR326-8 (6GK5334-2TS00-3AR3): All versions prior to V3.1 Siemens SCALANCE XR326-8 (6GK5334-2TS00-4AR3): All versions prior to V3.1 Siemens SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3): All versions prior to V3.1 Siemens SCALANCE XR502-32 (6GK5534-5TR00-2AR3): All versions prior to V3.1 Siemens SCALANCE XR502-32 (6GK5534-5TR00-3AR3): All versions prior to V3.1 Siemens SCALANCE XR502-32 (6GK5534-5TR00-4AR3): All versions prior to V3.1 Siemens SCALANCE XR522-12 (6GK5534-3TR00-2AR3): All versions prior to V3.1 Siemens SCALANCE XR522-12 (6GK5534-3TR00-3AR3): All versions prior to V3.1 Siemens SCALANCE XR522-12 (6GK5534-3TR00-4AR3): All versions prior to V3.1 Siemens SCALANCE XR526-8 (6GK5534-2TR00-2AR3): All versions prior to V3.1 Siemens SCALANCE XC324-4 (6GK5328-4TS00-2AC2): All versions prior to V3.1 Siemens SCALANCE XR526-8 (6GK5534-2TR00-3AR3): All versions prior to V3.1 Siemens SCALANCE XR526-8 (6GK5534-2TR00-4AR3): All versions prior to V3.1 Siemens SCALANCE XRH334 (24 V DC; 12xFO) (6GK5334-3TS01-3AR3): All versions prior to V3.1 Siemens SCALANCE XRM334 (230V AC; 12xFO) (6GK5334-3TS01-4AR3): All versions prior to V3.1 Siemens SCALANCE XRM334 (2x230V AC; 8xSFP+) (6GK5334-5TS01-3AR3): All versions prior to V3.1 Siemens SCALANCE XC332 (6GK5332-0GA00-2AC2): All versions prior to V3.1 Siemens SCALANCE XC416-8 (6GK5424-8TR00-2AC2): All versions prior to V3.1 Siemens SCALANCE XC424-4 (6GK5428-4TR00-2AC2): All versions prior to V3.1 Siemens SCALANCE XC432 (6GK5432-0GR00-2AC2): All versions prior to V3.1 Siemens SCALANCE XCH328 (6GK5328-4TS01-2EC2): All versions prior to V3.1.; 8xFO) (6GK5334-2TS01-3AR3): All versions prior to V3.1 Siemens SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2): All versions prior to V3.1 Siemens SCALANCE XRM334 (230 V AC; 8xSFP+) (6GK5334-5TS01-4AR3): All versions prior to V3.1 Siemens SCALANCE XRM334 (24 V DC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-162-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-04" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE and RUGGEDCOM" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40567; CVE-2025-40569; CVE-2025-40568" ;
    icsa:cweNumber "CWE-362; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2025-40567,
        cve-res:CVE-2025-40568,
        cve-res:CVE-2025-40569 ;
    icsa:hasCWE cwe-res:CWE-362,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SCALANCE and RUGGEDCOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "12xFO) (6GK5334-3TS01-3AR3): All versions prior to V3.2 Siemens SCALANCE XRM334 (230V AC; 24xSFP; 8xFO; 2x10G; Siemens reports that the following products are affected: Siemens RUGGEDCOM RST2428P (6GK6242-6PA00): All versions prior to V3.2 Siemens SCALANCE XCM324 (6GK5324-8TS01-2AC2): All versions prior to V3.2 Siemens SCALANCE XCM328 (6GK5328-4TS01-2AC2): All versions prior to V3.2 Siemens SCALANCE XCM332 (6GK5332-0GA01-2AC2): All versions prior to V3.2 Siemens SCALANCE XR302-32 (6GK5334-5TS00-2AR3): All versions prior to V3.2 Siemens SCALANCE XR302-32 (6GK5334-5TS00-3AR3): All versions prior to V3.2 Siemens SCALANCE XR302-32 (6GK5334-5TS00-4AR3): All versions prior to V3.2 Siemens SCALANCE XR322-12 (6GK5334-3TS00-2AR3): All versions prior to V3.2 Siemens SCALANCE XR322-12 (6GK5334-3TS00-3AR3): All versions prior to V3.2 Siemens SCALANCE XR322-12 (6GK5334-3TS00-4AR3): All versions prior to V3.2 Siemens SCALANCE XR326-8 (6GK5334-2TS00-2AR3): All versions prior to V3.2 Siemens SCALANCE XC316-8 (6GK5324-8TS00-2AC2): All versions prior to V3.2 Siemens SCALANCE XR326-8 (6GK5334-2TS00-3AR3): All versions prior to V3.2 Siemens SCALANCE XR326-8 (6GK5334-2TS00-4AR3): All versions prior to V3.2 Siemens SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3): All versions prior to V3.2 Siemens SCALANCE XR502-32 (6GK5534-5TR00-2AR3): All versions prior to V3.2 Siemens SCALANCE XR502-32 (6GK5534-5TR00-3AR3): All versions prior to V3.2 Siemens SCALANCE XR502-32 (6GK5534-5TR00-4AR3): All versions prior to V3.2 Siemens SCALANCE XR522-12 (6GK5534-3TR00-2AR3): All versions prior to V3.2 Siemens SCALANCE XR522-12 (6GK5534-3TR00-3AR3): All versions prior to V3.2 Siemens SCALANCE XR522-12 (6GK5534-3TR00-4AR3): All versions prior to V3.2 Siemens SCALANCE XR526-8 (6GK5534-2TR00-2AR3): All versions prior to V3.2 Siemens SCALANCE XC324-4 (6GK5328-4TS00-2AC2): All versions prior to V3.2 Siemens SCALANCE XR526-8 (6GK5534-2TR00-3AR3): All versions prior to V3.2 Siemens SCALANCE XR526-8 (6GK5534-2TR00-4AR3): All versions prior to V3.2 Siemens SCALANCE XRH334 (24 V DC; 8xFO) (6GK5334-2TS01-4AR3): All versions prior to V3.2 Siemens SCALANCE XRM334 (2x230 V AC; CC) (6GK5334-2TS01-2ER3): All versions prior to V3.2 Siemens SCALANCE XRM334 (2x230 V AC; 12xFO) (6GK5334-3TS01-4AR3): All versions prior to V3.2 Siemens SCALANCE XRM334 (2x230V AC; 8xFO) (6GK5334-2TS01-2AR3): All versions prior to V3.2 Siemens SCALANCE XRM334 (24 V DC; 8xSFP+) (6GK5334-5TS01-2AR3): All versions prior to V3.2 Siemens SCALANCE XRM334 (230 V AC; 8xSFP+) (6GK5334-5TS01-3AR3): All versions prior to V3.2 Siemens SCALANCE XC332 (6GK5332-0GA00-2AC2): All versions prior to V3.2 Siemens SCALANCE XC416-8 (6GK5424-8TR00-2AC2): All versions prior to V3.2 Siemens SCALANCE XC424-4 (6GK5428-4TR00-2AC2): All versions prior to V3.2 Siemens SCALANCE XC432 (6GK5432-0GR00-2AC2): All versions prior to V3.2 Siemens SCALANCE XCH328 (6GK5328-4TS01-2EC2): All versions prior to V3.2.; 12xFO) (6GK5334-3TS01-2AR3): All versions prior to V3.2 Siemens SCALANCE XRM334 (24V DC; 8xFO) (6GK5334-2TS01-3AR3): All versions prior to V3.2 Siemens SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2): All versions prior to V3.2 Siemens SCALANCE XRM334 (230 V AC; 8xSFP+) (6GK5334-5TS01-4AR3): All versions prior to V3.2 Siemens SCALANCE XRM334 (24 V DC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-162-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-05" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 CPU Family" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-4527; CVE-2025-4598; CVE-2023-46219; CVE-2023-44487; CVE-2024-12133; CVE-2024-26596; CVE-2024-45491; CVE-2025-21795; CVE-2025-21848; CVE-2025-21766; CVE-2025-31115; CVE-2023-52927; CVE-2024-45490; CVE-2025-21862; CVE-2025-26465; CVE-2024-28085; CVE-2023-48795; CVE-2023-6246; CVE-2024-33602; CVE-2024-37370; CVE-2024-24855; CVE-2024-57977; CVE-2024-57996; CVE-2025-4373; CVE-2024-2961; CVE-2025-21745; CVE-2023-6780; CVE-2025-46836; CVE-2023-38545; CVE-2024-12243; CVE-2024-6119; CVE-2024-33600; CVE-2024-6387; CVE-2024-45492; CVE-2024-50246; CVE-2025-21796; CVE-2023-5363; CVE-2023-28531; CVE-2024-33601; CVE-2025-21712; CVE-2025-21724; CVE-2024-34397; CVE-2023-4806; CVE-2023-38546; CVE-2023-51385; CVE-2025-21728; CVE-2025-21758; CVE-2025-21865; CVE-2023-46218; CVE-2024-33599; CVE-2024-53166; CVE-2025-21765; CVE-2025-21864; CVE-2021-41617; CVE-2025-21702; CVE-2025-21701; CVE-2025-21767; CVE-2023-6779; CVE-2024-37371; CVE-2024-58005; CVE-2023-51384; CVE-2023-4911; CVE-2025-21756" ;
    icsa:cweNumber "CWE-416; CWE-122; CWE-311; CWE-73; CWE-617; CWE-390; CWE-476; CWE-400; CWE-407; CWE-124; CWE-20; CWE-843; CWE-121; CWE-362; CWE-190; CWE-466; CWE-304; CWE-787; CWE-131; CWE-684; CWE-78; CWE-908; CWE-364; CWE-222; CWE-667; CWE-826; CWE-130; CWE-125; CWE-129" ;
    icsa:hasCVE cve-res:CVE-2021-41617,
        cve-res:CVE-2023-28531,
        cve-res:CVE-2023-38545,
        cve-res:CVE-2023-38546,
        cve-res:CVE-2023-44487,
        cve-res:CVE-2023-4527,
        cve-res:CVE-2023-46218,
        cve-res:CVE-2023-46219,
        cve-res:CVE-2023-4806,
        cve-res:CVE-2023-48795,
        cve-res:CVE-2023-4911,
        cve-res:CVE-2023-51384,
        cve-res:CVE-2023-51385,
        cve-res:CVE-2023-52927,
        cve-res:CVE-2023-5363,
        cve-res:CVE-2023-6246,
        cve-res:CVE-2023-6779,
        cve-res:CVE-2023-6780,
        cve-res:CVE-2024-12133,
        cve-res:CVE-2024-12243,
        cve-res:CVE-2024-24855,
        cve-res:CVE-2024-26596,
        cve-res:CVE-2024-28085,
        cve-res:CVE-2024-2961,
        cve-res:CVE-2024-33599,
        cve-res:CVE-2024-33600,
        cve-res:CVE-2024-33601,
        cve-res:CVE-2024-33602,
        cve-res:CVE-2024-34397,
        cve-res:CVE-2024-37370,
        cve-res:CVE-2024-37371,
        cve-res:CVE-2024-45490,
        cve-res:CVE-2024-45491,
        cve-res:CVE-2024-45492,
        cve-res:CVE-2024-50246,
        cve-res:CVE-2024-53166,
        cve-res:CVE-2024-57977,
        cve-res:CVE-2024-57996,
        cve-res:CVE-2024-58005,
        cve-res:CVE-2024-6119,
        cve-res:CVE-2024-6387,
        cve-res:CVE-2025-21701,
        cve-res:CVE-2025-21702,
        cve-res:CVE-2025-21712,
        cve-res:CVE-2025-21724,
        cve-res:CVE-2025-21728,
        cve-res:CVE-2025-21745,
        cve-res:CVE-2025-21756,
        cve-res:CVE-2025-21758,
        cve-res:CVE-2025-21765,
        cve-res:CVE-2025-21766,
        cve-res:CVE-2025-21767,
        cve-res:CVE-2025-21795,
        cve-res:CVE-2025-21796,
        cve-res:CVE-2025-21848,
        cve-res:CVE-2025-21862,
        cve-res:CVE-2025-21864,
        cve-res:CVE-2025-21865,
        cve-res:CVE-2025-26465,
        cve-res:CVE-2025-31115,
        cve-res:CVE-2025-4373,
        cve-res:CVE-2025-4598,
        cve-res:CVE-2025-46836 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-124,
        cwe-res:CWE-125,
        cwe-res:CWE-129,
        cwe-res:CWE-130,
        cwe-res:CWE-131,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-222,
        cwe-res:CWE-304,
        cwe-res:CWE-311,
        cwe-res:CWE-362,
        cwe-res:CWE-364,
        cwe-res:CWE-390,
        cwe-res:CWE-400,
        cwe-res:CWE-407,
        cwe-res:CWE-416,
        cwe-res:CWE-466,
        cwe-res:CWE-476,
        cwe-res:CWE-617,
        cwe-res:CWE-667,
        cwe-res:CWE-684,
        cwe-res:CWE-73,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-826,
        cwe-res:CWE-843,
        cwe-res:CWE-908 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1500 CPU family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): V3.1.5 and prior SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0): V3.1.5 and prior SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): V3.1.5 and prior SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0): V3.1.5 and prior SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): V3.1.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-162-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-06" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Energy Services" ;
    icsa:CVSSScore "9.5"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-40585" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2025-40585 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Energy Services" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Energy Services: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-162-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-07" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PI Data Archive" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-44019; CVE-2025-36539" ;
    icsa:cweNumber "CWE-248" ;
    icsa:hasCVE cve-res:CVE-2025-36539,
        cve-res:CVE-2025-44019 ;
    icsa:hasCWE cwe-res:CWE-248 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Data Archive" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-36539).; The following versions of PI Data Archive; CVE-2025-36539) PI Server: Version 2023 Patch 1 (CVE-2025-44019; CVE-2025-36539) PI Data Archive: Version 2023 Patch 1 (CVE-2025-44019; as delivered by PI Server are affected: PI Data Archive: Versions 2018 SP3 Patch 4 and prior (CVE-2025-44019) PI Data Archive: Version 2023 (CVE-2025-44019; CVE-2025-36539) PI Server: Versions 2018 SP3 Patch 6 and prior (CVE-2025-44019) PI Server: Version 2023 (CVE-2025-44019" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-07" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2025 .

icsa-res:ICSA-25-162-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-08" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PI Web API" ;
    icsa:CVSSScore "4.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-2745" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-2745 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Web API" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of AVEVA PI Web API are affected: PI Web API: Versions 2023 SP1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-08" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2025 .

icsa-res:ICSA-25-162-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-09" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PI Connector for CygNet" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-4417; CVE-2025-4418" ;
    icsa:cweNumber "CWE-79; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2025-4417,
        cve-res:CVE-2025-4418 ;
    icsa:hasCWE cwe-res:CWE-354,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Connector for CygNet" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PI Connector for CygNet are affected: PI Connector for CygNet: Version 1.6.14 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-09" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2025 .

icsa-res:ICSA-25-162-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-162-10" ;
    dcterms:issued "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTZOptics and Other Pan-Tilt-Zoom Cameras" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States, China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Government Facilities; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-8957; CVE-2025-35451; CVE-2025-35452; CVE-2024-8956" ;
    icsa:cweNumber "CWE-798; CWE-78; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2024-8956,
        cve-res:CVE-2024-8957,
        cve-res:CVE-2025-35451,
        cve-res:CVE-2025-35452 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-78,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Various pan-tilt-zoom cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "multiCAM Systems; and SMTAV products are affected: PTZOptics PT12X-SDI-xx-G2: Versions 6.3.34 and prior (CVE-2025-35451) PTZOptics PT12X-NDI-xx: Versions 6.3.34 and prior (CVE-2025-35451) PTZOptics PT12X-USB-xx-G2: Versions 6.2.81 and prior (CVE-2025-35451) PTZOptics PT20X-SDI-xx-G2: Versions 6.3.20 and prior (CVE-2025-35451) PTZOptics PT20X-NDI-xx: Versions 6.3.20 and prior (CVE-2025-35451) PTZOptics PT20X-USB-xx-G2: Versions 6.2.73 and prior (CVE-2025-35451) PTZOptics PT30X-SDI-xx-G2: Versions 6.3.30 and prior (CVE-2025-35451) PTZOptics PT30X-NDI-xx: Versions 6.3.30 and prior (CVE-2025-35451) PTZOptics PT12X-ZCAM: Versions 7.2.76 and prior (CVE-2025-35451) PTZOptics PT20X-ZCAM: Versions 7.2.82 and prior (CVE-2025-35451) PTZOptics PTVL-ZCAM: Versions 7.2.79 and prior (CVE-2025-35451) PTZOptics PTEPTZ-ZCAM-G2: Versions 8.1.81 and prior (CVE-2025-35451) PTZOptics PTEPTZ-NDI-ZCAM-G2: Versions 8.1.81 and prior (CVE-2025-35451) PTZOptics PT12X-SDI-xx-G2: All versions (CVE-2025-35452) PTZOptics PT12X-NDI-xx: All versions (CVE-2025-35452) PTZOptics PT12X-USB-xx-G2: All versions (CVE-2025-35452) PTZOptics PT20X-SDI-xx-G2: All versions (CVE-2025-35452) PTZOpticsPT20X-NDI-xx: All versions (CVE-2025-35452) PTZOptics PT20X-USB-xx-G2: All versions (CVE-2025-35452) PTZOptics PT30X-SDI-xx-G2: All versions (CVE-2025-35452) PTZOptics PT30X-NDI-xx: All versions (CVE-2025-35452) PTZOptics PT12X-ZCAM: All versions (CVE-2025-35452) PTZOptics PT20X-ZCAM: All versions (CVE-2025-35452) PTZOptics PTVL-ZCAM: All versions (CVE-2025-35452) PTZOptics PTEPTZ-ZCAM-G2: All versions (CVE-2025-35452) PTZOptics PTEPTZ-NDI-ZCAM-G2 All versions (CVE-2025-35452) PTZOptics PT12X-4K-xx-G3: Versions 0.0.58 and prior (CVE-2025-35452) PTZOptics PT20X-4K-xx-G3: Versions 0.0.85 and prior (CVE-2025-35452) PTZOptics PT30X-4K-xx-G3: Versions 2.0.64 and prior (CVE-2025-35452) PTZOptics PT12X-LINK-4K-xx: Versions 0.0.63 and prior (CVE-2025-35452) PTZOptics PT20X-LINK-4K-xx: Versions 0.0.89 and prior (CVE-2025-35452) PTZOptics PT30X-LINK-4K-xx: Versions 2.0.71 and prior (CVE-2025-35452) PTZOptics PT12X-SE-xx-G3: Versions 9.1.43 and prior (CVE-2025-35452) PTZOptics PT20X-SE-xx-G3: Versions 9.1.32 and prior (CVE-2025-35452) PTZOptics PT30X-SE-xx-G3: Versions 9.1.33 and prior (CVE-2025-35452) PTZOptics PT-STUDIOPRO: Versions 9.0.41 and prior (CVE-2025-35452) PTZOptics PTZOptics VL Fixed Camera/NDI Fixed Camera: Versions 7.2.94 and prior SMTAV Pan-Tilt-Zoom Cameras: All versions multiCAM Systems Pan-Tilt-Zoom Cameras: All versions ValueHD Pan-Tilt-Zoom Cameras: All versions.; PTZOptics; The following ValueHD" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-162-10" ;
    icsa:vendor "ValueHD, PTZOptics, multiCAM Systems, SMTAV" ;
    icsa:year 2025 .

icsa-res:ICSA-25-168-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-168-01" ;
    dcterms:issued "2025-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Studio Pro" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40592" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2025-40592 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix Studio Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following versions of Mendix Studio Pro integrated development environment are affected: Siemens Mendix Studio Pro 8: Versions prior to V8.18.35 Siemens Mendix Studio Pro 9: Versions prior to V9.24.35 Siemens Mendix Studio Pro 10: Versions prior to V10.23.0 Siemens Mendix Studio Pro 10.6: Versions prior to V10.6.24 Siemens Mendix Studio Pro 10.12: Versions prior to V10.12.17 Siemens Mendix Studio Pro 10.18: Versions prior to V10.18.7 Siemens Mendix Studio Pro 11: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-168-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-168-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-168-02" ;
    dcterms:issued "2025-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "LS Electric GMWin 4" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-49850; CVE-2025-49848; CVE-2025-49849" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-49848,
        cve-res:CVE-2025-49849,
        cve-res:CVE-2025-49850 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GMWin 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: GMWin 4: Version 4.18.; a programming software tool; The following versions of LS Electric GMWin 4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-168-02" ;
    icsa:vendor "LS Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-168-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-168-04" ;
    dcterms:issued "2025-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Smart Editor" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-32412; CVE-2025-41388; CVE-2025-41413" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-32412,
        cve-res:CVE-2025-41388,
        cve-res:CVE-2025-41413 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Smart Editor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Fuji Electric products are affected: Smart Editor: Versions 1.0.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-168-04" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-168-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-168-05" ;
    dcterms:issued "2025-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dover Fueling Solutions ProGauge MagLink LX Consoles" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-5310" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-5310 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ProGauge MagLink LX consoles" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a fuel and water tank monitor; are affected: ProGauge MagLink LX 4: Versions prior to 4.20.3 ProGauge MagLink LX Plus: Versions prior to 4.20.3 ProGauge MagLink LX Ultimate: Versions prior to 5.20.3.; The following versions of ProGauge MagLink LX" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-168-05" ;
    icsa:vendor "Dover Fueling Solutions (DFS)" ;
    icsa:year 2025 .

icsa-res:ICSA-25-175-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-175-01" ;
    dcterms:issued "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Kaleris Navis N4 Terminal Operating System" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-5087; CVE-2025-2566" ;
    icsa:cweNumber "CWE-502; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2025-2566,
        cve-res:CVE-2025-5087 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Navis N4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Navis N4: Versions prior to 4.0.; a terminal operating system; The following versions of Kaleris Navis N4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-175-01" ;
    icsa:vendor "Kaleris" ;
    icsa:year 2025 .

icsa-res:ICSA-25-175-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-175-02" ;
    dcterms:issued "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-47725; CVE-2025-47724; CVE-2025-47727; CVE-2025-47726" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-47724,
        cve-res:CVE-2025-47725,
        cve-res:CVE-2025-47726,
        cve-res:CVE-2025-47727 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a human-machine interface; are affected: CNCSoft: v1.01.34 and prior.; Delta Electronics reports the following versions of CNCSoft" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-175-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-175-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-175-03" ;
    dcterms:issued "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Controllers (Update A)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-3117; CVE-2025-3905; CVE-2025-3112; CVE-2025-3898; CVE-2025-3899; CVE-2025-3116" ;
    icsa:cweNumber "CWE-79; CWE-20; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2025-3112,
        cve-res:CVE-2025-3116,
        cve-res:CVE-2025-3117,
        cve-res:CVE-2025-3898,
        cve-res:CVE-2025-3899,
        cve-res:CVE-2025-3905 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-400,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modicon Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-3117) Modicon Controllers LMC058: All versions (CVE-2025-3905; CVE-2025-3117) Modicon Controllers M258: All versions (CVE-2025-3905; Schneider Electric reports that the following products are affected: Modicon Controllers M241: Versions prior to 5.3.12.51 Modicon Controllers M251: Versions prior to 5.3.12.51 Modicon Controllers M262: Versions prior to 5.3.9.18 (CVE-2025-3898; CVE-2025-3117).; CVE-2025-3116" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-175-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-175-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-175-04" ;
    dcterms:issued "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EVLink WallBox (Update A)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-5741; CVE-2025-5743; CVE-2025-5740; CVE-2025-5742" ;
    icsa:cweNumber "CWE-22; CWE-78; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-5740,
        cve-res:CVE-2025-5741,
        cve-res:CVE-2025-5742,
        cve-res:CVE-2025-5743 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-78,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EVLink WallBox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: EVLink WallBox: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-175-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-175-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-175-05" ;
    dcterms:issued "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "ControlID iDSecure On-Premises" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-49853; CVE-2025-49852; CVE-2025-49851" ;
    icsa:cweNumber "CWE-918; CWE-89; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2025-49851,
        cve-res:CVE-2025-49852,
        cve-res:CVE-2025-49853 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-89,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iDSecure On-premises" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a vehicle control software; are affected: iDSecure On-premises: Versions 4.7.48.0 and prior.; The following versions of ControlID iDSecure On-premises" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-175-05" ;
    icsa:vendor "ControlID" ;
    icsa:year 2025 .

icsa-res:ICSA-25-175-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-175-06" ;
    dcterms:issued "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Parsons AccuWeather Widget" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-5015" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-5015 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AccuWeather and Custom RSS widget" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of AccuWeather and Custom RSS widget are affected: Parsons Utility Enterprise Data Management: Version 5.18 Parsons Utility Enterprise Data Management: Version 5.03 Parsons Utility Enterprise Data Management: Versions 4.02 through 4.26 Parsons Utility Enterprise Data Management: Version 3.30 AclaraONE Utility Portal: versions prior to 1.22." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-175-06" ;
    icsa:vendor "Parsons" ;
    icsa:year 2025 .

icsa-res:ICSA-25-175-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-175-07" ;
    dcterms:issued "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "MICROSENS NMP Web+" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-49152; CVE-2025-49153; CVE-2025-49151" ;
    icsa:cweNumber "CWE-547; CWE-22; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2025-49151,
        cve-res:CVE-2025-49152,
        cve-res:CVE-2025-49153 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-547,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NMP Web+" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of NMP Web+ are affected: NMP Web+: Version 3.2.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-175-07" ;
    icsa:vendor "MICROSENS" ;
    icsa:year 2025 .

icsa-res:ICSA-25-177-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-177-01" ;
    dcterms:issued "2025-06-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Air Conditioning Systems (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-3699" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-3699 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Air Conditioning Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric CMS-RMD-J: vers:all/*.; Mitsubishi Electric G-50A: vers:all/*; Mitsubishi Electric G-150AD: vers:all/*; Mitsubishi Electric EB-50GU-J: vers:all/*; Mitsubishi Electric GB-50ADA-J: vers:all/*; Mitsubishi Electric AE-200A: vers:all/*; Mitsubishi Electric TE-50A: vers:all/*; Mitsubishi Electric AE-50A: vers:all/*; Mitsubishi Electric G-50: vers:all/*; Mitsubishi Electric AE-200E: vers:all/*; Mitsubishi Electric EW-50E: vers:all/*; Mitsubishi Electric EW-50J: vers:all/*; Mitsubishi Electric AE-50E: vers:all/*; Mitsubishi Electric EB-50GU-A: vers:all/*; Mitsubishi Electric TE-200A: vers:all/*; Mitsubishi Electric GB-50A: vers:all/*; Mitsubishi Electric GB-50ADA-A: vers:all/*; Mitsubishi Electric AE-50J: vers:all/*; Mitsubishi Electric TW-50A: vers:all/*; Mitsubishi Electric AG-150A-J: vers:all/*; Mitsubishi Electric G-50-W: vers:all/*; Mitsubishi Electric GB-50: vers:all/*; Mitsubishi Electric AE-200J: vers:all/*; Mitsubishi Electric GB-24A: vers:all/*; Mitsubishi Electric AG-150A-A: vers:all/*; Mitsubishi Electric EW-50A: vers:all/*; Mitsubishi Electric GB-50AD: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-177-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-177-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-177-02" ;
    dcterms:issued "2025-06-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "TrendMakers Sight Bulb Pro" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-6522; CVE-2025-6521" ;
    icsa:cweNumber "CWE-77; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2025-6521,
        cve-res:CVE-2025-6522 ;
    icsa:hasCWE cwe-res:CWE-327,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sight Bulb Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Sight Bulb Pro Firmware are affected: Sight Bulb Pro Firmware ZJ_CG32-2201: Version 8.57.83 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-177-02" ;
    icsa:vendor "TrendMakers" ;
    icsa:year 2025 .

icsa-res:ICSA-25-182-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-182-01" ;
    dcterms:issued "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "FESTO Didactic CP, MPS 200, and MPS 400 Firmware" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-15782" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2020-15782 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CP, MPS 200, MPS 400" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FESTO Didactic reports that the following products are affected: FESTO Didactic Firmware Siemens Simatic S7-1500 / ET200SP (< V2.9.2) installed on FESTO Didactic CP including S7 PLC(All versions): All versions FESTO Didactic Firmware Siemens Simatic S7-1500 / ET200SP (< V2.9.2) installed on FESTO Didactic MPS 200 Systems(All versions): All versions FESTO Didactic Firmware Siemens Simatic S7-1500 / ET200SP (< V2.9.2) installed on FESTO Didactic MPS 400 Systems(All versions): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-182-01" ;
    icsa:vendor "Festo Didactic SE" ;
    icsa:year 2025 .

icsa-res:ICSA-25-182-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-182-02" ;
    dcterms:issued "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "FESTO Automation Suite, FluidDraw, and Festo Didactic Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3935" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2023-3935 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CIROS Studio / Education, Automation Suite, FluidDraw, FluidSIM, MES-PC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FESTO; FESTO Didactic reports that the following products are affected: FESTO Didactic CIROS Studio / Education: 6.0.0 - 6.4.6 FESTO Didactic CIROS Studio / Education: 7.0.0 - 7.1.7 FESTO Festo Automation Suite: <= 2.6.0.481 FESTO FluidDraw: P6 <= 6.2k FESTO FluidDraw: 365 <= 7.0a FESTO Didactic FluidSIM: 5 all versions FESTO Didactic FluidSIM: 6 <= 6.1c FESTO Didactic MES-PC: shipped before December 2023." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-182-02" ;
    icsa:vendor "Festo, Festo Didactic SE" ;
    icsa:year 2025 .

icsa-res:ICSA-25-182-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-182-03" ;
    dcterms:issued "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "FESTO CODESYS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-31803; CVE-2022-31802; CVE-2022-31804" ;
    icsa:cweNumber "CWE-187; CWE-789; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-31802,
        cve-res:CVE-2022-31803,
        cve-res:CVE-2022-31804 ;
    icsa:hasCWE cwe-res:CWE-187,
        cwe-res:CWE-400,
        cwe-res:CWE-789 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FESTO reports that the following products are affected: FESTO CODESYS Gateway Server V2: All versions FESTO CODESYS Gateway Server V2: prior to V2.3.9.38." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-182-03" ;
    icsa:vendor "Festo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-182-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-182-04" ;
    dcterms:issued "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "FESTO Hardware Controller, Hardware Servo Press Kit" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-30311; CVE-2022-30308; CVE-2022-30309; CVE-2022-30310" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2022-30308,
        cve-res:CVE-2022-30309,
        cve-res:CVE-2022-30310,
        cve-res:CVE-2022-30311 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hardware Controller, Hardware Servo Press Kit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FESTO reports the following products are affected: Festo Firmware installed on Festo Hardware Controller CECC-X-M1: Version 4.0.14 Festo Firmware installed on Festo Hardware Controller CECC-X-M1: Versions 3.8.14 and prior Festo Firmware installed on Festo Hardware Controller CECC-X-M1-MV: Versions 3.8.14 and prior Festo Firmware installed on Festo Hardware Controller CECC-X-M1-MV: Version 4.0.14 Festo Firmware installed on Festo Hardware Controller CECC-X-M1-MV-S1: Version 4.0.14 Festo Firmware installed on Festo Hardware Controller CECC-X-M1-MV-S1: Versions 3.8.14 and prior Festo Firmware installed on Festo Hardware Controller CECC-X-M1-YS-L1: Versions 3.8.14 and prior Festo Firmware installed on Festo Hardware Controller CECC-X-M1-YS-L2: Versions 3.8.14 and prior Festo Firmware installed on Festo Hardware Controller CECC-X-M1-Y-YJKP: Versions 3.8.14 and prior Festo Firmware installed on Festo Hardware Servo Press Kit YJKP: Versions 3.8.14 and prior Festo Firmware installed on Festo Hardware Servo Press Kit YJKP-: Versions 3.8.14 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-182-04" ;
    icsa:vendor "Festo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-182-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-182-05" ;
    dcterms:issued "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Voltronic Power and PowerShield UPS Monitoring Software" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan, Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2022-31491; CVE-2022-43110" ;
    icsa:cweNumber "CWE-749; CWE-425" ;
    icsa:hasCVE cve-res:CVE-2022-31491,
        cve-res:CVE-2022-43110 ;
    icsa:hasCWE cwe-res:CWE-425,
        cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Viewpower, NetGuard" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Voltronic Power and PowerShield UPS monitoring software is affected; as well as other derivative products: Voltronic Power Viewpower: Version 1.04-24215 and prior Voltronic Power ViewPower Pro: Version 2.2165 and prior Powershield NetGuard: Version 1.04-22119 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-182-05" ;
    icsa:vendor "Voltronic Power, PowerShield" ;
    icsa:year 2025 .

icsa-res:ICSA-25-182-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-182-06" ;
    dcterms:issued "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Relion 670/650 and SAM600-IO Series (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-2403" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-2403 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Relion 670/650 and SAM600-IO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: Hitachi Energy Relion 650: Version 2.2.4.4 Hitachi Energy Relion 650: Version 2.2.5.6 Hitachi Energy Relion 650: All versions from 2.2.6.0 to 2.2.6.2 Hitachi Energy Relion 670: Version 2.2.2.6 Hitachi Energy Relion 670: Version 2.2.3.7 Hitachi Energy Relion 670: Version 2.2.4.4 Hitachi Energy Relion 670: Version 2.2.5.6 Hitachi Energy Relion 670: All versions from 2.2.6.0 to 2.2.6.2 Hitachi Energy SAM600-IO: Version 2.2.5.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-182-06" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-182-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-182-07" ;
    dcterms:issued "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MSM" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-11022" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-11022 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Modular Switchgear Monitoring (MSM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports the following products are affected: Hitachi Energy MSM: Version 2.2.9 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-182-07" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-184-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-184-01" ;
    dcterms:issued "2025-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Relion 670/650 and SAM600-IO Series (Update C)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-1718" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2025-1718 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy Relion 670/650 and SAM600-IO Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Relion 670/650 series version 2.2.6 up to revision 2.2.6.3; Relion 670/650 series version 2.1 all revisions; Relion 670/650 and SAM600-IO series version 2.2.5 up to revision 2.2.5.7; Relion 670 series version 2.0 all revisions; Relion 670/650 series version 1 all subversions and revisions; Relion 670 series version 2.2.3 up to revision 2.2.3.7; Relion 670/650 series version 2.2.4 up to revision 2.2.4.5; Relion 670 series version 2.2.2 up to revision 2.2.2.6; Relion 670/650 series version 2.2.1 up to revision 2.2.1.8; Relion 670/650 series version 2.2.0 up to revision 2.2.0.13" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-184-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-184-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-184-02" ;
    dcterms:issued "2025-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MicroSCADA X SYS600" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-39202; CVE-2025-39201; CVE-2025-39203; CVE-2025-39205; CVE-2025-39204" ;
    icsa:cweNumber "CWE-276; CWE-202; CWE-73; CWE-295; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2025-39201,
        cve-res:CVE-2025-39202,
        cve-res:CVE-2025-39203,
        cve-res:CVE-2025-39204,
        cve-res:CVE-2025-39205 ;
    icsa:hasCWE cwe-res:CWE-202,
        cwe-res:CWE-276,
        cwe-res:CWE-295,
        cwe-res:CWE-354,
        cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MicroSCADA X SYS600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-39202; Hitachi Energy reports that the following products are affected: Hitachi Energy MicroSCADA Pro/X SYS600: version 10.0 up to 10.6 (CVE-2025-39201; Hitachi Energy MicroSCADA Pro/X SYS600: version 10.3 up to 10.6 (CVE-2025-39205).; Hitachi Energy MicroSCADA Pro/X SYS600: version 10.5 up to 10.6 (CVE-2025-39203); CVE-2025-39205); CVE-2025-39204" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-184-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-184-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-184-03" ;
    dcterms:issued "2025-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSOFT Update Manager (Update B)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-0411; CVE-2024-11477" ;
    icsa:cweNumber "CWE-191; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2024-11477,
        cve-res:CVE-2025-0411 ;
    icsa:hasCWE cwe-res:CWE-191,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric MELSOFT Update Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M: >=1.000A|<1.012N" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-184-03" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-184-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-184-04" ;
    dcterms:issued "2025-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-5241" ;
    icsa:cweNumber "CWE-645" ;
    icsa:hasCVE cve-res:CVE-2025-5241 ;
    icsa:hasCWE cwe-res:CWE-645 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FX5S-30MT/DS: All versions; FX5S-80MT/ESS: All versions; FX5S-30MT/ESS: All versions; FX5UJ-60MT/DSS: All versions; FX5UJ-60MR/ES-A: All versions; FX5U-64MT/DS: All versions; FX5UJ-40MR/ES: All versions; FX5UJ-24MT/ES-A: All versions; FX5S-30MR/ES: All versions; FX5UJ-24MR/ES: All versions; FX5S-40MR/ES: All versions; FX5U-64MR/DS: All versions; FX5U-64MT/DSS: All versions; FX5U-80MT/ES: All versions; FX5UC-64MT/D: All versions; The following version of MELSEC iQ-F Series is affected: FX5U-32MT/ES: All versions; FX5UC-64MT/DSS: All versions; FX5UJ-40MT/ES-A: All versions; FX5-CCLGN-MS: All versions.; FX5UJ-24MT/DSS: All versions; FX5UJ-40MT/ES: All versions; FX5U-32MR/DS: All versions; FX5U-80MR/ES: All versions; FX5UJ-60MT/DS: All versions; FX5UJ-60MT/ES: All versions; FX5UJ-24MR/ES-A: All versions; FX5S-30MT/DSS: All versions; FX5S-60MT/ESS: All versions; FX5S-80MR/ES: All versions; FX5UJ-60MT/ES-A: All versions; FX5UJ-24MT/ES: All versions; FX5UC-96MT/D: All versions; FX5U-32MT/ESS: All versions; FX5UC-32MT/DSS-TS: All versions; FX5UJ-60MR/ES: All versions; FX5S-60MT/DSS: All versions; FX5S-40MT/ESS: All versions; FX5U-32MT/DSS: All versions; FX5UC-32MT/DSS: All versions; FX5UJ-40MR/DS: All versions; FX5S-60MR/DS: All versions; FX5S-60MT/DS: All versions; FX5S-60MR/ES: All versions; FX5S-30MR/DS: All versions; FX5UC-96MT/DSS: All versions; FX5UC-32MT/D: All versions; FX5S-40MT/DSS: All versions; FX5S-80MT/ES: All versions; FX5S-60MT/ES: All versions; FX5U-80MT/DSS: All versions; FX5UJ-24MT/DS: All versions; FX5S-40MT/DS: All versions; FX5UJ-40MT/DSS: All versions; FX5S-40MT/ES: All versions; FX5UJ-24MR/DS: All versions; FX5U-80MT/DS: All versions; FX5UC-32MT/DS-TS: All versions; FX5U-80MT/ESS: All versions; FX5U-64MR/ES: All versions; FX5S-40MR/DS: All versions; FX5U-32MT/DS: All versions; FX5U-64MT/ES: All versions; FX5UJ-60MT/ESS: All versions; FX5UC-32MR/DS-TS: All versions; FX5UJ-60MR/DS: All versions; FX5S-30MT/ES: All versions; FX5U-64MT/ESS: All versions; FX5U-32MR/ES: All versions; FX5UJ-40MR/ES-A: All versions; FX5UJ-24MT/ESS: All versions; FX5UJ-40MT/ESS: All versions; FX5U-80MR/DS: All versions; FX5UJ-40MT/DS: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-184-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-189-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-189-01" ;
    dcterms:issued "2025-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson ValveLink Products" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-53471; CVE-2025-52579; CVE-2025-46358; CVE-2025-50109; CVE-2025-48496" ;
    icsa:cweNumber "CWE-427; CWE-20; CWE-316; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2025-46358,
        cve-res:CVE-2025-48496,
        cve-res:CVE-2025-50109,
        cve-res:CVE-2025-52579,
        cve-res:CVE-2025-53471 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-316,
        cwe-res:CWE-427,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ValveLink Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ValveLink products are affected: ValveLink SOLO: All versions prior to ValveLink 14.0 ValveLink DTM: All versions prior to ValveLink 14.0 ValveLink PRM: All versions prior to ValveLink 14.0 ValveLink SNAP-ON: All versions prior to ValveLink 14.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-189-01" ;
    icsa:vendor "Emerson" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-01" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40736; CVE-2025-40737; CVE-2025-40735; CVE-2025-40738" ;
    icsa:cweNumber "CWE-306; CWE-22; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2025-40735,
        cve-res:CVE-2025-40736,
        cve-res:CVE-2025-40737,
        cve-res:CVE-2025-40738 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-306,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens SINEC NMS: All versions prior to V4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-02" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40740; CVE-2025-40739; CVE-2025-40741" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-40739,
        cve-res:CVE-2025-40740,
        cve-res:CVE-2025-40741 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge SE2025" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Solid Edge SE2025: All versions prior to V225.0 Update 5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-03" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Administrator" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-23365; CVE-2025-23364" ;
    icsa:cweNumber "CWE-284; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2025-23364,
        cve-res:CVE-2025-23365 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TIA Administrator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: TIA Administrator: All versions prior to V3.0.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-04" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CN 4100" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40593" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-40593 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC CN 4100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC CN 4100: All versions prior to V4.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-05" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TIA Project-Server and TIA Portal" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-27127" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2025-27127 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Project-Server and TIA Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: TIA Project-Server: Versions prior to V2.1.1 TIA Project-Server V17: All versions Totally Integrated Automation Portal (TIA Portal) V17: All versions Totally Integrated Automation Portal (TIA Portal) V18: All versions Totally Integrated Automation Portal (TIA Portal) V19: All versions Totally Integrated Automation Portal (TIA Portal) V20: Versions prior to V20 Update 3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-06" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Siemens" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40742" ;
    icsa:cweNumber "CWE-598" ;
    icsa:hasCVE cve-res:CVE-2025-40742 ;
    icsa:hasCWE cwe-res:CWE-598 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIPROTEC 5 6MD84 (CP300): All versions SIPROTEC 5 7SA86 (CP300): All versions SIPROTEC 5 7SA87 (CP300): All versions SIPROTEC 5 7SD82 (CP100): All versions SIPROTEC 5 7SD82 (CP150): All versions SIPROTEC 5 7SD86 (CP300): All versions SIPROTEC 5 7SD87 (CP300): All versions SIPROTEC 5 7SJ81 (CP100): All versions SIPROTEC 5 7SJ81 (CP150): All versions SIPROTEC 5 7SJ82 (CP100): All versions SIPROTEC 5 7SJ82 (CP150): All versions SIPROTEC 5 6MD85 (CP300): All versions SIPROTEC 5 7SJ85 (CP300): All versions SIPROTEC 5 7SJ86 (CP300): All versions SIPROTEC 5 7SK82 (CP100): All versions SIPROTEC 5 7SK82 (CP150): All versions SIPROTEC 5 7SK85 (CP300): All versions SIPROTEC 5 7SL82 (CP100): All versions SIPROTEC 5 7SL82 (CP150): All versions SIPROTEC 5 7SL86 (CP300): All versions SIPROTEC 5 7SL87 (CP300): All versions SIPROTEC 5 7SS85 (CP300): All versions SIPROTEC 5 6MD86 (CP300): All versions SIPROTEC 5 7ST85 (CP300): All versions SIPROTEC 5 7ST86 (CP300): All versions SIPROTEC 5 7SX82 (CP150): All versions SIPROTEC 5 7SX85 (CP300): All versions SIPROTEC 5 7SY82 (CP150): All versions SIPROTEC 5 7UM85 (CP300): All versions SIPROTEC 5 7UT82 (CP100): All versions SIPROTEC 5 7UT82 (CP150): All versions SIPROTEC 5 7UT85 (CP300): All versions SIPROTEC 5 7UT86 (CP300): All versions SIPROTEC 5 6MD89 (CP300): All versions SIPROTEC 5 7UT87 (CP300): All versions SIPROTEC 5 7VE85 (CP300): All versions SIPROTEC 5 7VK87 (CP300): All versions SIPROTEC 5 7VU85 (CP300): All versions SIPROTEC 5 Compact 7SX800 (CP050): All versions SIPROTEC 5 6MD89 (CP300) V9.6: All versions SIPROTEC 5 6MU85 (CP300): All versions SIPROTEC 5 7KE85 (CP300): All versions SIPROTEC 5 7SA82 (CP100): All versions SIPROTEC 5 7SA82 (CP150): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-07" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DTM Soft" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-53415" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-53415 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DTM Soft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: DTM Soft: Versions 1.6.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-07" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-08" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech iView" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-46704; CVE-2025-53509; CVE-2025-52459; CVE-2025-53397; CVE-2025-53519; CVE-2025-53515; CVE-2025-52577; CVE-2025-41442; CVE-2025-53475; CVE-2025-48891" ;
    icsa:cweNumber "CWE-79; CWE-89; CWE-88; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2025-41442,
        cve-res:CVE-2025-46704,
        cve-res:CVE-2025-48891,
        cve-res:CVE-2025-52459,
        cve-res:CVE-2025-52577,
        cve-res:CVE-2025-53397,
        cve-res:CVE-2025-53475,
        cve-res:CVE-2025-53509,
        cve-res:CVE-2025-53515,
        cve-res:CVE-2025-53519 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-79,
        cwe-res:CWE-88,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Advantech products are affected: iView: Versions prior to 5.7.05 build 7057." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-08" ;
    icsa:vendor "Advantech" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-09" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "KUNBUS RevPi Webstatus" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-41646" ;
    icsa:cweNumber "CWE-303" ;
    icsa:hasCVE cve-res:CVE-2025-41646 ;
    icsa:hasCWE cwe-res:CWE-303 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RevPi Webstatus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KUNBUS reports the following products are affected: Revolution Pi Webstatus: Version 2.4.5 and prior Revolution Pi OS Bullseye: 04/2024 Revolution Pi OS Bullseye: 09/2023 Revolution Pi OS Bullseye: 07/2023 Revolution Pi OS Bullseye: 06/2023 Revolution Pi OS Bullseye: 02/2024." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-09" ;
    icsa:vendor "KUNBUS" ;
    icsa:year 2025 .

icsa-res:ICSA-25-191-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-191-10" ;
    dcterms:issued "2025-07-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "End-of-Train and Head-of-Train Remote Linking Protocol (Update C)" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-1727" ;
    icsa:cweNumber "CWE-1390" ;
    icsa:hasCVE cve-res:CVE-2025-1727 ;
    icsa:hasCWE cwe-res:CWE-1390 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "End-of-Train and Head-of-Train devices" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following version of End-of-Train and Head-of-Train remote linking protocol is affected: End-of-Train and Head-of-Train remote linking protocol: All versions The following specific devices have been confirmed to be affected by their respective manufacturers: Wabtec TrainLink NG End of Train (NGEOT) Wabtec TrainLink NG3 ATX End of Train (NG3 EOT) Wabtec TrainLink NG4 ATX End of Train (NG4 EOT) Wabtec TrainLink NG5 ATX End of Train (NG5 EOT) Siemens Trainguard EOT Siemens Trainguard HOT DPS Electronics DPS 2020-He-LD: ETD External 2dB Antenna DPS Electronics DPS 2020-He: ETD Internal Antenna DPS Electronics DPS 3030-CM-MAG: HTD Console Mount DPS Electronics DPS 3030-I-MAG HTD: HTD Integrated." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-191-10" ;
    icsa:vendor "End-of-Train and Head-of-Train remote linking protocol" ;
    icsa:year 2025 .

icsa-res:ICSA-25-196-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-196-01" ;
    dcterms:issued "2025-07-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Asset Suite" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-2500; CVE-2025-1484; CVE-2019-9290; CVE-2019-9429; CVE-2019-9262; CVE-2019-9256" ;
    icsa:cweNumber "CWE-184; CWE-256; CWE-787; CWE-763" ;
    icsa:hasCVE cve-res:CVE-2019-9256,
        cve-res:CVE-2019-9262,
        cve-res:CVE-2019-9290,
        cve-res:CVE-2019-9429,
        cve-res:CVE-2025-1484,
        cve-res:CVE-2025-2500 ;
    icsa:hasCWE cwe-res:CWE-184,
        cwe-res:CWE-256,
        cwe-res:CWE-763,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Energy Asset Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: Asset Suite AnyWhere for Inventory (AWI) Android mobile app: Versions 11.5 and prior (CVE-2019-9262; CVE-2019-9290) Asset Suite 9 series: Version 9.6.4.4 (CVE-2025-1484; CVE-2019-9429; CVE-2025-2500) Asset Suite 9 series: Version 9.7 (CVE-2025-2500).; CVE-2019-9256" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-196-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-196-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-196-02" ;
    dcterms:issued "2025-07-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB RMC-100 (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-6073; CVE-2025-6071; CVE-2025-6072; CVE-2025-6074" ;
    icsa:cweNumber "CWE-121; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2025-6071,
        cve-res:CVE-2025-6072,
        cve-res:CVE-2025-6073,
        cve-res:CVE-2025-6074 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB RMC-100 (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RMC-100 LITE Version (>=2106229-015|<=2106229-016); RMC-100 Version (>=2105457-043|<=2105457-045)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-196-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-196-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-196-03" ;
    dcterms:issued "2025-07-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "LITEON IC48A and IC80A EV Chargers" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-7357" ;
    icsa:cweNumber "CWE-256" ;
    icsa:hasCVE cve-res:CVE-2025-7357 ;
    icsa:hasCWE cwe-res:CWE-256 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IC48A and IC80A" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LITEON EV chargers are affected: LITEON IC48A: Firmware versions prior to 01.00.19r LITEON IC80A: Firmware versions prior to 01.01.12e." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-196-03" ;
    icsa:vendor "LITEON" ;
    icsa:year 2025 .

icsa-res:ICSA-25-198-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-198-01" ;
    dcterms:issued "2025-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Leviton AcquiSuite and Energy Monitoring Hub" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Energy; Food and Agriculture; Healthcare and Public Health; Information Technology" ;
    icsa:cveNumber "CVE-2025-6185" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-6185 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AcquiSuite, Energy Monitoring Hub" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Leviton AcquiSuite and Leviton Energy Monitoring Hub are affected: AcquiSuite: Version A8810 Energy Monitoring Hub: Version A8812." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-198-01" ;
    icsa:vendor "Leviton" ;
    icsa:year 2025 .

icsa-res:ICSA-25-201-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-201-01" ;
    dcterms:issued "2025-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric CNC Series (Update A)" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2016-2542" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2016-2542 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNC Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mitsubishi Electric CNC Series are affected: NC Designer2: All versions NC Designer: All versions NC Configurator2: All versions NC Analyzer2: All versions NC Analyzer: All versions NC Explorer: All versions NC Monitor2: All versions NC Monitor: All versions NC Trainer2: \"AB\" and prior NC Trainer2 plus: \"AB\" and prior NC Trainer: All versions NC Trainer plus: All versions NC Visualizer: All versions Remote Monitor Tool: All versions MS Configurator: All versions Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): \"A8\" and prior Mitsubishi Electric CNC communication software runtime library M70LC/M730LC: All versions NC Virtual Simulator: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-201-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-203-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-203-01" ;
    dcterms:issued "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "DuraComm DP-10iN-100-MU" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-48733; CVE-2025-41425; CVE-2025-53703" ;
    icsa:cweNumber "CWE-306; CWE-79; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2025-41425,
        cve-res:CVE-2025-48733,
        cve-res:CVE-2025-53703 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SPM-500 DP-10iN-100-MU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DuraComm SPM-500 DP-10iN-100-MU; a power distribution panel; are affected: SPM-500 DP-10iN-100-MU: Version 4.10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-203-01" ;
    icsa:vendor "DuraComm Corporation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-203-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-203-02" ;
    dcterms:issued "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Lantronix Provisioning Manager" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2025-7766" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2025-7766 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Provisioning Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Lantronix products are affected: Provisioning Manager: Versions 7.10.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-203-02" ;
    icsa:vendor "Lantronix" ;
    icsa:year 2025 .

icsa-res:ICSA-25-203-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-203-03" ;
    dcterms:issued "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-6788" ;
    icsa:cweNumber "CWE-668" ;
    icsa:hasCVE cve-res:CVE-2025-6788 ;
    icsa:hasCWE cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following products are affected: EcoStruxure Power Monitoring Expert (PME): 2023 EcoStruxure Power Monitoring Expert (PME): 2023 R2 EcoStruxure Power Monitoring Expert (PME): 2024 EcoStruxure Power Monitoring Expert (PME): 2024 R2 EcoStruxure Power Operation (EPO) Advanced Reporting and Dashboards Module: 2022 EcoStruxure Power Operation (EPO) Advanced Reporting and Dashboards Module: 2024." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-203-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-203-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-203-04" ;
    dcterms:issued "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Operation (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2022-45198; CVE-2023-44487; CVE-2023-5217; CVE-2023-35945; CVE-2023-50447; CVE-2024-28219" ;
    icsa:cweNumber "CWE-680; CWE-409; CWE-787; CWE-95; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-45198,
        cve-res:CVE-2023-35945,
        cve-res:CVE-2023-44487,
        cve-res:CVE-2023-50447,
        cve-res:CVE-2023-5217,
        cve-res:CVE-2024-28219 ;
    icsa:hasCWE cwe-res:CWE-400,
        cwe-res:CWE-409,
        cwe-res:CWE-680,
        cwe-res:CWE-787,
        cwe-res:CWE-95 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Power Operation (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric EcoStruxure Power Operation (EPO) 2022: <=CU6; Schneider Electric EcoStruxure Power Operation (EPO) 2024: <=CU1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-203-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-203-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-203-05" ;
    dcterms:issued "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric System Monitor Application" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-11023" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2020-11023 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "System Monitor Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following products are affected: System Monitor application in Harmony Industrial PC series: All versions System Monitor application in Pro-face Industrial PC series: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-203-05" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-203-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-203-06" ;
    dcterms:issued "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxture IT Data Center Expert" ;
    icsa:CVSSScore "9.5"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-50124; CVE-2025-50125; CVE-2025-50121; CVE-2025-6438; CVE-2025-50122; CVE-2025-50123" ;
    icsa:cweNumber "CWE-94; CWE-611; CWE-78; CWE-918; CWE-269; CWE-331" ;
    icsa:hasCVE cve-res:CVE-2025-50121,
        cve-res:CVE-2025-50122,
        cve-res:CVE-2025-50123,
        cve-res:CVE-2025-50124,
        cve-res:CVE-2025-50125,
        cve-res:CVE-2025-6438 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-331,
        cwe-res:CWE-611,
        cwe-res:CWE-78,
        cwe-res:CWE-918,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure IT Data Center Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports the following product is affected: EcoStruxure IT Data Center Expert: Versions v8.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-203-06" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-205-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-205-01" ;
    dcterms:issued "2025-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric CNC Series (Update B)" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2016-2542" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2016-2542 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric CNC Series (Update B)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric NC Virtual Simulator: <=\"A4\"; Mitsubishi Electric NC Analyzer: vers:all/*; Mitsubishi Electric NC Trainer plus: vers:all/*; Mitsubishi Electric NC Explorer: vers:all/*; Mitsubishi Electric Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <=\"A8\"; Mitsubishi Electric NC Designer2: vers:all/*; Mitsubishi Electric Mitsubishi Electric CNC communication software runtime library M730LC: vers:all/*; Mitsubishi Electric NC Designer: vers:all/*; Mitsubishi Electric NC Configurator2: vers:all/*; Mitsubishi Electric Remote Monitor Tool: vers:all/*; Mitsubishi Electric Mitsubishi Electric CNC communication software runtime library M70LC: vers:all/*; Mitsubishi Electric NC Monitor: vers:all/*; Mitsubishi Electric NC Trainer: vers:all/*; Mitsubishi Electric NC Monitor2: vers:all/*; Mitsubishi Electric NC Trainer2 plus: <=\"AB\"; Mitsubishi Electric NC Analyzer2: vers:all/*; Mitsubishi Electric MS Configurator: vers:all/*; Mitsubishi Electric NC Trainer2: <=\"AB\"; Mitsubishi Electric NC Visualizer: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-205-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-205-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-205-02" ;
    dcterms:issued "2025-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Network Thermostat X-Series WiFi Thermostats" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-6260" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-6260 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "X-Series WiFi thermostats" ;
    icsa:productDistribution "United States, Canada" ;
    icsa:productsAffected "The following Network Thermostat product is affected: X-Series WiFi thermostats: Versions v4.5 up to but not including v4.6 X-Series WiFi thermostats: Versions v9.6 up to but not including v9.46 X-Series WiFi thermostats: Versions v10.1 up to but not including v10.29 X-Series WiFi thermostats: Versions v11.1 up to but not including v11.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-205-02" ;
    icsa:vendor "Network Thermostat" ;
    icsa:year 2025 .

icsa-res:ICSA-25-205-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-205-03" ;
    dcterms:issued "2025-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell Experion PKS (Update A)" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Healthcare and Public Health; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-3947; CVE-2025-2520; CVE-2025-2522; CVE-2025-2521; CVE-2025-2523; CVE-2025-3946" ;
    icsa:cweNumber "CWE-430; CWE-191; CWE-457; CWE-119; CWE-226" ;
    icsa:hasCVE cve-res:CVE-2025-2520,
        cve-res:CVE-2025-2521,
        cve-res:CVE-2025-2522,
        cve-res:CVE-2025-2523,
        cve-res:CVE-2025-3946,
        cve-res:CVE-2025-3947 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-191,
        cwe-res:CWE-226,
        cwe-res:CWE-430,
        cwe-res:CWE-457 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Experion PKS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Honeywell reports these vulnerabilities affect the following: Experion PKS: All releases prior to R520.2 TCU9 Hot Fix 1 Experion PKS: All releases prior to R530 TCU3 Hot Fix 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-205-03" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2025 .

icsa-res:ICSA-25-205-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-205-04" ;
    dcterms:issued "2025-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "LG Innotek Camera Model LNV5110R" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-7742" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-7742 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Camera Model LNV5110R" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following model of LG Innotek CCTV Camera is affected: LNV5110R: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-205-04" ;
    icsa:vendor "LG Innotek" ;
    icsa:year 2025 .

icsa-res:ICSA-25-210-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-210-01" ;
    dcterms:issued "2025-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "National Instruments LabVIEW" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-2634; CVE-2025-2633" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2025-2633,
        cve-res:CVE-2025-2634 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LabVIEW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of LabVIEW are affected: LabVIEW: 2025 Q1 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-210-01" ;
    icsa:vendor "National Instruments Corp (NI)" ;
    icsa:year 2025 .

icsa-res:ICSA-25-210-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-210-02" ;
    dcterms:issued "2025-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Samsung HVAC DMS" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-53080; CVE-2025-53079; CVE-2025-53082; CVE-2025-53077; CVE-2025-53081; CVE-2025-53078" ;
    icsa:cweNumber "CWE-22; CWE-36; CWE-698; CWE-23; CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-53077,
        cve-res:CVE-2025-53078,
        cve-res:CVE-2025-53079,
        cve-res:CVE-2025-53080,
        cve-res:CVE-2025-53081,
        cve-res:CVE-2025-53082 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-23,
        cwe-res:CWE-36,
        cwe-res:CWE-502,
        cwe-res:CWE-698 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HVAC DMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Samsung HVAC DMS; Versions 2.7.0.15 to 2.9.3.5.; Versions 2.5.0.17 to 2.6.14.0; are affected: Samsung HVAC DMS: Versions 2.0.0 to 2.3.13.0; a software management platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-210-02" ;
    icsa:vendor "Samsung" ;
    icsa:year 2025 .

icsa-res:ICSA-25-210-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-210-03" ;
    dcterms:issued "2025-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DTN Soft" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-53416" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-53416 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DTN Soft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: DTN Soft: Versions 2.1.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-210-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-212-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-212-01" ;
    dcterms:issued "2025-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Guralp Systems FMUS Series and MIN Series Devices (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-8286" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-8286 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Guralp Systems FMUS Series and MIN Series Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Guralp Systems Guralp MIN Series Digitizing Devices: vers:all/*; Guralp Systems Guralp FMUS Series Seismic Monitoring Devices: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-212-01" ;
    icsa:vendor "Guralp Systems" ;
    icsa:year 2025 .

icsa-res:ICSA-25-212-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-212-02" ;
    dcterms:issued "2025-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Lifecycle Services with VMware" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-41238; CVE-2025-41236; CVE-2025-41239; CVE-2025-41237" ;
    icsa:cweNumber "CWE-787; CWE-908" ;
    icsa:hasCVE cve-res:CVE-2025-41236,
        cve-res:CVE-2025-41237,
        cve-res:CVE-2025-41238,
        cve-res:CVE-2025-41239 ;
    icsa:hasCWE cwe-res:CWE-787,
        cwe-res:CWE-908 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lifecycle Services with VMware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following Lifecycle Services with VMware are affected: Industrial Data Center (IDC) with VMware: Generations 1 - 4 VersaVirtual Appliance (VVA) with VMware: Series A & B Threat Detection Managed Services (TDMS) with VMware: All versions Endpoint Protection Service with Rockwell Automation Proxy & VMware only: All versions Engineered and Integrated Solutions with VMware: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-212-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-217-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-217-01" ;
    dcterms:issued "2025-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Iconics Digital Solutions Multiple Products (Update A)" ;
    icsa:CVSSScore "4.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7376" ;
    icsa:cweNumber "CWE-64" ;
    icsa:hasCVE cve-res:CVE-2025-7376 ;
    icsa:hasCWE cwe-res:CWE-64 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ICONICS Product Suite and Mitsubishi Electric MC Works64" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ICONICS Product Suite and Mitsubishi Electric MC Works64 are affected: GENESIS64: All versions GENESIS: Version 11.00 Mitsubishi Electric MC Works64: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-217-01" ;
    icsa:vendor "Mitsubishi Electric Iconics Digital Solutions, Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-217-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-217-02" ;
    dcterms:issued "2025-08-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tigo Energy Cloud Connect Advanced (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-7769; CVE-2025-7770; CVE-2025-7768" ;
    icsa:cweNumber "CWE-798; CWE-77; CWE-337" ;
    icsa:hasCVE cve-res:CVE-2025-7768,
        cve-res:CVE-2025-7769,
        cve-res:CVE-2025-7770 ;
    icsa:hasCWE cwe-res:CWE-337,
        cwe-res:CWE-77,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cloud Connect Advanced" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Cloud Connect Advanced are affected: Cloud Connect Advanced: Versions 4.0.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-217-02" ;
    icsa:vendor "Tigo Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-219-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-219-01" ;
    dcterms:issued "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAView" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-53417" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2025-53417 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Electronics reports the following versions of DIAView industrial automation management system for providing real-time system control are affected: DIAView: Versions 4.2.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-219-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-219-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-219-02" ;
    dcterms:issued "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls FX Server, FX80 and FX90 (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2025-43867" ;
    icsa:cweNumber "CWE-1395" ;
    icsa:hasCVE cve-res:CVE-2025-43867 ;
    icsa:hasCWE cwe-res:CWE-1395 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FX Server, FX80 and FX90" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Johnson Controls products are affected: FX80: FX 14.10.10 and prior FX80: FX 14.14.1 and prior FX90: FX 14.10.10 and prior FX90: FX 14.14.1 and prior FX Server: FX 14.10.10 and prior FX Server: FX 14.14.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-219-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-219-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-219-03" ;
    dcterms:issued "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Burk Technology ARC Solo" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-5095" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-5095 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ARC Solo" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a monitoring and control device primariliy used in broadcasting; is affected: ARC Solo: Versions prior to v1.0.62.; The following version of ARC Solo" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-219-03" ;
    icsa:vendor "Burk Technology" ;
    icsa:year 2025 .

icsa-res:ICSA-25-219-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-219-04" ;
    dcterms:issued "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7033; CVE-2025-7025; CVE-2025-7032" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-7025,
        cve-res:CVE-2025-7032,
        cve-res:CVE-2025-7033 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arena" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: Arena: Versions 16.20.09 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-219-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-219-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-219-05" ;
    dcterms:issued "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Packet Power EMX and EG" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-8284" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-8284 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EMX, EG" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Packet Power products are affected: EMX: Versions prior to 4.1.0 EG: Versions prior to 4.1.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-219-05" ;
    icsa:vendor "Packet Power" ;
    icsa:year 2025 .

icsa-res:ICSA-25-219-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-219-06" ;
    dcterms:issued "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dreame Technology iOS and Android Mobile Applications (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-8393" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2025-8393 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Dreame Home iOS and Android Mobile Applications" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Dreame Technology MOVAhome iOS app: <=1.2.3; Dreame Technology Dreamehome Android app: <=2.1.8.8; Dreame Technology Dreamehome iOS app: <=2.3.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-219-06" ;
    icsa:vendor "Dreame Technology" ;
    icsa:year 2025 .

icsa-res:ICSA-25-219-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-219-07" ;
    dcterms:issued "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "EG4 Electronics EG4 Inverters (Update B)" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-46414; CVE-2025-47872; CVE-2025-52586; CVE-2025-53520" ;
    icsa:cweNumber "CWE-319; CWE-203; CWE-307; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2025-46414,
        cve-res:CVE-2025-47872,
        cve-res:CVE-2025-52586,
        cve-res:CVE-2025-53520 ;
    icsa:hasCWE cwe-res:CWE-203,
        cwe-res:CWE-307,
        cwe-res:CWE-319,
        cwe-res:CWE-494 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EG4 Inverters" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following EG4 Electronics inverters are affected: EG4 12kPV: All versions EG4 18kPV: All versions EG4 Flex 21: All versions EG4 Flex 18: All versions EG4 6000XP: All versions EG4 12000XP: All versions EG4 GridBoss: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-219-07" ;
    icsa:vendor "EG4 Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-219-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-219-08" ;
    dcterms:issued "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yealink IP Phones and RPS (Redirect and Provisioning Service)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-52917; CVE-2025-52916; CVE-2025-52919; CVE-2025-52918" ;
    icsa:cweNumber "CWE-295; CWE-307; CWE-770; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2025-52916,
        cve-res:CVE-2025-52917,
        cve-res:CVE-2025-52918,
        cve-res:CVE-2025-52919 ;
    icsa:hasCWE cwe-res:CWE-295,
        cwe-res:CWE-307,
        cwe-res:CWE-770,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IP Phones" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Yealink IP products are affected: SIP-T19P_E2: Versions prior to 53.84.0.121 SIP-T21P_E2: Versions prior to 52.84.0.121 SIP-T23G: Versions prior to 44.84.0.121 SIP-T40G: Versions prior to 76.84.0.121 SIP-T40P: Versions prior to 54.84.0.121 SIP-T27G: Versions prior to 69.84.0.121 SIP-T41S: Versions prior to 66.84.0.121 SIP-T42S: Versions prior to 66.84.0.121 SIP-T46S: Versions prior to 66.84.0.121 SIP- T48S: Versions prior to 66.84.0.121 SIP-CP920: Versions prior to 78.84.0.121 SIP-T53: Versions prior to X.84.0.121 SIP-T53W: Versions prior to X.84.0.121 SIP-T54W: Versions prior to X.84.0.121 SIP-T57W: Versions prior to X.84.0.121 SIP-T56A: Versions prior to 58.84.0.37 SIP-T58: Versions prior to 58.84.0.37 W52P: Versions prior to 25.81.0.67 W60B: Versions prior to 77.83.0.83 CP960: Versions prior to 73.84.0.37 SIP-T27P: Version 45.83.0.160 and prior SIP-T29G: Version 46.83.0.160 and prior SIP-T41P: Version 36.83.0.160 and prior SIP-T42G: Version 29.83.0.160 and prior SIP-T46G: Version 28.83.0.160 and prior SIP-T48G: Version 35.83.0.160 and prior SIP-T20P: All versions SIP-T22P: All versions SIP-T26P: All versions SIP-T27P: All versions T52S: All versions T54S: All versions RPS (Redirect and Provisioning Service): All builds prior to 05-26-2025." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-219-08" ;
    icsa:vendor "Yealink" ;
    icsa:year 2025 .

icsa-res:ICSA-25-224-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-224-01" ;
    dcterms:issued "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-41392; CVE-2025-46269; CVE-2025-52584; CVE-2025-53705" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-41392,
        cve-res:CVE-2025-46269,
        cve-res:CVE-2025-52584,
        cve-res:CVE-2025-53705 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Cobalt, Xenon, Argon, Lithium, Cobalt Share" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Ashlar-Vellum products are affected: Cobalt: All versions prior to 12.6.1204.204 Xenon: All versions prior to 12.6.1204.204 Argon: All versions prior to 12.6.1204.204 Lithium: All versions prior to 12.6.1204.204 Cobalt Share: All versions prior to 12.6.1204.204." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-224-01" ;
    icsa:vendor "Ashlar-Vellum" ;
    icsa:year 2025 .

icsa-res:ICSA-25-224-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-224-02" ;
    dcterms:issued "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-53700; CVE-2025-53698; CVE-2025-53697; CVE-2025-53696; CVE-2025-53699; CVE-2025-53695" ;
    icsa:cweNumber "CWE-922; CWE-78; CWE-345; CWE-1392; CWE-1299" ;
    icsa:hasCVE cve-res:CVE-2025-53695,
        cve-res:CVE-2025-53696,
        cve-res:CVE-2025-53697,
        cve-res:CVE-2025-53698,
        cve-res:CVE-2025-53699,
        cve-res:CVE-2025-53700 ;
    icsa:hasCWE cwe-res:CWE-1299,
        cwe-res:CWE-1392,
        cwe-res:CWE-345,
        cwe-res:CWE-78,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls iSTAR Edge G2: <=6.9.2.CU02; Johnson Controls iSTAR Ultra SE: <6.9.8; Johnson Controls iSTAR Ultra G2: vers:all/*; Johnson Controls iSTAR Edge G2: vers:all/*; Johnson Controls iSTAR Ultra: <6.9.8; Johnson Controls iSTAR Ultra SE: <=6.9.2.CU02; Johnson Controls iSTAR Ultra G2 SE: vers:all/*; Johnson Controls iSTAR Ultra: <=6.9.2.CU02; Johnson Controls iSTAR Ultra G2 SE: <=6.9.2.CU02; Johnson Controls iSTAR Ultra G2: <=6.9.2.CU02" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-224-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-224-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-224-03" ;
    dcterms:issued "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure (Update B)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-54926; CVE-2025-54925; CVE-2025-54923; CVE-2025-54927; CVE-2025-54924" ;
    icsa:cweNumber "CWE-502; CWE-22; CWE-918" ;
    icsa:hasCVE cve-res:CVE-2025-54923,
        cve-res:CVE-2025-54924,
        cve-res:CVE-2025-54925,
        cve-res:CVE-2025-54926,
        cve-res:CVE-2025-54927 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-502,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Power Monitoring Expert Software (PME), Power Operation (EPO), and Power SCADA Operation (PSO)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-54927) EcoStruxure Power Monitoring Expert (PME): 2023 (CVE-2025-54924; CVE-2025-54927) Advanced Reporting and Dashboards Module optional component of EcoStruxure Power Operation (EPO) (2022) installed with EcoStruxure Power Monitoring Expert (PME) (2024 R2): All versions Advanced Reporting and Dashboards Module optional component of EcoStruxure Power Operation (EPO) (2022) installed with EcoStruxure Power Monitoring Expert (PME) (2024): All versions Advanced Reporting and Dashboards Module optional component of EcoStruxure Power Operation (EPO) (2022) installed with EcoStruxure Power Monitoring Expert (PME) (2023): All versions (CVE-2025-54924; Schneider Electric reports that the following products are affected: EcoStruxure Power Monitoring Expert (PME): 2024 EcoStruxure Power Monitoring Expert (PME): 2024 R2 EcoStruxure Power Monitoring Expert (PME): 2022 (CVE-2025-54924; CVE-2025-54927).; CVE-2025-54925; CVE-2025-54927) Advanced Reporting and Dashboards Module optional component of EcoStruxure Power Operation (EPO) (2022) installed with EcoStruxure Power Monitoring Expert (PME) (2023 R2): All versions (CVE-2025-54924; CVE-2025-54927) EcoStruxure Power Monitoring Expert (PME): 2023 R2 (CVE-2025-54924" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-224-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-224-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-224-04" ;
    dcterms:issued "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PI Integrator" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Information Technology; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-41415; CVE-2025-54460" ;
    icsa:cweNumber "CWE-434; CWE-201" ;
    icsa:hasCVE cve-res:CVE-2025-41415,
        cve-res:CVE-2025-54460 ;
    icsa:hasCWE cwe-res:CWE-201,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PI Integrator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following AVEVA products are affected: PI Integrator for Business Analytics: Versions 2020 R2 SP1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-224-04" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-01" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RTLS Locating Manager" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-30034; CVE-2025-40751" ;
    icsa:cweNumber "CWE-617; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2025-30034,
        cve-res:CVE-2025-40751 ;
    icsa:hasCWE cwe-res:CWE-522,
        cwe-res:CWE-617 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RTLS Locating Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIMATIC RTLS Locating Manager: all versions prior to 3.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-02" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8894" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-8894 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens COMOS: all versions prior to V10.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-03" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Engineering Platforms" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-54678" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2024-54678 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Engineering Platforms" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIMATIC PCS neo V4.1: All Versions Siemens SIMATIC WinCC V18: All Versions Siemens SIMATIC WinCC V19: All versions prior to V19 Update 4 Siemens SIMATIC WinCC V20: All Versions Siemens SIMOCODE ES V17: All Versions Siemens SIMOCODE ES V18: All Versions Siemens SIMOCODE ES V19: All Versions Siemens SIMOCODE ES V20: All Versions Siemens SIMOTION SCOUT TIA V5.4: All Versions Siemens SIMOTION SCOUT TIA V5.5: All Versions Siemens SIMOTION SCOUT TIA V5.6: All versions prior to V5.6 SP1 HF7 Siemens SIMATIC PCS neo V5.0: All Versions Siemens SIMOTION SCOUT TIA V5.7: All Versions Siemens SINAMICS Startdrive V17: All Versions Siemens SINAMICS Startdrive V18: All Versions Siemens SINAMICS Startdrive V19: All Versions Siemens SINAMICS Startdrive V20: All Versions Siemens SIRIUS Safety ES V17 (TIA Portal): All Versions Siemens SIRIUS Safety ES V18 (TIA Portal): All Versions Siemens SIRIUS Safety ES V19 (TIA Portal): All Versions Siemens SIRIUS Safety ES V20 (TIA Portal): All Versions Siemens SIRIUS Soft Starter ES V17 (TIA Portal): All Versions Siemens SIMATIC PCS neo V6.0: All Versions Siemens SIRIUS Soft Starter ES V18 (TIA Portal): All Versions Siemens SIRIUS Soft Starter ES V19 (TIA Portal): All Versions Siemens SIRIUS Soft Starter ES V20 (TIA Portal): All Versions Siemens TIA Portal Cloud V17: All Versions Siemens TIA Portal Cloud V18: All Versions Siemens TIA Portal Cloud V19: All versions prior to 5.2.1.1 Siemens TIA Portal Cloud V20: All Versions Siemens TIA Portal Test Suite V20: All Versions Siemens SIMATIC S7-PLCSIM V17: All Versions Siemens SIMATIC STEP 7 V17: All Versions Siemens SIMATIC STEP 7 V18: All Versions Siemens SIMATIC STEP 7 V19: All versions prior to V19 Update 4 Siemens SIMATIC STEP 7 V20: All Versions Siemens SIMATIC WinCC V17: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-04" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40764; CVE-2025-40762" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-40762,
        cve-res:CVE-2025-40764 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Simcenter Femap V2406: vers:intdot/<2406.0003 Siemens Simcenter Femap V2412: vers:intdot/<2412.0002." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-05" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Wibu CodeMeter Runtime" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Financial Services; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-47809" ;
    icsa:cweNumber "CWE-272" ;
    icsa:hasCVE cve-res:CVE-2025-47809 ;
    icsa:hasCWE cwe-res:CWE-272 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wibu CodeMeter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIMATIC Information Server 2020: All versions Siemens SIMATIC WinCC OA V3.20: All versions prior to V3.20 P008 Siemens SIMATIC Information Server 2022: All versions Siemens SIMATIC Information Server 2024: All versions Siemens SIMATIC PDM Maintenance Station V5.0: All versions Siemens SIMATIC Process Historian 2020: All versions Siemens SIMATIC Process Historian 2022: All versions Siemens SIMATIC Process Historian 2024: All versions Siemens SIMATIC WinCC OA V3.18: All versions Siemens SIMATIC WinCC OA V3.19: All versions prior to V3.19 P020." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-06" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Opcenter Quality" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-41984; CVE-2024-41985; CVE-2024-41983; CVE-2024-41980; CVE-2024-41982; CVE-2024-41986; CVE-2024-41979" ;
    icsa:cweNumber "CWE-209; CWE-613; CWE-311; CWE-327; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2024-41979,
        cve-res:CVE-2024-41980,
        cve-res:CVE-2024-41982,
        cve-res:CVE-2024-41983,
        cve-res:CVE-2024-41984,
        cve-res:CVE-2024-41985,
        cve-res:CVE-2024-41986 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-311,
        cwe-res:CWE-327,
        cwe-res:CWE-613,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Opcenter Quality" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SmartClient modules Opcenter QL Home (SC): Versions between 13.2 and 2506 Siemens SOA Audit: Versions between 13.2 and 2506 Siemens SOA Cockpit: Versions between 13.2 and 2506." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-07" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Third-Party Components in SINEC OS" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-49892; CVE-2024-50035; CVE-2024-40990; CVE-2024-46743; CVE-2024-46755; CVE-2024-40987; CVE-2024-53103; CVE-2024-39505; CVE-2024-56533; CVE-2024-46798; CVE-2024-56605; CVE-2024-50251; CVE-2024-50040; CVE-2024-43890; CVE-2024-41009; CVE-2024-41065; CVE-2024-40945; CVE-2024-40974; CVE-2024-42087; CVE-2024-40934; CVE-2024-46832; CVE-2024-53148; CVE-2024-46723; CVE-2024-56637; CVE-2024-42153; CVE-2024-50292; CVE-2024-46819; CVE-2024-50099; CVE-2024-42145; CVE-2024-50282; CVE-2024-56644; CVE-2024-47679; CVE-2024-56596; CVE-2024-42095; CVE-2024-50001; CVE-2024-49981; CVE-2024-41092; CVE-2024-47659; CVE-2024-56741; CVE-2024-50267; CVE-2024-41090; CVE-2024-44999; CVE-2024-43861; CVE-2024-42076; CVE-2024-41059; CVE-2024-50015; CVE-2024-53194; CVE-2024-36484; CVE-2024-50201; CVE-2024-50007; CVE-2024-53184; CVE-2024-56571; CVE-2024-56747; CVE-2024-49930; CVE-2024-42093; CVE-2024-47668; CVE-2024-49977; CVE-2024-50295; CVE-2024-49965; CVE-2024-50045; CVE-2024-53237; CVE-2024-46757; CVE-2024-46817; CVE-2024-56601; CVE-2024-50264; CVE-2024-49890; CVE-2024-46679; CVE-2024-56704; CVE-2024-47692; CVE-2024-56756; CVE-2024-41035; CVE-2024-49944; CVE-2024-47713; CVE-2024-56539; CVE-2023-52887; CVE-2024-49879; CVE-2024-53181; CVE-2024-36901; CVE-2024-42247; CVE-2024-57874; CVE-2024-41070; CVE-2024-41041; CVE-2024-53150; CVE-2024-46722; CVE-2024-56643; CVE-2024-49907; CVE-2024-56581; CVE-2024-40961; CVE-2024-40995; CVE-2024-42143; CVE-2024-56662; CVE-2024-50051; CVE-2024-56548; CVE-2024-50089; CVE-2024-52332; CVE-2024-41004; CVE-2024-39469; CVE-2022-49034; CVE-2024-46731; CVE-2024-53217; CVE-2024-53227; CVE-2024-42086; CVE-2024-36894; CVE-2024-50234; CVE-2024-53057; CVE-2024-38619; CVE-2024-56567; CVE-2024-50013; CVE-2023-52917; CVE-2024-46815; CVE-2024-46828; CVE-2024-46771; CVE-2024-56770; CVE-2024-50039; CVE-2024-56780; CVE-2024-46744; CVE-2024-56603; CVE-2024-50059; CVE-2022-48666; CVE-2024-41034; CVE-2024-56705; CVE-2024-47143; CVE-2024-43882; CVE-2024-46783; CVE-2024-40905; CVE-2024-56659; CVE-2024-47660; CVE-2024-53239; CVE-2024-53174; CVE-2024-47712; CVE-2024-44971; CVE-2024-56670; CVE-2024-41020; CVE-2024-53157; CVE-2024-49867; CVE-2024-41087; CVE-2024-50082; CVE-2024-49878; CVE-2024-45006; CVE-2024-56781; CVE-2024-50046; CVE-2024-46840; CVE-2024-50304; CVE-2024-41063; CVE-2024-41012; CVE-2024-43879; CVE-2024-56623; CVE-2024-39484; CVE-2024-49851; CVE-2024-41055; CVE-2024-47706; CVE-2024-50202; CVE-2024-56636; CVE-2024-41064; CVE-2024-56570; CVE-2024-50074; CVE-2024-50296; CVE-2024-47697; CVE-2024-56690; CVE-2021-47316; CVE-2024-53101; CVE-2024-50269; CVE-2024-43880; CVE-2024-47749; CVE-2024-46719; CVE-2024-56701; CVE-2024-53052; CVE-2024-46740; CVE-2024-40916; CVE-2024-47739; CVE-2024-43908; CVE-2024-46780; CVE-2024-42224; CVE-2024-56587; CVE-2024-49894; CVE-2024-49938; CVE-2024-44969; CVE-2024-44960; CVE-2024-46777; CVE-2024-56574; CVE-2024-39506; CVE-2024-53063; CVE-2024-40959; CVE-2024-42082; CVE-2024-44988; CVE-2024-50096; CVE-2024-40981; CVE-2024-42152; CVE-2024-50299; CVE-2024-42148; CVE-2024-42101; CVE-2024-43893; CVE-2024-40912; CVE-2024-53104; CVE-2024-46758; CVE-2024-53158; CVE-2022-48827; CVE-2024-41040; CVE-2024-53097; CVE-2024-49959; CVE-2024-53183; CVE-2024-50180; CVE-2024-46814; CVE-2024-44990; CVE-2024-56779; CVE-2024-42077; CVE-2024-9681; CVE-2024-50179; CVE-2024-40931; CVE-2024-53240; CVE-2024-42105; CVE-2024-49913; CVE-2024-37078; CVE-2024-49868; CVE-2024-56754; CVE-2024-44952; CVE-2024-46673; CVE-2024-47735; CVE-2024-41081; CVE-2024-40943; CVE-2024-56572; CVE-2024-47685; CVE-2024-46677; CVE-2024-46745; CVE-2024-46750; CVE-2022-48828; CVE-2024-56598; CVE-2024-50273; CVE-2024-40941; CVE-2024-46739; CVE-2024-50194; CVE-2024-49889; CVE-2024-56562; CVE-2024-47748; CVE-2024-47756; CVE-2024-53171; CVE-2024-56532; CVE-2024-47699; CVE-2024-49995; CVE-2024-41005; CVE-2024-42229; CVE-2024-53241; CVE-2024-45003; CVE-2024-47757; CVE-2024-56593; CVE-2024-46761; CVE-2024-46759; CVE-2024-39495; CVE-2024-46689; CVE-2024-44965; CVE-2024-49975; CVE-2024-41095; CVE-2024-41006; CVE-2024-49860; CVE-2024-40976; CVE-2024-46675; CVE-2024-53145; CVE-2024-56597; CVE-2024-41049; CVE-2024-39502; CVE-2024-40947; CVE-2024-40963; CVE-2024-40960; CVE-2024-40988; CVE-2024-43867; CVE-2024-44989; CVE-2024-49896; CVE-2024-49924; CVE-2024-49883; CVE-2024-46791; CVE-2024-39499; CVE-2024-40983; CVE-2024-38586; CVE-2024-49966; CVE-2024-56681; CVE-2024-41015; CVE-2024-50198; CVE-2024-46756; CVE-2024-46818; CVE-2024-53198; CVE-2024-44954; CVE-2024-43883; CVE-2024-53059; CVE-2024-50268; CVE-2024-53214; CVE-2024-46844; CVE-2024-50044; CVE-2024-56748; CVE-2024-39487; CVE-2024-39509; CVE-2024-39501; CVE-2024-44949; CVE-2024-47663; CVE-2024-53680; CVE-2024-40978; CVE-2024-40932; CVE-2024-50008; CVE-2024-47669; CVE-2024-56634; CVE-2024-42084; CVE-2024-40929; CVE-2024-49858; CVE-2024-41078; CVE-2024-49933; CVE-2024-47667; CVE-2024-47742; CVE-2024-56633; CVE-2024-50236; CVE-2024-56619; CVE-2024-49983; CVE-2024-56691; CVE-2024-46829; CVE-2024-47709; CVE-2024-53146; CVE-2024-56642; CVE-2024-43889; CVE-2024-48881; CVE-2024-47740; CVE-2024-40971; CVE-2024-49963; CVE-2024-36938; CVE-2024-50193; CVE-2024-56630; CVE-2024-39503; CVE-2024-40904; CVE-2024-41000; CVE-2024-53155; CVE-2024-50195; CVE-2024-44998; CVE-2024-49952; CVE-2024-46721; CVE-2024-49967; CVE-2024-41017; CVE-2024-40980; CVE-2024-43098; CVE-2024-49895; CVE-2024-56615; CVE-2024-46763; CVE-2024-41044; CVE-2024-49881; CVE-2024-46804; CVE-2024-56594; CVE-2024-42244; CVE-2024-47710; CVE-2024-49863; CVE-2024-40968; CVE-2024-56589; CVE-2024-56688; CVE-2024-50237; CVE-2024-49901; CVE-2024-49982; CVE-2024-50083; CVE-2024-49969; CVE-2024-56739; CVE-2024-42094; CVE-2024-56724; CVE-2024-46714; CVE-2024-47701; CVE-2024-42092; CVE-2024-49882; CVE-2024-56700; CVE-2024-50181; CVE-2024-53172; CVE-2024-46822; CVE-2024-56576; CVE-2024-42154; CVE-2024-49902; CVE-2024-47723; CVE-2024-45008; CVE-2024-43907; CVE-2024-49949; CVE-2024-43871; CVE-2024-46685; CVE-2022-48829; CVE-2024-44987; CVE-2024-47737; CVE-2024-56648; CVE-2024-56785; CVE-2024-46738; CVE-2024-36974; CVE-2024-44995; CVE-2024-53066; CVE-2024-47747; CVE-2024-41089; CVE-2024-40984; CVE-2024-49957; CVE-2024-56629; CVE-2024-49993; CVE-2024-50185; CVE-2024-49962; CVE-2024-50262; CVE-2024-50287; CVE-2024-45021; CVE-2024-42236; CVE-2024-45025; CVE-2024-46713; CVE-2024-50301; CVE-2024-56600; CVE-2024-53165; CVE-2024-46725; CVE-2024-49958; CVE-2024-39482; CVE-2024-50024; CVE-2024-42161; CVE-2024-49955; CVE-2024-56645; CVE-2024-56661; CVE-2024-56558; CVE-2024-44944; CVE-2024-41068; CVE-2024-49936; CVE-2024-40942; CVE-2024-53060; CVE-2024-56698; CVE-2024-49875; CVE-2024-40901; CVE-2024-56650; CVE-2024-50265; CVE-2024-50279; CVE-2024-50033; CVE-2024-43894; CVE-2024-41072; CVE-2024-49900; CVE-2024-56569; CVE-2024-56720; CVE-2024-46782; CVE-2024-49997; CVE-2024-47696; CVE-2024-46800; CVE-2024-41022; CVE-2024-40958; CVE-2024-46724; CVE-2024-53061; CVE-2024-50006; CVE-2024-56586; CVE-2024-50218; CVE-2024-49971; CVE-2024-40902; CVE-2024-39468; CVE-2024-56610; CVE-2024-56728; CVE-2024-53156; CVE-2024-46781; CVE-2024-50095; CVE-2024-50049; CVE-2024-49884; CVE-2024-41007; CVE-2024-46747; CVE-2024-56723; CVE-2024-56606; CVE-2024-50278; CVE-2024-50602; CVE-2024-42223; CVE-2024-53173; CVE-2024-41097; CVE-2024-41077; CVE-2024-41091; CVE-2024-50188; CVE-2024-56746; CVE-2024-46707; CVE-2024-47684; CVE-2024-49877; CVE-2024-49973; CVE-2024-41046; CVE-2024-46702; CVE-2024-43914; CVE-2024-42232; CVE-2024-53197; CVE-2024-47698; CVE-2024-49903; CVE-2024-49948; CVE-2024-50199; CVE-2024-53226; CVE-2024-56595; CVE-2024-56602; CVE-2024-46674; CVE-2024-46737; CVE-2024-50184; CVE-2024-47718; CVE-2024-44935; CVE-2024-56531; CVE-2024-36978; CVE-2024-56568; CVE-2024-47705; CVE-2024-53161; CVE-2024-49985; CVE-2024-46676; CVE-2024-50302; CVE-2024-50290" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-664; CWE-402; CWE-672; CWE-670; CWE-241; CWE-99; CWE-390; CWE-476; CWE-400; CWE-754; CWE-404; CWE-22; CWE-770; CWE-833; CWE-825; CWE-665; CWE-401; CWE-367; CWE-124; CWE-20; CWE-362; CWE-190; CWE-843; CWE-457; CWE-413; CWE-1050; CWE-226; CWE-459; CWE-460; CWE-120; CWE-824; CWE-787; CWE-131; CWE-253; CWE-908; CWE-119; CWE-805; CWE-456; CWE-755; CWE-393; CWE-191; CWE-667; CWE-697; CWE-229; CWE-369; CWE-125; CWE-129" ;
    icsa:hasCVE cve-res:CVE-2021-47316,
        cve-res:CVE-2022-48666,
        cve-res:CVE-2022-48827,
        cve-res:CVE-2022-48828,
        cve-res:CVE-2022-48829,
        cve-res:CVE-2022-49034,
        cve-res:CVE-2023-52887,
        cve-res:CVE-2023-52917,
        cve-res:CVE-2024-36484,
        cve-res:CVE-2024-36894,
        cve-res:CVE-2024-36901,
        cve-res:CVE-2024-36938,
        cve-res:CVE-2024-36974,
        cve-res:CVE-2024-36978,
        cve-res:CVE-2024-37078,
        cve-res:CVE-2024-38586,
        cve-res:CVE-2024-38619,
        cve-res:CVE-2024-39468,
        cve-res:CVE-2024-39469,
        cve-res:CVE-2024-39482,
        cve-res:CVE-2024-39484,
        cve-res:CVE-2024-39487,
        cve-res:CVE-2024-39495,
        cve-res:CVE-2024-39499,
        cve-res:CVE-2024-39501,
        cve-res:CVE-2024-39502,
        cve-res:CVE-2024-39503,
        cve-res:CVE-2024-39505,
        cve-res:CVE-2024-39506,
        cve-res:CVE-2024-39509,
        cve-res:CVE-2024-40901,
        cve-res:CVE-2024-40902,
        cve-res:CVE-2024-40904,
        cve-res:CVE-2024-40905,
        cve-res:CVE-2024-40912,
        cve-res:CVE-2024-40916,
        cve-res:CVE-2024-40929,
        cve-res:CVE-2024-40931,
        cve-res:CVE-2024-40932,
        cve-res:CVE-2024-40934,
        cve-res:CVE-2024-40941,
        cve-res:CVE-2024-40942,
        cve-res:CVE-2024-40943,
        cve-res:CVE-2024-40945,
        cve-res:CVE-2024-40947,
        cve-res:CVE-2024-40958,
        cve-res:CVE-2024-40959,
        cve-res:CVE-2024-40960,
        cve-res:CVE-2024-40961,
        cve-res:CVE-2024-40963,
        cve-res:CVE-2024-40968,
        cve-res:CVE-2024-40971,
        cve-res:CVE-2024-40974,
        cve-res:CVE-2024-40976,
        cve-res:CVE-2024-40978,
        cve-res:CVE-2024-40980,
        cve-res:CVE-2024-40981,
        cve-res:CVE-2024-40983,
        cve-res:CVE-2024-40984,
        cve-res:CVE-2024-40987,
        cve-res:CVE-2024-40988,
        cve-res:CVE-2024-40990,
        cve-res:CVE-2024-40995,
        cve-res:CVE-2024-41000,
        cve-res:CVE-2024-41004,
        cve-res:CVE-2024-41005,
        cve-res:CVE-2024-41006,
        cve-res:CVE-2024-41007,
        cve-res:CVE-2024-41009,
        cve-res:CVE-2024-41012,
        cve-res:CVE-2024-41015,
        cve-res:CVE-2024-41017,
        cve-res:CVE-2024-41020,
        cve-res:CVE-2024-41022,
        cve-res:CVE-2024-41034,
        cve-res:CVE-2024-41035,
        cve-res:CVE-2024-41040,
        cve-res:CVE-2024-41041,
        cve-res:CVE-2024-41044,
        cve-res:CVE-2024-41046,
        cve-res:CVE-2024-41049,
        cve-res:CVE-2024-41055,
        cve-res:CVE-2024-41059,
        cve-res:CVE-2024-41063,
        cve-res:CVE-2024-41064,
        cve-res:CVE-2024-41065,
        cve-res:CVE-2024-41068,
        cve-res:CVE-2024-41070,
        cve-res:CVE-2024-41072,
        cve-res:CVE-2024-41077,
        cve-res:CVE-2024-41078,
        cve-res:CVE-2024-41081,
        cve-res:CVE-2024-41087,
        cve-res:CVE-2024-41089,
        cve-res:CVE-2024-41090,
        cve-res:CVE-2024-41091,
        cve-res:CVE-2024-41092,
        cve-res:CVE-2024-41095,
        cve-res:CVE-2024-41097,
        cve-res:CVE-2024-42076,
        cve-res:CVE-2024-42077,
        cve-res:CVE-2024-42082,
        cve-res:CVE-2024-42084,
        cve-res:CVE-2024-42086,
        cve-res:CVE-2024-42087,
        cve-res:CVE-2024-42092,
        cve-res:CVE-2024-42093,
        cve-res:CVE-2024-42094,
        cve-res:CVE-2024-42095,
        cve-res:CVE-2024-42101,
        cve-res:CVE-2024-42105,
        cve-res:CVE-2024-42143,
        cve-res:CVE-2024-42145,
        cve-res:CVE-2024-42148,
        cve-res:CVE-2024-42152,
        cve-res:CVE-2024-42153,
        cve-res:CVE-2024-42154,
        cve-res:CVE-2024-42161,
        cve-res:CVE-2024-42223,
        cve-res:CVE-2024-42224,
        cve-res:CVE-2024-42229,
        cve-res:CVE-2024-42232,
        cve-res:CVE-2024-42236,
        cve-res:CVE-2024-42244,
        cve-res:CVE-2024-42247,
        cve-res:CVE-2024-43098,
        cve-res:CVE-2024-43861,
        cve-res:CVE-2024-43867,
        cve-res:CVE-2024-43871,
        cve-res:CVE-2024-43879,
        cve-res:CVE-2024-43880,
        cve-res:CVE-2024-43882,
        cve-res:CVE-2024-43883,
        cve-res:CVE-2024-43889,
        cve-res:CVE-2024-43890,
        cve-res:CVE-2024-43893,
        cve-res:CVE-2024-43894,
        cve-res:CVE-2024-43907,
        cve-res:CVE-2024-43908,
        cve-res:CVE-2024-43914,
        cve-res:CVE-2024-44935,
        cve-res:CVE-2024-44944,
        cve-res:CVE-2024-44949,
        cve-res:CVE-2024-44952,
        cve-res:CVE-2024-44954,
        cve-res:CVE-2024-44960,
        cve-res:CVE-2024-44965,
        cve-res:CVE-2024-44969,
        cve-res:CVE-2024-44971,
        cve-res:CVE-2024-44987,
        cve-res:CVE-2024-44988,
        cve-res:CVE-2024-44989,
        cve-res:CVE-2024-44990,
        cve-res:CVE-2024-44995,
        cve-res:CVE-2024-44998,
        cve-res:CVE-2024-44999,
        cve-res:CVE-2024-45003,
        cve-res:CVE-2024-45006,
        cve-res:CVE-2024-45008,
        cve-res:CVE-2024-45021,
        cve-res:CVE-2024-45025,
        cve-res:CVE-2024-46673,
        cve-res:CVE-2024-46674,
        cve-res:CVE-2024-46675,
        cve-res:CVE-2024-46676,
        cve-res:CVE-2024-46677,
        cve-res:CVE-2024-46679,
        cve-res:CVE-2024-46685,
        cve-res:CVE-2024-46689,
        cve-res:CVE-2024-46702,
        cve-res:CVE-2024-46707,
        cve-res:CVE-2024-46713,
        cve-res:CVE-2024-46714,
        cve-res:CVE-2024-46719,
        cve-res:CVE-2024-46721,
        cve-res:CVE-2024-46722,
        cve-res:CVE-2024-46723,
        cve-res:CVE-2024-46724,
        cve-res:CVE-2024-46725,
        cve-res:CVE-2024-46731,
        cve-res:CVE-2024-46737,
        cve-res:CVE-2024-46738,
        cve-res:CVE-2024-46739,
        cve-res:CVE-2024-46740,
        cve-res:CVE-2024-46743,
        cve-res:CVE-2024-46744,
        cve-res:CVE-2024-46745,
        cve-res:CVE-2024-46747,
        cve-res:CVE-2024-46750,
        cve-res:CVE-2024-46755,
        cve-res:CVE-2024-46756,
        cve-res:CVE-2024-46757,
        cve-res:CVE-2024-46758,
        cve-res:CVE-2024-46759,
        cve-res:CVE-2024-46761,
        cve-res:CVE-2024-46763,
        cve-res:CVE-2024-46771,
        cve-res:CVE-2024-46777,
        cve-res:CVE-2024-46780,
        cve-res:CVE-2024-46781,
        cve-res:CVE-2024-46782,
        cve-res:CVE-2024-46783,
        cve-res:CVE-2024-46791,
        cve-res:CVE-2024-46798,
        cve-res:CVE-2024-46800,
        cve-res:CVE-2024-46804,
        cve-res:CVE-2024-46814,
        cve-res:CVE-2024-46815,
        cve-res:CVE-2024-46817,
        cve-res:CVE-2024-46818,
        cve-res:CVE-2024-46819,
        cve-res:CVE-2024-46822,
        cve-res:CVE-2024-46828,
        cve-res:CVE-2024-46829,
        cve-res:CVE-2024-46832,
        cve-res:CVE-2024-46840,
        cve-res:CVE-2024-46844,
        cve-res:CVE-2024-47143,
        cve-res:CVE-2024-47659,
        cve-res:CVE-2024-47660,
        cve-res:CVE-2024-47663,
        cve-res:CVE-2024-47667,
        cve-res:CVE-2024-47668,
        cve-res:CVE-2024-47669,
        cve-res:CVE-2024-47679,
        cve-res:CVE-2024-47684,
        cve-res:CVE-2024-47685,
        cve-res:CVE-2024-47692,
        cve-res:CVE-2024-47696,
        cve-res:CVE-2024-47697,
        cve-res:CVE-2024-47698,
        cve-res:CVE-2024-47699,
        cve-res:CVE-2024-47701,
        cve-res:CVE-2024-47705,
        cve-res:CVE-2024-47706,
        cve-res:CVE-2024-47709,
        cve-res:CVE-2024-47710,
        cve-res:CVE-2024-47712,
        cve-res:CVE-2024-47713,
        cve-res:CVE-2024-47718,
        cve-res:CVE-2024-47723,
        cve-res:CVE-2024-47735,
        cve-res:CVE-2024-47737,
        cve-res:CVE-2024-47739,
        cve-res:CVE-2024-47740,
        cve-res:CVE-2024-47742,
        cve-res:CVE-2024-47747,
        cve-res:CVE-2024-47748,
        cve-res:CVE-2024-47749,
        cve-res:CVE-2024-47756,
        cve-res:CVE-2024-47757,
        cve-res:CVE-2024-48881,
        cve-res:CVE-2024-49851,
        cve-res:CVE-2024-49858,
        cve-res:CVE-2024-49860,
        cve-res:CVE-2024-49863,
        cve-res:CVE-2024-49867,
        cve-res:CVE-2024-49868,
        cve-res:CVE-2024-49875,
        cve-res:CVE-2024-49877,
        cve-res:CVE-2024-49878,
        cve-res:CVE-2024-49879,
        cve-res:CVE-2024-49881,
        cve-res:CVE-2024-49882,
        cve-res:CVE-2024-49883,
        cve-res:CVE-2024-49884,
        cve-res:CVE-2024-49889,
        cve-res:CVE-2024-49890,
        cve-res:CVE-2024-49892,
        cve-res:CVE-2024-49894,
        cve-res:CVE-2024-49895,
        cve-res:CVE-2024-49896,
        cve-res:CVE-2024-49900,
        cve-res:CVE-2024-49901,
        cve-res:CVE-2024-49902,
        cve-res:CVE-2024-49903,
        cve-res:CVE-2024-49907,
        cve-res:CVE-2024-49913,
        cve-res:CVE-2024-49924,
        cve-res:CVE-2024-49930,
        cve-res:CVE-2024-49933,
        cve-res:CVE-2024-49936,
        cve-res:CVE-2024-49938,
        cve-res:CVE-2024-49944,
        cve-res:CVE-2024-49948,
        cve-res:CVE-2024-49949,
        cve-res:CVE-2024-49952,
        cve-res:CVE-2024-49955,
        cve-res:CVE-2024-49957,
        cve-res:CVE-2024-49958,
        cve-res:CVE-2024-49959,
        cve-res:CVE-2024-49962,
        cve-res:CVE-2024-49963,
        cve-res:CVE-2024-49965,
        cve-res:CVE-2024-49966,
        cve-res:CVE-2024-49967,
        cve-res:CVE-2024-49969,
        cve-res:CVE-2024-49971,
        cve-res:CVE-2024-49973,
        cve-res:CVE-2024-49975,
        cve-res:CVE-2024-49977,
        cve-res:CVE-2024-49981,
        cve-res:CVE-2024-49982,
        cve-res:CVE-2024-49983,
        cve-res:CVE-2024-49985,
        cve-res:CVE-2024-49993,
        cve-res:CVE-2024-49995,
        cve-res:CVE-2024-49997,
        cve-res:CVE-2024-50001,
        cve-res:CVE-2024-50006,
        cve-res:CVE-2024-50007,
        cve-res:CVE-2024-50008,
        cve-res:CVE-2024-50013,
        cve-res:CVE-2024-50015,
        cve-res:CVE-2024-50024,
        cve-res:CVE-2024-50033,
        cve-res:CVE-2024-50035,
        cve-res:CVE-2024-50039,
        cve-res:CVE-2024-50040,
        cve-res:CVE-2024-50044,
        cve-res:CVE-2024-50045,
        cve-res:CVE-2024-50046,
        cve-res:CVE-2024-50049,
        cve-res:CVE-2024-50051,
        cve-res:CVE-2024-50059,
        cve-res:CVE-2024-50074,
        cve-res:CVE-2024-50082,
        cve-res:CVE-2024-50083,
        cve-res:CVE-2024-50089,
        cve-res:CVE-2024-50095,
        cve-res:CVE-2024-50096,
        cve-res:CVE-2024-50099,
        cve-res:CVE-2024-50179,
        cve-res:CVE-2024-50180,
        cve-res:CVE-2024-50181,
        cve-res:CVE-2024-50184,
        cve-res:CVE-2024-50185,
        cve-res:CVE-2024-50188,
        cve-res:CVE-2024-50193,
        cve-res:CVE-2024-50194,
        cve-res:CVE-2024-50195,
        cve-res:CVE-2024-50198,
        cve-res:CVE-2024-50199,
        cve-res:CVE-2024-50201,
        cve-res:CVE-2024-50202,
        cve-res:CVE-2024-50218,
        cve-res:CVE-2024-50234,
        cve-res:CVE-2024-50236,
        cve-res:CVE-2024-50237,
        cve-res:CVE-2024-50251,
        cve-res:CVE-2024-50262,
        cve-res:CVE-2024-50264,
        cve-res:CVE-2024-50265,
        cve-res:CVE-2024-50267,
        cve-res:CVE-2024-50268,
        cve-res:CVE-2024-50269,
        cve-res:CVE-2024-50273,
        cve-res:CVE-2024-50278,
        cve-res:CVE-2024-50279,
        cve-res:CVE-2024-50282,
        cve-res:CVE-2024-50287,
        cve-res:CVE-2024-50290,
        cve-res:CVE-2024-50292,
        cve-res:CVE-2024-50295,
        cve-res:CVE-2024-50296,
        cve-res:CVE-2024-50299,
        cve-res:CVE-2024-50301,
        cve-res:CVE-2024-50302,
        cve-res:CVE-2024-50304,
        cve-res:CVE-2024-50602,
        cve-res:CVE-2024-52332,
        cve-res:CVE-2024-53052,
        cve-res:CVE-2024-53057,
        cve-res:CVE-2024-53059,
        cve-res:CVE-2024-53060,
        cve-res:CVE-2024-53061,
        cve-res:CVE-2024-53063,
        cve-res:CVE-2024-53066,
        cve-res:CVE-2024-53097,
        cve-res:CVE-2024-53101,
        cve-res:CVE-2024-53103,
        cve-res:CVE-2024-53104,
        cve-res:CVE-2024-53145,
        cve-res:CVE-2024-53146,
        cve-res:CVE-2024-53148,
        cve-res:CVE-2024-53150,
        cve-res:CVE-2024-53155,
        cve-res:CVE-2024-53156,
        cve-res:CVE-2024-53157,
        cve-res:CVE-2024-53158,
        cve-res:CVE-2024-53161,
        cve-res:CVE-2024-53165,
        cve-res:CVE-2024-53171,
        cve-res:CVE-2024-53172,
        cve-res:CVE-2024-53173,
        cve-res:CVE-2024-53174,
        cve-res:CVE-2024-53181,
        cve-res:CVE-2024-53183,
        cve-res:CVE-2024-53184,
        cve-res:CVE-2024-53194,
        cve-res:CVE-2024-53197,
        cve-res:CVE-2024-53198,
        cve-res:CVE-2024-53214,
        cve-res:CVE-2024-53217,
        cve-res:CVE-2024-53226,
        cve-res:CVE-2024-53227,
        cve-res:CVE-2024-53237,
        cve-res:CVE-2024-53239,
        cve-res:CVE-2024-53240,
        cve-res:CVE-2024-53241,
        cve-res:CVE-2024-53680,
        cve-res:CVE-2024-56531,
        cve-res:CVE-2024-56532,
        cve-res:CVE-2024-56533,
        cve-res:CVE-2024-56539,
        cve-res:CVE-2024-56548,
        cve-res:CVE-2024-56558,
        cve-res:CVE-2024-56562,
        cve-res:CVE-2024-56567,
        cve-res:CVE-2024-56568,
        cve-res:CVE-2024-56569,
        cve-res:CVE-2024-56570,
        cve-res:CVE-2024-56571,
        cve-res:CVE-2024-56572,
        cve-res:CVE-2024-56574,
        cve-res:CVE-2024-56576,
        cve-res:CVE-2024-56581,
        cve-res:CVE-2024-56586,
        cve-res:CVE-2024-56587,
        cve-res:CVE-2024-56589,
        cve-res:CVE-2024-56593,
        cve-res:CVE-2024-56594,
        cve-res:CVE-2024-56595,
        cve-res:CVE-2024-56596,
        cve-res:CVE-2024-56597,
        cve-res:CVE-2024-56598,
        cve-res:CVE-2024-56600,
        cve-res:CVE-2024-56601,
        cve-res:CVE-2024-56602,
        cve-res:CVE-2024-56603,
        cve-res:CVE-2024-56605,
        cve-res:CVE-2024-56606,
        cve-res:CVE-2024-56610,
        cve-res:CVE-2024-56615,
        cve-res:CVE-2024-56619,
        cve-res:CVE-2024-56623,
        cve-res:CVE-2024-56629,
        cve-res:CVE-2024-56630,
        cve-res:CVE-2024-56633,
        cve-res:CVE-2024-56634,
        cve-res:CVE-2024-56636,
        cve-res:CVE-2024-56637,
        cve-res:CVE-2024-56642,
        cve-res:CVE-2024-56643,
        cve-res:CVE-2024-56644,
        cve-res:CVE-2024-56645,
        cve-res:CVE-2024-56648,
        cve-res:CVE-2024-56650,
        cve-res:CVE-2024-56659,
        cve-res:CVE-2024-56661,
        cve-res:CVE-2024-56662,
        cve-res:CVE-2024-56670,
        cve-res:CVE-2024-56681,
        cve-res:CVE-2024-56688,
        cve-res:CVE-2024-56690,
        cve-res:CVE-2024-56691,
        cve-res:CVE-2024-56698,
        cve-res:CVE-2024-56700,
        cve-res:CVE-2024-56701,
        cve-res:CVE-2024-56704,
        cve-res:CVE-2024-56705,
        cve-res:CVE-2024-56720,
        cve-res:CVE-2024-56723,
        cve-res:CVE-2024-56724,
        cve-res:CVE-2024-56728,
        cve-res:CVE-2024-56739,
        cve-res:CVE-2024-56741,
        cve-res:CVE-2024-56746,
        cve-res:CVE-2024-56747,
        cve-res:CVE-2024-56748,
        cve-res:CVE-2024-56754,
        cve-res:CVE-2024-56756,
        cve-res:CVE-2024-56770,
        cve-res:CVE-2024-56779,
        cve-res:CVE-2024-56780,
        cve-res:CVE-2024-56781,
        cve-res:CVE-2024-56785,
        cve-res:CVE-2024-57874,
        cve-res:CVE-2024-9681 ;
    icsa:hasCWE cwe-res:CWE-1050,
        cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-124,
        cwe-res:CWE-125,
        cwe-res:CWE-129,
        cwe-res:CWE-131,
        cwe-res:CWE-190,
        cwe-res:CWE-191,
        cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-226,
        cwe-res:CWE-229,
        cwe-res:CWE-241,
        cwe-res:CWE-253,
        cwe-res:CWE-362,
        cwe-res:CWE-367,
        cwe-res:CWE-369,
        cwe-res:CWE-390,
        cwe-res:CWE-393,
        cwe-res:CWE-400,
        cwe-res:CWE-401,
        cwe-res:CWE-402,
        cwe-res:CWE-404,
        cwe-res:CWE-413,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-456,
        cwe-res:CWE-457,
        cwe-res:CWE-459,
        cwe-res:CWE-460,
        cwe-res:CWE-476,
        cwe-res:CWE-664,
        cwe-res:CWE-665,
        cwe-res:CWE-667,
        cwe-res:CWE-670,
        cwe-res:CWE-672,
        cwe-res:CWE-697,
        cwe-res:CWE-754,
        cwe-res:CWE-755,
        cwe-res:CWE-770,
        cwe-res:CWE-787,
        cwe-res:CWE-805,
        cwe-res:CWE-824,
        cwe-res:CWE-825,
        cwe-res:CWE-833,
        cwe-res:CWE-843,
        cwe-res:CWE-908,
        cwe-res:CWE-99 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Third-Party Components in SINEC OS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens RUGGEDCOM RST2428P (6GK6242-6PA00): Versions prior to 3.2; Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family: Versions prior to 3.2; Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family: Versions prior to 3.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-08" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM CROSSBOW Station Access Controller" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-29087; CVE-2025-29088; CVE-2025-3277" ;
    icsa:cweNumber "CWE-122; CWE-190" ;
    icsa:hasCVE cve-res:CVE-2025-29087,
        cve-res:CVE-2025-29088,
        cve-res:CVE-2025-3277 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM CROSSBOW Station Access Controller (SAC)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: RUGGEDCOM CROSSBOW Station Access Controller (SAC): Versions prior to V5.7." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-09" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-13090; CVE-2024-13089" ;
    icsa:cweNumber "CWE-250; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2024-13089,
        cve-res:CVE-2024-13090 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: RUGGEDCOM APE1808: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-10" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5" ;
    icsa:CVSSScore "2.4"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40570" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-40570 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIPROTEC 5 6MD84 (CP300): Versions prior to V10.0 SIPROTEC 5 7SD82 (CP150): Versions prior to V10.0 SIPROTEC 5 7SD86 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SD87 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SJ81 (CP150): Versions prior to V10.0 SIPROTEC 5 7SJ82 (CP150): Versions prior to V10.0 SIPROTEC 5 7SJ85 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SJ86 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SK82 (CP150): Versions prior to V10.0 SIPROTEC 5 7SK85 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SL82 (CP150): Versions prior to V10.0 SIPROTEC 5 6MD85 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SL86 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SL87 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SS85 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7ST85 (CP300): Versions prior to V10.0 SIPROTEC 5 7ST86 (CP300): Versions prior to V10.0 SIPROTEC 5 7SX82 (CP150): Versions prior to V10.0 SIPROTEC 5 7SX85 (CP300): Versions prior to V10.0 SIPROTEC 5 7SY82 (CP150): Versions prior to V10.0 SIPROTEC 5 7UM85 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7UT82 (CP150): Versions prior to V10.0 SIPROTEC 5 6MD86 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7UT85 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7UT86 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7UT87 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7VE85 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7VK87 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7VU85 (CP300): Versions prior to V10.0 SIPROTEC 5 Compact 7SX800 (CP050): Versions prior to V10.0 SIPROTEC 5 6MD89 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 6MU85 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7KE85 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SA82 (CP150): Versions prior to V10.0 SIPROTEC 5 7SA86 (CP300): Versions V7.80 up to but not including V10.0 SIPROTEC 5 7SA87 (CP300): Versions V7.80 up to but not including V10.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-11" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-PLCSIM" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40759" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-40759 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-PLCSIM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC S7-PLCSIM V17: All versions SIMOCODE ES V17: All versions SIMOCODE ES V18: All versions SIMOCODE ES V19: All versions SIMOCODE ES V20: All versions SIMOTION SCOUT TIA V5.4: All versions SIMOTION SCOUT TIA V5.5: All versions SIMOTION SCOUT TIA V5.6: All versions prior to V5.6 SP1 HF7 SIMOTION SCOUT TIA V5.7: All versions SINAMICS Startdrive V17: All versions SINAMICS Startdrive V18: All versions SIMATIC STEP 7 V17: All versions SINAMICS Startdrive V19: All versions SINAMICS Startdrive V20: All versions SIRIUS Safety ES V17 (TIA Portal): All versions SIRIUS Safety ES V18 (TIA Portal): All versions SIRIUS Safety ES V19 (TIA Portal): All versions SIRIUS Safety ES V20 (TIA Portal): All versions SIRIUS Soft Starter ES V17 (TIA Portal): All versions SIRIUS Soft Starter ES V18 (TIA Portal): All versions SIRIUS Soft Starter ES V19 (TIA Portal): All versions SIRIUS Soft Starter ES V20 (TIA Portal): All versions SIMATIC STEP 7 V18: All versions TIA Portal Cloud V17: All versions TIA Portal Cloud V18: All versions TIA Portal Cloud V19: Versions prior to V5.2.1.1 TIA Portal Cloud V20: All versions SIMATIC STEP 7 V19: All versions prior to V19 Update 4 SIMATIC STEP 7 V20: All versions SIMATIC WinCC V17: All versions SIMATIC WinCC V18: All versions SIMATIC WinCC V19: All versions prior to V19 Update 4 SIMATIC WinCC V20: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-12" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 4 and SIPROTEC 4 Compact" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-52504" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2024-52504 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIPROTEC 4 and SIPROTEC 4 Compact" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIPROTEC 4 6MD61: All versions SIPROTEC 4 7SJ62: All versions SIPROTEC 4 7SJ63: All versions SIPROTEC 4 7SJ64: All versions SIPROTEC 4 7SJ66: All versions SIPROTEC 4 7SS52: All versions SIPROTEC 4 7ST6: All versions SIPROTEC 4 7UM61: All versions SIPROTEC 4 7UM62: All versions SIPROTEC 4 7UT63: All versions SIPROTEC 4 7UT612: All versions SIPROTEC 4 6MD63: All versions SIPROTEC 4 7UT613: All versions SIPROTEC 4 7VE6: All versions SIPROTEC 4 7VK61: All versions SIPROTEC 4 7VU683: All versions SIPROTEC 4 Compact 7RW80: All versions SIPROTEC 4 Compact 7SD80: All versions SIPROTEC 4 Compact 7SJ80: All versions SIPROTEC 4 Compact 7SJ81: All versions SIPROTEC 4 Compact 7SK80: All versions SIPROTEC 4 Compact 7SK81: All versions SIPROTEC 4 6MD66: All versions SIPROTEC 4 6MD665: All versions SIPROTEC 4 7SA6: Versions prior to V4.78 SIPROTEC 4 7SA522: All versions SIPROTEC 4 7SD5: Versions prior to V4.78 SIPROTEC 4 7SD610: Versions prior to V4.78 SIPROTEC 4 7SJ61: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-13" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC RTLS Locating Manager" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40746" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-40746 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC RTLS Locating Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC RTLS Locating Manager: Versions prior to V3.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-14" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX II" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-33023" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2025-33023 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX II Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens RUGGEDCOM ROX MX5000: All versions Siemens RUGGEDCOM ROX RX1536: All versions Siemens RUGGEDCOM ROX RX5000: All versions Siemens RUGGEDCOM ROX MX5000RE: All versions Siemens RUGGEDCOM ROX RX1400: All versions Siemens RUGGEDCOM ROX RX1500: All versions Siemens RUGGEDCOM ROX RX1501: All versions Siemens RUGGEDCOM ROX RX1510: All versions Siemens RUGGEDCOM ROX RX1511: All versions Siemens RUGGEDCOM ROX RX1512: All versions Siemens RUGGEDCOM ROX RX1524: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-15" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC OS" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-52845; CVE-2023-52810; CVE-2023-52435; CVE-2023-52805; CVE-2023-52606; CVE-2023-52615; CVE-2023-52670; CVE-2023-52873; CVE-2024-26790; CVE-2023-51781; CVE-2024-26696; CVE-2023-52654; CVE-2024-26840; CVE-2023-52602; CVE-2024-26773; CVE-2023-3567; CVE-2024-26763; CVE-2024-27414; CVE-2024-26801; CVE-2024-26736; CVE-2023-52340; CVE-2023-6931; CVE-2023-52475; CVE-2023-52867; CVE-2024-26625; CVE-2024-27405; CVE-2024-26635; CVE-2023-52832; CVE-2023-52617; CVE-2024-26679; CVE-2023-52871; CVE-2023-52433; CVE-2023-52599; CVE-2023-52603; CVE-2023-52879; CVE-2023-6606; CVE-2023-52855; CVE-2024-26685; CVE-2023-52583; CVE-2023-52865; CVE-2023-52818; CVE-2024-1086; CVE-2024-26751; CVE-2024-26825; CVE-2024-26835; CVE-2024-26688; CVE-2024-26839; CVE-2023-52510; CVE-2024-26684; CVE-2024-26606; CVE-2023-52477; CVE-2023-52597; CVE-2023-52835; CVE-2024-26845; CVE-2024-26772; CVE-2024-0584; CVE-2024-0646; CVE-2024-26615; CVE-2024-26673; CVE-2024-26671; CVE-2023-5178; CVE-2024-26664; CVE-2023-52875; CVE-2023-52601; CVE-2023-52622; CVE-2024-26752; CVE-2024-26805; CVE-2023-52853; CVE-2024-26793; CVE-2023-52806; CVE-2024-39476; CVE-2023-52774; CVE-2024-26636; CVE-2023-45863; CVE-2023-52587; CVE-2023-35827; CVE-2023-52607; CVE-2023-52838; CVE-2024-27410; CVE-2024-26804; CVE-2024-0841; CVE-2024-26766; CVE-2023-52655; CVE-2023-52581; CVE-2023-52784; CVE-2022-48935; CVE-2024-26663; CVE-2024-26788; CVE-2023-52791; CVE-2023-6040; CVE-2024-27416; CVE-2024-26593; CVE-2023-6121; CVE-2023-6932; CVE-2023-52504 CVE-2023-52507; CVE-2024-26697; CVE-2023-52840; CVE-2024-26720; CVE-2023-52509; CVE-2023-52864; CVE-2024-26777; CVE-2023-52796; CVE-2023-52809; CVE-2024-35833; CVE-2023-52598; CVE-2023-52753; CVE-2024-26764; CVE-2024-26675; CVE-2023-52600; CVE-2023-52817; CVE-2021-4487; CVE-2023-5678; CVE-2024-26735; CVE-2024-26748; CVE-2023-52847; CVE-2023-52819; CVE-2024-26581; CVE-2023-52637; CVE-2023-52858; CVE-2024-26749; CVE-2024-27413; CVE-2024-26704; CVE-2024-26722; CVE-2023-52789; CVE-2023-52799; CVE-2023-52836; CVE-2023-51780; CVE-2023-52478; CVE-2023-52843; CVE-2023-52604; CVE-2023-52868; CVE-2023-52619; CVE-2024-27417; CVE-2024-27412; CVE-2023-52623; CVE-2024-26600; CVE-2024-26702; CVE-2024-0193; CVE-2023-39198; CVE-2023-52502; CVE-2023-52813; CVE-2023-52595; CVE-2023-51779; CVE-2023-5717; CVE-2023-46343; CVE-2023-52764; CVE-2024-26778; CVE-2023-52876; CVE-2024-26602; CVE-2023-52919; CVE-2024-26645; CVE-2023-51782; CVE-2023-52804; CVE-2023-52486; CVE-2024-26754; CVE-2024-35835; CVE-2024-26598; CVE-2024-26910; CVE-2023-52594; CVE-2024-26791; CVE-2023-52881; CVE-2024-26779" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-402; CWE-1314; CWE-99; CWE-311; CWE-476; CWE-400; CWE-125; CWE-833; CWE-20; CWE-362; CWE-121; CWE-606; CWE-413; CWE-459; CWE-787; CWE-131; CWE-119; CWE-456; CWE-667; CWE-369; CWE-395" ;
    icsa:hasCVE cve-res:CVE-2021-4487,
        cve-res:CVE-2022-48935,
        cve-res:CVE-2023-3567,
        cve-res:CVE-2023-35827,
        cve-res:CVE-2023-39198,
        cve-res:CVE-2023-45863,
        cve-res:CVE-2023-46343,
        cve-res:CVE-2023-51779,
        cve-res:CVE-2023-5178,
        cve-res:CVE-2023-51780,
        cve-res:CVE-2023-51781,
        cve-res:CVE-2023-51782,
        cve-res:CVE-2023-52340,
        cve-res:CVE-2023-52433,
        cve-res:CVE-2023-52435,
        cve-res:CVE-2023-52475,
        cve-res:CVE-2023-52477,
        cve-res:CVE-2023-52478,
        cve-res:CVE-2023-52486,
        cve-res:CVE-2023-52502,
        cve-res:CVE-2023-52504%20CVE-2023-52507,
        cve-res:CVE-2023-52509,
        cve-res:CVE-2023-52510,
        cve-res:CVE-2023-52581,
        cve-res:CVE-2023-52583,
        cve-res:CVE-2023-52587,
        cve-res:CVE-2023-52594,
        cve-res:CVE-2023-52595,
        cve-res:CVE-2023-52597,
        cve-res:CVE-2023-52598,
        cve-res:CVE-2023-52599,
        cve-res:CVE-2023-52600,
        cve-res:CVE-2023-52601,
        cve-res:CVE-2023-52602,
        cve-res:CVE-2023-52603,
        cve-res:CVE-2023-52604,
        cve-res:CVE-2023-52606,
        cve-res:CVE-2023-52607,
        cve-res:CVE-2023-52615,
        cve-res:CVE-2023-52617,
        cve-res:CVE-2023-52619,
        cve-res:CVE-2023-52622,
        cve-res:CVE-2023-52623,
        cve-res:CVE-2023-52637,
        cve-res:CVE-2023-52654,
        cve-res:CVE-2023-52655,
        cve-res:CVE-2023-52670,
        cve-res:CVE-2023-52753,
        cve-res:CVE-2023-52764,
        cve-res:CVE-2023-52774,
        cve-res:CVE-2023-52784,
        cve-res:CVE-2023-52789,
        cve-res:CVE-2023-52791,
        cve-res:CVE-2023-52796,
        cve-res:CVE-2023-52799,
        cve-res:CVE-2023-52804,
        cve-res:CVE-2023-52805,
        cve-res:CVE-2023-52806,
        cve-res:CVE-2023-52809,
        cve-res:CVE-2023-52810,
        cve-res:CVE-2023-52813,
        cve-res:CVE-2023-52817,
        cve-res:CVE-2023-52818,
        cve-res:CVE-2023-52819,
        cve-res:CVE-2023-52832,
        cve-res:CVE-2023-52835,
        cve-res:CVE-2023-52836,
        cve-res:CVE-2023-52838,
        cve-res:CVE-2023-52840,
        cve-res:CVE-2023-52843,
        cve-res:CVE-2023-52845,
        cve-res:CVE-2023-52847,
        cve-res:CVE-2023-52853,
        cve-res:CVE-2023-52855,
        cve-res:CVE-2023-52858,
        cve-res:CVE-2023-52864,
        cve-res:CVE-2023-52865,
        cve-res:CVE-2023-52867,
        cve-res:CVE-2023-52868,
        cve-res:CVE-2023-52871,
        cve-res:CVE-2023-52873,
        cve-res:CVE-2023-52875,
        cve-res:CVE-2023-52876,
        cve-res:CVE-2023-52879,
        cve-res:CVE-2023-52881,
        cve-res:CVE-2023-52919,
        cve-res:CVE-2023-5678,
        cve-res:CVE-2023-5717,
        cve-res:CVE-2023-6040,
        cve-res:CVE-2023-6121,
        cve-res:CVE-2023-6606,
        cve-res:CVE-2023-6931,
        cve-res:CVE-2023-6932,
        cve-res:CVE-2024-0193,
        cve-res:CVE-2024-0584,
        cve-res:CVE-2024-0646,
        cve-res:CVE-2024-0841,
        cve-res:CVE-2024-1086,
        cve-res:CVE-2024-26581,
        cve-res:CVE-2024-26593,
        cve-res:CVE-2024-26598,
        cve-res:CVE-2024-26600,
        cve-res:CVE-2024-26602,
        cve-res:CVE-2024-26606,
        cve-res:CVE-2024-26615,
        cve-res:CVE-2024-26625,
        cve-res:CVE-2024-26635,
        cve-res:CVE-2024-26636,
        cve-res:CVE-2024-26645,
        cve-res:CVE-2024-26663,
        cve-res:CVE-2024-26664,
        cve-res:CVE-2024-26671,
        cve-res:CVE-2024-26673,
        cve-res:CVE-2024-26675,
        cve-res:CVE-2024-26679,
        cve-res:CVE-2024-26684,
        cve-res:CVE-2024-26685,
        cve-res:CVE-2024-26688,
        cve-res:CVE-2024-26696,
        cve-res:CVE-2024-26697,
        cve-res:CVE-2024-26702,
        cve-res:CVE-2024-26704,
        cve-res:CVE-2024-26720,
        cve-res:CVE-2024-26722,
        cve-res:CVE-2024-26735,
        cve-res:CVE-2024-26736,
        cve-res:CVE-2024-26748,
        cve-res:CVE-2024-26749,
        cve-res:CVE-2024-26751,
        cve-res:CVE-2024-26752,
        cve-res:CVE-2024-26754,
        cve-res:CVE-2024-26763,
        cve-res:CVE-2024-26764,
        cve-res:CVE-2024-26766,
        cve-res:CVE-2024-26772,
        cve-res:CVE-2024-26773,
        cve-res:CVE-2024-26777,
        cve-res:CVE-2024-26778,
        cve-res:CVE-2024-26779,
        cve-res:CVE-2024-26788,
        cve-res:CVE-2024-26790,
        cve-res:CVE-2024-26791,
        cve-res:CVE-2024-26793,
        cve-res:CVE-2024-26801,
        cve-res:CVE-2024-26804,
        cve-res:CVE-2024-26805,
        cve-res:CVE-2024-26825,
        cve-res:CVE-2024-26835,
        cve-res:CVE-2024-26839,
        cve-res:CVE-2024-26840,
        cve-res:CVE-2024-26845,
        cve-res:CVE-2024-26910,
        cve-res:CVE-2024-27405,
        cve-res:CVE-2024-27410,
        cve-res:CVE-2024-27412,
        cve-res:CVE-2024-27413,
        cve-res:CVE-2024-27414,
        cve-res:CVE-2024-27416,
        cve-res:CVE-2024-27417,
        cve-res:CVE-2024-35833,
        cve-res:CVE-2024-35835,
        cve-res:CVE-2024-39476 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-131,
        cwe-res:CWE-1314,
        cwe-res:CWE-20,
        cwe-res:CWE-311,
        cwe-res:CWE-362,
        cwe-res:CWE-369,
        cwe-res:CWE-395,
        cwe-res:CWE-400,
        cwe-res:CWE-402,
        cwe-res:CWE-413,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-456,
        cwe-res:CWE-459,
        cwe-res:CWE-476,
        cwe-res:CWE-606,
        cwe-res:CWE-667,
        cwe-res:CWE-787,
        cwe-res:CWE-833,
        cwe-res:CWE-99 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM, SCALANCE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens RUGGEDCOM RST2428P (6GK6242-6PA00): All versions prior to 3.1; Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family: All versions prior to 3.1; Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family: All versions prior to 3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-16" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM Q100/Q200" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-40753; CVE-2025-40752" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2025-40752,
        cve-res:CVE-2025-40753 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM Q100, SICAM Q200" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens POWER METER SICAM Q100 (7KG9501-0AA01-0AA1): Versions 2.60 up to but not including 2.62 Siemens POWER METER SICAM Q100 (7KG9501-0AA01-2AA1): Versions 2.60 up to but not including 2.62 Siemens POWER METER SICAM Q100 (7KG9501-0AA31-0AA1): Versions 2.60 up to but not including 2.62 Siemens POWER METER SICAM Q100 (7KG9501-0AA31-2AA1): Versions 2.60 up to but not including 2.62 Siemens POWER METER SICAM Q200 family: Versions 2.70 up to but not including 2.80." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-17" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC Traffic Analyzer" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-24989; CVE-2025-40769; CVE-2024-24990; CVE-2025-40767; CVE-2025-40766; CVE-2025-40770; CVE-2025-40768" ;
    icsa:cweNumber "CWE-200; CWE-416; CWE-250; CWE-1164; CWE-300; CWE-476; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-24989,
        cve-res:CVE-2024-24990,
        cve-res:CVE-2025-40766,
        cve-res:CVE-2025-40767,
        cve-res:CVE-2025-40768,
        cve-res:CVE-2025-40769,
        cve-res:CVE-2025-40770 ;
    icsa:hasCWE cwe-res:CWE-1164,
        cwe-res:CWE-200,
        cwe-res:CWE-250,
        cwe-res:CWE-300,
        cwe-res:CWE-400,
        cwe-res:CWE-416,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC Traffic Analyzer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Siemens SINEC Traffic Analyzer (6GK8822-1BG01-0BA0): All versions prior to 3.0 (CVE-2024-24989; CVE-2025-40769) Siemens SINEC Traffic Analyzer (6GK8822-1BG01-0BA0): All versions (CVE-2025-40770).; CVE-2024-24990; CVE-2025-40767; CVE-2025-40766; CVE-2025-40768" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-18 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-18" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40584" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2025-40584 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMOTION SCOUT, SIMOTION SCOUT TIA, SINAMICS STARTER" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMOTION SCOUT TIA V5.4: All versions SINAMICS STARTER V5.6: All versions SINAMICS STARTER V5.7: All versions SIMOTION SCOUT TIA V5.5: All versions SIMOTION SCOUT TIA V5.6: Versions prior to V5.6 SP1 HF7 SIMOTION SCOUT TIA V5.7: Versions prior to V5.7 SP1 HF1 SIMOTION SCOUT V5.4: All versions SIMOTION SCOUT V5.5: All versions SIMOTION SCOUT V5.6: Versions prior to V5.6 SP1 HF7 SIMOTION SCOUT V5.7: Versions prior to V5.7 SP1 HF1 SINAMICS STARTER V5.5: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-18" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-19 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-19" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINUMERIK" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40743" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-40743 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINUMERIK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SINUMERIK 828D PPU.4: Versions prior to V4.95 SP5 SINUMERIK 828D PPU.5: Versions prior to V5.25 SP1 SINUMERIK 840D sl: Versions prior to V4.95 SP5 SINUMERIK MC: Versions prior to V1.25 SP1 SINUMERIK MC V1.15: Versions prior to V1.15 SP5 SINUMERIK ONE: Versions prior to V6.25 SP1 SINUMERIK ONE V6.15: Versions prior to V6.15 SP5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-19" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-20 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-20" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX II" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40761" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-40761 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROX II family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: RUGGEDCOM ROX MX5000: All versions RUGGEDCOM ROX RX1536: All versions RUGGEDCOM ROX RX5000: All versions RUGGEDCOM ROX MX5000RE: All versions RUGGEDCOM ROX RX1400: All versions RUGGEDCOM ROX RX1500: All versions RUGGEDCOM ROX RX1501: All versions RUGGEDCOM ROX RX1510: All versions RUGGEDCOM ROX RX1511: All versions RUGGEDCOM ROX RX1512: All versions RUGGEDCOM ROX RX1524: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-20" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-21 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-21" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens BFCClient" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-0464; CVE-2022-0778; CVE-2021-3711; CVE-2023-0286; CVE-2021-3712" ;
    icsa:cweNumber "CWE-120; CWE-835; CWE-843; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-3711,
        cve-res:CVE-2021-3712,
        cve-res:CVE-2022-0778,
        cve-res:CVE-2023-0286,
        cve-res:CVE-2023-0464 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-295,
        cwe-res:CWE-835,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BFCClient" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: BFCClient: Versions prior to 2.17." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-21" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-22 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-22" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Web Installer" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-30033" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2025-30033 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Web Installer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Automation License Manager V6.0: All versions OpenPCS 7 V9.1: All versions SIMATIC WinCC Runtime Professional: All versions SIMATIC WinCC Runtime Professional V20: All versions SIMATIC WinCC TeleControl: All versions SIMATIC WinCC Unified Line Coordination: All versions SIMATIC WinCC Unified PC Runtime V18: All versions SIMATIC WinCC Unified PC Runtime V19: All versions SIMATIC WinCC Unified PC Runtime V20: All versions SIMATIC WinCC Unified Sequence: All versions SIMATIC WinCC V7.5: All versions SIMATIC WinCC V8.0: All versions OpenPCS 7 V10.0: All versions SIMATIC WinCC V8.1: Versions prior to V8.1 Update 3 SIMATIC WinCC Visualization Architect (SiVArc) V17: All versions SIMATIC WinCC Visualization Architect (SiVArc) V18: All versions SIMATIC WinCC Visualization Architect (SiVArc) V19: All versions SIMATIC WinCC Visualization Architect (SiVArc) V20: All versions SIMATIC D7-SYS: All versions SIMIATIC Rapid Tester: All versions SIMIATIC Simulation Platform: All versions SINAMICS Startdrive V17: All versions SINAMICS Startdrive V18: All versions Siemens Network Planner (SINETPLAN): All versions SINAMICS Startdrive V19: All versions SINAMICS Startdrive V20: All versions SINEC NMS: Versions prior to 4.0 SINEMA Remote Connect Client: All versions SITRANS: All versions Standard PID CTRL Tool: All versions TeleControl Server Basic V3.1: Versions prior to 3.1.2.2 TIA Administrator: Versions prior to 3.0.6 TIA Portal Cloud Connector: All versions TIA Portal Test Suite V17: All versions SIMATIC Automation Tool: All versions TIA Portal Test Suite V18: All versions TIA Portal Test Suite V19: All versions TIA Portal Test Suite V20: All versions TIA Project-Server: All versions TIA Project-Server V17: All versions WinCC Panel Image Setup: All versions SIMATIC Automation Tool SDK Windows: All versions SIMATIC BATCH V9.1: All versions SIMATIC BATCH V10.0: All versions SIMATIC Control Function Library (CFL) V1.0.0: All versions SIMATIC Control Function Library (CFL) V2.0: All versions SIMATIC Control Function Library (CFL) V3.0: All versions Automation License Manager V6.2: Versions prior to V6.2 Upd3 SIMATIC Control Function Library (CFL) V4.0: All versions SIMATIC eaSie Core Package (6DL5424-0AX00-0AV8): All versions SIMATIC eaSie Document Skills: All versions SIMATIC eaSie PCS 7 Skill Package (6DL5424-0BX00-0AV8): All versions SIMATIC eaSie Workflow Skills: All versions SIMATIC Energy Suite V17: All versions SIMATIC Energy Suite V18: All versions SIMATIC Energy Suite V19: All versions SIMATIC Logon V1.6: All versions SIMATIC Logon V2.0: All versions CEMAT V10.0: All versions SIMATIC Management Agent: All versions SIMATIC Management Console: All versions SIMATIC MTP CREATOR V3.x: All versions SIMATIC MTP CREATOR V4.x: All versions SIMATIC MTP CREATOR V2.x: All versions SIMATIC MTP CREATOR V5.x: All versions SIMATIC MTP Integrator V1.x: All versions SIMATIC MTP Integrator V2.x: All versions SIMATIC NET PC Software V16: All versions SIMATIC NET PC Software V17: All versions CP PtP Param configuring interface: All versions SIMATIC NET PC Software V18: All versions SIMATIC NET PC Software V19: All versions SIMATIC NET PC Software V20: Versions prior to V20.0 Update 1 SIMATIC ODK 1500S: All versions SIMATIC PCS 7 Advanced Process Faceplates V9.1: All versions SIMATIC PCS 7 Advanced Process Functions V2.1: All versions SIMATIC PCS 7 Advanced Process Functions V2.2: All versions SIMATIC PCS 7 Advanced Process Graphics V9.1: All versions SIMATIC PCS 7 Advanced Process Graphics V10.0: All versions SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0: All versions Create MyConfig (CMC): All versions SIMATIC PCS 7 Advanced Process Library V9.1: All versions SIMATIC PCS 7 Basis Faceplates V9.1: All versions SIMATIC PCS 7 Basis Library V9.1: All versions SIMATIC PCS 7 Basis Library V10.0: All versions SIMATIC PCS 7 Industry Library V9.0: All versions SIMATIC PCS 7 Industry Library V9.1: All versions SIMATIC PCS 7 Industry Library V10.0: All versions SIMATIC PCS 7 Logic Matrix V9.1: All versions SIMATIC PCS 7 Logic Matrix V10.0: All versions SIMATIC PCS 7 MPC Configurator: All versions Energy Support Library (EnSL): All versions SIMATIC PCS 7 PowerControl: All versions SIMATIC PCS 7 Standard Chemical Library V9.1: All versions SIMATIC PCS 7 Standard Chemical Library V10.0: All versions SIMATIC PCS 7 TeleControl: All versions SIMATIC PCS 7 V9.1: All versions SIMATIC PCS 7 V10.0: All versions SIMATIC PCS 7/OPEN OS V9.1: All versions SIMATIC PCS neo V5.0: All versions SIMATIC PCS neo V6.0: Versions prior to V6.0 SP1 SIMATIC PDM Maintenance Station V5.0: All versions FM Configuration Package: All versions SIMATIC PDM V9.2: All versions SIMATIC PDM V9.3: All versions SIMATIC Process Function Library (PFL) V4.0: All versions SIMATIC Process Historian 2020: All versions SIMATIC Process Historian 2022: All versions SIMATIC Process Historian 2024: All versions SIMATIC ProSave V17: All versions SIMATIC ProSave V18: All versions SIMATIC ProSave V19: Versions prior to V19 Update 4 SIMATIC ProSave V20: All versions Modular PID CTRL Tool: All versions SIMATIC Route Control V9.1: All versions SIMATIC Route Control V10.0: All versions SIMATIC S7 F Systems V6.3: All versions SIMATIC S7 F Systems V6.4: All versions SIMATIC S7-1500 Software Controller V2: All versions SIMATIC S7-1500 Software Controller V3: All versions SIMATIC S7-Fail-safe Configuration Tool (S7-FCT): Versions prior to 4.0.1 SIMATIC S7-PCT: All versions SIMATIC S7-PLCSIM Advanced: Versions prior to V7.0 Update 1 SIMATIC S7-PLCSIM V17: All versions MultiFieldbus Configuration Tool (MFCT): All versions SIMATIC S7-PLCSIM V18: All versions SIMATIC S7-PLCSIM V19: All versions SIMATIC S7-PLCSIM V20: Versions prior to V20 Update 1 SIMATIC Safety Matrix: All versions SIMATIC STEP 7 CFC V19: All versions SIMATIC STEP 7 CFC V20: All versions SIMATIC STEP 7 V5.7: All versions SIMATIC Target: All versions SIMATIC WinCC flexible ES: All versions SIMATIC WinCC Runtime Advanced: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-22" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-23 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-23" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Viewpoint" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7973" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2025-7973 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Viewpoint" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of FactoryTalk Viewpoint is affected: FactoryTalk Viewpoint: Version 14.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-23" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-24 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-24" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell FactoryTalk Linx" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7972" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2025-7972 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Linx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: FactoryTalk Linx: Versions prior to 6.50." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-24" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-25 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-25" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Micro800" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-48691; CVE-2023-48692; CVE-2025-7693; CVE-2023-48693" ;
    icsa:cweNumber "CWE-1395; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-48691,
        cve-res:CVE-2023-48692,
        cve-res:CVE-2023-48693,
        cve-res:CVE-2025-7693 ;
    icsa:hasCWE cwe-res:CWE-1395,
        cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Micro800" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2023-48693) PLC Micro850 LC50: All versions prior to V12.013 (CVE-2023-48691; CVE-2023-48693) PLC Micro850 L50E: Versions V20.011 through V22.011 (CVE-2023-48691; The following versions of Rockwell Automation Micro800 are affected: PLC Micro820 LC20: All versions prior to V14.011 (CVE-2023-48691; CVE-2023-7693).; CVE-2023-48693; CVE-2023-7693) PLC Micro870 L70E: Versions V20.011 through V22.011 (CVE-2023-48691; CVE-2023-48693) PLC Micro870 LC70: All versions prior to V12.013 (CVE-2023-48691; CVE-2023-48692" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-25" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-26 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-26" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FLEX 5000 I/O (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2025-9041; CVE-2025-9042" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-9041,
        cve-res:CVE-2025-9042 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FLEX 5000 I/O" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of FLEX 5000 I/O is affected: 5094-IF8: version V2.011 (CVE-2025-9041) 5094-IY8: version V2.011 (CVE-2025-9042)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-26" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-27 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-27" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ArmorBlock 5000 I/O - Webserver" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7774; CVE-2025-7773" ;
    icsa:cweNumber "CWE-287; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2025-7773,
        cve-res:CVE-2025-7774 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ArmorBlock 5000 I/O" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of ArmorBlock 5000 I/O are affected: 5032-CFGB16M12P5DR: Versions 1.011 and prior 5032-CFGB16M12DR: Versions 1.011 and prior 5032-CFGB16M12M12LDR: Versions 1.011 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-27" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-28 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-28" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix Ethernet Modules" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Critical Manufacturing; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-7353" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2025-7353 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix Ethernet Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation ControlLogix Ethernet Modules are affected: 1756-EN2T/D: Version 11.004 or below 1756-EN2F/C: Version 11.004 or below 1756-EN2TR/C: Version 11.004 or below 1756-EN3TR/B: Version 11.004 or below 1756-EN2TP/A: Version 11.004 or below." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-28" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-29 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-29" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Studio 5000 Logix Designer" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7971" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-7971 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Studio 5000 Logix Designer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a centralized control system management software; are affected: Studio 5000 Logix Designer: Version 36.00.02 to 37.00.02.; The following versions of Studio 5000 Logix Designer" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-29" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-30 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-30" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Action Manager" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-7532" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2025-7532 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Action Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a software management platform; The following versions of FactoryTalk Action Manager; are affected: FactoryTalk Action Manager: Version 1.0.0 to 1.01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-30" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-226-31 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-226-31" ;
    dcterms:issued "2025-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1756-EN4TR, 1756-EN4TRXT (Update B)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-8008; CVE-2025-8007" ;
    icsa:cweNumber "CWE-755; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-8007,
        cve-res:CVE-2025-8008 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-755 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1756-EN4TR, 1756-EN4TRXT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: 1756-EN4TR: Version 6.001 and prior 1756-EN4TRXT: Version 6.001 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-226-31" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-231-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-231-01" ;
    dcterms:issued "2025-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo CC Product Family and SENTRON Powermanager" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-47809" ;
    icsa:cweNumber "CWE-272" ;
    icsa:hasCVE cve-res:CVE-2025-47809 ;
    icsa:hasCWE cwe-res:CWE-272 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Desigo CC Product Family and SENTRON Powermanager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Desigo CC family V5.0: All versions Desigo CC family V5.1: All versions Desigo CC family V6: All versions Desigo CC family V7: All versions Desigo CC family V8: All versions SENTRON Powermanager V5: All versions SENTRON Powermanager V6: All versions SENTRON Powermanager V7: All versions SENTRON Powermanager V8: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-231-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-231-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-231-02" ;
    dcterms:issued "2025-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix SAML Module" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40758" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2025-40758 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mendix SAML Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Mendix SAML (Mendix 9.24 compatible): Versions prior to V3.6.21 Siemens Mendix SAML (Mendix 10.12 compatible): Versions prior to V4.0.3 Siemens Mendix SAML (Mendix 10.21 compatible): Versions prior to V4.1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-231-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-233-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-233-01" ;
    dcterms:issued "2025-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Corporation MELSEC iQ-F Series CPU Module (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-5514" ;
    icsa:cweNumber "CWE-130" ;
    icsa:hasCVE cve-res:CVE-2025-5514 ;
    icsa:hasCWE cwe-res:CWE-130 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F Series CPU module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MELSEC iQ-F Series CPU module are affected: MELSEC iQ-F Series CPU module FX5U-32MT/ES: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-32MT/DS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-32MT/ESS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-32MT/DSS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-32MR/ES: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-32MR/DS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-64MT/ES: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-64MT/DS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-64MT/ESS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-64MT/DSS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-64MR/ES: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-64MR/DS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-80MT/ES: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-80MT/DS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-80MT/ESS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-80MT/DSS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-80MR/ES: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5U-80MR/DS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UC-32MT/D: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UC-32MT/DSS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UC-64MT/D: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UC-64MT/DSS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UC-96MT/D: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UC-96MT/DSS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UC-32MT/DS-TS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UC-32MT/DSS-TS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UC-32MR/DS-TS: Versions 1.060 and later MELSEC iQ-F Series CPU module FX5UJ-24MT/ES: All versions MELSEC iQ-F Series CPU module FX5UJ-24MT/DS: All versions MELSEC iQ-F Series CPU module FX5UJ-24MT/ESS: All versions MELSEC iQ-F Series CPU module FX5UJ-24MT/DSS: All versions MELSEC iQ-F Series CPU module FX5UJ-24MR/ES: All versions MELSEC iQ-F Series CPU module FX5UJ-24MR/DS: All versions MELSEC iQ-F Series CPU module FX5UJ-40MT/ES: All versions MELSEC iQ-F Series CPU module FX5UJ-40MT/DS: All versions MELSEC iQ-F Series CPU module FX5UJ-40MT/ESS: All versions MELSEC iQ-F Series CPU module FX5UJ-40MT/DSS: All versions MELSEC iQ-F Series CPU module FX5UJ-40MR/ES: All versions MELSEC iQ-F Series CPU module FX5UJ-40MR/DS: All versions MELSEC iQ-F Series CPU module FX5UJ-60MT/ES: All versions MELSEC iQ-F Series CPU module FX5UJ-60MT/DS: All versions MELSEC iQ-F Series CPU module FX5UJ-60MT/ESS: All versions MELSEC iQ-F Series CPU module FX5UJ-60MT/DSS: All versions MELSEC iQ-F Series CPU module FX5UJ-60MR/ES: All versions MELSEC iQ-F Series CPU module FX5UJ-60MR/DS: All versions MELSEC iQ-F Series CPU module FX5UJ-24MT/ES-A: All versions MELSEC iQ-F Series CPU module FX5UJ-24MR/ES-A: All versions MELSEC iQ-F Series CPU module FX5UJ-40MT/ES-A: All versions MELSEC iQ-F Series CPU module FX5UJ-40MR/ES-A: All versions MELSEC iQ-F Series CPU module FX5UJ-60MT/ES-A: All versions MELSEC iQ-F Series CPU module FX5UJ-60MR/ES-A: All versions MELSEC iQ-F Series CPU module FX5S-30MT/ES: All versions MELSEC iQ-F Series CPU module FX5S-30MT/DS: All versions MELSEC iQ-F Series CPU module FX5S-30MT/ESS: All versions MELSEC iQ-F Series CPU module FX5S-30MT/DSS: All versions MELSEC iQ-F Series CPU module FX5S-30MR/ES: All versions MELSEC iQ-F Series CPU module FX5S-30MR/DS: All versions MELSEC iQ-F Series CPU module FX5S-40MT/ES: All versions MELSEC iQ-F Series CPU module FX5S-40MT/DS: All versions MELSEC iQ-F Series CPU module FX5S-40MT/ESS: All versions MELSEC iQ-F Series CPU module FX5S-40MT/DSS: All versions MELSEC iQ-F Series CPU module FX5S-40MR/ES: All versions MELSEC iQ-F Series CPU module FX5S-40MR/DS: All versions MELSEC iQ-F Series CPU module FX5S-60MT/ES: All versions MELSEC iQ-F Series CPU module FX5S-60MT/DS: All versions MELSEC iQ-F Series CPU module FX5S-60MT/ESS: All versions MELSEC iQ-F Series CPU module FX5S-60MT/DSS: All versions MELSEC iQ-F Series CPU module FX5S-60MR/ES: All versions MELSEC iQ-F Series CPU module FX5S-60MR/DS: All versions MELSEC iQ-F Series CPU module FX5S-80MT/ES: All versions MELSEC iQ-F Series CPU module FX5S-80MT/DS: All versions MELSEC iQ-F Series CPU module FX5S-80MT/ESS: All versions MELSEC iQ-F Series CPU module FX5S-80MT/DSS: All versions MELSEC iQ-F Series CPU module FX5S-80MR/ES: All versions MELSEC iQ-F Series CPU module FX5S-80MR/DS: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-233-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-238-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-238-01" ;
    dcterms:issued "2025-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "INVT VT-Designer and HMITool" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-7230; CVE-2025-7225; CVE-2025-7227; CVE-2025-7223; CVE-2025-7226; CVE-2025-7224; CVE-2025-7231; CVE-2025-7229; CVE-2025-7228" ;
    icsa:cweNumber "CWE-843; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-7223,
        cve-res:CVE-2025-7224,
        cve-res:CVE-2025-7225,
        cve-res:CVE-2025-7226,
        cve-res:CVE-2025-7227,
        cve-res:CVE-2025-7228,
        cve-res:CVE-2025-7229,
        cve-res:CVE-2025-7230,
        cve-res:CVE-2025-7231 ;
    icsa:hasCWE cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VT-Designer and HMITool" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-7230; CVE-2025-7231) HMITool: Version 7.1.011 (CVE-2025-7223; CVE-2025-7225; CVE-2025-7226).; The following versions of INVT VT-Designer and HMITool are affected: VT-Designer: Version 2.1.13 (CVE-2025-7227; CVE-2025-7224; CVE-2025-7229; CVE-2025-7228" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-238-01" ;
    icsa:vendor "INVT" ;
    icsa:year 2025 .

icsa-res:ICSA-25-238-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-238-03" ;
    dcterms:issued "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M340 Controller and Communication Modules (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-6625" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-6625 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon M340 Controller and Communication Modules (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Modicon M340 Firmware vers:generic/ | Modicon M340 Controller () | Ethernet / Serial RTU Module vers:all/* (CVE-2025-6625) | M580 Global Data module vers:all/* (CVE-2025-6625) | Modicon M340 X80 Ethernet Communication modules vers:all/* (CVE-2025-6625) | Modbus/TCP Ethernet Modicon M340 module vers:intdot/<3.60 (CVE-2025-6625) | Modbus/TCP Ethernet Modicon M340 module 3.60 () | Modbus/TCP Ethernet Modicon M340 FactoryCast module vers:intdot/<6.80 (CVE-2025-6625) | Modbus/TCP Ethernet Modicon M340 FactoryCast module 6.80 ()" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-238-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-240-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-240-01" ;
    dcterms:issued "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series CPU Module" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7405" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-7405 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F Series CPU module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the following versions of MELSEC iQ-F Series are affected: MELSEC iQ-F Series FX5U-32MT/ES: 1.060 and later MELSEC iQ-F Series FX5U-32MT/DS: 1.060 and later MELSEC iQ-F Series FX5U-32MT/ESS: 1.060 and later MELSEC iQ-F Series FX5U-32MT/DSS: 1.060 and later MELSEC iQ-F Series FX5U-64MT/ES: 1.060 and later MELSEC iQ-F Series FX5U-64MT/DS: 1.060 and later MELSEC iQ-F Series FX5U-64MT/ESS: 1.060 and later MELSEC iQ-F Series FX5U-64MT/DSS: 1.060 and later MELSEC iQ-F Series FX5U-80MT/ES: 1.060 and later MELSEC iQ-F Series FX5U-80MT/DS: 1.060 and later MELSEC iQ-F Series FX5U-80MT/ESS: 1.060 and later MELSEC iQ-F Series FX5U-80MT/DSS: 1.060 and later MELSEC iQ-F Series FX5U-32MR/ES: 1.060 and later MELSEC iQ-F Series FX5U-32MR/DS: 1.060 and later MELSEC iQ-F Series FX5U-64MR/ES: 1.060 and later MELSEC iQ-F Series FX5U-64MR/DS: 1.060 and later MELSEC iQ-F Series FX5U-80MR/ES: 1.060 and later MELSEC iQ-F Series FX5U-80MR/DS: 1.060 and later MELSEC iQ-F Series FX5UC-32MT/D: 1.060 and later MELSEC iQ-F Series FX5UC-32MT/DSS: 1.060 and later MELSEC iQ-F Series FX5UC-64MT/D: 1.060 and later MELSEC iQ-F Series FX5UC-64MT/DSS: 1.060 and later MELSEC iQ-F Series FX5UC-96MT/D: 1.060 and later MELSEC iQ-F Series FX5UC-96MT/DSS: 1.060 and later MELSEC iQ-F Series FX5UC-32MT/DS-TS: 1.060 and later MELSEC iQ-F Series FX5UC-32MT/DSS-TS: 1.060 and later MELSEC iQ-F Series FX5UC-32MR/DS-TS: 1.060 and later MELSEC iQ-F Series FX5UJ-24MT/ES: All versions MELSEC iQ-F Series FX5UJ-24MT/DS: All versions MELSEC iQ-F Series FX5UJ-24MT/ESS: All versions MELSEC iQ-F Series FX5UJ-24MT/DSS: All versions MELSEC iQ-F Series FX5UJ-40MT/ES: All versions MELSEC iQ-F Series FX5UJ-40MT/DS: All versions MELSEC iQ-F Series FX5UJ-40MT/ESS: All versions MELSEC iQ-F Series FX5UJ-40MT/DSS: All versions MELSEC iQ-F Series FX5UJ-60MT/ES: All versions MELSEC iQ-F Series FX5UJ-60MT/DS: All versions MELSEC iQ-F Series FX5UJ-60MT/ESS: All versions MELSEC iQ-F Series FX5UJ-60MT/DSS: All versions MELSEC iQ-F Series FX5UJ-24MR/ES: All versions MELSEC iQ-F Series FX5UJ-24MR/DS: All versions MELSEC iQ-F Series FX5UJ-40MR/ES: All versions MELSEC iQ-F Series 'FX5UJ-40MR/DS: All versions MELSEC iQ-F Series FX5UJ-60MR/ES: All versions MELSEC iQ-F Series FX5UJ-60MR/DS: All versions MELSEC iQ-F Series FX5UJ-24MT/ES-A: All versions MELSEC iQ-F Series FX5UJ-24MR/ES-A: All versions MELSEC iQ-F Series FX5UJ-40MT/ES-A: All versions MELSEC iQ-F Series FX5UJ-40MR/ES-A: All versions MELSEC iQ-F Series FX5UJ-60MT/ES-A: All versions MELSEC iQ-F Series FX5UJ-60MR/ES-A: All versions MELSEC iQ-F Series FX5S-30MT/ES: All versions MELSEC iQ-F Series FX5S-30MT/DS: All versions MELSEC iQ-F Series FX5S-30MT/ESS: All versions MELSEC iQ-F Series FX5S-30MT/DSS: All versions MELSEC iQ-F Series FX5S-40MT/ES: All versions MELSEC iQ-F Series FX5S-40MT/DS: All versions MELSEC iQ-F Series FX5S-40MT/ESS: All versions MELSEC iQ-F Series FX5S-40MT/DSS: All versions MELSEC iQ-F Series FX5S-60MT/ES: All versions MELSEC iQ-F Series FX5S-60MT/DS: All versions MELSEC iQ-F Series FX5S-60MT/ESS: All versions MELSEC iQ-F Series FX5S-60MT/DSS: All versions MELSEC iQ-F Series FX5S-80MT/ES: All versions MELSEC iQ-F Series FX5S-80MT/DS: All versions MELSEC iQ-F Series FX5S-80MT/ESS: All versions MELSEC iQ-F Series FX5S-80MT/DSS: All versions MELSEC iQ-F Series FX5S-30MR/ES: All versions MELSEC iQ-F Series FX5S-30MR/DS: All versions MELSEC iQ-F Series FX5S-40MR/ES: All versions MELSEC iQ-F Series FX5S-40MR/DS: All versions MELSEC iQ-F Series FX5S-60MR/ES: All versions MELSEC iQ-F Series FX5S-60MR/DS: All versions MELSEC iQ-F Series FX5S-80MR/ES: All versions MELSEC iQ-F Series FX5S-80MR/DS: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-240-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-240-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-240-02" ;
    dcterms:issued "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series CPU Module" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7731" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2025-7731 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F Series CPU module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric reports the following versions of MELSEC iQ-F Series CPU module are affected: MELSEC iQ-F Series FX5U-32MT/ES: All versions MELSEC iQ-F Series FX5U-32MT/DS: All versions MELSEC iQ-F Series FX5U-32MT/ESS: All versions MELSEC iQ-F Series FX5U-32MT/DSS: All versions MELSEC iQ-F Series FX5U-64MT/ES: All versions MELSEC iQ-F Series FX5U-64MT/DS: All versions MELSEC iQ-F Series FX5U-64MT/ESS: All versions MELSEC iQ-F Series FX5U-64MT/DSS: All versions MELSEC iQ-F Series FX5U-80MT/ES: All versions MELSEC iQ-F Series FX5U-80MT/DS: All versions MELSEC iQ-F Series FX5U-80MT/ESS: All versions MELSEC iQ-F Series FX5U-80MT/DSS: All versions MELSEC iQ-F Series FX5U-32MR/ES: All versions MELSEC iQ-F Series FX5U-32MR/DS: All versions MELSEC iQ-F Series FX5U-64MR/ES: All versions MELSEC iQ-F Series FX5U-64MR/DS: All versions MELSEC iQ-F Series FX5U-80MR/ES: All versions MELSEC iQ-F Series FX5U-80MR/DS: All versions MELSEC iQ-F Series FX5UC-32MT/D: All versions MELSEC iQ-F Series FX5UC-32MT/DSS: All versions MELSEC iQ-F Series FX5UC-64MT/D: All versions MELSEC iQ-F Series FX5UC-64MT/DSS: All versions MELSEC iQ-F Series FX5UC-96MT/D: All versions MELSEC iQ-F Series FX5UC-96MT/DSS: All versions MELSEC iQ-F Series FX5UC-32MT/DS-TS: All versions MELSEC iQ-F Series FX5UC-32MT/DSS-TS: All versions MELSEC iQ-F Series FX5UC-32MR/DS-TS: All versions MELSEC iQ-F Series FX5UJ-24MT/ES: All versions MELSEC iQ-F Series FX5UJ-24MT/DS: All versions MELSEC iQ-F Series FX5UJ-24MT/ESS: All versions MELSEC iQ-F Series FX5UJ-24MT/DSS: All versions MELSEC iQ-F Series FX5UJ-40MT/ES: All versions MELSEC iQ-F Series FX5UJ-40MT/DS: All versions MELSEC iQ-F Series FX5UJ-40MT/ESS: All versions MELSEC iQ-F Series FX5UJ-40MT/DSS: All versions MELSEC iQ-F Series FX5UJ-60MT/ES: All versions MELSEC iQ-F Series FX5UJ-60MT/DS: All versions MELSEC iQ-F Series FX5UJ-60MT/ESS: All versions MELSEC iQ-F Series FX5UJ-60MT/DSS: All versions MELSEC iQ-F Series FX5UJ-24MR/ES: All versions MELSEC iQ-F Series FX5UJ-24MR/DS: All versions MELSEC iQ-F Series FX5UJ-40MR/ES: All versions MELSEC iQ-F Series FX5UJ-40MR/DS: All versions MELSEC iQ-F Series FX5UJ-60MR/ES: All versions MELSEC iQ-F Series FX5UJ-60MR/DS: All versions MELSEC iQ-F Series FX5UJ-24MT/ES-A: All versions MELSEC iQ-F Series FX5UJ-24MR/ES-A: All versions MELSEC iQ-F Series FX5UJ-40MT/ES-A: All versions MELSEC iQ-F Series FX5UJ-40MR/ES-A: All versions MELSEC iQ-F Series FX5UJ-60MT/ES-A: All versions MELSEC iQ-F Series FX5UJ-60MR/ES-A: All versions MELSEC iQ-F Series FX5S-30MT/ES: All versions MELSEC iQ-F Series FX5S-30MT/DS: All versions MELSEC iQ-F Series FX5S-30MT/ESS: All versions MELSEC iQ-F Series FX5S-30MT/DSS: All versions MELSEC iQ-F Series FX5S-40MT/ES: All versions MELSEC iQ-F Series FX5S-40MT/DS: All versions MELSEC iQ-F Series FX5S-40MT/ESS: All versions MELSEC iQ-F Series FX5S-40MT/DSS: All versions MELSEC iQ-F Series FX5S-60MT/ES: All versions MELSEC iQ-F Series FX5S-60MT/DS: All versions MELSEC iQ-F Series FX5S-60MT/ESS: All versions MELSEC iQ-F Series FX5S-60MT/DSS: All versions MELSEC iQ-F Series FX5S-80MT/ES: All versions MELSEC iQ-F Series FX5S-80MT/DS: All versions MELSEC iQ-F Series FX5S-80MT/ESS: All versions MELSEC iQ-F Series FX5S-80MT/DSS: All versions MELSEC iQ-F Series FX5S-30MR/ES: All versions MELSEC iQ-F Series FX5S-30MR/DS: All versions MELSEC iQ-F Series FX5S-40MR/ES: All versions MELSEC iQ-F Series FX5S-40MR/DS: All versions MELSEC iQ-F Series FX5S-60MR/ES: All versions MELSEC iQ-F Series FX5S-60MR/DS: All versions MELSEC iQ-F Series FX5S-80MR/ES: All versions MELSEC iQ-F Series FX5S-80MR/DS: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-240-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-240-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-240-03" ;
    dcterms:issued "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-8453" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2025-8453 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Saitel DR RTU, Saitel DP RTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric Saitel DR RTU: versions 11.06.29 and prior Schneider Electric Saitel DP RTU: versions 11.06.34 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-240-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-240-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-240-04" ;
    dcterms:issued "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-G2" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-47728" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-47728 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft-G2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics CNCSoft-G2 are affected: CNCSoft-G2: Version 2.1.0.20 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-240-04" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-240-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-240-05" ;
    dcterms:issued "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics COMMGR" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-53418; CVE-2025-53419" ;
    icsa:cweNumber "CWE-94; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-53418,
        cve-res:CVE-2025-53419 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMMGR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics COMMGR are affected: COMMGR: Versions v2.9.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-240-05" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-240-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-240-06" ;
    dcterms:issued "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Vernova CIMPLICITY" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7719" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2025-7719 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CIMPLICITY" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2023; are affected: CIMPLICITY: Versions 2024; 11.0.; HMI/SCADA software; 2022; The following versions of GE Vernova's CIMPLICITY" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-240-06" ;
    icsa:vendor "GE Vernova" ;
    icsa:year 2025 .

icsa-res:ICSA-25-245-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-245-01" ;
    dcterms:issued "2025-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics EIP Builder" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-57704" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2025-57704 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EIP Builder" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Delta Electronics products are affected: EIP Builder: Versions 1.11 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-245-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-245-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-245-02" ;
    dcterms:issued "2025-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric FRENIC-Loader 4" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-9365" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-9365 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FRENIC-Loader 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Fuji Electric products are affected: FRENIC-Loader 4: Versions prior to 1.4.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-245-02" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-245-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-245-03" ;
    dcterms:issued "2025-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "SunPower PVS6" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-9696" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2025-9696 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PVS6" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SunPower PVS6 are affected: PVS6: Versions 2025.06 build 61839 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-245-03" ;
    icsa:vendor "SunPower" ;
    icsa:year 2025 .

icsa-res:ICSA-25-247-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-247-01" ;
    dcterms:issued "2025-09-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell OneWireless Wireless Device Manager (WDM)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy" ;
    icsa:cveNumber "CVE-2025-2521; CVE-2025-2523; CVE-2025-3946; CVE-2025-2522" ;
    icsa:cweNumber "CWE-119; CWE-430; CWE-191; CWE-226" ;
    icsa:hasCVE cve-res:CVE-2025-2521,
        cve-res:CVE-2025-2522,
        cve-res:CVE-2025-2523,
        cve-res:CVE-2025-3946 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-191,
        cwe-res:CWE-226,
        cwe-res:CWE-430 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OneWireless Wireless Device Manager (WDM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Honeywell reports these vulnerabilities affect the following: OneWireless WDM: All releases prior to R322.5 OneWireless WDM: All releases prior to R331.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-247-01" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2025 .

icsa-res:ICSA-25-252-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-252-01" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9065" ;
    icsa:cweNumber "CWE-918" ;
    icsa:hasCVE cve-res:CVE-2025-9065 ;
    icsa:hasCWE cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ThinManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following versions of ThinManager; are affected: ThinManager: Versions 13.0 through 14.0.; a thin client management software" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-252-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-252-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-252-02" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Cylon Aspect BMS/BAS" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-53187; CVE-2025-7679; CVE-2025-7677" ;
    icsa:cweNumber "CWE-306; CWE-120; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-53187,
        cve-res:CVE-2025-7677,
        cve-res:CVE-2025-7679 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-288,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ASPECT, NEXUS, MATRIX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB reports that the following products are affected: ABB ASPECT-Enterprise ASP-ENT-x: Versions prior to 3.08.04-s01 ABB NEXUS Series NEX-2x: Versions prior to 3.08.04-s01 ABB NEXUS Series NEXUS-3-x: Versions prior to 3.08.04-s01 ABB MATRIX Series MAT-x: Versions prior to 3.08.04-s01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-252-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-252-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-252-03" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix IOS" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7350" ;
    icsa:cweNumber "CWE-74" ;
    icsa:hasCVE cve-res:CVE-2025-7350 ;
    icsa:hasCWE cwe-res:CWE-74 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix IOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Stratix IOS are affected: Stratix IOS: Versions 15.2(8)E5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-252-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-252-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-252-04" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Optix" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9161" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-9161 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Optix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "cloud-enabled visualization platform; a scalable; is affected: FactoryTalk Optix: Versions 1.5.0 through 1.5.7.; The following version of FactoryTalk Optix" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-252-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-252-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-252-05" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Activation Manager" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7970" ;
    icsa:cweNumber "CWE-303" ;
    icsa:hasCVE cve-res:CVE-2025-7970 ;
    icsa:hasCWE cwe-res:CWE-303 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Activation Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of FactoryTalk Activation Manager; a secure software tool that enables activation and management of Rockwell Automation products without physical media; is affected: FactoryTalk Activation Manager: Version 5.00." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-252-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-252-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-252-06" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation CompactLogix® 5480" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9160" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-9160 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CompactLogix 5480" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of CompactLogix® 5480 is affected: CompactLogix® 5480: Version 32-37.011 with Windows package (2.1.0) Win10 v1607." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-252-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-252-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-252-07" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix 5580" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9166" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2025-9166 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ControlLogix 5580" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of ControlLogix 5580 is affected: ControlLogix 5580: Version 35.013." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-252-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-252-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-252-08" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Analytics LogixAI" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9364" ;
    icsa:cweNumber "CWE-497" ;
    icsa:hasCVE cve-res:CVE-2025-9364 ;
    icsa:hasCWE cwe-res:CWE-497 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Analytics LogixAI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation Analytics LogixAI are affected: Analytics LogixAI: Versions 3.00 and 3.01." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-252-08" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-252-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-252-09" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1783-NATR" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-28895" ;
    icsa:cweNumber "CWE-1103" ;
    icsa:hasCVE cve-res:CVE-2020-28895 ;
    icsa:hasCWE cwe-res:CWE-1103 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1783-NATR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation 1783-NATR are affected: 1783-NATR: All versions prior to 1.007." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-252-09" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-254-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-01" ;
    dcterms:issued "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMOTION Tools" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-43715" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2025-43715 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMOTION Tools" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0): All versions SIMOTION OA MIIF (6AU1820-3DA20-0AB0): All versions SIMOTION OACAMGEN (6AU1820-3EA20-0AB0): All versions SIMOTION OALECO (6AU1820-3HA20-0AB0): All versions SIMOTION OAVIBX (6AU1820-3CA20-0AB0): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-254-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-02" ;
    dcterms:issued "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC Virtualization as a Service (SIVaaS)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40804" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2025-40804 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIVaaS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC Virtualization as a Service (SIVaaS): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-254-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-03" ;
    dcterms:issued "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINAMICS Drives" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40594" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2025-40594 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINAMICS Drives" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SINAMICS G220 V6.4: Versions prior to V6.4 HF2 Siemens SINAMICS S200 V6.4: All versions Siemens SINAMICS S210 V6.4: Versions prior to V6.4 HF2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-254-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-04" ;
    dcterms:issued "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC OS" ;
    icsa:CVSSScore "2.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40803; CVE-2025-40802" ;
    icsa:cweNumber "CWE-200; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2025-40802,
        cve-res:CVE-2025-40803 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC OS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens RUGGEDCOM RST2428P (6GK6242-6PA00): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-254-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-05" ;
    dcterms:issued "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Apogee PXC and Talon TC Devices" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40757" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2025-40757 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Apogee PXC and Talon TC Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: APOGEE PXC Series (BACnet): All versions APOGEE PXC Series (P2 Ethernet): All versions TALON TC Series (BACnet): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-254-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-06" ;
    dcterms:issued "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Management OS (IEM-OS)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-48976" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-48976 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Edge Management OS (IEM-OS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Industrial Edge Management OS (IEM-OS): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-254-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-07" ;
    dcterms:issued "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens User Management Component (UMC)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40796; CVE-2025-40798; CVE-2025-40795; CVE-2025-40797" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-40795,
        cve-res:CVE-2025-40796,
        cve-res:CVE-2025-40797,
        cve-res:CVE-2025-40798 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "User Management Component (UMC)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIMATIC PCS neo V4.1: All versions Siemens SIMATIC PCS neo V5.0: All versions Siemens User Management Component (UMC): Versions prior to 2.15.1.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-254-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-08" ;
    dcterms:issued "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure" ;
    icsa:CVSSScore "4.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-8448; CVE-2025-8449" ;
    icsa:cweNumber "CWE-200; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2025-8448,
        cve-res:CVE-2025-8449 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Schneider Electric products are affected: EcoStruxure Building Operation Enterprise Server 7.x: Versions prior to 7.0.2.348 EcoStruxure Building Operation Enterprise Server 6.x: Versions prior to 6.0.4.10001 (CP8) EcoStruxure Building Operation Enterprise Server 5.x: Versions prior to 5.0.3.17009 (CP16) EcoStruxure Enterprise Server 7.x: Versions prior to 7.0.2.348 EcoStruxure Enterprise Server 6.x: Versions prior to 6.0.4.10001 (CP8) EcoStruxure Enterprise Server 5.x: Versions prior to 5.0.3.17009 (CP16) EcoStruxure Workstation 7.x: Versions prior to 7.0.2.348 EcoStruxure Workstation 6.x: Versions prior to 6.0.4.10001 (CP8) EcoStruxure Workstation 5.x: Versions prior to 5.0.3.17009 (CP16)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-08" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-254-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-09" ;
    dcterms:issued "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-5056" ;
    icsa:cweNumber "CWE-552" ;
    icsa:hasCVE cve-res:CVE-2024-5056 ;
    icsa:hasCWE cwe-res:CWE-552 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Modbus/TCP Ethernet Modicon M340 module Versions prior to SV3.60; Modbus/TCP Ethernet Modicon M340 FactoryCast module Versions prior to SV6.80" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-09" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2024 .

icsa-res:ICSA-25-254-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-254-10" ;
    dcterms:issued "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Daikin Security Gateway" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-10127" ;
    icsa:cweNumber "CWE-640" ;
    icsa:hasCVE cve-res:CVE-2025-10127 ;
    icsa:hasCWE cwe-res:CWE-640 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Security Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Daikin Security Gateway are affected: Security Gateway: App: 100; Frm: 214." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-254-10" ;
    icsa:vendor "Daikin" ;
    icsa:year 2025 .

icsa-res:ICSA-25-259-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-259-01" ;
    dcterms:issued "2025-09-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Multiple Altivar Process Drives and Communication Modules (Update B)" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7746" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-7746 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Altivar Products, ATVdPAC Module, ILC992 InterLink Converter (Update B)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "1.2ie05 | Altivar Process Communication Modules vers:all/* | Altivar Process Communication Modules vers:all/*; ATVdPAC module vers:intdot/<25.0; 4.5 | ILC992 InterLink Converter vers:all/* | Altivar Machine Drives vers:intdot/<4.5 | Altivar Soft Starter vers:generic/<1.2ie05; 25.0 | Altivar Process Drives vers:intdot/<4.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-259-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-259-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-259-02" ;
    dcterms:issued "2025-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 Series" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-45491; CVE-2024-45492; CVE-2025-6021; CVE-2023-2953; CVE-2025-39203; CVE-2024-45490; CVE-2024-28757" ;
    icsa:cweNumber "CWE-611; CWE-776; CWE-122; CWE-190; CWE-121; CWE-476; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2023-2953,
        cve-res:CVE-2024-28757,
        cve-res:CVE-2024-45490,
        cve-res:CVE-2024-45491,
        cve-res:CVE-2024-45492,
        cve-res:CVE-2025-39203,
        cve-res:CVE-2025-6021 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-190,
        cwe-res:CWE-354,
        cwe-res:CWE-476,
        cwe-res:CWE-611,
        cwe-res:CWE-776 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RTU500 series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-6021) Hitachi Energy RTU500 series: Versions 12.7.1 through 12.7.7 (CVE-2023-2953; CVE-2025-39203; Hitachi Energy reports that the following products are affected: Hitachi Energy RTU500 series: Version 13.6.1 (CVE-2023-2953; CVE-2025-6021) Hitachi Energy RTU500 series: Versions 13.4.1 through 13.4.4 (CVE-2025-39203) Hitachi Energy RTU500 series: Versions 13.5.1 through 13.5.3 (CVE-2023-2953; CVE-2025-6021) Hitachi Energy RTU500 series: Versions 13.7.1 through 13.7.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-259-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-259-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-259-03" ;
    dcterms:issued "2025-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC NET CP, SINEMA, and SCALANCE" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-41991; CVE-2021-41990" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2021-41990,
        cve-res:CVE-2021-41991 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC NET CP, SINEMA and SCALANCE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): < V7.1 Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2): < V7.1 Siemens SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2): < V7.1 Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): < V7.1 Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): < V7.1 Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): < V7.1 Siemens SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): < V7.1 Siemens SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): < V7.1 Siemens SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): < V7.1 Siemens SCALANCE S615 (6GK5615-0AA00-2AA2): < V7.1 Siemens SCALANCE SC622-2C (6GK5622-2GS00-2AC2): < V2.3 (CVE-2021-41991) Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): < V7.1 Siemens SCALANCE SC632-2C (6GK5632-2GS00-2AC2): < V2.3 (CVE-2021-41991) Siemens SCALANCE SC636-2C (6GK5636-2GS00-2AC2): < V2.3 (CVE-2021-41991) Siemens SCALANCE SC642-2C (6GK5642-2GS00-2AC2): < V2.3 (CVE-2021-41991) Siemens SCALANCE SC646-2C (6GK5646-2GS00-2AC2): < V2.3 (CVE-2021-41991) Siemens SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0): < V3.3.46 (CVE-2021-41991) Siemens SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0): < V3.3.46 (CVE-2021-41991) Siemens SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0): < V3.3.46 (CVE-2021-41991) Siemens SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0): < V3.3.46 (CVE-2021-41991) Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0): < V3.3.46 (CVE-2021-41991) Siemens SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0): < V2.2.28 (CVE-2021-41991) Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2): < V7.1 Siemens SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0): < V2.2.28 (CVE-2021-41991) Siemens SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0): < V2.2.28 (CVE-2021-41991) Siemens SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0): < V2.2.28 (CVE-2021-41991) Siemens SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0): < V1.1 (CVE-2021-41991) Siemens SINEMA Remote Connect Server: < V3.1 (CVE-2021-41991) Siemens SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0): < V2.2.28 (CVE-2021-41991) Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0): < V2.2.28 (CVE-2021-41991) Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0): < V2.2.28 (CVE-2021-41991) Siemens SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0): < V3.3.46 (CVE-2021-41991) Siemens SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0): < V3.0.22 (CVE-2021-41991) Siemens SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): < V7.1 Siemens SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0): < V3.3.46 (CVE-2021-41991) Siemens SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0): < V3.3.46 (CVE-2021-41991) Siemens SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): < V7.1 Siemens SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): < V7.1 Siemens SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): < V7.1 Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): < V7.1 Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2): < V7.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-259-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-259-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-259-05" ;
    dcterms:issued "2025-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens OpenSSL Vulnerability in Industrial Products" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-3712" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-3712 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "INDUSTRIAL EDGE, RUGGEDCOM, SCALANCE, SIMATIC, SINEC, SINEMA, SINUMERIK, SIPLUS, TIA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ports on front) (6GK5324-4QG00-1CR2): All versions prior to V4.1.4 Siemens SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0): All versions prior to V3.3.46 Siemens SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0): All versions prior to V3.3.46 Siemens SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0): All versions prior to V3.3.46 Siemens SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0): All versions prior to V3.3.46 Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0): All versions prior to V3.3.46 Siemens SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0): All versions prior to V2.2.28 Siemens SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0): All versions prior to V3.0.22 Siemens SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0): All versions prior to V2.2.28 Siemens SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0): All versions prior to V1.1 Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2): All versions prior to V7.1 Siemens SIMATIC PCS neo (Administration Console): All versions < V3.1 SP 1 Siemens SIMATIC Process Historian OPC UA Server: All versions prior to V2020 SP1 Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to V4.5.2 Siemens SINEC NMS: All versions prior to V1.0.3 Siemens SINEMA Remote Connect Server: All versions prior to V3.1 Siemens SINEMA Server V14: All versions Siemens SINUMERIK Operate: All versions prior to V4.95 SP1 Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0): All versions prior to V2.2.28 Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0): All versions prior to V2.2.28 Siemens SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0): All versions prior to V3.3.46 Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2): All versions prior to V7.1 Siemens SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0): All versions prior to V3.0.22 Siemens SIPLUS NET SCALANCE X308-2 (6AG1308-2FL10-4AA3): All versions prior to V4.1.4 Siemens SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0): All versions prior to V3.3.46 Siemens SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0): All versions prior to V3.3.46 Siemens TIA Administrator: All versions < V1.0 SP7 Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2): All versions prior to V7.1 Siemens SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2): All versions prior to V7.1 Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2): All versions prior to V7.1 Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2): All versions prior to V7.1 Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2): All versions prior to V7.1 Siemens SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1): All versions prior to V7.1 Siemens SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1): All versions prior to V7.1 Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2): All versions prior to V7.1 Siemens SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1): All versions prior to V7.1 Siemens SCALANCE S615 (6GK5615-0AA00-2AA2): All versions prior to V7.1 Siemens SCALANCE SC622-2C (6GK5622-2GS00-2AC2): All versions prior to V2.3 Siemens SCALANCE SC632-2C (6GK5632-2GS00-2AC2): All versions prior to V2.3 Siemens SCALANCE SC636-2C (6GK5636-2GS00-2AC2): All versions prior to V2.3 Siemens SCALANCE SC642-2C (6GK5642-2GS00-2AC2): All versions prior to V2.3 Siemens SCALANCE SC646-2C (6GK5646-2GS00-2AC2): All versions prior to V2.3 Siemens SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0): All versions prior to V3.0.0 Siemens SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0): All versions prior to V3.0.0 Siemens SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0): All versions prior to V3.0.0 Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2): All versions prior to V7.1 Siemens SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0): All versions prior to V3.0.0 Siemens SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0): All versions prior to V3.0.0 Siemens SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0): All versions prior to V3.0.0 Siemens SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0): All versions Siemens SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0): All versions Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0): All versions Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0): All versions Siemens SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0): All versions Siemens SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0): All versions Siemens SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0): All versions Siemens RUGGEDCOM ROX MX5000: All versions prior to V2.15.0 Siemens SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6): All versions Siemens SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6): All versions Siemens SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0): All versions Siemens SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0): All versions Siemens SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0): All versions Siemens SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0): All versions Siemens SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0): All versions Siemens SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0): All versions Siemens SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0): All versions Siemens SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0): All versions Siemens RUGGEDCOM ROX MX5000RE: All versions prior to V2.15.0 Siemens SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0): All versions Siemens SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0): All versions Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0): All versions Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0): All versions Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0): All versions Siemens SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6): All versions Siemens SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6): All versions Siemens SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0): All versions Siemens SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0): All versions Siemens SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0): All versions Siemens RUGGEDCOM ROX RX1400: All versions prior to V2.15.0 Siemens SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0): All versions Siemens SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0): All versions Siemens SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0): All versions Siemens SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0): All versions Siemens SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0): All versions Siemens SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0): All versions Siemens SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0): All versions Siemens SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0): All versions Siemens SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0): All versions Siemens SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0): All versions Siemens RUGGEDCOM ROX RX1500: All versions prior to V2.15.0 Siemens SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0): All versions Siemens SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0): All versions Siemens SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0): All versions Siemens SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0): All versions Siemens SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0): All versions Siemens SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0): All versions Siemens SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0): All versions Siemens SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0): All versions Siemens SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0): All versions Siemens SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0): All versions Siemens RUGGEDCOM ROX RX1501: All versions prior to V2.15.0 Siemens SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0): All versions Siemens SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0): All versions Siemens SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0): All versions prior to V1.2 Siemens SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0): All versions prior to V1.2 Siemens SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0): All versions prior to V1.2 Siemens SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0): All versions prior to V1.2 Siemens SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0): All versions prior to V1.2 Siemens SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0): All versions prior to V1.2 Siemens SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3): All versions prior to V5.5.2 Siemens SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3): All versions prior to V5.5.2.; ports on front) (6GK5324-0GG00-1AR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-12M (24V; ports on front) (6GK5324-4GG00-3ER2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; coated) (6GK5302-7GD00-1GA3): All versions prior to V4.1.4 Siemens SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3): All versions prior to V4.1.4 Siemens SCALANCE X302-7 EEC (2x 230V; ports on front) (6GK5324-0GG00-3AR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-12M (230V; ports on front) (6GK5324-0GG10-3AR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-12M (230V; ports on rear) (6GK5324-0GG00-3HR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-12M (230V; ports on rear) (6GK5324-4GG00-2JR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-4GG10-3ER2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG10-1JR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on front) (6GK5324-4GG00-4ER2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; coated) (6GK5302-7GD00-3GA3): All versions prior to V4.1.4 Siemens RUGGEDCOM ROX RX1512: All versions prior to V2.15.0 Siemens SCALANCE X302-7 EEC (230V) (6GK5302-7GD00-3EA3): All versions prior to V4.1.4 Siemens SCALANCE X302-7 EEC (24V; ports on rear) (6GK5324-4QG00-1HR2): All versions prior to V4.1.4 Siemens Industrial Edge - PROFINET IO Connector: All versions prior to V1.1.1 Siemens SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2): All versions prior to V7.1 Siemens SCALANCE XR324-4M PoE TS (24V; ports on front) (6GK5324-4GG10-2ER2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (2x 24V; ports on front) (6GK5324-0GG10-1AR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-12M (24V; ports on front) (6GK5324-4GG10-1ER2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (24V; coated) (6GK5307-2FD00-4GA3): All versions prior to V4.1.4 Siemens SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3): All versions prior to V4.1.4 Siemens SCALANCE X307-2 EEC (2x 24V; ports on front) (6GK5324-4QG00-1AR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M PoE (24V; Siemens reports that the following products are affected: Siemens Industrial Edge - Machine Insight App: All versions Siemens RUGGEDCOM ROX RX1510: All versions prior to V2.15.0 Siemens SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6): All versions prior to V5.5.2 Siemens SCALANCE X202-2IRT (6GK5202-2BB00-2BA3): All versions prior to V5.5.2 Siemens SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3): All versions prior to V5.5.2 Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6): All versions prior to V5.5.2 Siemens SCALANCE X204-2 (6GK5204-2BB10-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X204-2FM (6GK5204-2BB11-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X204-2LD (6GK5204-2BC10-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2): All versions prior to V5.2.6 Siemens SCALANCE X204-2TS (6GK5204-2BB10-2CA2): All versions prior to V5.2.6 Siemens SCALANCE X204IRT (6GK5204-0BA00-2BA3): All versions prior to V5.5.2 Siemens RUGGEDCOM ROX RX1511: All versions prior to V2.15.0 Siemens SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6): All versions prior to V5.5.2 Siemens SCALANCE X206-1 (6GK5206-1BB10-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X206-1LD (6GK5206-1BC10-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X208 (6GK5208-0BA10-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X208PRO (6GK5208-0HA10-2AA6): All versions prior to V5.2.6 Siemens SCALANCE X212-2 (6GK5212-2BB00-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X212-2LD (6GK5212-2BC00-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X216 (6GK5216-0BA00-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X224 (6GK5224-0BA00-2AA3): All versions prior to V5.2.6 Siemens SCALANCE X302-7 EEC (230V; coated) (6GK5307-2FD00-1GA3): All versions prior to V4.1.4 Siemens SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3): All versions prior to V4.1.4 Siemens SCALANCE X307-2 EEC (2x 230V; coated) (6GK5302-7GD00-4GA3): All versions prior to V4.1.4 Siemens SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3): All versions prior to V4.1.4 Siemens SCALANCE X302-7 EEC (2x 24V; ports on front) (6GK5324-4GG10-4ER2): All versions prior to V4.1.4 Siemens SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2): All versions prior to V7.1 Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on front) (6GK5324-4GG00-2ER2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-0GG00-1HR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-12M (24V; coated) (6GK5307-2FD00-3GA3): All versions prior to V4.1.4 Siemens RUGGEDCOM ROX RX1524: All versions prior to V2.15.0 Siemens SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3): All versions prior to V4.1.4 Siemens SCALANCE X307-2 EEC (24V; coated) (6GK5307-2FD00-2GA3): All versions prior to V4.1.4 Siemens SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3): All versions prior to V4.1.4 Siemens SCALANCE X307-3 (6GK5307-3BL00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X307-3 (6GK5307-3BL10-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X307-3LD (6GK5307-3BM10-2AA3): All versions prior to V4.1.4 Siemens RUGGEDCOM ROX RX1536: All versions prior to V2.15.0 Siemens SCALANCE X307-3LD (6GK5307-3BM00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X308-2 (6GK5308-2FL00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X308-2 (6GK5308-2FL10-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X308-2LD (6GK5308-2FM00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X308-2LD (6GK5308-2FM10-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X308-2LH (6GK5308-2FN00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X308-2LH (6GK5308-2FN10-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X308-2M (6GK5308-2GG00-2AA2): All versions prior to V4.1.4 Siemens RUGGEDCOM ROX RX5000: All versions prior to V2.15.0 Siemens SCALANCE X308-2M (6GK5308-2GG10-2AA2): All versions prior to V4.1.4 Siemens SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2): All versions prior to V4.1.4 Siemens SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2): All versions prior to V4.1.4 Siemens SCALANCE X308-2M TS (6GK5308-2GG00-2CA2): All versions prior to V4.1.4 Siemens SCALANCE X308-2M TS (6GK5308-2GG10-2CA2): All versions prior to V4.1.4 Siemens SCALANCE X310 (6GK5310-0FA00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X310 (6GK5310-0FA10-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X310FE (6GK5310-0BA00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X310FE (6GK5310-0BA10-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X320-1 FE (6GK5320-1BD00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2): All versions prior to V7.1 Siemens SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X408-2 (6GK5408-2FD00-2AA2): All versions prior to V4.1.4 Siemens SCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2): All versions prior to V5.5.2 Siemens SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2): All versions prior to V5.5.2 Siemens SCALANCE XF204 (6GK5204-0BA00-2AF2): All versions prior to V5.2.6 Siemens SCALANCE XF204-2 (6GK5204-2BC00-2AF2): All versions prior to V5.2.6 Siemens SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2): All versions prior to V5.5.2 Siemens SCALANCE XF204IRT (6GK5204-0BA00-2BF2): All versions prior to V5.5.2 Siemens SCALANCE XF206-1 (6GK5206-1BC00-2AF2): All versions prior to V5.2.6 Siemens SCALANCE XF208 (6GK5208-0BA00-2AF2): All versions prior to V5.2.6 Siemens SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2): All versions prior to V7.1 Siemens SCALANCE XR324-12M (230V; ports on rear) (6GK5324-0GG10-1HR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2): All versions prior to V4.1.4 Siemens SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2): All versions prior to V7.1 Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-4QG00-3AR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M PoE (230V; ports on rear) (6GK5324-4GG10-2JR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M PoE (230V; ports on rear) (6GK5324-4GG00-4JR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on front) (6GK5324-4GG00-1ER2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (24V; coated) (6GK5302-7GD00-2GA3): All versions prior to V4.1.4 Siemens SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3): All versions prior to V4.1.4 Siemens SCALANCE X304-2FE (6GK5304-2BD00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3): All versions prior to V4.1.4 Siemens SCALANCE X307-2 EEC (230V; ports on rear) (6GK5324-4GG00-3JR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on rear) (6GK5324-4GG10-3JR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-4QG00-3HR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M PoE (24V; ports on rear) (6GK5324-4GG00-1JR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-4GG10-4JR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-0GG10-3HR2): All versions prior to V4.1.4 Siemens SCALANCE XR324-12M (24V" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-259-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-259-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-259-07" ;
    dcterms:issued "2025-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIALink" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-58321; CVE-2025-58320" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2025-58320,
        cve-res:CVE-2025-58321 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIALink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics DIALink are affected: DIALink: Versions V1.6.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-259-07" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-261-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-261-01" ;
    dcterms:issued "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Westermo Network Technologies WeOS 5" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-46418" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-46418 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WeOS 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: WeOS 5: Versions 5.24 and later.; Westermo reports following versions of WeOS 5; an industrial network operating system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-261-01" ;
    icsa:vendor "Westermo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-261-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-261-02" ;
    dcterms:issued "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Westermo Network Technologies WeOS 5" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-46419" ;
    icsa:cweNumber "CWE-1286" ;
    icsa:hasCVE cve-res:CVE-2025-46419 ;
    icsa:hasCWE cwe-res:CWE-1286 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WeOS 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: WeOS 5: Versions 5.23.0 and prior.; Westermo reports following versions of WeOS 5; an industrial network operating system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-261-02" ;
    icsa:vendor "Westermo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-261-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-261-03" ;
    dcterms:issued "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-9997; CVE-2025-9996" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-9996,
        cve-res:CVE-2025-9997 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Saitel DR RTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric Saitel DR RTU: Versions 11.06.29 and prior Schneider Electric Saitel DP RTU: Versions 11.06.33 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-261-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-261-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-261-04" ;
    dcterms:issued "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Asset Suite" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-6378; CVE-2025-23184; CVE-2024-22262; CVE-2022-44729; CVE-2022-41678; CVE-2022-45868" ;
    icsa:cweNumber "CWE-287; CWE-918; CWE-312; CWE-502; CWE-601; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2022-41678,
        cve-res:CVE-2022-44729,
        cve-res:CVE-2022-45868,
        cve-res:CVE-2023-6378,
        cve-res:CVE-2024-22262,
        cve-res:CVE-2025-23184 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-312,
        cwe-res:CWE-400,
        cwe-res:CWE-502,
        cwe-res:CWE-601,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Asset Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: Asset Suite: Versions 9.6.4.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-261-04" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-261-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-261-05" ;
    dcterms:issued "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Service Suite" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2020-2883" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2020-2883 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Service Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: Service Suite: Versions prior to 9.6.0.4 EP4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-261-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-261-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-261-06" ;
    dcterms:issued "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Cognex In-Sight Explorer and In-Sight Camera Firmware" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-53947; CVE-2025-47698; CVE-2025-52873; CVE-2025-54810; CVE-2025-54860; CVE-2025-54754; CVE-2025-54818; CVE-2025-54497; CVE-2025-53969" ;
    icsa:cweNumber "CWE-732; CWE-307; CWE-276; CWE-602; CWE-294; CWE-259; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2025-47698,
        cve-res:CVE-2025-52873,
        cve-res:CVE-2025-53947,
        cve-res:CVE-2025-53969,
        cve-res:CVE-2025-54497,
        cve-res:CVE-2025-54754,
        cve-res:CVE-2025-54810,
        cve-res:CVE-2025-54818,
        cve-res:CVE-2025-54860 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-276,
        cwe-res:CWE-294,
        cwe-res:CWE-307,
        cwe-res:CWE-319,
        cwe-res:CWE-602,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "In-Sight Explorer, In-Sight Camera Firmware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Cognex products are affected: In-Sight 2000 series: Versions 5.x up to and including 6.5.1 In-Sight 7000 series: Versions 5.x up to and including 6.5.1 In-Sight 8000 series: Versions 5.x up to and including 6.5.1 In-Sight 9000 series: Versions 5.x up to and including 6.5.1 In-Sight Explorer: Versions 5.x up to and including 6.5.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-261-06" ;
    icsa:vendor "Cognex" ;
    icsa:year 2025 .

icsa-res:ICSA-25-261-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-261-07" ;
    dcterms:issued "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dover Fueling Solutions ProGauge MagLink LX4 Devices" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-54807; CVE-2025-30519; CVE-2025-55068" ;
    icsa:cweNumber "CWE-1391; CWE-190; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2025-30519,
        cve-res:CVE-2025-54807,
        cve-res:CVE-2025-55068 ;
    icsa:hasCWE cwe-res:CWE-1391,
        cwe-res:CWE-190,
        cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ProGauge MagLink LX4, ProGauge MagLink LX4 Plus, ProGauge MagLink LX4 Ultimate" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a fuel and water tank monitor; are affected: ProGauge MagLink LX 4: Versions prior to 4.20.3 ProGauge MagLink LX Plus: Versions prior to 4.20.3 ProGauge MagLink LX Ultimate: Versions prior to 5.20.3.; The following versions of ProGauge MagLink LX" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-261-07" ;
    icsa:vendor "Dover Fueling Solutions (DFS)" ;
    icsa:year 2025 .

icsa-res:ICSA-25-266-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-266-01" ;
    dcterms:issued "2025-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect CLICK PLUS" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-55069; CVE-2025-58069; CVE-2025-58473; CVE-2025-57882; CVE-2025-59484; CVE-2025-55038; CVE-2025-54855" ;
    icsa:cweNumber "CWE-404; CWE-862; CWE-321; CWE-312; CWE-327; CWE-337" ;
    icsa:hasCVE cve-res:CVE-2025-54855,
        cve-res:CVE-2025-55038,
        cve-res:CVE-2025-55069,
        cve-res:CVE-2025-57882,
        cve-res:CVE-2025-58069,
        cve-res:CVE-2025-58473,
        cve-res:CVE-2025-59484 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-321,
        cwe-res:CWE-327,
        cwe-res:CWE-337,
        cwe-res:CWE-404,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CLICK PLUS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following AutomationDirect products are affected: CLICK PLUS C0-0x CPU firmware: Versions prior to v3.71 CLICK PLUS C0-1x CPU firmware: Versions prior to v3.71 CLICK PLUS C2-x CPU firmware: Versions prior to v3.71." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-266-01" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2025 .

icsa-res:ICSA-25-266-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-266-02" ;
    dcterms:issued "2025-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC-Q Series CPU Module" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-8531" ;
    icsa:cweNumber "CWE-130" ;
    icsa:hasCVE cve-res:CVE-2025-8531 ;
    icsa:hasCWE cwe-res:CWE-130 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC-Q Series CPU module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mitsubishi Electric MELSEC-Q Series CPU modules are affected: MELSEC-Q Series Q03UDVCPU: The first 5 digits of serial No. '24082' to '27081' MELSEC-Q Series Q04UDVCPU: The first 5 digits of serial No. '24082' to '27081' MELSEC-Q Series Q06UDVCPU: The first 5 digits of serial No. '24082' to '27081' MELSEC-Q Series Q13UDVCPU: The first 5 digits of serial No. '24082' to '27081' MELSEC-Q Series Q26UDVCPU: The first 5 digits of serial No. '24082' to '27081' MELSEC-Q Series Q04UDPVCPU: The first 5 digits of serial No. '24082' to '27081' MELSEC-Q Series Q06UDPVCPU: The first 5 digits of serial No. '24082' to '27081' MELSEC-Q Series Q13UDPVCPU: The first 5 digits of serial No. '24082' to '27081' MELSEC-Q Series Q26UDPVCPU: The first 5 digits of serial No. '24082' to '27081'." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-266-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-266-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-266-03" ;
    dcterms:issued "2025-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SESU" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Healthcare and Public Health; Information Technology; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-5296" ;
    icsa:cweNumber "CWE-59" ;
    icsa:hasCVE cve-res:CVE-2025-5296 ;
    icsa:hasCWE cwe-res:CWE-59 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SESU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: Schneider Electric SESU: <3.0.12 Schneider Electric SESU installed on Schneider Electric BESS ANSI: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric Easergy MiCOM P30: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric Easergy MiCOM P40: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric Easergy Studio: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Automation Expert: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric Harmony XB5S Soft: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric eXLhoist Configuration Software: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Automation Device Maintenance: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Machine Expert: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Machine Expert Basic: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Automation Expert Motion: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Operator Terminal Expert: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Control Expert: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Process Expert: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Process Expert for AVEVA System Platform: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Architecture Builder: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Machine Expert HVAC: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Power Operations (EPO): SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Power Commission Desktop (EPC): SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Microgrid Operations Medium: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric EcoStruxure Microgrid Flex: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric PowerLogic P5: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric PowerLogic P7: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric ZelioSoft 2: SESU versions prior to 3.0.12 Schneider Electric SESU installed on Schneider Electric SoMove: SESU versions prior to 3.0.12." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-266-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-266-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-266-04" ;
    dcterms:issued "2025-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Viessmann Vitogate 300" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-9494; CVE-2025-9495" ;
    icsa:cweNumber "CWE-78; CWE-602" ;
    icsa:hasCVE cve-res:CVE-2025-9494,
        cve-res:CVE-2025-9495 ;
    icsa:hasCWE cwe-res:CWE-602,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vitogate 300" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Viessmann Vitogate 300 are affected: Vitogate 300: Versions prior to 3.1.0.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-266-04" ;
    icsa:vendor "Viessmann" ;
    icsa:year 2025 .

icsa-res:ICSA-25-268-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-268-01" ;
    dcterms:issued "2025-09-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dingtian DT-R002" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-10880; CVE-2025-10879" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2025-10879,
        cve-res:CVE-2025-10880 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DT-R002" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: DT-R002: All versions.; The following versions of Dingtian DT-R002; a relay board" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-268-01" ;
    icsa:vendor "Dingtian" ;
    icsa:year 2025 .

icsa-res:ICSA-25-273-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-273-01" ;
    dcterms:issued "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "MegaSys Enterprises Telenium Online Web Application" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Information Technology; Communications" ;
    icsa:cveNumber "CVE-2025-10659" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-10659 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Telenium Online Web Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following MegaSys Enerprises products are affected: Telenium Online Web Application: Versions 8.4.21 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-273-01" ;
    icsa:vendor "MegaSys Computer Technologies" ;
    icsa:year 2025 .

icsa-res:ICSA-25-273-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-273-02" ;
    dcterms:issued "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo SBRD-Q/SBOC-Q/SBOI-Q" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-27500; CVE-2021-27478; CVE-2021-27482; CVE-2021-27498" ;
    icsa:cweNumber "CWE-617; CWE-681; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2021-27478,
        cve-res:CVE-2021-27482,
        cve-res:CVE-2021-27498,
        cve-res:CVE-2021-27500 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-617,
        cwe-res:CWE-681 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SBRD-Q/SBOC-Q/SBOI-Q" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Festo reports that the following products are affected: Festo Firmware installed on Festo Hardware SBOC-Q-R1B: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R1B-S1: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R1C: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R1C-S1: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R2B: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R2B-S1: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R2C: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R3B-WB: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R3B-WB-S1: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R3C-WB: All versions Festo Firmware installed on Festo Hardware SBOC-Q-R3C-WB-S1: All versions Festo Firmware installed on Festo Hardware SBOI-Q-R1B: All versions Festo Firmware installed on Festo Hardware SBOI-Q-R1B-S1: All versions Festo Firmware installed on Festo Hardware SBOI-Q-R1C: All versions Festo Firmware installed on Festo Hardware SBOI-Q-R1C-S1: All versions Festo Firmware installed on Festo Hardware SBOI-Q-R3B-WB: All versions Festo Firmware installed on Festo Hardware SBOI-Q-R3B-WB-S1: All versions Festo Firmware installed on Festo Hardware SBOI-Q-R3C-WB: All versions Festo Firmware installed on Festo Hardware SBOI-Q-R3C-WB-S1: All versions Festo Firmware installed on Festo Hardware SBRD-Q: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-273-02" ;
    icsa:vendor "Festo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-273-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-273-03" ;
    dcterms:issued "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo CPX-CEC-C1 and CPX-CMXX" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3079" ;
    icsa:cweNumber "CWE-269" ;
    icsa:hasCVE cve-res:CVE-2022-3079 ;
    icsa:hasCWE cwe-res:CWE-269 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CPX-CEC-C1 and CPX-CMXX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Festo reports that the following products are affected: Festo Firmware installed on Festo Hardware Control block CPX-CEC-C1: Versions 2.0.12 and prior Festo Firmware installed on Festo Hardware Control block CPX-CMXX: Versions 1.2.34 rev.404 and prior Festo Firmware installed on Festo Hardware Control block-SET CPX-CEC-C1: Versions 1.2.34 rev.404 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-273-03" ;
    icsa:vendor "Festo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-273-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-273-04" ;
    dcterms:issued "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo Controller CECC-S,-LK,-D Family Firmware (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-22517; CVE-2022-22514; CVE-2019-9012; CVE-2018-20026; CVE-2010-5250; CVE-2019-13532; CVE-2020-15806; CVE-2019-9009; CVE-2020-10245; CVE-2020-7052; CVE-2020-12067; CVE-2019-18858; CVE-2018-10612; CVE-2021-33485; CVE-2020-12069; CVE-2019-9011; CVE-2021-36763; CVE-2019-13548; CVE-2021-29242; CVE-2018-20025; CVE-2019-5105; CVE-2019-9010; CVE-2022-22515; CVE-2022-22513; CVE-2021-29241; CVE-2017-3735; CVE-2021-36764; CVE-2019-9013; CVE-2018-0739; CVE-2022-22519; CVE-2019-13542; CVE-2019-9008; CVE-2020-12068" ;
    icsa:cweNumber "CWE-426; CWE-311; CWE-476; CWE-22; CWE-668; CWE-674; CWE-770; CWE-640; CWE-401; CWE-126; CWE-330; CWE-20; CWE-916; CWE-120; CWE-822; CWE-552; CWE-283; CWE-787; CWE-923; CWE-119; CWE-269; CWE-327; CWE-732; CWE-755" ;
    icsa:hasCVE cve-res:CVE-2010-5250,
        cve-res:CVE-2017-3735,
        cve-res:CVE-2018-0739,
        cve-res:CVE-2018-10612,
        cve-res:CVE-2018-20025,
        cve-res:CVE-2018-20026,
        cve-res:CVE-2019-13532,
        cve-res:CVE-2019-13542,
        cve-res:CVE-2019-13548,
        cve-res:CVE-2019-18858,
        cve-res:CVE-2019-5105,
        cve-res:CVE-2019-9008,
        cve-res:CVE-2019-9009,
        cve-res:CVE-2019-9010,
        cve-res:CVE-2019-9011,
        cve-res:CVE-2019-9012,
        cve-res:CVE-2019-9013,
        cve-res:CVE-2020-10245,
        cve-res:CVE-2020-12067,
        cve-res:CVE-2020-12068,
        cve-res:CVE-2020-12069,
        cve-res:CVE-2020-15806,
        cve-res:CVE-2020-7052,
        cve-res:CVE-2021-29241,
        cve-res:CVE-2021-29242,
        cve-res:CVE-2021-33485,
        cve-res:CVE-2021-36763,
        cve-res:CVE-2021-36764,
        cve-res:CVE-2022-22513,
        cve-res:CVE-2022-22514,
        cve-res:CVE-2022-22515,
        cve-res:CVE-2022-22517,
        cve-res:CVE-2022-22519 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-126,
        cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-269,
        cwe-res:CWE-283,
        cwe-res:CWE-311,
        cwe-res:CWE-327,
        cwe-res:CWE-330,
        cwe-res:CWE-401,
        cwe-res:CWE-426,
        cwe-res:CWE-476,
        cwe-res:CWE-552,
        cwe-res:CWE-640,
        cwe-res:CWE-668,
        cwe-res:CWE-674,
        cwe-res:CWE-732,
        cwe-res:CWE-755,
        cwe-res:CWE-770,
        cwe-res:CWE-787,
        cwe-res:CWE-822,
        cwe-res:CWE-916,
        cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Controller CECC-S,-LK,-D Family Firmware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Festo reports that the following products are affected: Festo Firmware (R05 (17.06.2016) = 2.3.8.0) installed on Festo Hardware Controller CECC-D (All versions): All versions Festo Firmware (R06 (11.10.2016) = 2.3.8.1) installed on Festo Hardware Controller CECC-LK (All versions): All versions Festo Firmware (R05 (17.06.2016) = 2.3.8.0) installed on Festo Hardware Controller CECC-S (All versions): All versions Festo Firmware (R06 (11.10.2016) = 2.3.8.1) installed on Festo Hardware Controller CECC-LK (All versions): All versions Festo Firmware (R05 (17.06.2016) = 2.3.8.0) installed on Festo Hardware Controller CECC-S (All versions): All versions Festo Firmware (R06 (11.10.2016) = 2.3.8.1) installed on Festo Hardware Controller CECC-S (All versions): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-273-04" ;
    icsa:vendor "Festo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-273-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-273-05" ;
    dcterms:issued "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "OpenPLC_V3" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-54811" ;
    icsa:cweNumber "CWE-758" ;
    icsa:hasCVE cve-res:CVE-2025-54811 ;
    icsa:hasCWE cwe-res:CWE-758 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenPLC_V3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OpenPLC_V3 are affected: OpenPLC_V3: Versions prior to pull request #292." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-273-05" ;
    icsa:vendor "OpenPLC_V3" ;
    icsa:year 2025 .

icsa-res:ICSA-25-273-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-273-06" ;
    dcterms:issued "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "National Instruments Circuit Design Suite" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Defense Industrial Base; Government Facilities" ;
    icsa:cveNumber "CVE-2025-6034; CVE-2025-6033" ;
    icsa:cweNumber "CWE-843; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-6033,
        cve-res:CVE-2025-6034 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Circuit Design Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following National Instruments products are affected: Circuit Design Suite: Versions v14.3.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-273-06" ;
    icsa:vendor "National Instruments Corp (NI)" ;
    icsa:year 2025 .

icsa-res:ICSA-25-273-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-273-07" ;
    dcterms:issued "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "LG Innotek Camera Multiple Models" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-10538" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-10538 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Camera Models LND7210 and LNV7210R" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following models of LG Innotek CCTV Cameras are affected: LG LND7210: All Versions LG LNV7210R: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-273-07" ;
    icsa:vendor "LG Innotek" ;
    icsa:year 2025 .

icsa-res:ICSA-25-275-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-275-01" ;
    dcterms:issued "2025-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Raise3D Pro2 Series 3D Printers" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-10653" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-10653 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro2 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following firmware versions of the Rasie3D Pro2 Series printers are affected: Pro2 Series: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-275-01" ;
    icsa:vendor "Raise3D" ;
    icsa:year 2025 .

icsa-res:ICSA-25-275-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-275-02" ;
    dcterms:issued "2025-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MSM Product" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-53429; CVE-2023-53155" ;
    icsa:cweNumber "CWE-79; CWE-617" ;
    icsa:hasCVE cve-res:CVE-2023-53155,
        cve-res:CVE-2024-53429 ;
    icsa:hasCWE cwe-res:CWE-617,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MSM Product" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports that the following products are affected: MSM: Versions 2.2.10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-275-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-280-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-280-01" ;
    dcterms:issued "2025-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAScreen" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-59299; CVE-2025-59297; CVE-2025-59298; CVE-2025-59300" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-59297,
        cve-res:CVE-2025-59298,
        cve-res:CVE-2025-59299,
        cve-res:CVE-2025-59300 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DIAScreen" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics DIAScreen are affected: DIAScreen: Version 1.6.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-280-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-282-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-282-01" ;
    dcterms:issued "2025-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Asset Suite (Update A)" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-10217" ;
    icsa:cweNumber "CWE-117" ;
    icsa:hasCVE cve-res:CVE-2025-10217 ;
    icsa:hasCWE cwe-res:CWE-117 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Asset Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Asset Suite are affected: Asset Suite: Versions 9.8 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-282-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-282-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-282-02" ;
    dcterms:issued "2025-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Lifecycle Services with Cisco" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-20352" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-20352 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Industrial Data Center (IDC) with Cisco Switching, IDC-Managed Support contract with Cisco Switching, Network-Managed Support contract with Cisco network switch, Firewall-Managed Support contract with Cisco firewall" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following Lifecycle Services with Cisco are affected: Industrial Data Center (IDC) with Cisco Switching: Generations 1 - 5; IDC-Managed Support contract with Cisco Switching: Generations 1 - 5; Network-Managed Support contract with Cisco network switch: All versions; Firewall-Managed Support contract with Cisco firewall: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-282-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-282-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-282-03" ;
    dcterms:issued "2025-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Stratix" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-20352" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-20352 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Stratix 5700, 5400, 5410, 5200, 5800" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Stratix 5700 is affected: Stratix 5700: Version v15.2(8)E7 and prior; Stratix 5400: Version v15.2(8)E7 and prior; Stratix 5410: Version v15.2(8)E7 and prior; Stratix 5200: Version v17.17.01 and prior; Stratix 5800: Version v17.17.01 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-282-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-287-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-287-01" ;
    dcterms:issued "2025-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1715 EtherNet/IP Comms Module" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9177; CVE-2025-9178" ;
    icsa:cweNumber "CWE-787; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-9177,
        cve-res:CVE-2025-9178 ;
    icsa:hasCWE cwe-res:CWE-770,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1715 EtherNet/IP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation 1715 EtherNet/IP Comms Module are affected: 1715 EtherNet/IP: Versions 3.003 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-287-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-01" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9064; CVE-2025-9063" ;
    icsa:cweNumber "CWE-22; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2025-9063,
        cve-res:CVE-2025-9064 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk View Machine Edition and PanelView Plus 7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7 are affected: FactoryTalk View Machine Edition: Versions prior to V15.00 (CVE-2025-9064) PanelView Plus 7: Version V14.100 (CVE-2025-9063)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-02" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Linx" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9068; CVE-2025-9067" ;
    icsa:cweNumber "CWE-268" ;
    icsa:hasCVE cve-res:CVE-2025-9067,
        cve-res:CVE-2025-9068 ;
    icsa:hasCWE cwe-res:CWE-268 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Linx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports that the following versions of the FactoryTalk Linx control system data communications platform are affected: FactoryTalk Linx: Versions 6.40 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-03" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk ViewPoint" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-9066" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2025-9066 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk ViewPoint" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following versions of PanelView Plus (which interacts with FactoryTalk ViewPoint) are affected by this vulnerability: PanelView Plus 7 Terminal: Version 14 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-04" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ArmorStart AOP" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9437" ;
    icsa:cweNumber "CWE-248" ;
    icsa:hasCVE cve-res:CVE-2025-9437 ;
    icsa:hasCWE cwe-res:CWE-248 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ArmorStart AOP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: ArmorStart AOP: Version V2.05.07 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-05" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40811; CVE-2025-40810; CVE-2025-40809; CVE-2025-40812" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-40809,
        cve-res:CVE-2025-40810,
        cve-res:CVE-2025-40811,
        cve-res:CVE-2025-40812 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Solid Edge SE2024: All versions < V224.0 Update 14 Siemens Solid Edge SE2025: All versions < V225.0 Update 6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-06" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SiPass Integrated" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-40773; CVE-2023-35002; CVE-2025-40772; CVE-2025-40774" ;
    icsa:cweNumber "CWE-119; CWE-79; CWE-639; CWE-257" ;
    icsa:hasCVE cve-res:CVE-2023-35002,
        cve-res:CVE-2025-40772,
        cve-res:CVE-2025-40773,
        cve-res:CVE-2025-40774 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-257,
        cwe-res:CWE-639,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SiPass integrated" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SiPass integrated: Versions prior to V3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-07" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC ET 200SP Communication Processors" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40771" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-40771 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC ET 200SP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0): vers:intdot/<2.4.24 Siemens SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0): vers:intdot/<2.4.24 Siemens SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0): vers:intdot/<2.4.24 Siemens SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0): vers:intdot/<2.4.24 Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0): vers:intdot/<2.4.24 Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0): vers:intdot/<2.4.24." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-08" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40755" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2025-40755 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SINEC NMS: Versions prior to V4.0 SP1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-09" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TeleControl Server Basic" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40765" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-40765 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TeleControl Server Basic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: TeleControl Server Basic V3.1: Version V3.1.2.2 and up to but not including V3.1.2.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-10" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens HyperLynx and Industrial Edge App Publisher" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-6554" ;
    icsa:cweNumber "CWE-843" ;
    icsa:hasCVE cve-res:CVE-2025-6554 ;
    icsa:hasCWE cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HyperLynx and Industrial Edge App Publisher" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens HyperLynx: vers:all/* Siemens Industrial Edge App Publisher: vers:intdot/<1.23.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-289-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-289-11" ;
    dcterms:issued "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MACH GWS" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-39205; CVE-2025-39201; CVE-2025-39203" ;
    icsa:cweNumber "CWE-295; CWE-276; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2025-39201,
        cve-res:CVE-2025-39203,
        cve-res:CVE-2025-39205 ;
    icsa:hasCWE cwe-res:CWE-276,
        cwe-res:CWE-295,
        cwe-res:CWE-354 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MACH GWS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of MACH GWS affected: MACH GWS: Versions 3.0.0.0 to 3.4.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-289-11" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-294-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-294-01" ;
    dcterms:issued "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1783-NATR" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7330; CVE-2025-7328; CVE-2025-7329" ;
    icsa:cweNumber "CWE-306; CWE-79; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2025-7328,
        cve-res:CVE-2025-7329,
        cve-res:CVE-2025-7330 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-352,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "1783-NATR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of 1783-NATR are affected: 1783-NATR: All versions prior to 1.006." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-294-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-294-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-294-02" ;
    dcterms:issued "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Compact GuardLogix 5370" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9124" ;
    icsa:cweNumber "CWE-248" ;
    icsa:hasCVE cve-res:CVE-2025-9124 ;
    icsa:hasCWE cwe-res:CWE-248 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Compact GuardLogix 5370" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Compact GuardLogix 5370 are affected: Compact GuardLogix 5370: All versions prior to 30.012." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-294-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-294-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-294-03" ;
    dcterms:issued "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1200 CPU V1/V2 Devices" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2011-20002; CVE-2011-20001" ;
    icsa:cweNumber "CWE-294; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2011-20001,
        cve-res:CVE-2011-20002 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SIMATIC S7-1200 CPU V1/V2 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants): All versions before 2.0.3 (CVE-2011-20001) SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants): All versions before 2.0.2 (CVE-2011-20002) SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants): All versions before 2.0.3 (CVE-2011-20001) SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants): All versions before 2.0.2 (CVE-2011-20002)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-294-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-294-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-294-04" ;
    dcterms:issued "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS Devices" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-41222; CVE-2025-41223; CVE-2025-41224; CVE-2023-52236" ;
    icsa:cweNumber "CWE-755; CWE-327; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2023-52236,
        cve-res:CVE-2025-41222,
        cve-res:CVE-2025-41223,
        cve-res:CVE-2025-41224 ;
    icsa:hasCWE cwe-res:CWE-327,
        cwe-res:CWE-693,
        cwe-res:CWE-755 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RUGGEDCOM ROS Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2025-41223) RUGGEDCOM RS8000H: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS930W: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS969: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS1600F: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2100 (32M) V5.X: All versions before 5.10.0 RUGGEDCOM M2200: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS930L: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2100: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS1600: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2100P (32M) V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900M-GETS-XX: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS8000A: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900L: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900M-GETS-C01: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900G (32M) V5.X: All versions before 5.10.0 RUGGEDCOM RS900GNC(32M) V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM i803: All versions (CVE-2023-52236; CVE-2025-41222; CVE-2025-41223) RUGGEDCOM RSG2288 V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900M-STND-XX: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS1600T: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2288 V5.X: All versions before 5.10.0 RUGGEDCOM RSG2288NC V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RSG2300 V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS401: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900NC(32M) V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RS900W: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900 (32M) V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS400: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM i802: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG909R: All versions before 5.10.0 RUGGEDCOM RSG910C: All versions before 5.10.0 RUGGEDCOM RSG920P V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS416PNCv2 V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RS416Pv2 V4.X: All versions (CVE-2023-52236; Siemens reports that the following products are affected: RUGGEDCOM i800: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS416v2 V5.X: All versions before 5.10.0 RUGGEDCOM RS8000: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900 (32M) V5.X: All versions before 5.10.0 RUGGEDCOM RS900G: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900GP: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2100 (32M) V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS910: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS940G: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM M969: All versions (CVE-2023-52236; CVE-2025-41223) Siemens RUGGEDCOM RSG920P V5.X: All versions before 5.10.0 RUGGEDCOM RSG920PNC V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RSL910: All versions before 5.10.0 RUGGEDCOM RSL910NC: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RST2228: All versions before 5.10.0 RUGGEDCOM RST2228P: All versions before 5.10.0 RUGGEDCOM RST916C: All versions before 5.10.0 RUGGEDCOM RMC8388 V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900G (32M) V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2300P V5.X: All versions before 5.10.0 RUGGEDCOM RSG2300PNC V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RSG2488 V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2300 V5.X: All versions before 5.10.0 RUGGEDCOM RSG2300NC V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RSG2300P V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS416NCv2 V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RS416P: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2488 V5.X: All versions before 5.10.0 RUGGEDCOM RSG2488NC V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RSG907R: All versions before 5.10.0 RUGGEDCOM RSG908C: All versions before 5.10.0 RUGGEDCOM RMC30: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM i801: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS416Pv2 V5.X: All versions before 5.10.0 RUGGEDCOM RS416v2 V4.X: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS8000T: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM M2100: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS416: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS920L: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS920W: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2100P (32M) V5.X: All versions before 5.10.0 RUGGEDCOM RSG2100PNC (32M) V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RSG2200: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS900M-STND-C01: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RMC8388 V5.X: All versions before 5.10.0 RUGGEDCOM RMC8388NC V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RP110: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RSG2100NC(32M) V5.X: All versions before 5.10.0 (CVE-2025-41224) RUGGEDCOM RSG2100P: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RST916P: All versions before 5.10.0.; CVE-2025-41223) RUGGEDCOM RS910L: All versions (CVE-2023-52236; CVE-2025-41223) RUGGEDCOM RS910W: All versions (CVE-2023-52236" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-294-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-294-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-294-05" ;
    dcterms:issued "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "CloudEdge Online Cameras and App" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-11757" ;
    icsa:cweNumber "CWE-155" ;
    icsa:hasCVE cve-res:CVE-2025-11757 ;
    icsa:hasCWE cwe-res:CWE-155 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CloudEdge App, CloudEdge Online Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following CloudEdge products are known to be affected: CloudEdge App: Version 4.4.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-294-05" ;
    icsa:vendor "CloudEdge" ;
    icsa:year 2025 .

icsa-res:ICSA-25-294-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-294-06" ;
    dcterms:issued "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Raisecomm RAX701-GC Series" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Information Technology; Communications" ;
    icsa:cveNumber "CVE-2025-11534" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-11534 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RAX701-GC-WP-01 P200R002C52, RAX701-GC-WP-01 P200R002C53" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: RAX701-GC-WP-01 P200R002C52: Firmware version 5.5.27_20190111 RAX701-GC-WP-01 P200R002C53: Firmware version 5.5.13_20180720 and version 5.5.36_20190709.; The following versions of Raisecomm RAX701-GC products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-294-06" ;
    icsa:vendor "Raisecomm" ;
    icsa:year 2025 .

icsa-res:ICSA-25-296-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-296-01" ;
    dcterms:issued "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect Productivity Suite" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-61934; CVE-2025-61977; CVE-2025-58456; CVE-2025-62688; CVE-2025-60023; CVE-2025-62498; CVE-2025-59776; CVE-2025-58078; CVE-2025-58429" ;
    icsa:cweNumber "CWE-23; CWE-640; CWE-732; CWE-1327" ;
    icsa:hasCVE cve-res:CVE-2025-58078,
        cve-res:CVE-2025-58429,
        cve-res:CVE-2025-58456,
        cve-res:CVE-2025-59776,
        cve-res:CVE-2025-60023,
        cve-res:CVE-2025-61934,
        cve-res:CVE-2025-61977,
        cve-res:CVE-2025-62498,
        cve-res:CVE-2025-62688 ;
    icsa:hasCWE cwe-res:CWE-1327,
        cwe-res:CWE-23,
        cwe-res:CWE-640,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Productivity Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following AutomationDirect Productivity PLCs are affected: Productivity Suite: v4.4.1.19 and prior Productivity 3000 P3-622 CPU: SW v4.4.1.19 and prior Productivity 3000 P3-550E CPU: SW v4.4.1.19 and prior Productivity 3000 P3-530 CPU: SW v4.4.1.19 and prior Productivity 2000 P2-622 CPU: SW v4.4.1.19 and prior Productivity 2000 P2-550 CPU: SW v4.4.1.19 and prior Productivity 1000 P1-550 CPU: SW v4.4.1.19 and prior Productivity 1000 P1-540 CPU: SW v4.4.1.19 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-296-01" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2025 .

icsa-res:ICSA-25-296-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-296-02" ;
    dcterms:issued "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "ASKI Energy ALS-Mini-S8 and ALS-Mini-S4" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9574" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-9574 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ALS-Mini-S8, ALS-mini-s4 IP" ;
    icsa:productDistribution "Europe" ;
    icsa:productsAffected "The following ASKI Energy products are affected: ALS-mini-s4 IP (serial number from 2000 to 5166): All versions ALS-mini-s8 IP (serial number from 2000 to 5166): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-296-02" ;
    icsa:vendor "ASKI Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-296-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-296-03" ;
    dcterms:issued "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Veeder-Root TLS4B Automatic Tank Gauge System" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-58428; CVE-2025-55067" ;
    icsa:cweNumber "CWE-77; CWE-190" ;
    icsa:hasCVE cve-res:CVE-2025-55067,
        cve-res:CVE-2025-58428 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TLS4B Automatic Tank Gauge System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Veeder-Root TLS4B Automatic Tank Gauge System are affected: TLS4B: Versions prior to 11.A." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-296-03" ;
    icsa:vendor "Veeder-Root" ;
    icsa:year 2025 .

icsa-res:ICSA-25-296-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-296-04" ;
    dcterms:issued "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics ASDA-Soft" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-62580; CVE-2025-62579" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-62579,
        cve-res:CVE-2025-62580 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ASDA-Soft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Electronics reports the following versions of ASDA-Soft servo software are affected: ASDA-Soft: Version 7.0.2.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-296-04" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-301-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-301-01" ;
    dcterms:issued "2025-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2024-10085" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2024-10085 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products are affected: EcoStruxure OPC UA Server Expert: Versions prior to SV2.01 SP3 EcoStruxure Modicon Communication Server: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-301-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-303-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-303-01" ;
    dcterms:issued "2025-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "International Standards Organization ISO 15118-2" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-12357" ;
    icsa:cweNumber "CWE-923" ;
    icsa:hasCVE cve-res:CVE-2025-12357 ;
    icsa:hasCWE cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EV Car Chargers - ISO 15118-2 Network and Application Protocol Requirements" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ISO 15118 part is affected: ISO 15118 standard: Part 15118-2 Network and Application Protocol Requirements." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-303-01" ;
    icsa:vendor "International Standards Organization (ISO)" ;
    icsa:year 2025 .

icsa-res:ICSA-25-303-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-303-02" ;
    dcterms:issued "2025-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy TropOS" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-1038; CVE-2025-1037; CVE-2025-1036" ;
    icsa:cweNumber "CWE-269; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-1036,
        cve-res:CVE-2025-1037,
        cve-res:CVE-2025-1038 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TropOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy reports TropOS wireless devices are affected when using the following firmware versions: TropOS 4th Gen Firmware: versions 8.9.6.0 and prior (CVE-2025-1036; CVE-2025-1037) TropOS 4th Gen Firmware: versions prior 8.9.6.0 (CVE-2025-1038)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-303-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-308-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-308-01" ;
    dcterms:issued "2025-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Monitouch V-SFT-6 (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-54496; CVE-2025-53524; CVE-2025-54526" ;
    icsa:cweNumber "CWE-122; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-53524,
        cve-res:CVE-2025-54496,
        cve-res:CVE-2025-54526 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Fuji Electric Monitouch V-SFT-6" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Fuji Electric Fuji Electric Monitouch V-SFT-6: 6.2.7.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-308-01" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-308-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-308-02" ;
    dcterms:issued "2025-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Survision License Plate Recognition Camera" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-12108" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-12108 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "License Plate Recognition (LPR) Camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Survision LPR Camera are affected: License Plate Recognition LPR Camera: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-308-02" ;
    icsa:vendor "Survision" ;
    icsa:year 2025 .

icsa-res:ICSA-25-308-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-308-03" ;
    dcterms:issued "2025-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-G2" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-58317" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-58317 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CNCSoft-G2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Delta Electronics CNCSoft-G2 are affected: CNCSoft-G2: Version 2.1.0.27 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-308-03" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-308-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-308-04" ;
    dcterms:issued "2025-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Radiometrics VizAir" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-54863; CVE-2025-61945; CVE-2025-61956" ;
    icsa:cweNumber "CWE-306; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2025-54863,
        cve-res:CVE-2025-61945,
        cve-res:CVE-2025-61956 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VizAir" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Radiometrics VizAir are affected: VizAir: Versions prior to 08/2025." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-308-04" ;
    icsa:vendor "Radiometrics" ;
    icsa:year 2025 .

icsa-res:ICSA-25-308-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-308-05" ;
    dcterms:issued "2025-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "IDIS ICM Viewer" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-12556" ;
    icsa:cweNumber "CWE-88" ;
    icsa:hasCVE cve-res:CVE-2025-12556 ;
    icsa:hasCWE cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ICM Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of ICM Viewer is affected: ICM Viewer: Version v1.6.0.10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-308-05" ;
    icsa:vendor "IDIS" ;
    icsa:year 2025 .

icsa-res:ICSA-25-310-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-310-01" ;
    dcterms:issued "2025-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech DeviceOn iEdge" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2025-59171; CVE-2025-58423; CVE-2025-64302; CVE-2025-62630" ;
    icsa:cweNumber "CWE-79; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2025-58423,
        cve-res:CVE-2025-59171,
        cve-res:CVE-2025-62630,
        cve-res:CVE-2025-64302 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DeviceOn/iEdge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of DeviceOn/iEdge; is affected: DeviceOn/iEdge: Version 2.0.2 and prior.; an IoT management platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-310-01" ;
    icsa:vendor "Advantech" ;
    icsa:year 2025 .

icsa-res:ICSA-25-310-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-310-02" ;
    dcterms:issued "2025-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ubia Ubox (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-12636" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2025-12636 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ubia Ubox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ubia Ubox IOS: <January_15_2026; Ubia Ubox Android: <January_15_2026" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-310-02" ;
    icsa:vendor "Ubia" ;
    icsa:year 2025 .

icsa-res:ICSA-25-310-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-310-03" ;
    dcterms:issued "2025-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB FLXeon Controllers" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-10207; CVE-2024-48851; CVE-2024-48842; CVE-2025-10205" ;
    icsa:cweNumber "CWE-798; CWE-759; CWE-1287" ;
    icsa:hasCVE cve-res:CVE-2024-48842,
        cve-res:CVE-2024-48851,
        cve-res:CVE-2025-10205,
        cve-res:CVE-2025-10207 ;
    icsa:hasCWE cwe-res:CWE-1287,
        cwe-res:CWE-759,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FBXi, FBVi, FBTi, CBXi" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following ABB FLXeon products are affected: FBXi-8R8-X96 (2CQG201028R1011): Versions 9.3.5 and prior FBXi-8R8-H-X96 (2CQG201029R1011): Versions 9.3.5 and prior FBXi-X256 (2CQG201014R1021): Versions 9.3.5 and prior FBXi-X48 (2CQG201018R1021): Versions 9.3.5 and prior FBXi-8R8-X96-S (2CQG201606R1011): Versions 9.3.5 and prior FBVi-2U4-4T (2CQG201015R1021 ): Versions 9.3.5 and prior FBVi-2U4-4T-IMP (2CQG201016R1021): Versions 9.3.5 and prior FBVi-2U4-4T-SI: Versions 9.3.5 and prior FBTi-7T7-1U1R (2CQG201022R1011): Versions 9.3.5 and prior FBTi-6T1-1U1R (2CQG201022R1011): Versions 9.3.5 and prior CBXi-8R8 (2CQG201001R1021): Versions 9.3.5 and prior CBXi-8R8-H (2CQG201001R1021): Versions 9.3.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-310-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-01" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-10259" ;
    icsa:cweNumber "CWE-1284" ;
    icsa:hasCVE cve-res:CVE-2025-10259 ;
    icsa:hasCWE cwe-res:CWE-1284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MELSEC iQ-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Mitsubishi Electric MELSEC iQ-F Series are affected: FX5U-32MT/ES: All versions FX5U-32MT/DS: All versions FX5U-32MT/ESS: All versions FX5U-32MT/DSS: All versions FX5U-64MT/ES: All versions FX5U-64MT/DS: All versions FX5U-64MT/ESS: All versions FX5U-64MT/DSS: All versions FX5U-80MT/ES: All versions FX5U-80MT/DS: All versions FX5U-80MT/ESS: All versions FX5U-80MT/DSS: All versions FX5U-32MR/ES: All versions FX5U-32MR/DS: All versions FX5U-64MR/ES: All versions FX5U-64MR/DS: All versions FX5U-80MR/ES: All versions FX5U-80MR/DS: All versions FX5UC-32MT/D: All versions FX5UC-32MT/DSS: All versions FX5UC-64MT/D: All versions FX5UC-64MT/DSS: All versions FX5UC-96MT/D: All versions FX5UC-96MT/DSS: All versions FX5UC-32MT/DS-TS: All versions FX5UC-32MT/DSS-TS: All versions FX5UC-32MR/DS-TS: All versions FX5UJ-24MT/ES: All versions FX5UJ-24MT/DS: All versions FX5UJ-24MT/ESS: All versions FX5UJ-24MT/DSS: All versions FX5UJ-40MT/ES: All versions FX5UJ-40MT/DS: All versions FX5UJ-40MT/ESS: All versions FX5UJ-40MT/DSS: All versions FX5UJ-60MT/ES: All versions FX5UJ-60MT/DS: All versions FX5UJ-60MT/ESS: All versions FX5UJ-60MT/DSS: All versions FX5UJ-24MR/ES: All versions FX5UJ-24MR/DS: All versions FX5UJ-40MR/ES: All versions FX5UJ-40MR/DS: All versions FX5UJ-60MR/ES: All versions FX5UJ-60MR/DS: All versions FX5UJ-24MR/ES-A: All versions FX5UJ-24MT/ES-A: All versions FX5UJ-40MR/ES-A: All versions FX5UJ-40MT/ES-A: All versions FX5UJ-60MR/ES-A: All versions FX5UJ-60MT/ES-A: All versions FX5S-30MT/ES: All versions FX5S-30MT/DS: All versions FX5S-30MT/ESS: All versions FX5S-30MT/DSS: All versions FX5S-40MT/ES: All versions FX5S-40MT/DS: All versions FX5S-40MT/ESS: All versions FX5S-40MT/DSS: All versions FX5S-60MT/ES: All versions FX5S-60MT/DS: All versions FX5S-60MT/ESS: All versions FX5S-60MT/DSS: All versions FX5S-80MT/ES: All versions FX5S-80MT/DS: All versions FX5S-80MT/ESS: All versions FX5S-80MT/DSS: All versions FX5S-30MR/ES: All versions FX5S-30MR/DS: All versions FX5S-40MR/ES: All versions FX5S-40MR/DS: All versions FX5S-60MR/ES: All versions FX5S-60MR/DS: All versions FX5S-80MR/ES: All versions FX5S-80MR/DS: All versions FX5S-30MR/ES-A: All versions FX5S-30MT/ES-A: All versions FX5S-40MR/ES-A: All versions FX5S-40MT/ES-A: All versions FX5S-60MR/ES-A: All versions FX5S-60MT/ES-A: All versions FX5S-80MR/ES-A: All versions FX5S-80MT/ES-A: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-02" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Application Server IDE" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-8386" ;
    icsa:cweNumber "CWE-80" ;
    icsa:hasCVE cve-res:CVE-2025-8386 ;
    icsa:hasCWE cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Application Server IDE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of AVEVA Application Server are affected: Application Server: Versions 2023 R2 SP1 P02 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-02" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-03" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Edge" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9317" ;
    icsa:cweNumber "CWE-327" ;
    icsa:hasCVE cve-res:CVE-2025-9317 ;
    icsa:hasCWE cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a HMI/SCADA software; The following versions of AVEVA Edge (formerly InduSoft Web Studio); are affected: Edge: Versions 2023 R2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-03" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-04" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Brightpick Mission Control / Internal Logic Control (Update A)" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Slovakia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-64308; CVE-2025-64309; CVE-2025-64307" ;
    icsa:cweNumber "CWE-306; CWE-523" ;
    icsa:hasCVE cve-res:CVE-2025-64307,
        cve-res:CVE-2025-64308,
        cve-res:CVE-2025-64309 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-523 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Brightpick Mission Control / Internal Logic Control (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Brightpick Mission Control / Internal Logic Control <1.67.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-04" ;
    icsa:vendor "Brightpick AI" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-05" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Verve Asset Manager" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11862" ;
    icsa:cweNumber "CWE-863" ;
    icsa:hasCVE cve-res:CVE-2025-11862 ;
    icsa:hasCWE cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Verve Asset Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Verve Asset Manager: Version 1.33 Verve Asset Manager: Version 1.34 Verve Asset Manager: Version 1.35 Verve Asset Manager: Version 1.36 Verve Asset Manager: Version 1.37 Verve Asset Manager: Version 1.38 Verve Asset Manager: Version 1.39 Verve Asset Manager: Version 1.40 Verve Asset Manager: Version 1.41 Verve Asset Manager: Version 1.41.1 Verve Asset Manager: Version 1.41.2 Verve Asset Manager: Version 1.41.3.; an OT cybersecurity platform; The following versions of Verve Asset Manager" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-06" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Studio 5000 Simulation Interface" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11696; CVE-2025-11697" ;
    icsa:cweNumber "CWE-22; CWE-918" ;
    icsa:hasCVE cve-res:CVE-2025-11696,
        cve-res:CVE-2025-11697 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Studio 5000 Simulation Interface" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Rockwell Automation Studio 5000 Simulation Interface are affected: Studio 5000 Simulation Interface: Version 2.02 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-07" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk DataMosaix Private Cloud" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11084; CVE-2025-11085" ;
    icsa:cweNumber "CWE-116; CWE-1390" ;
    icsa:hasCVE cve-res:CVE-2025-11084,
        cve-res:CVE-2025-11085 ;
    icsa:hasCWE cwe-res:CWE-116,
        cwe-res:CWE-1390 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk DataMosaix Private Cloud" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "8.00; The following versions of FactoryTalk DataMosaix Private Cloud are affected: FactoryTalk DataMosaix Private Cloud: Versions 7.11; 8.01 (CVE-2025-11084) FactoryTalk DataMosaix Private Cloud: Versions 7.11; 8.00 (CVE-2025-11085)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-08" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "General Industrial Controls Lynx+ Gateway" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-59780; CVE-2025-58083; CVE-2025-55034; CVE-2025-62765" ;
    icsa:cweNumber "CWE-306; CWE-319; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2025-55034,
        cve-res:CVE-2025-58083,
        cve-res:CVE-2025-59780,
        cve-res:CVE-2025-62765 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lynx+ Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Lynx+ Gateway are affected: Lynx+ Gateway: Version R08 Lynx+ Gateway: Version V03 Lynx+ Gateway: Version V05 Lynx+ Gateway: Version V18." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-08" ;
    icsa:vendor "General Industrial Controls" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-09" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Policy Manager" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-22019" ;
    icsa:cweNumber "CWE-404" ;
    icsa:hasCVE cve-res:CVE-2024-22019 ;
    icsa:hasCWE cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FactoryTalk Policy Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "deploy; Rockwell Automation reports that the following versions of FactoryTalk Policy Manager; and manage system-wide security policies using CIP Security and OPC UA standards; a software tool that enables OT teams to design; are affected: FactoryTalk Policy Manager: Versions 6.51.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-09" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-10" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation AADvance-Trusted SIS Workstation" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-48510" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2024-48510 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AADvance-Trusted SIS Workstation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation reports the following versions of AADvance-Trusted SIS Workstation; are affected: AADvance-Trusted SIS Workstation: Versions 2.00.00 to 2.00.04.; a software suite for developing and managing safety instrumented system (SIS) applications" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-10" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-11" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM P850 family and SICAM P855 family" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-31238; CVE-2023-30901" ;
    icsa:cweNumber "CWE-732; CWE-352" ;
    icsa:hasCVE cve-res:CVE-2023-30901,
        cve-res:CVE-2023-31238 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SICAM P850 family and SICAM P855 family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SICAM P850 (7KG8500-0AA00-0AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA02-2AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA11-0AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA11-2AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA12-0AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA12-2AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA31-0AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA31-2AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA32-0AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA32-2AA0): Versions prior to 3.11 SICAM P855 (7KG8550-0AA00-0AA0): Versions prior to 3.11 SICAM P850 (7KG8500-0AA00-2AA0): Versions prior to 3.11 SICAM P855 (7KG8550-0AA00-2AA0): Versions prior to 3.11 SICAM P855 (7KG8550-0AA10-0AA0): Versions prior to 3.11 SICAM P855 (7KG8550-0AA10-2AA0): Versions prior to 3.11 SICAM P855 (7KG8550-0AA30-0AA0): Versions prior to 3.11 SICAM P855 (7KG8550-0AA30-2AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA01-0AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA01-2AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA02-0AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA02-2AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA11-0AA0): Versions prior to 3.11 SICAM P850 (7KG8500-0AA10-0AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA11-2AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA12-0AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA12-2AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA31-0AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA31-2AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA32-0AA0): Versions prior to 3.11 SICAM P855 (7KG8551-0AA32-2AA0): Versions prior to 3.11 SICAM P850 (7KG8500-0AA10-2AA0): Versions prior to 3.11 SICAM P850 (7KG8500-0AA30-0AA0): Versions prior to 3.11 SICAM P850 (7KG8500-0AA30-2AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA01-0AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA01-2AA0): Versions prior to 3.11 SICAM P850 (7KG8501-0AA02-0AA0): Versions prior to 3.11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-12" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Spectrum Power 4" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-32014; CVE-2024-32010; CVE-2024-32011; CVE-2024-32008; CVE-2024-32009" ;
    icsa:cweNumber "CWE-732; CWE-648; CWE-266; CWE-829" ;
    icsa:hasCVE cve-res:CVE-2024-32008,
        cve-res:CVE-2024-32009,
        cve-res:CVE-2024-32010,
        cve-res:CVE-2024-32011,
        cve-res:CVE-2024-32014 ;
    icsa:hasCWE cwe-res:CWE-266,
        cwe-res:CWE-648,
        cwe-res:CWE-732,
        cwe-res:CWE-829 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Spectrum Power 4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Spectrum Power 4: Versions prior to V4.70 SP12 Update 2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-13" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! 8 BM Devices" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-40815; CVE-2025-40816; CVE-2025-40817" ;
    icsa:cweNumber "CWE-306; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2025-40815,
        cve-res:CVE-2025-40816,
        cve-res:CVE-2025-40817 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LOGO! 8 BM Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: LOGO! 12/24RCE (6ED1052-1MD08-0BA2): All versions SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2): All versions SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2): All versions SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2): All versions SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2): All versions SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2): All versions SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2): All versions SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2): All versions LOGO! 12/24RCEo (6ED1052-2MD08-0BA2): All versions LOGO! 230RCE (6ED1052-1FB08-0BA2): All versions LOGO! 230RCEo (6ED1052-2FB08-0BA2): All versions LOGO! 24CE (6ED1052-1CC08-0BA2): All versions LOGO! 24CEo (6ED1052-2CC08-0BA2): All versions LOGO! 24RCE (6ED1052-1HB08-0BA2): All versions LOGO! 24RCEo (6ED1052-2HB08-0BA2): All versions SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-14" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40744" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2025-40744 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Solid Edge SE2025: All versions prior to V225.0 Update 11." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-15" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-0056; CVE-2023-45133" ;
    icsa:cweNumber "CWE-184; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2023-45133,
        cve-res:CVE-2024-0056 ;
    icsa:hasCWE cwe-res:CWE-184,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "COMOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens COMOS with COMOS Web deployed: Versions prior to 10.4.5 (CVE-2023-45133) Siemens COMOS that use COMOS Snapshots component: Versions prior to 10.4.5 (CVE-2024-0056)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-16" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Altair Grid Engine" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40760; CVE-2025-40763" ;
    icsa:cweNumber "CWE-209; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2025-40760,
        cve-res:CVE-2025-40763 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Altair Grid Engine" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Altair Grid Engine are affected: Altair Grid Engine: All versions prior to V2026.0.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-317-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-317-17" ;
    dcterms:issued "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Software Center and Solid Edge" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40827" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2025-40827 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Software Center and Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Siemens Software Center and Solid Edge are affected: Siemens Software Center: All versions prior to 3.5 Solid Edge SE2025: All versions prior to V225.0 Update 10." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-317-17" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-322-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-322-01" ;
    dcterms:issued "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-9317" ;
    icsa:cweNumber "CWE-327" ;
    icsa:hasCVE cve-res:CVE-2025-9317 ;
    icsa:hasCWE cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EcoStruxure Machine SCADA Expert &amp; Pro-face BLUE Open Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric reports that the following products use an affected AVEVA component: EcoStruxure Machine SCADA Expert: Versions prior to 2023.1 Patch 1 Pro-face BLUE Open Studio: Versions prior to 2023.1 Patch 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-322-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-322-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-322-02" ;
    dcterms:issued "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Shelly Pro 4PM" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Bulgaria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11243" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-11243 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro 4PM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a smart DIN rail switch; The following version of Pro 4PM; is affected: Pro 4PM: prior to v1.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-322-02" ;
    icsa:vendor "Shelly" ;
    icsa:year 2025 .

icsa-res:ICSA-25-322-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-322-03" ;
    dcterms:issued "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Shelly Pro 3EM" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Bulgaria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-12056" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-12056 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pro 3EM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Pro 3EM; is affected: Pro 3EM: all versions.; a smart DIN rail switch" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-322-03" ;
    icsa:vendor "Shelly" ;
    icsa:year 2025 .

icsa-res:ICSA-25-322-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-322-04" ;
    dcterms:issued "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerChute Serial Shutdown" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11566; CVE-2025-11565; CVE-2025-11567" ;
    icsa:cweNumber "CWE-22; CWE-276; CWE-307" ;
    icsa:hasCVE cve-res:CVE-2025-11565,
        cve-res:CVE-2025-11566,
        cve-res:CVE-2025-11567 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-276,
        cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PowerChute Serial Shutdown" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Schneider Electric PowerChute Serial Shutdown are affected: Schneider Electric PowerChute Serial Shutdown: Versions 1.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-322-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-322-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-322-05" ;
    dcterms:issued "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "METZ CONNECT EWIO2" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-41737; CVE-2025-41733; CVE-2025-41734; CVE-2025-41735; CVE-2025-41736" ;
    icsa:cweNumber "CWE-434; CWE-305; CWE-284; CWE-98; CWE-35" ;
    icsa:hasCVE cve-res:CVE-2025-41733,
        cve-res:CVE-2025-41734,
        cve-res:CVE-2025-41735,
        cve-res:CVE-2025-41736,
        cve-res:CVE-2025-41737 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-305,
        cwe-res:CWE-35,
        cwe-res:CWE-434,
        cwe-res:CWE-98 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EWIO2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "METZ CONNECT reports that the following products are affected: METZ CONNECT Firmware (<2.2.0) installed on METZ CONNECT Hardware EWIO2-M: All versions METZ CONNECT Firmware (<2.2.0) installed on METZ CONNECT Hardware EWIO2-M-BM: All versions METZ CONNECT Firmware (<2.2.0) installed on METZ CONNECT Hardware EWIO2-BM: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-322-05" ;
    icsa:vendor "METZ CONNECT" ;
    icsa:year 2025 .

icsa-res:ICSA-25-324-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-324-01" ;
    dcterms:issued "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Automated Logic WebCTRL Premium Server" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8528; CVE-2024-8527" ;
    icsa:cweNumber "CWE-79; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2024-8527,
        cve-res:CVE-2024-8528 ;
    icsa:hasCWE cwe-res:CWE-601,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WebCTRL Premium Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Automated Logic products are affected: Automated Logic WebCTRL Server: Version 6.1 Automated Logic WebCTRL Server: Version 7.0 Automated Logic WebCTRL Server: Version 8.0 Automated Logic WebCTRL Server: Version 8.5 Carrier i-Vu: Version 6.1 Carrier i-Vu: Version 7.0 Carrier i-Vu: Version 8.0 Carrier i-Vu: Version 8.5 Automated Logic SiteScan Web: Version 6.1 Automated Logic SiteScan Web: Version 7.0 Automated Logic SiteScan Web: Version 8.0 Automated Logic SiteScan Web: Version 8.5 Automated Logic WebCTRL for OEMs: Version 6.1 Automated Logic WebCTRL for OEMs: Version 7.0 Automated Logic WebCTRL for OEMs: Version 8.0 Automated Logic WebCTRL for OEMs: Version 8.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-324-01" ;
    icsa:vendor "Automated Logic" ;
    icsa:year 2025 .

icsa-res:ICSA-25-324-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-324-02" ;
    dcterms:issued "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "ICAM365 CCTV Camera Multiple Models" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-62674; CVE-2025-64770" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-62674,
        cve-res:CVE-2025-64770 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "P201 and QC021" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following iCam365 camera model is affected: ROBOT PT Camera P201: Versions 43.4.0.0 and prior Night Vision Camera QC021: Versions 43.4.0.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-324-02" ;
    icsa:vendor "iCam365" ;
    icsa:year 2025 .

icsa-res:ICSA-25-324-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-324-03" ;
    dcterms:issued "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Opto 22 GRV-EPIC and GRV-RIO" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-13087" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-13087 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GRV-EPIC-PR1, GRV-EPIC-PR2, groov RIO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of GRV Programmable Logic Controllers are affected: GRV-EPIC-PR1 Firmware: Versions prior to 4.0.3 GRV-EPIC-PR2 Firmware: Versions prior to 4.0.3 groov RIO GRV-R7-MM1001-10 Firmware: Versions prior to 4.0.3 groov RIO GRV-R7-MM2001-10 Firmware: Versions prior to 4.0.3 groov RIO GRV-R7-I1VAPM-3 Firmware: Versions prior to 4.0.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-324-03" ;
    icsa:vendor "Opto 22" ;
    icsa:year 2025 .

icsa-res:ICSA-25-324-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-324-04" ;
    dcterms:issued "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo MSE6-C2M/D2M/E2M" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-3634" ;
    icsa:cweNumber "CWE-912" ;
    icsa:hasCVE cve-res:CVE-2023-3634 ;
    icsa:hasCWE cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MSE6-C2M/D2M/E2M" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Festo reports the following products are affected: MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L4-AGD: All versions MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L5-AGD: All versions MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L4-MQ1-AGD: All versions MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L5-MQ1-AGD: All versions MSE6-C2M-5000-FB44-D-M-RG-BAR-AMI-AGD: All versions MSE6-C2M-5000-FB44-D-RG-BAR-AMI-AGD: All versions MSE6-D2M-5000-CBUS-S-RG-BAR-VCB-AGD: All versions MSE6-E2M-5000-FB13-AGD: All versions MSE6-E2M-5000-FB36-AGD: All versions MSE6-E2M-5000-FB37-AGD: All versions MSE6-E2M-5000-FB43-AGD: All versions MSE6-E2M-5000-FB44-AGD: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-324-04" ;
    icsa:vendor "Festo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-324-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-324-05" ;
    dcterms:issued "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo Didactic products" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-26293" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2023-26293 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Didactic products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Festo reports that the following products contain affected versions of Siemens TIA-Portal: Siemens TIA-Portal V15 prior to V17 Update 6 installed on Festo Hardware MES PC: All versions Siemens TIA-Portal V18 prior to V18 Update 1 installed on Festo Hardware MES PC: All versions Siemens TIA-Portal V15 prior to V17 Update 6 installed on Festo Hardware TP260 (<June2023): All versions Siemens TIA-Portal V18 prior to V18 Update 1 installed on Festo Hardware TP260 (<June2023): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-324-05" ;
    icsa:vendor "Festo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-324-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-324-06" ;
    dcterms:issued "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Emerson Appleton UPSMON-PRO" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-3871" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-3871 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Appleton UPSMON-PRO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Emerson products are affected: Appleton UPSMON-PRO: Versions 2.6 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-324-06" ;
    icsa:vendor "Emerson" ;
    icsa:year 2025 .

icsa-res:ICSA-25-329-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-329-01" ;
    dcterms:issued "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-65087; CVE-2025-65088; CVE-2025-65086; CVE-2025-65085; CVE-2025-65084" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-65084,
        cve-res:CVE-2025-65085,
        cve-res:CVE-2025-65086,
        cve-res:CVE-2025-65087,
        cve-res:CVE-2025-65088 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ashlar-Vellum Lithium: <=12.6.1204.216; Ashlar-Vellum Cobalt: <=12.6.1204.216; Ashlar-Vellum Argon: <=12.6.1204.216; Ashlar-Vellum Cobalt Share: <=12.6.1204.216; Ashlar-Vellum Xenon: <=12.6.1204.216" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-329-01" ;
    icsa:vendor "Ashlar-Vellum" ;
    icsa:year 2025 .

icsa-res:ICSA-25-329-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-329-02" ;
    dcterms:issued "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena Simulation" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11918" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-11918 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Arena Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Rockwell Automation products are affected: Arena Simulation: Version 16.20.10 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-329-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-329-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-329-03" ;
    dcterms:issued "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Zenitel TCIV-3+" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Belgium" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-64126; CVE-2025-64127; CVE-2025-64128; CVE-2025-64130; CVE-2025-64129" ;
    icsa:cweNumber "CWE-79; CWE-78; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-64126,
        cve-res:CVE-2025-64127,
        cve-res:CVE-2025-64128,
        cve-res:CVE-2025-64129,
        cve-res:CVE-2025-64130 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TCIV-3+" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of TCIV-3+ are affected: TCIV-3+: All versions prior to 9.3.3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-329-03" ;
    icsa:vendor "Zenitel" ;
    icsa:year 2025 .

icsa-res:ICSA-25-329-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-329-04" ;
    dcterms:issued "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Opto 22 groov View" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-13084" ;
    icsa:cweNumber "CWE-1230" ;
    icsa:hasCVE cve-res:CVE-2025-13084 ;
    icsa:hasCWE cwe-res:CWE-1230 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "groov View" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of groov View are affected: groov View Server for Windows: Versions R1.0a to R4.5d GRV-EPIC-PR1 Firmware: Versions prior to 4.0.3 GRV-EPIC-PR2 Firmware: Versions prior to 4.0.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-329-04" ;
    icsa:vendor "Opto 22" ;
    icsa:year 2025 .

icsa-res:ICSA-25-329-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-329-05" ;
    dcterms:issued "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo Compact Vision System, Control Block, Controller, and Operator Unit products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-22515; CVE-2022-31806" ;
    icsa:cweNumber "CWE-1188; CWE-668" ;
    icsa:hasCVE cve-res:CVE-2022-22515,
        cve-res:CVE-2022-31806 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Compact Vision System, Control Block, Controller, and Operator Unit products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Festo reports that the following products are affected: Festo Software Compact Vision System SBO -Q- : All Versions Festo Software Control block CPX-CEC-C1 Codesys V2: All Versions Festo Software Control block CPX-CEC-C1-V3 Codesys V3: All Versions Festo Software Control block CPX-CEC Codesys V2: All Versions Festo Software Control block CPX-CEC-M1 Codesys V2: All Versions Festo Software Control block CPX-CEC-M1-V3 Codesys V3: All Versions Festo Software Control block CPX-CEC-S1-V3 Codesys V3: All Versions Festo Software Control block CPX-CMXX: All Versions Festo Software Controller CECC-D: All Versions Festo Software Controller CECC-D-BA: All Versions Festo Software Controller CECC-D-CS: All Versions Festo Software Controller CECC-LK: All Versions Festo Software Controller CECC-S: All Versions Festo Software Controller CECC-X-M1: All Versions Festo Software Controller CECC-X-M1-MV: All Versions Festo Software Controller CECC-X-M1-S1: All Versions Festo Software Controller CECX-X-C1: All Versions Festo Software Controller CECX-X-M1: All Versions Festo Software Controller CPX-E-CEC-C1: All Versions Festo Software Controller CPX-E-CEC-C1-EP: All Versions Festo Software Controller CPX-E-CEC-C1-PN: All Versions Festo Software Controller CPX-E-CEC-M1: All Versions Festo Software Controller CPX-E-CEC-M1-EP: All Versions Festo Software Controller CPX-E-CEC-M1-PN: All Versions Festo Software Controller FED-CEC: All Versions Festo Software Operator unit CDPX-X-A-S-10: All Versions Festo Software Operator unit CDPX-X-A-W-13: All Versions Festo Software Operator unit CDPX-X-A-W-4: All Versions Festo Software Operator unit CDPX-X-A-W-7: All Versions Festo Software Operator unit CDPX-X-E1-W-10: All Versions Festo Software Operator unit CDPX-X-E1-W-15: All Versions Festo Software Operator unit CDPX-X-E1-W-7: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-329-05" ;
    icsa:vendor "Festo" ;
    icsa:year 2025 .

icsa-res:ICSA-25-329-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-329-06" ;
    dcterms:issued "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-11-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "SiRcom SMART Alert (SiSA)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Emergency Services; Government Facilities; Defense Industrial Base" ;
    icsa:cveNumber "CVE-2025-13483" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-13483 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SMART Alert (SiSA)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: SMART Alert (SiSA): Version 3.0.48.; The following versions of SiRcom SMART Alert (SiSA); a central control system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-329-06" ;
    icsa:vendor "SiRcom" ;
    icsa:year 2025 .

icsa-res:ICSA-25-336-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-336-01" ;
    dcterms:issued "2025-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Industrial Video & Control Longwatch" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-13658" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2025-13658 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Longwatch" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a video surveillance and monitoring system; are affected: Longwatch: Versions 6.309 to 6.334.; The following versions of Industrial Video & Control Longwatch" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-336-01" ;
    icsa:vendor "Industrial Video and Control" ;
    icsa:year 2025 .

icsa-res:ICSA-25-336-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-336-02" ;
    dcterms:issued "2025-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Iskra iHUB and iHUB Lite" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Slovenia" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-13510" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-13510 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iHUB and iHUB Lite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Iskra iHUB and iHUB Lite; a Smart Metering Gateway and Data Concentrator; are affected: iHUB and iHUB Lite: All Versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-336-02" ;
    icsa:vendor "Iskra" ;
    icsa:year 2025 .

icsa-res:ICSA-25-338-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-338-01" ;
    dcterms:issued "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GX Works2" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-3784" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2025-3784 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GX Works2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of GX Works2 are affected: GX Works2: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-338-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-338-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-338-02" ;
    dcterms:issued "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "MAXHUB Pivot" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2025-53704" ;
    icsa:cweNumber "CWE-640" ;
    icsa:hasCVE cve-res:CVE-2025-53704 ;
    icsa:hasCWE cwe-res:CWE-640 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MAXHUB Pivot" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MAXHUB reports the following versions of MAXHUB Pivot are affected: Pivot client application: All versions prior to v1.36.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-338-02" ;
    icsa:vendor "MAXHUB" ;
    icsa:year 2025 .

icsa-res:ICSA-25-338-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-338-03" ;
    dcterms:issued "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-26381" ;
    icsa:cweNumber "CWE-425" ;
    icsa:hasCVE cve-res:CVE-2025-26381 ;
    icsa:hasCWE cwe-res:CWE-425 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenBlue Mobile Web Application for OpenBlue Workplace" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace are affected: OpenBlue Mobile Web Application for OpenBlue Workplace: Version 2025.1.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-338-03" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-338-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-338-04" ;
    dcterms:issued "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls iSTAR" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-61736" ;
    icsa:cweNumber "CWE-298" ;
    icsa:hasCVE cve-res:CVE-2025-61736 ;
    icsa:hasCWE cwe-res:CWE-298 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iSTAR eX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra, iSTAR Ultra SE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Johnson Controls iSTAR are affected: iSTAR eX: All versions prior to TLS 1.2 iSTAR Edge: All versions prior to TLS 1.2 iSTAR Ultra LT (if in TLS 1.2): All versions prior to TLS 1.2 iSTAR Ultra (if in TLS 1.2): All versions prior to TLS 1.2 iSTAR Ultra SE (if in TLS 1.2): All versions prior to TLS 1.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-338-04" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-338-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-338-05" ;
    dcterms:issued "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Sunbird DCIM dcTrack and Power IQ" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-66238; CVE-2025-66237" ;
    icsa:cweNumber "CWE-798; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-66237,
        cve-res:CVE-2025-66238 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DCIM dcTrack, Power IQ" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Sunbird products are affected: DCIM dcTrack: Versions v9.2.0 and prior Power IQ: Versions v9.2.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-338-05" ;
    icsa:vendor "Sunbird" ;
    icsa:year 2025 .

icsa-res:ICSA-25-338-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-338-06" ;
    dcterms:issued "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "SolisCloud Monitoring Platform" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-13932" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2025-13932 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Monitoring Platform (Cloud API &amp; Device Control API)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SolisCloud Monitoring Platform are affected: Monitoring Platform (Cloud API & Device Control API): API v1 and API v2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-338-06" ;
    icsa:vendor "SolisCloud" ;
    icsa:year 2025 .

icsa-res:ICSA-25-338-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-338-07" ;
    dcterms:issued "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech iView" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2025-13373" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2025-13373 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Advantech products are affected: iView: 5.7.05.7057." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-338-07" ;
    icsa:vendor "Advantech" ;
    icsa:year 2025 .

icsa-res:ICSA-25-343-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-343-01" ;
    dcterms:issued "2025-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Universal Boot Loader (U-Boot) (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Emergency Services; Energy; Financial Services; Food and Agriculture; Government Facilities; Healthcare and Public Health; Information Technology; Water and Wastewater Systems; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-24857" ;
    icsa:cweNumber "CWE-1274" ;
    icsa:hasCVE cve-res:CVE-2025-24857 ;
    icsa:hasCWE cwe-res:CWE-1274 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Universal Boot Loader (U-Boot)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "U-Boot U-boot versions prior to 2017.11: Qualcomm_IPQ8064; U-Boot U-boot versions prior to 2017.11: Qualcomm_IPQ5322; U-Boot U-boot versions prior to 2017.11: Qualcomm_IPQ9574; U-Boot U-boot versions prior to 2017.11: Johnson_Controls_Airwall_AW-75; U-Boot U-boot: <2017.11; U-Boot U-boot versions prior to 2017.11: Qualcomm_IPQ6018; U-Boot U-boot versions prior to 2017.11: Qualcomm_IPQ8074; U-Boot U-boot versions prior to 2017.11: Qualcomm_IPQ5018; U-Boot U-boot versions prior to 2017.11: Qualcomm_IPQ4019" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-343-01" ;
    icsa:vendor "U-Boot" ;
    icsa:year 2025 .

icsa-res:ICSA-25-343-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-343-02" ;
    dcterms:issued "2025-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo LX Appliance" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2021-23414" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-23414 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "LX Appliance" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Festo reports that the following products are affected: Festo Software LX Appliance: Versions prior to June 2023." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-343-02" ;
    icsa:vendor "Festo SE & Co. KG" ;
    icsa:year 2025 .

icsa-res:ICSA-25-343-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-343-03" ;
    dcterms:issued "2025-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Multiple India-based CCTV Cameras (Update A)" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan, India" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-13607" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-13607 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Multiple India-based CCTV Cameras" ;
    icsa:productDistribution "India" ;
    icsa:productsAffected "Sparsh Securitech IP CCTV Cameras: vers:all/*; Securus CCTV Purple Series: <15-12-2025; D-Link (India Limited) DCS-F5614-L1: <=v1.03.038" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-343-03" ;
    icsa:vendor "D-Link (India Limited), Sparsh Securitech, Securus CCTV" ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-01" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls iSTAR" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-43876; CVE-2025-43875" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-43875,
        cve-res:CVE-2025-43876 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls reports the following products are affected: iSTAR Ultra: Versions prior to 6.9.7.CU01 iSTAR Ultra SE: Versions prior to 6.9.7.CU01 iSTAR Ultra G2: Versions prior to 6.9.3 iSTAR Ultra G2 SE: Versions prior to 6.9.3 iSTAR Edge G2: Versions prior to 6.9.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-02" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls iSTAR Ultra" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2025-43874; CVE-2025-43873" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-43873,
        cve-res:CVE-2025-43874 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2, iSTAR Ultra LT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of iSTAR Ultra and iSTAR Edge door controllers are affected: iSTAR Ultra: Versions prior to 6.9.7.CU01 iSTAR Ultra SE: Versions prior to 6.9.7.CU01 iSTAR Ultra LT: Versions prior to 6.9.7.CU01 iSTAR Ultra G2: Versions prior to 6.9.3 iSTAR Ultra G2 SE: Versions prior to 6.9.3 iSTAR Edge G2: Versions prior to 6.9.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-03" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "AzeoTech DAQFactory (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-66588; CVE-2025-66585; CVE-2025-66590; CVE-2025-66586; CVE-2025-66589" ;
    icsa:cweNumber "CWE-824; CWE-416; CWE-787; CWE-843; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-66585,
        cve-res:CVE-2025-66586,
        cve-res:CVE-2025-66588,
        cve-res:CVE-2025-66589,
        cve-res:CVE-2025-66590 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787,
        cwe-res:CWE-824,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AzeoTech DAQFactory" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AzeoTech DAQFactory: <=20.7_Build_2555" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-03" ;
    icsa:vendor "AzeoTech" ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-04" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens IAM Client" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40800" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2025-40800 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IAM Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: COMOS V10.6: All versions NX V2412: All versions prior to 2412.8700 NX V2506: All versions prior to 2506.6000 Simcenter 3D: All versions prior to 2506.6000 Simcenter Femap: All versions prior to 2506.0002 Solid Edge SE2025: All versions prior to V225.0 Update 10 Solid Edge SE2026: All versions prior to V226.0 Update 1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-05" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Advanced Licensing (SALT) Toolkit" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40801" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2025-40801 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Advanced Licensing (SALT) Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: COMOS V10.6: All versions JT Bi-Directional Translator for STEP: All versions NX V2412: Versions prior to 2412.8900 NX V2506: Versions prior to 2506.6000 Simcenter 3D: Versions prior to 2506.6000 Simcenter Femap: Versions prior to 2506.0002 Simcenter Studio: All versions Simcenter System Architect: All versions Tecnomatix Plant Simulation: Versions prior to 2504.0007." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-06" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEMA Remote Connect Server" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40818; CVE-2025-40819" ;
    icsa:cweNumber "CWE-732; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2025-40818,
        cve-res:CVE-2025-40819 ;
    icsa:hasCWE cwe-res:CWE-732,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SINEMA Remote Connect Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: SINEMA Remote Connect Server: All versions prior to V3.2 SP4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-07" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Building X - Security Manager Edge Controller" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-31807" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2022-31807 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Building X - Security Manager Edge Controller (ACC-AP)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports the following products are affected: Building X - Security Manager Edge Controller (ACC-AP): All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-08" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Energy Services" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-59392" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-59392 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Energy Services" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following products are affected: Siemens Energy Services: All versions with G5DFR." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-09" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Gridscale X Prepay" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-40806; CVE-2025-40807" ;
    icsa:cweNumber "CWE-294; CWE-204" ;
    icsa:hasCVE cve-res:CVE-2025-40806,
        cve-res:CVE-2025-40807 ;
    icsa:hasCWE cwe-res:CWE-204,
        cwe-res:CWE-294 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Gridscale X Prepay" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens reports that the following product is affected: Gridscale X Prepay: Version prior to 4.2.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-345-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-345-10" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "OpenPLC_V3 (Update A)" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-13970; CVE-2026-28205; CVE-2026-35556; CVE-2026-35063" ;
    icsa:cweNumber "CWE-1188; CWE-352; CWE-256; CWE-862" ;
    icsa:hasCVE cve-res:CVE-2025-13970,
        cve-res:CVE-2026-28205,
        cve-res:CVE-2026-35063,
        cve-res:CVE-2026-35556 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-256,
        cwe-res:CWE-352,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenPLC_V3 (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OpenPLC_V3 OpenPLC_V3: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-345-10" ;
    icsa:vendor "OpenPLC_V3" ;
    icsa:year 2025 .

icsa-res:ICSA-25-350-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-350-01" ;
    dcterms:issued "2025-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Guralp Systems FMUS (Fortimus) Series and MIN (Minimus) Series" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-14466" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-14466 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Guralp Systems Fortimus Series, Minimus Series, and Certimus Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Guralp Systems Minimus Series: vers:all/*; Guralp Systems Certimus Series: vers:all/*; Guralp Systems Fortimus Series: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-350-01" ;
    icsa:vendor "Guralp Systems" ;
    icsa:year 2025 .

icsa-res:ICSA-25-350-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-350-02" ;
    dcterms:issued "2025-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls PowerG, IQPanel and IQHub (Update A)" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-26379; CVE-2025-61738; CVE-2025-61739; CVE-2025-61740" ;
    icsa:cweNumber "CWE-319; CWE-323; CWE-338; CWE-346" ;
    icsa:hasCVE cve-res:CVE-2025-26379,
        cve-res:CVE-2025-61738,
        cve-res:CVE-2025-61739,
        cve-res:CVE-2025-61740 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-323,
        cwe-res:CWE-338,
        cwe-res:CWE-346 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls PowerG, IQPanel and IQHub" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls Inc. IQPanel 2+: vers:all/*; Johnson Controls Inc. PowerG: <=53.02; Johnson Controls Inc. IQHub: vers:all/*; Johnson Controls Inc. IQPanel 4: <4.6.1; Johnson Controls Inc. IQPanel 2: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-350-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2025 .

icsa-res:ICSA-25-350-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-350-03" ;
    dcterms:issued "2025-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy AFS, AFR and AFF Series" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-3596" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2024-3596 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy AFS, AFR and AFF Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hitachi Energy AFS 670 v2.0: vers:all/*; Hitachi Energy AFS 677: vers:all/*; Hitachi Energy AFS 665-B/S: vers:all/*; Hitachi Energy AFS 650: vers:all/*; Hitachi Energy AFS 660-B/C/S: vers:all/*; Hitachi Energy AFR 677: vers:all/*; Hitachi Energy AFF 665: vers:all/*; Hitachi Energy AFS 655: vers:all/*; Hitachi Energy AFS 670: vers:all/*; Hitachi Energy AFF 660: vers:all/*; Hitachi Energy AFS 675: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-350-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2025 .

icsa-res:ICSA-25-350-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-350-04" ;
    dcterms:issued "2025-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GT Designer3" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11009" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2025-11009 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric GT Designer3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric GT Designer3 Version1 (GOT1000): vers:all/*; Mitsubishi Electric GT Designer3 Version1 (GOT2000): vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-350-04" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-352-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-352-01" ;
    dcterms:issued "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition (Update A)" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2025-13911" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2025-13911 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Inductive Automation Ignition (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ignition 8.1.x|8.3.x" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-352-01" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-352-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-352-02" ;
    dcterms:issued "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Foxboro DCS Advisor" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-59287" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-59287 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Foxboro DCS Advisor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Foxboro DCS Advisor services ()" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-352-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-352-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-352-03" ;
    dcterms:issued "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "National Instruments LabView" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Defense Industrial Base; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-64469; CVE-2025-64464; CVE-2025-64462; CVE-2025-64466; CVE-2025-64463; CVE-2025-64465; CVE-2025-64467; CVE-2025-64468; CVE-2025-64461" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-64461,
        cve-res:CVE-2025-64462,
        cve-res:CVE-2025-64463,
        cve-res:CVE-2025-64464,
        cve-res:CVE-2025-64465,
        cve-res:CVE-2025-64466,
        cve-res:CVE-2025-64467,
        cve-res:CVE-2025-64468,
        cve-res:CVE-2025-64469 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "National Instruments LabView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "National Instruments LabVIEW: 2021; National Instruments LabVIEW: 2023; National Instruments LabVIEW: 2024; National Instruments LabVIEW: <=2025_Q3; National Instruments LabVIEW: 2022" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-352-03" ;
    icsa:vendor "National Instruments Corp (NI)" ;
    icsa:year 2025 .

icsa-res:ICSA-25-352-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-352-04" ;
    dcterms:issued "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electrics Products" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan, United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11774" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-11774 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electrics Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric ICONICS Suite: <=10.97.2_CFR_3; Mitsubishi Electric GENESIS64: <=10.97.2_CFR_3; Mitsubishi Electric MC Works64: vers:all/*; Mitsubishi Electric MobileHMI: <=10.97.2_CFR_3; Mitsubishi Electric Iconics Digital Solutions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-352-04" ;
    icsa:vendor "Mitsubishi Electric Iconics Digital Solutions, Mitsubishi Electric" ;
    icsa:year 2025 .

icsa-res:ICSA-25-352-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-352-05" ;
    dcterms:issued "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Interniche IP-Stack" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40820" ;
    icsa:cweNumber "CWE-940" ;
    icsa:hasCVE cve-res:CVE-2025-40820 ;
    icsa:hasCWE cwe-res:CWE-940 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Interniche IP-Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0); SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0); SIPLUS S7-1200 CPU 1214C AC/DC/RLY (6AG1214-1BG40-2XB0); SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL00-0AB0); SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0); SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0); SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0); SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants); DI 8x24VDC; SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL00-2AB0); SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0); M12-L (6ES7148-6JG00-0BB0); SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1); SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0); SIDOOR ATE530G COATED (6FB1221-5SM10-7BP0); SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0); SIPLUS S7-1200 CPU 1214C DC/DC/RLY (6AG1214-1HG40-4XB0); SIPLUS S7-1200 CPU 1214C AC/DC/RLY (6AG1214-1BG40-4XB0); SIPLUS HCS4200 CIM4210C (6BK1942-1AA00-0AA1); DI 16x24VDC; SIMATIC CFU PA (6ES7655-5PX11-0XX0); SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0); SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0); SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0); CM 8x IO-Link (6ES7148-7JH00-0BB0); SIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0); SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0); SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0); SIMATIC CFU PA (6ES7655-5PX11-1XX0); SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0); SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0); SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1); SIPLUS HCS4300 CIM4310 (6BK1943-1AA00-0AA0); SIPLUS S7-1200 CPU 1214C DC/DC/DC (6AG1214-1AG40-4XB0); SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0); SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM00-0AB0); SIMATIC ET 200eco PN; SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0); SIPLUS S7-1200 CPU 1215C AC/DC/RLY (6AG1215-1BG40-2XB0); SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0); SIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0); SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0); SIPLUS S7-1200 CPU 1214C DC/DC/DC (6AG1214-1AG40-5XB0); SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0); SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0); SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0); SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0); SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0); DQ 8x24VDC/2A; SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0); M12-L (6ES7141-6BH00-0BB0); SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0); SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0); DQ 8x24VDC/0; SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0); SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0); SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0); SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0); SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0); SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA1); SIWAREX WP231 (7MH4960-2AA01); DIQ 16x24VDC/2A; SIDOOR ATE530S COATED; SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0); SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0); SIPLUS S7-1200 CPU 1214C DC/DC/RLY (6AG1214-1HG40-5XB0); SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-7AB0); SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0); SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0); SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0); CM 8x IO-Link; SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1); SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0); SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM00-0AB0); SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0); M12-L (6ES7143-6BH00-0BB0); SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0); SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-2AB0); DI 16x24VDC (6ES7141-7BH00-0BB0); CM 4x IO-Link; SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0); SIMOCODE pro V PROFINET; SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0); SIMATIC CFU DIQ (6ES7655-5PX31-1XX0); SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0); M12-L (6ES7144-6JF00-0BB0); SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK00-0AB0); SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0); SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0); SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK00-2AB0); SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0); SIPLUS S7-1200 CPU 1214C DC/DC/DC (6AG1214-1AG40-2XB0); SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0); SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0); M12-L (6ES7142-6BR00-0BB0); SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1); SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0); SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0); SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0); SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0); SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN00-0AB0); SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0); SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0); SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0); SIWAREX WP251 (7MH4960-6AA01); SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0); Base Module (6ES7972-5AA10-0AB0); SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0); M12-L (6ES7142-6BG00-0BB0); SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0); SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0); SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1); SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0); SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0); SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0); SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0); SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0); SIMATIC Power Line Booster PLB; 5A; SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0); SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0); SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants); SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0); SIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0); AI 8xRTD/TC; M12-L (6ES7148-6JE00-0BB0); SIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0); SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0); SIWAREX WP241 (7MH4960-4AA01); SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0); SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0); SINUMERIK 840D sl; 5A (6ES7143-7BH00-0BB0); SIWAREX WP521 ST (7MH4980-1AA01); SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0); SIPLUS S7-1200 CPU 1212C AC/DC/RLY (6AG1212-1BE40-2XB0); SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0); SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0); SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0); SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0); SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0); SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0); SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0); SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK00-2AB0); SIMATIC TDC CP51M1; SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0); Modem Module ST (6ES7972-5AA51-0AB0); SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0); SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants); SIMATIC TDC CPU555; SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0); SIDOOR ATD430W; SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0); SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0); SIMATIC ET 200clean; SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0); SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants); SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN00-2AB0); SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0); SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0); SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0); SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA1); SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0); DIQ 16x24VDC/0; SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0); SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL00-0AB0); SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1); SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0); M12-L (6ES7141-6BG00-0BB0); SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants); SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0); SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0); SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0); SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0); SIWAREX WP522 ST (7MH4980-2AA01); SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0); M12-L (6ES7148-6JJ00-0BB0); SIPLUS HCS4200 CIM4210 (6BK1942-1AA00-0AA0); SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL00-2AB0); SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN00-0AB0); SIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0); SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0); SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0); SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK00-2AB0)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-352-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2025 .

icsa-res:ICSA-25-352-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-352-06" ;
    dcterms:issued "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Advantech WebAccess/SCADA" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-14849; CVE-2025-67653; CVE-2025-46268; CVE-2025-14850; CVE-2025-14848" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-89; CWE-36" ;
    icsa:hasCVE cve-res:CVE-2025-14848,
        cve-res:CVE-2025-14849,
        cve-res:CVE-2025-14850,
        cve-res:CVE-2025-46268,
        cve-res:CVE-2025-67653 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-36,
        cwe-res:CWE-434,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Advantech WebAccess/SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Advantech WebAccess/SCADA: 9.2.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-352-06" ;
    icsa:vendor "Advantech" ;
    icsa:year 2025 .

icsa-res:ICSA-25-352-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-352-07" ;
    dcterms:issued "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Micro820, Micro850, Micro870" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-13824; CVE-2025-13823" ;
    icsa:cweNumber "CWE-1395; CWE-763" ;
    icsa:hasCVE cve-res:CVE-2025-13823,
        cve-res:CVE-2025-13824 ;
    icsa:hasCWE cwe-res:CWE-1395,
        cwe-res:CWE-763 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Micro820, Micro850, Micro870" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation Micro820: <=V14.011" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-352-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2025 .

icsa-res:ICSA-25-352-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-25-352-08" ;
    dcterms:issued "2025-12-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Axis Communications Camera Station Pro, Camera Station, and Device Manager (Update B)" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-30025; CVE-2025-30024; CVE-2025-30026; CVE-2025-30023" ;
    icsa:cweNumber "CWE-295; CWE-502; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-30023,
        cve-res:CVE-2025-30024,
        cve-res:CVE-2025-30025,
        cve-res:CVE-2025-30026 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-295,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Axis Communications Camera Station Pro, Camera Station, and Device Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Axis Communications AXIS Camera Station Pro: <6.9; Axis Communications AXIS Device Manager: <5.32; Axis Communications AXIS Camera Station: <5.58" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-25-352-08" ;
    icsa:vendor "Axis Communications" ;
    icsa:year 2025 .

icsa-res:ICSA-26-006-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-006-01" ;
    dcterms:issued "2026-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Columbia Weather Systems MicroServer" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2025-61939; CVE-2025-64305; CVE-2025-66620" ;
    icsa:cweNumber "CWE-313; CWE-553; CWE-923" ;
    icsa:hasCVE cve-res:CVE-2025-61939,
        cve-res:CVE-2025-64305,
        cve-res:CVE-2025-66620 ;
    icsa:hasCWE cwe-res:CWE-313,
        cwe-res:CWE-553,
        cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Columbia Weather Systems MicroServer" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Columbia Weather Systems MicroServer firmware: <MS_4.1_14142" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-006-01" ;
    icsa:vendor "Columbia Weather Systems" ;
    icsa:year 2026 .

icsa-res:ICSA-26-008-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-008-01" ;
    dcterms:issued "2026-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Asset Suite" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-10492" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-10492 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy Asset Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Asset Suite versions 9.7 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-008-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-013-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-013-01" ;
    dcterms:issued "2026-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 432ES-IG3 Series A" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9368" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-9368 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation 432ES-IG3 Series A" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation 432ES-IG3 Series A: V1.001" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-013-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-013-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-013-02" ;
    dcterms:issued "2026-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk DataMosaix Private Cloud" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-12807" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2025-12807 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FactoryTalk DataMosaix Private Cloud" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation FactoryTalk DataMosaix Private Cloud: 8.01; Rockwell Automation FactoryTalk DataMosaix Private Cloud: 8.00; Rockwell Automation FactoryTalk DataMosaix Private Cloud: 7.11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-013-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-013-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-013-03" ;
    dcterms:issued "2026-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "YoSmart YoLink Smart Hub" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-59449; CVE-2025-59448; CVE-2025-59451; CVE-2025-59452" ;
    icsa:cweNumber "CWE-319; CWE-340; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2025-59448,
        cve-res:CVE-2025-59449,
        cve-res:CVE-2025-59451,
        cve-res:CVE-2025-59452 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-340,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "YoSmart YoLink Smart Hub" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "YoSmart server: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-013-03" ;
    icsa:vendor "YoSmart" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-01" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Process Optimization" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-61937; CVE-2025-65117; CVE-2025-64729; CVE-2025-61943; CVE-2025-65118; CVE-2025-64691; CVE-2025-64769" ;
    icsa:cweNumber "CWE-94; CWE-676; CWE-862; CWE-89; CWE-427; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2025-61937,
        cve-res:CVE-2025-61943,
        cve-res:CVE-2025-64691,
        cve-res:CVE-2025-64729,
        cve-res:CVE-2025-64769,
        cve-res:CVE-2025-65117,
        cve-res:CVE-2025-65118 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-427,
        cwe-res:CWE-676,
        cwe-res:CWE-862,
        cwe-res:CWE-89,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA Process Optimization" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA Process Optimization: <=2024.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-02" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo Firmware" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-3270" ;
    icsa:cweNumber "CWE-1059" ;
    icsa:hasCVE cve-res:CVE-2022-3270 ;
    icsa:hasCWE cwe-res:CWE-1059 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Festo Firmware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Motor controller CMMO-ST-C5-1-DIOP: All versions; Control block CPX-CEC-M1: All versions; Compact Vision System SBO*-Q-*: All versions; Control block CPX-CEC-C1: All versions; Bus node CPX-FB36: All versions; Control block CPX-CEC-S1-V3: All versions; Servo drive CMMT-ST-C8-1C-PN-S0: All versions; Operator unit CDPX-X-A-W-4: All versions; EtherNet/IP interface CPX-AP-I-EP-M12: All versions; Bus node CPX-M-FB44: All versions; Bus node CPX-M-FB35: All versions; Controller CECC-D: All versions; Compact Vision System SBO*-C-*: All versions; Bus node CPX-FB32: All versions; Control block CPX-CMXX: All versions; Controller CECC-D-BA: All versions; Bus node CTEU-PN-EX1C: All versions; Controller CECC-S: All versions; Motor controller CMMO-ST-C5-1-LKP: All versions; Operator unit CDPX-X-A-S-10: All versions; Integrated drive EMCA-EC-67-*: All versions; Controller CECX-X-M1: All versions; Control block CPX-CEC-M1-V3: All versions; Bus node CTEU-EP: All versions; Control block CPX-FEC-1-IE: All versions; Motor controller CMMT-AS-*: All versions; VTEM-S1-*: All versions; Bus module CPX-E-PN: All versions; Gateway CPX-IOT: All versions; Controller CECC-LK: All versions; Bus node CPX-M-FB45: All versions; Camera system CHB-C-N: All versions; Control block CPX-CEC-C1-V3(All versions): All versions; Operator unit CDPX-X-A-W-7: All versions; Bus node CPX-FB33: All versions; Compact Vision System SBO*-M-*: All versions; Controller CMXH-ST2-C5-7-DIOP: All versions; Motor controller CMMP-AS-*: All versions; Bus module CPX-E-EP: All versions; Controller SBRD-Q: All versions; Servo drive CMMT-ST-C8-1C-EP-S0: All versions; Motor controller CMMO-ST-C5-1-DION: All versions; Operator unit CDPX-X-A-W-13: All versions; Bus node CPX-FB43: All versions; Planar surface gantry EXCM-*: All versions; Bus node CPX-FB40: All versions; EtherNet/IP interface CPX-AP-I-PN-M12: All versions; Bus node CPX-FB39: All versions; Bus node CPX-FB37: All versions; Bus node CTEU-PN: All versions; Control block CPX-CEC: All versions; Controller CPX-E-CEC-*: All versions; Bus node CPX-M-FB34: All versions; Controller CECC-X-*: All versions; Controller CECX-X-C1: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-02" ;
    icsa:vendor "Festo" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-03" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TeleControl Server Basic" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-40942" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2025-40942 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens TeleControl Server Basic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "TeleControl Server Basic <V3.1.2.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-04" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC and SIPLUS products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40944" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2025-40944 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC and SIPLUS products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0); SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0); SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0); SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0); SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0); SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0); SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0); SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0); SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0); SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants); SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0); SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0); SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0); SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0); SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0); SIMATIC ET 200SP IM 155-6 PN R1 (6ES7155-6AU00-0HM0); SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-05" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROS" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40935" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-40935 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM ROS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM RSG2300P V5.X; RUGGEDCOM RS900 (32M) V5.X; RUGGEDCOM RSG907R; RUGGEDCOM RMC8388 V5.X; RUGGEDCOM RST916C; RUGGEDCOM RS900G (32M) V5.X; RUGGEDCOM RST2228P; RUGGEDCOM RSG2288 V5.X; RUGGEDCOM RS416v2 V5.X; RUGGEDCOM RSG920P V5.X; RUGGEDCOM RST916P; RUGGEDCOM RSG908C; RUGGEDCOM RSL910; RUGGEDCOM RSG2100 (32M) V5.X; RUGGEDCOM RSG2300 V5.X; RUGGEDCOM RST2228; RUGGEDCOM RSG910C; RUGGEDCOM RSG2488 V5.X; RUGGEDCOM RS416Pv2 V5.X; RUGGEDCOM RSG2100P (32M) V5.X; RUGGEDCOM RSG909R" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-06" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC Security Monitor" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40830; CVE-2025-40831" ;
    icsa:cweNumber "CWE-20; CWE-285" ;
    icsa:hasCVE cve-res:CVE-2025-40830,
        cve-res:CVE-2025-40831 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEC Security Monitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SINEC Security Monitor" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-07" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 Devices" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40898; CVE-2025-40892; CVE-2025-40891; CVE-2025-40893" ;
    icsa:cweNumber "CWE-79; CWE-22" ;
    icsa:hasCVE cve-res:CVE-2025-40891,
        cve-res:CVE-2025-40892,
        cve-res:CVE-2025-40893,
        cve-res:CVE-2025-40898 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM APE1808 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM APE1808" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-08" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Devices" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40805" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2025-40805 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Industrial Edge Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC IPC BX-59A Industrial Edge Device; SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0); flange on top) (6AV2128-3XB27-0AX0); Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1); Industrial Edge Cloud Device (IECD); SIMATIC HMI MTP2200 Comfort Pro for stand (expandable; SIMATIC Automation Workstation 19\" (6AV7256-6CA01-0FP0); flange on top) (6AV2128-3QB27-0AX0); SIMATIC HMI MTP700; SIMATIC IPC127E Industrial Edge Device; SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1); SIMATIC HMI MTP700Â Unified Comfort Panel (6AV2128-3GB06-0AX1); SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable; flange at the bottom) (6AV2128-3XB27-1BX0); SIMATIC IPC227E Industrial Edge Device; SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable; SIMATIC HMI MTP1900 Comfort Pro for stand (expandable; SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1); SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable; SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1); flange on top) (6AV2128-3UB57-0AX0); SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable; Industrial Edge Virtual Device (IEVD); SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable; flange on top) (6AV2128-3MB27-0AX0); SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable; SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable; round tube) and extensio (6AV2128-3QB57-0BX0); SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable; SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable; SIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1); round tube) and extension unit (6AV2128-3MB27-0BX0); round tube) and extensio (6AV2128-3MB57-0BX0); SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable; SIMATIC IPC427E Industrial Edge Device; SIMATIC IPC227G Industrial Edge Device; SIMATIC IPC847E Industrial Edge Device; SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0); SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable; SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1); flange at the bottom) (6AV2128-3MB27-1BX0); SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0); flange at the bottom) (6AV2128-3QB57-1BX0); SCALANCE LPE9433 (6GK5998-3GS11-2AC2); SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0); round tube) and extension unit (6AV2128-3QB27-0BX0); SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable; SIMATIC IPC BX-39A Industrial Edge Device; SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1); SIMATIC HMI MTP1000; SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0); SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable; flange at the bottom) (6AV2128-3QB27-1BX0); SIMATIC Automation Workstation 24\" (6AV7256-6CA00-0FP0); round tube) and extension unit (6AV2128-3UB27-0BX0); flange at the bottom) (6AV2128-3MB57-1BX0); SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0); SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0); SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1); SCALANCE LPE9413 (6GK5998-3GS01-2AC2); round tube) and extensio (6AV2128-3XB57-0BX0); flange on top) (6AV2128-3XB57-0AX0); Unified Comfort Panel neutral (6AV2128-3KB36-0AX1); SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1); SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable; SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0); flange on top) (6AV2128-3MB57-0AX0); SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0); SIMATIC HMI MTP1500 Comfort Pro for stand (expandable; flange on top) (6AV2128-3UB27-0AX0); SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0); SIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1); SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0); flange on top) (6AV2128-3QB57-0AX0); SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable; SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1); SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1); round tube) and extension unit (6AV2128-3XB27-0BX0); round tube) and extensio (6AV2128-3UB57-0BX0); SIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1); SIMATIC HMI MTP1200 Comfort Pro for stand (expandable; SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable; flange at the bottom) (6AV2128-3UB57-1BX0); Industrial Edge Own Device (IEOD); SIMATIC IOT2050 (6ES7647-0BA00-1YA2); SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable; flange at the bottom) (6AV2128-3UB27-1BX0); SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable; SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable; flange at the bottom) (6AV2128-3XB57-1BX0); SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0); SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-09" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Device Kit" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40805" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2025-40805 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Industrial Edge Device Kit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Industrial Edge Device Kit - arm64 V1.14; Industrial Edge Device Kit - x86-64 V1.18; Industrial Edge Device Kit - arm64 V1.20; Industrial Edge Device Kit - x86-64 V1.10; Industrial Edge Device Kit - arm64 V1.19; Industrial Edge Device Kit - arm64 V1.22; Industrial Edge Device Kit - arm64 V1.15; Industrial Edge Device Kit - x86-64 V1.16; Industrial Edge Device Kit - x86-64 V1.7; Industrial Edge Device Kit - x86-64 V1.8; Industrial Edge Device Kit - x86-64 V1.23; Industrial Edge Device Kit - x86-64 V1.11; Industrial Edge Device Kit - x86-64 V1.5; Industrial Edge Device Kit - x86-64 V1.12; Industrial Edge Device Kit - arm64 V1.21; Industrial Edge Device Kit - arm64 V1.7; Industrial Edge Device Kit - x86-64 V1.14; Industrial Edge Device Kit - x86-64 V1.17; Industrial Edge Device Kit - arm64 V1.11; Industrial Edge Device Kit - arm64 V1.23; Industrial Edge Device Kit - arm64 V1.24; Industrial Edge Device Kit - arm64 V1.12; Industrial Edge Device Kit - x86-64 V1.6; Industrial Edge Device Kit - x86-64 V1.22; Industrial Edge Device Kit - x86-64 V1.15; Industrial Edge Device Kit - x86-64 V1.19; Industrial Edge Device Kit - x86-64 V1.9; Industrial Edge Device Kit - arm64 V1.6; Industrial Edge Device Kit - arm64 V1.9; Industrial Edge Device Kit - arm64 V1.17; Industrial Edge Device Kit - arm64 V1.13; Industrial Edge Device Kit - arm64 V1.18; Industrial Edge Device Kit - x86-64 V1.20; Industrial Edge Device Kit - x86-64 V1.25; Industrial Edge Device Kit - arm64 V1.10; Industrial Edge Device Kit - arm64 V1.5; Industrial Edge Device Kit - x86-64 V1.24; Industrial Edge Device Kit - arm64 V1.25; Industrial Edge Device Kit - arm64 V1.8; Industrial Edge Device Kit - x86-64 V1.21; Industrial Edge Device Kit - arm64 V1.16; Industrial Edge Device Kit - x86-64 V1.13" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-10" ;
    dcterms:issued "2026-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Power Build Rapsody (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing; Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-13845; CVE-2025-13844" ;
    icsa:cweNumber "CWE-416; CWE-415" ;
    icsa:hasCVE cve-res:CVE-2025-13844,
        cve-res:CVE-2025-13845 ;
    icsa:hasCWE cwe-res:CWE-415,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Power Build Rapsody" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Power Build Rapsody software BEL(FR) 2.8.8 and prior; EcoStruxure Power Build Rapsody software BEL(NL) 2.8.3 and prior; EcoStruxure Power Build Rapsody software FR 2.8.1 and prior; EcoStruxure Power Build Rapsody software ES 2.8.5 and prior; EcoStruxure Power Build Rapsody software INT 2.8.6 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-10" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-11" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM ROX II" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-56836; CVE-2024-56838; CVE-2024-56835; CVE-2024-56839; CVE-2024-56837; CVE-2024-56840" ;
    icsa:cweNumber "CWE-74; CWE-77" ;
    icsa:hasCVE cve-res:CVE-2024-56835,
        cve-res:CVE-2024-56836,
        cve-res:CVE-2024-56837,
        cve-res:CVE-2024-56838,
        cve-res:CVE-2024-56839,
        cve-res:CVE-2024-56840 ;
    icsa:hasCWE cwe-res:CWE-74,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM ROX II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM ROX II family" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-015-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-015-12" ;
    dcterms:issued "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CN 4100" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40937; CVE-2025-40939; CVE-2025-40940; CVE-2025-40938; CVE-2025-40941" ;
    icsa:cweNumber "CWE-284; CWE-77; CWE-200; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2025-40937,
        cve-res:CVE-2025-40938,
        cve-res:CVE-2025-40939,
        cve-res:CVE-2025-40940,
        cve-res:CVE-2025-40941 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-311,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC CN 4100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC CN 4100" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-015-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-020-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-020-01" ;
    dcterms:issued "2026-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Foxboro DCS" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2018-12130" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2018-12130 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Foxboro DCS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions Intel Xeon Silver 4110; EcoStruxureTM Foxboro DCS V91 DCS Virtualization Server and H92 DCS Standard Workstation; Intel Xeon W-2123 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-020-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-020-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-020-02" ;
    dcterms:issued "2026-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric devices using CODESYS Runtime" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2023-3669; CVE-2022-47378; CVE-2022-4046; CVE-2023-37554; CVE-2023-37558; CVE-2023-37551; CVE-2023-3670; CVE-2023-37548; CVE-2023-37549; CVE-2023-3663; CVE-2023-37556; CVE-2023-37557; CVE-2022-47388; CVE-2023-37545; CVE-2023-37553; CVE-2022-47379; CVE-2022-47387; CVE-2022-47386; CVE-2022-47393; CVE-2023-37550; CVE-2022-47392; CVE-2022-47390; CVE-2023-37546; CVE-2022-47382; CVE-2022-47385; CVE-2022-47389; CVE-2022-47391; CVE-2023-37559; CVE-2022-47383; CVE-2023-37552; CVE-2023-3662; CVE-2023-28355; CVE-2022-47381; CVE-2022-47380; CVE-2023-37547; CVE-2023-37555; CVE-2022-47384" ;
    icsa:cweNumber "CWE-307; CWE-668; CWE-822; CWE-1288; CWE-427; CWE-552; CWE-924; CWE-787; CWE-20; CWE-121; CWE-119; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2022-4046,
        cve-res:CVE-2022-47378,
        cve-res:CVE-2022-47379,
        cve-res:CVE-2022-47380,
        cve-res:CVE-2022-47381,
        cve-res:CVE-2022-47382,
        cve-res:CVE-2022-47383,
        cve-res:CVE-2022-47384,
        cve-res:CVE-2022-47385,
        cve-res:CVE-2022-47386,
        cve-res:CVE-2022-47387,
        cve-res:CVE-2022-47388,
        cve-res:CVE-2022-47389,
        cve-res:CVE-2022-47390,
        cve-res:CVE-2022-47391,
        cve-res:CVE-2022-47392,
        cve-res:CVE-2022-47393,
        cve-res:CVE-2023-28355,
        cve-res:CVE-2023-3662,
        cve-res:CVE-2023-3663,
        cve-res:CVE-2023-3669,
        cve-res:CVE-2023-3670,
        cve-res:CVE-2023-37545,
        cve-res:CVE-2023-37546,
        cve-res:CVE-2023-37547,
        cve-res:CVE-2023-37548,
        cve-res:CVE-2023-37549,
        cve-res:CVE-2023-37550,
        cve-res:CVE-2023-37551,
        cve-res:CVE-2023-37552,
        cve-res:CVE-2023-37553,
        cve-res:CVE-2023-37554,
        cve-res:CVE-2023-37555,
        cve-res:CVE-2023-37556,
        cve-res:CVE-2023-37557,
        cve-res:CVE-2023-37558,
        cve-res:CVE-2023-37559 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-1288,
        cwe-res:CWE-20,
        cwe-res:CWE-307,
        cwe-res:CWE-354,
        cwe-res:CWE-427,
        cwe-res:CWE-552,
        cwe-res:CWE-668,
        cwe-res:CWE-787,
        cwe-res:CWE-822,
        cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric devices using CODESYS Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "All versions prior to v5.2.11.18; Modicon Controller M262; All versions prior to v6.3 SP2; Harmony P6 series with Vijeo Designer runtime; All versions prior to v6.3 SP2; HMISCU Controller; Schneider Electric Easy Harmony HMIET6/HMIFT6 Magelis HMIGXU; All versions;  Modicon Controller M241; All versions; Easy Modicon M310; All versions; PacDrive 3 Controllers: LMC Eco/Pro/Pro2; All versions prior to v6.3.1; Modicon Controller LMC078; XBT series; All versions; Modicon Controller M218; All versions prior to v6.3.1; Easy Harmony HMIET6/HMIFT6 Magelis HMIGXU All versions prior to v2.0 HF2; Easy Modicon M310 All versions prior to v3.1.5.82; Harmony iPC series and Harmony P6 series with Vijeo Designer runtime All versions prior to v6.3 SP2.; Modicon Controller M262; Modicon Controller M258; All versions prior to v6.3 HF3;  Harmony iPC series with Vijeo Designer runtime; All versions prior to v1.76.14.1;  SoftSPS embedded in EcoStruxure Machine Expert All versions prior to Machine Expert v2.2; Vijeo Designer embedded in EcoStruxure Machine Expert; All versions prior to v3.1.5.82; Harmony (Formerly Magelis) HMIGK/HMIGTO/HMIGTU/HMIGTUX/HMISTU series; All versions; Modicon Controller LMC058; All versions prior to v5.2.11.18; Modicon Controller M251" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-020-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-020-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-020-03" ;
    dcterms:issued "2026-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Verve Asset Manager" ;
    icsa:CVSSScore "7.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-14376; CVE-2025-14377" ;
    icsa:cweNumber "CWE-922; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2025-14376,
        cve-res:CVE-2025-14377 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-922 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Verve Asset Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation Verve Asset Manager: 1.40; Rockwell Automation Verve Asset Manager: 1.37; Rockwell Automation Verve Asset Manager: 1.36; Rockwell Automation Verve Asset Manager: 1.41.1; Rockwell Automation Verve Asset Manager: 1.41.2; Rockwell Automation Verve Asset Manager: 1.38; Rockwell Automation Verve Asset Manager: 1.39; Rockwell Automation Verve Asset Manager: 1.41; Rockwell Automation Verve Asset Manager: 1.41.3.; Rockwell Automation Verve Asset Manager: 1.34; Rockwell Automation Verve Asset Manager: 1.35; Rockwell Automation Verve Asset Manager: 1.33" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-020-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-022-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-022-01" ;
    dcterms:issued "2026-01-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Process Expert (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-13905" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2025-13905 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Process Expert (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Process Expert versions prior to 2025; EcoStruxure Process Expert for AVEVA System Platform versions prior to 2025" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-022-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-022-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-022-02" ;
    dcterms:issued "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect CLICK Programmable Logic Controller" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-25051; CVE-2025-67652" ;
    icsa:cweNumber "CWE-256; CWE-261" ;
    icsa:hasCVE cve-res:CVE-2025-25051,
        cve-res:CVE-2025-67652 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-261 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AutomationDirect CLICK Programmable Logic Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AutomationDirect CLICK Programmable Logic Controller: C0-0x; AutomationDirect CLICK Programmable Logic Controller: C2-x; AutomationDirect CLICK Programmable Logic Controller: C0-1x" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-022-02" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2026 .

icsa-res:ICSA-26-022-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-022-03" ;
    dcterms:issued "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation CompactLogix 5370" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11743" ;
    icsa:cweNumber "CWE-1284" ;
    icsa:hasCVE cve-res:CVE-2025-11743 ;
    icsa:hasCWE cwe-res:CWE-1284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation CompactLogix 5370" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation CompactLogix 5370: 36.011; Rockwell Automation CompactLogix 5370: <=34.013; Rockwell Automation CompactLogix 5370: <=35.012" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-022-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-022-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-022-04" ;
    dcterms:issued "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Inc. iSTAR Configuration Utility (ICU) tool" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-26386" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2025-26386 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Inc. iSTAR Configuration Utility (ICU) tool" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls Inc. iSTAR Configuration Utility (ICU) tool: <=6.9.7" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-022-04" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-022-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-022-05" ;
    dcterms:issued "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Weintek cMT X Series HMI EasyWeb Service" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-14751; CVE-2025-14750" ;
    icsa:cweNumber "CWE-620; CWE-472" ;
    icsa:hasCVE cve-res:CVE-2025-14750,
        cve-res:CVE-2025-14751 ;
    icsa:hasCWE cwe-res:CWE-472,
        cwe-res:CWE-620 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Weintek cMT X Series HMI EasyWeb Service" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Weintek cMT-CTRL01: >=20230308|<20250827; Weintek cMT3072XH: >=20200630|<20241112; Weintek cMT-SVRX-820: >=20220413|<20240919; Weintek cMT3072XH(T): >=20200630|<20241112" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-022-05" ;
    icsa:vendor "Weintek" ;
    icsa:year 2026 .

icsa-res:ICSA-26-022-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-022-06" ;
    dcterms:issued "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hubitat Elevation Hubs" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Communications" ;
    icsa:cveNumber "CVE-2026-1201" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2026-1201 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hubitat Elevation Hubs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hubitat Elevation C3: <firmware_2.4.2.157; Hubitat Elevation C8 pro: <firmware_2.4.2.157; Hubitat Elevation C5: <firmware_2.4.2.157; Hubitat Elevation C7: <firmware_2.4.2.157; Hubitat Elevation C4: <firmware_2.4.2.157; Hubitat Elevation C8: <firmware_2.4.2.157" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-022-06" ;
    icsa:vendor "Hubitat" ;
    icsa:year 2026 .

icsa-res:ICSA-26-022-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-022-07" ;
    dcterms:issued "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DIAView" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-0975" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2026-0975 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics DIAView" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Electronics DIAView: 4.2.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-022-07" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2026 .

icsa-res:ICSA-26-022-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-022-08" ;
    dcterms:issued "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "EVMAPA" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czechia" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-55705; CVE-2025-53968; CVE-2025-54816" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2025-53968,
        cve-res:CVE-2025-54816,
        cve-res:CVE-2025-55705 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EVMAPA" ;
    icsa:productDistribution "Czechia, Slovakia" ;
    icsa:productsAffected "EVMAPA EVMAPA: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-022-08" ;
    icsa:vendor "EVMAPA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-027-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-027-01" ;
    dcterms:issued "2026-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "iba Systems ibaPDA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-14988" ;
    icsa:cweNumber "CWE-732" ;
    icsa:hasCVE cve-res:CVE-2025-14988 ;
    icsa:hasCWE cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iba Systems ibaPDA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "iba Systems ibaPDA: 8.12.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-027-01" ;
    icsa:vendor "iba Systems" ;
    icsa:year 2026 .

icsa-res:ICSA-26-027-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-027-02" ;
    dcterms:issued "2026-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Festo Didactic SE MES PC" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2020-2812; CVE-2022-32085; CVE-2022-27380; CVE-2023-25690; CVE-2019-9639; CVE-2020-7069; CVE-2021-46661; CVE-2021-21708; CVE-2022-36760; CVE-2021-2180; CVE-2018-14851; CVE-2019-9020; CVE-2018-19935; CVE-2014-9709; CVE-2021-46666; CVE-2019-11047; CVE-2022-23808; CVE-2018-19518; CVE-2022-27385; CVE-2022-32089; CVE-2022-32086; CVE-2022-31626; CVE-2022-27452; CVE-2019-11045; CVE-2023-25727; CVE-2021-2011; CVE-2022-27448; CVE-2019-11035; CVE-2019-9637; CVE-2023-0568; CVE-2021-21707; CVE-2019-11044; CVE-2022-32091; CVE-2022-37436; CVE-2022-31628; CVE-2020-2780; CVE-2022-27387; CVE-2014-9705; CVE-2023-0662; CVE-2019-11050; CVE-2020-2760; CVE-2022-27382; CVE-2021-46664; CVE-2020-7061; CVE-2019-11034; CVE-2022-27447; CVE-2020-7064; CVE-2019-9021; CVE-2020-7059; CVE-2021-2007; CVE-2020-2752; CVE-2021-2144; CVE-2021-2389; CVE-2021-27928; CVE-2020-2922; CVE-2019-11043; CVE-2022-27378; CVE-2020-7065; CVE-2022-27376; CVE-2020-7063; CVE-2021-2174; CVE-2022-32087; CVE-2015-2787; CVE-2021-2166; CVE-2022-27379; CVE-2022-32084; CVE-2019-9022; CVE-2022-32082; CVE-2019-11049; CVE-2021-46667; CVE-2020-7070; CVE-2018-12882; CVE-2019-11046; CVE-2019-9025; CVE-2022-32088; CVE-2022-32083; CVE-2021-2194; CVE-2018-14883; CVE-2021-2372; CVE-2021-35604; CVE-2020-2814; CVE-2021-21703; CVE-2022-27377; CVE-2020-7060; CVE-2022-27449; CVE-2019-11039; CVE-2021-46668; CVE-2021-46665; CVE-2022-27444; CVE-2022-27455; CVE-2022-31625; CVE-2019-9023; CVE-2019-9024; CVE-2022-21595; CVE-2020-7071; CVE-2019-9638; CVE-2020-7062; CVE-2016-5385; CVE-2022-27386; CVE-2022-4900; CVE-2022-27446; CVE-2022-27451; CVE-2022-27458; CVE-2022-27384; CVE-2022-27383; CVE-2015-2348; CVE-2021-2022; CVE-2006-20001; CVE-2019-9641; CVE-2021-21704; CVE-2022-27457; CVE-2016-3078; CVE-2013-6501; CVE-2020-7066; CVE-2021-46669; CVE-2019-9640; CVE-2022-27456; CVE-2022-32081; CVE-2019-11041; CVE-2015-2301; CVE-2019-11042; CVE-2023-27522; CVE-2021-21702; CVE-2021-21705; CVE-2021-2032; CVE-2020-7068; CVE-2023-0567; CVE-2019-11040; CVE-2022-31629; CVE-2019-11036; CVE-2022-27381; CVE-2021-2154; CVE-2021-46662; CVE-2022-23807; CVE-2019-11048; CVE-2021-21706; CVE-2022-27445; CVE-2021-46663; CVE-2018-17082" ;
    icsa:cweNumber "CWE-94; CWE-89; CWE-415; CWE-416; CWE-79; CWE-170; CWE-617; CWE-476; CWE-400; CWE-444; CWE-200; CWE-674; CWE-88; CWE-126; CWE-20; CWE-190; CWE-121; CWE-916; CWE-74; CWE-601; CWE-281; CWE-1173; CWE-113; CWE-120; CWE-77; CWE-626; CWE-787; CWE-131; CWE-908; CWE-119; CWE-732; CWE-287; CWE-909; CWE-24; CWE-590; CWE-229; CWE-159; CWE-125; CWE-266" ;
    icsa:hasCVE cve-res:CVE-2006-20001,
        cve-res:CVE-2013-6501,
        cve-res:CVE-2014-9705,
        cve-res:CVE-2014-9709,
        cve-res:CVE-2015-2301,
        cve-res:CVE-2015-2348,
        cve-res:CVE-2015-2787,
        cve-res:CVE-2016-3078,
        cve-res:CVE-2016-5385,
        cve-res:CVE-2018-12882,
        cve-res:CVE-2018-14851,
        cve-res:CVE-2018-14883,
        cve-res:CVE-2018-17082,
        cve-res:CVE-2018-19518,
        cve-res:CVE-2018-19935,
        cve-res:CVE-2019-11034,
        cve-res:CVE-2019-11035,
        cve-res:CVE-2019-11036,
        cve-res:CVE-2019-11039,
        cve-res:CVE-2019-11040,
        cve-res:CVE-2019-11041,
        cve-res:CVE-2019-11042,
        cve-res:CVE-2019-11043,
        cve-res:CVE-2019-11044,
        cve-res:CVE-2019-11045,
        cve-res:CVE-2019-11046,
        cve-res:CVE-2019-11047,
        cve-res:CVE-2019-11048,
        cve-res:CVE-2019-11049,
        cve-res:CVE-2019-11050,
        cve-res:CVE-2019-9020,
        cve-res:CVE-2019-9021,
        cve-res:CVE-2019-9022,
        cve-res:CVE-2019-9023,
        cve-res:CVE-2019-9024,
        cve-res:CVE-2019-9025,
        cve-res:CVE-2019-9637,
        cve-res:CVE-2019-9638,
        cve-res:CVE-2019-9639,
        cve-res:CVE-2019-9640,
        cve-res:CVE-2019-9641,
        cve-res:CVE-2020-2752,
        cve-res:CVE-2020-2760,
        cve-res:CVE-2020-2780,
        cve-res:CVE-2020-2812,
        cve-res:CVE-2020-2814,
        cve-res:CVE-2020-2922,
        cve-res:CVE-2020-7059,
        cve-res:CVE-2020-7060,
        cve-res:CVE-2020-7061,
        cve-res:CVE-2020-7062,
        cve-res:CVE-2020-7063,
        cve-res:CVE-2020-7064,
        cve-res:CVE-2020-7065,
        cve-res:CVE-2020-7066,
        cve-res:CVE-2020-7068,
        cve-res:CVE-2020-7069,
        cve-res:CVE-2020-7070,
        cve-res:CVE-2020-7071,
        cve-res:CVE-2021-2007,
        cve-res:CVE-2021-2011,
        cve-res:CVE-2021-2022,
        cve-res:CVE-2021-2032,
        cve-res:CVE-2021-2144,
        cve-res:CVE-2021-2154,
        cve-res:CVE-2021-2166,
        cve-res:CVE-2021-21702,
        cve-res:CVE-2021-21703,
        cve-res:CVE-2021-21704,
        cve-res:CVE-2021-21705,
        cve-res:CVE-2021-21706,
        cve-res:CVE-2021-21707,
        cve-res:CVE-2021-21708,
        cve-res:CVE-2021-2174,
        cve-res:CVE-2021-2180,
        cve-res:CVE-2021-2194,
        cve-res:CVE-2021-2372,
        cve-res:CVE-2021-2389,
        cve-res:CVE-2021-27928,
        cve-res:CVE-2021-35604,
        cve-res:CVE-2021-46661,
        cve-res:CVE-2021-46662,
        cve-res:CVE-2021-46663,
        cve-res:CVE-2021-46664,
        cve-res:CVE-2021-46665,
        cve-res:CVE-2021-46666,
        cve-res:CVE-2021-46667,
        cve-res:CVE-2021-46668,
        cve-res:CVE-2021-46669,
        cve-res:CVE-2022-21595,
        cve-res:CVE-2022-23807,
        cve-res:CVE-2022-23808,
        cve-res:CVE-2022-27376,
        cve-res:CVE-2022-27377,
        cve-res:CVE-2022-27378,
        cve-res:CVE-2022-27379,
        cve-res:CVE-2022-27380,
        cve-res:CVE-2022-27381,
        cve-res:CVE-2022-27382,
        cve-res:CVE-2022-27383,
        cve-res:CVE-2022-27384,
        cve-res:CVE-2022-27385,
        cve-res:CVE-2022-27386,
        cve-res:CVE-2022-27387,
        cve-res:CVE-2022-27444,
        cve-res:CVE-2022-27445,
        cve-res:CVE-2022-27446,
        cve-res:CVE-2022-27447,
        cve-res:CVE-2022-27448,
        cve-res:CVE-2022-27449,
        cve-res:CVE-2022-27451,
        cve-res:CVE-2022-27452,
        cve-res:CVE-2022-27455,
        cve-res:CVE-2022-27456,
        cve-res:CVE-2022-27457,
        cve-res:CVE-2022-27458,
        cve-res:CVE-2022-31625,
        cve-res:CVE-2022-31626,
        cve-res:CVE-2022-31628,
        cve-res:CVE-2022-31629,
        cve-res:CVE-2022-32081,
        cve-res:CVE-2022-32082,
        cve-res:CVE-2022-32083,
        cve-res:CVE-2022-32084,
        cve-res:CVE-2022-32085,
        cve-res:CVE-2022-32086,
        cve-res:CVE-2022-32087,
        cve-res:CVE-2022-32088,
        cve-res:CVE-2022-32089,
        cve-res:CVE-2022-32091,
        cve-res:CVE-2022-36760,
        cve-res:CVE-2022-37436,
        cve-res:CVE-2022-4900,
        cve-res:CVE-2023-0567,
        cve-res:CVE-2023-0568,
        cve-res:CVE-2023-0662,
        cve-res:CVE-2023-25690,
        cve-res:CVE-2023-25727,
        cve-res:CVE-2023-27522 ;
    icsa:hasCWE cwe-res:CWE-113,
        cwe-res:CWE-1173,
        cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-126,
        cwe-res:CWE-131,
        cwe-res:CWE-159,
        cwe-res:CWE-170,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-229,
        cwe-res:CWE-24,
        cwe-res:CWE-266,
        cwe-res:CWE-281,
        cwe-res:CWE-287,
        cwe-res:CWE-400,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-444,
        cwe-res:CWE-476,
        cwe-res:CWE-590,
        cwe-res:CWE-601,
        cwe-res:CWE-617,
        cwe-res:CWE-626,
        cwe-res:CWE-674,
        cwe-res:CWE-732,
        cwe-res:CWE-74,
        cwe-res:CWE-77,
        cwe-res:CWE-787,
        cwe-res:CWE-79,
        cwe-res:CWE-88,
        cwe-res:CWE-89,
        cwe-res:CWE-908,
        cwe-res:CWE-909,
        cwe-res:CWE-916,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Festo Didactic SE MES PC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Festo Didactic SE MES PC shipped with Windows 10" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-027-02" ;
    icsa:vendor "Festo Didactic SE" ;
    icsa:year 2026 .

icsa-res:ICSA-26-027-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-027-03" ;
    dcterms:issued "2026-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Zigbee Products" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-6351; CVE-2024-10106; CVE-2024-7322; CVE-2024-6350; CVE-2024-6352" ;
    icsa:cweNumber "CWE-120; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2024-10106,
        cve-res:CVE-2024-6350,
        cve-res:CVE-2024-6351,
        cve-res:CVE-2024-6352,
        cve-res:CVE-2024-7322 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Zigbee Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Wiser Connected Smart Switch; Merten cFMT 2a All Versions; Wiser Connected Push Button Dimmer All Versions; Wiser Connected Smart Dimmer All Versions; Micromodule Dimmer All Versions; Merten cFMT 16a All Versions; Wiser Connected Rotary Dimmer All Versions; Wiser iTRV3 All Versions; Odace cFMT 2a All Versions; Iconic; Wiser FIP Micromodule All Versions; Wiser Power Micromodule All Versions; Fuga Connected Socket Outlet All Versions; Wiser iTRV2 All Versions; Micromodule Shutter All Versions; Wiser Boiler Relay All Versions; Connected AC Fan Controller All Versions; Wiser RTR2 All Versions; 2AX All Versions; Elko cFMT 16a All Versions; 10AX All Versions; Wiser UFH All Versions; Wiser Connected Motion Dimmer All Versions; Wiser Connected Push Button Switch All Versions; Wiser Connected Motion Switch All Versions; Exxact cFMT 16a All Versions; Mureva EV Link All Versions; Connected Single Socket Outlet All Versions; Wiser Connected Application Module 1-Gang All Versions; Wiser 16A Electrical Heat Switch All Versions; Wiser Connected Application Module 2-Gang All Versions; Micromodule Switch All Versions; Connected Smart Socket All Versions; Connected Wireless Switch All Versions; Wiser Connected Push Button Shutter All Versions; Connected Double Socket Outlet All Versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-027-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-027-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-027-04" ;
    dcterms:issued "2026-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Products" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-26385" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2025-26385 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls Extended Application and Data Server (ADX): Metasys_14.1; Johnson Controls Controller Configuration Tool (CCT): <=17.0; Johnson Controls LCS8500: >=Metasys_installation__12.0|<=14.1; Johnson Controls NAE8500: >=Metasys_installation__12.0|<=14.1; Johnson Controls System Configuration Tool (SCT): <=17.1; Johnson Controls Application and Data Server (ADS): <=Metasys_14.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-027-04" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-029-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-029-01" ;
    dcterms:issued "2026-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "KiloView Encoder Series (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Communications; Information Technology" ;
    icsa:cveNumber "CVE-2026-1453" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-1453 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KiloView Encoder Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KiloView Encoder Series RE1 hardware Version 3.0.00: 4.8.2519|4.8.2561|4.8.2611|4.8.2525; KiloView Encoder Series E1 hardware Version 1.6.20: 4.7.2511|4.8.2523|4.8.2611|4.6.2400|4.7.2512|4.8.2561|4.8.2554|4.3.2029|4.8.2555|4.6.2408; KiloView Encoder Series P2 hardware Version 1.8.20: 4.8.2633; KiloView Encoder Series RE1 hardware Version 2.0.00: 4.7.2513; KiloView Encoder Series E2 hardware Version 1.7.20: 4.8.2611|4.8.2561; KiloView Encoder Series E2 hardware Version 1.8.20: 4.8.2523|4.8.2611|4.8.2554; KiloView Encoder Series E1-s hardware Version 1.4: 4.7.2516|4.8.2519|4.8.2525|4.8.2611|4.8.2561|4.8.2554|4.8.2523; KiloView Encoder Series G1 hardware Version 1.6.20: 4.8.2561; KiloView Encoder Series E1 hardware Version 1.4: 4.7.2516; KiloView Encoder Series P1 hardware Version 1.3.20: 4.8.2633|4.8.2608" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-029-01" ;
    icsa:vendor "KiloView" ;
    icsa:year 2026 .

icsa-res:ICSA-26-029-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-029-02" ;
    dcterms:issued "2026-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ArmorStart LT" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-9283; CVE-2025-9279; CVE-2025-9465; CVE-2025-9280; CVE-2025-9282; CVE-2025-9466; CVE-2025-9281; CVE-2025-9464; CVE-2025-9278" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2025-9278,
        cve-res:CVE-2025-9279,
        cve-res:CVE-2025-9280,
        cve-res:CVE-2025-9281,
        cve-res:CVE-2025-9282,
        cve-res:CVE-2025-9283,
        cve-res:CVE-2025-9464,
        cve-res:CVE-2025-9465,
        cve-res:CVE-2025-9466 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation ArmorStart LT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation ArmorStart LT 290D: <=V2.002; Rockwell Automation ArmorStart LT 294D: <=V2.002; Rockwell Automation ArmorStart LT 291D: <=V2.002" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-029-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-029-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-029-03" ;
    dcterms:issued "2026-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Critical Manufacturing; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-14027" ;
    icsa:cweNumber "CWE-401" ;
    icsa:hasCVE cve-res:CVE-2025-14027 ;
    icsa:hasCWE cwe-res:CWE-401 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation ControlLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation ControlLogix Redundancy Enhanced Module Catalog 1756-RM2 Firmware: vers:all/*; Rockwell Automation ControlLogix Redundancy Enhanced Module Catalog 1756-RM2XT Firmware: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-029-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-034-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-034-01" ;
    dcterms:issued "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric FREQSHIP-mini" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology; Healthcare and Public Health; Government Facilities" ;
    icsa:cveNumber "CVE-2025-10314" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2025-10314 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric FREQSHIP-mini for Windows" ;
    icsa:productDistribution "Japan" ;
    icsa:productsAffected "Mitsubishi Electric FREQSHIP-mini for Windows: >=8.0.0|<=8.0.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-034-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-034-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-034-02" ;
    dcterms:issued "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Avation Light Engine Pro" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Australia" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-1341" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-1341 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Avation Light Engine Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Avation Light Engine Pro: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-034-02" ;
    icsa:vendor "Avation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-034-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-034-03" ;
    dcterms:issued "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "RISS SRL MOMA Seismic Station" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams; Energy; Water and Wastewater Systems; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-1632" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-1632 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RISS SRL MOMA Seismic Station" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RISS SRL MOMA Seismic Station: <=v2.4.2520" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-034-03" ;
    icsa:vendor "RISS SRL" ;
    icsa:year 2026 .

icsa-res:ICSA-26-034-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-034-04" ;
    dcterms:issued "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Synectix LAN 232 TRIO" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Emergency Services; Energy; Information Technology; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-1633" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-1633 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Synectix LAN 232 TRIO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Synectix LAN 232 TRIO: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-034-04" ;
    icsa:vendor "Synectix" ;
    icsa:year 2026 .

icsa-res:ICSA-26-036-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-036-01" ;
    dcterms:issued "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "TP-Link Systems Inc. VIGI C330I IP Camera" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-0629" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2026-0629 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TP-Link Systems Inc. VIGI Series IP Camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "C420I 1.20: <=2.1.0_Build_250701_Rel.44071n; TP-Link Systems Inc. VIGI Cx55 Series Models C355; TP-Link Systems Inc. VIGI Cx85 Series Models C385; C330I 1.20; TP-Link Systems Inc. VIGI C340 2.0 Series: <=2.1.0_Build_250701_Rel.49304n; C430I 1.0: <=2.1.0_Build_250701_Rel.45506n; TP-Link Systems Inc. VIGI C540V Series: <=2.1.0_Build_250702_Rel.54300n; TP-Link Systems Inc. VIGI C440 2.0 Series: <=2.1.0_Build_250701_Rel.49778n; TP-Link Systems Inc. VIGI Cx20I (1.0) Series Models C220I 1.0; TP-Link Systems Inc. VIGI Cx45 Series Models C345; TP-Link Systems Inc. VIGI Cx40I (1.0) Series Models C240I 1.0; C420: <=2.1.0_Build_250701_Rel.39597n; TP-Link Systems Inc. VIGI InSight Sx45 Series Models S245; TP-Link Systems Inc. VIGI InSight Sx85PI Series Models S385PI; TP-Link Systems Inc. VIGI C340S Series: <=3.1.0_Build_250625_Rel.65381n; C445: <=3.1.0_Build_250820_Rel.57668n; TP-Link Systems Inc. VIGI Cx20I (1.20) Series Models C220I 1.20; C320I 1.20; C450: <=2.1.0_Build_250702_Rel.54294n; C430 1.0: <=2.1.0_Build_250701_Rel.46796n; TP-Link Systems Inc. VIGI Cx20 Series Models C320; C430I 1.20: <=2.1.0_Build_250701_Rel.44555n; S345; C455: <=3.1.0_Build_250820_Rel.58873n; S485PI: <=1.2.0_Build_250827_Rel.66817n; TP-Link Systems Inc. VIGI Cx30 (1.20) Series Models C230 1.20; TP-Link Systems Inc. VIGI Cx40‑W Series Models C340‑W 2.0/2.20; TP-Link Systems Inc. VIGI C540‑4G Series: <=2.2.0_Build_250826_Rel.56808n; C440I 1.0: <=2.1.0_Build_250701_Rel.46003n; TP-Link Systems Inc. VIGI C240 1.0 Series: <=2.1.0_Build_250701_Rel.48425n; C330 1.0; TP-Link Systems Inc. VIGI InSight S655I Series: <=1.1.1_Build_250625_Rel.64224n; S425: <=1.1.0_Build_250630_Rel.39597n; C330 1.20; TP-Link Systems Inc. VIGI InSight Sx85 Series Models S285; TP-Link Systems Inc. VIGI Cx30I (1.20) Series Models C230I 1.20; C440I 1.20: <=2.1.0_Build_250701_Rel.45041n; TP-Link Systems Inc. VIGI C230I Mini Series: <=2.1.0_Build_250701_Rel.47570n; TP-Link Systems Inc. VIGI C540S Series Models C540S; C340I 1.20; TP-Link Systems Inc. VIGI InSight Sx45ZI Series Models S245ZI; S325; C340I 1.0; C485: <=3.0.2_Build_250630_Rel.71279n; TP-Link Systems Inc. VIGI C250 Series: <=2.1.0_Build_250702_Rel.54301n; C320I 1.0; TP-Link Systems Inc. VIGI Cx30I (1.0) Series Models C230I 1.0; S445ZI: <=1.2.0_Build_250820_Rel.60930n; TP-Link Systems Inc. VIGI InSight Sx55 Series Models S355; C420I 1.0: <=2.1.0_Build_251014_Rel.58331n; S455: <=3.1.0_Build_250820_Rel.58873n; EasyCam C540S: <=3.1.0_Build_250625_Rel.66601n; TP-Link Systems Inc. VIGI InSight S345‑4G Series: <=2.1.0_Build_250725_Rel.36867n; C440‑W 2.0; TP-Link Systems Inc. VIGI Cx30 (1.0) Series Models C230 1.0; C430 1.20: <=2.1.0_Build_250701_Rel.46796n; TP-Link Systems Inc. VIGI InSight Sx25 Series Models S225; TP-Link Systems Inc. VIGI C540 2.0 Series: <=2.1.0_Build_250701_Rel.50397n; TP-Link Systems Inc. VIGI Cx50 Series Models C350; TP-Link Systems Inc. VIGI Cx40I (1.20) Series Models C240I 1.20; C540‑W 2.0: <=2.1.1_Build_250717; S345ZI; C330I 1.0; S445: <=3.1.0_Build_250820_Rel.57668n; S385: <=3.0.2_Build_250630_Rel.71279n" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-036-01" ;
    icsa:vendor "TP-Link Systems Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-036-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-036-02" ;
    dcterms:issued "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-R Series" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-15080" ;
    icsa:cweNumber "CWE-1284" ;
    icsa:hasCVE cve-res:CVE-2025-15080 ;
    icsa:hasCWE cwe-res:CWE-1284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric MELSEC iQ-R Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric MELSEC iQ-R Series R08/16/32/120PCPU firmware: <=48" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-036-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-036-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-036-03" ;
    dcterms:issued "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "o6 Automation GmbH Open62541" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-1301" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-1301 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "o6 Automation GmbH Open62541" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "o6 Automation GmbH Open62541: >=1.5-rc1|<1.5-rc2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-036-03" ;
    icsa:vendor "o6 Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-036-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-036-04" ;
    dcterms:issued "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ilevia EVE X1 Server" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Italy" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-34513; CVE-2025-34517; CVE-2025-34512; CVE-2025-34186; CVE-2025-34185; CVE-2025-34187; CVE-2025-34184; CVE-2025-34183; CVE-2025-34518" ;
    icsa:cweNumber "CWE-532; CWE-22; CWE-78; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-34183,
        cve-res:CVE-2025-34184,
        cve-res:CVE-2025-34185,
        cve-res:CVE-2025-34186,
        cve-res:CVE-2025-34187,
        cve-res:CVE-2025-34512,
        cve-res:CVE-2025-34513,
        cve-res:CVE-2025-34517,
        cve-res:CVE-2025-34518 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-532,
        cwe-res:CWE-78,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ilevia EVE X1 Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ilevia EVE X1: <=4.7.18.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-036-04" ;
    icsa:vendor "Ilevia" ;
    icsa:year 2026 .

icsa-res:ICSA-26-036-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-036-05" ;
    dcterms:issued "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy XMC20" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-3596" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2024-3596 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy XMC20" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "XMC20 version R18; XMC20 version R17A and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-036-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-036-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-036-06" ;
    dcterms:issued "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy FOX61x" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2024-3596" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2024-3596 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy FOX61x" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FOX61x version R18; FOX61x version R17A and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-036-06" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-041-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-041-01" ;
    dcterms:issued "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa FAST/TOOLS" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2025-66600; CVE-2025-66598; CVE-2025-66601; CVE-2025-66604; CVE-2025-66599; CVE-2025-66603; CVE-2025-66594; CVE-2025-66605; CVE-2025-66597; CVE-2025-66606; CVE-2025-66607; CVE-2025-66608; CVE-2025-66595; CVE-2025-66602" ;
    icsa:cweNumber "CWE-352; CWE-209; CWE-86; CWE-359; CWE-497; CWE-358; CWE-29; CWE-319; CWE-291; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2025-66594,
        cve-res:CVE-2025-66595,
        cve-res:CVE-2025-66597,
        cve-res:CVE-2025-66598,
        cve-res:CVE-2025-66599,
        cve-res:CVE-2025-66600,
        cve-res:CVE-2025-66601,
        cve-res:CVE-2025-66602,
        cve-res:CVE-2025-66603,
        cve-res:CVE-2025-66604,
        cve-res:CVE-2025-66605,
        cve-res:CVE-2025-66606,
        cve-res:CVE-2025-66607,
        cve-res:CVE-2025-66608 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-29,
        cwe-res:CWE-291,
        cwe-res:CWE-319,
        cwe-res:CWE-327,
        cwe-res:CWE-352,
        cwe-res:CWE-358,
        cwe-res:CWE-359,
        cwe-res:CWE-497,
        cwe-res:CWE-86 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Yokogawa FAST/TOOLS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Yokogawa FAST/TOOLS: >=R9.01|<=R10.04" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-041-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2026 .

icsa-res:ICSA-26-041-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-041-02" ;
    dcterms:issued "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "ZLAN Information Technology Co. ZLAN5143D" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-25084; CVE-2026-24789" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-24789,
        cve-res:CVE-2026-25084 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ZLAN Information Technology Co. ZLAN5143D" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ZLAN Information Technology Co. ZLAN5143D: v1.600" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-041-02" ;
    icsa:vendor "ZLAN Information Technology Co." ;
    icsa:year 2026 .

icsa-res:ICSA-26-041-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-041-03" ;
    dcterms:issued "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PI Data Archive" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-1507" ;
    icsa:cweNumber "CWE-248" ;
    icsa:hasCVE cve-res:CVE-2026-1507 ;
    icsa:hasCWE cwe-res:CWE-248 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA PI Data Archive" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA PI Data Archive PI Server: 2023_Patch_1; AVEVA PI Data Archive PI Server: <=2018_SP3_Patch_7; AVEVA PI Data Archive PI Server: 2023; AVEVA PI Data Archive PI Server: 2024" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-041-03" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-041-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-041-04" ;
    dcterms:issued "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA PI to CONNECT Agent" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-1495" ;
    icsa:cweNumber "CWE-532" ;
    icsa:hasCVE cve-res:CVE-2026-1495 ;
    icsa:hasCWE cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA PI to CONNECT Agent" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA PI to CONNECT Agent: <=v2.4.2520" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-041-04" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-01" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Information Technology; Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-25656; CVE-2026-25655" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2026-25655,
        cve-res:CVE-2026-25656 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SINEC NMS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-02" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Polarion" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40587" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-40587 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Polarion" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Polarion V2410; Polarion V2404" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-03" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens COMOS" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40800; CVE-2025-2783; CVE-2024-47875; CVE-2025-10148; CVE-2025-40801; CVE-2024-11053" ;
    icsa:cweNumber "CWE-200; CWE-79; CWE-20; CWE-295; CWE-340" ;
    icsa:hasCVE cve-res:CVE-2024-11053,
        cve-res:CVE-2024-47875,
        cve-res:CVE-2025-10148,
        cve-res:CVE-2025-2783,
        cve-res:CVE-2025-40800,
        cve-res:CVE-2025-40801 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-295,
        cwe-res:CWE-340,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens COMOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "COMOS V10.4.5; COMOS V10.6" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-04" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo CC Product Family and SENTRON Powermanager" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2023-38545" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2023-38545 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Desigo CC Product Family and SENTRON Powermanager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SENTRON Powermanager V6; Desigo CC family V8; Desigo CC family V7; SENTRON Powermanager V7; Desigo CC family V6; SENTRON Powermanager V8" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-05" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40936" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-40936 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Solid Edge" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-06" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC OS" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-9681; CVE-2022-48174; CVE-2025-6141; CVE-2025-39839; CVE-2023-7256; CVE-2023-42366; CVE-2025-38084; CVE-2024-7264; CVE-2025-59375; CVE-2024-41996; CVE-2024-11053; CVE-2025-1390; CVE-2025-0167; CVE-2024-8096; CVE-2025-4138; CVE-2025-4373; CVE-2025-39864; CVE-2025-4435; CVE-2023-42365; CVE-2025-39841; CVE-2023-39810; CVE-2025-3360; CVE-2025-4330; CVE-2025-38086; CVE-2025-38498; CVE-2025-0665; CVE-2023-42364; CVE-2025-39865; CVE-2025-9230; CVE-2025-10148; CVE-2025-39846; CVE-2025-38345; CVE-2024-6197; CVE-2025-32433; CVE-2024-47619; CVE-2025-9086; CVE-2024-6874; CVE-2025-38085; CVE-2024-8006; CVE-2024-52533; CVE-2024-12718; CVE-2025-39853; CVE-2025-4516; CVE-2025-4517; CVE-2025-9231; CVE-2025-27587; CVE-2025-39860; CVE-2025-38350; CVE-2025-0725; CVE-2025-9232; CVE-2023-42363" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-476; CWE-22; CWE-680; CWE-200; CWE-770; CWE-126; CWE-124; CWE-20; CWE-190; CWE-121; CWE-340; CWE-385; CWE-682; CWE-787; CWE-284; CWE-1341; CWE-119; CWE-306; CWE-590; CWE-697; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2022-48174,
        cve-res:CVE-2023-39810,
        cve-res:CVE-2023-42363,
        cve-res:CVE-2023-42364,
        cve-res:CVE-2023-42365,
        cve-res:CVE-2023-42366,
        cve-res:CVE-2023-7256,
        cve-res:CVE-2024-11053,
        cve-res:CVE-2024-12718,
        cve-res:CVE-2024-41996,
        cve-res:CVE-2024-47619,
        cve-res:CVE-2024-52533,
        cve-res:CVE-2024-6197,
        cve-res:CVE-2024-6874,
        cve-res:CVE-2024-7264,
        cve-res:CVE-2024-8006,
        cve-res:CVE-2024-8096,
        cve-res:CVE-2024-9681,
        cve-res:CVE-2025-0167,
        cve-res:CVE-2025-0665,
        cve-res:CVE-2025-0725,
        cve-res:CVE-2025-10148,
        cve-res:CVE-2025-1390,
        cve-res:CVE-2025-27587,
        cve-res:CVE-2025-32433,
        cve-res:CVE-2025-3360,
        cve-res:CVE-2025-38084,
        cve-res:CVE-2025-38085,
        cve-res:CVE-2025-38086,
        cve-res:CVE-2025-38345,
        cve-res:CVE-2025-38350,
        cve-res:CVE-2025-38498,
        cve-res:CVE-2025-39839,
        cve-res:CVE-2025-39841,
        cve-res:CVE-2025-39846,
        cve-res:CVE-2025-39853,
        cve-res:CVE-2025-39860,
        cve-res:CVE-2025-39864,
        cve-res:CVE-2025-39865,
        cve-res:CVE-2025-4138,
        cve-res:CVE-2025-4330,
        cve-res:CVE-2025-4373,
        cve-res:CVE-2025-4435,
        cve-res:CVE-2025-4516,
        cve-res:CVE-2025-4517,
        cve-res:CVE-2025-59375,
        cve-res:CVE-2025-6141,
        cve-res:CVE-2025-9086,
        cve-res:CVE-2025-9230,
        cve-res:CVE-2025-9231,
        cve-res:CVE-2025-9232 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-124,
        cwe-res:CWE-125,
        cwe-res:CWE-126,
        cwe-res:CWE-1341,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-22,
        cwe-res:CWE-284,
        cwe-res:CWE-295,
        cwe-res:CWE-306,
        cwe-res:CWE-340,
        cwe-res:CWE-385,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-590,
        cwe-res:CWE-680,
        cwe-res:CWE-682,
        cwe-res:CWE-697,
        cwe-res:CWE-770,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEC OS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "24xSFP; 2x10G; 8xFO) (6GK5334-2TS01-3AR3); CC) (6GK5334-2TS01-2ER3); SCALANCE XRM334 (2x230 V AC; SCALANCE XRH334 (24 V DC; SCALANCE XRM334 (230V AC; SCALANCE XRM334 (230 V AC; 12xFO) (6GK5334-3TS01-3AR3); 8xFO) (6GK5334-2TS01-4AR3); SCALANCE XCM324 (6GK5324-8TS01-2AC2); SCALANCE XCM332 (6GK5332-0GA01-2AC2); 8xFO; 8xSFP+) (6GK5334-5TS01-4AR3); 12xFO) (6GK5334-3TS01-4AR3); 8xSFP+) (6GK5334-5TS01-3AR3); SCALANCE XRM334 (24V DC; 8xSFP+) (6GK5334-5TS01-2AR3); RUGGEDCOM RST2428P (6GK6242-6PA00); SCALANCE XRM334 (2x230V AC; 8xFO) (6GK5334-2TS01-2AR3); SCALANCE XCH328 (6GK5328-4TS01-2EC2); SCALANCE XCM328 (6GK5328-4TS01-2AC2); SCALANCE XRM334 (24 V DC; 12xFO) (6GK5334-3TS01-2AR3)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-07" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Video Management Servers" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-0836" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2025-0836 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Siveillance Video Management Servers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siveillance Video V2023 R3; Siveillance Video V2023 R2; Siveillance Video V2025; Siveillance Video V2023 R1; Siveillance Video V2024 R1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-08" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens NX" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-22923; CVE-2026-22924; CVE-2026-22925" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2026-22923,
        cve-res:CVE-2026-22924,
        cve-res:CVE-2026-22925 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens NX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "NX" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-09" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy SuprOS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems; Government Facilities" ;
    icsa:cveNumber "CVE-2025-7740" ;
    icsa:cweNumber "CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2025-7740 ;
    icsa:hasCWE cwe-res:CWE-1392 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy SuprOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SuprOS 9.2.2.0; SuprOS 9.2.1 and below" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-09" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-043-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-043-10" ;
    dcterms:issued "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Airleader Master" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-1358" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2026-1358 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Airleader Master" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Airleader GmbH Airleader Master: <=6.381" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-043-10" ;
    icsa:vendor "Airleader GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-048-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-048-01" ;
    dcterms:issued "2026-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap and Nastran" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-23718; CVE-2026-23720; CVE-2026-23715; CVE-2026-23717; CVE-2026-23716; CVE-2026-23719" ;
    icsa:cweNumber "CWE-122; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-23715,
        cve-res:CVE-2026-23716,
        cve-res:CVE-2026-23717,
        cve-res:CVE-2026-23718,
        cve-res:CVE-2026-23719,
        cve-res:CVE-2026-23720 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Simcenter Femap and Nastran" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Simcenter Femap; Simcenter Nastran" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-048-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-048-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-048-02" ;
    dcterms:issued "2026-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics ASDA-Soft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-1361" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2026-1361 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics ASDA-Soft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Electronics ASDA-Soft: <=7.2.0.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-048-02" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2026 .

icsa-res:ICSA-26-048-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-048-03" ;
    dcterms:issued "2026-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Vernova Enervista UR Setup" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-1762; CVE-2026-1763" ;
    icsa:cweNumber "CWE-427; CWE-35" ;
    icsa:hasCVE cve-res:CVE-2026-1762,
        cve-res:CVE-2026-1763 ;
    icsa:hasCWE cwe-res:CWE-35,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GE Vernova Enervista UR Setup" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GE Vernova Enervista UR Setup: <8.70" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-048-03" ;
    icsa:vendor "GE Vernova" ;
    icsa:year 2026 .

icsa-res:ICSA-26-048-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-048-04" ;
    dcterms:issued "2026-02-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell HIB2PI CCTV Camera (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-1670" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-1670 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Honeywell HIB2PI and HDZ Series CCTV Cameras" ;
    icsa:productDistribution "India" ;
    icsa:productsAffected "Honeywell I-HIB2PI-UL: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-048-04" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2026 .

icsa-res:ICSA-26-050-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-050-01" ;
    dcterms:issued "2026-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "EnOcean SmartServer IoT" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-22885; CVE-2026-20761" ;
    icsa:cweNumber "CWE-77; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2026-20761,
        cve-res:CVE-2026-22885 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EnOcean SmartServer IoT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EnOcean Edge Inc SmartServer IoT: <=4.60.009" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-050-01" ;
    icsa:vendor "EnOcean Edge Inc" ;
    icsa:year 2026 .

icsa-res:ICSA-26-050-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-050-02" ;
    dcterms:issued "2026-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Valmet DNA Engineering Web Tools" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Finland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-15577" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2025-15577 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Valmet DNA Engineering Web Tools" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Valmet Valmet DNA Engineering Web Tools: <=C2022" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-050-02" ;
    icsa:vendor "Valmet" ;
    icsa:year 2026 .

icsa-res:ICSA-26-050-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-050-03" ;
    dcterms:issued "2026-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Jinan USR IOT Technology Limited (PUSR) USR-W610" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-24455; CVE-2026-26049; CVE-2026-26048; CVE-2026-25715" ;
    icsa:cweNumber "CWE-306; CWE-319; CWE-522; CWE-521" ;
    icsa:hasCVE cve-res:CVE-2026-24455,
        cve-res:CVE-2026-25715,
        cve-res:CVE-2026-26048,
        cve-res:CVE-2026-26049 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-521,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Jinan USR IOT Technology Limited (PUSR) USR-W610" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Jinan USR IOT Technology Limited (PUSR) USR-W610: <=3.1.1.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-050-03" ;
    icsa:vendor "Jinan USR IOT Technology Limited (PUSR)" ;
    icsa:year 2026 .

icsa-res:ICSA-26-050-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-050-04" ;
    dcterms:issued "2026-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2026-24790" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-24790 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-050-04" ;
    icsa:vendor "Welker" ;
    icsa:year 2026 .

icsa-res:ICSA-26-055-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-055-01" ;
    dcterms:issued "2026-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "InSAT MasterSCADA BUK-TS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Russia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater System" ;
    icsa:cveNumber "CVE-2026-22553; CVE-2026-21410" ;
    icsa:cweNumber "CWE-89; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-21410,
        cve-res:CVE-2026-22553 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "InSAT MasterSCADA BUK-TS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "InSAT MasterSCADA BUK-TS: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-055-01" ;
    icsa:vendor "InSAT" ;
    icsa:year 2026 .

icsa-res:ICSA-26-055-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-055-02" ;
    dcterms:issued "2026-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Building Operation Workstation" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Government Facilities; Healthcare and Public Health; Information Technology; Transportation Systems; Financial Services; Defense Industrial Base; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-1226; CVE-2026-1227" ;
    icsa:cweNumber "CWE-94; CWE-611" ;
    icsa:hasCVE cve-res:CVE-2026-1226,
        cve-res:CVE-2026-1227 ;
    icsa:hasCWE cwe-res:CWE-611,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Building Operation Workstation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Building Operation WebStation All 6.x versions prior to 6.0.4.14001 (CP10); EcoStruxure Building Operation Workstation All 7.0.x versions prior to 7.0.3.2000 (CP1); EcoStruxure Building Operation WebStation All 7.0.x versions prior to 7.0.3.2000 (CP1); EcoStruxure Building Operation Workstation All 6.x versions prior to 6.0.4.14001 (CP10)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-055-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-055-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-055-03" ;
    dcterms:issued "2026-02-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Gardyn Home Kit (Update B)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture" ;
    icsa:cveNumber "CVE-2026-25197; CVE-2025-1242; CVE-2026-28766; CVE-2026-32646; CVE-2025-29631; CVE-2025-29629; CVE-2025-10681; CVE-2025-29628; CVE-2026-28767; CVE-2026-32662" ;
    icsa:cweNumber "CWE-639; CWE-306; CWE-78; CWE-798; CWE-319; CWE-489; CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2025-10681,
        cve-res:CVE-2025-1242,
        cve-res:CVE-2025-29628,
        cve-res:CVE-2025-29629,
        cve-res:CVE-2025-29631,
        cve-res:CVE-2026-25197,
        cve-res:CVE-2026-28766,
        cve-res:CVE-2026-28767,
        cve-res:CVE-2026-32646,
        cve-res:CVE-2026-32662 ;
    icsa:hasCWE cwe-res:CWE-1392,
        cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-489,
        cwe-res:CWE-639,
        cwe-res:CWE-78,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Gardyn Home Kit (Update B)" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Gardyn Home Firmware | Gardyn Studio Firmware | Gardyn Mobile Application <2.11.0 | Gardyn Cloud API <2.12.2026" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-055-03" ;
    icsa:vendor "Gardyn" ;
    icsa:year 2026 .

icsa-res:ICSA-26-057-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-057-01" ;
    dcterms:issued "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls, Inc. Frick Controls Quantum HD" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Food and Agriculture" ;
    icsa:cveNumber "CVE-2026-21658; CVE-2026-21657; CVE-2026-21656; CVE-2026-21660; CVE-2026-21659; CVE-2026-21654" ;
    icsa:cweNumber "CWE-94; CWE-23; CWE-256; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-21654,
        cve-res:CVE-2026-21656,
        cve-res:CVE-2026-21657,
        cve-res:CVE-2026-21658,
        cve-res:CVE-2026-21659,
        cve-res:CVE-2026-21660 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-256,
        cwe-res:CWE-78,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls, Inc. Frick Controls Quantum HD" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls; Inc. Frick Controls Quantum HD: <=10.22" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-057-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-057-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-057-02" ;
    dcterms:issued "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pelco, Inc. Sarix Pro 3 Series IP Cameras" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Defense Industrial Base; Energy; Government Facilities; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-1241" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2026-1241 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pelco, Inc. Sarix Pro 3 Series IP Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Inc. Sarix Professional IMP 3 Series: <=02.52; Inc. Sarix Professional IBP 3 Series: <=02.52; Inc. Sarix Professional IXP 3 Series: <=02.52; Pelco; Inc. Sarix Professional IWP 3 Series: <=02.52" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-057-02" ;
    icsa:vendor "Pelco, Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-057-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-057-03" ;
    dcterms:issued "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "CloudCharge cloudcharge.se" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-27652; CVE-2026-25114; CVE-2026-20781; CVE-2026-20733" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-20733,
        cve-res:CVE-2026-20781,
        cve-res:CVE-2026-25114,
        cve-res:CVE-2026-27652 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CloudCharge cloudcharge.se" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CloudCharge cloudcharge.se: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-057-03" ;
    icsa:vendor "CloudCharge" ;
    icsa:year 2026 .

icsa-res:ICSA-26-057-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-057-04" ;
    dcterms:issued "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "EV2GO EV Charging Platform" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-25945; CVE-2026-20895; CVE-2026-24731; CVE-2026-22890" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-20895,
        cve-res:CVE-2026-22890,
        cve-res:CVE-2026-24731,
        cve-res:CVE-2026-25945 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EV2GO ev2go.io" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EV2GO ev2go.io: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-057-04" ;
    icsa:vendor "EV2GO" ;
    icsa:year 2026 .

icsa-res:ICSA-26-057-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-057-05" ;
    dcterms:issued "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Chargemap EV Charging Platform" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-25711; CVE-2026-20792; CVE-2026-20791; CVE-2026-25851" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-20791,
        cve-res:CVE-2026-20792,
        cve-res:CVE-2026-25711,
        cve-res:CVE-2026-25851 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Chargemap chargemap.com" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Chargemap chargemap.com: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-057-05" ;
    icsa:vendor "Chargemap" ;
    icsa:year 2026 .

icsa-res:ICSA-26-057-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-057-06" ;
    dcterms:issued "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "SWTCH EV swtchenergy.com (Update A)" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-27773; CVE-2026-25113; CVE-2026-25778; CVE-2026-27767" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-25113,
        cve-res:CVE-2026-25778,
        cve-res:CVE-2026-27767,
        cve-res:CVE-2026-27773 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SWTCH EV swtchenergy.com (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "swtchenergy.com vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-057-06" ;
    icsa:vendor "SWTCH EV" ;
    icsa:year 2026 .

icsa-res:ICSA-26-057-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-057-07" ;
    dcterms:issued "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "EV Energy Charging Platform" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-25774; CVE-2026-27772; CVE-2026-26290; CVE-2026-24445" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-24445,
        cve-res:CVE-2026-25774,
        cve-res:CVE-2026-26290,
        cve-res:CVE-2026-27772 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EV Energy ev.energy" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EV Energy ev.energy: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-057-07" ;
    icsa:vendor "EV Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-057-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-057-08" ;
    dcterms:issued "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mobility46 EV Charging Platform" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-27028; CVE-2026-27647; CVE-2026-22878; CVE-2026-26305" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-22878,
        cve-res:CVE-2026-26305,
        cve-res:CVE-2026-27028,
        cve-res:CVE-2026-27647 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mobility46 mobility46.se" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mobility46 mobility46.se: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-057-08" ;
    icsa:vendor "Mobility46" ;
    icsa:year 2026 .

icsa-res:ICSA-26-057-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-057-10" ;
    dcterms:issued "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Copeland XWEB and XWEB Pro" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-25721; CVE-2026-25195; CVE-2026-25196; CVE-2026-20797; CVE-2026-22877; CVE-2026-25037; CVE-2026-21389; CVE-2026-20910; CVE-2026-25105; CVE-2026-21718; CVE-2026-3037; CVE-2026-25085; CVE-2026-24695; CVE-2026-24452; CVE-2026-24663; CVE-2026-23702; CVE-2026-20742; CVE-2026-24517; CVE-2026-25109; CVE-2026-25111; CVE-2026-20764; CVE-2026-24689; CVE-2026-20902" ;
    icsa:cweNumber "CWE-22; CWE-121; CWE-78; CWE-394; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2026-20742,
        cve-res:CVE-2026-20764,
        cve-res:CVE-2026-20797,
        cve-res:CVE-2026-20902,
        cve-res:CVE-2026-20910,
        cve-res:CVE-2026-21389,
        cve-res:CVE-2026-21718,
        cve-res:CVE-2026-22877,
        cve-res:CVE-2026-23702,
        cve-res:CVE-2026-24452,
        cve-res:CVE-2026-24517,
        cve-res:CVE-2026-24663,
        cve-res:CVE-2026-24689,
        cve-res:CVE-2026-24695,
        cve-res:CVE-2026-25037,
        cve-res:CVE-2026-25085,
        cve-res:CVE-2026-25105,
        cve-res:CVE-2026-25109,
        cve-res:CVE-2026-25111,
        cve-res:CVE-2026-25195,
        cve-res:CVE-2026-25196,
        cve-res:CVE-2026-25721,
        cve-res:CVE-2026-3037 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-22,
        cwe-res:CWE-327,
        cwe-res:CWE-394,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Copeland XWEB and XWEB Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Copeland XWEB 300D PRO: <=1.12.1; Copeland XWEB 500D PRO: <=1.12.1; Copeland XWEB 500B PRO: <=1.12.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-057-10" ;
    icsa:vendor "Copeland" ;
    icsa:year 2026 .

icsa-res:ICSA-26-062-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-062-01" ;
    dcterms:issued "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet Module (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-1876; CVE-2026-1874; CVE-2026-1875" ;
    icsa:cweNumber "CWE-404; CWE-670" ;
    icsa:hasCVE cve-res:CVE-2026-1874,
        cve-res:CVE-2026-1875,
        cve-res:CVE-2026-1876 ;
    icsa:hasCWE cwe-res:CWE-404,
        cwe-res:CWE-670 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP: <=1.000; Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP: <=1.106" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-062-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-062-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-062-02" ;
    dcterms:issued "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Relion REB500 Product" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-2460; CVE-2026-2459" ;
    icsa:cweNumber "CWE-267" ;
    icsa:hasCVE cve-res:CVE-2026-2459,
        cve-res:CVE-2026-2460 ;
    icsa:hasCWE cwe-res:CWE-267 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy Relion REB500 Product" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "REB500 versions 8.3.3.0 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-062-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-062-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-062-03" ;
    dcterms:issued "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500 Product" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-8176; CVE-2025-59375; CVE-2026-1773; CVE-2026-1772" ;
    icsa:cweNumber "CWE-184; CWE-674; CWE-770; CWE-280" ;
    icsa:hasCVE cve-res:CVE-2024-8176,
        cve-res:CVE-2025-59375,
        cve-res:CVE-2026-1772,
        cve-res:CVE-2026-1773 ;
    icsa:hasCWE cwe-res:CWE-184,
        cwe-res:CWE-280,
        cwe-res:CWE-674,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy RTU500 Product" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RTU500 series CMU Firmware version 13.6.1 through 13.6.2; RTU500 series CMU Firmware version 13.8.1; RTU500 series CMU Firmware version 12.7.1 through 12.7.7; RTU500 series CMU Firmware version 13.7.1 through 13.7.7; RTU500 series CMU Firmware version 13.5.1 through 13.5.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-062-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-062-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-062-04" ;
    dcterms:issued "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Portwell Engineering Toolkits" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-3437" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2026-3437 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Portwell Engineering Toolkits" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Portwell Portwell Engineering Toolkits: 4.8.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-062-04" ;
    icsa:vendor "Portwell" ;
    icsa:year 2026 .

icsa-res:ICSA-26-062-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-062-05" ;
    dcterms:issued "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Labkotec LID-3300IP" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Finland" ;
    icsa:criticalInfrastructureSector "Communications; Energy" ;
    icsa:cveNumber "CVE-2026-1775" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-1775 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Labkotec LID-3300IP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Labkotec LID-3300IP: vers:all/*; Labkotec LID-3300IP Type 2: <V2.20" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-062-05" ;
    icsa:vendor "Labkotec" ;
    icsa:year 2026 .

icsa-res:ICSA-26-062-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-062-06" ;
    dcterms:issued "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mobiliti e‑mobi EV Charging Platform" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Hungary" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-26051; CVE-2026-27764; CVE-2026-27777; CVE-2026-20882" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-20882,
        cve-res:CVE-2026-26051,
        cve-res:CVE-2026-27764,
        cve-res:CVE-2026-27777 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mobiliti e-mobi.hu" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mobiliti e-mobi.hu: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-062-06" ;
    icsa:vendor "Mobiliti" ;
    icsa:year 2026 .

icsa-res:ICSA-26-062-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-062-07" ;
    dcterms:issued "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "ePower EV Charging Platform" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-22552; CVE-2026-27770; CVE-2026-27778; CVE-2026-24912" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-22552,
        cve-res:CVE-2026-24912,
        cve-res:CVE-2026-27770,
        cve-res:CVE-2026-27778 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ePower epower.ie" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ePower epower.ie: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-062-07" ;
    icsa:vendor "ePower" ;
    icsa:year 2026 .

icsa-res:ICSA-26-062-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-062-08" ;
    dcterms:issued "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Everon EV Charging Platform" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-26288; CVE-2026-27027; CVE-2026-20748; CVE-2026-24696" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-20748,
        cve-res:CVE-2026-24696,
        cve-res:CVE-2026-26288,
        cve-res:CVE-2026-27027 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Everon OCPP Backends" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Everon api.everon.io: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-062-08" ;
    icsa:vendor "Everon" ;
    icsa:year 2026 .

icsa-res:ICSA-26-064-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-064-01" ;
    dcterms:issued "2026-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics CNCSoft-G2" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-3094" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-3094 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics CNCSoft-G2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Electronics CNCSoft-G2: <V2.1.0.39" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-064-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2026 .

icsa-res:ICSA-26-069-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-069-01" ;
    dcterms:issued "2026-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Apeman Cameras" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-11851; CVE-2025-11852; CVE-2025-11126" ;
    icsa:cweNumber "CWE-306; CWE-79; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2025-11126,
        cve-res:CVE-2025-11851,
        cve-res:CVE-2025-11852 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-522,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Apeman Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Apeman ID71: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-069-01" ;
    icsa:vendor "Apeman" ;
    icsa:year 2026 .

icsa-res:ICSA-26-069-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-069-02" ;
    dcterms:issued "2026-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Lantronix EDS3000PS and EDS5000 (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Information Technology; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-67034; CVE-2025-67036; CVE-2025-67037; CVE-2025-67041; CVE-2025-67035; CVE-2025-67039; CVE-2025-70082; CVE-2025-67038" ;
    icsa:cweNumber "CWE-78; CWE-288; CWE-620" ;
    icsa:hasCVE cve-res:CVE-2025-67034,
        cve-res:CVE-2025-67035,
        cve-res:CVE-2025-67036,
        cve-res:CVE-2025-67037,
        cve-res:CVE-2025-67038,
        cve-res:CVE-2025-67039,
        cve-res:CVE-2025-67041,
        cve-res:CVE-2025-70082 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-620,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lantronix EDS3000PS and EDS5000 (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Lantronix G520 series: <2.6.0.4R6; Lantronix X300 series: <2.6.0.4R6; Lantronix EDS5000 series: <=2.1.0.0R3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-069-02" ;
    icsa:vendor "Lantronix" ;
    icsa:year 2026 .

icsa-res:ICSA-26-069-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-069-03" ;
    dcterms:issued "2026-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Honeywell IQ4 Series BMS Controller (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Government Facilities; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-3611" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-3611 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Honeywell IQ4x BMS Controller (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Honeywell IQ4NC Firmware: <v3.30; Honeywell IQ422 Firmware: <v3.30; Honeywell IQ412 Firmware: <v3.30; Honeywell IQ41x Firmware: <v3.30; Honeywell IQ4E Firmware: <v3.30" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-069-03" ;
    icsa:vendor "Honeywell" ;
    icsa:year 2026 .

icsa-res:ICSA-26-071-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-071-01" ;
    dcterms:issued "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Trane Tracer SC, Tracer SC+, and Tracer Concierge" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities" ;
    icsa:cveNumber "CVE-2026-28253; CVE-2026-28255; CVE-2026-28256; CVE-2026-28252; CVE-2026-28254" ;
    icsa:cweNumber "CWE-862; CWE-547; CWE-789; CWE-798; CWE-327" ;
    icsa:hasCVE cve-res:CVE-2026-28252,
        cve-res:CVE-2026-28253,
        cve-res:CVE-2026-28254,
        cve-res:CVE-2026-28255,
        cve-res:CVE-2026-28256 ;
    icsa:hasCWE cwe-res:CWE-327,
        cwe-res:CWE-547,
        cwe-res:CWE-789,
        cwe-res:CWE-798,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Trane Tracer SC, Tracer SC+, and Tracer Concierge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Trane Tracer SC: <v4.4_SP7; Trane Tracer SC+: <v6.3.2310; Trane Tracer Concierge: <v6.3.2310" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-071-01" ;
    icsa:vendor "Trane" ;
    icsa:year 2026 .

icsa-res:ICSA-26-071-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-071-02" ;
    dcterms:issued "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 Devices" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-24858; CVE-2025-64157; CVE-2025-55018; CVE-2025-62439" ;
    icsa:cweNumber "CWE-134; CWE-940; CWE-444; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-55018,
        cve-res:CVE-2025-62439,
        cve-res:CVE-2025-64157,
        cve-res:CVE-2026-24858 ;
    icsa:hasCWE cwe-res:CWE-134,
        cwe-res:CWE-288,
        cwe-res:CWE-444,
        cwe-res:CWE-940 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM APE1808 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM APE1808" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-071-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-071-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-071-03" ;
    dcterms:issued "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIDIS Prime" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-41996; CVE-2025-58751; CVE-2025-15284; CVE-2024-29857; CVE-2025-62522; CVE-2025-58752; CVE-2025-69277; CVE-2025-58754; CVE-2025-7783; CVE-2025-66035; CVE-2025-6965; CVE-2025-66412; CVE-2025-9230; CVE-2024-30172; CVE-2025-66031; CVE-2025-66030; CVE-2025-64756; CVE-2025-9670; CVE-2024-30171; CVE-2025-12816; CVE-2025-64718; CVE-2025-9232; CVE-2026-22610" ;
    icsa:cweNumber "CWE-201; CWE-79; CWE-22; CWE-674; CWE-770; CWE-1333; CWE-184; CWE-330; CWE-436; CWE-20; CWE-190; CWE-787; CWE-1321; CWE-23; CWE-78; CWE-203; CWE-197; CWE-295; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-29857,
        cve-res:CVE-2024-30171,
        cve-res:CVE-2024-30172,
        cve-res:CVE-2024-41996,
        cve-res:CVE-2025-12816,
        cve-res:CVE-2025-15284,
        cve-res:CVE-2025-58751,
        cve-res:CVE-2025-58752,
        cve-res:CVE-2025-58754,
        cve-res:CVE-2025-62522,
        cve-res:CVE-2025-64718,
        cve-res:CVE-2025-64756,
        cve-res:CVE-2025-66030,
        cve-res:CVE-2025-66031,
        cve-res:CVE-2025-66035,
        cve-res:CVE-2025-66412,
        cve-res:CVE-2025-69277,
        cve-res:CVE-2025-6965,
        cve-res:CVE-2025-7783,
        cve-res:CVE-2025-9230,
        cve-res:CVE-2025-9232,
        cve-res:CVE-2025-9670,
        cve-res:CVE-2026-22610 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-1321,
        cwe-res:CWE-1333,
        cwe-res:CWE-184,
        cwe-res:CWE-190,
        cwe-res:CWE-197,
        cwe-res:CWE-20,
        cwe-res:CWE-201,
        cwe-res:CWE-203,
        cwe-res:CWE-22,
        cwe-res:CWE-23,
        cwe-res:CWE-295,
        cwe-res:CWE-330,
        cwe-res:CWE-436,
        cwe-res:CWE-674,
        cwe-res:CWE-770,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIDIS Prime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIDIS Prime" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-071-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-071-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-071-04" ;
    dcterms:issued "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40943" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-40943 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0); SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0); SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN (6ES7516-2GN00-0AB0); SIMATIC ET 200SP Open Controller CPU 1515SP PC3 (incl. SIPLUS variants) V3 CPUs - Windows OS; SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0); SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0); SIMATIC S7-1500 CPU 1517H-4 PN (6ES7517-4HQ10-0AB0); SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0); SIMATIC S7-1500 CPU 1513pro-2 PN (6ES7513-2PM03-0AB0); SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK01-1AB0); SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM02-2AB0); SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-7AB0); SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0); SIMATIC S7-1500 Software Controller CPU 1508S F V3; SIMATIC S7-1500 CPU 1516pro-2 PN (6ES7516-2PP03-0AB0); SIMATIC S7-1500 Software Controller CPU 1508S F V4; SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN02-2AB0); SIMATIC ET 200SP Open Controller CPU 1515SP PC3 (incl. SIPLUS variants) V3 CPUs - Industrial OS; SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0); SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK (6ES7518-4FP00-3AB0); SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0); SIMATIC S7-1500 CPU 1518HF-4 PN (6ES7518-4JP00-0AB0); SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0); SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS; SIMATIC S7-1500 Software Controller Linux V2; SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RN03-0AB0); SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0); SIMATIC S7-1500 Software Controller CPU 1508S V4; SIMATIC S7-1500 CPU 1518-3 PN (6ES7518-3AT10-0AB0); SIPLUS ET 200SP CPU 1510SP F-1 PN (6AG1510-1SJ01-2AB0); SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS; SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-1AB0); SIMATIC S7-1500 CPU 1516pro F-2 PN (6ES7516-2GP03-0AB0); SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0); SIMATIC S7-1500 CPU 1517T-3 PN (6ES7517-3TQ10-0AB0); SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-7AB0); SIPLUS S7-1500 CPU 1518F-4 PN/DP (6AG1518-4FP00-4AB0); SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK01-0AB0); SIMATIC ET 200SP CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0); SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants); SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM01-2AB0); SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL01-2AB0); SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL (6AG2516-3AN01-4AB0); SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0); SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0); SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0); SIMATIC S7-1500 Software Controller CPU 1507S V4; SIMATIC ET 200SP CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0); SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0); SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-2AB0); SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS; SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0); SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-4AB0); SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0); SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0); SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN (6ES7513-2PL00-0AB0); SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0); SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-7AB0); SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0); SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK02-2AB0); SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-7AB0); SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-7AB0); SIMATIC S7-1500 CPU 1517F-3 PN (6ES7517-3FQ10-0AB0); SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-1AB0); SIMATIC S7-1500 Software Controller CPU 1508S V2; SIMATIC S7-1500 CPU 1518T-3 PN (6ES7518-3TT10-0AB0); SIMATIC S7-PLCSIM Advanced; SIMATIC S7-1500 Software Controller CPU 1508S TF V3; SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0); SIMATIC S7-1500 Software Controller CPU 1507S F V3; SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0); SIMATIC S7-1500 CPU 1518TF-3 PN (6ES7518-3UT10-0AB0); SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0); SIMATIC S7-1500 CPU 1513pro F-2 PN (6ES7513-2GM03-0AB0); SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0); SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-4AB0); SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0); SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CM03-0AB0); SIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0); SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0); SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0); SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0); SIMATIC S7-1500 CPU 1516TF-3 PN (6ES7516-3UP10-0AB0); SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-1AB0); SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0); SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN (6ES7513-2GL00-0AB0); SIPLUS S7-1500 CPU 1518HF-4 PN (6AG1518-4JP00-4AB0); SIMATIC S7-1500 Software Controller CPU 1508S V3; SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK02-1AB0); SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-2AB0); SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-7AB0); SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-2AB0); SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DK03-0AB0); SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-4AB0); SIMATIC S7-1500 Software Controller CPU 1507S V2; SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0); SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL (6AG2516-3AN02-4AB0); SIPLUS S7-1500 CPU 1518-4 PN/DP (6AG1518-4AP00-4AB0); SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0); SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0); SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN01-2AB0); SIMATIC ET 200SP CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0); SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0); SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0); SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0); SIMATIC S7-1500 Software Controller CPU 1507S F V2; SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0); SIMATIC S7-1500 CPU 1518F-3 PN (6ES7518-3FT10-0AB0); SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL02-2AB0); SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0); SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0); SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0); SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0); SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-7AB0); SIMATIC S7-1500 Software Controller CPU 1508S T V3; SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0); SIMATIC S7-1500 Software Controller CPU 1507S F V4; SIMATIC S7-1500 CPU 1517TF-3 PN (6ES7517-3UQ10-0AB0); SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DM03-0AB0); SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0); SIMATIC S7-1500 Software Controller CPU 1507S V3; SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0); SIMATIC S7-1500 CPU 1518HF-4 PN (6ES7518-4JT10-0AB0); SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-2AB0); SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK01-4AB0); SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0); SIMATIC S7-1500 Software Controller CPU 1508S F V2; SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0); SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL (6AG2510-1SJ01-1AB0); SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-2AB0); SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK (6ES7518-4AP00-3AB0); SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-2AB0); SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0); SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0); SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0); SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0); SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0); SIMATIC ET 200SP CPU 1514SP-2 PN (6ES7514-2DN03-0AB0); SIMATIC S7-1500 CPU 1517-3 PN (6ES7517-3AQ10-0AB0); SIPLUS S7-1500 CPU 1517H-3 PN (6AG1517-3HP00-4AB0); SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-7AB0); SIMATIC ET 200SP Open Controller CPU 1515SP PC3 (incl. SIPLUS variants) V2 CPUs - Windows OS; SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0); SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RL00-0AB0); SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK02-4AB0); SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-2AB0); SIMATIC S7-1500 CPU 1516T-3 PN (6ES7516-3TP10-0AB0); SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0); SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-2AB0); SIMATIC S7-1500 CPU 1513R-1 PN (6ES7513-1RM03-0AB0); SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK01-2AB0); SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0); SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-4AB0); SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-2AB0); SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0); SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-2AB0); SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN (6ES7516-2PN00-0AB0); SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0); SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP01-0AB0); SIMATIC S7-1500 CPU 1517H-3 PN (6ES7517-3HP00-0AB0); SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL (6AG2515-2FM01-2AB0); SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-7AB0); SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0); SIMATIC S7-1500 Software Controller Linux V3; SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL (6AG2515-2RM00-4AB0); SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0); SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0); SIMATIC S7-1500 CPU 1515R-2 PN (6ES7515-2RM00-0AB0); SIPLUS S7-1500 CPU 1515R-2 PN (6AG1515-2RM00-7AB0); SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0); SIPLUS S7-1500 CPU 1515F-2 PN RAIL (6AG2515-2FM02-4AB0)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-071-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-071-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-071-05" ;
    dcterms:issued "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Heliox EV Chargers" ;
    icsa:CVSSScore "2.6"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-27769" ;
    icsa:cweNumber "CWE-923" ;
    icsa:hasCVE cve-res:CVE-2025-27769 ;
    icsa:hasCWE cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Heliox EV Chargers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Heliox Mobile DC 40 kW EV Charging Station; Heliox Flex 180 kW EV Charging Station" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-071-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-071-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-071-06" ;
    dcterms:issued "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition Software" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2025-13913" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-13913 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Inductive Automation Ignition Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Inductive Automation Ignition Software: <8.3.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-071-06" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-076-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-076-01" ;
    dcterms:issued "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "CODESYS in Festo Automation Suite" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-9012; CVE-2022-47378; CVE-2022-47384; CVE-2023-37551; CVE-2022-4224; CVE-2023-3663; CVE-2020-12067; CVE-2021-21866; CVE-2023-37545; CVE-2022-32139; CVE-2021-21867; CVE-2022-47393; CVE-2023-6357; CVE-2024-8175; CVE-2019-9011; CVE-2022-47392; CVE-2022-47390; CVE-2023-37546; CVE-2023-3935; CVE-2020-14509; CVE-2020-11023; CVE-2021-29240; CVE-2021-21864; CVE-2021-30195; CVE-2019-9010; CVE-2022-47389; CVE-2018-0739; CVE-2019-13538; CVE-2022-22508; CVE-2025-41658; CVE-2018-20026; CVE-2020-15806; CVE-2023-37558; CVE-2023-37548; CVE-2021-34595; CVE-2022-31806; CVE-2018-10612; CVE-2021-33485; CVE-2022-47379; CVE-2022-47386; CVE-2023-37550; CVE-2020-14513; CVE-2022-32137; CVE-2022-47382; CVE-2022-47385; CVE-2019-5105; CVE-2022-22513; CVE-2021-29241; CVE-2019-9013; CVE-2022-47383; CVE-2023-3662; CVE-2022-47381; CVE-2023-37547; CVE-2023-3669; CVE-2022-22514; CVE-2022-32142; CVE-2023-37554; CVE-2022-32141; CVE-2021-36765; CVE-2019-9009; CVE-2021-21865; CVE-2023-37549; CVE-2020-7052; CVE-2023-49676; CVE-2023-37556; CVE-2023-37557; CVE-2020-14517; CVE-2021-21868; CVE-2019-18858; CVE-2021-33486; CVE-2022-47388; CVE-2022-32140; CVE-2019-19789; CVE-2022-4048; CVE-2020-12069; CVE-2022-47387; CVE-2020-14515; CVE-2025-1468; CVE-2022-32143; CVE-2021-29242; CVE-2018-20025; CVE-2025-0694; CVE-2017-3735; CVE-2021-36764; CVE-2022-32138; CVE-2022-47391; CVE-2023-37559; CVE-2021-34593; CVE-2022-22519; CVE-2022-22516; CVE-2025-41659; CVE-2022-47380; CVE-2022-22517; CVE-2025-2595; CVE-2010-5250; CVE-2019-13532; CVE-2021-30186; CVE-2022-4046; CVE-2023-49675; CVE-2020-16233; CVE-2021-29239; CVE-2020-10245; CVE-2023-3670; CVE-2021-34596; CVE-2022-30791; CVE-2021-21869; CVE-2023-37553; CVE-2022-1989; CVE-2022-1965; CVE-2020-14519; CVE-2021-36763; CVE-2019-13548; CVE-2021-21863; CVE-2021-30188; CVE-2022-22515; CVE-2022-30792; CVE-2023-37552; CVE-2019-13542; CVE-2024-5000; CVE-2021-30187; CVE-2019-9008; CVE-2022-32136; CVE-2023-37555; CVE-2022-31805; CVE-2020-12068; CVE-2021-30190" ;
    icsa:cweNumber "CWE-307; CWE-416; CWE-122; CWE-276; CWE-426; CWE-427; CWE-79; CWE-1188; CWE-823; CWE-82; CWE-75; CWE-347; CWE-476; CWE-400; CWE-754; CWE-22; CWE-404; CWE-12; CWE-668; CWE-674; CWE-770; CWE-640; CWE-401; CWE-126; CWE-326; CWE-330; CWE-20; CWE-121; CWE-916; CWE-502; CWE-523; CWE-425; CWE-120; CWE-822; CWE-552; CWE-787; CWE-284; CWE-923; CWE-13; CWE-78; CWE-119; CWE-269; CWE-345; CWE-805; CWE-203; CWE-327; CWE-50; CWE-940; CWE-33; CWE-732; CWE-194; CWE-306; CWE-755; CWE-346; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2010-5250,
        cve-res:CVE-2017-3735,
        cve-res:CVE-2018-0739,
        cve-res:CVE-2018-10612,
        cve-res:CVE-2018-20025,
        cve-res:CVE-2018-20026,
        cve-res:CVE-2019-13532,
        cve-res:CVE-2019-13538,
        cve-res:CVE-2019-13542,
        cve-res:CVE-2019-13548,
        cve-res:CVE-2019-18858,
        cve-res:CVE-2019-19789,
        cve-res:CVE-2019-5105,
        cve-res:CVE-2019-9008,
        cve-res:CVE-2019-9009,
        cve-res:CVE-2019-9010,
        cve-res:CVE-2019-9011,
        cve-res:CVE-2019-9012,
        cve-res:CVE-2019-9013,
        cve-res:CVE-2020-10245,
        cve-res:CVE-2020-11023,
        cve-res:CVE-2020-12067,
        cve-res:CVE-2020-12068,
        cve-res:CVE-2020-12069,
        cve-res:CVE-2020-14509,
        cve-res:CVE-2020-14513,
        cve-res:CVE-2020-14515,
        cve-res:CVE-2020-14517,
        cve-res:CVE-2020-14519,
        cve-res:CVE-2020-15806,
        cve-res:CVE-2020-16233,
        cve-res:CVE-2020-7052,
        cve-res:CVE-2021-21863,
        cve-res:CVE-2021-21864,
        cve-res:CVE-2021-21865,
        cve-res:CVE-2021-21866,
        cve-res:CVE-2021-21867,
        cve-res:CVE-2021-21868,
        cve-res:CVE-2021-21869,
        cve-res:CVE-2021-29239,
        cve-res:CVE-2021-29240,
        cve-res:CVE-2021-29241,
        cve-res:CVE-2021-29242,
        cve-res:CVE-2021-30186,
        cve-res:CVE-2021-30187,
        cve-res:CVE-2021-30188,
        cve-res:CVE-2021-30190,
        cve-res:CVE-2021-30195,
        cve-res:CVE-2021-33485,
        cve-res:CVE-2021-33486,
        cve-res:CVE-2021-34593,
        cve-res:CVE-2021-34595,
        cve-res:CVE-2021-34596,
        cve-res:CVE-2021-36763,
        cve-res:CVE-2021-36764,
        cve-res:CVE-2021-36765,
        cve-res:CVE-2022-1965,
        cve-res:CVE-2022-1989,
        cve-res:CVE-2022-22508,
        cve-res:CVE-2022-22513,
        cve-res:CVE-2022-22514,
        cve-res:CVE-2022-22515,
        cve-res:CVE-2022-22516,
        cve-res:CVE-2022-22517,
        cve-res:CVE-2022-22519,
        cve-res:CVE-2022-30791,
        cve-res:CVE-2022-30792,
        cve-res:CVE-2022-31805,
        cve-res:CVE-2022-31806,
        cve-res:CVE-2022-32136,
        cve-res:CVE-2022-32137,
        cve-res:CVE-2022-32138,
        cve-res:CVE-2022-32139,
        cve-res:CVE-2022-32140,
        cve-res:CVE-2022-32141,
        cve-res:CVE-2022-32142,
        cve-res:CVE-2022-32143,
        cve-res:CVE-2022-4046,
        cve-res:CVE-2022-4048,
        cve-res:CVE-2022-4224,
        cve-res:CVE-2022-47378,
        cve-res:CVE-2022-47379,
        cve-res:CVE-2022-47380,
        cve-res:CVE-2022-47381,
        cve-res:CVE-2022-47382,
        cve-res:CVE-2022-47383,
        cve-res:CVE-2022-47384,
        cve-res:CVE-2022-47385,
        cve-res:CVE-2022-47386,
        cve-res:CVE-2022-47387,
        cve-res:CVE-2022-47388,
        cve-res:CVE-2022-47389,
        cve-res:CVE-2022-47390,
        cve-res:CVE-2022-47391,
        cve-res:CVE-2022-47392,
        cve-res:CVE-2022-47393,
        cve-res:CVE-2023-3662,
        cve-res:CVE-2023-3663,
        cve-res:CVE-2023-3669,
        cve-res:CVE-2023-3670,
        cve-res:CVE-2023-37545,
        cve-res:CVE-2023-37546,
        cve-res:CVE-2023-37547,
        cve-res:CVE-2023-37548,
        cve-res:CVE-2023-37549,
        cve-res:CVE-2023-37550,
        cve-res:CVE-2023-37551,
        cve-res:CVE-2023-37552,
        cve-res:CVE-2023-37553,
        cve-res:CVE-2023-37554,
        cve-res:CVE-2023-37555,
        cve-res:CVE-2023-37556,
        cve-res:CVE-2023-37557,
        cve-res:CVE-2023-37558,
        cve-res:CVE-2023-37559,
        cve-res:CVE-2023-3935,
        cve-res:CVE-2023-49675,
        cve-res:CVE-2023-49676,
        cve-res:CVE-2023-6357,
        cve-res:CVE-2024-5000,
        cve-res:CVE-2024-8175,
        cve-res:CVE-2025-0694,
        cve-res:CVE-2025-1468,
        cve-res:CVE-2025-2595,
        cve-res:CVE-2025-41658,
        cve-res:CVE-2025-41659 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-119,
        cwe-res:CWE-12,
        cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-126,
        cwe-res:CWE-13,
        cwe-res:CWE-194,
        cwe-res:CWE-20,
        cwe-res:CWE-203,
        cwe-res:CWE-22,
        cwe-res:CWE-269,
        cwe-res:CWE-276,
        cwe-res:CWE-284,
        cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-326,
        cwe-res:CWE-327,
        cwe-res:CWE-33,
        cwe-res:CWE-330,
        cwe-res:CWE-345,
        cwe-res:CWE-346,
        cwe-res:CWE-347,
        cwe-res:CWE-400,
        cwe-res:CWE-401,
        cwe-res:CWE-404,
        cwe-res:CWE-416,
        cwe-res:CWE-425,
        cwe-res:CWE-426,
        cwe-res:CWE-427,
        cwe-res:CWE-476,
        cwe-res:CWE-50,
        cwe-res:CWE-502,
        cwe-res:CWE-523,
        cwe-res:CWE-552,
        cwe-res:CWE-640,
        cwe-res:CWE-668,
        cwe-res:CWE-674,
        cwe-res:CWE-732,
        cwe-res:CWE-75,
        cwe-res:CWE-754,
        cwe-res:CWE-755,
        cwe-res:CWE-770,
        cwe-res:CWE-78,
        cwe-res:CWE-787,
        cwe-res:CWE-79,
        cwe-res:CWE-805,
        cwe-res:CWE-82,
        cwe-res:CWE-822,
        cwe-res:CWE-823,
        cwe-res:CWE-916,
        cwe-res:CWE-923,
        cwe-res:CWE-940 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CODESYS in Festo Automation Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FESTO; CODESYS FESTO Software Festo Automation Suite (versions prior to 2.8.0.138) installed with CODESYS Software CODESYS Development System (3.5.16.10): vers:all/*; CODESYS FESTO Software Festo Automation Suite (2.8.0.137) installed with CODESYS Software CODESYS Development System (3.0): vers:all/*; CODESYS FESTO Software Festo Automation Suite (2.8.0.137) installed with CODESYS Software CODESYS Development System (3.5.16.10): vers:all/*; CODESYS FESTO Software Festo Automation Suite (versions prior to 2.8.0.138) installed with CODESYS Software CODESYS Development System (3.0): vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-076-01" ;
    icsa:vendor "FESTO, CODESYS" ;
    icsa:year 2026 .

icsa-res:ICSA-26-076-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-076-02" ;
    dcterms:issued "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SCADAPack and RemoteConnect" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-0667" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2026-0667 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric SCADAPack and RemoteConnect" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RemoteConnect Versions prior to R3.4.2; SCADAPack 57x All Versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-076-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-076-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-076-03" ;
    dcterms:issued "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure IT Data Center Expert" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-13957" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2025-13957 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Data Center Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) v9.0 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-076-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-076-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-076-04" ;
    dcterms:issued "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM SIAPP SDK" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-25570; CVE-2026-25569; CVE-2026-25572; CVE-2026-25605; CVE-2026-25571; CVE-2026-25573" ;
    icsa:cweNumber "CWE-130; CWE-121; CWE-73; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-25569,
        cve-res:CVE-2026-25570,
        cve-res:CVE-2026-25571,
        cve-res:CVE-2026-25572,
        cve-res:CVE-2026-25573,
        cve-res:CVE-2026-25605 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-130,
        cwe-res:CWE-73,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SICAM SIAPP SDK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SICAM SIAPP SDK" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-076-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-078-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-078-01" ;
    dcterms:issued "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M241, M251, and M262" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-13901" ;
    icsa:cweNumber "CWE-404" ;
    icsa:hasCVE cve-res:CVE-2025-13901 ;
    icsa:hasCWE cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon M241, M251, and M262" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric Modicon M262 versions prior to 5.4.10.12: Modicon_Controller_M262; Schneider Electric Modicon M241 versions prior to 5.4.13.12: Modicon_Controller_M241; Schneider Electric Modicon M251 versions prior to 5.4.13.12: Modicon_Controller_M251" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-078-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-078-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-078-02" ;
    dcterms:issued "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Controllers M241, M251, M258, and LMC058" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-13902" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-13902 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon Controllers M241, M251, M258, and LMC058" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric Modicon M241 versions prior to 5.4.13.12: Modicon_Controller_M241; Schneider Electric Modicon M251 versions prior to 5.4.13.12: Modicon_Controller_M251; Schneider Electric Modicon Controllers M258 all firmware versions: Modicon_Controllers_M258; Schneider Electric Modicon Controllers LMC058 all firmware versions: Modicon_Controllers_LMC058" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-078-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-078-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-078-03" ;
    dcterms:issued "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Automation Expert" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-2273" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2026-2273 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Automation Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Automation Expert Versions prior to v25.0.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-078-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-078-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-078-04" ;
    dcterms:issued "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure PME and EPO" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health; Information Technology; Critical Manufacturing; Commercial Facilities; Energy; Transportation Systems; Government Facilities; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-11739" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-11739 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure PME and EPO" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Power Operation (EPO) 2022 Advanced Reporting and Dashboards Module Version 2022 and prior; EcoStruxure Power Monitoring Expert (PME) Version 2024 R2; EcoStruxure Power Operation (EPO) 2024 with Advanced Reporting and Dashboards Module Version 2024; EcoStruxure Power Monitoring Expert (PME) Version 2023 R2; EcoStruxure Power Monitoring Expert (PME) Version 2022 and prior; EcoStruxure Power Monitoring Expert (PME) Version 2023; EcoStruxure Power Monitoring Expert (PME) Version 2024" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-078-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-078-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-078-05" ;
    dcterms:issued "2026-03-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric CNC Series (Update A)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-2399" ;
    icsa:cweNumber "CWE-1285" ;
    icsa:hasCVE cve-res:CVE-2025-2399 ;
    icsa:hasCWE cwe-res:CWE-1285 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric CNC Series (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric M800VW (BND-2051W000) <=BB | Mitsubishi Electric M800VS (BND-2052W000) <=BB | Mitsubishi Electric M80V (BND-2053W000) <=BB | Mitsubishi Electric M80VW (BND-2054W000) <=BB | Mitsubishi Electric M800W (BND-2005W000) <=FM | Mitsubishi Electric M800S (BND-2006W000) <=FM | Mitsubishi Electric M80 (BND-2007W000) <=FM | Mitsubishi Electric M80W (BND-2008W000) <=FM | Mitsubishi Electric E80 (BND-2009W000) <=FM | Mitsubishi Electric C80 (BND-2036W000) | Mitsubishi Electric M750VW (BND-1015W002) <=LJ | Mitsubishi Electric M730VW (BND-1015W000) <=LJ | Mitsubishi Electric M720VW (BND-1015W000) <=LJ | Mitsubishi Electric M750VS (BND-1012W002) <=LJ | Mitsubishi Electric M730VS (BND-1012W000) <=LJ | Mitsubishi Electric M720VS (BND-1012W000) <=LJ | Mitsubishi Electric M70V (BND-1018W000) <=LJ | Mitsubishi Electric E70 (BND-1022W000) <=LJ" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-078-05" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-078-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-078-06" ;
    dcterms:issued "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "CTEK Chargeportal" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-28204; CVE-2026-27649; CVE-2026-25192; CVE-2026-31904" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-25192,
        cve-res:CVE-2026-27649,
        cve-res:CVE-2026-28204,
        cve-res:CVE-2026-31904 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CTEK Chargeportal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CTEK Chargeportal: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-078-06" ;
    icsa:vendor "CTEK" ;
    icsa:year 2026 .

icsa-res:ICSA-26-078-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-078-07" ;
    dcterms:issued "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "IGL-Technologies eParking.fi" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Finland" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-29796; CVE-2026-32663; CVE-2026-31903; CVE-2026-31926" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-29796,
        cve-res:CVE-2026-31903,
        cve-res:CVE-2026-31926,
        cve-res:CVE-2026-32663 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IGL-Technologies eParking.fi" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IGL-Technologies eParking.fi: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-078-07" ;
    icsa:vendor "IGL-Technologies" ;
    icsa:year 2026 .

icsa-res:ICSA-26-078-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-078-08" ;
    dcterms:issued "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Automated Logic WebCTRL Premium Server" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-24060; CVE-2026-25086; CVE-2026-32666" ;
    icsa:cweNumber "CWE-605; CWE-319; CWE-290" ;
    icsa:hasCVE cve-res:CVE-2026-24060,
        cve-res:CVE-2026-25086,
        cve-res:CVE-2026-32666 ;
    icsa:hasCWE cwe-res:CWE-290,
        cwe-res:CWE-319,
        cwe-res:CWE-605 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Automated Logic WebCTRL Premium Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Automated Logic WebCTRL Premium Server: <v8.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-078-08" ;
    icsa:vendor "Automated Logic" ;
    icsa:year 2026 .

icsa-res:ICSA-26-083-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-083-01" ;
    dcterms:issued "2026-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pharos Controls Mosaic Show Controller" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-2417" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-2417 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pharos Controls Mosaic Show Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Pharos Controls Mosaic Show Controller Firmware: 2.15.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-083-01" ;
    icsa:vendor "Pharos Controls" ;
    icsa:year 2026 .

icsa-res:ICSA-26-083-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-083-02" ;
    dcterms:issued "2026-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Foxboro DCS" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-1286" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2026-1286 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Foxboro DCS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Foxboro DCS versions prior to CS8.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-083-02" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-083-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-083-03" ;
    dcterms:issued "2026-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Plant iT/Brewmaxx" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing; Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-46817; CVE-2025-46818; CVE-2025-49844; CVE-2025-46819" ;
    icsa:cweNumber "CWE-416; CWE-190; CWE-94" ;
    icsa:hasCVE cve-res:CVE-2025-46817,
        cve-res:CVE-2025-46818,
        cve-res:CVE-2025-46819,
        cve-res:CVE-2025-49844 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-416,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Plant iT/Brewmaxx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric Plant iT/Brewmaxx: 9.60_and_above" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-083-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-085-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-085-01" ;
    dcterms:issued "2026-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "WAGO GmbH & Co. KG Industrial Managed Switches" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-3587" ;
    icsa:cweNumber "CWE-912" ;
    icsa:hasCVE cve-res:CVE-2026-3587 ;
    icsa:hasCWE cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WAGO GmbH & Co. KG Industrial Managed Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WAGO WAGO Firmware versions prior to V1.2.0.S0: WAGO_Hardware_852-1305/000-001; WAGO WAGO Firmware version V1.2.0.S0: WAGO_Hardware_852-1305/000-001; WAGO WAGO Firmware versions prior to V1.0.6.S0: WAGO_Hardware_852-602; WAGO WAGO Firmware versions prior to V1.2.1.S0: WAGO_Hardware_852-1813/010-000; WAGO WAGO Firmware version V1.2.8.S0: WAGO_Hardware_852-303; WAGO WAGO Firmware version V1.2.1.S0: WAGO_Hardware_852-1813; WAGO WAGO Firmware versions prior to V1.2.1.S0: WAGO_Hardware_852-1812/010-000; WAGO WAGO Firmware version V1.2.5.S0: WAGO_Hardware_852-1605; WAGO WAGO Firmware version V1.1.9.S0: WAGO_Hardware_852-1505; WAGO WAGO Firmware version V1.2.1.S1: WAGO_Hardware_852-1813/010-001; WAGO WAGO Firmware version V1.2.1.S0: WAGO_Hardware_852-1812/010-000; WAGO WAGO Firmware versions prior to V1.2.0.S0: WAGO_Hardware_852-1505/000-001; WAGO WAGO Firmware versions prior to V1.2.1.S0: WAGO_Hardware_852-1816; WAGO WAGO Firmware versions prior to V1.2.8.S0: WAGO_Hardware_852-303; WAGO WAGO Firmware version V1.2.1.S0: WAGO_Hardware_852-1813/010-000; WAGO WAGO Firmware version V1.2.1.S0: WAGO_Hardware_852-1813/010-001; WAGO WAGO Firmware versions prior to V1.2.3.S0: WAGO_Hardware_852-1813/000-001; WAGO WAGO Firmware versions prior to V1.1.9.S0: WAGO_Hardware_852-1505; WAGO WAGO Firmware versions prior to V1.2.1.S0: WAGO_Hardware_852-1816/010-000; WAGO WAGO Firmware version V1.2.1.S0: WAGO_Hardware_852-1816/010-000; WAGO WAGO Firmware versions prior to V1.2.0.S0: WAGO_Hardware_852-1305; WAGO WAGO Firmware version V1.2.1.S0: WAGO_Hardware_852-1812; WAGO WAGO Firmware versions prior to V1.2.5.S0: WAGO_Hardware_852-1605; WAGO WAGO Firmware version V1.2.3.S0: WAGO_Hardware_852-1813/000-001; WAGO WAGO Firmware version V1.0.6.S0: WAGO_Hardware_852-602; WAGO WAGO Firmware version V1.0.6.S0: WAGO_Hardware_852-603; WAGO WAGO Firmware versions prior to V1.2.1.S0: WAGO_Hardware_852-1812; WAGO WAGO Firmware version V1.2.0.S0: WAGO_Hardware_852-1305; WAGO WAGO Firmware versions prior to V1.0.6.S0: WAGO_Hardware_852-603; WAGO WAGO Firmware version V1.2.1.S0: WAGO_Hardware_852-1816; WAGO WAGO Firmware version V1.2.0.S0: WAGO_Hardware_852-1505/000-001; WAGO WAGO Firmware versions prior to V1.2.1.S0: WAGO_Hardware_852-1813" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-085-01" ;
    icsa:vendor "WAGO" ;
    icsa:year 2026 .

icsa-res:ICSA-26-085-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-085-02" ;
    dcterms:issued "2026-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "OpenCode Systems OC Messaging and USSD Gateway" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Bulgaria" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2025-70614" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2025-70614 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenCode Systems OC Messaging and USSD Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OpenCode Systems USSD Gateway: 6.32.2; OpenCode Systems OC Messaging: 6.32.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-085-02" ;
    icsa:vendor "OpenCode Systems" ;
    icsa:year 2026 .

icsa-res:ICSA-26-085-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-085-03" ;
    dcterms:issued "2026-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "PTC Windchill Product Lifecycle Management" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-4681" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2026-4681 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PTC Windchill Product Lifecycle Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PTC FlexPLM: 11.0_M030; PTC Windchill PDMLink: 12.1.2.0; PTC FlexPLM: 12.0.0.0; PTC Windchill PDMLink: 13.0.2.0; PTC FlexPLM: 12.1.3.0; PTC FlexPLM: 12.0.3.0; PTC FlexPLM: 11.1_M020; PTC FlexPLM: 12.0.2.0; PTC FlexPLM: 13.0.2.0; PTC FlexPLM: 11.2.1.0; PTC Windchill PDMLink: 13.1.0.0; PTC Windchill PDMLink: 13.1.3.0; PTC Windchill PDMLink: 12.0.2.0; PTC Windchill PDMLink: 13.1.1.0; PTC FlexPLM: 12.1.2.0; PTC Windchill PDMLink: 13.1.2.0; PTC Windchill PDMLink: 11.2.1.0; PTC Windchill PDMLink: 11.1_M020; PTC Windchill PDMLink: 11.0_M030; PTC FlexPLM: 13.0.3.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-085-03" ;
    icsa:vendor "PTC" ;
    icsa:year 2026 .

icsa-res:ICSA-26-090-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-090-01" ;
    dcterms:issued "2026-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "Anritsu Remote Spectrum Monitor" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Communications; Defense Industrial Base; Emergency Services; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-3356" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-3356 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Anritsu Remote Spectrum Monitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Anritsu Remote Spectrum Monitor MS27103A: vers:all/*; Anritsu Remote Spectrum Monitor MS27101A: vers:all/*; Anritsu Remote Spectrum Monitor MS27102A: vers:all/*; Anritsu Remote Spectrum Monitor MS27100A: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-090-01" ;
    icsa:vendor "Anritsu" ;
    icsa:year 2026 .

icsa-res:ICSA-26-090-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-090-02" ;
    dcterms:issued "2026-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "PX4 Autopilot" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Transportation Systems; Emergency Services; Defense Industrial Base" ;
    icsa:cveNumber "CVE-2026-1579" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-1579 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PX4 Autopilot" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PX4 Autopilot: v1.16.0_SITL_latest_stable" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-090-02" ;
    icsa:vendor "PX4" ;
    icsa:year 2026 .

icsa-res:ICSA-26-092-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-092-01" ;
    dcterms:issued "2026-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM 8 Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-27663; CVE-2026-27664" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2026-27663,
        cve-res:CVE-2026-27664 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SICAM 8 Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RTUM85Â RTU Base; CPCI85 Central Processing/Communication" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-092-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-092-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-092-02" ;
    dcterms:issued "2026-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa CENTUM VP" ;
    icsa:CVSSScore "4.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2025-7741" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2025-7741 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Yokogawa CENTUM VP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Yokogawa CENTUM VP: vR7.01.00; Yokogawa CENTUM VP: >=R5.01.00|<R5.04.20; Yokogawa CENTUM VP: >=R6.01.00|<R6.12.00" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-092-02" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2026 .

icsa-res:ICSA-26-092-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-092-03" ;
    dcterms:issued "2026-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy Ellipse" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-10492" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-10492 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy Ellipse" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ellipse versions 9.0.50 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-092-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-097-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-097-01" ;
    dcterms:issued "2026-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GENESIS64 and ICONICS Suite products" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States, Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-14815; CVE-2025-14816" ;
    icsa:cweNumber "CWE-317; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2025-14815,
        cve-res:CVE-2025-14816 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-317 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric GENESIS64 and ICONICS Suite products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric ICONICS Suite: <=10.97.3; Mitsubishi Electric GENESIS64: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions AnalytiX: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions GENESIS: <=11.02; Mitsubishi Electric Iconics Digital Solutions Hyper Historian: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions ICONICS Suite: <=10.97.3; Mitsubishi Electric GENESIS: <=11.02; Mitsubishi Electric Hyper Historian: <=10.97.3; Mitsubishi Electric AnalytiX: <=10.97.3; Mitsubishi Electric MC Works 64: vers:all/*; Mitsubishi Electric MobileHMI: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions GENESIS64: <=10.97.3; Mitsubishi Electric Iconics Digital Solutions MobileHMI: <=10.97.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-097-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-099-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-099-01" ;
    dcterms:issued "2026-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Contemporary Controls BASC 20T" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-13926" ;
    icsa:cweNumber "CWE-807" ;
    icsa:hasCVE cve-res:CVE-2025-13926 ;
    icsa:hasCWE cwe-res:CWE-807 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Contemporary Controls BASC 20T" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Contemporary Controls Sedona Alliance BASControl20: 3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-099-01" ;
    icsa:vendor "Contemporary Controls Sedona Alliance" ;
    icsa:year 2026 .

icsa-res:ICSA-26-099-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-099-02" ;
    dcterms:issued "2026-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "GPL Odorizers GPL750" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Chemical; Energy" ;
    icsa:cveNumber "CVE-2026-4436" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-4436 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "GPL Odorizers GPL750" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GPL Odorizers GPL750 (XL7 Prime): >=v18.4|<v20.0; GPL Odorizers GPL750 (XL7): >=v13.0|<v20.0; GPL Odorizers GPL750 (XL4): >=v1.0|<v6.0; GPL Odorizers GPL750 (XL4 Prime): >=v4.0|<v6.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-099-02" ;
    icsa:vendor "GPL Odorizers" ;
    icsa:year 2026 .

icsa-res:ICSA-26-106-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-106-01" ;
    dcterms:issued "2026-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics ASDA-Soft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-5726" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2026-5726 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics ASDA-Soft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Delta Electronics ASDA-Soft: <=V7.2.2.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-106-01" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2026 .

icsa-res:ICSA-26-106-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-106-02" ;
    dcterms:issued "2026-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape and XL4, XL7 PLC" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-6284" ;
    icsa:cweNumber "CWE-521" ;
    icsa:hasCVE cve-res:CVE-2026-6284 ;
    icsa:hasCWE cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Horner Automation Cscape and XL4, XL7 PLC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Horner Automation XL7 PLC: v15.60; Horner Automation XL4 PLC: v16.32.0; Horner Automation Cscape: v10.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-106-02" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-106-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-106-03" ;
    dcterms:issued "2026-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Anviz Multiple Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Defense Industrial Base; Energy; Financial Services; Food and Agriculture; Government Facilities; Healthcare and Public Health; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-40461; CVE-2026-32648; CVE-2026-33093; CVE-2026-35682; CVE-2026-35546; CVE-2026-33569; CVE-2026-31927; CVE-2026-32650; CVE-2026-40066; CVE-2026-40434; CVE-2026-32324; CVE-2026-35061" ;
    icsa:cweNumber "CWE-862; CWE-757; CWE-306; CWE-77; CWE-321; CWE-23; CWE-940; CWE-319; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2026-31927,
        cve-res:CVE-2026-32324,
        cve-res:CVE-2026-32648,
        cve-res:CVE-2026-32650,
        cve-res:CVE-2026-33093,
        cve-res:CVE-2026-33569,
        cve-res:CVE-2026-35061,
        cve-res:CVE-2026-35546,
        cve-res:CVE-2026-35682,
        cve-res:CVE-2026-40066,
        cve-res:CVE-2026-40434,
        cve-res:CVE-2026-40461 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-321,
        cwe-res:CWE-494,
        cwe-res:CWE-757,
        cwe-res:CWE-77,
        cwe-res:CWE-862,
        cwe-res:CWE-940 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Anviz Multiple Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Anviz CX7 Firmware: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-106-03" ;
    icsa:vendor "Anviz" ;
    icsa:year 2026 .

icsa-res:ICSA-26-106-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-106-04" ;
    dcterms:issued "2026-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Pipeline Simulation" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-5387" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2026-5387 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA Pipeline Simulation" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA Pipeline Simulation: <=2025_SP1_build_7.1.9497.6351" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-106-04" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-01" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens TPM 2.0" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-2884" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-2884 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens TPM 2.0" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC IPC647E; SIMATIC IPC227E; SIMATIC IPC RW-548A; SIMATIC IPC PX-32A; SIMATIC IPC BX-59A; SIMATIC IPC PX-39A; SIMATIC CN 4100; SIMATIC IPC627E; SIMATIC IPC477E PRO; SIMATIC IPC847E; SIMATIC Field PG M5; SIMATIC IPC RW-528A; SIMATIC IPC277E; SIMATIC IPC BX-56A; SIPLUS IPC427E; SIMATIC ITP1000; SIMATIC IPC BX-32A; SIMATIC Field PG M6; SIMATIC IPC477E; SIMATIC IPC677E; SIMATIC IPC BX-39A; SIMATIC IPC427E; SIMATIC IPC PX-39A PRO; SIMATIC IPC MD-57A" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-02" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-27668" ;
    icsa:cweNumber "CWE-266" ;
    icsa:hasCVE cve-res:CVE-2026-27668 ;
    icsa:hasCWE cwe-res:CWE-266 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-03" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-24032" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2026-24032 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SINEC NMS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-04" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Analytics Toolkit" ;
    icsa:CVSSScore "3.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40745" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2025-40745 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Analytics Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Solid Edge SE2026; Siemens Software Center; Tecnomatix Plant Simulation; Simcenter Femap; Solid Edge SE2025; Simcenter STAR-CCM+; Simcenter 3D" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-05" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hardy Barth Salia EV Charge Controller (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-5873; CVE-2025-10371" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2025-10371,
        cve-res:CVE-2025-5873 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hardy Barth Salia EV Charge Controller" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hardy Barth Salia Board Firmware: <=2.3.81" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-05" ;
    icsa:vendor "Hardy Barth" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-06" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Zero Motorcycles Firmware (Update A)" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-1354" ;
    icsa:cweNumber "CWE-322" ;
    icsa:hasCVE cve-res:CVE-2026-1354 ;
    icsa:hasCWE cwe-res:CWE-322 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Zero Motorcycles Firmware (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Zero Motorcycles firmware <=44" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-06" ;
    icsa:vendor "Zero Motorcycles" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-07" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SCALANCE" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Communications; Information Technology; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2020-24588; CVE-2020-26139; CVE-2022-36325; CVE-2020-26143; CVE-2020-26147; CVE-2022-36324; CVE-2023-44373; CVE-2022-36323; CVE-2022-0778; CVE-2020-26144; CVE-2020-26140; CVE-2020-26141; CVE-2022-31765; CVE-2020-26146; CVE-2021-3712" ;
    icsa:cweNumber "CWE-862; CWE-770; CWE-287; CWE-306; CWE-80; CWE-835; CWE-20; CWE-74; CWE-125; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2020-24588,
        cve-res:CVE-2020-26139,
        cve-res:CVE-2020-26140,
        cve-res:CVE-2020-26141,
        cve-res:CVE-2020-26143,
        cve-res:CVE-2020-26144,
        cve-res:CVE-2020-26146,
        cve-res:CVE-2020-26147,
        cve-res:CVE-2021-3712,
        cve-res:CVE-2022-0778,
        cve-res:CVE-2022-31765,
        cve-res:CVE-2022-36323,
        cve-res:CVE-2022-36324,
        cve-res:CVE-2022-36325,
        cve-res:CVE-2023-44373 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-306,
        cwe-res:CWE-354,
        cwe-res:CWE-74,
        cwe-res:CWE-770,
        cwe-res:CWE-80,
        cwe-res:CWE-835,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SCALANCE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0); SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0); SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0); SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0); SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0); SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0); SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0); SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0); SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0); SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0); SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0); SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6); SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0); SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0); SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0); SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6); SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0); SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0); SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0); SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0); SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0); SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0); SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0); SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0); SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0); SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0); SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0); SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0); SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0); SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0); SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0); SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0); SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0); SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0); SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0); SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0); SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0); SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0); SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6); SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0); SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0); SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0); SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0); SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6); SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0); SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0); SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0); SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0); SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-08" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-6965" ;
    icsa:cweNumber "CWE-197" ;
    icsa:hasCVE cve-res:CVE-2025-6965 ;
    icsa:hasCWE cwe-res:CWE-197 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM CROSSBOW Station Access Controller (SAC)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-09" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC NMS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-25654" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2026-25654 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEC NMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SINEC NMS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-10" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Silex Technology SD-330AC and AMC Manager" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2024-24487; CVE-2026-32961; CVE-2026-32964; CVE-2026-32958; CVE-2026-32960; CVE-2026-32955; CVE-2026-32957; CVE-2026-32965; CVE-2026-32962; CVE-2015-5621; CVE-2026-32959; CVE-2026-32956; CVE-2026-32963" ;
    icsa:cweNumber "CWE-1395; CWE-306; CWE-122; CWE-79; CWE-93; CWE-321; CWE-1188; CWE-121; CWE-327; CWE-266; CWE-226" ;
    icsa:hasCVE cve-res:CVE-2015-5621,
        cve-res:CVE-2024-24487,
        cve-res:CVE-2026-32955,
        cve-res:CVE-2026-32956,
        cve-res:CVE-2026-32957,
        cve-res:CVE-2026-32958,
        cve-res:CVE-2026-32959,
        cve-res:CVE-2026-32960,
        cve-res:CVE-2026-32961,
        cve-res:CVE-2026-32962,
        cve-res:CVE-2026-32963,
        cve-res:CVE-2026-32964,
        cve-res:CVE-2026-32965 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-1395,
        cwe-res:CWE-226,
        cwe-res:CWE-266,
        cwe-res:CWE-306,
        cwe-res:CWE-321,
        cwe-res:CWE-327,
        cwe-res:CWE-79,
        cwe-res:CWE-93 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Silex Technology SD-330AC and AMC Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Silex Technology AMC Manager: <=5.0.2; Silex Technology SD-330AC: <=1.42" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-10" ;
    icsa:vendor "Silex Technology" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-11" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Management" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-33892" ;
    icsa:cweNumber "CWE-305" ;
    icsa:hasCVE cve-res:CVE-2026-33892 ;
    icsa:hasCWE cwe-res:CWE-305 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Industrial Edge Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Industrial Edge Management Virtual; Industrial Edge Management Pro V1; Industrial Edge Management Pro V2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-111-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-111-12" ;
    dcterms:issued "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "SenseLive X3050" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Water and Wastewater Systems; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2026-27841; CVE-2026-27843; CVE-2026-40630; CVE-2026-40620; CVE-2026-40623; CVE-2026-25720; CVE-2026-35503; CVE-2026-40431; CVE-2026-35064; CVE-2026-25775; CVE-2026-39462" ;
    icsa:cweNumber "CWE-352; CWE-862; CWE-306; CWE-613; CWE-288; CWE-798; CWE-319; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2026-25720,
        cve-res:CVE-2026-25775,
        cve-res:CVE-2026-27841,
        cve-res:CVE-2026-27843,
        cve-res:CVE-2026-35064,
        cve-res:CVE-2026-35503,
        cve-res:CVE-2026-39462,
        cve-res:CVE-2026-40431,
        cve-res:CVE-2026-40620,
        cve-res:CVE-2026-40623,
        cve-res:CVE-2026-40630 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-522,
        cwe-res:CWE-613,
        cwe-res:CWE-798,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SenseLive X3050" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SenseLive X3050: V1.523" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-111-12" ;
    icsa:vendor "SenseLive" ;
    icsa:year 2026 .

icsa-res:ICSA-26-113-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-113-01" ;
    dcterms:issued "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "YADEA T5 Electric Bike" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-70994" ;
    icsa:cweNumber "CWE-1390" ;
    icsa:hasCVE cve-res:CVE-2025-70994 ;
    icsa:hasCWE cwe-res:CWE-1390 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Yadea T5 Electric Bicycle" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Yadea T5 Electric Bicycle: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-113-01" ;
    icsa:vendor "Yadea" ;
    icsa:year 2026 .

icsa-res:ICSA-26-113-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-113-02" ;
    dcterms:issued "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Carlson Software VASCO-B GNSS Receiver" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-3893" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-3893 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Carlson Software VASCO-B GNSS Receiver" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Carlson Software VASCO-B GNSS Receiver: <1.4.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-113-02" ;
    icsa:vendor "Carlson Software" ;
    icsa:year 2026 .

icsa-res:ICSA-26-113-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-113-03" ;
    dcterms:issued "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Milesight Cameras" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-28747; CVE-2026-32644; CVE-2026-32649; CVE-2026-27785; CVE-2026-20766" ;
    icsa:cweNumber "CWE-639; CWE-122; CWE-321; CWE-78; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-20766,
        cve-res:CVE-2026-27785,
        cve-res:CVE-2026-28747,
        cve-res:CVE-2026-32644,
        cve-res:CVE-2026-32649 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-321,
        cwe-res:CWE-639,
        cwe-res:CWE-78,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Milesight Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Milesight MS-Cxx65-PE: <=61.8.0.5-r2; Milesight MS-Nxxxx-xxH: <=7x.9.0.19-r5; Milesight TS2961-X12TPC: <=T_45.8.0.3-r9; Milesight MS-CQxx68-xxxG1: <=CQ_63.8.0.5-r1; Milesight MS-C5321-FPE: <=62.8.0.4-r5; Milesight TS8266-RFIVPG1: <=T_63.8.0.4_LPR-r3; Milesight TS2966-X12TPE: <=T_61.8.0.4_LPR-r3; Milesight TS8266-X4RIVPG1: <=T_63.8.0.4_LPR-r3; Milesight MS-C5366-X12LVPC: <=T_45.8.0.3-r9; Milesight TS5366-X12VPE: <=T_61.8.0.4_LPR-r3; Milesight MS-C5366-X12LPC: <=T_45.8.0.3-r9; Milesight MS-Cxx61-xxxPE: <=61.8.0.5-r2; Milesight TS2866-X4TPC: <=T_45.8.0.3-r9; Milesight MS-Cxx72-FIPKG1: <=63.8.0.4-r1-NX; Milesight MS-C2964-RFLPC: <=T_45.8.0.3-r9; Milesight TS8266-FPC/P: <=T_45.8.0.3-r9; Milesight MS-Cxx62-xxxG1: <=63.8.0.5-r3; Milesight MS-C2966-RFLWPC: <=T_45.8.0.3-r9; Milesight TS2866-X4TGPC: <=T_45.8.0.3-r9; Milesight SP111: <=52.8.0.4-r5; Milesight TS4441-X36RPE: <=T_61.8.0.4_LPR-r3; Milesight TS8266-X4VPE: <=T_61.8.0.4_LPR-r3; Milesight MS-Nxxxx-xxC: <=7x.9.0.19-r5; Milesight TS8266-X4WE: <=T_61.8.0.4_LPR-r3; Milesight MS-C2966-X12RLPC: <=T_45.8.0.3-r9; Milesight MS-Cxx83-xPD: <=51.7.0.77-r12; Milesight MS-Cxx62-xxxPE: <=61.8.0.5-r2; Milesight MS-Cxx66-xxxG1: <=63.8.0.5-r3; Milesight MS-Cxx52-xxxPE: <=61.8.0.5-r2; Milesight MS-Cxx66-xxxGPE: <=61.8.0.5-r2; Milesight MS-Cxx66-FIPKG1: <=63.8.0.4-r1-NX; Milesight MS-Nxxxx-xxG: <=7x.9.0.19-r5; Milesight TS2841-X36TPC: <=T_45.8.0.3-r9; Milesight MS-Cxx66-xxxxGOPC: <=45.8.0.2-AIoT-r4; Milesight MS-Cxx66-RFIPKG1: <=63.8.0.4-r1-NX; Milesight MS-Cxx71-xxxPE: <=61.8.0.5-r2; Milesight MS-Cxx41-xxxPE: <=61.8.0.5-r2; Milesight TS4466-X4RIPG1: <=T_63.8.0.4_LPR-r3; Milesight TS8266-X4PE: <=T_61.8.0.4_LPR-r3; Milesight MS-Cxx72-xxxG1: <=63.8.0.5-r3; Milesight TS5510-GVH: <=T_47.8.0.4_LPR-r7; Milesight MS-Cxx75-xxPD: <=51.7.0.77-r12; Milesight TS4466-X4RIWG1: <=T_63.8.0.4_LPR-r3; Milesight TS4466-X4RWE: <=T_61.8.0.4_LPR-r3; Milesight MS-Cxx67-xxxPE: <=61.8.0.5-r2; Milesight MS-C2972-RFLPC: <=T_45.8.0.3-r9; Milesight TS5511-GVH: <=T_47.8.0.4_LPR-r6; Milesight TS8266-X4RIWG1: <=T_63.8.0.4_LPR-r3; Milesight TS2841-X36TPC/W: <=T_45.8.0.3-r9; Milesight TS2866-X4TVPC: <=T_45.8.0.3-r9; Milesight TS5366-X12RIPG1: <=T_63.8.0.4_LPR-r3; Milesight MS-CQxx31-xxxG1: <=CQ_63.8.0.5-r1; Milesight TS4466-X4RVPE: <=T_61.8.0.4_LPR-r3; Milesight MS-Cxx74-PA: <=3x.8.0.3-r11; Milesight PMC8266-FGPE: <=PO_61.8.0.4_LPR; Milesight MS-Cxx64-xPD: <=51.7.0.77-r12; Milesight TS4441-X36RE: <=T_61.8.0.4_LPR-r3; Milesight MS-Nxxxx-xxT: <=7x.9.0.19-r5; Milesight MS-Cxx76-PE: <=61.8.0.5-r2; Milesight TS8266-X4RIPG1: <=T_63.8.0.4_LPR-r3; Milesight TS4466-RFIVPG1: <=T_63.8.0.4_LPR-r3; Milesight MS-Nxxxx-NxE: <=7x.9.0.19-r5; Milesight MS-Nxxxx-xxE: <=7x.9.0.19-r5; Milesight MS-CQxx72-xxxG1: <=CQ_63.8.0.5-r1; Milesight MS-Cxx66-xxxPE: <=61.8.0.5-r2; Milesight PMC8266-FPE: <=PO_61.8.0.4_LPR; Milesight MS-C8477-HPG1: <=63.8.0.4-r3; Milesight MS-Cxx72-xxxPE: <=61.8.0.5-r2; Milesight TS4466-X4RPE: <=T_61.8.0.4_LPR-r3; Milesight MS-C8477-PC: <=48.8.0.4-r3; Milesight TS2867-X5TPC: <=T_45.8.0.3-r9; Milesight TS2966-X12TVPE: <=T_61.8.0.4_LPR-r3; Milesight MS-C2966-X12RLVPC: <=T_45.8.0.3-r9; Milesight TS5366-X12PE: <=T_61.8.0.4_LPR-r3; Milesight MS-Cxx73-xPD: <=51.7.0.77-r12; Milesight MS-C5361-X12LPC: <=T_45.8.0.3-r9; Milesight TS4466-X4RIVPG1: <=T_63.8.0.4_LPR-r3; Milesight TS5510-GH: <=T_47.8.0.4_LPR-r6; Milesight SC211: <=C_21.1.0.8-r4; Milesight PM3322-E: <=PI_61.8.0.3_LPR-r3; Milesight MS-Cxx72-RFIPKG1: <=63.8.0.4-r1-NX; Milesight MS-Cxx63-PD: <=51.7.0.77-r12" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-113-03" ;
    icsa:vendor "Milesight" ;
    icsa:year 2026 .

icsa-res:ICSA-26-113-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-113-04" ;
    dcterms:issued "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "SpiceJet Online Booking System" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-6375; CVE-2026-6376" ;
    icsa:cweNumber "CWE-306; CWE-639" ;
    icsa:hasCVE cve-res:CVE-2026-6375,
        cve-res:CVE-2026-6376 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SpiceJet Online Booking System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SpiceJet Online Booking System: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-113-04" ;
    icsa:vendor "SpiceJet" ;
    icsa:year 2026 .

icsa-res:ICSA-26-113-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-113-05" ;
    dcterms:issued "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-65856" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-65856 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Hangzhou Xiongmai Technology Co.; Ltd IP Camera XM530V200_X6-WEQ_8M firmware: V5.00.R02.000807D8.10010.346624.S.ONVIF_21.06" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-113-05" ;
    icsa:vendor "Hangzhou Xiongmai Technology Co., Ltd" ;
    icsa:year 2026 .

icsa-res:ICSA-26-113-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-113-06" ;
    dcterms:issued "2026-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Intrado 911 Emergency Gateway (EGW) (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Emergency Services" ;
    icsa:cveNumber "CVE-2026-6074" ;
    icsa:cweNumber "CWE-35" ;
    icsa:hasCVE cve-res:CVE-2026-6074 ;
    icsa:hasCWE cwe-res:CWE-35 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intrado 911 Emergency Gateway (EGW) (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Intrado Emergency Gateway: 6.x; Intrado Emergency Gateway: 5.x; Intrado Emergency Gateway: 7.x" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-113-06" ;
    icsa:vendor "Intrado" ;
    icsa:year 2026 .

icsa-res:ICSA-26-118-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-118-01" ;
    dcterms:issued "2026-04-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "NSA GrassMarlin" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-6807" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2026-6807 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NSA GRASSMARLIN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "NSA GRASSMARLIN: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-118-01" ;
    icsa:vendor "NSA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-120-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-120-01" ;
    dcterms:issued "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB System 800xA, Symphony Plus IEC 61850" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-3756" ;
    icsa:cweNumber "CWE-1284" ;
    icsa:hasCVE cve-res:CVE-2025-3756 ;
    icsa:hasCWE cwe-res:CWE-1284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB System 800xA, Symphony Plus IEC 61850" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected """AC800M Product line (System 800xA) CI868\r
Symphony Plus SD Series CI850\r
Symphony Plus MR (Melody Rack) PM 877\r
S+ Operations\r
Firmware <=6.0.0303.0; C_0; 3.3; A_2.003; <=6.1.0031.0; 3.4 (); A_1; A_4.001; <=6.2.0006.0; <=6.1.1004.0; B_0.005; A_0; 2.2; 2.3; A_3.005; 3.53; 7.0; >=3.10|<=3.52; <=6.1.1202.0; 6.1.1-3; 2.1""" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-120-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-120-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-120-02" ;
    dcterms:issued "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB PCM600" ;
    icsa:CVSSScore "4.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2018-1002208" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2018-1002208 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB PCM600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB PCM600: >=1.5|<=2.13" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-120-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-120-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-120-03" ;
    dcterms:issued "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Edgenius Management Portal" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2025-10571" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2025-10571 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Edgenius Management Portal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB Edgenius Management Portal: 3.2.0.0|3.2.1.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-120-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-120-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-120-04" ;
    dcterms:issued "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Ability OPTIMAX" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater" ;
    icsa:cveNumber "CVE-2025-14510" ;
    icsa:cweNumber "CWE-303" ;
    icsa:hasCVE cve-res:CVE-2025-14510 ;
    icsa:hasCWE cwe-res:CWE-303 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Ability OPTIMAX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB ABB Ability OPTIMAX 6.1: vers:all/*; ABB ABB Ability OPTIMAX 6.2: vers:all/*; ABB ABB Ability OPTIMAX 6.3: <6.3.1-251120; ABB ABB Ability OPTIMAX 6.4: <6.4.1-251120" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-120-04" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-120-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-120-05" ;
    dcterms:issued "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB AWIN Gateways" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-13777; CVE-2025-13778; CVE-2025-13779" ;
    icsa:cweNumber "CWE-294; CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-13777,
        cve-res:CVE-2025-13778,
        cve-res:CVE-2025-13779 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB AWIN Gateways" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB ABB AWIN Firmware (1.2-0) installed on ABB AWIN GW120: 1.2-0; ABB ABB AWIN Firmware (2.0-0) installed on ABB AWIN GW100 rev.2: 2.0-0; ABB ABB AWIN Firmware (2.0-1) installed on ABB AWIN GW100 rev.2: 2.0-1; ABB ABB AWIN Firmware (1.2-1) installed on ABB AWIN GW120: 1.2-1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-120-05" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-120-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-120-06" ;
    dcterms:issued "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Ability Symphony Plus Engineering" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2023-5869; CVE-2024-0985; CVE-2024-7348; CVE-2023-39417" ;
    icsa:cweNumber "CWE-367; CWE-271; CWE-190; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2023-39417,
        cve-res:CVE-2023-5869,
        cve-res:CVE-2024-0985,
        cve-res:CVE-2024-7348 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-271,
        cwe-res:CWE-367,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Ability Symphony Plus Engineering" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB Ability Symphony Plus S+ Engineering 2.3 RU2; ABB Ability Symphony Plus S+ Engineering 2.4; ABB Ability Symphony Plus S+ Engineering 2.3 RU1; ABB Ability Symphony Plus S+ Engineering 2.3; ABB Ability Symphony Plus S+ Engineering 2.3 RU3; ABB Ability Symphony Plus S+ Engineering 2.2; ABB Ability Symphony Plus S+ Engineering 2.4 SP1; ABB Ability Symphony Plus S+ Engineering 2.4 SP2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-120-06" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-125-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-125-01" ;
    dcterms:issued "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy PCM600" ;
    icsa:CVSSScore "4.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2018-1002208" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2018-1002208 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy PCM600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PCM600 3.0 HF2; PCM600 3.1; PCM600 3.1 SP1; PCM600 3.0 HF1; PCM600 Legacy Version 2.11 and earlier; PCM600 3.1 SP3; PCM600 3.1 SP2; PCM600 3.0 HF3; PCM600 3.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-125-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-125-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-125-02" ;
    dcterms:issued "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB B&R PVI" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-0936" ;
    icsa:cweNumber "CWE-532" ;
    icsa:hasCVE cve-res:CVE-2026-0936 ;
    icsa:hasCWE cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "B&R PVI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PVI <6.5.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-125-02" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-125-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-125-03" ;
    dcterms:issued "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB B&R Automation Runtime" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11044" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-11044 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "B&R Automation Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Automation Runtime <6.5; ABB Automation Runtime <R4.93" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-125-03" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-125-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-125-04" ;
    dcterms:issued "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB B&R Automation Studio" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11043" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2025-11043 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "B&R Automation Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Automation Studio <6.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-125-04" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-125-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-125-05" ;
    dcterms:issued "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls CEM AC2000" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2026-21661" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2026-21661 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls CEM AC2000" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls Inc. CEM AC2000: 10.6; Johnson Controls Inc. CEM AC2000: 11.0; Johnson Controls Inc. CEM AC2000: 12.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-125-05" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-127-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-127-01" ;
    dcterms:issued "2026-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Maxhub Pivot" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-6411" ;
    icsa:cweNumber "CWE-327" ;
    icsa:hasCVE cve-res:CVE-2026-6411 ;
    icsa:hasCWE cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MAXHUB Pivot Client Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MAXHUB MAXHUB Pivot client application: <v1.36.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-127-01" ;
    icsa:vendor "MAXHUB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-132-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-132-01" ;
    dcterms:issued "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fuji Electric Tellus" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-8108" ;
    icsa:cweNumber "CWE-749" ;
    icsa:hasCVE cve-res:CVE-2026-8108 ;
    icsa:hasCWE cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Fuji Electric Tellus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Fuji Electric Tellus: 5.0.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-132-01" ;
    icsa:vendor "Fuji Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-132-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-132-02" ;
    dcterms:issued "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Subnet Solutions PowerSYSTEM Center" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-35504; CVE-2026-33570; CVE-2026-26289; CVE-2026-35555" ;
    icsa:cweNumber "CWE-93; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2026-26289,
        cve-res:CVE-2026-33570,
        cve-res:CVE-2026-35504,
        cve-res:CVE-2026-35555 ;
    icsa:hasCWE cwe-res:CWE-863,
        cwe-res:CWE-93 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Subnet Solutions PowerSYSTEM Center" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Subnet Solutions Inc. PowerSYSTEM Center 2020: >=5.8.x|<=5.28.x; Subnet Solutions Inc. PowerSYSTEM Center 2026: 7.0.x; Subnet Solutions Inc. PowerSYSTEM Center 2024: >=6.0.x|<=6.1.x" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-132-02" ;
    icsa:vendor "Subnet Solutions Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-132-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-132-03" ;
    dcterms:issued "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB AC500 V3 Multiple Vulnerabilities" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-2595; CVE-2025-41691; CVE-2025-41659" ;
    icsa:cweNumber "CWE-732; CWE-425; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2025-2595,
        cve-res:CVE-2025-41659,
        cve-res:CVE-2025-41691 ;
    icsa:hasCWE cwe-res:CWE-425,
        cwe-res:CWE-476,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB AC500 V3 Multiple Vulnerabilities" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB AC500 V3 <3.9.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-132-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-132-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-132-04" ;
    dcterms:issued "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Automation Builder Gateway for Windows" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2024-41975" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2024-41975 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Automation Builder Gateway for Windows" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB Automation Builder <2.9.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-132-04" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-132-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-132-05" ;
    dcterms:issued "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB AC500 V3 Stack buffer overflow in Cryptographic Message Syntax" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-15467" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-15467 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB AC500 V3 Stack Buffer Overflow in Cryptographic Message Syntax" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB AC500 V3 PM5xxx Firmware Version 3.9.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-132-05" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-132-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-132-06" ;
    dcterms:issued "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB WebPro SNMP Card PowerValue" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Energy; Healthcare and Public Health; Information Technology; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-4675; CVE-2025-4676; CVE-2025-4677" ;
    icsa:cweNumber "CWE-754; CWE-303; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2025-4675,
        cve-res:CVE-2025-4676,
        cve-res:CVE-2025-4677 ;
    icsa:hasCWE cwe-res:CWE-303,
        cwe-res:CWE-613,
        cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB WebPro SNMP Card PowerValue <=1.1.8.k" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-132-06" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-01" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens gWAP" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-40175" ;
    icsa:cweNumber "CWE-113" ;
    icsa:hasCVE cve-res:CVE-2026-40175 ;
    icsa:hasCWE cwe-res:CWE-113 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens gWAP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "gWAP vers:intdot/<3.1.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-02" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Ruggedcom Rox" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40948" ;
    icsa:cweNumber "CWE-88" ;
    icsa:hasCVE cve-res:CVE-2025-40948 ;
    icsa:hasCWE cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Ruggedcom Rox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 | RUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX5000 vers:intdot/<2.17.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-03" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-44411; CVE-2026-44412" ;
    icsa:cweNumber "CWE-121; CWE-824" ;
    icsa:hasCVE cve-res:CVE-2026-44411,
        cve-res:CVE-2026-44412 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-824 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Solid Edge vers:intdot/<226.0.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-04" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-33893; CVE-2024-4367; CVE-2026-33862" ;
    icsa:cweNumber "CWE-798; CWE-79; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2024-4367,
        cve-res:CVE-2026-33862,
        cve-res:CVE-2026-33893 ;
    icsa:hasCWE cwe-res:CWE-754,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Teamcenter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2024-4367) | Teamcenter V2412 vers:intdot/<2412.0009 (CVE-2026-33862; vers:intdot/<2312.0009 (CVE-2026-33862; CVE-2026-33893) | Teamcenter V2506 vers:intdot/<2506.0005 (CVE-2026-33862; CVE-2026-33893; Teamcenter V2312 vers:intdot/<2312.0014; vers:intdot/<2406.0006 (CVE-2026-33862; CVE-2026-33893) | Teamcenter V2512 vers:all/*; CVE-2024-4367) | Teamcenter V2406 vers:intdot/<2406.0012" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-05" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-12659" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2025-12659 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Simcenter Femap vers:intdot/<2512.0003" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-06" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Devices" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40833" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2025-40833 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Industrial Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ports on front) (6GK5324-4GG00-2ER2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-4GG10-4JR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (2x 24V; IE/PB LINK HA (6GK1411-5BB00) vers:all/* (CVE-2025-40833) | IE/PB link PN IO (6GK1411-5AB10) vers:all/* (CVE-2025-40833) | RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) vers:intdot/<8.3 (CVE-2025-40833) | RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M804PB (6GK5804-0AP00-2AA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M874-2 (6GK5874-2AA00-2AA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M874-3 (6GK5874-3AA00-2AA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M876-3 (6GK5876-3AA02-2BA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M876-4 (6GK5876-4AA10-2BA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUB852-1 (A1) (6GK5852-1EA10-1AA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUB852-1 (B1) (6GK5852-1EA10-1BA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) vers:intdot/<8.3 (CVE-2025-40833) | SCALANCE SC622-2C (6GK5622-2GS00-2AC2) vers:all/* (CVE-2025-40833) | SCALANCE SC626-2C (6GK5626-2GS00-2AC2) vers:all/* (CVE-2025-40833) | SCALANCE SC632-2C (6GK5632-2GS00-2AC2) vers:all/* (CVE-2025-40833) | SCALANCE SC636-2C (6GK5636-2GS00-2AC2) vers:all/* (CVE-2025-40833) | SCALANCE SC642-2C (6GK5642-2GS00-2AC2) vers:all/* (CVE-2025-40833) | SCALANCE SC646-2C (6GK5646-2GS00-2AC2) vers:all/* (CVE-2025-40833) | SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) vers:all/* (CVE-2025-40833) | SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0) vers:all/* (CVE-2025-40833) | SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0) vers:all/* (CVE-2025-40833) | SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0) vers:all/* (CVE-2025-40833) | SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0) vers:all/* (CVE-2025-40833) | SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0) vers:all/* (CVE-2025-40833) | SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0) vers:intdot/<6.6.0 (CVE-2025-40833) | SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) vers:intdot/<3.2.0 (CVE-2025-40833) | SCALANCE X204-2 (6GK5204-2BB10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X204-2FM (6GK5204-2BB11-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X204-2LD (6GK5204-2BC10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2) vers:all/* (CVE-2025-40833) | SCALANCE X204-2TS (6GK5204-2BB10-2CA2) vers:all/* (CVE-2025-40833) | SCALANCE X206-1 (6GK5206-1BB10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X206-1LD (6GK5206-1BC10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X208 (6GK5208-0BA10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X208PRO (6GK5208-0HA10-2AA6) vers:all/* (CVE-2025-40833) | SCALANCE X212-2 (6GK5212-2BB00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X212-2LD (6GK5212-2BC00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X216 (6GK5216-0BA00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X224 (6GK5224-0BA00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X302-7 EEC (230V; 2x230V (L3 int.) (6GK5526-8GR00-4AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR528-6M (6GK5528-0AA00-2AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR528-6M (2HR2; coated) (6GK5302-7GD00-3GA3) vers:all/* (CVE-2025-40833) | SCALANCE X302-7 EEC (230V) (6GK5302-7GD00-3EA3) vers:all/* (CVE-2025-40833) | SCALANCE X302-7 EEC (24V; ports on rear) (6GK5324-4GG00-1JR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-4GG10-2JR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE (230V; ports on front) (6GK5324-4GG00-1ER2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-4GG10-1JR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; 2x230V (L3 int.) (6GK5524-8GR00-4AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR526-8C; ports on rear) (6GK5324-4GG00-2JR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-4GG00-3JR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-0GG00-3AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M (230V; ports on front) (6GK5324-4QG10-1CR2) vers:all/* (CVE-2025-40833) | SCALANCE XR524-8C; ports on front) (6GK5324-4GG10-2ER2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (2x 24V; ports on rear) (6GK5324-0GG10-3HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M (24V; 24V (6GK5526-8GS00-2AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR526-8C; ports on front) (6GK5324-0GG10-1AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M (24V; 1x230V (6GK5526-8GS00-3AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR526-8C; ports on rear) (6GK5324-4QG10-3HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE (24V; coated) (6GK5302-7GD00-2GA3) vers:all/* (CVE-2025-40833) | SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3) vers:all/* (CVE-2025-40833) | SCALANCE X304-2FE (6GK5304-2BD00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-2 EEC (230V; ports on rear) (6GK5324-4GG10-3JR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (24V; ports on rear) (6GK5324-4GG00-4JR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; coated) (6GK5302-7GD00-4GA3) vers:all/* (CVE-2025-40833) | SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3) vers:all/* (CVE-2025-40833) | SCALANCE X302-7 EEC (2x 24V; ports on rear) (6GK5324-0GG10-1HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M TS (24V) (6GK5324-0GG00-1CR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M TS (24V) (6GK5324-0GG10-1CR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on front) (6GK5324-4GG10-3ER2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC; ports on rear) (6GK5324-4QG00-3HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE (230V; ports on front) (6GK5324-4GG10-1ER2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (24V; coated) (6GK5307-2FD00-2GA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-3 (6GK5307-3BL00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-3 (6GK5307-3BL10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-3LD (6GK5307-3BM00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-3LD (6GK5307-3BM10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X308-2 (6GK5308-2FL00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X308-2 RD (inkl. SIPLUS variants) vers:all/* (CVE-2025-40833) | SCALANCE X308-2LD (6GK5308-2FM00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X308-2LD (6GK5308-2FM10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X308-2LH (6GK5308-2FN00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X308-2LH (6GK5308-2FN10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X308-2LH+ (6GK5308-2FP00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X308-2LH+ (6GK5308-2FP10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X308-2M (6GK5308-2GG00-2AA2) vers:all/* (CVE-2025-40833) | SCALANCE X308-2M (6GK5308-2GG10-2AA2) vers:all/* (CVE-2025-40833) | SCALANCE X308-2M PoE (6GK5308-2QG00-2AA2) vers:all/* (CVE-2025-40833) | SCALANCE X308-2M PoE (6GK5308-2QG10-2AA2) vers:all/* (CVE-2025-40833) | SCALANCE X308-2M TS (6GK5308-2GG00-2CA2) vers:all/* (CVE-2025-40833) | SCALANCE X308-2M TS (6GK5308-2GG10-2CA2) vers:all/* (CVE-2025-40833) | SCALANCE X310 (6GK5310-0FA00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X310 (6GK5310-0FA10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X310FE (6GK5310-0BA00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X310FE (6GK5310-0BA10-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X320-1 FE (6GK5320-1BD00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X320-1-2LD FE (6GK5320-3BF00-2AA3) vers:all/* (CVE-2025-40833) | SCALANCE X408-2 (6GK5408-2FD00-2AA2) vers:all/* (CVE-2025-40833) | SCALANCE XF204 (6GK5204-0BA00-2AF2) vers:all/* (CVE-2025-40833) | SCALANCE XF204-2 (6GK5204-2BC00-2AF2) vers:all/* (CVE-2025-40833) | SCALANCE XF206-1 (6GK5206-1BC00-2AF2) vers:all/* (CVE-2025-40833) | SCALANCE XF208 (6GK5208-0BA00-2AF2) vers:all/* (CVE-2025-40833) | SCALANCE XM408-4C (6GK5408-4GP00-2AM2) vers:all/* (CVE-2025-40833) | SCALANCE XM408-4C (L3 int.) (6GK5408-4GQ00-2AM2) vers:all/* (CVE-2025-40833) | SCALANCE XM408-8C (6GK5408-8GS00-2AM2) vers:all/* (CVE-2025-40833) | SCALANCE XM408-8C (L3 int.) (6GK5408-8GR00-2AM2) vers:all/* (CVE-2025-40833) | SCALANCE XM416-4C (6GK5416-4GS00-2AM2) vers:all/* (CVE-2025-40833) | SCALANCE XM416-4C (L3 int.) (6GK5416-4GR00-2AM2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M (230V; ports on front) (6GK5324-4QG00-1CR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE TS (24V; ports on front) (6GK5324-4QG10-3AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE (230V; L3 int.) (6GK5528-0AR00-2HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR528-6M (2HR2) (6GK5528-0AA00-2HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR528-6M (L3 int.) (6GK5528-0AR00-2AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR552-12M (6GK5552-0AA00-2AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR552-12M (2HR2; 1x230V (6GK5524-8GS00-3AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR524-8C; 2x230V (6GK5526-8GS00-4AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR526-8C; coated) (6GK5307-2FD00-1GA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-2 EEC (2x 230V; ports on front) (6GK5324-0GG10-3AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M (230V; ports on front) (6GK5324-4QG00-3AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE (230V; ports on rear) (6GK5324-0GG00-3HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M (230V; ports on front) (6GK5324-4QG10-1AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE (24V; coated) (6GK5307-2FD00-3GA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-2 EEC (24V; 24V (6GK5524-8GS00-2AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR524-8C; ports on front) (6GK5324-4GG10-4ER2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; ports on rear) (6GK5324-4QG00-1HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE (24V; 1x230V (L3 int.) (6GK5524-8GR00-3AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR524-8C; 24V (L3 int.) (6GK5524-8GR00-2AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR524-8C; coated) (6GK5302-7GD00-1GA3) vers:all/* (CVE-2025-40833) | SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3) vers:all/* (CVE-2025-40833) | SCALANCE X302-7 EEC (2x 230V; ports on front) (6GK5324-4QG00-1AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE (24V; ports on front) (6GK5324-4GG00-4ER2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC; 2x230V (6GK5524-8GS00-4AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR524-8C; ports on front) (6GK5324-0GG00-1AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M (24V; coated) (6GK5307-2FD00-4GA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3) vers:all/* (CVE-2025-40833) | SCALANCE X307-2 EEC (2x 24V; ports on rear) (6GK5324-0GG00-1HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-12M (24V; 1x230V (L3 int.) (6GK5526-8GR00-3AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR526-8C; 24V (L3 int.) (6GK5526-8GR00-2AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR526-8C; L3 int.) (6GK5552-0AR00-2AR2) vers:all/* (CVE-2025-40833) | SCALANCE XR552-12M (2HR2) (6GK5552-0AA00-2HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR552-12M (2HR2) (6GK5552-0AR00-2HR2) vers:all/* (CVE-2025-40833) | SIMATIC CFU DIQ (6ES7655-5PX31-1XX0) vers:intdot/<2.0.0 (CVE-2025-40833) | SIMATIC CFU PA (6ES7655-5PX11-0XX0) vers:intdot/<2.0.0 (CVE-2025-40833) | SIMATIC CFU PA (6ES7655-5PX11-1XX0) vers:intdot/<2.0.0 (CVE-2025-40833) | SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC ET 200SP HA IM155-6 PN vers:intdot/<1.3 (CVE-2025-40833) | SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN00-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-400 CPU 412-2 PN V7 (6ES7412-2EK07-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-400 CPU 414-3 PN/DP V7 (6ES7414-3EM07-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-400 CPU 414F-3 PN/DP V7 (6ES7414-3FM07-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-400 CPU 416-3 PN/DP V7 (6ES7416-3ES07-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-400 CPU 416F-3 PN/DP V7 (6ES7416-3FS07-0AB0) vers:all/* (CVE-2025-40833) | SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) vers:all/* (CVE-2025-40833) | SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) vers:intdot/<10.2 (CVE-2025-40833) | SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) vers:intdot/<8.3 (CVE-2025-40833) | SIMIT UNIT V10 vers:all/* (CVE-2025-40833) | SIMIT UNIT V11 vers:all/* (CVE-2025-40833) | SINAMICS CBE20 vers:all/* (CVE-2025-40833) | SINAMICS G115D vers:all/* (CVE-2025-40833) | SINAMICS G120 (incl. SIPLUS variants) vers:all/* (CVE-2025-40833) | SINAMICS G120C vers:all/* (CVE-2025-40833) | SINAMICS G120D vers:all/* (CVE-2025-40833) | SINAMICS G120X vers:all/* (CVE-2025-40833) | SINAMICS G120XA vers:all/* (CVE-2025-40833) | SINAMICS G130 vers:all/* (CVE-2025-40833) | SINAMICS G150 vers:all/* (CVE-2025-40833) | SINAMICS S110 vers:all/* (CVE-2025-40833) | SINAMICS S120 (incl. SIPLUS variants) vers:all/* (CVE-2025-40833) | SINAMICS S150 vers:all/* (CVE-2025-40833) | SINUMERIK 840D sl vers:all/* (CVE-2025-40833) | SIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0) vers:all/* (CVE-2025-40833) | SIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0) vers:all/* (CVE-2025-40833) | SIPLUS NET IE/PB link PN IO (6AG1411-5AB10-2AA0) vers:all/* (CVE-2025-40833) | SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0) vers:all/* (CVE-2025-40833) | SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0) vers:all/* (CVE-2025-40833) | SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0) vers:all/* (CVE-2025-40833) | SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0) vers:all/* (CVE-2025-40833) | SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0) vers:all/* (CVE-2025-40833) | SIPLUS S7-400 CPU 414-3 PN/DP V7 (6AG1414-3EM07-7AB0) vers:all/* (CVE-2025-40833) | SIPLUS S7-400 CPU 416-3 PN/DP V7 (6AG1416-3ES07-7AB0) vers:all/* (CVE-2025-40833) | SITOP PSU8600 1AC 20 A/4x5 A PN (6EP3336-8MB00-2CY0) vers:all/* (CVE-2025-40833) | SITOP PSU8600 3AC 20 A PN (6EP3436-8SB00-2AY0) vers:all/* (CVE-2025-40833) | SITOP PSU8600 3AC 20 A/4x5 A PN (6EP3436-8MB00-2CY0) vers:all/* (CVE-2025-40833) | SITOP PSU8600 3AC 40 A PN (6EP3437-8SB00-2AY0) vers:all/* (CVE-2025-40833) | SITOP PSU8600 3AC 40 A/4x10 A PN (6EP3437-8MB00-2CY0) vers:all/* (CVE-2025-40833) | SITOP PSU8600 3AC 40 A/4x10A EIP (6EP3437-8MB10-2CY0) vers:all/* (CVE-2025-40833) | SITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0) vers:all/* (CVE-2025-40833) | SITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0) vers:all/* (CVE-2025-40833) | SITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0) vers:all/* (CVE-2025-40833) | SITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0) vers:all/* (CVE-2025-40833); ports on rear) (6GK5324-4QG10-1HR2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M PoE TS (24V; ports on front) (6GK5324-4GG00-3ER2) vers:all/* (CVE-2025-40833) | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-07" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-27662" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2026-27662 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "round tube) and extensio (6AV2128-3XB57-0BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable; flange on top) (6AV2128-3UB27-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable; flange at the bottom) (6AV2128-3XB27-1BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable; Unified Comfort Panel neutral (6AV2128-3KB36-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Comfort Pro for stand (expandable; round tube) and extensio (6AV2128-3MB57-0BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable; SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1000; flange at the bottom) (6AV2128-3XB57-1BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable; flange at the bottom) (6AV2128-3UB57-1BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable; flange on top) (6AV2128-3XB27-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable; flange on top) (6AV2128-3UB57-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Comfort Pro for stand (expandable; flange on top) (6AV2128-3QB57-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Comfort Pro for stand (expandable; flange at the bottom) (6AV2128-3QB57-1BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable; round tube) and extensio (6AV2128-3UB57-0BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable; round tube) and extension unit (6AV2128-3MB27-0BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable; flange at the bottom) (6AV2128-3QB27-1BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable; flange on top) (6AV2128-3XB57-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP700Â Unified Comfort Panel (6AV2128-3GB06-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP700; round tube) and extension unit (6AV2128-3UB27-0BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable; flange on top) (6AV2128-3MB57-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Comfort Pro for stand (expandable; Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1) vers:intdot/<21 (CVE-2026-27662) | SIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1) vers:intdot/<21 (CVE-2026-27662) | SIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1) vers:intdot/<21 (CVE-2026-27662) | SIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1) vers:intdot/<21 (CVE-2026-27662); flange on top) (6AV2128-3QB27-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable; round tube) and extensio (6AV2128-3QB57-0BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable; round tube) and extension unit (6AV2128-3QB27-0BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable; round tube) and extension unit (6AV2128-3XB27-0BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable; flange at the bottom) (6AV2128-3MB27-1BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable; flange on top) (6AV2128-3MB27-0AX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable; flange at the bottom) (6AV2128-3UB27-1BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable; flange at the bottom) (6AV2128-3MB57-1BX0) vers:intdot/<21 (CVE-2026-27662) | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-08" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siemens ROS#" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-41551" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2026-41551 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Siemens ROS#" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ROS# vers:intdot/<2.2.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-09" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Opcenter RDnL" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-27446" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-27446 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Opcenter RDnL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Opcenter RDnL vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-10" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC CN 4100" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-39800; CVE-2025-39801; CVE-2025-39709; CVE-2025-39826; CVE-2025-31257; CVE-2025-38735; CVE-2025-38322; CVE-2025-39718; CVE-2025-38687; CVE-2025-39706; CVE-2025-39847; CVE-2025-39812; CVE-2025-39760; CVE-2025-39686; CVE-2025-39819; CVE-2025-38708; CVE-2025-38700; CVE-2025-39752; CVE-2025-39743; CVE-2025-38707; CVE-2025-39681; CVE-2025-39846; CVE-2025-39673; CVE-2025-39759; CVE-2025-39838; CVE-2025-39687; CVE-2025-37931; CVE-2025-39719; CVE-2024-58240; CVE-2025-38706; CVE-2025-39773; CVE-2025-39843; CVE-2025-39853; CVE-2025-39860; CVE-2025-37968; CVE-2025-39787; CVE-2025-38715; CVE-2025-39724; CVE-2025-39749; CVE-2025-39842; CVE-2025-38699; CVE-2025-39685; CVE-2025-39783; CVE-2025-39813; CVE-2025-39766; CVE-2024-47704; CVE-2025-39694; CVE-2025-38670; CVE-2025-38679; CVE-2025-61748; CVE-2026-21945; CVE-2025-39713; CVE-2025-14831; CVE-2025-38684; CVE-2025-39828; CVE-2025-38714; CVE-2026-31790; CVE-2025-38712; CVE-2025-39736; CVE-2025-39849; CVE-2025-43368; CVE-2025-39795; CVE-2025-39844; CVE-2025-39675; CVE-2025-39716; CVE-2025-39772; CVE-2025-39714; CVE-2025-39676; CVE-2025-38697; CVE-2025-38491; CVE-2025-38727; CVE-2025-38696; CVE-2025-38702; CVE-2026-22924; CVE-2025-39738; CVE-2025-8916; CVE-2025-38614; CVE-2025-40300; CVE-2025-39737; CVE-2025-39845; CVE-2026-28389; CVE-2025-38683; CVE-2025-39839; CVE-2025-38724; CVE-2025-53057; CVE-2025-39825; CVE-2025-55754; CVE-2025-38681; CVE-2025-61795; CVE-2026-2673; CVE-2025-38680; CVE-2025-38552; CVE-2025-39782; CVE-2025-7425; CVE-2025-38694; CVE-2025-39702; CVE-2025-39806; CVE-2025-39756; CVE-2025-39817; CVE-2025-39691; CVE-2025-39693; CVE-2025-38728; CVE-2025-48989; CVE-2026-21947; CVE-2025-47219; CVE-2025-38677; CVE-2025-39835; CVE-2025-39684; CVE-2025-38721; CVE-2026-28390; CVE-2025-9230; CVE-2025-39794; CVE-2025-39701; CVE-2025-38732; CVE-2025-39788; CVE-2025-39770; CVE-2025-39742; CVE-2025-38695; CVE-2025-39682; CVE-2025-38725; CVE-2025-53066; CVE-2025-39798; CVE-2025-9232; CVE-2025-39710; CVE-2025-39857; CVE-2025-6052; CVE-2025-38691; CVE-2025-38736; CVE-2025-39823; CVE-2025-39689; CVE-2025-39866; CVE-2026-22925; CVE-2025-38698; CVE-2026-28388; CVE-2025-23143; CVE-2025-38693; CVE-2025-38713; CVE-2026-21933; CVE-2025-38676; CVE-2025-38729; CVE-2025-39697; CVE-2025-39827; CVE-2026-31789; CVE-2026-21932; CVE-2025-55752; CVE-2025-39864; CVE-2025-23160; CVE-2025-39692; CVE-2025-39683; CVE-2025-39841; CVE-2025-38685; CVE-2025-38502; CVE-2024-57924; CVE-2025-39865; CVE-2025-6021; CVE-2025-39790; CVE-2025-38701; CVE-2025-38347; CVE-2025-9820; CVE-2025-38711; CVE-2025-39848; CVE-2026-21925; CVE-2025-39715; CVE-2025-38723; CVE-2025-39776; CVE-2025-39757; CVE-2025-9231; CVE-2025-39808; CVE-2025-39824; CVE-2025-39703; CVE-2026-28387" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-664; CWE-79; CWE-402; CWE-394; CWE-617; CWE-476; CWE-400; CWE-754; CWE-407; CWE-404; CWE-674; CWE-200; CWE-770; CWE-833; CWE-1285; CWE-401; CWE-835; CWE-20; CWE-190; CWE-121; CWE-362; CWE-385; CWE-757; CWE-787; CWE-284; CWE-273; CWE-1286; CWE-366; CWE-908; CWE-23; CWE-119; CWE-805; CWE-364; CWE-150; CWE-208; CWE-772; CWE-573; CWE-306; CWE-667; CWE-369; CWE-1025; CWE-911; CWE-125; CWE-820" ;
    icsa:hasCVE cve-res:CVE-2024-47704,
        cve-res:CVE-2024-57924,
        cve-res:CVE-2024-58240,
        cve-res:CVE-2025-14831,
        cve-res:CVE-2025-23143,
        cve-res:CVE-2025-23160,
        cve-res:CVE-2025-31257,
        cve-res:CVE-2025-37931,
        cve-res:CVE-2025-37968,
        cve-res:CVE-2025-38322,
        cve-res:CVE-2025-38347,
        cve-res:CVE-2025-38491,
        cve-res:CVE-2025-38502,
        cve-res:CVE-2025-38552,
        cve-res:CVE-2025-38614,
        cve-res:CVE-2025-38670,
        cve-res:CVE-2025-38676,
        cve-res:CVE-2025-38677,
        cve-res:CVE-2025-38679,
        cve-res:CVE-2025-38680,
        cve-res:CVE-2025-38681,
        cve-res:CVE-2025-38683,
        cve-res:CVE-2025-38684,
        cve-res:CVE-2025-38685,
        cve-res:CVE-2025-38687,
        cve-res:CVE-2025-38691,
        cve-res:CVE-2025-38693,
        cve-res:CVE-2025-38694,
        cve-res:CVE-2025-38695,
        cve-res:CVE-2025-38696,
        cve-res:CVE-2025-38697,
        cve-res:CVE-2025-38698,
        cve-res:CVE-2025-38699,
        cve-res:CVE-2025-38700,
        cve-res:CVE-2025-38701,
        cve-res:CVE-2025-38702,
        cve-res:CVE-2025-38706,
        cve-res:CVE-2025-38707,
        cve-res:CVE-2025-38708,
        cve-res:CVE-2025-38711,
        cve-res:CVE-2025-38712,
        cve-res:CVE-2025-38713,
        cve-res:CVE-2025-38714,
        cve-res:CVE-2025-38715,
        cve-res:CVE-2025-38721,
        cve-res:CVE-2025-38723,
        cve-res:CVE-2025-38724,
        cve-res:CVE-2025-38725,
        cve-res:CVE-2025-38727,
        cve-res:CVE-2025-38728,
        cve-res:CVE-2025-38729,
        cve-res:CVE-2025-38732,
        cve-res:CVE-2025-38735,
        cve-res:CVE-2025-38736,
        cve-res:CVE-2025-39673,
        cve-res:CVE-2025-39675,
        cve-res:CVE-2025-39676,
        cve-res:CVE-2025-39681,
        cve-res:CVE-2025-39682,
        cve-res:CVE-2025-39683,
        cve-res:CVE-2025-39684,
        cve-res:CVE-2025-39685,
        cve-res:CVE-2025-39686,
        cve-res:CVE-2025-39687,
        cve-res:CVE-2025-39689,
        cve-res:CVE-2025-39691,
        cve-res:CVE-2025-39692,
        cve-res:CVE-2025-39693,
        cve-res:CVE-2025-39694,
        cve-res:CVE-2025-39697,
        cve-res:CVE-2025-39701,
        cve-res:CVE-2025-39702,
        cve-res:CVE-2025-39703,
        cve-res:CVE-2025-39706,
        cve-res:CVE-2025-39709,
        cve-res:CVE-2025-39710,
        cve-res:CVE-2025-39713,
        cve-res:CVE-2025-39714,
        cve-res:CVE-2025-39715,
        cve-res:CVE-2025-39716,
        cve-res:CVE-2025-39718,
        cve-res:CVE-2025-39719,
        cve-res:CVE-2025-39724,
        cve-res:CVE-2025-39736,
        cve-res:CVE-2025-39737,
        cve-res:CVE-2025-39738,
        cve-res:CVE-2025-39742,
        cve-res:CVE-2025-39743,
        cve-res:CVE-2025-39749,
        cve-res:CVE-2025-39752,
        cve-res:CVE-2025-39756,
        cve-res:CVE-2025-39757,
        cve-res:CVE-2025-39759,
        cve-res:CVE-2025-39760,
        cve-res:CVE-2025-39766,
        cve-res:CVE-2025-39770,
        cve-res:CVE-2025-39772,
        cve-res:CVE-2025-39773,
        cve-res:CVE-2025-39776,
        cve-res:CVE-2025-39782,
        cve-res:CVE-2025-39783,
        cve-res:CVE-2025-39787,
        cve-res:CVE-2025-39788,
        cve-res:CVE-2025-39790,
        cve-res:CVE-2025-39794,
        cve-res:CVE-2025-39795,
        cve-res:CVE-2025-39798,
        cve-res:CVE-2025-39800,
        cve-res:CVE-2025-39801,
        cve-res:CVE-2025-39806,
        cve-res:CVE-2025-39808,
        cve-res:CVE-2025-39812,
        cve-res:CVE-2025-39813,
        cve-res:CVE-2025-39817,
        cve-res:CVE-2025-39819,
        cve-res:CVE-2025-39823,
        cve-res:CVE-2025-39824,
        cve-res:CVE-2025-39825,
        cve-res:CVE-2025-39826,
        cve-res:CVE-2025-39827,
        cve-res:CVE-2025-39828,
        cve-res:CVE-2025-39835,
        cve-res:CVE-2025-39838,
        cve-res:CVE-2025-39839,
        cve-res:CVE-2025-39841,
        cve-res:CVE-2025-39842,
        cve-res:CVE-2025-39843,
        cve-res:CVE-2025-39844,
        cve-res:CVE-2025-39845,
        cve-res:CVE-2025-39846,
        cve-res:CVE-2025-39847,
        cve-res:CVE-2025-39848,
        cve-res:CVE-2025-39849,
        cve-res:CVE-2025-39853,
        cve-res:CVE-2025-39857,
        cve-res:CVE-2025-39860,
        cve-res:CVE-2025-39864,
        cve-res:CVE-2025-39865,
        cve-res:CVE-2025-39866,
        cve-res:CVE-2025-40300,
        cve-res:CVE-2025-43368,
        cve-res:CVE-2025-47219,
        cve-res:CVE-2025-48989,
        cve-res:CVE-2025-53057,
        cve-res:CVE-2025-53066,
        cve-res:CVE-2025-55752,
        cve-res:CVE-2025-55754,
        cve-res:CVE-2025-6021,
        cve-res:CVE-2025-6052,
        cve-res:CVE-2025-61748,
        cve-res:CVE-2025-61795,
        cve-res:CVE-2025-7425,
        cve-res:CVE-2025-8916,
        cve-res:CVE-2025-9230,
        cve-res:CVE-2025-9231,
        cve-res:CVE-2025-9232,
        cve-res:CVE-2025-9820,
        cve-res:CVE-2026-21925,
        cve-res:CVE-2026-21932,
        cve-res:CVE-2026-21933,
        cve-res:CVE-2026-21945,
        cve-res:CVE-2026-21947,
        cve-res:CVE-2026-22924,
        cve-res:CVE-2026-22925,
        cve-res:CVE-2026-2673,
        cve-res:CVE-2026-28387,
        cve-res:CVE-2026-28388,
        cve-res:CVE-2026-28389,
        cve-res:CVE-2026-28390,
        cve-res:CVE-2026-31789,
        cve-res:CVE-2026-31790 ;
    icsa:hasCWE cwe-res:CWE-1025,
        cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-1285,
        cwe-res:CWE-1286,
        cwe-res:CWE-150,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-208,
        cwe-res:CWE-23,
        cwe-res:CWE-273,
        cwe-res:CWE-284,
        cwe-res:CWE-306,
        cwe-res:CWE-362,
        cwe-res:CWE-364,
        cwe-res:CWE-366,
        cwe-res:CWE-369,
        cwe-res:CWE-385,
        cwe-res:CWE-394,
        cwe-res:CWE-400,
        cwe-res:CWE-401,
        cwe-res:CWE-402,
        cwe-res:CWE-404,
        cwe-res:CWE-407,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-573,
        cwe-res:CWE-617,
        cwe-res:CWE-664,
        cwe-res:CWE-667,
        cwe-res:CWE-674,
        cwe-res:CWE-754,
        cwe-res:CWE-757,
        cwe-res:CWE-770,
        cwe-res:CWE-772,
        cwe-res:CWE-787,
        cwe-res:CWE-79,
        cwe-res:CWE-805,
        cwe-res:CWE-820,
        cwe-res:CWE-833,
        cwe-res:CWE-835,
        cwe-res:CWE-908,
        cwe-res:CWE-911 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC CN 4100 vers:intdot/<5.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-11" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Ruggedcom Rox" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40947" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-40947 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Ruggedcom Rox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 | RUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX5000 vers:intdot/<2.17.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-12" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Ruggedcom Rox" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-40949" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2025-40949 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Ruggedcom Rox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 | RUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 | RUGGEDCOM ROX RX5000 vers:intdot/<2.17.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-13" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2024-54017" ;
    icsa:cweNumber "CWE-334" ;
    icsa:hasCVE cve-res:CVE-2024-54017 ;
    icsa:hasCWE cwe-res:CWE-334 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIPROTEC 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIPROTEC 5 6MD84 (CP300) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 6MD85 (CP200) vers:all/* () | SIPROTEC 5 6MD85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 6MD86 (CP200) vers:all/* () | SIPROTEC 5 6MD86 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 6MD89 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 6MU85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7KE85 (CP200) vers:all/* () | SIPROTEC 5 7KE85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SA82 (CP100) vers:intdot/>=7.80 (CVE-2024-54017) | SIPROTEC 5 7SA82 (CP150) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7SA84 (CP200) vers:all/* () | SIPROTEC 5 7SA86 (CP200) vers:all/* () | SIPROTEC 5 7SA86 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SA87 (CP200) vers:all/* () | SIPROTEC 5 7SA87 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SD82 (CP100) vers:intdot/>=7.80 (CVE-2024-54017) | SIPROTEC 5 7SD82 (CP150) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7SD84 (CP200) vers:all/* () | SIPROTEC 5 7SD86 (CP200) vers:all/* () | SIPROTEC 5 7SD86 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SD87 (CP200) vers:all/* () | SIPROTEC 5 7SD87 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SJ81 (CP100) vers:intdot/>=7.80 (CVE-2024-54017) | SIPROTEC 5 7SJ81 (CP150) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7SJ82 (CP100) vers:intdot/>=7.80 (CVE-2024-54017) | SIPROTEC 5 7SJ82 (CP150) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7SJ85 (CP200) vers:all/* () | SIPROTEC 5 7SJ85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SJ86 (CP200) vers:all/* () | SIPROTEC 5 7SJ86 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SK82 (CP100) vers:intdot/>=7.80 (CVE-2024-54017) | SIPROTEC 5 7SK82 (CP150) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7SK85 (CP200) vers:all/* () | SIPROTEC 5 7SK85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SL82 (CP100) vers:intdot/>=7.80 (CVE-2024-54017) | SIPROTEC 5 7SL82 (CP150) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7SL86 (CP200) vers:all/* () | SIPROTEC 5 7SL86 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SL87 (CP200) vers:all/* () | SIPROTEC 5 7SL87 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7SS85 (CP200) vers:all/* () | SIPROTEC 5 7SS85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7ST85 (CP200) vers:all/* () | SIPROTEC 5 7ST85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7ST86 (CP300) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7SX82 (CP150) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7SX85 (CP300) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7SY82 (CP150) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7UM85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7UT82 (CP100) vers:intdot/>=7.80 (CVE-2024-54017) | SIPROTEC 5 7UT82 (CP150) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 7UT85 (CP200) vers:all/* () | SIPROTEC 5 7UT85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7UT86 (CP200) vers:all/* () | SIPROTEC 5 7UT86 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7UT87 (CP200) vers:all/* () | SIPROTEC 5 7UT87 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7VE85 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7VK87 (CP200) vers:all/* () | SIPROTEC 5 7VK87 (CP300) vers:intdot/>=7.80|<11.0 (CVE-2024-54017) | SIPROTEC 5 7VU85 (CP300) vers:intdot/<11.0 (CVE-2024-54017) | SIPROTEC 5 Compact 7SX800 (CP050) vers:intdot/<11.0 (CVE-2024-54017)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-14" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SENTRON 7KT PAC1261 Data Manager" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-22871" ;
    icsa:cweNumber "CWE-444" ;
    icsa:hasCVE cve-res:CVE-2025-22871 ;
    icsa:hasCWE cwe-res:CWE-444 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SENTRON 7KT PAC1261 Data Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SENTRON 7KT PAC1261 Data Manager vers:intdot/<2.1.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-14" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-15 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-15" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7 PLC Web Server" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-25789; CVE-2026-25786; CVE-2026-25787" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2026-25786,
        cve-res:CVE-2026-25787,
        cve-res:CVE-2026-25789 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC S7 PLC Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2026-25789) | SIMATIC S7-1500 Software Controller Linux V3 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-7AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL (6AG2516-3AN01-4AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1515F-2 PN RAIL (6AG2515-2FM02-4AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK02-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516TF-3 PN (6ES7516-3UP10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1508S T V3 vers:all/* (CVE-2026-25786; CVE-2026-25789); CVE-2026-25789) | SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK01-4AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DM03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1508S V4 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-7AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1508S F V3 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-4AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-7AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN (6ES7516-2GN00-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1508S F V2 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-7AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN (6ES7516-2PN00-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK00-2AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1507S V2 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1514SP-2 PN (6ES7514-2DN03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN02-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1517TF-3 PN (6ES7517-3UQ10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516pro F-2 PN (6ES7516-2GP03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL (6AG2516-3AN02-4AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK00-2AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518T-3 PN (6ES7518-3TT10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-1AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1507S V4 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CM03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1508S V2 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1517F-3 PN (6ES7517-3FQ10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-7AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518-3 PN (6ES7518-3AT10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN (6ES7513-2GL00-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513pro F-2 PN (6ES7513-2GM03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK02-1AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-2AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1507S F V2 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1517-3 PN (6ES7517-3AQ10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518TF-3 PN (6ES7518-3UT10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516pro-2 PN (6ES7516-2PP03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1507S F V3 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518F-3 PN (6ES7518-3FT10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL (6AG2510-1SJ01-1AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-7AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL (6AG2511-1AK01-1AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-4AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-PLCSIM Advanced vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN (6ES7513-2PL00-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP01-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK (6ES7518-4AP00-3AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL00-2AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-7AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1518-4 PN/DP (6AG1518-4AP00-4AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1507S F V4 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1517T-3 PN (6ES7517-3TQ10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-4AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1507S V3 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511-1 PN TX RAIL (6AG2511-1AK02-4AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL01-7AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN00-7AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK02-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-1AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1508S F V4 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-7AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1513-1 PN (6AG1513-1AL02-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516-3 PN/DP (6AG1516-3AN01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL (6AG2516-3FN02-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL02-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1518F-4 PN/DP (6AG1518-4FP00-4AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller Linux V2 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1515F-2 PN (6AG1515-2FM02-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN00-2AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513pro-2 PN (6ES7513-2PM03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25787; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK00-2AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1512SP-1 PN RAIL (6AG2512-1DK01-1AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1508S V3 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1516F-3 PN/DP (6AG1516-3FN02-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 Software Controller CPU 1508S TF V3 vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL (6AG2515-2FM01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511-1 PN (6AG1511-1AK01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1511F-1 PN (6AG1511-1FK01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK (6ES7518-4FP00-3AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-4AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS S7-1500 CPU 1513F-1 PN (6AG1513-1FL00-2AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516T-3 PN (6ES7516-3TP10-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIPLUS ET 200SP CPU 1510SP F-1 PN (6AG1510-1SJ01-2AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0) vers:intdot/<3.1.6 (CVE-2026-25786; CVE-2026-25789) | SIMATIC ET 200SP CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0) vers:all/* (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786; CVE-2026-25789) | SIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0) vers:intdot/<2.9.9 (CVE-2026-25786" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-15" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-16 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-16" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Ruggedcom Rox" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2019-13104; CVE-2022-30790; CVE-2024-3447; CVE-2019-13106; CVE-2019-14204; CVE-2024-22365; CVE-2022-30552; CVE-2022-34835; CVE-2025-7425; CVE-2022-2347; CVE-2019-14197; CVE-2025-46836; CVE-2020-10648; CVE-2019-13103; CVE-2019-14193; CVE-2019-14198; CVE-2019-14199; CVE-2023-27043; CVE-2019-14194; CVE-2024-57256; CVE-2025-6020; CVE-2019-14195; CVE-2023-3019; CVE-2019-14192; CVE-2025-0395; CVE-2025-3576; CVE-2024-57258; CVE-2025-49794; CVE-2019-14202; CVE-2025-9714; CVE-2019-14196; CVE-2019-14203; CVE-2025-49796; CVE-2019-14200; CVE-2019-14201" ;
    icsa:cweNumber "CWE-328; CWE-22; CWE-674; CWE-120; CWE-416; CWE-122; CWE-664; CWE-825; CWE-191; CWE-787; CWE-131; CWE-20; CWE-1286; CWE-190; CWE-121; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2019-13103,
        cve-res:CVE-2019-13104,
        cve-res:CVE-2019-13106,
        cve-res:CVE-2019-14192,
        cve-res:CVE-2019-14193,
        cve-res:CVE-2019-14194,
        cve-res:CVE-2019-14195,
        cve-res:CVE-2019-14196,
        cve-res:CVE-2019-14197,
        cve-res:CVE-2019-14198,
        cve-res:CVE-2019-14199,
        cve-res:CVE-2019-14200,
        cve-res:CVE-2019-14201,
        cve-res:CVE-2019-14202,
        cve-res:CVE-2019-14203,
        cve-res:CVE-2019-14204,
        cve-res:CVE-2020-10648,
        cve-res:CVE-2022-2347,
        cve-res:CVE-2022-30552,
        cve-res:CVE-2022-30790,
        cve-res:CVE-2022-34835,
        cve-res:CVE-2023-27043,
        cve-res:CVE-2023-3019,
        cve-res:CVE-2024-22365,
        cve-res:CVE-2024-3447,
        cve-res:CVE-2024-57256,
        cve-res:CVE-2024-57258,
        cve-res:CVE-2025-0395,
        cve-res:CVE-2025-3576,
        cve-res:CVE-2025-46836,
        cve-res:CVE-2025-49794,
        cve-res:CVE-2025-49796,
        cve-res:CVE-2025-6020,
        cve-res:CVE-2025-7425,
        cve-res:CVE-2025-9714 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-1286,
        cwe-res:CWE-131,
        cwe-res:CWE-190,
        cwe-res:CWE-191,
        cwe-res:CWE-20,
        cwe-res:CWE-22,
        cwe-res:CWE-328,
        cwe-res:CWE-416,
        cwe-res:CWE-664,
        cwe-res:CWE-674,
        cwe-res:CWE-787,
        cwe-res:CWE-825 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Ruggedcom Rox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CVE-2019-13104; CVE-2022-30790; CVE-2024-3447; CVE-2019-13106; CVE-2019-14204; CVE-2025-49796) | RUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2024-22365; CVE-2025-49796) | RUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2025-49796) | RUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2022-30552; CVE-2025-49796) | RUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2022-34835; CVE-2025-7425; CVE-2022-2347; CVE-2019-14197; CVE-2025-49796) | RUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2025-49796) | RUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2025-46836; CVE-2025-49796); CVE-2020-10648; CVE-2019-14193; CVE-2023-27043; CVE-2019-14198; CVE-2019-14199; CVE-2024-57256; CVE-2019-14194; CVE-2025-6020; CVE-2025-49796) | RUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2019-14195; CVE-2023-3019; CVE-2025-49796) | RUGGEDCOM ROX RX5000 vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2025-49796) | RUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2019-14192; CVE-2025-0395; CVE-2025-3576; CVE-2024-57258; CVE-2025-49794; CVE-2019-14202; CVE-2025-9714; CVE-2019-14196; CVE-2019-14203; RUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 (CVE-2019-13103; CVE-2019-14200; CVE-2019-14201; CVE-2025-49796) | RUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 (CVE-2019-13103" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-16" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-134-17 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-134-17" ;
    dcterms:issued "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Universal Robots Polyscope 5" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-8153" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-8153 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Universal Robots Polyscope 5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Polyscope 5 <5.25.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-134-17" ;
    icsa:vendor "Universal Robots" ;
    icsa:year 2026 .

icsa-res:ICSA-26-139-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-139-01" ;
    dcterms:issued "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB CoreSense HM and CoreSense M10" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Food and Agriculture; Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-3465" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2025-3465 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB CoreSense HM and CoreSense M10" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CoreSense HM <=2.3.1; 2.3.4 | CoreSense M10 <=1.4.1.12; 1.4.1.31" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-139-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-139-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-139-02" ;
    dcterms:issued "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 Devices" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-0300" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-0300 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM APE1808 Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM APE1808 vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-139-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-139-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-139-03" ;
    dcterms:issued "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "ScadaBR" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Brazil" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Dams; Chemical; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-8604; CVE-2026-8603; CVE-2026-8602; CVE-2026-8605" ;
    icsa:cweNumber "CWE-306; CWE-352; CWE-78; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-8602,
        cve-res:CVE-2026-8603,
        cve-res:CVE-2026-8604,
        cve-res:CVE-2026-8605 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-352,
        cwe-res:CWE-78,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ScadaBR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ScadaBR ScadaBR: 1.2.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-139-03" ;
    icsa:vendor "ScadaBR" ;
    icsa:year 2026 .

icsa-res:ICSA-26-139-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-139-04" ;
    dcterms:issued "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "ZKTeco CCTV Cameras" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-8598" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2026-8598 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ZKTeco CCTV Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ZKTeco SSC335-GC2063-Face-0b77 Solution: <V5.0.1.2.20260421" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-139-04" ;
    icsa:vendor "ZKTeco" ;
    icsa:year 2026 .

icsa-res:ICSA-26-139-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-139-05" ;
    dcterms:issued "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Kieback & Peter DDC Building Controllers" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Financial Services; Food and Agriculture; Government Facilities; Healthcare and Public Health; Information Technology" ;
    icsa:cveNumber "CVE-2026-4293" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2026-4293 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kieback & Peter DDC Building Controllers" ;
    icsa:productDistribution "Austria, China, France, Germany, United Arab Emirates" ;
    icsa:productsAffected "Kieback & Peter DDC4400: <=1.12.14; Kieback & Peter DDC520: <=1.24.1; Kieback & Peter DDC4100: <=1.12.14; Kieback & Peter DDC4002: <=1.12.14; Kieback & Peter DDC4400e: <=1.23.4; Kieback & Peter DDC4020e: <=1.23.4; Kieback & Peter DDC4200: <=1.12.14; Kieback & Peter DDC4040e: <=1.23.4; Kieback & Peter DDC4200e: <=1.23.4; Kieback & Peter DDC4200-L: <=1.12.14; Kieback & Peter DDC4002e: <=1.23.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-139-05" ;
    icsa:vendor "Kieback & Peter" ;
    icsa:year 2026 .

icsa-res:ICSA-26-141-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-141-01" ;
    dcterms:issued "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy GMS600" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-4304" ;
    icsa:cweNumber "CWE-203" ;
    icsa:hasCVE cve-res:CVE-2022-4304 ;
    icsa:hasCWE cwe-res:CWE-203 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy GMS600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "GMS600 versions 1.3.0 and 1.3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-141-01" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-141-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-141-02" ;
    dcterms:issued "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB B&R PCs" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2023-45234; CVE-2023-45232; CVE-2023-45235; CVE-2023-45229; CVE-2023-45233; CVE-2023-45230; CVE-2023-45236; CVE-2023-45237; CVE-2023-45231" ;
    icsa:cweNumber "CWE-119; CWE-835; CWE-125; CWE-338" ;
    icsa:hasCVE cve-res:CVE-2023-45229,
        cve-res:CVE-2023-45230,
        cve-res:CVE-2023-45231,
        cve-res:CVE-2023-45232,
        cve-res:CVE-2023-45233,
        cve-res:CVE-2023-45234,
        cve-res:CVE-2023-45235,
        cve-res:CVE-2023-45236,
        cve-res:CVE-2023-45237 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-125,
        cwe-res:CWE-338,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "B&R PCs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MPC3100 <1.24; C80 <1.14; APC2200 <1.35; PPC1200 <1.14; PPC2200 <1.35; APC3100 <1.45; PPC3100 <1.45; APC910 <=1.25; PPC900 <2.16; APC4100 <1.09" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-141-02" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-141-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-141-03" ;
    dcterms:issued "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB B&R Automation Studio" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2015-6607; CVE-2020-11656; CVE-2019-19646; CVE-2020-13631; CVE-2022-35737; CVE-2020-11655; CVE-2015-5895; CVE-2017-10989; CVE-2023-7104; CVE-2018-20506; CVE-2015-3717; CVE-2016-6153; CVE-2025-6965; CVE-2020-15358; CVE-2020-13632; CVE-2018-20505; CVE-2015-3416; CVE-2025-3277; CVE-2020-13630; CVE-2018-20346; CVE-2019-8457; CVE-2018-8740; CVE-2020-13435; CVE-2020-13434; CVE-2019-19645" ;
    icsa:cweNumber "CWE-200; CWE-120; CWE-674; CWE-197; CWE-416; CWE-122; CWE-286; CWE-787; CWE-20; CWE-190; CWE-119; CWE-125; CWE-476; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2015-3416,
        cve-res:CVE-2015-3717,
        cve-res:CVE-2015-5895,
        cve-res:CVE-2015-6607,
        cve-res:CVE-2016-6153,
        cve-res:CVE-2017-10989,
        cve-res:CVE-2018-20346,
        cve-res:CVE-2018-20505,
        cve-res:CVE-2018-20506,
        cve-res:CVE-2018-8740,
        cve-res:CVE-2019-19645,
        cve-res:CVE-2019-19646,
        cve-res:CVE-2019-8457,
        cve-res:CVE-2020-11655,
        cve-res:CVE-2020-11656,
        cve-res:CVE-2020-13434,
        cve-res:CVE-2020-13435,
        cve-res:CVE-2020-13630,
        cve-res:CVE-2020-13631,
        cve-res:CVE-2020-13632,
        cve-res:CVE-2020-15358,
        cve-res:CVE-2022-35737,
        cve-res:CVE-2023-7104,
        cve-res:CVE-2025-3277,
        cve-res:CVE-2025-6965 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-120,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-197,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-286,
        cwe-res:CWE-416,
        cwe-res:CWE-476,
        cwe-res:CWE-674,
        cwe-res:CWE-754,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "B&R Automation Studio" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "B&R Automation Studio <6.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-141-03" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-141-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-141-04" ;
    dcterms:issued "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB B&R Automation Runtime" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-3449; CVE-2025-11498; CVE-2025-3448" ;
    icsa:cweNumber "CWE-79; CWE-1236; CWE-340" ;
    icsa:hasCVE cve-res:CVE-2025-11498,
        cve-res:CVE-2025-3448,
        cve-res:CVE-2025-3449 ;
    icsa:hasCWE cwe-res:CWE-1236,
        cwe-res:CWE-340,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "B&R Automation Runtime" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Automation Runtime <6.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-141-04" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-141-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-141-05" ;
    dcterms:issued "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Terra AC Wallbox" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-12142; CVE-2025-12143; CVE-2025-10504" ;
    icsa:cweNumber "CWE-122; CWE-121; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2025-10504,
        cve-res:CVE-2025-12142,
        cve-res:CVE-2025-12143 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-121,
        cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Terra AC Wallbox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB Terra AC wallbox (JP) <=1.8.33" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-141-05" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-146-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-146-01" ;
    dcterms:issued "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Terra AC" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2025-5517" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2025-5517 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Terra AC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Terra AC wallbox (UL40/80A) <=1.8.32; 1.8.34 | Terra AC wallbox (JP) <=1.8.2; 1.8.34; 1.8.34 | Terra AC wallbox (MID/ CE) <=1.8.32; 1.8.33 | Terra AC wallbox (UL32A) <=1.8.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-146-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-146-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-146-02" ;
    dcterms:issued "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB AC500 V2" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-7745" ;
    icsa:cweNumber "CWE-126" ;
    icsa:hasCVE cve-res:CVE-2025-7745 ;
    icsa:hasCWE cwe-res:CWE-126 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB AC500 V2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AC500 V2 <=2.5.2; 2.5.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-146-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-146-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-146-03" ;
    dcterms:issued "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Ability Zenon Remote Transport Vulnerability (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Energy; Healthcare and Public Health; Information Technology; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-8754" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-8754 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ability Zenon" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB Ability Zenon >=7.50|<=14" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-146-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-146-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-146-04" ;
    dcterms:issued "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Energy; Healthcare and Public Health; Information Technology; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-3450" ;
    icsa:cweNumber "CWE-413" ;
    icsa:hasCVE cve-res:CVE-2025-3450 ;
    icsa:hasCWE cwe-res:CWE-413 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "B&R Automation Runtime System Diagnostics Manager (SDM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Automation Runtime <6.3; Automation Runtime <Q4.93" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-146-04" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-146-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-146-05" ;
    dcterms:issued "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Ability Camera Connect" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Communications; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2022-41325; CVE-2019-5460; CVE-2018-11529; CVE-2019-13615; CVE-2017-10699; CVE-2023-47360; CVE-2017-8311; CVE-2017-8310; CVE-2017-17670; CVE-2024-46461; CVE-2017-8312; CVE-2023-47359; CVE-2019-5459; CVE-2020-26664; CVE-2019-19721; CVE-2017-9301; CVE-2017-9300; CVE-2023-46814; CVE-2019-5439; CVE-2017-8313; CVE-2019-13602; CVE-2019-13962" ;
    icsa:cweNumber "CWE-415; CWE-416; CWE-122; CWE-427; CWE-191; CWE-787; CWE-190; CWE-119; CWE-125; CWE-193" ;
    icsa:hasCVE cve-res:CVE-2017-10699,
        cve-res:CVE-2017-17670,
        cve-res:CVE-2017-8310,
        cve-res:CVE-2017-8311,
        cve-res:CVE-2017-8312,
        cve-res:CVE-2017-8313,
        cve-res:CVE-2017-9300,
        cve-res:CVE-2017-9301,
        cve-res:CVE-2018-11529,
        cve-res:CVE-2019-13602,
        cve-res:CVE-2019-13615,
        cve-res:CVE-2019-13962,
        cve-res:CVE-2019-19721,
        cve-res:CVE-2019-5439,
        cve-res:CVE-2019-5459,
        cve-res:CVE-2019-5460,
        cve-res:CVE-2020-26664,
        cve-res:CVE-2022-41325,
        cve-res:CVE-2023-46814,
        cve-res:CVE-2023-47359,
        cve-res:CVE-2023-47360,
        cve-res:CVE-2024-46461 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-122,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-191,
        cwe-res:CWE-193,
        cwe-res:CWE-415,
        cwe-res:CWE-416,
        cwe-res:CWE-427,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Ability Camera Connect" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ability Camera Connect vers:intdot/<=1.5.0.14; 1.5.0.15" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-146-05" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-146-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-146-06" ;
    dcterms:issued "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB LVS MConfig" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-9970" ;
    icsa:cweNumber "CWE-316" ;
    icsa:hasCVE cve-res:CVE-2025-9970 ;
    icsa:hasCWE cwe-res:CWE-316 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB LVS MConfig" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MConfig Version <=1.4.9.21" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-146-06" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-148-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-148-01" ;
    dcterms:issued "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "MacGregor Voyage Data Recorder (VDR) G4e" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Denmark" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-42941; CVE-2026-44611; CVE-2026-42951; CVE-2026-42929; CVE-2026-40425" ;
    icsa:cweNumber "CWE-552; CWE-1392; CWE-916; CWE-798; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2026-40425,
        cve-res:CVE-2026-42929,
        cve-res:CVE-2026-42941,
        cve-res:CVE-2026-42951,
        cve-res:CVE-2026-44611 ;
    icsa:hasCWE cwe-res:CWE-1392,
        cwe-res:CWE-522,
        cwe-res:CWE-552,
        cwe-res:CWE-798,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MacGregor Voyage Data Recorder (VDR) G4e" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MacGregor Voyage Data Recorder (VDR) G4e <V5.250" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-148-01" ;
    icsa:vendor "Danelec" ;
    icsa:year 2026 .

icsa-res:ICSA-26-148-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-148-02" ;
    dcterms:issued "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-7786" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-7786 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "USR-W610 RS232/485 to Wi-Fi/Ethernet Converter 7.03T.07" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-148-02" ;
    icsa:vendor "Jinan USR IOT Technology Limited (PUSR)" ;
    icsa:year 2026 .

icsa-res:ICSA-26-148-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-148-03" ;
    dcterms:issued "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB EIBPORT" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2021-22291" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2021-22291 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB EIBPORT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EIBPORT V3 KNX (2CLA963710W1001) <3.9.2 | EIBPORT V3 KNX (2CSM256242R2001) <3.9.2 | EIBPORT V3 KNX GSM (2CLA963720W1001) <3.9.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-148-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-148-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-148-04" ;
    dcterms:issued "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Busch-Welcome 2 Wire Door Opener Actuator" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2025-7705" ;
    icsa:cweNumber "CWE-489" ;
    icsa:hasCVE cve-res:CVE-2025-7705 ;
    icsa:hasCWE cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Busch-Welcome 2 Wire Door Opener Actuator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Switch Actuator 4 DU vers:all/* | Switch actuator; door/light 4 DU vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-148-04" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-148-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-148-05" ;
    dcterms:issued "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "CP Plus 8 Ch. Network Video Recorder" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Emergency Services" ;
    icsa:cveNumber "CVE-2026-6824" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2026-6824 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CP Plus 8 Ch. Network Video Recorder" ;
    icsa:productDistribution "India, Nepal, United Arab Emirates, Gambia" ;
    icsa:productsAffected "CP-UNR-108F1 Hardware V1.0 | CP-UNR-108F1 Web V3.2.7.128806 | CP-UNR-108F1 System V4.001.00AT009.0.R" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-148-05" ;
    icsa:vendor "CP Plus" ;
    icsa:year 2026 .

icsa-res:ICSA-26-148-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-148-06" ;
    dcterms:issued "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "KMW CCTV Security Cameras" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Romania" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities; Critical Manufacturing; Financial Services; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-5386" ;
    icsa:cweNumber "CWE-620" ;
    icsa:hasCVE cve-res:CVE-2026-5386 ;
    icsa:hasCWE cwe-res:CWE-620 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KMW CCTV Security Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KM-IP521 IPCAM_V4.04.91.230307 | KM-IP421 IPCAM_V4.04.53.210416" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-148-06" ;
    icsa:vendor "KMW" ;
    icsa:year 2026 .

icsa-res:ICSA-26-148-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-148-07" ;
    dcterms:issued "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schnieider Electric EcoStruxure Machine Expert HVAC" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-6332" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2026-6332 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schnieider Electric EcoStruxure Machine Expert HVAC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ecostruxure Machine Expert HVAC Versions prior to 1.10.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-148-07" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-148-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-148-08" ;
    dcterms:issued "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "XCharge C6" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-9038; CVE-2026-9039; CVE-2026-9037" ;
    icsa:cweNumber "CWE-1188; CWE-121; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2026-9037,
        cve-res:CVE-2026-9038,
        cve-res:CVE-2026-9039 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-121,
        cwe-res:CWE-494 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XCharge C6" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "XCharge C6: <May_22_2026" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-148-08" ;
    icsa:vendor "XCharge" ;
    icsa:year 2026 .

icsa-res:ICSA-26-155-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-155-01" ;
    dcterms:issued "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "NAVTOR NavBox" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Norway" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-21404" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-21404 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NAVTOR NavBox" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "NAVTOR NavBox: 4.16.1.20" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-155-01" ;
    icsa:vendor "NAVTOR" ;
    icsa:year 2026 .

icsa-res:ICSA-26-155-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-155-02" ;
    dcterms:issued "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy ITT600 Explorer" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-8176; CVE-2025-59375" ;
    icsa:cweNumber "CWE-674; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2024-8176,
        cve-res:CVE-2025-59375 ;
    icsa:hasCWE cwe-res:CWE-674,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy ITT600 Explorer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2.1_SP6; ITT600 Explorer vers: ITT600_Explorer/<2.1_SP6; vers: ITT600_Explorer/<=2.1_SP6" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-155-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-155-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-155-03" ;
    dcterms:issued "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "B&R PPT30 Operating System" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-11482" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-11482 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "B&R PPT30 Operating System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "1.8.0; PPT30 Operating System <1.8.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-155-03" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-155-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-155-04" ;
    dcterms:issued "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy RTU500" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Dams; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-8479; CVE-2025-69421; CVE-2026-32777; CVE-2026-24515; CVE-2026-32778; CVE-2026-25210; CVE-2026-32776" ;
    icsa:cweNumber "CWE-835; CWE-190; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2025-69421,
        cve-res:CVE-2026-24515,
        cve-res:CVE-2026-25210,
        cve-res:CVE-2026-32776,
        cve-res:CVE-2026-32777,
        cve-res:CVE-2026-32778,
        cve-res:CVE-2026-8479 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-476,
        cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy RTU500" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "vers: RTU500_series_CMU_Firmware/>=13.7.1|<=13.7.8; RTU500 series CMU Firmware vers: RTU500_series_CMU_Firmware/>=12.7.1|<=12.7.7; 13.8.1; vers: RTU500_series_CMU_Firmware/>=13.6.1|<=13.6.3; vers: RTU500_series_CMU_Firmware/>=13.5.1|<=13.5.4; vers: RTU500_series_CMU_Firmware/>=13.7.1|<=13.7.7" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-155-04" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-155-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-155-05" ;
    dcterms:issued "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy MACH HiDraw" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Dams; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-7310" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2026-7310 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy MACH HiDraw" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MACH HiDraw vers:MACH_HiDraw/<=9.22" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-155-05" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-160-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-160-01" ;
    dcterms:issued "2026-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon Network Managed Switches" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Energy; Food and Agriculture; Government Services and Facilities; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2024-3596" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2024-3596 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon Network Managed Switches" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Connexium Managed Switches vers:all/* | Modicon Managed Switches vers:all/* | Modicon Redundancy Switches vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-160-01" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-160-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-160-02" ;
    dcterms:issued "2026-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens KACO Blueplanet Inverters" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2025-40946; CVE-2026-41125" ;
    icsa:cweNumber "CWE-89; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2025-40946,
        cve-res:CVE-2026-41125 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens KACO Blueplanet Inverters" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "vers:intdot/<6.1.4.9 | blueplanet 25.0 NX3-33.0 NX3 vers:all/* | blueplanet 3.0 NX3-20.0 NX3 vers:all/* | blueplanet 3.0 TL3-60.0 TL3 vers:all/* | blueplanet 3.0-5.0 NX1 vers:all/* | blueplanet 360 NX3 M6 vers:all/* | blueplanet 50.0 NX3-60.0 NX3 vers:all/* | blueplanet 87.0 TL3 vers:all/* | blueplanet 87.0 TL3 GEN2 vers:all/*; vers:intdot/<6.1.4.9 | blueplanet 155 TL3 vers:all/* | blueplanet 155 TL3 GEN2 vers:all/*; vers:intdot/<6.1.4.9 | blueplanet 92.0 TL3 vers:all/* | blueplanet 92.0 TL3 GEN2 vers:all/*; vers:intdot/<6.1.4.9 | blueplanet 110 TL3 vers:all/* | blueplanet 125 NX3 M11 vers:all/* | blueplanet 125 TL3 vers:all/* | blueplanet 125 TL3 GEN2 vers:all/*; vers:intdot/<6.1.4.9 | blueplanet 137 TL3 vers:all/* | blueplanet 150 TL3 vers:all/* | blueplanet 150 TL3 GEN2 vers:all/*; vers:intdot/<6.1.4.9 | blueplanet gridsafe 110 TL3-S vers:intdot/<3.91; blueplanet 100 NX3 M8 vers:all/* | blueplanet 100 TL3 GEN2 vers:all/*; vers:intdot/<6.1.4.9 | blueplanet 105 TL3 vers:all/* | blueplanet 105 TL3 GEN2 vers:all/*; vers:all/* | blueplanet gridsafe 137 TL3-S vers:intdot/<3.91; vers:all/* | blueplanet gridsafe 92.0 TL3-S vers:all/*; vers:intdot/<3.91 | blueplanet hybrid 10.0 TL3 vers:all/* | blueplanet hybrid 6.0 NH3-12.0 NH3 vers:all/*; vers:intdot/<6.1.4.9 | blueplanet 165 TL3 vers:all/* | blueplanet 165 TL3 GEN2 vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-160-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-160-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-160-03" ;
    dcterms:issued "2026-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure Panel Server" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-6866" ;
    icsa:cweNumber "CWE-1188" ;
    icsa:hasCVE cve-res:CVE-2026-6866 ;
    icsa:hasCWE cwe-res:CWE-1188 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure Panel Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure Panel Server PAS800 vers:intdot/<=002.005.000 | EcoStruxure Panel Server PAS800 vers:intdot/=002.006.000 | EcoStruxure Panel Server PAS800V2 vers:intdot/<=002.005.000 | EcoStruxure Panel Server PAS800V2 vers:intdot/=002.006.000 | EcoStruxure Panel Server PAS600 vers:intdot/<=002.005.000 | EcoStruxure Panel Server PAS600 vers:intdot/=002.006.000 | EcoStruxure Panel Server PAS600V2 vers:intdot/<=002.005.000 | EcoStruxure Panel Server PAS600V2 vers:intdot/=002.006.000 | EcoStruxure Panel Server PAS400 vers:intdot/<=002.005.000 | EcoStruxure Panel Server PAS400 vers:intdot/=002.006.000" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-160-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-162-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-162-01" ;
    dcterms:issued "2026-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yarbo Android/iOS Mobile Application and Cloud Infrastructure" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-7368; CVE-2026-10557" ;
    icsa:cweNumber "CWE-798; CWE-862" ;
    icsa:hasCVE cve-res:CVE-2026-10557,
        cve-res:CVE-2026-7368 ;
    icsa:hasCWE cwe-res:CWE-798,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Yarbo Android/iOS Mobile Application and Cloud Infrastructure" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Yarbo Yarbo Android/IOS mobile application: <v3.17.4; Yarbo Cloud MQTT infrastructure: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-162-01" ;
    icsa:vendor "Yarbo" ;
    icsa:year 2026 .

icsa-res:ICSA-26-162-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-162-02" ;
    dcterms:issued "2026-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Naxclow IoT Platform" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-28742; CVE-2026-50244; CVE-2026-42932; CVE-2026-50108; CVE-2026-50099; CVE-2026-42947; CVE-2026-50101" ;
    icsa:cweNumber "CWE-862; CWE-639; CWE-321; CWE-262; CWE-538; CWE-340" ;
    icsa:hasCVE cve-res:CVE-2026-28742,
        cve-res:CVE-2026-42932,
        cve-res:CVE-2026-42947,
        cve-res:CVE-2026-50099,
        cve-res:CVE-2026-50101,
        cve-res:CVE-2026-50108,
        cve-res:CVE-2026-50244 ;
    icsa:hasCWE cwe-res:CWE-262,
        cwe-res:CWE-321,
        cwe-res:CWE-340,
        cwe-res:CWE-538,
        cwe-res:CWE-639,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Naxclow IoT Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Naxclow Smart Doorbell X3: vers:all/*; Naxclow V720: vers:all/*; Naxclow X Smart Home: vers:all/*; Naxclow ix cam: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-162-02" ;
    icsa:vendor "Naxclow" ;
    icsa:year 2026 .

icsa-res:ICSA-26-162-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-162-03" ;
    dcterms:issued "2026-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Brickcom Cameras" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Financial Services; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-50245; CVE-2026-50005" ;
    icsa:cweNumber "CWE-306; CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2026-50005,
        cve-res:CVE-2026-50245 ;
    icsa:hasCWE cwe-res:CWE-1392,
        cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Brickcom Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Brickcom Brickcom Dome: 3.2.3.5.6; Brickcom Brickcom Bullet: 3.2.3.5.6; Brickcom Brickcom Box: 3.2.3.5.6; Brickcom Brickcom Cube: 3.2.3.5.6" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-162-03" ;
    icsa:vendor "Brickcom" ;
    icsa:year 2026 .

icsa-res:ICSA-26-167-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-167-01" ;
    dcterms:issued "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk, Analytics, PavilionX" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-14272" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2025-14272 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FactoryTalk Analytics PavilionX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation FactoryTalk Analytics PavilionX: <7.01" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-167-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-167-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-167-02" ;
    dcterms:issued "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLinx" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-13573" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2020-13573 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation RSLinx" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation RSLinx Classic: <=4.50.00" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-167-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-167-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-167-03" ;
    dcterms:issued "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-11317" ;
    icsa:cweNumber "CWE-404" ;
    icsa:hasCVE cve-res:CVE-2026-11317 ;
    icsa:hasCWE cwe-res:CWE-404 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation Compact GuardLogix 5370: <=35.015; Rockwell Automation ControlLogix 5570: <=35.015; Rockwell Automation CompactLogix 5370: <=34.016; Rockwell Automation GuardLogix 5570: 36.012" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-167-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-167-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-167-04" ;
    dcterms:issued "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation CompactLogix" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-9307; CVE-2025-11694" ;
    icsa:cweNumber "CWE-497; CWE-354" ;
    icsa:hasCVE cve-res:CVE-2025-11694,
        cve-res:CVE-2026-9307 ;
    icsa:hasCWE cwe-res:CWE-354,
        cwe-res:CWE-497 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation CompactLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation CompactLogix 5370 L3: <V38.011; Rockwell Automation CompactLogix 5370 L2: <V38.011; Rockwell Automation CompactLogix 5370 L1: <V38.011" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-167-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-167-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-167-05" ;
    dcterms:issued "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FLEX I/O EtherNet/IP Adapters" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-0646; CVE-2026-0647" ;
    icsa:cweNumber "CWE-306; CWE-401" ;
    icsa:hasCVE cve-res:CVE-2026-0646,
        cve-res:CVE-2026-0647 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-401 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FLEX I/O EtherNet/IP Adapters" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Rockwell Automation 1794-AENTRXT: V2.012; Rockwell Automation 1794-AENTR: V2.012" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-167-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-169-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-169-01" ;
    dcterms:issued "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVer PTC cameras" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Government Facilities; Commercial Facilities; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-40624" ;
    icsa:cweNumber "CWE-552" ;
    icsa:hasCVE cve-res:CVE-2026-40624 ;
    icsa:hasCWE cwe-res:CWE-552 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVer PTC cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PTC500S | PTC115 | PTC500+ | PTC115+" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-169-01" ;
    icsa:vendor "AVer" ;
    icsa:year 2026 .

icsa-res:ICSA-26-169-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-169-02" ;
    dcterms:issued "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "AzeoTech DAQFactory (Update A)" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-12921; CVE-2026-12390" ;
    icsa:cweNumber "CWE-416; CWE-843" ;
    icsa:hasCVE cve-res:CVE-2026-12390,
        cve-res:CVE-2026-12921 ;
    icsa:hasCWE cwe-res:CWE-416,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AzeoTech DAQFactory (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DAQFactory <=21.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-169-02" ;
    icsa:vendor "AzeoTech" ;
    icsa:year 2026 .

icsa-res:ICSA-26-169-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-169-03" ;
    dcterms:issued "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Historian Site Edition" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-36539; CVE-2025-44019; CVE-2025-13036" ;
    icsa:cweNumber "CWE-248; CWE-362" ;
    icsa:hasCVE cve-res:CVE-2025-13036,
        cve-res:CVE-2025-36539,
        cve-res:CVE-2025-44019 ;
    icsa:hasCWE cwe-res:CWE-248,
        cwe-res:CWE-362 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FactoryTalk Historian Site Edition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FactoryTalk Historian SE 11 | FactoryTalk Historian SE <=11.00 | FactoryTalk Historian SE <=11.00" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-169-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-169-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-169-04" ;
    dcterms:issued "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EasyLogic T150 and Saitel DP" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-6865" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2026-6865 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EasyLogic T150 and Saitel DP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller Firmware installed on Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller (All versions) | Schneider Electric Saitel DP Remote Terminal Unit & Controller Firmware installed on Schneider Electric Saitel DP Remote Terminal Unit & Controller (All versions)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-169-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-169-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-169-05" ;
    dcterms:issued "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSEC iQ-F Series" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-8805" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2026-8805 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric MELSEC iQ-F Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP <=1.000" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-169-05" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-169-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-169-06" ;
    dcterms:issued "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric Co.'s MELSEC iQ-F Series FX5-ENET/IP Ethernet Module" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-8806" ;
    icsa:cweNumber "CWE-440" ;
    icsa:hasCVE cve-res:CVE-2026-8806 ;
    icsa:hasCWE cwe-res:CWE-440 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric Co.'s MELSEC iQ-F Series FX5-ENET/IP Ethernet Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-169-06" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-169-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-169-07" ;
    dcterms:issued "2026-05-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-4827" ;
    icsa:cweNumber "CWE-331" ;
    icsa:hasCVE cve-res:CVE-2026-4827 ;
    icsa:hasCWE cwe-res:CWE-331 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Easergy MiCOM C264 | Easergy MiCOM P139 | Easergy MiCOM P437 | Easergy MiCOM P439 | Easergy MiCOM P532 | Easergy MiCOM P539 | Easergy MiCOM P631 | Easergy MiCOM P632 | Easergy MiCOM P633 | Easergy MiCOM P634 | Easergy MiCOM P633 P633.680.700 | Easergy MiCOM P634 P634.680.700 | Easergy MiCOM P138 | Easergy MiCOM P436 | Easergy MiCOM P438 | Easergy MiCOM P638 | Easergy MiCOM C434 | EcoStruxure Power Automation System Gateway (EPAS-GTW) | EcoStruxure Power Automation System User Interface (EPAS-UI) | EcoStruxure Power Operation | EcoStruxure Power Operation | iPMFLS | PowerLogic P5 Protection Relay | PowerLogic P7 Protection and Control Platform | PowerLogic T300 | PowerLogic T500 | Saitel DP | EasyLogic T150 (formerly Saitel DR) | Easergy MiCOM C264 D7.34 | Easergy C5 | Easergy C5 1.1.18 | Easergy MiCOM P139 version P139.678.700 | Easergy MiCOM P439 P439.678.700 | Easergy MiCOM P539 P539.678.700 | Easergy MiCOM P632 P632.678.700 | Easergy MiCOM P633 P633.680.701 | Easergy MiCOM P634 P634.680.701 | Easergy MiCOM P633 P633.678.700 | Easergy MiCOM P138 P138.677.701 | Easergy MiCOM C434 C434.679.700 | Saitel DR 11.06.31 | EcoStruxure Power Automation System Gateway (EPAS-GTW) 6.4.610.500.101 | EcoStruxure Power Automation Automation System User Interface (EPAS-UI) 3.0.4 | EcoStruxure Power Operation 2022_CU7 | EcoStruxure Power Operation (EPO) 2024_CU3 | iPMFLS 64.2025.0.14 | PowerLogic P5 Protection Relay 02.503.101 | PowerLogic P7 Protection and Control Platform 02.003.001 | PowerLogic T300 2.9.5 | PowerLogic T500 11.08.03 | Saitel DP 11.06.37 | Easergy MiCOM P40 Series" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-169-07" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-174-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-174-01" ;
    dcterms:issued "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WinCC Certificate Manager" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems; Energy; Healthcare and Public Health; Financial Services; Government Facilities" ;
    icsa:cveNumber "CVE-2026-24349" ;
    icsa:cweNumber "CWE-313" ;
    icsa:hasCVE cve-res:CVE-2026-24349 ;
    icsa:hasCWE cwe-res:CWE-313 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens WinCC Certificate Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC WinCC Unified PC Runtime V16 | SIMATIC WinCC Unified PC Runtime V17 | SIMATIC WinCC Unified PC Runtime V18 | SIMATIC WinCC Unified PC Runtime V19 | SIMATIC WinCC Unified PC Runtime V20 | SIMATIC WinCC Unified PC Runtime V21" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-174-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-174-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-174-02" ;
    dcterms:issued "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPROTEC 5 Using DIGSI5 Protocol" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems; Energy; Healthcare and Public Health; Financial Services; Government Facilities" ;
    icsa:cveNumber "CVE-2025-40808" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2025-40808 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIPROTEC 5 Using DIGSI5 Protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIPROTEC 5 6MD84 (CP300) | SIPROTEC 5 6MD85 (CP200) | SIPROTEC 5 6MD85 (CP300) | SIPROTEC 5 6MD86 (CP200) | SIPROTEC 5 6MD86 (CP300) | SIPROTEC 5 6MD89 (CP300) | SIPROTEC 5 6MU85 (CP300) | SIPROTEC 5 7KE85 (CP200) | SIPROTEC 5 7KE85 (CP300) | SIPROTEC 5 7SA82 (CP100) | SIPROTEC 5 7SA82 (CP150) | SIPROTEC 5 7SA86 (CP200) | SIPROTEC 5 7SA86 (CP300) | SIPROTEC 5 7SA87 (CP200) | SIPROTEC 5 7SA87 (CP300) | SIPROTEC 5 7SD82 (CP100) | SIPROTEC 5 7SD82 (CP150) | SIPROTEC 5 7SD86 (CP200) | SIPROTEC 5 7SD86 (CP300) | SIPROTEC 5 7SD87 (CP200) | SIPROTEC 5 7SD87 (CP300) | SIPROTEC 5 7SJ81 (CP100) | SIPROTEC 5 7SJ81 (CP150) | SIPROTEC 5 7SJ82 (CP100) | SIPROTEC 5 7SJ82 (CP150) | SIPROTEC 5 7SJ85 (CP200) | SIPROTEC 5 7SJ85 (CP300) | SIPROTEC 5 7SJ86 (CP200) | SIPROTEC 5 7SJ86 (CP300) | SIPROTEC 5 7SK82 (CP100) | SIPROTEC 5 7SK82 (CP150) | SIPROTEC 5 7SK85 (CP200) | SIPROTEC 5 7SK85 (CP300) | SIPROTEC 5 7SL82 (CP100) | SIPROTEC 5 7SL82 (CP150) | SIPROTEC 5 7SL86 (CP200) | SIPROTEC 5 7SL86 (CP300) | SIPROTEC 5 7SL87 (CP200) | SIPROTEC 5 7SL87 (CP300) | SIPROTEC 5 7SS85 (CP200) | SIPROTEC 5 7SS85 (CP300) | SIPROTEC 5 7ST85 (CP200) | SIPROTEC 5 7ST85 (CP300) | SIPROTEC 5 7ST86 (CP300) | SIPROTEC 5 7SX82 (CP150) | SIPROTEC 5 7SX85 (CP300) | SIPROTEC 5 7SY82 (CP150) | SIPROTEC 5 7UM85 (CP300) | SIPROTEC 5 7UT82 (CP100) | SIPROTEC 5 7UT82 (CP150) | SIPROTEC 5 7UT85 (CP200) | SIPROTEC 5 7UT85 (CP300) | SIPROTEC 5 7UT86 (CP200) | SIPROTEC 5 7UT86 (CP300) | SIPROTEC 5 7UT87 (CP200) | SIPROTEC 5 7UT87 (CP300) | SIPROTEC 5 7VE85 (CP300) | SIPROTEC 5 7VK87 (CP200) | SIPROTEC 5 7VK87 (CP300) | SIPROTEC 5 7VU85 (CP300) | SIPROTEC 5 Compact 7SX800 (CP050)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-174-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-174-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-174-03" ;
    dcterms:issued "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Products using OpenSSL" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems; Energy; Healthcare and Public Health; Financial Services; Government Facilities" ;
    icsa:cveNumber "CVE-2025-15467" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-15467 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Products using OpenSSL" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AI Lightweight Inference Server | Connector for Azure | Databus | HiMed Cockpit | RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) | RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) | SCALANCE LPE9403 (6GK5998-3GS00-2AC2) | SCALANCE LPE9413 (6GK5998-3GS01-2AC2) | SCALANCE LPE9433 (6GK5998-3GS11-2AC2) | SCALANCE M804PB (6GK5804-0AP00-2AA2) | SCALANCE M812-1 ADSL-Router family | SCALANCE M816-1 ADSL-Router family | SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) | SCALANCE M874-2 (6GK5874-2AA00-2AA2) | SCALANCE M874-3 (6GK5874-3AA00-2AA2) | SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) | SCALANCE M876-3 (6GK5876-3AA02-2BA2) | SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) | SCALANCE M876-4 (6GK5876-4AA10-2BA2) | SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) | SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) | SCALANCE MUB852-1 (A1) (6GK5852-1EA10-1AA1) | SCALANCE MUB852-1 (B1) (6GK5852-1EA10-1BA1) | SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) | SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) | SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) | SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) | SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) | SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) | SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) | SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) | SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) | SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) | SCALANCE SC622-2C (6GK5622-2GS00-2AC2) | SCALANCE SC626-2C (6GK5626-2GS00-2AC2) | SCALANCE SC632-2C (6GK5632-2GS00-2AC2) | SCALANCE SC636-2C (6GK5636-2GS00-2AC2) | SCALANCE SC642-2C (6GK5642-2GS00-2AC2) | SCALANCE SC646-2C (6GK5646-2GS00-2AC2) | SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) | SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) | SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) | SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) | SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) | SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) | SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) | SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) | SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) | SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) | SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) | SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) | SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) | SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) | SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) | SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) | SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) | SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) | SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) | SCALANCE XC316-8 (6GK5324-8TS00-2AC2) | SCALANCE XC324-4 (6GK5328-4TS00-2AC2) | SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2) | SCALANCE XC332 (6GK5332-0GA00-2AC2) | SCALANCE XC416-8 (6GK5424-8TR00-2AC2) | SCALANCE XC424-4 (6GK5428-4TR00-2AC2) | SCALANCE XC432 (6GK5432-0GR00-2AC2) | SCALANCE XR302-32 (6GK5334-5TS00-2AR3) | SCALANCE XR302-32 (6GK5334-5TS00-3AR3) | SCALANCE XR302-32 (6GK5334-5TS00-4AR3) | SCALANCE XR322-12 (6GK5334-3TS00-2AR3) | SCALANCE XR322-12 (6GK5334-3TS00-3AR3) | SCALANCE XR322-12 (6GK5334-3TS00-4AR3) | SCALANCE XR326-8 (6GK5334-2TS00-2AR3) | SCALANCE XR326-8 (6GK5334-2TS00-3AR3) | SCALANCE XR326-8 (6GK5334-2TS00-4AR3) | SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3) | SCALANCE XR502-32 (6GK5534-5TR00-2AR3) | SCALANCE XR502-32 (6GK5534-5TR00-3AR3) | SCALANCE XR502-32 (6GK5534-5TR00-4AR3) | SCALANCE XR522-12 (6GK5534-3TR00-2AR3) | SCALANCE XR522-12 (6GK5534-3TR00-3AR3) | SCALANCE XR522-12 (6GK5534-3TR00-4AR3) | SCALANCE XR524-8WG (6GK5532-2SR00-2AR3) | SCALANCE XR524-8WG (6GK5532-2SR00-2RR3) | SCALANCE XR524-8WG (6GK5532-2SR00-3AR3) | SCALANCE XR524-8WG (6GK5532-2SR00-3RR3) | SCALANCE XR526-8 (6GK5534-2TR00-2AR3) | SCALANCE XR526-8 (6GK5534-2TR00-3AR3) | SCALANCE XR526-8 (6GK5534-2TR00-4AR3) | Shopfloor IT Suite | SIDIS Prime | Siemens OPC UA Modelling Editor (SiOME) | SIMATIC Comfort/Mobile RT | SIMATIC eaSie Core Package (6DL5424-0AX00-0AV8) | SIMATIC eaSie PCS 7 Skill Package (6DL5424-0BX00-0AV8) | SIMATIC HMI Basic Panels | SIMATIC HMI Comfort Panels | SIMATIC HMI Mobile Panels | SIMATIC IOT2050 (6ES7647-0BA00-1YA2) | SIMATIC IPC BX-21A | SIMATIC IPC MD-57A | SIMATIC IPC ORCLA | SIMATIC PDM V9.3 | SIMATIC RTLS Locating Manager (6GT2780-0DA00) | SIMATIC RTLS Locating Manager (6GT2780-0DA10) | SIMATIC RTLS Locating Manager (6GT2780-0DA20) | SIMATIC RTLS Locating Manager (6GT2780-0DA30) | SIMATIC RTLS Locating Manager (6GT2780-1EA10) | SIMATIC RTLS Locating Manager (6GT2780-1EA20) | SIMATIC RTLS Locating Manager (6GT2780-1EA30) | SIMATIC STEP 7 V5 | SIMATIC Target | SIMATIC WinCC OA V3.19 | SIMATIC WinCC OA V3.20 | SIMATIC WinCC OA V3.21 | SIMATIC WinCC Runtime Advanced V17 | SIMATIC WinCC Unified Sequence | SIMATIC WinCC V7.5 | SIMATIC WinCC V8.0 | SIMATIC WinCC V8.1 | SIMOTION OACAMGEN (6AU1820-3EA20-0AB0) | SIMOVE Fleetmanager V3.1 | SIMOVE Fleetmanager V3.2 | SIMOVE Fleetmanager V3.3 | SINAMICS G200 | SINAMICS G220 | SINAMICS S200 | SINAMICS S210 | SINAMICS S220 | SINEC INS | SINEC NMS | SINEC Security Monitor | SINUMERIK Access MyMachine /OPC UA | SIPLANT | SITRANS ASM IQ | SITRANS Soft Sensor Engine IQ (SITRANS SSE IQ) | User Management Component (UMC) | Visual Inspection Cockpit" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-174-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-174-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-174-04" ;
    dcterms:issued "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC INS" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems; Energy; Healthcare and Public Health; Financial Services; Government Facilities" ;
    icsa:cveNumber "CVE-2026-46749; CVE-2026-46748; CVE-2026-46746; CVE-2026-46747" ;
    icsa:cweNumber "CWE-760; CWE-250; CWE-78; CWE-26" ;
    icsa:hasCVE cve-res:CVE-2026-46746,
        cve-res:CVE-2026-46747,
        cve-res:CVE-2026-46748,
        cve-res:CVE-2026-46749 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-26,
        cwe-res:CWE-760,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEC INS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SINEC INS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-174-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-174-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-174-05" ;
    dcterms:issued "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Freelance Security Lock" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7064" ;
    icsa:cweNumber "CWE-305" ;
    icsa:hasCVE cve-res:CVE-2025-7064 ;
    icsa:hasCWE cwe-res:CWE-305 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Freelance Security Lock" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ABB System Version (<=Freelance 2013) installed with ABB Freelance Security Lock(All versions) | ABB System Version (Freelance 2013 SP1) installed with ABB Freelance Security Lock(All versions) | ABB System Version (Freelance 2016) installed with ABB Freelance Security Lock(All versions) | ABB System Version (Freelance 2016 SP1) installed with ABB Freelance Security Lock(All versions) | ABB System Version (Freelance 2019) installed with ABB Freelance Security Lock(All versions) | ABB System Version (Freelance 2019 SP1) installed with ABB Freelance Security Lock(All versions) | ABB System Version (Freelance 2019 SP1 FP1) installed with ABB Freelance Security Lock(All versions) | ABB System Version (Freelance 2024) installed with ABB Freelance Security Lock(All versions)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-174-05" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-174-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-174-06" ;
    dcterms:issued "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Impact of Linux Kernel vulnerabilities on B&R products" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-31431; CVE-2026-46333; CVE-2026-43284; CVE-2026-46300; CVE-2026-43494" ;
    icsa:cweNumber "CWE-787; CWE-1341; CWE-669; CWE-269; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2026-31431,
        cve-res:CVE-2026-43284,
        cve-res:CVE-2026-43494,
        cve-res:CVE-2026-46300,
        cve-res:CVE-2026-46333 ;
    icsa:hasCWE cwe-res:CWE-123,
        cwe-res:CWE-1341,
        cwe-res:CWE-269,
        cwe-res:CWE-669,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Impact of Linux Kernel vulnerabilities on B&R products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Linux for B&R <=12 | APROL <APROL-AutoYaST-DVD- V4.4-010.10.260602 | X20EDS410 /all" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-174-06" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-174-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-174-07" ;
    dcterms:issued "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hubbell Aclara Metrum Cellular Web Interface" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-1840" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-1840 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hubbell Aclara Metrum Cellular Web Interface" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Aclara Metrum Cellular Web Interface" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-174-07" ;
    icsa:vendor "Hubbell" ;
    icsa:year 2026 .

icsa-res:ICSA-26-176-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-176-01" ;
    dcterms:issued "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Yokogawa FAST/TOOLS and CI Server" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture" ;
    icsa:cveNumber "CVE-2026-11833" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2026-11833 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Yokogawa FAST/TOOLS and CI Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FAST/TOOLS >=R9.01|<=R10.04 | Collaborative Information Server (CI Server) >=R1.01|<=R1.04" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-176-01" ;
    icsa:vendor "Yokogawa" ;
    icsa:year 2026 .

icsa-res:ICSA-26-176-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-176-02" ;
    dcterms:issued "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "EVoke Systems Charging Station Management System" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-50176; CVE-2026-44622; CVE-2026-54479; CVE-2026-40702" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-40702,
        cve-res:CVE-2026-44622,
        cve-res:CVE-2026-50176,
        cve-res:CVE-2026-54479 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EVoke Systems Charging Station Management System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EVoke CSMS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-176-02" ;
    icsa:vendor "EVoke Systems" ;
    icsa:year 2026 .

icsa-res:ICSA-26-176-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-176-03" ;
    dcterms:issued "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Horner Automation Cscape" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-12897" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2026-12897 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Horner Automation Cscape" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Cscape <10.2_SP3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-176-03" ;
    icsa:vendor "Horner Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-176-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-176-04" ;
    dcterms:issued "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Daktronics Controller Firmware" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Information Technology; Emergency Services; Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-28701; CVE-2026-33560; CVE-2026-31928" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-28701,
        cve-res:CVE-2026-31928,
        cve-res:CVE-2026-33560 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-434,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Daktronics Controller Firmware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "VFC-DMP-5000 <v8.117.x.x | VFC-DMP-5000 <v9.43.x.x | VFC-DMP-5000 <v10.34.x.x | DMP-5000 <v10.34.x.x | DMP-5000 <v8.117.x.x | DMP-5000 <v9.43.x.x | DMP-8000 <v10.34.x.x | DMP-8000 <v8.117.x.x | DMP-8000 <v9.43.x.x" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-176-04" ;
    icsa:vendor "Daktronics" ;
    icsa:year 2026 .

icsa-res:ICSA-26-176-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-176-05" ;
    dcterms:issued "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "H.VIEW HV-500S6 IP Camera" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-55975; CVE-2026-56414" ;
    icsa:cweNumber "CWE-434; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-55975,
        cve-res:CVE-2026-56414 ;
    icsa:hasCWE cwe-res:CWE-434,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "H.VIEW HV-500S6 IP Camera" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "H.VIEW HV-500S6 IP Camera IPCAM_V4.06.88.251229" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-176-05" ;
    icsa:vendor "H.VIEW" ;
    icsa:year 2026 .

icsa-res:ICSA-26-176-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-176-06" ;
    dcterms:issued "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DTM Soft" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-12578" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2026-12578 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics DTM Soft" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DTMSoft" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-176-06" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2026 .

icsa-res:ICSA-26-176-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-176-07" ;
    dcterms:issued "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerLogic P7" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-9718; CVE-2026-9716; CVE-2026-9717" ;
    icsa:cweNumber "CWE-617; CWE-78; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2026-9716,
        cve-res:CVE-2026-9717,
        cve-res:CVE-2026-9718 ;
    icsa:hasCWE cwe-res:CWE-476,
        cwe-res:CWE-617,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric PowerLogic P7" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PowerLogic™ P7 | PowerLogic™ P7 0.2.003.001.000" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-176-07" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-181-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-181-01" ;
    dcterms:issued "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-11001; CVE-2025-53816; CVE-2025-53817; CVE-2025-55188" ;
    icsa:cweNumber "CWE-122; CWE-22; CWE-476; CWE-59" ;
    icsa:hasCVE cve-res:CVE-2025-11001,
        cve-res:CVE-2025-53816,
        cve-res:CVE-2025-53817,
        cve-res:CVE-2025-55188 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-22,
        cwe-res:CWE-476,
        cwe-res:CWE-59 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MELSOFT Update Manager SW1DND-UDM-M >=1.000A|<=1.014Q" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-181-01" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-181-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-181-02" ;
    dcterms:issued "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Frangoteam FUXA SCADA/HMI" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-13207" ;
    icsa:cweNumber "CWE-290" ;
    icsa:hasCVE cve-res:CVE-2026-13207 ;
    icsa:hasCWE cwe-res:CWE-290 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Frangoteam FUXA SCADA/HMI" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FUXA SCADA/HMI <=1.3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-181-02" ;
    icsa:vendor "Frangoteam" ;
    icsa:year 2026 .

icsa-res:ICSA-26-181-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-181-03" ;
    dcterms:issued "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EcoStruxure IT Data Center Expert" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Information Technology; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-8045" ;
    icsa:cweNumber "CWE-611" ;
    icsa:hasCVE cve-res:CVE-2026-8045 ;
    icsa:hasCWE cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EcoStruxure IT Data Center Expert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EcoStruxure IT Data Center Expert 9.1.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-181-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-181-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-181-04" ;
    dcterms:issued "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric EasyLogic T150 and Saitel DP RTU" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-9651; CVE-2026-9650" ;
    icsa:cweNumber "CWE-732; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2026-9650,
        cve-res:CVE-2026-9651 ;
    icsa:hasCWE cwe-res:CWE-522,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric EasyLogic T150 and Saitel DP RTU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller <=11.06.30 | EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller <=11.06.31 | Saitel DP Remote Terminal Unit & Controller <=11.06.35 | Saitel DP Remote Terminal Unit & Controller <=11.06.37" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-181-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-181-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-181-05" ;
    dcterms:issued "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "XZ Utils vulnerability impacting B&R Products" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-31115" ;
    icsa:cweNumber "CWE-366" ;
    icsa:hasCVE cve-res:CVE-2025-31115 ;
    icsa:hasCWE cwe-res:CWE-366 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "XZ Utils vulnerability impacting B&R Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "1.8.0 | T80 <1.8.0; 1.8.1; PPC3100 <1.8.1; 1.8.0 | T50 <1.8.1; 1.8.0 | C80 <1.8.0; 1.8.0 | FT50 <1.8.1; 1.8.1 | C50 <1.8.0; 1.8.1 | MT50 <1.8.1; 1.8.1 | T30 <1.8.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-181-05" ;
    icsa:vendor "B&R Industrial Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-181-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-181-06" ;
    dcterms:issued "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "StoneFly Storage Concentrator" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Defense Industrial Base; Energy; Financial Services; Healthcare and Public Health; Information Technology" ;
    icsa:cveNumber "CVE-2026-56413; CVE-2026-50040; CVE-2026-56415; CVE-2026-55721; CVE-2026-50110" ;
    icsa:cweNumber "CWE-798; CWE-79; CWE-89; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-50040,
        cve-res:CVE-2026-50110,
        cve-res:CVE-2026-55721,
        cve-res:CVE-2026-56413,
        cve-res:CVE-2026-56415 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-798,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "StoneFly Storage Concentrator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Storage Concentrator <8.0.4.22 | Storage Concentrator Virtual Machine <8.0.4.22 | Storage Concentrator <8.0.4.26 | Storage Concentrator Virtual Machine <8.0.4.26 | Storage Concentrator <8.0.4.29 | Storage Concentrator Virtual Machine <8.0.4.29" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-181-06" ;
    icsa:vendor "StoneFly" ;
    icsa:year 2026 .

icsa-res:ICSA-26-181-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-181-07" ;
    dcterms:issued "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Delta Electronics DVP12SE PLC" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-12819; CVE-2026-12818" ;
    icsa:cweNumber "CWE-306; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2026-12818,
        cve-res:CVE-2026-12819 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Delta Electronics DVP12SE PLC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DVP12SE PLC" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-181-07" ;
    icsa:vendor "Delta Electronics" ;
    icsa:year 2026 .

icsa-res:ICSA-26-183-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-183-01" ;
    dcterms:issued "2026-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "ST Engineering iDirect iQ-Series Terminals (Update A)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Defense Industrial Base; Energy; Government Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-38056; CVE-2026-38059; CVE-2026-38058; CVE-2026-38057" ;
    icsa:cweNumber "CWE-306; CWE-352; CWE-497; CWE-862" ;
    icsa:hasCVE cve-res:CVE-2026-38056,
        cve-res:CVE-2026-38057,
        cve-res:CVE-2026-38058,
        cve-res:CVE-2026-38059 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-352,
        cwe-res:CWE-497,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ST Engineering iDirect iQ-Series Terminals (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Evolution iQ‑Series terminals <=4.5.2.1 | 3315‑Series terminals <=4.5.2.1 | 9‑Series terminals <=4.5.2.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-183-01" ;
    icsa:vendor "ST Engineering iDirect" ;
    icsa:year 2026 .

icsa-res:ICSA-26-183-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-183-02" ;
    dcterms:issued "2026-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "CubeSpace CW0057 Reaction Wheel" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "South Africa" ;
    icsa:criticalInfrastructureSector "Communications" ;
    icsa:cveNumber "CVE-2026-13743" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2026-13743 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CubeSpace CW0057 Reaction Wheel" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CW0057 Reaction Wheel" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-183-02" ;
    icsa:vendor "CubeSpace" ;
    icsa:year 2026 .

icsa-res:ICSA-26-183-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-183-03" ;
    dcterms:issued "2026-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Gardyn IoT Hub" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Food and Agriculture" ;
    icsa:cveNumber "CVE-2026-54477; CVE-2026-13768; CVE-2026-55726" ;
    icsa:cweNumber "CWE-798; CWE-644; CWE-497" ;
    icsa:hasCVE cve-res:CVE-2026-13768,
        cve-res:CVE-2026-54477,
        cve-res:CVE-2026-55726 ;
    icsa:hasCWE cwe-res:CWE-497,
        cwe-res:CWE-644,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Gardyn IoT Hub" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Home Firmware | Studio Firmware | Cloud API <2.12.2026" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-183-03" ;
    icsa:vendor "Gardyn" ;
    icsa:year 2026 .

icsa-res:ICSA-26-188-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-188-01" ;
    dcterms:issued "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hydro-Quebec Le Circuit Electrique charging station backend" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Canada" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-20744; CVE-2026-44383; CVE-2026-42952" ;
    icsa:cweNumber "CWE-284; CWE-307; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-20744,
        cve-res:CVE-2026-42952,
        cve-res:CVE-2026-44383 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-307,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hydro-Quebec Le Circuit Electrique charging station backend" ;
    icsa:productDistribution "Canada" ;
    icsa:productsAffected "Le Circuit Electrique charging station backend" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-188-01" ;
    icsa:vendor "Hydro-Quebec" ;
    icsa:year 2026 .

icsa-res:ICSA-26-188-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-188-02" ;
    dcterms:issued "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy PROMOD V" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-10763" ;
    icsa:cweNumber "CWE-1428" ;
    icsa:hasCVE cve-res:CVE-2026-10763 ;
    icsa:hasCWE cwe-res:CWE-1428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy PROMOD V" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PROMOD V vers:PROMOD_V/<=1.0.10" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-188-02" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-188-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-188-03" ;
    dcterms:issued "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy e-mesh EMS" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-42945" ;
    icsa:cweNumber "CWE-122" ;
    icsa:hasCVE cve-res:CVE-2026-42945 ;
    icsa:hasCWE cwe-res:CWE-122 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy e-mesh EMS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "4.4.2; Hitachi Energy e-mesh EMS 4.1.6; 4.7.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-188-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-188-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-188-04" ;
    dcterms:issued "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Studio Pro" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-48192" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2026-48192 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Mendix Studio Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mendix Studio Pro 10.11 | Mendix Studio Pro 10.12 | Mendix Studio Pro 10.13 | Mendix Studio Pro 10.14 | Mendix Studio Pro 10.15 | Mendix Studio Pro 10.16 | Mendix Studio Pro 10.17 | Mendix Studio Pro 10.18 | Mendix Studio Pro 10.19 | Mendix Studio Pro 10.20 | Mendix Studio Pro 10.21 | Mendix Studio Pro 10.22 | Mendix Studio Pro 10.23 | Mendix Studio Pro 10.24 | Mendix Studio Pro 11.0 | Mendix Studio Pro 11.1 | Mendix Studio Pro 11.10 | Mendix Studio Pro 11.11 | Mendix Studio Pro 11.2 | Mendix Studio Pro 11.3 | Mendix Studio Pro 11.4 | Mendix Studio Pro 11.5 | Mendix Studio Pro 11.6 | Mendix Studio Pro 11.7 | Mendix Studio Pro 11.8 | Mendix Studio Pro 11.9" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-188-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-188-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-188-05" ;
    dcterms:issued "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SINEC OS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems; Energy; Healthcare and Public Health; Financial Services; Government Services and Facilities" ;
    icsa:cveNumber "CVE-2026-1484; CVE-2025-46394; CVE-2025-40257; CVE-2025-49795; CVE-2025-71189; CVE-2026-22977; CVE-2025-40251; CVE-2025-40258; CVE-2025-71186; CVE-2025-40271; CVE-2025-71188; CVE-2026-26158; CVE-2025-40264; CVE-2025-40278; CVE-2026-23222; CVE-2025-40262; CVE-2025-6170; CVE-2025-40280; CVE-2026-23025; CVE-2026-23038; CVE-2026-23220; CVE-2025-7039; CVE-2026-25210; CVE-2026-23231; CVE-2026-23033; CVE-2025-69720; CVE-2026-3784; CVE-2025-71190; CVE-2026-23228; CVE-2026-23229; CVE-2026-41918; CVE-2025-49794; CVE-2025-13465; CVE-2025-60876; CVE-2026-23111; CVE-2025-10966; CVE-2026-23026; CVE-2026-26157; CVE-2025-39913; CVE-2026-22976; CVE-2026-23238; CVE-2025-66382; CVE-2025-40214; CVE-2025-40254; CVE-2025-66035; CVE-2025-40345; CVE-2026-23236; CVE-2025-66412; CVE-2025-40252; CVE-2025-9230; CVE-2026-23030; CVE-2026-23031; CVE-2026-23112; CVE-2026-23037; CVE-2025-40248; CVE-2025-9232; CVE-2026-35535; CVE-2025-6052; CVE-2025-8732; CVE-2025-1352; CVE-2025-6141; CVE-2026-24515; CVE-2025-71185; CVE-2025-40263; CVE-2026-23032; CVE-2026-23230; CVE-2026-1489; CVE-2025-1376; CVE-2025-9086; CVE-2025-40250; CVE-2025-40281; CVE-2025-40261; CVE-2025-9231; CVE-2025-71191; CVE-2025-49796; CVE-2025-13601; CVE-2026-22610" ;
    icsa:cweNumber "CWE-451; CWE-201; CWE-79; CWE-305; CWE-625; CWE-73; CWE-476; CWE-525; CWE-22; CWE-404; CWE-407; CWE-674; CWE-825; CWE-835; CWE-20; CWE-190; CWE-121; CWE-362; CWE-385; CWE-787; CWE-1321; CWE-1335; CWE-284; CWE-1341; CWE-119; CWE-489; CWE-271; CWE-911; CWE-125; CWE-820" ;
    icsa:hasCVE cve-res:CVE-2025-10966,
        cve-res:CVE-2025-13465,
        cve-res:CVE-2025-1352,
        cve-res:CVE-2025-13601,
        cve-res:CVE-2025-1376,
        cve-res:CVE-2025-39913,
        cve-res:CVE-2025-40214,
        cve-res:CVE-2025-40248,
        cve-res:CVE-2025-40250,
        cve-res:CVE-2025-40251,
        cve-res:CVE-2025-40252,
        cve-res:CVE-2025-40254,
        cve-res:CVE-2025-40257,
        cve-res:CVE-2025-40258,
        cve-res:CVE-2025-40261,
        cve-res:CVE-2025-40262,
        cve-res:CVE-2025-40263,
        cve-res:CVE-2025-40264,
        cve-res:CVE-2025-40271,
        cve-res:CVE-2025-40278,
        cve-res:CVE-2025-40280,
        cve-res:CVE-2025-40281,
        cve-res:CVE-2025-40345,
        cve-res:CVE-2025-46394,
        cve-res:CVE-2025-49794,
        cve-res:CVE-2025-49795,
        cve-res:CVE-2025-49796,
        cve-res:CVE-2025-6052,
        cve-res:CVE-2025-60876,
        cve-res:CVE-2025-6141,
        cve-res:CVE-2025-6170,
        cve-res:CVE-2025-66035,
        cve-res:CVE-2025-66382,
        cve-res:CVE-2025-66412,
        cve-res:CVE-2025-69720,
        cve-res:CVE-2025-7039,
        cve-res:CVE-2025-71185,
        cve-res:CVE-2025-71186,
        cve-res:CVE-2025-71188,
        cve-res:CVE-2025-71189,
        cve-res:CVE-2025-71190,
        cve-res:CVE-2025-71191,
        cve-res:CVE-2025-8732,
        cve-res:CVE-2025-9086,
        cve-res:CVE-2025-9230,
        cve-res:CVE-2025-9231,
        cve-res:CVE-2025-9232,
        cve-res:CVE-2026-1484,
        cve-res:CVE-2026-1489,
        cve-res:CVE-2026-22610,
        cve-res:CVE-2026-22976,
        cve-res:CVE-2026-22977,
        cve-res:CVE-2026-23025,
        cve-res:CVE-2026-23026,
        cve-res:CVE-2026-23030,
        cve-res:CVE-2026-23031,
        cve-res:CVE-2026-23032,
        cve-res:CVE-2026-23033,
        cve-res:CVE-2026-23037,
        cve-res:CVE-2026-23038,
        cve-res:CVE-2026-23111,
        cve-res:CVE-2026-23112,
        cve-res:CVE-2026-23220,
        cve-res:CVE-2026-23222,
        cve-res:CVE-2026-23228,
        cve-res:CVE-2026-23229,
        cve-res:CVE-2026-23230,
        cve-res:CVE-2026-23231,
        cve-res:CVE-2026-23236,
        cve-res:CVE-2026-23238,
        cve-res:CVE-2026-24515,
        cve-res:CVE-2026-25210,
        cve-res:CVE-2026-26157,
        cve-res:CVE-2026-26158,
        cve-res:CVE-2026-35535,
        cve-res:CVE-2026-3784,
        cve-res:CVE-2026-41918 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-125,
        cwe-res:CWE-1321,
        cwe-res:CWE-1335,
        cwe-res:CWE-1341,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-201,
        cwe-res:CWE-22,
        cwe-res:CWE-271,
        cwe-res:CWE-284,
        cwe-res:CWE-305,
        cwe-res:CWE-362,
        cwe-res:CWE-385,
        cwe-res:CWE-404,
        cwe-res:CWE-407,
        cwe-res:CWE-451,
        cwe-res:CWE-476,
        cwe-res:CWE-489,
        cwe-res:CWE-525,
        cwe-res:CWE-625,
        cwe-res:CWE-674,
        cwe-res:CWE-73,
        cwe-res:CWE-787,
        cwe-res:CWE-79,
        cwe-res:CWE-820,
        cwe-res:CWE-825,
        cwe-res:CWE-835,
        cwe-res:CWE-911 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SINEC OS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM RST2428P (6GK6242-6PA00)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-188-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-188-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-188-06" ;
    dcterms:issued "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Labcenter Proteus 9" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Defense Industrial Base; Energy; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-49033; CVE-2026-42953; CVE-2026-42958" ;
    icsa:cweNumber "CWE-416; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-42953,
        cve-res:CVE-2026-42958,
        cve-res:CVE-2026-49033 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Labcenter Proteus 9" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Proteus 9.1_SP4_Build_42914" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-188-06" ;
    icsa:vendor "Labcenter Electronics" ;
    icsa:year 2026 .

icsa-res:ICSA-26-188-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-188-07" ;
    dcterms:issued "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digi International PortServer TS, Digi One SP IA" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Communications; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-12948; CVE-2026-12352" ;
    icsa:cweNumber "CWE-79; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2026-12352,
        cve-res:CVE-2026-12948 ;
    icsa:hasCWE cwe-res:CWE-79,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Digi International PortServer TS, Digi One SP IA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PortServer TS | Digi One SP | Digi One SP IA | Digi One IA" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-188-07" ;
    icsa:vendor "Digi International" ;
    icsa:year 2026 .

icsa-res:ICSA-26-190-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-190-01" ;
    dcterms:issued "2026-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "OpenPLC v3" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2026-14480" ;
    icsa:cweNumber "CWE-73" ;
    icsa:hasCVE cve-res:CVE-2026-14480 ;
    icsa:hasCWE cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenPLC v3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OpenPLC v3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-190-01" ;
    icsa:vendor "OpenPLC" ;
    icsa:year 2026 .

icsa-res:ICSA-26-190-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-190-02" ;
    dcterms:issued "2026-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerChute Serial Shutdown" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Healthcare and Public Health; Information Technology; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-2399; CVE-2026-2404; CVE-2026-2403; CVE-2026-2402; CVE-2026-2400; CVE-2026-2405; CVE-2026-2401" ;
    icsa:cweNumber "CWE-22; CWE-532; CWE-307; CWE-93; CWE-1284; CWE-116; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2026-2399,
        cve-res:CVE-2026-2400,
        cve-res:CVE-2026-2401,
        cve-res:CVE-2026-2402,
        cve-res:CVE-2026-2403,
        cve-res:CVE-2026-2404,
        cve-res:CVE-2026-2405 ;
    icsa:hasCWE cwe-res:CWE-116,
        cwe-res:CWE-1284,
        cwe-res:CWE-22,
        cwe-res:CWE-307,
        cwe-res:CWE-400,
        cwe-res:CWE-532,
        cwe-res:CWE-93 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric PowerChute Serial Shutdown" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PowerChute Serial Shutdown <=1.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-190-02" ;
    icsa:vendor "SuSE, Schneider Electric, Red Hat, Microsoft" ;
    icsa:year 2026 .

icsa-res:ICSA-26-190-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-190-03" ;
    dcterms:issued "2026-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Easergy MiCOM Px40 Series" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-4832" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-4832 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Easergy MiCOM Px40 Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "P344; P343; P546 All versions prior to H6A | Easergy MiCOM P841 All versions prior to G6A | Easergy MiCOM P643 All versions prior to B3F | Easergy MiCOM P642; P445; Easergy MiCOM P14x All versions prior to B4A | Easergy MiCOM P24x All versions prior to D3A | Easergy MiCOM P341 All versions prior to E3F | Easergy MiCOM P342; P543; P645 All versions prior to B4A | Easergy MiCOM P741; P742; P743 All versions prior to B2A | Easergy MiCOM P746 All versions prior to B4E | Easergy MiCOM P746 All versions prior to C4E | Easergy MiCOM P849 All versions prior to B4A; P345 All versions prior to B3F | Easergy MiCOM P442; P545; P544; P446; P444 All versions prior to E3A | Easergy MiCOM P443" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-190-03" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-195-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-195-01" ;
    dcterms:issued "2026-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Advant Master Online Builder" ;
    icsa:CVSSScore "4.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-13162" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2025-13162 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Advant Master Online Builder" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Control Builder A <=1.4/4 | 800xA for Advant Master <=6.0.3-1; <=6.1.1-1; 6.1.1-3; 6.2.0-1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-195-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-195-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-195-02" ;
    dcterms:issued "2026-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Ability Edgenius" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-31431" ;
    icsa:cweNumber "CWE-669" ;
    icsa:hasCVE cve-res:CVE-2026-31431 ;
    icsa:hasCWE cwe-res:CWE-669 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Ability Edgenius" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected ">=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Server - vE1000; Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - bE100; >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - E3100C" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-195-02" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-195-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-195-03" ;
    dcterms:issued "2026-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB T-MAC Plus" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-14773; CVE-2025-14774; CVE-2025-14771; CVE-2025-14772" ;
    icsa:cweNumber "CWE-552; CWE-79; CWE-639; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2025-14771,
        cve-res:CVE-2025-14772,
        cve-res:CVE-2025-14773,
        cve-res:CVE-2025-14774 ;
    icsa:hasCWE cwe-res:CWE-552,
        cwe-res:CWE-639,
        cwe-res:CWE-79,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB T-MAC Plus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "T-MAC Plus 4.0-24" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-195-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-195-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-195-04" ;
    dcterms:issued "2026-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1715-AENTR EtherNet/IP Adapter" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-10577" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-10577 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation 1715-AENTR EtherNet/IP Adapter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "1715-AENTR EtherNet/IP Adapter <=3.003" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-195-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-197-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-197-01" ;
    dcterms:issued "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Arena" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-8312; CVE-2026-8314; CVE-2026-8313; CVE-2026-8085" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-8085,
        cve-res:CVE-2026-8312,
        cve-res:CVE-2026-8313,
        cve-res:CVE-2026-8314 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Arena" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Arena <=V17.00.00" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-197-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-197-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-197-02" ;
    dcterms:issued "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-9653" ;
    icsa:cweNumber "CWE-354" ;
    icsa:hasCVE cve-res:CVE-2026-9653 ;
    icsa:hasCWE cwe-res:CWE-354 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "1756-EN3 <=V12.001 | 1756-EN2 <=V12.001 | 1756-ENBT V6.006" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-197-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-197-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-197-03" ;
    dcterms:issued "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "NASA Core Flight System (cFS) Health & Safety (HS) Application" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-15352" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2026-15352 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NASA Core Flight System (cFS) Health & Safety (HS) Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Core Flight System (cFS) Health & Safety (HS) Application" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-197-03" ;
    icsa:vendor "NASA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-197-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-197-04" ;
    dcterms:issued "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "AutomationDirect Productivity Suite" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-61389; CVE-2026-60073; CVE-2026-57896; CVE-2026-60063; CVE-2026-60140; CVE-2026-61378" ;
    icsa:cweNumber "CWE-125; CWE-787; CWE-369" ;
    icsa:hasCVE cve-res:CVE-2026-57896,
        cve-res:CVE-2026-60063,
        cve-res:CVE-2026-60073,
        cve-res:CVE-2026-60140,
        cve-res:CVE-2026-61378,
        cve-res:CVE-2026-61389 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-369,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AutomationDirect Productivity Suite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Productivity Suite <=v4.6.2.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-197-04" ;
    icsa:vendor "AutomationDirect" ;
    icsa:year 2026 .

icsa-res:ICSA-26-197-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-197-05" ;
    dcterms:issued "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SICAM 8" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-54800; CVE-2026-54798; CVE-2026-54801; CVE-2026-54799" ;
    icsa:cweNumber "CWE-1188; CWE-489; CWE-620" ;
    icsa:hasCVE cve-res:CVE-2026-54798,
        cve-res:CVE-2026-54799,
        cve-res:CVE-2026-54800,
        cve-res:CVE-2026-54801 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-489,
        cwe-res:CWE-620 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SICAM 8" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CPCI85 Central Processing/Communication | SICORE Base system" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-197-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-197-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-197-06" ;
    dcterms:issued "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-12012; CVE-2025-12011; CVE-2025-11698" ;
    icsa:cweNumber "CWE-120" ;
    icsa:hasCVE cve-res:CVE-2025-11698,
        cve-res:CVE-2025-12011,
        cve-res:CVE-2025-12012 ;
    icsa:hasCWE cwe-res:CWE-120 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CompactLogix 5370 <=V35.015 | Compact GuardLogix 5370 <=V35.015 | ControlLogix 5570 <=V35.015 | GuardLogix 5570 <=V35.015 | CompactLogix 5380 <=V34.012 | CompactLogix 5380 <=V35.011 | Compact GuardLogix 5380 <=V34.012 | Compact GuardLogix 5380 <=V35.011 | CompactLogix 5480 <=V34.012 | CompactLogix 5480 <=V35.011 | ControlLogix 5580 <=V34.012 | ControlLogix 5580 <=V35.011 | GuardLogix 5580 <=V34.012 | GuardLogix 5580 <=V35.011 | CompactLogix 5380 Recovery Image <=1.072 | Compact GuardLogix 5380 Recovery Image <=1.072 | CompactLogix 5480 Recovery Image <=1.072 | ControlLogix 5580 Recovery Image <=1.072 | GuardLogix 5580 Recovery Image <=1.072" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-197-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-197-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-197-07" ;
    dcterms:issued "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "SALTO ProAccess Space" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Spain" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-11889" ;
    icsa:cweNumber "CWE-639" ;
    icsa:hasCVE cve-res:CVE-2026-11889 ;
    icsa:hasCWE cwe-res:CWE-639 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SALTO ProAccess Space" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ProAccess Space <6.13" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-197-07" ;
    icsa:vendor "SALTO" ;
    icsa:year 2026 .

icsa-res:ICSA-26-197-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-197-08" ;
    dcterms:issued "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Flex 5000 Adapter" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2026-12659" ;
    icsa:cweNumber "CWE-415" ;
    icsa:hasCVE cve-res:CVE-2026-12659 ;
    icsa:hasCWE cwe-res:CWE-415 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Flex 5000 Adapter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Flex 5000 Adapter 6.011" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-197-08" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-197-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-197-09" ;
    dcterms:issued "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk DataMosaix" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2026-9292" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2026-9292 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FactoryTalk DataMosaix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DataMosaix Private Cloud <=8.02" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-197-09" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-01" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tycon Systems TPDIN-Monitor-WEB2 (Update A)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-61884; CVE-2026-55985" ;
    icsa:cweNumber "CWE-306; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2026-55985,
        cve-res:CVE-2026-61884 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tycon Systems TPDIN-Monitor-WEB2 (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "TPDIN-Monitor-WEB2 <2.4.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-01" ;
    icsa:vendor "Tycon Systems" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-02" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-0272; CVE-2026-0266; CVE-2026-0273" ;
    icsa:cweNumber "CWE-79; CWE-862; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-0266,
        cve-res:CVE-2026-0272,
        cve-res:CVE-2026-0273 ;
    icsa:hasCWE cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM APE1808" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-03" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Opcenter X" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-56451" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2026-56451 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Opcenter X" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Opcenter X" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-04" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIDIS Secured SmartPlug" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2022-23304; CVE-2022-23303; CVE-2025-26465; CVE-2026-5121; CVE-2022-48174; CVE-2025-9230; CVE-2025-9231; CVE-2025-5222; CVE-2025-5914; CVE-2025-32462; CVE-2025-9232; CVE-2022-37660" ;
    icsa:cweNumber "CWE-120; CWE-924; CWE-863; CWE-323; CWE-787; CWE-190; CWE-390; CWE-125; CWE-385" ;
    icsa:hasCVE cve-res:CVE-2022-23303,
        cve-res:CVE-2022-23304,
        cve-res:CVE-2022-37660,
        cve-res:CVE-2022-48174,
        cve-res:CVE-2025-26465,
        cve-res:CVE-2025-32462,
        cve-res:CVE-2025-5222,
        cve-res:CVE-2025-5914,
        cve-res:CVE-2025-9230,
        cve-res:CVE-2025-9231,
        cve-res:CVE-2025-9232,
        cve-res:CVE-2026-5121 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-190,
        cwe-res:CWE-323,
        cwe-res:CWE-385,
        cwe-res:CWE-390,
        cwe-res:CWE-787,
        cwe-res:CWE-863,
        cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIDIS Secured SmartPlug" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIDIS Secured SmartPlug" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-05" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens IAM Client" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2025-40945" ;
    icsa:cweNumber "CWE-426" ;
    icsa:hasCVE cve-res:CVE-2025-40945 ;
    icsa:hasCWE cwe-res:CWE-426 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens IAM Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "COMOS V10.4.5 | COMOS V10.6 | Designcenter NX | Simcenter 3D | Simcenter Femap V2506 | Simcenter Femap V2512 | Simcenter Nastran | Simcenter STAR-CCM+ | Solid Edge SE2025 | Solid Edge SE2026 | Teamcenter Visualization V2412 | Teamcenter Visualization V2506 | Teamcenter Visualization V2512 | Tecnomatix Plant Simulation V2404 | Tecnomatix Plant Simulation V2504 | Tecnomatix Process Simulate" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-06" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens CADRA" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Communications; Energy" ;
    icsa:cveNumber "CVE-2016-9841; CVE-2018-25032; CVE-2016-9842; CVE-2017-14919; CVE-2025-10585; CVE-2005-2096; CVE-2025-13223; CVE-2023-45853; CVE-2016-9840; CVE-2022-37434; CVE-2026-22184" ;
    icsa:cweNumber "CWE-120; CWE-787; CWE-1335; CWE-20; CWE-190; CWE-843" ;
    icsa:hasCVE cve-res:CVE-2005-2096,
        cve-res:CVE-2016-9840,
        cve-res:CVE-2016-9841,
        cve-res:CVE-2016-9842,
        cve-res:CVE-2017-14919,
        cve-res:CVE-2018-25032,
        cve-res:CVE-2022-37434,
        cve-res:CVE-2023-45853,
        cve-res:CVE-2025-10585,
        cve-res:CVE-2025-13223,
        cve-res:CVE-2026-22184 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-1335,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-787,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens CADRA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CADRA" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-07" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Services Platform" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-10714" ;
    icsa:cweNumber "CWE-1390" ;
    icsa:hasCVE cve-res:CVE-2026-10714 ;
    icsa:hasCWE cwe-res:CWE-1390 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FactoryTalk Services Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FactoryTalk Directory (FTSP) 6.60" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-07" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-08" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1718-AENTR/1719-AENTR" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-9140" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2026-9140 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation 1718-AENTR/1719-AENTR" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "1718/ 1719 Ex I/O 3.011" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-08" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-09" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1734 POINT I/O (Update A)" ;
    icsa:CVSSScore "3.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-10573" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2026-10573 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation 1734 POINT I/O (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "1734 POINT I/O 3.023" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-09" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-202-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-202-10" ;
    dcterms:issued "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Studio 5000 Logix Designer" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-9128; CVE-2026-9108; CVE-2026-9127" ;
    icsa:cweNumber "CWE-22; CWE-428; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2026-9108,
        cve-res:CVE-2026-9127,
        cve-res:CVE-2026-9128 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-428,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Studio 5000 Logix Designer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Studio 5000 Logix Designer V36.00 | Studio 5000 Logix Designer V35.00 | Studio 5000 Logix Designer V35.01 | Studio 5000 Logix Designer >=V34.00|<=V34.03 | Studio 5000 Logix Designer >=V33.00|<=V33.03 | Studio 5000 Logix Designer >=V32.00|<=V32.04 | Studio 5000 Logix Designer V34.00 | Studio 5000 Logix Designer V34.01 | Studio 5000 Logix Designer V33.00 | Studio 5000 Logix Designer V33.02 | Studio 5000 Logix Designer >=V34.00|<=V34.02 | Studio 5000 Logix Designer >=V33.00|<=V33.02" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-202-10" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-204-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-204-01" ;
    dcterms:issued "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls C-CURE 9000 and Victor application server (Update A)" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-21653; CVE-2026-21655; CVE-2026-34496" ;
    icsa:cweNumber "CWE-250; CWE-918" ;
    icsa:hasCVE cve-res:CVE-2026-21653,
        cve-res:CVE-2026-21655,
        cve-res:CVE-2026-34496 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls C-CURE 9000 and Victor application server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "C-CURE 9000 <=v3.10.1 | victor Application Server <=v4.10 | victor <=v7.0 | victor Web | victor Web <=v7.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-204-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-204-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-204-02" ;
    dcterms:issued "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls XAAP Android" ;
    icsa:CVSSScore "3.3"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-34490" ;
    icsa:cweNumber "CWE-312" ;
    icsa:hasCVE cve-res:CVE-2026-34490 ;
    icsa:hasCWE cwe-res:CWE-312 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls XAAP Android" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "XAAP Android <1.53" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-204-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-204-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-204-03" ;
    dcterms:issued "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Weintek cMT3092X" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-60134; CVE-2026-61892; CVE-2026-61886; CVE-2026-60135" ;
    icsa:cweNumber "CWE-286; CWE-732; CWE-256; CWE-784" ;
    icsa:hasCVE cve-res:CVE-2026-60134,
        cve-res:CVE-2026-60135,
        cve-res:CVE-2026-61886,
        cve-res:CVE-2026-61892 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-286,
        cwe-res:CWE-732,
        cwe-res:CWE-784 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Weintek cMT3092X" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "cMT3092X firmware <20210218 | EasyWeb <v2.1.20" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-204-03" ;
    icsa:vendor "Weintek" ;
    icsa:year 2026 .

icsa-res:ICSA-26-204-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-204-04" ;
    dcterms:issued "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Panduit IntraVUE" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-40430; CVE-2026-44955; CVE-2026-42933; CVE-2026-28698; CVE-2026-50044" ;
    icsa:cweNumber "CWE-441; CWE-256; CWE-497; CWE-326" ;
    icsa:hasCVE cve-res:CVE-2026-28698,
        cve-res:CVE-2026-40430,
        cve-res:CVE-2026-42933,
        cve-res:CVE-2026-44955,
        cve-res:CVE-2026-50044 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-326,
        cwe-res:CWE-441,
        cwe-res:CWE-497 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Panduit IntraVUE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IntraVUE <=3.2.1a14" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-204-04" ;
    icsa:vendor "Pronetiqs" ;
    icsa:year 2026 .

icsa-res:ICSA-26-204-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-204-05" ;
    dcterms:issued "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ThinManager" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Food and Agriculture; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-11917" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2026-11917 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation ThinManager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected ">=13.1.0|<13.1.5; >=14.0.0|<14.0.2; ThinManager >=13.0.0|<13.0.7; >=13.2.0|<13.2.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-204-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-204-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-204-06" ;
    dcterms:issued "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "MZ Automation libIEC61850" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-50039; CVE-2026-49035; CVE-2026-50103; CVE-2026-50032" ;
    icsa:cweNumber "CWE-122; CWE-228; CWE-121; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2026-49035,
        cve-res:CVE-2026-50032,
        cve-res:CVE-2026-50039,
        cve-res:CVE-2026-50103 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-228,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MZ Automation libIEC61850" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "libIEC61850 >=v1.0.0|<=v1.6.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-204-06" ;
    icsa:vendor "MZ Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-204-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-204-07" ;
    dcterms:issued "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "MZ Automation lib60870" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-16002" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2026-16002 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MZ Automation lib60870" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "lib60870 <=2.4.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-204-07" ;
    icsa:vendor "MZ Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-209-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-209-01" ;
    dcterms:issued "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo CC" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-15467" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-15467 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Desigo CC" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Desigo CC family V7; Desigo CC family V9 < V9.0.1; Desigo CC family V8" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-209-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-209-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-209-02" ;
    dcterms:issued "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix Runtime (Update A)" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-7891" ;
    icsa:cweNumber "CWE-277" ;
    icsa:hasCVE cve-res:CVE-2026-7891 ;
    icsa:hasCWE cwe-res:CWE-277 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Mendix Runtime (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens Mendix Runtime" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-209-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-209-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-209-03" ;
    dcterms:issued "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-PLCSIM Advanced" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-54429" ;
    icsa:cweNumber "CWE-770" ;
    icsa:hasCVE cve-res:CVE-2026-54429 ;
    icsa:hasCWE cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC S7-PLCSIM Advanced" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC S7-PLCSIM Advanced" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-209-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-209-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-209-04" ;
    dcterms:issued "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-23204; CVE-2025-71265; CVE-2025-37980; CVE-2026-31424; CVE-2026-31448; CVE-2023-52927; CVE-2026-23378; CVE-2026-23005; CVE-2025-21926; CVE-2025-38322; CVE-2026-22977; CVE-2024-46786; CVE-2025-40135; CVE-2026-22979; CVE-2026-23086; CVE-2026-23391; CVE-2026-31402; CVE-2026-31508; CVE-2024-58011; CVE-2025-21648; CVE-2026-23457; CVE-2026-31515; CVE-2025-71120; CVE-2024-28956; CVE-2025-23136; CVE-2025-68206; CVE-2025-71267; CVE-2025-68764; CVE-2025-39795; CVE-2025-22107; CVE-2025-71064; CVE-2025-21764; CVE-2025-68776; CVE-2025-21707; CVE-2026-31680; CVE-2025-22095; CVE-2025-37917; CVE-2024-42079; CVE-2026-41989; CVE-2025-38614; CVE-2025-39721; CVE-2026-31518; CVE-2026-23111; CVE-2026-23414; CVE-2026-31521; CVE-2025-21795; CVE-2026-31495; CVE-2026-31391; CVE-2025-39756; CVE-2026-43033; CVE-2024-47809; CVE-2025-38721; CVE-2024-50164; CVE-2026-31768; CVE-2025-38704; CVE-2024-50298; CVE-2025-71075; CVE-2026-43040; CVE-2025-38732; CVE-2024-56719; CVE-2026-23397; CVE-2026-31447; CVE-2025-68265; CVE-2026-23103; CVE-2025-39977; CVE-2026-31628; CVE-2026-46300; CVE-2026-23463; CVE-2026-40355; CVE-2025-68787; CVE-2025-71197; CVE-2025-21814; CVE-2026-31555; CVE-2025-22056; CVE-2025-39827; CVE-2025-71131; CVE-2025-21861; CVE-2026-31428; CVE-2026-31403; CVE-2024-54458; CVE-2025-68261; CVE-2025-68820; CVE-2026-23095; CVE-2026-23304; CVE-2026-31565; CVE-2025-39931; CVE-2025-38192; CVE-2026-31496; CVE-2025-71191; CVE-2025-21705; CVE-2025-71104; CVE-2025-21925; CVE-2026-43024; CVE-2025-37785; CVE-2026-23456; CVE-2025-68266; CVE-2025-21655; CVE-2026-31737; CVE-2026-23439; CVE-2026-22982; CVE-2026-22992; CVE-2024-50014; CVE-2025-21780; CVE-2025-21867; CVE-2025-21846; CVE-2025-22111; CVE-2023-28531; CVE-2025-21718; CVE-2024-49998; CVE-2026-43038; CVE-2025-39773; CVE-2024-58086; CVE-2025-68788; CVE-2026-31752; CVE-2025-21765; CVE-2025-40022; CVE-2026-43026; CVE-2026-31422; CVE-2025-21682; CVE-2023-51384; CVE-2026-23474; CVE-2025-39748; CVE-2026-31427; CVE-2025-38201; CVE-2025-71123; CVE-2026-23038; CVE-2026-23446; CVE-2025-22090; CVE-2026-31507; CVE-2026-23379; CVE-2025-71162; CVE-2026-31504; CVE-2026-23231; CVE-2026-23287; CVE-2024-49968; CVE-2026-31417; CVE-2025-68363; CVE-2026-23245; CVE-2026-22980; CVE-2026-23290; CVE-2025-38727; CVE-2025-71221; CVE-2025-21702; CVE-2026-23343; CVE-2025-21913; CVE-2026-23335; CVE-2026-23475; CVE-2025-38681; CVE-2025-39782; CVE-2026-31669; CVE-2025-21731; CVE-2025-39691; CVE-2024-53124; CVE-2026-31441; CVE-2025-71079; CVE-2025-39770; CVE-2026-31651; CVE-2025-68818; CVE-2024-56631; CVE-2025-38725; CVE-2025-22015; CVE-2025-21745; CVE-2025-71266; CVE-2026-43027; CVE-2026-23113; CVE-2026-23455; CVE-2025-23143; CVE-2026-43284; CVE-2025-22055; CVE-2026-31452; CVE-2026-31423; CVE-2025-21959; CVE-2026-31450; CVE-2025-38232; CVE-2026-23110; CVE-2024-57977; CVE-2026-31664; CVE-2025-39955; CVE-2026-23300; CVE-2025-39980; CVE-2026-23054; CVE-2026-43028; CVE-2025-37959; CVE-2025-40261; CVE-2025-37909; CVE-2021-41617; CVE-2026-43025; CVE-2026-23370; CVE-2026-23083; CVE-2026-23381; CVE-2025-68816; CVE-2025-39826; CVE-2025-40078; CVE-2025-71189; CVE-2025-40105; CVE-2025-38125; CVE-2025-71113; CVE-2024-26783; CVE-2026-31416; CVE-2025-39681; CVE-2026-23271; CVE-2026-31634; CVE-2026-31533; CVE-2025-39978; CVE-2026-23359; CVE-2026-31414; CVE-2026-31421; CVE-2025-71112; CVE-2026-23060; CVE-2024-57917; CVE-2026-31649; CVE-2025-21802; CVE-2025-68264; CVE-2026-23100; CVE-2026-23452; CVE-2024-58058; CVE-2026-22994; CVE-2026-23434; CVE-2025-37945; CVE-2026-43030; CVE-2025-22005; CVE-2026-31418; CVE-2025-21864; CVE-2025-68803; CVE-2025-68371; CVE-2024-49994; CVE-2025-68291; CVE-2026-23026; CVE-2026-46333; CVE-2026-23019; CVE-2024-57973; CVE-2026-23084; CVE-2026-27135; CVE-2024-27056; CVE-2024-56703; CVE-2024-36927; CVE-2025-68725; CVE-2025-21676; CVE-2026-23458; CVE-2026-31682; CVE-2026-31411; CVE-2026-23087; CVE-2024-50063; CVE-2026-31466; CVE-2025-40080; CVE-2025-39964; CVE-2026-31546; CVE-2026-23270; CVE-2026-23438; CVE-2025-71185; CVE-2026-23449; CVE-2026-43057; CVE-2025-68773; CVE-2026-23154; CVE-2026-31389; CVE-2026-23243; CVE-2026-23274; CVE-2025-21645; CVE-2025-71114; CVE-2026-23284; CVE-2026-23351; CVE-2024-57924; CVE-2026-23321; CVE-2024-58020; CVE-2025-39871; CVE-2026-23242; CVE-2025-40219; CVE-2026-31761; CVE-2025-22083; CVE-2025-21887; CVE-2025-21875; CVE-2024-58061; CVE-2024-58056; CVE-2024-36903; CVE-2025-21760; CVE-2025-71186; CVE-2026-23454; CVE-2026-23003; CVE-2026-23368; CVE-2026-31563; CVE-2026-23293; CVE-2026-43011; CVE-2026-23450; CVE-2026-23010; CVE-2025-71163; CVE-2025-21919; CVE-2025-68798; CVE-2025-21706; CVE-2025-71085; CVE-2025-68742; CVE-2025-71095; CVE-2024-47736; CVE-2025-61984; CVE-2026-31469; CVE-2026-23365; CVE-2025-71088; CVE-2026-3497; CVE-2026-31674; CVE-2025-71086; CVE-2026-31415; CVE-2026-23273; CVE-2025-37964; CVE-2025-38162; CVE-2025-21796; CVE-2025-68337; CVE-2026-31396; CVE-2025-71190; CVE-2025-40070; CVE-2025-21758; CVE-2026-31665; CVE-2025-68782; CVE-2025-22121; CVE-2025-38591; CVE-2025-68349; CVE-2025-40300; CVE-2026-31658; CVE-2025-39845; CVE-2025-39764; CVE-2026-23011; CVE-2025-61985; CVE-2025-71097; CVE-2026-31446; CVE-2025-37972; CVE-2026-31485; CVE-2026-31503; CVE-2025-21999; CVE-2026-23392; CVE-2026-23422; CVE-2025-71098; CVE-2026-23277; CVE-2024-57979; CVE-2024-58016; CVE-2025-38736; CVE-2025-39866; CVE-2025-21938; CVE-2025-71161; CVE-2026-43035; CVE-2026-31431; CVE-2026-23340; CVE-2026-46174; CVE-2025-68814; CVE-2026-31670; CVE-2025-40149; CVE-2025-22060; CVE-2025-21853; CVE-2026-31494; CVE-2024-53170; CVE-2025-39953; CVE-2026-23398; CVE-2025-68724; CVE-2026-23319; CVE-2026-31671" ;
    icsa:cweNumber "CWE-237; CWE-416; CWE-402; CWE-672; CWE-704; CWE-170; CWE-311; CWE-392; CWE-115; CWE-134; CWE-669; CWE-617; CWE-476; CWE-123; CWE-404; CWE-674; CWE-763; CWE-1287; CWE-833; CWE-1285; CWE-367; CWE-401; CWE-825; CWE-835; CWE-124; CWE-20; CWE-190; CWE-362; CWE-843; CWE-457; CWE-911; CWE-413; CWE-841; CWE-256; CWE-1421; CWE-252; CWE-459; CWE-120; CWE-824; CWE-822; CWE-158; CWE-304; CWE-787; CWE-789; CWE-166; CWE-131; CWE-478; CWE-358; CWE-366; CWE-681; CWE-1341; CWE-821; CWE-908; CWE-364; CWE-269; CWE-805; CWE-489; CWE-213; CWE-372; CWE-573; CWE-772; CWE-909; CWE-360; CWE-667; CWE-369; CWE-159; CWE-130; CWE-125; CWE-266; CWE-820" ;
    icsa:hasCVE cve-res:CVE-2021-41617,
        cve-res:CVE-2023-28531,
        cve-res:CVE-2023-51384,
        cve-res:CVE-2023-52927,
        cve-res:CVE-2024-26783,
        cve-res:CVE-2024-27056,
        cve-res:CVE-2024-28956,
        cve-res:CVE-2024-36903,
        cve-res:CVE-2024-36927,
        cve-res:CVE-2024-42079,
        cve-res:CVE-2024-46786,
        cve-res:CVE-2024-47736,
        cve-res:CVE-2024-47809,
        cve-res:CVE-2024-49968,
        cve-res:CVE-2024-49994,
        cve-res:CVE-2024-49998,
        cve-res:CVE-2024-50014,
        cve-res:CVE-2024-50063,
        cve-res:CVE-2024-50164,
        cve-res:CVE-2024-50298,
        cve-res:CVE-2024-53124,
        cve-res:CVE-2024-53170,
        cve-res:CVE-2024-54458,
        cve-res:CVE-2024-56631,
        cve-res:CVE-2024-56703,
        cve-res:CVE-2024-56719,
        cve-res:CVE-2024-57917,
        cve-res:CVE-2024-57924,
        cve-res:CVE-2024-57973,
        cve-res:CVE-2024-57977,
        cve-res:CVE-2024-57979,
        cve-res:CVE-2024-58011,
        cve-res:CVE-2024-58016,
        cve-res:CVE-2024-58020,
        cve-res:CVE-2024-58056,
        cve-res:CVE-2024-58058,
        cve-res:CVE-2024-58061,
        cve-res:CVE-2024-58086,
        cve-res:CVE-2025-21645,
        cve-res:CVE-2025-21648,
        cve-res:CVE-2025-21655,
        cve-res:CVE-2025-21676,
        cve-res:CVE-2025-21682,
        cve-res:CVE-2025-21702,
        cve-res:CVE-2025-21705,
        cve-res:CVE-2025-21706,
        cve-res:CVE-2025-21707,
        cve-res:CVE-2025-21718,
        cve-res:CVE-2025-21731,
        cve-res:CVE-2025-21745,
        cve-res:CVE-2025-21758,
        cve-res:CVE-2025-21760,
        cve-res:CVE-2025-21764,
        cve-res:CVE-2025-21765,
        cve-res:CVE-2025-21780,
        cve-res:CVE-2025-21795,
        cve-res:CVE-2025-21796,
        cve-res:CVE-2025-21802,
        cve-res:CVE-2025-21814,
        cve-res:CVE-2025-21846,
        cve-res:CVE-2025-21853,
        cve-res:CVE-2025-21861,
        cve-res:CVE-2025-21864,
        cve-res:CVE-2025-21867,
        cve-res:CVE-2025-21875,
        cve-res:CVE-2025-21887,
        cve-res:CVE-2025-21913,
        cve-res:CVE-2025-21919,
        cve-res:CVE-2025-21925,
        cve-res:CVE-2025-21926,
        cve-res:CVE-2025-21938,
        cve-res:CVE-2025-21959,
        cve-res:CVE-2025-21999,
        cve-res:CVE-2025-22005,
        cve-res:CVE-2025-22015,
        cve-res:CVE-2025-22055,
        cve-res:CVE-2025-22056,
        cve-res:CVE-2025-22060,
        cve-res:CVE-2025-22083,
        cve-res:CVE-2025-22090,
        cve-res:CVE-2025-22095,
        cve-res:CVE-2025-22107,
        cve-res:CVE-2025-22111,
        cve-res:CVE-2025-22121,
        cve-res:CVE-2025-23136,
        cve-res:CVE-2025-23143,
        cve-res:CVE-2025-37785,
        cve-res:CVE-2025-37909,
        cve-res:CVE-2025-37917,
        cve-res:CVE-2025-37945,
        cve-res:CVE-2025-37959,
        cve-res:CVE-2025-37964,
        cve-res:CVE-2025-37972,
        cve-res:CVE-2025-37980,
        cve-res:CVE-2025-38125,
        cve-res:CVE-2025-38162,
        cve-res:CVE-2025-38192,
        cve-res:CVE-2025-38201,
        cve-res:CVE-2025-38232,
        cve-res:CVE-2025-38322,
        cve-res:CVE-2025-38591,
        cve-res:CVE-2025-38614,
        cve-res:CVE-2025-38681,
        cve-res:CVE-2025-38704,
        cve-res:CVE-2025-38721,
        cve-res:CVE-2025-38725,
        cve-res:CVE-2025-38727,
        cve-res:CVE-2025-38732,
        cve-res:CVE-2025-38736,
        cve-res:CVE-2025-39681,
        cve-res:CVE-2025-39691,
        cve-res:CVE-2025-39721,
        cve-res:CVE-2025-39748,
        cve-res:CVE-2025-39756,
        cve-res:CVE-2025-39764,
        cve-res:CVE-2025-39770,
        cve-res:CVE-2025-39773,
        cve-res:CVE-2025-39782,
        cve-res:CVE-2025-39795,
        cve-res:CVE-2025-39826,
        cve-res:CVE-2025-39827,
        cve-res:CVE-2025-39845,
        cve-res:CVE-2025-39866,
        cve-res:CVE-2025-39871,
        cve-res:CVE-2025-39931,
        cve-res:CVE-2025-39953,
        cve-res:CVE-2025-39955,
        cve-res:CVE-2025-39964,
        cve-res:CVE-2025-39977,
        cve-res:CVE-2025-39978,
        cve-res:CVE-2025-39980,
        cve-res:CVE-2025-40022,
        cve-res:CVE-2025-40070,
        cve-res:CVE-2025-40078,
        cve-res:CVE-2025-40080,
        cve-res:CVE-2025-40105,
        cve-res:CVE-2025-40135,
        cve-res:CVE-2025-40149,
        cve-res:CVE-2025-40219,
        cve-res:CVE-2025-40261,
        cve-res:CVE-2025-40300,
        cve-res:CVE-2025-61984,
        cve-res:CVE-2025-61985,
        cve-res:CVE-2025-68206,
        cve-res:CVE-2025-68261,
        cve-res:CVE-2025-68264,
        cve-res:CVE-2025-68265,
        cve-res:CVE-2025-68266,
        cve-res:CVE-2025-68291,
        cve-res:CVE-2025-68337,
        cve-res:CVE-2025-68349,
        cve-res:CVE-2025-68363,
        cve-res:CVE-2025-68371,
        cve-res:CVE-2025-68724,
        cve-res:CVE-2025-68725,
        cve-res:CVE-2025-68742,
        cve-res:CVE-2025-68764,
        cve-res:CVE-2025-68773,
        cve-res:CVE-2025-68776,
        cve-res:CVE-2025-68782,
        cve-res:CVE-2025-68787,
        cve-res:CVE-2025-68788,
        cve-res:CVE-2025-68798,
        cve-res:CVE-2025-68803,
        cve-res:CVE-2025-68814,
        cve-res:CVE-2025-68816,
        cve-res:CVE-2025-68818,
        cve-res:CVE-2025-68820,
        cve-res:CVE-2025-71064,
        cve-res:CVE-2025-71075,
        cve-res:CVE-2025-71079,
        cve-res:CVE-2025-71085,
        cve-res:CVE-2025-71086,
        cve-res:CVE-2025-71088,
        cve-res:CVE-2025-71095,
        cve-res:CVE-2025-71097,
        cve-res:CVE-2025-71098,
        cve-res:CVE-2025-71104,
        cve-res:CVE-2025-71112,
        cve-res:CVE-2025-71113,
        cve-res:CVE-2025-71114,
        cve-res:CVE-2025-71120,
        cve-res:CVE-2025-71123,
        cve-res:CVE-2025-71131,
        cve-res:CVE-2025-71161,
        cve-res:CVE-2025-71162,
        cve-res:CVE-2025-71163,
        cve-res:CVE-2025-71185,
        cve-res:CVE-2025-71186,
        cve-res:CVE-2025-71189,
        cve-res:CVE-2025-71190,
        cve-res:CVE-2025-71191,
        cve-res:CVE-2025-71197,
        cve-res:CVE-2025-71221,
        cve-res:CVE-2025-71265,
        cve-res:CVE-2025-71266,
        cve-res:CVE-2025-71267,
        cve-res:CVE-2026-22977,
        cve-res:CVE-2026-22979,
        cve-res:CVE-2026-22980,
        cve-res:CVE-2026-22982,
        cve-res:CVE-2026-22992,
        cve-res:CVE-2026-22994,
        cve-res:CVE-2026-23003,
        cve-res:CVE-2026-23005,
        cve-res:CVE-2026-23010,
        cve-res:CVE-2026-23011,
        cve-res:CVE-2026-23019,
        cve-res:CVE-2026-23026,
        cve-res:CVE-2026-23038,
        cve-res:CVE-2026-23054,
        cve-res:CVE-2026-23060,
        cve-res:CVE-2026-23083,
        cve-res:CVE-2026-23084,
        cve-res:CVE-2026-23086,
        cve-res:CVE-2026-23087,
        cve-res:CVE-2026-23095,
        cve-res:CVE-2026-23100,
        cve-res:CVE-2026-23103,
        cve-res:CVE-2026-23110,
        cve-res:CVE-2026-23111,
        cve-res:CVE-2026-23113,
        cve-res:CVE-2026-23154,
        cve-res:CVE-2026-23204,
        cve-res:CVE-2026-23231,
        cve-res:CVE-2026-23242,
        cve-res:CVE-2026-23243,
        cve-res:CVE-2026-23245,
        cve-res:CVE-2026-23270,
        cve-res:CVE-2026-23271,
        cve-res:CVE-2026-23273,
        cve-res:CVE-2026-23274,
        cve-res:CVE-2026-23277,
        cve-res:CVE-2026-23284,
        cve-res:CVE-2026-23287,
        cve-res:CVE-2026-23290,
        cve-res:CVE-2026-23293,
        cve-res:CVE-2026-23300,
        cve-res:CVE-2026-23304,
        cve-res:CVE-2026-23319,
        cve-res:CVE-2026-23321,
        cve-res:CVE-2026-23335,
        cve-res:CVE-2026-23340,
        cve-res:CVE-2026-23343,
        cve-res:CVE-2026-23351,
        cve-res:CVE-2026-23359,
        cve-res:CVE-2026-23365,
        cve-res:CVE-2026-23368,
        cve-res:CVE-2026-23370,
        cve-res:CVE-2026-23378,
        cve-res:CVE-2026-23379,
        cve-res:CVE-2026-23381,
        cve-res:CVE-2026-23391,
        cve-res:CVE-2026-23392,
        cve-res:CVE-2026-23397,
        cve-res:CVE-2026-23398,
        cve-res:CVE-2026-23414,
        cve-res:CVE-2026-23422,
        cve-res:CVE-2026-23434,
        cve-res:CVE-2026-23438,
        cve-res:CVE-2026-23439,
        cve-res:CVE-2026-23446,
        cve-res:CVE-2026-23449,
        cve-res:CVE-2026-23450,
        cve-res:CVE-2026-23452,
        cve-res:CVE-2026-23454,
        cve-res:CVE-2026-23455,
        cve-res:CVE-2026-23456,
        cve-res:CVE-2026-23457,
        cve-res:CVE-2026-23458,
        cve-res:CVE-2026-23463,
        cve-res:CVE-2026-23474,
        cve-res:CVE-2026-23475,
        cve-res:CVE-2026-27135,
        cve-res:CVE-2026-31389,
        cve-res:CVE-2026-31391,
        cve-res:CVE-2026-31396,
        cve-res:CVE-2026-31402,
        cve-res:CVE-2026-31403,
        cve-res:CVE-2026-31411,
        cve-res:CVE-2026-31414,
        cve-res:CVE-2026-31415,
        cve-res:CVE-2026-31416,
        cve-res:CVE-2026-31417,
        cve-res:CVE-2026-31418,
        cve-res:CVE-2026-31421,
        cve-res:CVE-2026-31422,
        cve-res:CVE-2026-31423,
        cve-res:CVE-2026-31424,
        cve-res:CVE-2026-31427,
        cve-res:CVE-2026-31428,
        cve-res:CVE-2026-31431,
        cve-res:CVE-2026-31441,
        cve-res:CVE-2026-31446,
        cve-res:CVE-2026-31447,
        cve-res:CVE-2026-31448,
        cve-res:CVE-2026-31450,
        cve-res:CVE-2026-31452,
        cve-res:CVE-2026-31466,
        cve-res:CVE-2026-31469,
        cve-res:CVE-2026-31485,
        cve-res:CVE-2026-31494,
        cve-res:CVE-2026-31495,
        cve-res:CVE-2026-31496,
        cve-res:CVE-2026-31503,
        cve-res:CVE-2026-31504,
        cve-res:CVE-2026-31507,
        cve-res:CVE-2026-31508,
        cve-res:CVE-2026-31515,
        cve-res:CVE-2026-31518,
        cve-res:CVE-2026-31521,
        cve-res:CVE-2026-31533,
        cve-res:CVE-2026-31546,
        cve-res:CVE-2026-31555,
        cve-res:CVE-2026-31563,
        cve-res:CVE-2026-31565,
        cve-res:CVE-2026-31628,
        cve-res:CVE-2026-31634,
        cve-res:CVE-2026-31649,
        cve-res:CVE-2026-31651,
        cve-res:CVE-2026-31658,
        cve-res:CVE-2026-31664,
        cve-res:CVE-2026-31665,
        cve-res:CVE-2026-31669,
        cve-res:CVE-2026-31670,
        cve-res:CVE-2026-31671,
        cve-res:CVE-2026-31674,
        cve-res:CVE-2026-31680,
        cve-res:CVE-2026-31682,
        cve-res:CVE-2026-31737,
        cve-res:CVE-2026-31752,
        cve-res:CVE-2026-31761,
        cve-res:CVE-2026-31768,
        cve-res:CVE-2026-3497,
        cve-res:CVE-2026-40355,
        cve-res:CVE-2026-41989,
        cve-res:CVE-2026-43011,
        cve-res:CVE-2026-43024,
        cve-res:CVE-2026-43025,
        cve-res:CVE-2026-43026,
        cve-res:CVE-2026-43027,
        cve-res:CVE-2026-43028,
        cve-res:CVE-2026-43030,
        cve-res:CVE-2026-43033,
        cve-res:CVE-2026-43035,
        cve-res:CVE-2026-43038,
        cve-res:CVE-2026-43040,
        cve-res:CVE-2026-43057,
        cve-res:CVE-2026-43284,
        cve-res:CVE-2026-46174,
        cve-res:CVE-2026-46300,
        cve-res:CVE-2026-46333 ;
    icsa:hasCWE cwe-res:CWE-115,
        cwe-res:CWE-120,
        cwe-res:CWE-123,
        cwe-res:CWE-124,
        cwe-res:CWE-125,
        cwe-res:CWE-1285,
        cwe-res:CWE-1287,
        cwe-res:CWE-130,
        cwe-res:CWE-131,
        cwe-res:CWE-134,
        cwe-res:CWE-1341,
        cwe-res:CWE-1421,
        cwe-res:CWE-158,
        cwe-res:CWE-159,
        cwe-res:CWE-166,
        cwe-res:CWE-170,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-213,
        cwe-res:CWE-237,
        cwe-res:CWE-252,
        cwe-res:CWE-256,
        cwe-res:CWE-266,
        cwe-res:CWE-269,
        cwe-res:CWE-304,
        cwe-res:CWE-311,
        cwe-res:CWE-358,
        cwe-res:CWE-360,
        cwe-res:CWE-362,
        cwe-res:CWE-364,
        cwe-res:CWE-366,
        cwe-res:CWE-367,
        cwe-res:CWE-369,
        cwe-res:CWE-372,
        cwe-res:CWE-392,
        cwe-res:CWE-401,
        cwe-res:CWE-402,
        cwe-res:CWE-404,
        cwe-res:CWE-413,
        cwe-res:CWE-416,
        cwe-res:CWE-457,
        cwe-res:CWE-459,
        cwe-res:CWE-476,
        cwe-res:CWE-478,
        cwe-res:CWE-489,
        cwe-res:CWE-573,
        cwe-res:CWE-617,
        cwe-res:CWE-667,
        cwe-res:CWE-669,
        cwe-res:CWE-672,
        cwe-res:CWE-674,
        cwe-res:CWE-681,
        cwe-res:CWE-704,
        cwe-res:CWE-763,
        cwe-res:CWE-772,
        cwe-res:CWE-787,
        cwe-res:CWE-789,
        cwe-res:CWE-805,
        cwe-res:CWE-820,
        cwe-res:CWE-821,
        cwe-res:CWE-822,
        cwe-res:CWE-824,
        cwe-res:CWE-825,
        cwe-res:CWE-833,
        cwe-res:CWE-835,
        cwe-res:CWE-841,
        cwe-res:CWE-843,
        cwe-res:CWE-908,
        cwe-res:CWE-909,
        cwe-res:CWE-911 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) >= V3.1.6; SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) >= V3.1.6; SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) >= V3.1.6; SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.6; SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= V3.1.6" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-209-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-209-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-209-05" ;
    dcterms:issued "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "MikroTik RouterOS and Cloud Hosted Router" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Latvia" ;
    icsa:criticalInfrastructureSector "Information Technology; Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-16347" ;
    icsa:cweNumber "CWE-307" ;
    icsa:hasCVE cve-res:CVE-2026-16347 ;
    icsa:hasCWE cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MikroTik RouterOS and Cloud Hosted Router" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MikroTik RouterOS: vers:all/*; MikroTik Cloud Hosted Router: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-209-05" ;
    icsa:vendor "MikroTik" ;
    icsa:year 2026 .

icsa-res:ICSA-26-209-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-209-06" ;
    dcterms:issued "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "igloohome Smart Lock Mobile Application" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Singapore" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-16581" ;
    icsa:cweNumber "CWE-540" ;
    icsa:hasCVE cve-res:CVE-2026-16581 ;
    icsa:hasCWE cwe-res:CWE-540 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "igloohome Smart Lock Mobile Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "igloohome Smart Lock Mobile Application (Android): 3.2.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-209-06" ;
    icsa:vendor "igloohome" ;
    icsa:year 2026 .

icsa-res:ICSA-26-209-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-209-07" ;
    dcterms:issued "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB KNX Update Tool" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-12705" ;
    icsa:cweNumber "CWE-353" ;
    icsa:hasCVE cve-res:CVE-2026-12705 ;
    icsa:hasCWE cwe-res:CWE-353 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB KNX Update Tool" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KNX Update Tool (BJE) <=2.0.175; KNX Update Tool (ABB) <=2.0.175" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-209-07" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-01" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "MikroTik RouterOS" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Latvia" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-14227" ;
    icsa:cweNumber "CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-14227 ;
    icsa:hasCWE cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MikroTik RouterOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RouterOS" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-01" ;
    icsa:vendor "MikroTik" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-02" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls OpenBlue Employee" ;
    icsa:CVSSScore "2.4"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2026-34497; CVE-2026-21662; CVE-2026-34495" ;
    icsa:cweNumber "CWE-434; CWE-79; CWE-80" ;
    icsa:hasCVE cve-res:CVE-2026-21662,
        cve-res:CVE-2026-34495,
        cve-res:CVE-2026-34497 ;
    icsa:hasCWE cwe-res:CWE-434,
        cwe-res:CWE-79,
        cwe-res:CWE-80 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls OpenBlue Employee" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OpenBlue Employee (FMS Employee) <=V2025.3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-03" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Toptech Systems RCU II+ and Multiload II+" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-12562" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-12562 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Toptech Systems RCU II+ and Multiload II+" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RCU II+ <2025-11-24 | Multiload II+ <2025-11-24" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-03" ;
    icsa:vendor "Toptech Systems" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-04" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric IGSS" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-12927" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-12927 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric IGSS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IGSS | IGSS Definition (Def.exe) module 18.0.0.26125" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-05" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Module" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-9636" ;
    icsa:cweNumber "CWE-299" ;
    icsa:hasCVE cve-res:CVE-2026-9636 ;
    icsa:hasCWE cwe-res:CWE-299 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ControlLogix 5580 >=V36|<=V37 | CompactLogix 5380 >=V36|<=V37 | GuardLogix 5580 >=V36|<=V37 | Compact GuardLogix 5380 >=V36|<=V37 | 1756-EN4TR V6.001 | 1756-EN4TR V7.001" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-06" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "NASA Core Flight System (cFS) Health & Safety (HS) Application" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-18064" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2026-18064 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NASA Core Flight System (cFS) Health & Safety (HS) Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Core Flight System (cFS) Health & Safety (HS) Application <=v7.0.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-06" ;
    icsa:vendor "NASA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-07" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-13584" ;
    icsa:cweNumber "CWE-924" ;
    icsa:hasCVE cve-res:CVE-2026-13584 ;
    icsa:hasCWE cwe-res:CWE-924 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric MELSEC MX Controller MX-R model MXR300-16 | Mitsubishi Electric MELSEC MX Controller MX-R model MXR300-32 | Mitsubishi Electric MELSEC MX Controller MX-R model MXR300-64 | Mitsubishi Electric MELSEC MX Controller MX-R model MXR500-128 | Mitsubishi Electric MELSEC MX Controller MX-R model MXR500-256 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-8-N32 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-8-P32 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-16-N32 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-16-P32 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100S-N32 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100S-P32 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100S-8-N32 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100S-8-P32 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100S-16-N32 | Mitsubishi Electric MELSEC MX Controller MX-F model MXF100S-16-P32 | Mitsubishi Electric Master/local module RJ71GN11-T2 | Mitsubishi Electric Master/local module RJ71GN11-SX | Mitsubishi Electric Master/local module RJ71GN11-EIP | Mitsubishi Electric Master/local module FX5-CCLGN-MS | Mitsubishi Electric CC-Link IE TSN interface board NZ81GN11-SX | Mitsubishi Electric CC-Link IE TSN interface board NZ81GN11-T2 | Mitsubishi Electric Motion module RD78G4 | Mitsubishi Electric Motion module RD78G8 | Mitsubishi Electric Motion module RD78G16 | Mitsubishi Electric Motion module RD78G64 | Mitsubishi Electric Motion module RD78GHV | Mitsubishi Electric Motion module RD78GHW | Mitsubishi Electric Motion module FX5-40SSC-G | Mitsubishi Electric Motion module FX5-80SSC-G | Mitsubishi Electric MELSEC iQ-L Series Motion Module LD78G4 | Mitsubishi Electric MELSEC iQ-L Series Motion Module LD78G16 | Mitsubishi Electric Motion Control Board MR-EM441G | Mitsubishi Electric Block-type remote module NZ2GN2S1-32D | Mitsubishi Electric Block-type remote module NZ2GN2S1-32T | Mitsubishi Electric Block-type remote module NZ2GN2S1-32TE | Mitsubishi Electric Block-type remote module NZ2GN2S1-32DT | Mitsubishi Electric Block-type remote module NZ2GN2S1-32DTE | Mitsubishi Electric Block-type remote module NZ2GN2B1-32D | Mitsubishi Electric Block-type remote module NZ2GN2B1-32T | Mitsubishi Electric Block-type remote module NZ2GN2B1-32TE | Mitsubishi Electric Block-type remote module NZ2GN2B1-32DT | Mitsubishi Electric Block-type remote module NZ2GN2B1-32DTE | Mitsubishi Electric Block-type remote module NZ2GNCF1-32D | Mitsubishi Electric Block-type remote module NZ2GNCF1-32T | Mitsubishi Electric Block-type remote module NZ2GNCE3-32D | Mitsubishi Electric Block-type remote module NZ2GNCE3-32DT | Mitsubishi Electric Block-type remote module NZ2GN12A4-16D | Mitsubishi Electric Block-type remote module NZ2GN12A4-16DE | Mitsubishi Electric Block-type remote module NZ2GN12A2-16T | Mitsubishi Electric Block-type remote module NZ2GN12A2-16TE | Mitsubishi Electric Block-type remote module NZ2GN12A42-16DT | Mitsubishi Electric Block-type remote module NZ2GN12A42-16DTE | Mitsubishi Electric Block-type remote module NZ2GN2S1-16D | Mitsubishi Electric Block-type remote module NZ2GN2S1-16T | Mitsubishi Electric Block-type remote module NZ2GN2S1-16TE | Mitsubishi Electric Block-type remote module NZ2GN2B1-16D | Mitsubishi Electric Block-type remote module NZ2GN2B1-16T | Mitsubishi Electric Block-type remote module NZ2GN2B1-16TE | Mitsubishi Electric Block-type remote module with safety functions NZ2GNSS2-8D | Mitsubishi Electric Block-type remote module with safety functions NZ2GNSS2-8D-K | Mitsubishi Electric Block-type remote module with safety functions NZ2GNSS2-8TE | Mitsubishi Electric Block-type remote module with safety functions NZ2GNSS2-8TE-K | Mitsubishi Electric Block-type remote module with safety functions NZ2GNSS2-16DTE | Mitsubishi Electric Block-type remote module with safety functions NZ2GNSS2-16DTE-K | Mitsubishi Electric Block-type remote module with safety functions NZ2GNS12A2-14DT | Mitsubishi Electric Block-type remote module with safety functions NZ2GNS12A2-16DTE | Mitsubishi Electric Analog-Digital converter module NZ2GN2S-60AD4 | Mitsubishi Electric Analog-Digital converter module NZ2GN2B-60AD4 | Mitsubishi Electric Digital-Analog converter module NZ2GN2S-60DA4 | Mitsubishi Electric Digital-Analog converter module NZ2GN2B-60DA4 | Mitsubishi Electric CC-Link IE TSN compatible coupler NZ2FT-GN | Mitsubishi Electric FPGA module NZ2GN2S-D41P01 | Mitsubishi Electric FPGA module NZ2GN2S-D41D01 | Mitsubishi Electric FPGA module NZ2GN2S-D41PD02 | Mitsubishi Electric Tension meter LM7-1LG | Mitsubishi Electric Tension meter LM7-2LG | Mitsubishi Electric AC Servo MELSERVO-J5 MR-J5-G | Mitsubishi Electric AC Servo MELSERVO-J5 MR-J5W-G | Mitsubishi Electric AC Servo MELSERVO-J5 MR-J5-G-HS | Mitsubishi Electric AC Servo MELSERVO-J5 MR-J5-G-RJ | Mitsubishi Electric AC Servo MELSERVO-J5 MR-J5-G-LL | Mitsubishi Electric AC Servo MELSERVO-J5 MR-J5D-G4 | Mitsubishi Electric AC Servo MELSERVO-J5 MR-MD333G | Mitsubishi Electric AC Servo MELSERVO-JET MR-JET-G | Mitsubishi Electric AC Servo MELSERVO-JET MR-JET-G4-HS | Mitsubishi Electric Liner Track System MTR-S series Linear track control module MTR-SCU00-4G | Mitsubishi Electric Liner Track System MTR-S series Linear track control module MTR-SCU00-PG | Mitsubishi Electric Inverter FR-A800/F800/E800 Series FR-A8NCG | Mitsubishi Electric Inverter FR-A800/F800/E800 Series FR-A8NCG-S | Mitsubishi Electric Inverter FR-A800/F800/E800 Series FR-A800-GN | Mitsubishi Electric Inverter FR-A800/F800/E800 Series FR-E800-E | Mitsubishi Electric Inverter FR-A800/F800/E800 Series FR-E800-SCE | Mitsubishi Electric Industrial Robot CR800-D series controller Network Base Card 2F-DQ535-TSN | Mitsubishi Electric CC-Link IE TSN expansion unit FCU8-EX569 | Mitsubishi Electric CC-Link IE TSN-CC-Link IE Field Network bridge module NZ2GN-GFB | Mitsubishi Electric CC-Link IE TSN-AnyWireASLINK bridge module NZ2AW1GNAL | Mitsubishi Electric Energy Measuring Unit CC-Link IE TSN Communication Unit EMU4-CM-TSN | Mitsubishi Electric GOT3000 Series GT3715-FHCBD | Mitsubishi Electric GOT3000 Series GT3712-WXCBD | Mitsubishi Electric GOT3000 Series GT3715-XRBA | Mitsubishi Electric GOT3000 Series GT3715-XRBD | Mitsubishi Electric GOT3000 Series GT3712-XRBA | Mitsubishi Electric GOT3000 Series GT3712-XRBD | Mitsubishi Electric GOT3000 Series GT3710-XRBA | Mitsubishi Electric GOT3000 Series GT3710-XRBD | Mitsubishi Electric GOT3000 Series GT3708-XRBA | Mitsubishi Electric GOT3000 Series GT3708-XRBD | Mitsubishi Electric CC-Link IE TSN Communication Unit GT25-J71GN13-T2 | Mitsubishi Electric Motion Control Software SWM-G | Mitsubishi Electric Motion Control Software SWM-G-N1 | Mitsubishi Electric CC-Link IE TSN Communication Software for Windows SW1DND-CCIETCT-M | Mitsubishi Electric Analysis Support Software MELSOFT VIMA SW1DNN-VIMA-M | Mitsubishi Electric Master/Local module Designated communication LSI DeviceKit NZ2KT-NPETNG51 | Mitsubishi Electric Remote Station Communication LSI with GbE-PHY NZ2GACP620-60 | Mitsubishi Electric Remote Station Communication LSI with GbE-PHY NZ2GACP620-300 | Mitsubishi Electric Remote Station Communication LSI with GbE-PHY NZ2GACP621-90 | Mitsubishi Electric Remote Station Communication LSI with GbE-PHY NZ2GACP621-720 | Mitsubishi Electric CC-Link IE TSN Master/Local module Designated communication LSI SDK SW1DNN-GN610SRC-M | Mitsubishi Electric Remote station software development kit SW1DNC-GNSDK1S-M | Mitsubishi Electric Remote station software development kit SW1DNC-GNSDK2S-M" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-07" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-08" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "o6 Automation open62541" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-65423; CVE-2026-63035; CVE-2026-63362; CVE-2026-63559" ;
    icsa:cweNumber "CWE-416; CWE-190; CWE-191" ;
    icsa:hasCVE cve-res:CVE-2026-63035,
        cve-res:CVE-2026-63362,
        cve-res:CVE-2026-63559,
        cve-res:CVE-2026-65423 ;
    icsa:hasCWE cwe-res:CWE-190,
        cwe-res:CWE-191,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "o6 Automation open62541" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "open62541 on Windows and Linux >=from_1.3.0|<=1.3.17 | open62541 on Windows and Linux >=from_1.4.0|<=1.4.16 | open62541 on Windows and Linux >=from_1.5.0|<=1.5.4 | open62541 on Windows and Linux master" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-08" ;
    icsa:vendor "o6 Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-09" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Watchfire Controller Software" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Healthcare and Public Health; Financial Services" ;
    icsa:cveNumber "CVE-2026-5846" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2026-5846 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Watchfire Controller Software" ;
    icsa:productDistribution "United States, Dominican Republic, Canada, Peru, El Salvador" ;
    icsa:productsAffected "BC550 12.30 | BC750 11.33|12.35 | BC760 12.38|13.00 | BC760DC 12.39" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-09" ;
    icsa:vendor "Watchfire" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-10" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "MZ Automation GmbH libiec61850" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-56758; CVE-2026-63550; CVE-2026-66364; CVE-2026-66369; CVE-2026-65421; CVE-2026-66720; CVE-2026-66360; CVE-2026-66349" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2026-56758,
        cve-res:CVE-2026-63550,
        cve-res:CVE-2026-65421,
        cve-res:CVE-2026-66349,
        cve-res:CVE-2026-66360,
        cve-res:CVE-2026-66364,
        cve-res:CVE-2026-66369,
        cve-res:CVE-2026-66720 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MZ Automation GmbH libiec61850" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "libiec61850 <1.6.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-10" ;
    icsa:vendor "MZ Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-211-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-211-11" ;
    dcterms:issued "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "MZ Automation lib60870" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy; Water and Wastewater Systems; Critical Manufacturing; Chemical" ;
    icsa:cveNumber "CVE-2026-63033; CVE-2026-61893" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2026-61893,
        cve-res:CVE-2026-63033 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MZ Automation lib60870" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "lib60870 2.4.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-211-11" ;
    icsa:vendor "MZ Automation GmbH" ;
    icsa:year 2026 .

icsa-res:ICSA-26-216-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-216-01" ;
    dcterms:issued "2026-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Acrisure KARR BT and DR-100" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-18411" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2026-18411 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Acrisure KARR BT and DR-100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "KARR BT firmware <July_20_2026 | DR-100 firmware <July_20_2026" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-216-01" ;
    icsa:vendor "Acrisure" ;
    icsa:year 2026 .

icsa-res:ICSA-26-218-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-218-01" ;
    dcterms:issued "2026-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Ability Zenon" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Dams; Energy; Healthcare and Public Health; Information Technology; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2020-7924; CVE-2020-7921; CVE-2021-32040; CVE-2021-20328; CVE-2021-20334; CVE-2021-20330; CVE-2020-7928; CVE-2021-32036; CVE-2021-20333; CVE-2020-7925; CVE-2020-7929; CVE-2020-7923; CVE-2025-14847" ;
    icsa:cweNumber "CWE-770; CWE-475; CWE-250; CWE-158; CWE-617; CWE-787; CWE-248; CWE-182; CWE-295; CWE-130; CWE-185; CWE-117" ;
    icsa:hasCVE cve-res:CVE-2020-7921,
        cve-res:CVE-2020-7923,
        cve-res:CVE-2020-7924,
        cve-res:CVE-2020-7925,
        cve-res:CVE-2020-7928,
        cve-res:CVE-2020-7929,
        cve-res:CVE-2021-20328,
        cve-res:CVE-2021-20330,
        cve-res:CVE-2021-20333,
        cve-res:CVE-2021-20334,
        cve-res:CVE-2021-32036,
        cve-res:CVE-2021-32040,
        cve-res:CVE-2025-14847 ;
    icsa:hasCWE cwe-res:CWE-117,
        cwe-res:CWE-130,
        cwe-res:CWE-158,
        cwe-res:CWE-182,
        cwe-res:CWE-185,
        cwe-res:CWE-248,
        cwe-res:CWE-250,
        cwe-res:CWE-295,
        cwe-res:CWE-475,
        cwe-res:CWE-617,
        cwe-res:CWE-770,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Ability Zenon" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IIoT services with MongoDB (4.2) installed on ABB Ability Zenon" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-218-01" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-218-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-218-02" ;
    dcterms:issued "2026-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Inc. TL280" ;
    icsa:CVSSScore "4.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2026-27871" ;
    icsa:cweNumber "CWE-327" ;
    icsa:hasCVE cve-res:CVE-2026-27871 ;
    icsa:hasCWE cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Inc. TL280" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "TL280 <5.63" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-218-02" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-219-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-219-01" ;
    dcterms:issued "2026-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "CPDLC over ATN-B1 Vulnerabilities" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Global" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2025-71410; CVE-2025-71412; CVE-2025-71413; CVE-2025-71409; CVE-2025-71411" ;
    icsa:cweNumber "CWE-306; CWE-754; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2025-71409,
        cve-res:CVE-2025-71410,
        cve-res:CVE-2025-71411,
        cve-res:CVE-2025-71412,
        cve-res:CVE-2025-71413 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-754,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CPDLC over ATN-B1 Vulnerabilities" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Advisory Circular 90-117 Data Link Communications ATN-B1 CPDLC: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-219-01" ;
    icsa:vendor "Advisory Circular 90-117 Data Link Communications" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-01" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Enterprise SCADA" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2025-7639" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2025-7639 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA Enterprise SCADA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA Enterprise SCADA HMI: 2024|2024_R2; AVEVA Enterprise SCADA: >=2023|<=2023_SP1; AVEVA Enterprise SCADA: >=2024|<=2024_SP1_P01; AVEVA Enterprise SCADA: >=2022|<=2022_SP2_P2; AVEVA Enterprise SCADA HMI: <=2023_P1; AVEVA Enterprise SCADA: <=2021_SP2_P5; AVEVA Enterprise SCADA: 2025" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-02" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Haiwell IoT Cloud HMI Gateway" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Energy; Critical Manufacturing; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-19188" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-19188 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Haiwell IoT Cloud HMI Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Haiwell Haiwell IoT Cloud HMI Gateway: 3.40.1.12" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-02" ;
    icsa:vendor "Haiwell" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-03" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Inc. Airwall" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2026-64887; CVE-2026-34492" ;
    icsa:cweNumber "CWE-321; CWE-73" ;
    icsa:hasCVE cve-res:CVE-2026-34492,
        cve-res:CVE-2026-64887 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-73 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Inc. Airwall" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls Inc. Airwall: <=4.0.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-03" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-04" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy APM Edge Product" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-43284; CVE-2026-43500" ;
    icsa:cweNumber "CWE-787; CWE-123" ;
    icsa:hasCVE cve-res:CVE-2026-43284,
        cve-res:CVE-2026-43500 ;
    icsa:hasCWE cwe-res:CWE-123,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy APM Edge Product" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "APM Edge versions 6.10 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-04" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-05" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "ANDRITZ HIPASE-250 and 250 SCALA" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Austria" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-65313; CVE-2026-65309; CVE-2026-65311; CVE-2026-65310" ;
    icsa:cweNumber "CWE-306; CWE-257; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-65309,
        cve-res:CVE-2026-65310,
        cve-res:CVE-2026-65311,
        cve-res:CVE-2026-65313 ;
    icsa:hasCWE cwe-res:CWE-257,
        cwe-res:CWE-306,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ANDRITZ HIPASE-250 and 250 SCALA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ANDRITZ 250 SCALA: <=7.20; ANDRITZ HIPASE-250: <=7.20" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-05" ;
    icsa:vendor "ANDRITZ" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-06" ;
    dcterms:issued "2026-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens RUGGEDCOM APE1808" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-23573; CVE-2026-59839" ;
    icsa:cweNumber "CWE-22; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2026-23573,
        cve-res:CVE-2026-59839 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens RUGGEDCOM APE1808" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RUGGEDCOM APE1808 with Fortinet NGFW" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-07" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens License Server (SLS)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-69108; CVE-2026-69109" ;
    icsa:cweNumber "CWE-732; CWE-35" ;
    icsa:hasCVE cve-res:CVE-2026-69108,
        cve-res:CVE-2026-69109 ;
    icsa:hasCWE cwe-res:CWE-35,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens License Server (SLS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siemens License Server (SLS) < V5.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-08" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo DXR and PXC Controllers" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-59693" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2026-59693 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Desigo DXR and PXC Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Desigo PXC4 < V02.21.194.36-2715; Desigo DXR2 < V01.21.233.16-7862; Desigo PXC3 < V01.21.233.16-7862; Desigo PXC5.E24 < V02.21.194.36-2715; Desigo PXC7 < V02.21.194.36-2715; Desigo PXC5.E003 < V02.21.194.36-2715" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-09" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Video" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Communications; Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-3014" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-3014 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Siveillance Video" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siveillance Video V2025 < V25.1.15; Siveillance Video V2023 R3 < V23.3.27; Siveillance Video V2024 R1 < V24.1.16" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-09" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-10 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-10" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Parasolid" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-64629" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2026-64629 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Parasolid" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Parasolid V38.1 < V38.1.230; Parasolid V38.0 < V38.0.235" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-10" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-11 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-11" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Femap" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-59701; CVE-2026-59700" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2026-59700,
        cve-res:CVE-2026-59701 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Simcenter Femap" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Simcenter Femap < V2606.0001" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-11" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-12 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-12" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Solid Edge" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-50061; CVE-2026-50059; CVE-2026-50062; CVE-2026-50060; CVE-2026-50058; CVE-2026-50064; CVE-2026-50063" ;
    icsa:cweNumber "CWE-416; CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-50058,
        cve-res:CVE-2026-50059,
        cve-res:CVE-2026-50060,
        cve-res:CVE-2026-50061,
        cve-res:CVE-2026-50062,
        cve-res:CVE-2026-50063,
        cve-res:CVE-2026-50064 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-416,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Solid Edge" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Solid Edge SE2026 < V226.0.7; Solid Edge SE2025 < V225.0.15" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-12" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-13 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-13" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens LOGO! Soft Comfort" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-57262; CVE-2026-57263" ;
    icsa:cweNumber "CWE-759; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2026-57262,
        cve-res:CVE-2026-57263 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-759 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens LOGO! Soft Comfort" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "LOGO! Soft Comfort < V9" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-13" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-225-14 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-225-14" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Metasys" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2026-34491" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2026-34491 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Metasys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls Inc Metasys 14: <v14.1.5; Johnson Controls Inc Metasys 13: vers:all/*; Johnson Controls Inc Metasys 15: <v15.0.1; Johnson Controls Inc Metasys 12: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-225-14" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-230-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-230-01" ;
    dcterms:issued "2026-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "CISA Malcolm" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-63134; CVE-2026-63133; CVE-2026-19670; CVE-2026-19671; CVE-2026-55676; CVE-2026-63177" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-770; CWE-409; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2026-19670,
        cve-res:CVE-2026-19671,
        cve-res:CVE-2026-55676,
        cve-res:CVE-2026-63133,
        cve-res:CVE-2026-63134,
        cve-res:CVE-2026-63177 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-409,
        cwe-res:CWE-434,
        cwe-res:CWE-770,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CISA Malcolm" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Malcolm <26.06.1 | Malcolm <26.07.0 | Malcolm <=26.07.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-230-01" ;
    icsa:vendor "CISA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-230-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-230-02" ;
    dcterms:issued "2026-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Simcenter Nastran" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Defense Industrial Base; Energy; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-59086" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2026-59086 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Simcenter Nastran" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Simcenter Nastran < V2606; Simcenter Femap < V2606" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-230-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-232-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-232-01" ;
    dcterms:issued "2026-08-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls Simplex Incident Manager" ;
    icsa:CVSSScore "5.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2026-27875" ;
    icsa:cweNumber "CWE-316" ;
    icsa:hasCVE cve-res:CVE-2026-27875 ;
    icsa:hasCWE cwe-res:CWE-316 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls Simplex Incident Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Johnson Controls Simplex Incident Manager: <=V2.01" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-232-01" ;
    icsa:vendor "Johnson Controls Inc." ;
    icsa:year 2026 .

icsa-res:ICSA-26-237-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-237-01" ;
    dcterms:issued "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rently Smart Home" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Communications; Information Technology" ;
    icsa:cveNumber "CVE-2026-75960" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2026-75960 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rently Smart Home" ;
    icsa:productDistribution "United States, India" ;
    icsa:productsAffected "Rently Smart Home: <=20.1.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-237-01" ;
    icsa:vendor "Rently" ;
    icsa:year 2026 .

icsa-res:ICSA-26-237-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-237-02" ;
    dcterms:issued "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Zoneminder" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-76060" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-76060 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Zoneminder" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Zoneminder Zoneminder: 1.37.48|1.38.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-237-02" ;
    icsa:vendor "Zoneminder" ;
    icsa:year 2026 .

icsa-res:ICSA-26-237-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-237-03" ;
    dcterms:issued "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMATIC IoT2050 Advanced" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-58115" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-58115 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMATIC IoT2050 Advanced" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) < V4.3.4.1 running Industrial OS with Node-RED installed" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-237-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-237-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-237-04" ;
    dcterms:issued "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "PayRange API" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-18965" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2026-18965 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PayRange API" ;
    icsa:productDistribution "United States, Canada" ;
    icsa:productsAffected "PayRange API: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-237-04" ;
    icsa:vendor "PayRange" ;
    icsa:year 2026 .

icsa-res:ICSA-26-237-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-237-05" ;
    dcterms:issued "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Bendix EC80 Brake ECU" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-68967; CVE-2026-71396; CVE-2026-67560" ;
    icsa:cweNumber "CWE-798; CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-67560,
        cve-res:CVE-2026-68967,
        cve-res:CVE-2026-71396 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Bendix EC80 Brake ECU" ;
    icsa:productDistribution "United States, Canada" ;
    icsa:productsAffected "Bendix EC80ESP+ 2nd CAN: Z228999; Bendix EC80ESP+ 6S/6M: Z228999; Bendix EC80ESP CAN Gateway: Z266494; Bendix EC80ESP+ PLC: Z228999; Bendix EC80ESP+ J1708: Z228999; Bendix EC80ESP 4S/4M: Z286098; Bendix EC80ESP 6S/6M: Z266494; Bendix EC80ESP 2nd CAN: Z266494; Bendix EC80ESP PLC: Z286098; Bendix EC80ESP+ Integrated TPMS: Z228999; Bendix EC80ESP PLC: Z266494" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-237-05" ;
    icsa:vendor "Bendix" ;
    icsa:year 2026 .

icsa-res:ICSA-26-237-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-237-06" ;
    dcterms:issued "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ebyte NE2-D11" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-75814; CVE-2026-73809; CVE-2026-76940; CVE-2026-69658; CVE-2026-76179; CVE-2026-73839; CVE-2026-75548; CVE-2026-75813; CVE-2026-73125; CVE-2026-71187; CVE-2026-76945" ;
    icsa:cweNumber "CWE-352; CWE-862; CWE-307; CWE-306; CWE-603; CWE-598; CWE-319; CWE-1021; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2026-69658,
        cve-res:CVE-2026-71187,
        cve-res:CVE-2026-73125,
        cve-res:CVE-2026-73809,
        cve-res:CVE-2026-73839,
        cve-res:CVE-2026-75548,
        cve-res:CVE-2026-75813,
        cve-res:CVE-2026-75814,
        cve-res:CVE-2026-76179,
        cve-res:CVE-2026-76940,
        cve-res:CVE-2026-76945 ;
    icsa:hasCWE cwe-res:CWE-1021,
        cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-319,
        cwe-res:CWE-352,
        cwe-res:CWE-522,
        cwe-res:CWE-598,
        cwe-res:CWE-603,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ebyte NE2-D11" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ebyte NE2-D11 Firmware: FW-9167-0-11" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-237-06" ;
    icsa:vendor "Ebyte" ;
    icsa:year 2026 .

icsa-res:ICSA-26-237-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-237-07" ;
    dcterms:issued "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "FURUNO FA-50 Class B AIS Transponder" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-59769; CVE-2026-67578" ;
    icsa:cweNumber "CWE-306; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-59769,
        cve-res:CVE-2026-67578 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FURUNO FA-50 Class B AIS Transponder" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FURUNO FA-50 Class B AIS Transponder: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-237-07" ;
    icsa:vendor "FURUNO ELECTRIC CO.,LTD." ;
    icsa:year 2026 .

icsa-res:ICSA-26-239-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-239-01" ;
    dcterms:issued "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Xiiaozet LK100W" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-78239; CVE-2026-78037; CVE-2026-76943" ;
    icsa:cweNumber "CWE-306; CWE-78; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2026-76943,
        cve-res:CVE-2026-78037,
        cve-res:CVE-2026-78239 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-306,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Xiiaozet LK100W" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "LK100W <2.1.240" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-239-01" ;
    icsa:vendor "Xiiaozet" ;
    icsa:year 2026 .

icsa-res:ICSA-26-239-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-239-02" ;
    dcterms:issued "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "All-Line Equipment Company Fuel-Boss" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Defense Industrial Base; Emergency Services; Transportation Systems" ;
    icsa:cveNumber "CVE-2019-11043; CVE-2018-19518" ;
    icsa:cweNumber "CWE-88; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2018-19518,
        cve-res:CVE-2019-11043 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "All-Line Equipment Company Fuel-Boss" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Fuel-Boss V1 Standard >=|<=PHP_7.1.5_7.1.5 | Fuel-Boss V1 Portal >=|<=PHP_7.1.5_7.1.5 | Fuel-Boss V1 Master/Slave >=|<=PHP_7.1.5_7.1.5 | Fuel-Boss V1 Backflush Systems >=|<=PHP_7.1.5_7.1.5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-239-02" ;
    icsa:vendor "All-Line Equipment Company" ;
    icsa:year 2026 .

icsa-res:ICSA-26-239-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-239-03" ;
    dcterms:issued "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation OTTO Fleet Manager" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-75112" ;
    icsa:cweNumber "CWE-916" ;
    icsa:hasCVE cve-res:CVE-2026-75112 ;
    icsa:hasCWE cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation OTTO Fleet Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OTTO Fleet Manager <=V2.36.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-239-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-239-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-239-04" ;
    dcterms:issued "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Applied Systems Engineering ASE2000 V2 Communications Test Set" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-18717; CVE-2018-1285" ;
    icsa:cweNumber "CWE-295; CWE-611" ;
    icsa:hasCVE cve-res:CVE-2018-1285,
        cve-res:CVE-2026-18717 ;
    icsa:hasCWE cwe-res:CWE-295,
        cwe-res:CWE-611 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Applied Systems Engineering ASE2000 V2 Communications Test Set" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ASE2000 >=2.25|<=2.37" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-239-04" ;
    icsa:vendor "Applied Systems Engineering" ;
    icsa:year 2026 .

icsa-res:ICSA-26-239-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-239-05" ;
    dcterms:issued "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ebyte NA111-M" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-75814; CVE-2026-76940; CVE-2026-73809; CVE-2026-69658; CVE-2026-73819; CVE-2026-76179; CVE-2026-77966; CVE-2026-76133; CVE-2026-77977; CVE-2026-75548; CVE-2026-77975; CVE-2026-73125; CVE-2026-71187" ;
    icsa:cweNumber "CWE-352; CWE-862; CWE-307; CWE-306; CWE-327; CWE-603; CWE-1390; CWE-312; CWE-598; CWE-319; CWE-1021" ;
    icsa:hasCVE cve-res:CVE-2026-69658,
        cve-res:CVE-2026-71187,
        cve-res:CVE-2026-73125,
        cve-res:CVE-2026-73809,
        cve-res:CVE-2026-73819,
        cve-res:CVE-2026-75548,
        cve-res:CVE-2026-75814,
        cve-res:CVE-2026-76133,
        cve-res:CVE-2026-76179,
        cve-res:CVE-2026-76940,
        cve-res:CVE-2026-77966,
        cve-res:CVE-2026-77975,
        cve-res:CVE-2026-77977 ;
    icsa:hasCWE cwe-res:CWE-1021,
        cwe-res:CWE-1390,
        cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-312,
        cwe-res:CWE-319,
        cwe-res:CWE-327,
        cwe-res:CWE-352,
        cwe-res:CWE-598,
        cwe-res:CWE-603,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ebyte NA111-M" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "NA111-M Firmware 9013-2-17" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-239-05" ;
    icsa:vendor "Ebyte" ;
    icsa:year 2026 .

icsa-res:ICSA-26-244-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-244-01" ;
    dcterms:issued "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation RSLinx Classic" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-9624; CVE-2026-9621; CVE-2026-9622; CVE-2026-9625" ;
    icsa:cweNumber "CWE-190; CWE-191; CWE-120" ;
    icsa:hasCVE cve-res:CVE-2026-9621,
        cve-res:CVE-2026-9622,
        cve-res:CVE-2026-9624,
        cve-res:CVE-2026-9625 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-190,
        cwe-res:CWE-191 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation RSLinx Classic" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RSLinx Classic <=4.50" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-244-01" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-244-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-244-02" ;
    dcterms:issued "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Redundancy Module Configuration Tool" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-9633; CVE-2026-9634" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2026-9633,
        cve-res:CVE-2026-9634 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Redundancy Module Configuration Tool" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Redundancy Module Configuration Tool 10.00.00 | Redundancy Module Configuration Tool >=9.00.00|<=10.00.00" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-244-02" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-244-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-244-03" ;
    dcterms:issued "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Logix Platform" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-9637" ;
    icsa:cweNumber "CWE-119" ;
    icsa:hasCVE cve-res:CVE-2026-9637 ;
    icsa:hasCWE cwe-res:CWE-119 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Logix Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "V34.011-V34.014; V35.011-V35.013; ControlLogix 5580 <=V33; V36.011-V36.012; V36.011-V36.012 | GuardLogix 5580 <=V33; V36.011-V36.012 | CompactLogix 5380 <=V33; V36.011-V36.012 | Compact GuardLogix 5380 <=V33" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-244-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-244-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-244-04" ;
    dcterms:issued "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation FactoryTalk Activation Manager" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-16675" ;
    icsa:cweNumber "CWE-307" ;
    icsa:hasCVE cve-res:CVE-2026-16675 ;
    icsa:hasCWE cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation FactoryTalk Activation Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FactoryTalk Activation Manager V5.02_and_below" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-244-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-244-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-244-05" ;
    dcterms:issued "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2021-42260" ;
    icsa:cweNumber "CWE-835" ;
    icsa:hasCVE cve-res:CVE-2021-42260 ;
    icsa:hasCWE cwe-res:CWE-835 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "<35.014; <37.011 | CompactLogix 5380 <34.015; <37.011 | GuardLogix 5580 <34.015; <37.011 | Compact GuardLogix 5380 <34.015; <37.011 | CompactLogix 5480 <34.015; ControlLogix 5580 <34.015; <36.013; <37.011" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-244-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-244-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-244-06" ;
    dcterms:issued "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation Historian ME" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Critical Manufacturing; Food and Agriculture; Healthcare and Public Health; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-12661; CVE-2025-12768" ;
    icsa:cweNumber "CWE-121; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-12768,
        cve-res:CVE-2026-12661 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation Historian ME" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Series B 5.202 | Series C 7.101" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-244-06" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-246-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-246-01" ;
    dcterms:issued "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "OPC Foundation OPC UA LocalDiscoveryServer (LDS)" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Chemical; Energy; Food and Agriculture; Water and Wastewater Systems; Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-77477" ;
    icsa:cweNumber "CWE-250" ;
    icsa:hasCVE cve-res:CVE-2026-77477 ;
    icsa:hasCWE cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OPC Foundation OPC UA LocalDiscoveryServer (LDS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "UA-LDS-Installers <1.04.420" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-246-01" ;
    icsa:vendor "OPC Foundation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-246-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-246-02" ;
    dcterms:issued "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "IXON VPN Client" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Information Technology; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-75925" ;
    icsa:cweNumber "CWE-93" ;
    icsa:hasCVE cve-res:CVE-2026-75925 ;
    icsa:hasCWE cwe-res:CWE-93 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IXON VPN Client" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "VPN Client <1.4.7" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-246-02" ;
    icsa:vendor "IXON" ;
    icsa:year 2026 .

icsa-res:ICSA-26-246-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-246-03" ;
    dcterms:issued "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ControlFLASH" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-12663" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-12663 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation ControlFLASH" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ControlFLASH <=V15.07" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-246-03" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-246-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-246-04" ;
    dcterms:issued "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation ArmorStart LT" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-19471; CVE-2026-19472" ;
    icsa:cweNumber "CWE-79; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2026-19471,
        cve-res:CVE-2026-19472 ;
    icsa:hasCWE cwe-res:CWE-770,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation ArmorStart LT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ArmorStart LT <=v2.001" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-246-04" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-246-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-246-05" ;
    dcterms:issued "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Rockwell Automation 1756-ENBT Module" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-10478" ;
    icsa:cweNumber "CWE-754" ;
    icsa:hasCVE cve-res:CVE-2025-10478 ;
    icsa:hasCWE cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Rockwell Automation 1756-ENBT Module" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "1756-ENBT module" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-246-05" ;
    icsa:vendor "Rockwell Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-246-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-246-06" ;
    dcterms:issued "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Inductive Automation Ignition" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2026-77393" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2026-77393 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Inductive Automation Ignition" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ignition <=8.1.53" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-246-06" ;
    icsa:vendor "Inductive Automation" ;
    icsa:year 2026 .

icsa-res:ICSA-26-246-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-246-07" ;
    dcterms:issued "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pyramid Solutions NetStaX EtherNet/IP Stack" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems; Chemical" ;
    icsa:cveNumber "CVE-2026-78012" ;
    icsa:cweNumber "CWE-121" ;
    icsa:hasCVE cve-res:CVE-2026-78012 ;
    icsa:hasCWE cwe-res:CWE-121 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pyramid Solutions NetStaX EtherNet/IP Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EtherNet/IP Adapter DLL Kit (EIPA) | EtherNet/IP Adapter DLL Kit with CIP Security (EIPA-SECURE) | EtherNet/IP Adapter Development Kit (EADK) | EtherNet/IP Adapter Development Kit with CIP Security (EADK-SECURE) | EtherNet/IP Scanner DLL Kit (EIPS) | EtherNet/IP Scanner DLL Kit with CIP Security (EIPS-SECURE) | EtherNet/IP Scanner Development Kit (ESDK) | EtherNet/IP Scanner Development Kit with CIP Security (ESDK-SECURE)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-246-07" ;
    icsa:vendor "Pyramid Solutions" ;
    icsa:year 2026 .

icsa-res:ICSA-26-246-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-246-08" ;
    dcterms:issued "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Tycon Systems TPDIN-Monitor-WEB3" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-77847; CVE-2026-82712; CVE-2026-82684" ;
    icsa:cweNumber "CWE-798; CWE-352; CWE-862" ;
    icsa:hasCVE cve-res:CVE-2026-77847,
        cve-res:CVE-2026-82684,
        cve-res:CVE-2026-82712 ;
    icsa:hasCWE cwe-res:CWE-352,
        cwe-res:CWE-798,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tycon Systems TPDIN-Monitor-WEB3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "TPDIN-Monitor-WEB3 <=2.2.9" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-246-08" ;
    icsa:vendor "Tycon Systems" ;
    icsa:year 2026 .

icsa-res:ICSA-26-251-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-251-01" ;
    dcterms:issued "2026-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "CareCam Pro IP Cameras" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-85083" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-85083 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CareCam Pro IP Cameras" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ANJIA AJL33PC0801 Firmware linux_linux_202008261138_svn13796_/_Bootloader_U-Boot_2010.06_compiled_2020-08-26" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-251-01" ;
    icsa:vendor "CareCam" ;
    icsa:year 2026 .

icsa-res:ICSA-26-253-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-253-01" ;
    dcterms:issued "2026-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "AVEVA Pipeline Integrity Monitor" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-81823; CVE-2026-81822; CVE-2026-81821; CVE-2026-81824" ;
    icsa:cweNumber "CWE-79; CWE-862; CWE-327; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2026-81821,
        cve-res:CVE-2026-81822,
        cve-res:CVE-2026-81823,
        cve-res:CVE-2026-81824 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-327,
        cwe-res:CWE-79,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "AVEVA Pipeline Integrity Monitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "AVEVA Pipeline Integrity Monitor <=2025_SP1_P1_build_7.1.9580.8513" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-253-01" ;
    icsa:vendor "AVEVA" ;
    icsa:year 2026 .

icsa-res:ICSA-26-258-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-258-01" ;
    dcterms:issued "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Digital Watchdog VMAX DVR and NVR Product Lineups" ;
    icsa:CVSSScore "9.6"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Government Facilities; Healthcare and Public Health; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-66890; CVE-2026-66372; CVE-2026-68953; CVE-2026-68070; CVE-2026-66887; CVE-2026-68950" ;
    icsa:cweNumber "CWE-306; CWE-862; CWE-798; CWE-337" ;
    icsa:hasCVE cve-res:CVE-2026-66372,
        cve-res:CVE-2026-66887,
        cve-res:CVE-2026-66890,
        cve-res:CVE-2026-68070,
        cve-res:CVE-2026-68950,
        cve-res:CVE-2026-68953 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-337,
        cwe-res:CWE-798,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Digital Watchdog VMAX DVR and NVR Product Lineups" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "VMAX A1 G4 DVRs | VMAX IP G4 NVRs | VMAX A1 PLUS | VA1G4 Recorder | VG4 Recorder" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-258-01" ;
    icsa:vendor "Digital Watchdog" ;
    icsa:year 2026 .

icsa-res:ICSA-26-258-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-258-02" ;
    dcterms:issued "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Wärtsilä FOS-Onboard (Update A)" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Finland" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-81855; CVE-2026-78225" ;
    icsa:cweNumber "CWE-321" ;
    icsa:hasCVE cve-res:CVE-2026-78225,
        cve-res:CVE-2026-81855 ;
    icsa:hasCWE cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Wärtsilä FOS-Onboard (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "FOS-Onboard 5.07.0923.01" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-258-02" ;
    icsa:vendor "Wärtsilä" ;
    icsa:year 2026 .

icsa-res:ICSA-26-258-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-258-03" ;
    dcterms:issued "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "mySCADA myPRO Manager" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Czechia" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Food and Agriculture; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-73807; CVE-2026-82567" ;
    icsa:cweNumber "CWE-306; CWE-862" ;
    icsa:hasCVE cve-res:CVE-2026-73807,
        cve-res:CVE-2026-82567 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mySCADA myPRO Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "mySCADA myPRO Manager <=2.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-258-03" ;
    icsa:vendor "mySCADA Technologies" ;
    icsa:year 2026 .

icsa-res:ICSA-26-258-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-258-04" ;
    dcterms:issued "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric SCADAPack x70 Products" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy" ;
    icsa:cveNumber "CVE-2026-81861" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2026-81861 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric SCADAPack x70 Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SCADAPack 47x | SCADAPack 47xi | SCADAPack 47xd | SCADAPack 470R | SCADAPack 57x | SCADAPack 3xx | SCADAPack 32" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-258-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-258-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-258-05" ;
    dcterms:issued "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Reyrolle 7SR5" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-62653; CVE-2024-42386; CVE-2026-62645; CVE-2026-62649; CVE-2024-42392; CVE-2024-42384; CVE-2026-62646; CVE-2026-62650; CVE-2024-42391; CVE-2026-62654; CVE-2026-62647; CVE-2024-42385; CVE-2026-62648; CVE-2026-62652" ;
    icsa:cweNumber "CWE-494; CWE-770; CWE-306; CWE-787; CWE-215; CWE-20; CWE-190; CWE-823; CWE-288; CWE-140; CWE-331" ;
    icsa:hasCVE cve-res:CVE-2024-42384,
        cve-res:CVE-2024-42385,
        cve-res:CVE-2024-42386,
        cve-res:CVE-2024-42391,
        cve-res:CVE-2024-42392,
        cve-res:CVE-2026-62645,
        cve-res:CVE-2026-62646,
        cve-res:CVE-2026-62647,
        cve-res:CVE-2026-62648,
        cve-res:CVE-2026-62649,
        cve-res:CVE-2026-62650,
        cve-res:CVE-2026-62652,
        cve-res:CVE-2026-62653,
        cve-res:CVE-2026-62654 ;
    icsa:hasCWE cwe-res:CWE-140,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-215,
        cwe-res:CWE-288,
        cwe-res:CWE-306,
        cwe-res:CWE-331,
        cwe-res:CWE-494,
        cwe-res:CWE-770,
        cwe-res:CWE-787,
        cwe-res:CWE-823 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Reyrolle 7SR5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Reyrolle 7SR5" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-258-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-258-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-258-06" ;
    dcterms:issued "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Mendix SAML" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2026-80465" ;
    icsa:cweNumber "CWE-347" ;
    icsa:hasCVE cve-res:CVE-2026-80465 ;
    icsa:hasCWE cwe-res:CWE-347 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Mendix SAML" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mendix SAML (Mendix 10 compatible) | Mendix SAML (Mendix 11 compatible) | Mendix SAML (Mendix 9.24 compatible)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-258-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-258-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-258-07" ;
    dcterms:issued "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Teamcenter" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2026-58113" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2026-58113 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Teamcenter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Teamcenter V2412 | Teamcenter V2506 | Teamcenter V2512 | Teamcenter V2606" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-258-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-258-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-258-08" ;
    dcterms:issued "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "CareCam CM2507" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-85478; CVE-2026-88259; CVE-2026-81305; CVE-2026-85497; CVE-2026-84400; CVE-2026-81321; CVE-2026-84398" ;
    icsa:cweNumber "CWE-258; CWE-306; CWE-829; CWE-916; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2026-81305,
        cve-res:CVE-2026-81321,
        cve-res:CVE-2026-84398,
        cve-res:CVE-2026-84400,
        cve-res:CVE-2026-85478,
        cve-res:CVE-2026-85497,
        cve-res:CVE-2026-88259 ;
    icsa:hasCWE cwe-res:CWE-258,
        cwe-res:CWE-306,
        cwe-res:CWE-312,
        cwe-res:CWE-829,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CareCam CM2507" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "HMT.CM2507 Firmware v251211.1507" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-258-08" ;
    icsa:vendor "CareCam" ;
    icsa:year 2026 .

icsa-res:ICSA-26-260-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-260-01" ;
    dcterms:issued "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Bransys ELD" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-86520; CVE-2026-77960; CVE-2026-86689" ;
    icsa:cweNumber "CWE-798; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2026-77960,
        cve-res:CVE-2026-86520,
        cve-res:CVE-2026-86689 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Bransys ELD" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "Android <11.00.00 | iOS <1.1.54" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-260-01" ;
    icsa:vendor "Bransys" ;
    icsa:year 2026 .

icsa-res:ICSA-26-260-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-260-02" ;
    dcterms:issued "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mitsubishi Electric GX Works3 and Motion Control Settings" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-15688" ;
    icsa:cweNumber "CWE-303" ;
    icsa:hasCVE cve-res:CVE-2026-15688 ;
    icsa:hasCWE cwe-res:CWE-303 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mitsubishi Electric GX Works3 and Motion Control Settings" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mitsubishi Electric GX Works3 | Mitsubishi Electric Motion Control Settings (Software packaged with GX Works3)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-260-02" ;
    icsa:vendor "Mitsubishi Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-260-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-260-03" ;
    dcterms:issued "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hitachi Energy FACTS Control Platform (FCP)" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2024-7940; CVE-2024-3982; CVE-2024-3980; CVE-2024-4872; CVE-2024-7941" ;
    icsa:cweNumber "CWE-22; CWE-306; CWE-294; CWE-943; CWE-601" ;
    icsa:hasCVE cve-res:CVE-2024-3980,
        cve-res:CVE-2024-3982,
        cve-res:CVE-2024-4872,
        cve-res:CVE-2024-7940,
        cve-res:CVE-2024-7941 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-294,
        cwe-res:CWE-306,
        cwe-res:CWE-601,
        cwe-res:CWE-943 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hitachi Energy FACTS Control Platform (FCP)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "4.0.0; 3.14.0; 3.10.0; 3.15.0; 4.0.1; FACTS Control Platform (FCP) 3.4.0; 3.12.0; 3.8.0; 3.7.0; 4.1.0; 4.1.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-260-03" ;
    icsa:vendor "Hitachi Energy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-260-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-260-04" ;
    dcterms:issued "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric Modicon M340 Controller and Communication Modules" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Chemical; Commercial Facilities; Critical Manufacturing; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2025-6625" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2025-6625 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric Modicon M340 Controller and Communication Modules" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Schneider Electric Ethernet/Serial RTU Module: | Schneider Electric M580 Global Data module: | Schneider Electric Ethernet / Serial RTU Module: | Schneider Electric Modbus/TCP Ethernet Modicon M340 module: | Schneider Electric Modbus/TCP Ethernet Modicon M340 FactoryCast module: | Schneider Electric Modicon M340 Firmware Versions prior to SV3.70 installed on Modicon M340 Controller: All versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-260-04" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-260-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-260-05" ;
    dcterms:issued "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric NetBotz 5 750/755" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Information Technology" ;
    icsa:cveNumber "CVE-2026-13337; CVE-2026-13336" ;
    icsa:cweNumber "CWE-564; CWE-78" ;
    icsa:hasCVE cve-res:CVE-2026-13336,
        cve-res:CVE-2026-13337 ;
    icsa:hasCWE cwe-res:CWE-564,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric NetBotz 5 750/755" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "NetBotz 5 750 | NetBotz 5 755" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-260-05" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-260-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-260-06" ;
    dcterms:issued "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Ability Edgenius" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems; Chemical" ;
    icsa:cveNumber "CVE-2026-31431" ;
    icsa:cweNumber "CWE-669" ;
    icsa:hasCVE cve-res:CVE-2026-31431 ;
    icsa:hasCWE cwe-res:CWE-669 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Ability Edgenius" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Ability Edgenius >=3.2.0.0|<3.2.4.1; 3.2.4.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-260-06" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-260-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-260-07" ;
    dcterms:issued "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Schneider Electric PowerChute Serial Shutdown" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "France" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Critical Manufacturing; Energy; Information Technology" ;
    icsa:cveNumber "CVE-2026-13348" ;
    icsa:cweNumber "CWE-307" ;
    icsa:hasCVE cve-res:CVE-2026-13348 ;
    icsa:hasCWE cwe-res:CWE-307 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Schneider Electric PowerChute Serial Shutdown" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "PowerChute Serial Shutdown 1.6" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-260-07" ;
    icsa:vendor "Schneider Electric" ;
    icsa:year 2026 .

icsa-res:ICSA-26-265-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-265-01" ;
    dcterms:issued "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "lwIP TCP/IP Stack MQTT Client Application" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Energy; Financial Services; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-87121" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-87121 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "lwIP TCP/IP Stack MQTT Client Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MQTT Client Application >=2.0.1|<=2.2.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-265-01" ;
    icsa:vendor "lwIP" ;
    icsa:year 2026 .

icsa-res:ICSA-26-265-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-265-02" ;
    dcterms:issued "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "lwIP (Lightweight IP)" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Chemical; Communications; Critical Manufacturing; Energy; Financial Services; Healthcare and Public Health; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-91018" ;
    icsa:cweNumber "CWE-415" ;
    icsa:hasCVE cve-res:CVE-2026-91018 ;
    icsa:hasCWE cwe-res:CWE-415 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "lwIP (Lightweight IP)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "API >=2.0.1|<=2.2.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-265-02" ;
    icsa:vendor "lwIP" ;
    icsa:year 2026 .

icsa-res:ICSA-26-265-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-265-03" ;
    dcterms:issued "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Siveillance Control" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Communications; Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-50093" ;
    icsa:cweNumber "CWE-434" ;
    icsa:hasCVE cve-res:CVE-2026-50093 ;
    icsa:hasCWE cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Siveillance Control" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Siveillance Control Pro V3.0 | Siveillance Control Pro V4.0 | Siveillance Control V3.0 | Siveillance Control V4.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-265-03" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-265-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-265-04" ;
    dcterms:issued "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIPLUS and SIMATIC Products" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Water and Wastewater Systems; Chemical; Food and Agriculture; Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-31431" ;
    icsa:cweNumber "CWE-669" ;
    icsa:hasCVE cve-res:CVE-2026-31431 ;
    icsa:hasCWE cwe-res:CWE-669 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIPLUS and SIMATIC Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "round tube) and extension unit (6AV2128-3UB27-0BX0) | SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable; flange on top) (6AV2128-3MB57-0AX0) | SIMATIC HMI MTP1200 Unified Basic (6AV2123-3MB32-0AW0) | SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1) | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0) | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0) | SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1) | SIMATIC HMI MTP1500 Comfort Pro for stand (expandable; flange at the bottom) (6AV2128-3MB27-1BX0) | SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable; flange on top) (6AV2128-3MB27-0AX0) | SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable; flange at the bottom) (6AV2128-3MB57-1BX0) | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable; round tube) and extension (6AV2128-3XB57-0BX0) | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable; flange at the bottom) (6AV2128-3QB27-1BX0) | SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable; flange at the bottom) (6AV2128-3UB57-1BX0) | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable; flange at the bottom) (6AV2128-3XB27-1BX0) | SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable; round tube) and extension unit (6AV2128-3MB27-0BX0) | SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable; round tube) and extension (6AV2128-3UB57-0BX0) | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable; flange on top) (6AV2128-3XB57-0AX0) | SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0) | SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0) | SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1) | SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1) | SIMATIC HMI MTP400 Unified Basic (6AV2123-3DB32-0AW0) | SIMATIC HMI MTP700 Unified Basic (6AV2123-3GB32-0AW0) | SIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1) | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0) | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0) | SIMATIC HMI MTP700; flange on top) (6AV2128-3QB27-0AX0) | SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable; flange on top) (6AV2128-3UB27-0AX0) | SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable; flange at the bottom) (6AV2128-3XB57-1BX0) | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable; flange at the bottom) (6AV2128-3UB27-1BX0) | SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable; round tube) and extension (6AV2128-3MB57-0BX0) | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable; Unified Comfort Panel neutral (6AV2128-3KB36-0AX1) | SIMATIC HMI MTP1200 Comfort Pro for stand (expandable; flange at the bottom) (6AV2128-3QB57-1BX0) | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable; round tube) and extension unit (6AV2128-3XB27-0BX0) | SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable; round tube) and extension unit (6AV2128-3QB27-0BX0) | SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable; SIMATIC AX Runtime Core Linux Common Debian | SIMATIC AX Runtime Core Linux Common Debian arm64 | SIMATIC AX Runtime Core Linux Platform Container Common Debian Development | SIMATIC AX Runtime Core Linux VMWare Development | SIMATIC CN 4100 | SIMATIC HMI MTP1000 Unified Basic (6AV2123-3KB32-0AW0) | SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) | SIMATIC HMI MTP1000; flange on top) (6AV2128-3QB57-0AX0) | SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1) | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0) | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0) | SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1) | SIMATIC HMI MTP1900 Comfort Pro for stand (expandable; flange on top) (6AV2128-3XB27-0AX0) | SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable; flange on top) (6AV2128-3UB57-0AX0) | SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1) | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0) | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0) | SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1) | SIMATIC HMI MTP2200 Comfort Pro for stand (expandable; Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1) | SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) | SIMATIC IPC Industrial Edge Device OS (IED-OS) | SIMATIC S7-1500 TM MFP (6ES7558-1AA00-0AB0) | SIPLUS HMI MTP1000 Unified Basic (6AG1123-3KB32-2AW0) | SIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1) | SIPLUS HMI MTP1200 Unified Basic (6AG1123-3MB32-2AW0) | SIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1) | SIPLUS HMI MTP400 Unified Basic (6AG1123-3DB32-2AW0) | SIPLUS HMI MTP700 Unified Basic (6AG1123-3GB32-2AW0) | SIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1); round tube) and extension (6AV2128-3QB57-0BX0) | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-265-04" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-265-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-265-05" ;
    dcterms:issued "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Desigo CC family" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-34223" ;
    icsa:cweNumber "CWE-94" ;
    icsa:hasCVE cve-res:CVE-2026-34223 ;
    icsa:hasCWE cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Desigo CC family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Desigo CC family V6 | Desigo CC family V7" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-265-05" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-265-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-265-06" ;
    dcterms:issued "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Industrial Edge Management" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-18963" ;
    icsa:cweNumber "CWE-640" ;
    icsa:hasCVE cve-res:CVE-2026-18963 ;
    icsa:hasCWE cwe-res:CWE-640 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens Industrial Edge Management" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Industrial Edge Management Cloud | Industrial Edge Management Pro V1 |<1.15.20 | Industrial Edge Management Pro V2 |<2.2.2 | Industrial Edge Management Virtual |<2.9.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-265-06" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-265-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-265-07" ;
    dcterms:issued "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens SIMOVE Fleetmanager and SIPLANT" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing" ;
    icsa:cveNumber "CVE-2026-67367" ;
    icsa:cweNumber "CWE-23" ;
    icsa:hasCVE cve-res:CVE-2026-67367 ;
    icsa:hasCWE cwe-res:CWE-23 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens SIMOVE Fleetmanager and SIPLANT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "SIMOVE Fleetmanager V3.1 | SIMOVE Fleetmanager V3.2 | SIMOVE Fleetmanager V3.3 | SIMOVE Fleetmanager V4.0 | SIPLANT V1.7 | SIPLANT V2.2 | SIPLANT V3.0 | SIPLANT V3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-265-07" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-265-08 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-265-08" ;
    dcterms:issued "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens WTV676 and WTV776" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-89207" ;
    icsa:cweNumber "CWE-1287" ;
    icsa:hasCVE cve-res:CVE-2026-89207 ;
    icsa:hasCWE cwe-res:CWE-1287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Siemens WTV676 and WTV776" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "WTV676-HB6035 Web Interface | WTV776-HB6035 Web Interface" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-265-08" ;
    icsa:vendor "Siemens" ;
    icsa:year 2026 .

icsa-res:ICSA-26-265-09 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-265-09" ;
    dcterms:issued "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "OpenPLC Runtime v3" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Energy; Transportation Systems; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-88020" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2026-88020 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenPLC Runtime v3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OpenPLC 3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-265-09" ;
    icsa:vendor "Autonomy Logic" ;
    icsa:year 2026 .

icsa-res:ICSA-26-267-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-267-01" ;
    dcterms:issued "2026-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Botslab G980H Dashcams" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-82716; CVE-2026-87118; CVE-2026-88761; CVE-2026-84403; CVE-2026-77967; CVE-2026-75558; CVE-2026-82708; CVE-2026-88956; CVE-2026-79959; CVE-2026-82585; CVE-2026-84399; CVE-2026-81630; CVE-2026-82566; CVE-2026-85496" ;
    icsa:cweNumber "CWE-798; CWE-22; CWE-1391; CWE-306; CWE-321; CWE-787; CWE-613; CWE-294; CWE-532; CWE-345; CWE-319; CWE-340; CWE-863" ;
    icsa:hasCVE cve-res:CVE-2026-75558,
        cve-res:CVE-2026-77967,
        cve-res:CVE-2026-79959,
        cve-res:CVE-2026-81630,
        cve-res:CVE-2026-82566,
        cve-res:CVE-2026-82585,
        cve-res:CVE-2026-82708,
        cve-res:CVE-2026-82716,
        cve-res:CVE-2026-84399,
        cve-res:CVE-2026-84403,
        cve-res:CVE-2026-85496,
        cve-res:CVE-2026-87118,
        cve-res:CVE-2026-88761,
        cve-res:CVE-2026-88956 ;
    icsa:hasCWE cwe-res:CWE-1391,
        cwe-res:CWE-22,
        cwe-res:CWE-294,
        cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-321,
        cwe-res:CWE-340,
        cwe-res:CWE-345,
        cwe-res:CWE-532,
        cwe-res:CWE-613,
        cwe-res:CWE-787,
        cwe-res:CWE-798,
        cwe-res:CWE-863 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Botslab G980H Dashcams" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "G980H dash cam series 30010_QHG980HN5294SysFW+ | G980H dash cam series 58_QHG980HMCN5291SysFW+" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-267-01" ;
    icsa:vendor "Botslab" ;
    icsa:year 2026 .

icsa-res:ICSA-26-267-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-267-02" ;
    dcterms:issued "2026-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eufy Omni C20, Omni X10 Pro" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Information Technology" ;
    icsa:cveNumber "CVE-2026-93289; CVE-2026-93291; CVE-2026-93290" ;
    icsa:cweNumber "CWE-295; CWE-78; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-93289,
        cve-res:CVE-2026-93290,
        cve-res:CVE-2026-93291 ;
    icsa:hasCWE cwe-res:CWE-295,
        cwe-res:CWE-78,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Eufy Omni C20, Omni X10 Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Omni C20 <1.6.4 | Omni X10 Pro <1.6.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-267-02" ;
    icsa:vendor "Eufy" ;
    icsa:year 2026 .

icsa-res:ICSA-26-272-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-272-01" ;
    dcterms:issued "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Lantronix G520 Series Cellular Gateway" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Transportation Systems; Energy; Water and Wastewater Systems" ;
    icsa:cveNumber "CVE-2026-91191; CVE-2026-84409" ;
    icsa:cweNumber "CWE-79; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2026-84409,
        cve-res:CVE-2026-91191 ;
    icsa:hasCWE cwe-res:CWE-347,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Lantronix G520 Series Cellular Gateway" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "G520 Series 2.6.0.4R6_stable" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-272-01" ;
    icsa:vendor "Lantronix" ;
    icsa:year 2026 .

icsa-res:ICSA-26-272-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-272-02" ;
    dcterms:issued "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Toptech TMS7 and TopHAT" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Energy; Chemical; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-68068; CVE-2026-70356; CVE-2026-71189; CVE-2026-69662; CVE-2026-72507; CVE-2026-68954; CVE-2026-63713; CVE-2026-71302; CVE-2026-71379; CVE-2026-72510" ;
    icsa:cweNumber "CWE-434; CWE-89; CWE-552; CWE-79; CWE-95; CWE-384" ;
    icsa:hasCVE cve-res:CVE-2026-63713,
        cve-res:CVE-2026-68068,
        cve-res:CVE-2026-68954,
        cve-res:CVE-2026-69662,
        cve-res:CVE-2026-70356,
        cve-res:CVE-2026-71189,
        cve-res:CVE-2026-71302,
        cve-res:CVE-2026-71379,
        cve-res:CVE-2026-72507,
        cve-res:CVE-2026-72510 ;
    icsa:hasCWE cwe-res:CWE-384,
        cwe-res:CWE-434,
        cwe-res:CWE-552,
        cwe-res:CWE-79,
        cwe-res:CWE-89,
        cwe-res:CWE-95 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Toptech TMS7 and TopHAT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "TMS7 7.6.3 | TopHAT 7.6.3" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-272-02" ;
    icsa:vendor "Toptech Systems" ;
    icsa:year 2026 .

icsa-res:ICSA-26-272-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-272-03" ;
    dcterms:issued "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "VIVOTEK Camera Firmware" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Taiwan" ;
    icsa:criticalInfrastructureSector "Government Facilities; Transportation Systems; Commercial Facilities; Energy; Critical Manufacturing; Financial Services" ;
    icsa:cveNumber "CVE-2026-22755" ;
    icsa:cweNumber "CWE-77" ;
    icsa:hasCVE cve-res:CVE-2026-22755 ;
    icsa:hasCWE cwe-res:CWE-77 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "VIVOTEK Camera Firmware" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "V Series model_FD9187 | V Series model_FD9189 | V Series model_FD9365 | V Series model_FD9387 | V Series model_FD9389 | V Series model_FD9391 | C Series model_FE9180 | V Series model_FE9191 | V Series model_FE9382 | V Series model_FE9391 | V Series model_IB9365 | V Series model_IB9387 | V Series model_IB9389 | V Series model_IB939 | V Series model_IP9165 | V Series model_IP9171 | S Series model_IP9172 | V Series model_IP9181 | V Series model_IP9191 | V Series model_IT9389 | V Series model_MA9321 | V Series model_MA9322 | S Series model_MS9321 | V Series model_MS9390 | S Series model_TB9330 | Dome model_FD8365 | Dome model_FD8365v2 | Dome model_FD9165 | Dome model_FD9171 | Dome model_FD9371 | Dome model_FD9381 | Panoramic model_FE9181 | Panoramic model_FE9381 | VIVOTEK Camera model_FE9582 | VIVOTEK Camera model_IB93587LPR | Bullet model_IB9371 | Bullet model_IB9381" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-272-03" ;
    icsa:vendor "VIVOTEK" ;
    icsa:year 2026 .

icsa-res:ICSA-26-272-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-272-04" ;
    dcterms:issued "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baicells Nova 430H" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Information Technology" ;
    icsa:cveNumber "CVE-2026-96274" ;
    icsa:cweNumber "CWE-248" ;
    icsa:hasCVE cve-res:CVE-2026-96274 ;
    icsa:hasCWE cwe-res:CWE-248 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Baicells Nova 430H" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Nova 430H eNodeB (model pBS3101SH) <=BaiBLQ_3.0.12" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-272-04" ;
    icsa:vendor "Baicells Technologies" ;
    icsa:year 2026 .

icsa-res:ICSA-26-272-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-272-05" ;
    dcterms:issued "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Anjvision YSSD-RTMP-H5" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities" ;
    icsa:cveNumber "CVE-2026-100294; CVE-2026-100297; CVE-2026-100295; CVE-2026-100291; CVE-2026-100299; CVE-2026-100296; CVE-2026-100293; CVE-2026-100292; CVE-2026-100298" ;
    icsa:cweNumber "CWE-1391; CWE-1188; CWE-522; CWE-78; CWE-918; CWE-798; CWE-489; CWE-347; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2026-100291,
        cve-res:CVE-2026-100292,
        cve-res:CVE-2026-100293,
        cve-res:CVE-2026-100294,
        cve-res:CVE-2026-100295,
        cve-res:CVE-2026-100296,
        cve-res:CVE-2026-100297,
        cve-res:CVE-2026-100298,
        cve-res:CVE-2026-100299 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-1391,
        cwe-res:CWE-347,
        cwe-res:CWE-489,
        cwe-res:CWE-522,
        cwe-res:CWE-754,
        cwe-res:CWE-78,
        cwe-res:CWE-798,
        cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Anjvision YSSD-RTMP-H5" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "YSSD-RTMP-H5 firmware 3.3.2.4_build_2024-12-26" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-272-05" ;
    icsa:vendor "Anjvision" ;
    icsa:year 2026 .

icsa-res:ICSA-26-272-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-272-06" ;
    dcterms:issued "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "MikroTik RouterOS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Latvia" ;
    icsa:criticalInfrastructureSector "Communications; Information Technology" ;
    icsa:cveNumber "CVE-2026-84411" ;
    icsa:cweNumber "CWE-191" ;
    icsa:hasCVE cve-res:CVE-2026-84411 ;
    icsa:hasCWE cwe-res:CWE-191 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MikroTik RouterOS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RouterOS <7.24" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-272-06" ;
    icsa:vendor "MikroTik" ;
    icsa:year 2026 .

icsa-res:ICSA-26-272-07 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-272-07" ;
    dcterms:issued "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Viidure Dashcam Android Application" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Transportation Systems" ;
    icsa:cveNumber "CVE-2026-94204; CVE-2026-96587" ;
    icsa:cweNumber "CWE-798; CWE-732" ;
    icsa:hasCVE cve-res:CVE-2026-94204,
        cve-res:CVE-2026-96587 ;
    icsa:hasCWE cwe-res:CWE-732,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Viidure Dashcam Android Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Dashcam Android Application <=3.3.1.260403" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-272-07" ;
    icsa:vendor "Viidure" ;
    icsa:year 2026 .

icsa-res:ICSA-26-274-01 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-274-01" ;
    dcterms:issued "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Armatura LLC Armatura One" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Communications; Critical Manufacturing; Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-94592; CVE-2026-94591; CVE-2026-94593; CVE-2026-94594; CVE-2023-46604" ;
    icsa:cweNumber "CWE-502; CWE-532; CWE-321; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2023-46604,
        cve-res:CVE-2026-94591,
        cve-res:CVE-2026-94592,
        cve-res:CVE-2026-94593,
        cve-res:CVE-2026-94594 ;
    icsa:hasCWE cwe-res:CWE-321,
        cwe-res:CWE-502,
        cwe-res:CWE-532,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Armatura LLC Armatura One" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Armatura One <4.7.2 | Armatura One (USA) <4.6.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-274-01" ;
    icsa:vendor "Armatura LLC" ;
    icsa:year 2026 .

icsa-res:ICSA-26-274-02 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-274-02" ;
    dcterms:issued "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Monta monta.app" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Energy; Transportation Systems" ;
    icsa:cveNumber "CVE-2026-93474; CVE-2026-97363; CVE-2026-95102; CVE-2026-97212" ;
    icsa:cweNumber "CWE-306; CWE-307; CWE-522; CWE-613" ;
    icsa:hasCVE cve-res:CVE-2026-93474,
        cve-res:CVE-2026-95102,
        cve-res:CVE-2026-97212,
        cve-res:CVE-2026-97363 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-522,
        cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Monta monta.app" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "monta.app" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-274-02" ;
    icsa:vendor "Monta" ;
    icsa:year 2026 .

icsa-res:ICSA-26-274-03 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-274-03" ;
    dcterms:issued "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "ABB Protection and Control IED Manager PCM600" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Energy" ;
    icsa:cveNumber "CVE-2026-15952; CVE-2026-15953" ;
    icsa:cweNumber "CWE-22; CWE-732" ;
    icsa:hasCVE cve-res:CVE-2026-15952,
        cve-res:CVE-2026-15953 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ABB Protection and Control IED Manager PCM600" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Protection and Control IED Manager PCM600 <=2.14" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-274-03" ;
    icsa:vendor "ABB" ;
    icsa:year 2026 .

icsa-res:ICSA-26-274-04 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-274-04" ;
    dcterms:issued "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls EasyIO Neo Series EC and CW Controllers" ;
    icsa:CVSSScore "3.5"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2026-64892" ;
    icsa:cweNumber "CWE-200" ;
    icsa:hasCVE cve-res:CVE-2026-64892 ;
    icsa:hasCWE cwe-res:CWE-200 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls EasyIO Neo Series EC and CW Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EasyIO Neo Series EC Controllers V3.3b63 | EasyIO Neo Series EC Controllers V3.3b62 | EasyIO Neo Series CW Controllers V3.3b25 | EasyIO Neo Series CW Controllers V3.3b24" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-274-04" ;
    icsa:vendor "Johnson Controls" ;
    icsa:year 2026 .

icsa-res:ICSA-26-274-05 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-274-05" ;
    dcterms:issued "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Johnson Controls EasyIO Neo Series EC and CW Controllers" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energy" ;
    icsa:cveNumber "CVE-2026-64893" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2026-64893 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Johnson Controls EasyIO Neo Series EC and CW Controllers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "EasyIO Neo Series EC Controllers V3.3b62 | EasyIO Neo Series EC Controllers V3.3b63 | EasyIO Neo Series CW Controllers V3.3b24 | EasyIO Neo Series CW Controllers V3.3b25" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-274-05" ;
    icsa:vendor "Johnson Controls" ;
    icsa:year 2026 .

icsa-res:ICSA-26-274-06 a icsa:ICSA ;
    dcterms:identifier "ICSA-26-274-06" ;
    dcterms:issued "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Meari IoT Cloud Platform OpenAPI Service" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Commercial Facilities; Information Technology" ;
    icsa:cveNumber "CVE-2026-101104; CVE-2026-96613" ;
    icsa:cweNumber "CWE-862" ;
    icsa:hasCVE cve-res:CVE-2026-101104,
        cve-res:CVE-2026-96613 ;
    icsa:hasCWE cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Meari IoT Cloud Platform OpenAPI Service" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "IoT Cloud Platform OpenAPI Service" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSA-26-274-06" ;
    icsa:vendor "Meari" ;
    icsa:year 2026 .

icsa-res:ICSMA-16-089-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-16-089-01" ;
    dcterms:issued "2016-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "CareFusion Pyxis SupplyStation System Vulnerabilities" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-NA" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pyxis SupplyStation System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Pyxis SupplyStation system software versions affected: Pyxis SupplyStation system | Version 8.0 Server 2003/XP; Pyxis SupplyStation system | Version 8.1.3 Server 2003/XP; Pyxis SupplyStation system | Version 9.0 Server 2003/XP; Pyxis SupplyStation system | Version 9.1 Server 2003/XP; Pyxis SupplyStation system | Version 9.2 Server 2003/XP; and Pyxis SupplyStation system | Version 9.3 Server 2003/XP.CareFusion has reported that Version 9.3 | Version 9.4 | Version 10.0 of the Pyxis SupplyStation systems that operate on Server 2008/Server 2012/Windows 7 do not contain the reported vulnerabilities." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-16-089-01" ;
    icsa:vendor "CareFusion, Becton, Dickinson and Company (BD)" ;
    icsa:year 2016 .

icsa-res:ICSMA-16-196-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-16-196-01" ;
    dcterms:issued "2016-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-07-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Xper-IM Connect Vulnerabilities" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-94; CWE-200; CWE-189; CWE-119; CWE-399" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-189,
        cwe-res:CWE-200,
        cwe-res:CWE-399,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Xper-IM Connect" ;
    icsa:productDistribution "Canada, United States, North America, South America, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "Philips Xper-IM Connect versions affected: Xper-IM Connect system running Windows XP | Version 1.5.12 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-16-196-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2016 .

icsa-res:ICSMA-16-279-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-16-279-01" ;
    dcterms:issued "2016-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2016-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Animas OneTouch Ping Insulin Pump Vulnerabilities" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2016-5085; CVE-2016-5086; CVE-2016-5084" ;
    icsa:cweNumber "CWE-294; CWE-319; CWE-330" ;
    icsa:hasCVE cve-res:CVE-2016-5084,
        cve-res:CVE-2016-5085,
        cve-res:CVE-2016-5086 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-319,
        cwe-res:CWE-330 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OneTouch Ping Insulin Pump" ;
    icsa:productDistribution "Canada" ;
    icsa:productsAffected "OneTouch Ping insulin pump system versions affected: Animas OneTouch Ping insulin pump system | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-16-279-01" ;
    icsa:vendor "Animas" ;
    icsa:year 2016 .

icsa-res:ICSMA-16-306-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-16-306-01" ;
    dcterms:issued "2016-11-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Smiths Medical CADD-Solis Medication Safety Software Vulnerabilities" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2016-8355; CVE-2016-8358" ;
    icsa:cweNumber "CWE-732; CWE-300" ;
    icsa:hasCVE cve-res:CVE-2016-8355,
        cve-res:CVE-2016-8358 ;
    icsa:hasCWE cwe-res:CWE-300,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CADD-Solis Medication Safety Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CADD-Solis Medication Safety Software versions affected: Smiths Medical CADD-Solis Medication Safety Software | Version 1.0; Smiths Medical CADD-Solis Medication Safety Software | Version 2.0; Smiths Medical CADD-Solis Medication Safety Software | Version 3.0; and Smiths Medical CADD-Solis Medication Safety Software | Version 3.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-16-306-01" ;
    icsa:vendor "Smiths Medical" ;
    icsa:year 2016 .

icsa-res:ICSMA-17-009-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-009-01" ;
    dcterms:issued "2017-01-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "St. Jude Merlin@home Transmitter Vulnerability (Update A)" ;
    icsa:CVSSScore "8.9"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-5149" ;
    icsa:cweNumber "CWE-300" ;
    icsa:hasCVE cve-res:CVE-2017-5149 ;
    icsa:hasCWE cwe-res:CWE-300 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Merlin@home Transmitter" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Merlin@home transmitters are affected: Merlin@home | versions prior to Version 8.2.2: RF models: EX1150 | Inductive models: EX1100 and Inductive models: EX1100 with MerlinOnDemand capability." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-009-01" ;
    icsa:vendor "St. Jude Medical" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-017-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-017-01" ;
    dcterms:issued "2017-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Alaris 8000 Insufficiently Protected Credentials Vulnerability" ;
    icsa:CVSSScore "4.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2016-8375" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2016-8375 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alaris 8000" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Alaris 8000 PC unit versions are affected: Alaris 8000 PC unit all versions" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-017-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-017-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-017-02" ;
    dcterms:issued "2017-01-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Alaris 8015 PC Unit (Update B)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2016-8375; CVE-2016-9355" ;
    icsa:cweNumber "CWE-522; CWE-254" ;
    icsa:hasCVE cve-res:CVE-2016-8375,
        cve-res:CVE-2016-9355 ;
    icsa:hasCWE cwe-res:CWE-254,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alaris 8015" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Alaris PC unit versions are affected: Alaris 8015 PC unit | Version 9.5 and prior versions and Alaris 8015 PC unit | Version 9.7. Alaris 8015 PC unit | Versions 9.33 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-017-02" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-082-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-082-01" ;
    dcterms:issued "2017-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Kiestra PerformA and KLA Journal Service Applications Hard-Coded Passwords Vulnerability" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-6022" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2017-6022 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kiestra PerformA and KLA Journal Service Applications" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following BD products are affected: PerformA | Version 2.0.14.0 and prior versions and KLA Journal Service | Version 1.0.51 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-082-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-082-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-082-02" ;
    dcterms:issued "2017-03-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "B. Braun Medical SpaceCom Open Redirect Vulnerability" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-6018" ;
    icsa:cweNumber "CWE-601" ;
    icsa:hasCVE cve-res:CVE-2017-6018 ;
    icsa:hasCWE cwe-res:CWE-601 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SpaceCom" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following versions of the SpaceCom module - used with the SpaceStation docking station are affected: SpaceStation with SpaceCom module (integrated as part number 8713142U) | software versions prior to Version 012U000040 and SpaceStation (part number 8713140U) with installed SpaceCom module (part number 8713160U) | software versions prior to Version 012U000040." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-082-02" ;
    icsa:vendor "B. Braun Medical Inc." ;
    icsa:year 2017 .

icsa-res:ICSMA-17-215-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-215-01" ;
    dcterms:issued "2017-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Molecular Imaging Vulnerabilities" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-7269; CVE-2008-4250" ;
    icsa:cweNumber "CWE-94; CWE-119" ;
    icsa:hasCVE cve-res:CVE-2008-4250,
        cve-res:CVE-2017-7269 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Molecular Imaging" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "Siemens reports that the vulnerability affects the following products: Siemens PET/CT Systems: All Windows XP-based versions | Siemens SPECT/CT Systems: All Windows XP-based versions | Siemens SPECT Systems: All Windows XP-based versions and Siemens SPECT Workplaces/Symbia.net: All Windows XP-based versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-215-01" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-215-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-215-02" ;
    dcterms:issued "2017-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Siemens Molecular Imaging Vulnerabilities" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2015-7860; CVE-2015-7861; CVE-2015-1635; CVE-2015-1497" ;
    icsa:cweNumber "CWE-94; CWE-119; CWE-264" ;
    icsa:hasCVE cve-res:CVE-2015-1497,
        cve-res:CVE-2015-1635,
        cve-res:CVE-2015-7860,
        cve-res:CVE-2015-7861 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-264,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Molecular Imaging" ;
    icsa:productDistribution "Germany" ;
    icsa:productsAffected "Siemens reports that the vulnerabilities affect the following products: Siemens PET/CT Systems: All Windows 7-based versions | Siemens SPECT/CT Systems: All Windows 7-based versions | Siemens SPECT Systems: All Windows 7-based versions and Siemens SPECT Workplaces/Symbia.net: All Windows 7-based versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-215-02" ;
    icsa:vendor "Siemens" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-227-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-227-01" ;
    dcterms:issued "2017-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "BMC Medical and 3B Medical Luna CPAP Machine" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-12701" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2017-12701 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Luna CPAP Machine" ;
    icsa:productDistribution "China, United States" ;
    icsa:productsAffected "The following versions of the Luna CPAP Machine are affected: Luna CPAP Machine all devices released prior to July 1 | 2017." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-227-01" ;
    icsa:vendor "BMC Medical, 3B Medical" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-229-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-229-01" ;
    dcterms:issued "2017-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-08-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips' DoseWise Portal Vulnerabilities" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-9656; CVE-2017-9654" ;
    icsa:cweNumber "CWE-798; CWE-312" ;
    icsa:hasCVE cve-res:CVE-2017-9654,
        cve-res:CVE-2017-9656 ;
    icsa:hasCWE cwe-res:CWE-312,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DoseWise Portal Vulnerabilities" ;
    icsa:productDistribution "Australia, Japan, Netherlands, United States, North America, South America, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "The following Philips DWP versions are affected: DoseWise Portal | Versions 1.1.7.333 and 2.1.1.3069" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-229-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-241-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-241-01" ;
    dcterms:issued "2017-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Abbott Laboratories' Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI Pacemaker Vulnerabilities" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-12714; CVE-2017-12712; CVE-2017-12716" ;
    icsa:cweNumber "CWE-920; CWE-311; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-12712,
        cve-res:CVE-2017-12714,
        cve-res:CVE-2017-12716 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-311,
        cwe-res:CWE-920 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI Pacemaker" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following pacemakers manufactured prior to August 28; are affected:Accent/Anthem | Accent MRI | Assurity | Allure and Assurity MRI.; 2017" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-241-01" ;
    icsa:vendor "Abbott Laboratories" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-250-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-250-01" ;
    dcterms:issued "2017-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "i-SENS, Inc. SmartLog Diabetes Management Software" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-13993" ;
    icsa:cweNumber "CWE-428" ;
    icsa:hasCVE cve-res:CVE-2017-13993 ;
    icsa:hasCWE cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SmartLog Diabetes Management Software" ;
    icsa:productDistribution "Chile, China, Germany, India, South Korea, Peru, United States" ;
    icsa:productsAffected "The following SmartLog Diabetes Management Software versions are affected: SmartLog Diabetes Management Software | Version 2.4.0 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-250-01" ;
    icsa:vendor "I-SENS Inc." ;
    icsa:year 2017 .

icsa-res:ICSMA-17-250-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-250-02" ;
    dcterms:issued "2017-09-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities (Update A)" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-12718; CVE-2017-12721; CVE-2017-12724; CVE-2017-12720; CVE-2017-12723; CVE-2017-12726; CVE-2017-12722; CVE-2017-12725" ;
    icsa:cweNumber "CWE-120; CWE-284; CWE-260; CWE-295; CWE-259; CWE-798; CWE-125" ;
    icsa:hasCVE cve-res:CVE-2017-12718,
        cve-res:CVE-2017-12720,
        cve-res:CVE-2017-12721,
        cve-res:CVE-2017-12722,
        cve-res:CVE-2017-12723,
        cve-res:CVE-2017-12724,
        cve-res:CVE-2017-12725,
        cve-res:CVE-2017-12726 ;
    icsa:hasCWE cwe-res:CWE-120,
        cwe-res:CWE-125,
        cwe-res:CWE-259,
        cwe-res:CWE-260,
        cwe-res:CWE-284,
        cwe-res:CWE-295,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Medfusion 4000 Wireless Syringe Infusion Pump" ;
    icsa:productDistribution "United Kingdom, United States" ;
    icsa:productsAffected "The following Medfusion 4000 Wireless Syringe Infusion Pump versions are affected: Medfusion 4000 Wireless Syringe Infusion Pump | Version 1.1 | Medfusion 4000 Wireless Syringe Infusion Pump | Version 1.5 and Medfusion 4000 Wireless Syringe Infusion Pump | Version 1.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-250-02" ;
    icsa:vendor "Smiths Medical" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-255-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-255-01" ;
    dcterms:issued "2017-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips' IntelliView MX40 Patient Worn Monitor (WLAN) Vulnerabilities" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-9657; CVE-2017-9658" ;
    icsa:cweNumber "CWE-755; CWE-460" ;
    icsa:hasCVE cve-res:CVE-2017-9657,
        cve-res:CVE-2017-9658 ;
    icsa:hasCWE cwe-res:CWE-460,
        cwe-res:CWE-755 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliView MX40 Patient Worn Monitor (WLAN)" ;
    icsa:productDistribution "Australia, Canada, Netherlands, United States, North America, South America, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "The following versions of the IntelliVue MX40 Patient Worn Monitor are affected: IntelliVue MX40 Patient Worn Monitor (WLAN only) all versions prior to Version B.06.18. Vulnerabilities only affect MX40 WLAN monitors operating on a user-provided 802.11 wireless LAN. MX40 monitors with 1.4 GHz and 2.4 GHz Smart-Hopping radios are not affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-255-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-292-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-292-01" ;
    dcterms:issued "2017-10-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-10-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Boston Scientific ZOOM LATITUDE PRM Vulnerabilities" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-14012; CVE-2017-14014" ;
    icsa:cweNumber "CWE-321; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2017-14012,
        cve-res:CVE-2017-14014 ;
    icsa:hasCWE cwe-res:CWE-311,
        cwe-res:CWE-321 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ZOOM LATITUDE PRM" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following ZOOM LATITUDE PRM versions are affected: ZOOM LATITUDE PRM - Model 3120 all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-292-01" ;
    icsa:vendor "Boston Scientific" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-318-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-318-01" ;
    dcterms:issued "2017-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips IntelliSpace Cardiovascular System and Xcelera System Vulnerability" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-14111" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2017-14111 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliSpace Cardiovascular System and Xcelera System" ;
    icsa:productDistribution "Netherlands, North America, South America, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "Philips reports that the vulnerability affects the following versions of the IntelliSpace Cardiovascular and Xcelera cardiac image and information management systems: IntelliSpace Cardiovascular | Version 2.3.0 and prior and Xcelera | R4.1L1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-318-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2017 .

icsa-res:ICSMA-17-332-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-17-332-01" ;
    dcterms:issued "2017-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2017-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ethicon Endo-Surgery Generator G11 Vulnerability" ;
    icsa:CVSSScore "4.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-14018" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-14018 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Endo-Surgery Generator G11" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Ethicon Endo-Surgery Generator Gen11 are affected: Ethicon Endo-Surgery Generator Gen11 | all versions released before November 29; 2017." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-17-332-01" ;
    icsa:vendor "Ethicon" ;
    icsa:year 2017 .

icsa-res:ICSMA-18-025-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-025-01" ;
    dcterms:issued "2018-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-01-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips IntelliSpace Cardiovascular System Vulnerability" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-5438" ;
    icsa:cweNumber "CWE-613" ;
    icsa:hasCVE cve-res:CVE-2018-5438 ;
    icsa:hasCWE cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliSpace Cardiovascular System" ;
    icsa:productDistribution "United States, North America, South America, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "Philips reports that the vulnerability affects the following versions of the IntelliSpace Cardiovascular: IntelliSpace Cardiovascular | Version 2.3.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-025-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-037-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-037-01" ;
    dcterms:issued "2018-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Vyaire Medical CareFusion Upgrade Utility Vulnerability" ;
    icsa:CVSSScore "6.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-5457" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2018-5457 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CareFusion Upgrade Utility" ;
    icsa:productDistribution "United States, Asia, Europe" ;
    icsa:productsAffected "The following versions of CareFusion Upgrade Utility | designed to upgrade compatible units to the latest software versions are affected: CareFusion Upgrade Utility used with Windows XP systems | Versions 2.0.2.2 and prior versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-037-01" ;
    icsa:vendor "Vyaire Medical" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-037-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-037-02" ;
    dcterms:issued "2018-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Medical Devices Vulnerability" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2011-5322; CVE-2012-6694; CVE-2010-5310; CVE-2012-6693; CVE-2010-5306; CVE-2001-1594; CVE-2014-7233; CVE-2003-1603; CVE-2007-6757; CVE-2010-5307; CVE-2012-6660; CVE-2012-6695; CVE-2017-14002; CVE-2017-14004; CVE-2004-2777; CVE-2013-7404; CVE-2017-14006; CVE-2010-5309; CVE-2009-5143; CVE-2013-7442; CVE-2017-14008; CVE-2014-7232; CVE-2002-2446" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2001-1594,
        cve-res:CVE-2002-2446,
        cve-res:CVE-2003-1603,
        cve-res:CVE-2004-2777,
        cve-res:CVE-2007-6757,
        cve-res:CVE-2009-5143,
        cve-res:CVE-2010-5306,
        cve-res:CVE-2010-5307,
        cve-res:CVE-2010-5309,
        cve-res:CVE-2010-5310,
        cve-res:CVE-2011-5322,
        cve-res:CVE-2012-6660,
        cve-res:CVE-2012-6693,
        cve-res:CVE-2012-6694,
        cve-res:CVE-2012-6695,
        cve-res:CVE-2013-7404,
        cve-res:CVE-2013-7442,
        cve-res:CVE-2014-7232,
        cve-res:CVE-2014-7233,
        cve-res:CVE-2017-14002,
        cve-res:CVE-2017-14004,
        cve-res:CVE-2017-14006,
        cve-res:CVE-2017-14008 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Medical Devices" ;
    icsa:productDistribution "Canada, United States" ;
    icsa:productsAffected "The following GE Healthcare products are affected: Optima 520 which are medical imaging systems | all versions |Optima 540 which are medical imaging systems | all versions |Optima 640 which are medical imaging systems | all versions |Optima 680 which are medical imaging systems | all versions | Discovery NM530c which is a nuclear medical imaging system | versions prior to Version 1.003 | Discovery NM750b which is a dedicated breast imaging system | versions prior to Version 2.003 | Discovery XR656 and Discovery XR656 Plus which are digital radiographic imaging systems | all versions |Revolution XQ/i which is a medical imaging system | all versions |THUNIS-800+ which is a stationary diagnostic radiographic and fluoroscopic X-ray system | all versions | Centricity PACS Server which is used to support a medical imaging archiving and communication system | all versions | Centricity PACS RA1000 which is used for diagnostic image analysis | all versions | Centricity PACS-IW which is an integrated web-based system for medical imaging | all versions including Version 3.7.3.7 and Version 3.7.3.8 | Centricity DMS which is a data management software | all versions | Discovery VH / Millenium VG which are nuclear medical imaging systems | all versions | ENTEGRA 2.0/2.5 Processing and Review Workstation which is a nuclear medicine workstation for displaying - archiving and communicating medical imaging | all versions | CADstream which is a medical imaging software | all versions |Optima MR360 which is a medical imaging system | all versions |GEMNet License server (EchoServer) | all versions | Image Vault 3.x medical imaging software | all versions |Infinia / Infinia with Hawkeye 4 / 1 which are medical imaging systems | all versions | Millenium MG / Millenium NC / Millenium MyoSIGHT which are nuclear medical imaging systems | all versions | Precision MP/i which is a medical imaging system | all versions andXeleris 1.0 / 1.1 / 2.1 / 3.0 / 3.1 which are medical imaging workstations | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-037-02" ;
    icsa:vendor "GE" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-058-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-058-01" ;
    dcterms:issued "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic 2090 Carelink Programmer Vulnerabilities (Update C)" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-5446; CVE-2018-10596; CVE-2018-5448" ;
    icsa:cweNumber "CWE-23; CWE-923; CWE-257" ;
    icsa:hasCVE cve-res:CVE-2018-10596,
        cve-res:CVE-2018-5446,
        cve-res:CVE-2018-5448 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-257,
        cwe-res:CWE-923 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "2090 Carelink Programmer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Medtronic CareLink 2090 Programmer - device used by trained personnel at hospitals and clinics to program and manage Medtronic cardiac devices are affected: 2090 CareLink Programmer | all versions and 29901 Encore Programmer | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-058-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-058-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-058-02" ;
    dcterms:issued "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Intellispace Portal ISP Vulnerabilities" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-5470; CVE-2017-0268; CVE-2018-5466; CVE-2017-0267; CVE-2018-5474; CVE-2018-5464; CVE-2011-3389; CVE-2017-0279; CVE-2017-0199; CVE-2017-0269; CVE-2018-5472; CVE-2016-2183; CVE-2017-0145; CVE-2017-0146; CVE-2018-5468; CVE-2017-0144; CVE-2018-5462; CVE-2017-0143; CVE-2017-0274; CVE-2017-0147; CVE-2017-0280; CVE-2017-0272; CVE-2017-0276; CVE-2017-0271; CVE-2017-0148; CVE-2018-5454; CVE-2017-0273; CVE-2017-0275; CVE-2005-1794; CVE-2017-0277; CVE-2004-2761; CVE-2014-3566; CVE-2017-0278; CVE-2018-5458; CVE-2017-0270" ;
    icsa:cweNumber "CWE-200; CWE-310; CWE-428; CWE-264; CWE-20; CWE-489" ;
    icsa:hasCVE cve-res:CVE-2004-2761,
        cve-res:CVE-2005-1794,
        cve-res:CVE-2011-3389,
        cve-res:CVE-2014-3566,
        cve-res:CVE-2016-2183,
        cve-res:CVE-2017-0143,
        cve-res:CVE-2017-0144,
        cve-res:CVE-2017-0145,
        cve-res:CVE-2017-0146,
        cve-res:CVE-2017-0147,
        cve-res:CVE-2017-0148,
        cve-res:CVE-2017-0199,
        cve-res:CVE-2017-0267,
        cve-res:CVE-2017-0268,
        cve-res:CVE-2017-0269,
        cve-res:CVE-2017-0270,
        cve-res:CVE-2017-0271,
        cve-res:CVE-2017-0272,
        cve-res:CVE-2017-0273,
        cve-res:CVE-2017-0274,
        cve-res:CVE-2017-0275,
        cve-res:CVE-2017-0276,
        cve-res:CVE-2017-0277,
        cve-res:CVE-2017-0278,
        cve-res:CVE-2017-0279,
        cve-res:CVE-2017-0280,
        cve-res:CVE-2018-5454,
        cve-res:CVE-2018-5458,
        cve-res:CVE-2018-5462,
        cve-res:CVE-2018-5464,
        cve-res:CVE-2018-5466,
        cve-res:CVE-2018-5468,
        cve-res:CVE-2018-5470,
        cve-res:CVE-2018-5472,
        cve-res:CVE-2018-5474 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-264,
        cwe-res:CWE-310,
        cwe-res:CWE-428,
        cwe-res:CWE-489 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intellispace Portal ISP" ;
    icsa:productDistribution "United States, North America, South America, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "Philips reports that these vulnerabilities affect the following versions of the ISP: IntelliSpace Portal | all 8.0.x versions and IntelliSpace Portal | all 7.0.x versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-058-02" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-086-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-086-01" ;
    dcterms:issued "2018-03-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Alice 6 Vulnerabilities (Update B)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-7498; CVE-2018-5451" ;
    icsa:cweNumber "CWE-311; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-5451,
        cve-res:CVE-2018-7498 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alice 6" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Philips Alice 6 System are affected: Version R8.0.3 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-086-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-088-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-088-01" ;
    dcterms:issued "2018-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips iSite/IntelliSpace PACS Vulnerabilities (Update A)" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-NA" ;
    icsa:cweNumber "CWE-94; CWE-254; CWE-416; CWE-79; CWE-428; CWE-295; CWE-255; CWE-476; CWE-400; CWE-200; CWE-326; CWE-20; CWE-362; CWE-399; CWE-611; CWE-310; CWE-17; CWE-284; CWE-19; CWE-78; CWE-119; CWE-319; CWE-928; CWE-287; CWE-521; CWE-262; CWE-264; CWE-613; CWE-798" ;
    icsa:hasCVE cve-res:CVE-NA ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-17,
        cwe-res:CWE-19,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-254,
        cwe-res:CWE-255,
        cwe-res:CWE-262,
        cwe-res:CWE-264,
        cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-295,
        cwe-res:CWE-310,
        cwe-res:CWE-319,
        cwe-res:CWE-326,
        cwe-res:CWE-362,
        cwe-res:CWE-399,
        cwe-res:CWE-400,
        cwe-res:CWE-416,
        cwe-res:CWE-428,
        cwe-res:CWE-476,
        cwe-res:CWE-521,
        cwe-res:CWE-611,
        cwe-res:CWE-613,
        cwe-res:CWE-78,
        cwe-res:CWE-79,
        cwe-res:CWE-798,
        cwe-res:CWE-928,
        cwe-res:CWE-94 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iSite/IntelliSpace PACS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Philips reports these vulnerabilities affect all versions of iSite and IntelliSpace PACS." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-088-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-107-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-107-01" ;
    dcterms:issued "2018-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Abbott Laboratories Defibrillator" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-12714; CVE-2017-12712" ;
    icsa:cweNumber "CWE-920; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2017-12712,
        cve-res:CVE-2017-12714 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-920 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Defibrillator" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following ICDs and CRT-Ds manufactured and distributed prior to April 19; 2018 are affected: Fortify | Fortify Assura | Quadra Assura | Quadra Assura MP | Unify | Unify Assura | Unify Quadra | Promote Quadra | Ellipse | Current | Promote." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-107-01" ;
    icsa:vendor "Abbott Laboratories" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-107-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-107-02" ;
    dcterms:issued "2018-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Biosense Webster Carto 3 System Vulnerabilities" ;
    icsa:CVSSScore "5.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-0061; CVE-2017-0062; CVE-2017-0226; CVE-2017-0088; CVE-2017-0126; CVE-2017-0104; CVE-2017-0121; CVE-2017-0118; CVE-2017-0122; CVE-2017-0289; CVE-2017-0143; CVE-2017-0091; CVE-2017-8486; CVE-2017-8495; CVE-2017-0238; CVE-2017-0090; CVE-2017-0190; CVE-2017-8462; CVE-2017-0263; CVE-2017-0043; CVE-2017-0123; CVE-2017-8489; CVE-2017-0116; CVE-2017-0086; CVE-2017-0063; CVE-2017-0272; CVE-2017-8480; CVE-2017-8552; CVE-2017-0072; CVE-2017-0096; CVE-2017-0271; CVE-2017-0073; CVE-2017-0294; CVE-2017-0148; CVE-2017-0284; CVE-2017-0244; CVE-2017-0101; CVE-2017-0246; CVE-2017-0278; CVE-2017-8471; CVE-2017-8482; CVE-2017-0168; CVE-2017-8577; CVE-2017-8581; CVE-2017-8582; CVE-2017-0038; CVE-2017-8544; CVE-2017-0192; CVE-2017-0222; CVE-2017-0158; CVE-2017-0287; CVE-2017-0279; CVE-2017-8488; CVE-2017-0056; CVE-2017-8590; CVE-2017-0045; CVE-2017-0145; CVE-2017-8483; CVE-2017-0184; CVE-2017-0296; CVE-2017-0144; CVE-2017-0042; CVE-2017-8589; CVE-2013-6629; CVE-2017-8470; CVE-2017-0260; CVE-2017-0117; CVE-2017-0087; CVE-2017-0050; CVE-2017-0077; CVE-2017-0171; CVE-2017-0060; CVE-2017-0286; CVE-2017-0170; CVE-2017-0102; CVE-2017-8491; CVE-2017-8478; CVE-2017-0275; CVE-2017-8476; CVE-2017-8473; CVE-2017-8573; CVE-2017-8531; CVE-2017-8532; CVE-2017-8543; CVE-2017-0270; CVE-2017-0248; CVE-2017-0298; CVE-2017-0213; CVE-2017-0268; CVE-2017-0267; CVE-2017-8492; CVE-2017-8469; CVE-2017-0214; CVE-2017-8485; CVE-2017-0285; CVE-2017-0111; CVE-2017-0258; CVE-2017-0175; CVE-2017-0269; CVE-2017-8475; CVE-2017-0166; CVE-2017-0005; CVE-2017-0146; CVE-2017-0300; CVE-2017-0283; CVE-2017-8580; CVE-2017-0084; CVE-2017-0297; CVE-2017-0147; CVE-2017-8592; CVE-2017-0220; CVE-2017-0103; CVE-2017-8578; CVE-2017-8534; CVE-2017-0047; CVE-2017-0242; CVE-2017-0097; CVE-2017-0055; CVE-2017-0280; CVE-2017-8554; CVE-2017-8564; CVE-2017-0112; CVE-2017-0245; CVE-2017-0076; CVE-2017-8467; CVE-2017-0125; CVE-2017-8557; CVE-2017-8463; CVE-2017-0120; CVE-2017-0231; CVE-2017-0114; CVE-2017-8490; CVE-2017-0014; CVE-2017-0099; CVE-2017-0277; CVE-2017-8528; CVE-2017-0115; CVE-2017-0127; CVE-2017-0282; CVE-2017-8481; CVE-2017-0039; CVE-2017-0100; CVE-2017-8479; CVE-2017-0089; CVE-2017-8477; CVE-2017-8587; CVE-2017-0199; CVE-2017-0180; CVE-2017-8533; CVE-2017-0113; CVE-2017-8553; CVE-2017-8565; CVE-2017-0193; CVE-2017-0191; CVE-2017-0128; CVE-2017-0274; CVE-2017-0155; CVE-2017-0108; CVE-2017-8472; CVE-2017-0183; CVE-2017-0119; CVE-2017-0075; CVE-2017-0058; CVE-2017-0085; CVE-2017-8556; CVE-2017-0109; CVE-2017-0182; CVE-2017-0276; CVE-2017-8484; CVE-2017-0064; CVE-2017-0167; CVE-2017-8464; CVE-2017-8588; CVE-2017-0288; CVE-2017-0083; CVE-2017-0092; CVE-2017-0273; CVE-2017-0025; CVE-2017-0124; CVE-2017-8527; CVE-2017-0163; CVE-2017-0022; CVE-2017-0156" ;
    icsa:cweNumber "CWE-352; CWE-611; CWE-200; CWE-287; CWE-254; CWE-79; CWE-264; CWE-284; CWE-20; CWE-19; CWE-190; CWE-119" ;
    icsa:hasCVE cve-res:CVE-2013-6629,
        cve-res:CVE-2017-0005,
        cve-res:CVE-2017-0014,
        cve-res:CVE-2017-0022,
        cve-res:CVE-2017-0025,
        cve-res:CVE-2017-0038,
        cve-res:CVE-2017-0039,
        cve-res:CVE-2017-0042,
        cve-res:CVE-2017-0043,
        cve-res:CVE-2017-0045,
        cve-res:CVE-2017-0047,
        cve-res:CVE-2017-0050,
        cve-res:CVE-2017-0055,
        cve-res:CVE-2017-0056,
        cve-res:CVE-2017-0058,
        cve-res:CVE-2017-0060,
        cve-res:CVE-2017-0061,
        cve-res:CVE-2017-0062,
        cve-res:CVE-2017-0063,
        cve-res:CVE-2017-0064,
        cve-res:CVE-2017-0072,
        cve-res:CVE-2017-0073,
        cve-res:CVE-2017-0075,
        cve-res:CVE-2017-0076,
        cve-res:CVE-2017-0077,
        cve-res:CVE-2017-0083,
        cve-res:CVE-2017-0084,
        cve-res:CVE-2017-0085,
        cve-res:CVE-2017-0086,
        cve-res:CVE-2017-0087,
        cve-res:CVE-2017-0088,
        cve-res:CVE-2017-0089,
        cve-res:CVE-2017-0090,
        cve-res:CVE-2017-0091,
        cve-res:CVE-2017-0092,
        cve-res:CVE-2017-0096,
        cve-res:CVE-2017-0097,
        cve-res:CVE-2017-0099,
        cve-res:CVE-2017-0100,
        cve-res:CVE-2017-0101,
        cve-res:CVE-2017-0102,
        cve-res:CVE-2017-0103,
        cve-res:CVE-2017-0104,
        cve-res:CVE-2017-0108,
        cve-res:CVE-2017-0109,
        cve-res:CVE-2017-0111,
        cve-res:CVE-2017-0112,
        cve-res:CVE-2017-0113,
        cve-res:CVE-2017-0114,
        cve-res:CVE-2017-0115,
        cve-res:CVE-2017-0116,
        cve-res:CVE-2017-0117,
        cve-res:CVE-2017-0118,
        cve-res:CVE-2017-0119,
        cve-res:CVE-2017-0120,
        cve-res:CVE-2017-0121,
        cve-res:CVE-2017-0122,
        cve-res:CVE-2017-0123,
        cve-res:CVE-2017-0124,
        cve-res:CVE-2017-0125,
        cve-res:CVE-2017-0126,
        cve-res:CVE-2017-0127,
        cve-res:CVE-2017-0128,
        cve-res:CVE-2017-0143,
        cve-res:CVE-2017-0144,
        cve-res:CVE-2017-0145,
        cve-res:CVE-2017-0146,
        cve-res:CVE-2017-0147,
        cve-res:CVE-2017-0148,
        cve-res:CVE-2017-0155,
        cve-res:CVE-2017-0156,
        cve-res:CVE-2017-0158,
        cve-res:CVE-2017-0163,
        cve-res:CVE-2017-0166,
        cve-res:CVE-2017-0167,
        cve-res:CVE-2017-0168,
        cve-res:CVE-2017-0170,
        cve-res:CVE-2017-0171,
        cve-res:CVE-2017-0175,
        cve-res:CVE-2017-0180,
        cve-res:CVE-2017-0182,
        cve-res:CVE-2017-0183,
        cve-res:CVE-2017-0184,
        cve-res:CVE-2017-0190,
        cve-res:CVE-2017-0191,
        cve-res:CVE-2017-0192,
        cve-res:CVE-2017-0193,
        cve-res:CVE-2017-0199,
        cve-res:CVE-2017-0213,
        cve-res:CVE-2017-0214,
        cve-res:CVE-2017-0220,
        cve-res:CVE-2017-0222,
        cve-res:CVE-2017-0226,
        cve-res:CVE-2017-0231,
        cve-res:CVE-2017-0238,
        cve-res:CVE-2017-0242,
        cve-res:CVE-2017-0244,
        cve-res:CVE-2017-0245,
        cve-res:CVE-2017-0246,
        cve-res:CVE-2017-0248,
        cve-res:CVE-2017-0258,
        cve-res:CVE-2017-0260,
        cve-res:CVE-2017-0263,
        cve-res:CVE-2017-0267,
        cve-res:CVE-2017-0268,
        cve-res:CVE-2017-0269,
        cve-res:CVE-2017-0270,
        cve-res:CVE-2017-0271,
        cve-res:CVE-2017-0272,
        cve-res:CVE-2017-0273,
        cve-res:CVE-2017-0274,
        cve-res:CVE-2017-0275,
        cve-res:CVE-2017-0276,
        cve-res:CVE-2017-0277,
        cve-res:CVE-2017-0278,
        cve-res:CVE-2017-0279,
        cve-res:CVE-2017-0280,
        cve-res:CVE-2017-0282,
        cve-res:CVE-2017-0283,
        cve-res:CVE-2017-0284,
        cve-res:CVE-2017-0285,
        cve-res:CVE-2017-0286,
        cve-res:CVE-2017-0287,
        cve-res:CVE-2017-0288,
        cve-res:CVE-2017-0289,
        cve-res:CVE-2017-0294,
        cve-res:CVE-2017-0296,
        cve-res:CVE-2017-0297,
        cve-res:CVE-2017-0298,
        cve-res:CVE-2017-0300,
        cve-res:CVE-2017-8462,
        cve-res:CVE-2017-8463,
        cve-res:CVE-2017-8464,
        cve-res:CVE-2017-8467,
        cve-res:CVE-2017-8469,
        cve-res:CVE-2017-8470,
        cve-res:CVE-2017-8471,
        cve-res:CVE-2017-8472,
        cve-res:CVE-2017-8473,
        cve-res:CVE-2017-8475,
        cve-res:CVE-2017-8476,
        cve-res:CVE-2017-8477,
        cve-res:CVE-2017-8478,
        cve-res:CVE-2017-8479,
        cve-res:CVE-2017-8480,
        cve-res:CVE-2017-8481,
        cve-res:CVE-2017-8482,
        cve-res:CVE-2017-8483,
        cve-res:CVE-2017-8484,
        cve-res:CVE-2017-8485,
        cve-res:CVE-2017-8486,
        cve-res:CVE-2017-8488,
        cve-res:CVE-2017-8489,
        cve-res:CVE-2017-8490,
        cve-res:CVE-2017-8491,
        cve-res:CVE-2017-8492,
        cve-res:CVE-2017-8495,
        cve-res:CVE-2017-8527,
        cve-res:CVE-2017-8528,
        cve-res:CVE-2017-8531,
        cve-res:CVE-2017-8532,
        cve-res:CVE-2017-8533,
        cve-res:CVE-2017-8534,
        cve-res:CVE-2017-8543,
        cve-res:CVE-2017-8544,
        cve-res:CVE-2017-8552,
        cve-res:CVE-2017-8553,
        cve-res:CVE-2017-8554,
        cve-res:CVE-2017-8556,
        cve-res:CVE-2017-8557,
        cve-res:CVE-2017-8564,
        cve-res:CVE-2017-8565,
        cve-res:CVE-2017-8573,
        cve-res:CVE-2017-8577,
        cve-res:CVE-2017-8578,
        cve-res:CVE-2017-8580,
        cve-res:CVE-2017-8581,
        cve-res:CVE-2017-8582,
        cve-res:CVE-2017-8587,
        cve-res:CVE-2017-8588,
        cve-res:CVE-2017-8589,
        cve-res:CVE-2017-8590,
        cve-res:CVE-2017-8592 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-19,
        cwe-res:CWE-190,
        cwe-res:CWE-20,
        cwe-res:CWE-200,
        cwe-res:CWE-254,
        cwe-res:CWE-264,
        cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-352,
        cwe-res:CWE-611,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Carto 3 System" ;
    icsa:productDistribution "United States, Asia, Europe, Africa, Middle East" ;
    icsa:productsAffected "The following CARTO 3 Systems versions are affected: CARTO 3 Systems manufactured before April 2018." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-107-02" ;
    icsa:vendor "Biosense Webster" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-114-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-114-01" ;
    dcterms:issued "2018-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-04-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Pyxis" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-13077; CVE-2017-13081; CVE-2017-13087; CVE-2017-13079; CVE-2017-13086; CVE-2017-13082; CVE-2017-13088; CVE-2017-13080; CVE-2017-13078" ;
    icsa:cweNumber "CWE-323" ;
    icsa:hasCVE cve-res:CVE-2017-13077,
        cve-res:CVE-2017-13078,
        cve-res:CVE-2017-13079,
        cve-res:CVE-2017-13080,
        cve-res:CVE-2017-13081,
        cve-res:CVE-2017-13082,
        cve-res:CVE-2017-13086,
        cve-res:CVE-2017-13087,
        cve-res:CVE-2017-13088 ;
    icsa:hasCWE cwe-res:CWE-323 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pyxis" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of BD Pyxis products - medication and supply management system are affected: BD Pyxis Anesthesia ES | BD Pyxis Anesthesia System 4000 | BD Pyxis Anesthesia System 3500 | BD Pyxis MedStation 4000 T2 | BD Pyxis MedStation ES | BD Pyxis SupplyStation | BD Pyxis Supply Roller | BD Pyxis ParAssist System | BD Pyxis PARx | BD Pyxis CIISafe - Workstation |BD Pyxis StockStation System and BD Pyxis Parx handheld." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-114-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-123-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-123-01" ;
    dcterms:issued "2018-05-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Brilliance Computed Tomography (CT) System (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-8861; CVE-2018-8857; CVE-2018-8853" ;
    icsa:cweNumber "CWE-798; CWE-250; CWE-668" ;
    icsa:hasCVE cve-res:CVE-2018-8853,
        cve-res:CVE-2018-8857,
        cve-res:CVE-2018-8861 ;
    icsa:hasCWE cwe-res:CWE-250,
        cwe-res:CWE-668,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Brilliance Computed Tomography (CT) System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Philips reports the vulnerabilities affect the following Brilliance CT Scanners: Brilliance 64 Versions 2.6.2 and below Brilliance iCT Versions 4.1.6 and below Brilliance iCT SP Versions 3.2.4 and below Brilliance CT Big Bore Versions 2.3.5 and below. MX8000 Dual EXP Systems (CVE-2018-8857 only)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-123-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-128-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-128-01" ;
    dcterms:issued "2018-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Silex Technology SX-500/SD-320AN or GE Healthcare MobileLink (Update B)" ;
    icsa:CVSSScore "7.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-6020; CVE-2018-6021" ;
    icsa:cweNumber "CWE-78; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-6020,
        cve-res:CVE-2018-6021 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SX-500/SD-320AN or GE Healthcare MobileLink" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products from Silex Technology are affected. Some are not affected by both vulnerabilities (see Mitigations Section): GEH-500 Version 1.54 and prior (integrated into GE MobileLink) | SX-500 All Versions (end-of-life 2011) |GEH-SD-320AN Version GEH-1.1 and prior (integrated into GE MobileLink) andSD-320AN Version 2.01 and prior (end-of-life Nov 2017). The following models of GE MAC Resting ECG analysis system may use the vulnerable MobileLink technology: MAC 3500 | MAC 5000 (end-of-life 2012) | MAC 5500 and MAC 5500 HD." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-128-01" ;
    icsa:vendor "Silex Technology" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-137-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-137-01" ;
    dcterms:issued "2018-05-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-07-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic N'Vision Clinician Programmer (Update A)" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-10631; CVE-2018-8849" ;
    icsa:cweNumber "CWE-311; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2018-10631,
        cve-res:CVE-2018-8849 ;
    icsa:hasCWE cwe-res:CWE-311,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "N'Vision Clinician Programmer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The N'Vision Clinician Programmer is a small portable device that offers a single programming platform for Medtronic Neurological implantable therapy devices such as Medtronic neurostimulators and drug pumps. The following products are affected: 8840 N'Vision Clinician Programmer | all versions and 8870 N'Vision removable Application Card | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-137-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-142-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-142-01" ;
    dcterms:issued "2018-05-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Kiestra and InoquIA Systems (Update A)" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-10595; CVE-2018-10593" ;
    icsa:cweNumber "CWE-356" ;
    icsa:hasCVE cve-res:CVE-2018-10593,
        cve-res:CVE-2018-10595 ;
    icsa:hasCWE cwe-res:CWE-356 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Kiestra and InoquIA Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "BD reports these vulnerabilities affect applications used by the following BD Kiestra systems: BD Kiestra TLA |BD Kiestra WCA andBD InoqulA+ specimen processor. All three BD Kiestra systems listed above use the following vulnerable applications: Database (DB) Manager | Version 3.0.1.0 |ReadA Overview | Version 1.1.0.2 and previous andPerformA | Version 3.0.0.0 and previous versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-142-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-144-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-144-01" ;
    dcterms:issued "2018-05-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "BeaconMedaes TotalAlert Scroll Medical Air Systems" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-7526; CVE-2018-7510; CVE-2018-7518" ;
    icsa:cweNumber "CWE-284; CWE-256; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2018-7510,
        cve-res:CVE-2018-7518,
        cve-res:CVE-2018-7526 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-284,
        cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "TotalAlert Scroll Medical Air Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following TotalAlert Scroll Medical Air Systems web applications are affected: TotalAlert Scroll Medical Air Systems running software Versions 4107600010.23 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-144-01" ;
    icsa:vendor "BeaconMedaes" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-156-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-156-01" ;
    dcterms:issued "2018-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips' IntelliVue Patient and Avalon Fetal Monitors" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-10601; CVE-2018-10597; CVE-2018-10599" ;
    icsa:cweNumber "CWE-200; CWE-121; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-10597,
        cve-res:CVE-2018-10599,
        cve-res:CVE-2018-10601 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-200,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliVue Patient and Avalon Fetal Monitors" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following IntelliVue Patient Monitors versions are affected: IntelliVue Patient Monitors MP Series (includingMP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M and IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only). The following Avalon Fetal/Maternal Monitors versions are affected: Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0 | G.0 and J.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-156-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-165-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-165-01" ;
    dcterms:issued "2018-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Natus Xltek NeuroWorks" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-2860; CVE-2017-2852; CVE-2017-2868; CVE-2017-2853; CVE-2017-2858; CVE-2017-2867; CVE-2017-2869; CVE-2017-2861" ;
    icsa:cweNumber "CWE-125; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2017-2852,
        cve-res:CVE-2017-2853,
        cve-res:CVE-2017-2858,
        cve-res:CVE-2017-2860,
        cve-res:CVE-2017-2861,
        cve-res:CVE-2017-2867,
        cve-res:CVE-2017-2868,
        cve-res:CVE-2017-2869 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Xltek NeuroWorks" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following version of Natus Xltek NeuroWorks | used in Natus Xltek EEG medical products are affected: Natus Xltek NeuroWorks Version 8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-165-01" ;
    icsa:vendor "Natus Medical Inc" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-179-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-179-01" ;
    dcterms:issued "2018-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-06-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic MyCareLink Patient Monitor" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-8870; CVE-2018-8868" ;
    icsa:cweNumber "CWE-749; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2018-8868,
        cve-res:CVE-2018-8870 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MyCareLink Patient Monitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following MyCareLink Monitors are affected: 24950 MyCareLink Monitor | all versions | 24952 MyCareLink Monitor | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-179-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-219-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-219-01" ;
    dcterms:issued "2018-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic MyCareLink 24950 Patient Monitor (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-10622; CVE-2018-10626" ;
    icsa:cweNumber "CWE-313; CWE-345" ;
    icsa:hasCVE cve-res:CVE-2018-10622,
        cve-res:CVE-2018-10626 ;
    icsa:hasCWE cwe-res:CWE-313,
        cwe-res:CWE-345 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Medtronic MyCareLink 24950 Patient Monitor (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Medtronic 24952 MyCareLink Monitor: vers:all/*; Medtronic 24950 MyCareLink Monitor: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-219-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-219-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-219-02" ;
    dcterms:issued "2018-08-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-10-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic MiniMed MMT-500/MMT-503 Remote Controllers (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-14781; CVE-2018-10634" ;
    icsa:cweNumber "CWE-294; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2018-10634,
        cve-res:CVE-2018-14781 ;
    icsa:hasCWE cwe-res:CWE-294,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MiniMed 508 Insulin Pump" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following supported Medtronic products are affected: MMT - 508 MiniMed insulin pump | MMT - 522 / MMT - 722 Paradigm REAL-TIME | MMT - 523 / MMT - 723 Paradigm Revel | MMT - 523K / MMT - 723K Paradigm Revel and MMT - 551 / MMT - 751 MiniMed 530G." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-219-02" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-226-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-226-01" ;
    dcterms:issued "2018-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips IntelliSpace Cardiovascular Vulnerabilities" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-14787; CVE-2018-14789" ;
    icsa:cweNumber "CWE-269; CWE-428" ;
    icsa:hasCVE cve-res:CVE-2018-14787,
        cve-res:CVE-2018-14789 ;
    icsa:hasCWE cwe-res:CWE-269,
        cwe-res:CWE-428 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliSpace Cardiovascular" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Philips' IntelliSpace Cardiovascular (ISCV) products - comprehensive cardiac image and information management software are affected: IntelliSpace Cardiovascular | Version 3.1 or prior and Xcelera Version 4.1 or prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-226-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-228-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-228-01" ;
    dcterms:issued "2018-08-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips PageWriter TC10, TC20, TC30, TC50, and TC70 Cardiographs (Update A)" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-14801; CVE-2018-14799" ;
    icsa:cweNumber "CWE-798; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-14799,
        cve-res:CVE-2018-14801 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PageWriter TC10, TC20, TC30, TC50, and TC70 Cardiographs" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of PageWriter TC10 | TC20 | TC30 | TC50 | TC70 Cardiographs are affected: All versions prior to May 2018." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-228-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-233-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-233-01" ;
    dcterms:issued "2018-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips IntelliVue Information Center iX (Update B)" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-1999-0103" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-1999-0103 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliVue Information Center iX" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Philips IntelliVue Information Center iX - real-time central monitoring system are affected: Philips IntelliVue Information Center iX Versions B.02." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-233-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-235-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-235-01" ;
    dcterms:issued "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Alaris Plus" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-14786" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-14786 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alaris Plus" ;
    icsa:productDistribution "United States, Europe" ;
    icsa:productsAffected "The following versions of Alaris Plus - medical syringe pumps | Versions 2.3.6 and prior are affected: Alaris GS | Alaris GH | Alaris CC andAlaris TIVA." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-235-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-240-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-240-01" ;
    dcterms:issued "2018-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-08-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Qualcomm Life Capsule" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2014-9222" ;
    icsa:cweNumber "CWE-17" ;
    icsa:hasCVE cve-res:CVE-2014-9222 ;
    icsa:hasCWE cwe-res:CWE-17 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Capsule" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Capsule Datacaptor Terminal Server (DTS) | part of a medical device information system are affected: Allegro RomPager embedded web server versions 4.01 through 4.34 included in Capsule DTS | all versions affected." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-240-01" ;
    icsa:vendor "Qualcomm Life" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-277-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-277-01" ;
    dcterms:issued "2018-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Carestream Vue RIS" ;
    icsa:CVSSScore "3.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-17891" ;
    icsa:cweNumber "CWE-209" ;
    icsa:hasCVE cve-res:CVE-2018-17891 ;
    icsa:hasCWE cwe-res:CWE-209 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vue RIS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Carestream Vue RIS - web-based radiology information system are affected: RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-277-01" ;
    icsa:vendor "Carestream" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-277-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-277-02" ;
    dcterms:issued "2018-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Change Healthcare PeerVue Web Server" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-10624" ;
    icsa:cweNumber "CWE-209" ;
    icsa:hasCVE cve-res:CVE-2018-10624 ;
    icsa:hasCWE cwe-res:CWE-209 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PeerVue Web Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Change Healthcare reports the vulnerability affects the following product: PeerVue Web Server all versions up to 7.6.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-277-02" ;
    icsa:vendor "Change Healthcare" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-310-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-310-01" ;
    dcterms:issued "2018-11-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Roche Diagnostics Point of Care Handheld Medical Devices (Update A)" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-18562; CVE-2018-18561; CVE-2018-18563; CVE-2018-18564; CVE-2018-18565" ;
    icsa:cweNumber "CWE-284; CWE-78; CWE-434; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2018-18561,
        cve-res:CVE-2018-18562,
        cve-res:CVE-2018-18563,
        cve-res:CVE-2018-18564,
        cve-res:CVE-2018-18565 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-287,
        cwe-res:CWE-434,
        cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Diagnostics Point of Care Handheld Medical Devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Roche Diagnostics handheld medical devices are affected: Accu-Chek Inform II CoaguChek Pro II CoaguChek XS Plus CoaguChek XS Procobas h 232 POC Including the related base units (BU) | base unit hubs and handheld base units (HBU). Accu-Chek Units Not affected: Accu-Chek Inform II Base Unit Light Accu-Chek Inform II Base Unit NEW with Software 04.00.00 or newer." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-310-01" ;
    icsa:vendor "Roche" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-312-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-312-01" ;
    dcterms:issued "2018-11-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-11-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips iSite and IntelliSpace PACS" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-17906" ;
    icsa:cweNumber "CWE-521" ;
    icsa:hasCVE cve-res:CVE-2018-17906 ;
    icsa:hasCWE cwe-res:CWE-521 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "iSite and IntelliSpace PACS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Philips reports the following versions of iSite and IntelliSpace PACS are affected: iSite PACS | all versions and IntelliSpace PACS | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-312-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-340-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-340-01" ;
    dcterms:issued "2018-12-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2018-12-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips HealthSuite Health Android App" ;
    icsa:CVSSScore "3.5"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-19001" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2018-19001 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HealthSuite Health Android App" ;
    icsa:productDistribution "Germany, United Kingdom, Netherlands, United States" ;
    icsa:productsAffected "Philips reports the vulnerability affects all versions of the Philips HealthSuite Health Android App." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-340-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2018 .

icsa-res:ICSMA-18-347-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-18-347-01" ;
    dcterms:issued "2018-12-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-05-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-18984" ;
    icsa:cweNumber "CWE-311" ;
    icsa:hasCVE cve-res:CVE-2018-18984 ;
    icsa:hasCWE cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "9790, 2090 CareLink, and 29901 Encore Programmers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Medtronic CareLink and Encore Programmers | devices used by trained personnel at hospitals and clinics to program and manage Medtronic cardiac devices are affected: CareLink 9790 Programmer | all versions | CareLink 2090 Programmer | all versions and 29901 Encore Programmer | all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-18-347-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2018 .

icsa-res:ICSMA-19-022-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-022-01" ;
    dcterms:issued "2019-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Drager Infinity Delta" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-19014; CVE-2018-19010; CVE-2018-19012" ;
    icsa:cweNumber "CWE-532; CWE-269; CWE-20" ;
    icsa:hasCVE cve-res:CVE-2018-19010,
        cve-res:CVE-2018-19012,
        cve-res:CVE-2018-19014 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-269,
        cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Infinity Delta" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Drager patient monitoring medical devices versions affected: Infinity Delta: all versions | Delta XL: all versions | Kappa: all version | Infinity Explorer C700: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-022-01" ;
    icsa:vendor "Drager" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-029-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-029-01" ;
    dcterms:issued "2019-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Stryker Medical Beds" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2017-13077" ;
    icsa:cweNumber "CWE-323" ;
    icsa:hasCVE cve-res:CVE-2017-13077 ;
    icsa:hasCWE cwe-res:CWE-323 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Medical Beds" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Stryker medical products affected: Secure II MedSurg Bed (enabled with iBed Wireless); Model: 3002; S3 MedSurg Bed (enabled with iBed Wireless); Models: 3002 S3 and 3005 S3 and InTouch ICU Bed (enabled with Bed Wireless); Models 2131 and 2141." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-029-01" ;
    icsa:vendor "Stryker" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-029-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-029-02" ;
    dcterms:issued "2019-01-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-02-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD FACSLyric (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-6517" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2019-6517 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FACSLyric" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "BD FACSLyric flow cytometry solution versions affected: BD FACSLyric Research Use Only - Windows 10 Professional Operating System - U.S. and Malaysian Releases; between November 2017 and November 2018; and BD FACSLyric IVD Windows 10 Professional Operating System U.S. release." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-029-02" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-080-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-080-01" ;
    dcterms:issued "2019-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-03-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic Conexus Radio Frequency Telemetry Protocol (Update C)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-6540; CVE-2019-6538" ;
    icsa:cweNumber "CWE-284; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2019-6538,
        cve-res:CVE-2019-6540 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Conexus Radio Frequency Telemetry Protocol" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MyCareLink Monitor; Version 2490C CareLink 2090 Programmer Amplia CRT-D (all models) Claria CRT-D (all models) Compia CRT-D (all models) Concerto CRT-D (all models) Concerto II CRT-D (all models) Consulta CRT-D (all models) Evera ICD (all models) Maximo II CRT-D and ICD (all models) Mirro ICD (all models) Nayamed ND ICD (all models) Primo ICD (all models) Protecta ICD and CRT-D (all models) Secura ICD (all models) Virtuoso ICD (all models) Virtuoso II ICD (all models) Visia AF ICD (all models) Viva CRT-D (all models) Brava CRT-D (all models) Mirro MRI ICD (all models).; Versions 24950 and 24952 CareLink Monitor" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-080-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-113-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-113-01" ;
    dcterms:issued "2019-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-04-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fujifilm FCR Capsula X/Carbon X" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-10948; CVE-2019-10950" ;
    icsa:cweNumber "CWE-284; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-10948,
        cve-res:CVE-2019-10950 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FCR Capsula X/Carbon X" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Fujifilm Computed Radiography cassette reader models and versions affected: CR-IR 357 FCR Carbon XCR-IR 357 FCR XC-2CR-IR 357 FCR Capsula X." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-113-01" ;
    icsa:vendor "Fujifilm" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-120-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-120-01" ;
    dcterms:issued "2019-04-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Tasy EMR (Update A)" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-6562; CVE-2019-13557" ;
    icsa:cweNumber "CWE-79; CWE-200" ;
    icsa:hasCVE cve-res:CVE-2019-13557,
        cve-res:CVE-2019-6562 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tasy EMR" ;
    icsa:productDistribution "Brazil, Mexico" ;
    icsa:productsAffected "Tasy EMR Versions 3.02.1744 and prior Tasy WebPortal Versions 3.02.1757 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-120-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-164-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-164-01" ;
    dcterms:issued "2019-06-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Alaris Gateway Workstation" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-10962; CVE-2019-10959" ;
    icsa:cweNumber "CWE-284; CWE-434" ;
    icsa:hasCVE cve-res:CVE-2019-10959,
        cve-res:CVE-2019-10962 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alaris Gateway Workstation" ;
    icsa:productDistribution "Europe, Asia" ;
    icsa:productsAffected "Versions of BD's Alaris Gateway Workstation affected: 1.0.131.1.3 Build 101.1.3 MR Build 111.1.51.1.6." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-164-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-178-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-178-01" ;
    dcterms:issued "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-06-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic MiniMed 508 and Paradigm Series Insulin Pumps" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-10964" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2019-10964 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MiniMed 508 and Paradigm Series Insulin Pumps" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of Medtronic MiniMed Insulin Pumps affected: MiniMed 508 pump - All versions MiniMed Paradigm 511 pump - All versions MiniMed Paradigm 512/712 pumps - All versions MiniMed Paradigm 712E pump - All versions MiniMed Paradigm 515/715 pumps - All versions MiniMed Paradigm 522/722 pumps - All versions MiniMed Paradigm 522K/722K pumps - All versions MiniMed Paradigm 523/723 pumps - Software versions 2.4A or lower MiniMed Paradigm 523K/723K pumps - Software versions 2.4A or lower MiniMed Paradigm Veo 554/754 pumps - Software versions 2.6A or lower MiniMed Paradigm Veo 554CM and 754CM models only - Software versions 2.7A or lower." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-178-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-190-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-190-01" ;
    dcterms:issued "2019-07-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Aestiva and Aespire Anesthesia (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-10966" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2019-10966 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Aestiva and Aespire Anesthesia" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "GE Aestiva 7100; Carestation; Protiva; Avance CS2 GE Carestation 620; View GE Aisys; 100; Aisys CS2 Avance; Amingo; 650; MRI GE Aespire 7100; 650c.; 7900" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-190-01" ;
    icsa:vendor "GE" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-192-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-192-01" ;
    dcterms:issued "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-07-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Holter 2010 Plus" ;
    icsa:CVSSScore "1.9"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-10968" ;
    icsa:cweNumber "CWE-477" ;
    icsa:hasCVE cve-res:CVE-2019-10968 ;
    icsa:hasCWE cwe-res:CWE-477 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Holter 2010 Plus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Holter 2010 Plus - 12-lead EKG analysis software program version affected: all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-192-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-241-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-241-01" ;
    dcterms:issued "2019-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Change Healthcare McKesson and Horizon Cardiology" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2018-18630" ;
    icsa:cweNumber "CWE-276" ;
    icsa:hasCVE cve-res:CVE-2018-18630 ;
    icsa:hasCWE cwe-res:CWE-276 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "McKesson and Horizon Cardiology" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Change Health Cardiology Devices affected: Horizon Cardiology 11.x and earlier Horizon Cardiology 12.x McKesson Cardiology 13.x McKesson Cardiology 14. x Change Healthcare Cardiology 14.1.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-241-01" ;
    icsa:vendor "Change Healthcare" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-241-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-241-02" ;
    dcterms:issued "2019-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-08-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips HDI 4000 Ultrasound" ;
    icsa:CVSSScore "3.0"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-10988" ;
    icsa:cweNumber "CWE-477" ;
    icsa:hasCVE cve-res:CVE-2019-10988 ;
    icsa:hasCWE cwe-res:CWE-477 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "HDI 4000 Ultrasound" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Philips HDI 4000 Ultrasound systems - diagnostic ultrasound system - affected versions: All versions running on old; unsupported operating systems such as Windows 2000." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-241-02" ;
    icsa:vendor "Philips" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-248-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-248-01" ;
    dcterms:issued "2019-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Pyxis (Update A)" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-13517" ;
    icsa:cweNumber "CWE-384" ;
    icsa:hasCVE cve-res:CVE-2019-13517 ;
    icsa:hasCWE cwe-res:CWE-384 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pyxis" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "with Windows Server Versions 4.4 through 4.12.; Pyxis ES Versions 1.3.4 through to 1.5.3 Pyxis Enterprise Server" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-248-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-255-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-255-01" ;
    dcterms:issued "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips IntelliVue WLAN" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-13534; CVE-2019-13530" ;
    icsa:cweNumber "CWE-259; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2019-13530,
        cve-res:CVE-2019-13534 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-494 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliVue WLAN" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Part #: M8096-67501 IntelliVue MP monitors MP2/X2 (M8102A/M3002A) WLAN Version B; Part #: N/A (Replaced by Version C).; Firmware A.01.09; Firmware A.03.09; Part #: N/A (Replaced by Version C) IntelliVue MP monitors MX800/700/600 ((865240/41/42) WLAN Version B; Firmware A.03.09 IntelliVue MP monitors MP5/5SC (M8105A/5AS) WLAN Version A; Philips IntelliVue WLAN - portable patient monitors affected: IntelliVue MP monitors MP20-MP90 (M8001A/2A/3A/4A/5A/7A/8A/10A) WLAN Version A" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-255-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-274-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-274-01" ;
    dcterms:issued "2019-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "Interpeak IPnet TCP/IP Stack (Update D)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Critical Manufacturing; Information Technology; Healthcare and Public Health; Transportation Systems; Water and Wastewater" ;
    icsa:cveNumber "CVE-2019-12258; CVE-2019-12260; CVE-2019-12263; CVE-2019-12265; CVE-2019-12257; CVE-2019-12256; CVE-2019-12262; CVE-2019-12259; CVE-2019-12264; CVE-2019-12255; CVE-2019-12261" ;
    icsa:cweNumber "CWE-122; CWE-88; CWE-191; CWE-362; CWE-121; CWE-119; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2019-12255,
        cve-res:CVE-2019-12256,
        cve-res:CVE-2019-12257,
        cve-res:CVE-2019-12258,
        cve-res:CVE-2019-12259,
        cve-res:CVE-2019-12260,
        cve-res:CVE-2019-12261,
        cve-res:CVE-2019-12262,
        cve-res:CVE-2019-12263,
        cve-res:CVE-2019-12264,
        cve-res:CVE-2019-12265 ;
    icsa:hasCWE cwe-res:CWE-119,
        cwe-res:CWE-121,
        cwe-res:CWE-122,
        cwe-res:CWE-191,
        cwe-res:CWE-362,
        cwe-res:CWE-476,
        cwe-res:CWE-88 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Interpeak IPnet TCP/IP Stack" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Vx7 SR540; Vx7 SR610) are affected by one or more of the CVE numbers detailed below. Older; which means that the TCP-related issues must be timed with the target downloading data from the network. VxWorks 653 MCE 3.x may be affected. Contact Wind River customer support (support@windriver.com) for more details. The following VxWorks products are not affected: The latest release of VxWorks; a successful exploit of the bootrom network stack has a more difficult timing component. In typical applications; ENEA replaced Interpeak IPnet with OSENet. Green Hills Software reports Interpeak IPnet was a third-party add-on for INTREGRITY RTOS from 2003-2006. Wind River reports the following versions of VxWorks are affected: All versions of VxWorks under CURRENT support (6.9.4.11; the bootrom does not listen to TCP-ports; not DHCP. If that is true; The Interpeak IPnet stack has been identified to be affected by CVE-2019-12255; is NOT affected by any of these CVEs VxWorks 5.3 through VxWorks 6.4 inclusive are NOT affected. VxWorks Cert versions are NOT affected. VxWorks 653 Versions 2.x and earlier are NOT affected. VxWorks 653 MCE 3.x Cert Edition and later are NOT affected. CISA will update this document as more mitigations are identified by affected vendors.; and CVE-2019-12264. The following RTOS are affected: ENEA reports that OSE4 and OSE5 may have been bundled with Interpeak IPnet from 2004-2006. In 2007; CVE-2019-12262; as a result; end-of-life versions of VxWorks back to 6.5 are also affected by one or more of the CVE numbers below. All versions of the discontinued product Advanced Networking Technology (ANT) are likely affected by one or more of the CVE numbers below. The VxWorks bootrom network stack leverages the same IPnet source as VxWorks and; is also technically vulnerable to CVE-2019-12256. The same patches and mitigations apply to VxWorks and the bootrom network stack; however; then the defects related to those protocols do not apply in practice. Also; VxWorks 7 SR620; the bootrom normally uses statically assigned IP-addresses" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-274-01" ;
    icsa:vendor "ENEA, Green Hills Software, ITRON, IP Infusion, Wind River" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-297-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-297-01" ;
    dcterms:issued "2019-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-10-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips IntelliSpace Perinatal" ;
    icsa:CVSSScore "6.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-13546" ;
    icsa:cweNumber "CWE-668" ;
    icsa:hasCVE cve-res:CVE-2019-13546 ;
    icsa:hasCWE cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliSpace Perinatal" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Versions of IntelliSpace Perinatal - obstetrics information management system are affected: IntelliSpace Perinatal Versions K and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-297-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-311-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-311-01" ;
    dcterms:issued "2019-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic Valleylab FT10 and LS10" ;
    icsa:CVSSScore "4.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-13531; CVE-2019-13535" ;
    icsa:cweNumber "CWE-693; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2019-13531,
        cve-res:CVE-2019-13535 ;
    icsa:hasCWE cwe-res:CWE-287,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Valleylab FT10 and LS10" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Medtronic Valleylab energy and electrosurgery products affected: Valleylab FT10 Energy Platform (VLFT10GEN) Version 2.1.0 and lower Version 2.0.3 and lower Valleylab LS10 Energy Platform (VLLS10GEN”not available in the United States) Version 1.20.2 and lower." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-311-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-311-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-311-02" ;
    dcterms:issued "2019-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-11-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic Valleylab FT10 and FX8" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-13539; CVE-2019-3464; CVE-2019-13543; CVE-2019-3463" ;
    icsa:cweNumber "CWE-328; CWE-20; CWE-798" ;
    icsa:hasCVE cve-res:CVE-2019-13539,
        cve-res:CVE-2019-13543,
        cve-res:CVE-2019-3463,
        cve-res:CVE-2019-3464 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-328,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Valleylab FT10 and FX8" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Medtronic Valleylab energy products affected: Valleylab Exchange Client; Version 3.4 and below Valleylab FT10 Energy Platform (VLFT10GEN) software Version 4.0.0 and below Valleylab FX8 Energy Platform (VLFX8GEN) software Version 1.1.0 and below." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-311-02" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-318-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-318-01" ;
    dcterms:issued "2019-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips IntelliBridge EC40/80 (Update A)" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-18241" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2019-18241 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliBridge EC40/80" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "all versions.; all versions IntelliBridge EC80 Hub; IntelliBridge EC40 Hub" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-318-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2019 .

icsa-res:ICSMA-19-353-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-19-353-01" ;
    dcterms:issued "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2019-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Veradius Unity, Pulsera, and Endura Dual WAN Routers" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-18263" ;
    icsa:cweNumber "CWE-326" ;
    icsa:hasCVE cve-res:CVE-2019-18263 ;
    icsa:hasCWE cwe-res:CWE-326 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Veradius Unity, Pulsera, and Endura Dual WAN Routers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Veradius Unity; Pulsera; and Endura Dual WAN Routers are affected: Veradius Unity (718132) with wireless option (shipped between 2016-August 2018) Veradius Unity (718132) with ViewForum option (shipped between 2016-August 2018) Pulsera (718095) and Endura (718075) with wireless option (shipped between 26-June-2017 through 07-August 2018) Pulsera (718095) and Endura (718075) with ViewForum option (shipped between 26-June-2017 through 07-August 2018)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-19-353-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2019 .

icsa-res:ICSMA-20-023-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-023-01" ;
    dcterms:issued "2020-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE CARESCAPE, ApexPro, and Clinical Information Center systems" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-6962; CVE-2020-6964; CVE-2020-6963; CVE-2020-6966; CVE-2020-6965; CVE-2020-6961" ;
    icsa:cweNumber "CWE-434; CWE-306; CWE-326; CWE-20; CWE-798; CWE-256" ;
    icsa:hasCVE cve-res:CVE-2020-6961,
        cve-res:CVE-2020-6962,
        cve-res:CVE-2020-6963,
        cve-res:CVE-2020-6964,
        cve-res:CVE-2020-6965,
        cve-res:CVE-2020-6966 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-256,
        cwe-res:CWE-306,
        cwe-res:CWE-326,
        cwe-res:CWE-434,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CARESCAPE, ApexPro, and Clinical Information Center systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of GE Healthcare Monitoring platforms are affected: ApexPro Telemetry Server; Versions 4.2 and prior CARESCAPE Telemetry Server; Versions 4.2 and prior Clinical Information Center (CIC); Versions 4.X and 5.X CARESCAPE Telemetry Server; Version 4.3 (Impacted by CVE-2020- 6962 and CVE-2020-6961) CARESCAPE Central Station (CSCS); Versions 1.X CARESCAPE Central Station (CSCS); Versions 2.X (Impacted by CVE-2020- 6962 and CVE-2020-6964) B450; Version 2.X (Impacted by CVE-2020- 6962 and CVE-2020-6965) B650; Version 1.X (Impacted by CVE-2020- 6962 and CVE-2020-6965) B650; Version 2.X (Impacted by CVE-2020- 6962 and CVE-2020-6965) B850; Version 1.X (Impacted by CVE-2020- 6962 and CVE-2020-6965) B850; Version 2.X (Impacted by CVE-2020- 6962 and CVE-2020-6965)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-023-01" ;
    icsa:vendor "GE" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-049-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-049-01" ;
    dcterms:issued "2020-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Spacelabs Xhibit Telemetry Receiver (XTR)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-0708" ;
    icsa:cweNumber "CWE-20" ;
    icsa:hasCVE cve-res:CVE-2019-0708 ;
    icsa:hasCWE cwe-res:CWE-20 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Xhibit Telemetry Receiver (XTR)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions and operating systems of Spacelabs Xhibit Telemetry Receiver are affected: Xhibit Telemetry Receiver (XTR); Model number 96280; v1.0.2 Arkon (99999); all versions - previously sold by Spacelabs; no longer a supported product The following Microsoft Windows operating systems; including both 32- and 64-bit versions; as well as all Service Pack versions are affected: Windows 2000 Windows Vista Windows XP Windows 7 Windows Server 2003 Windows Server 2003 R2 Windows Server 2008 Windows Server 2008 R2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-049-01" ;
    icsa:vendor "Spacelabs" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-049-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-049-02" ;
    dcterms:issued "2020-02-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Healthcare Ultrasound Products (Update A)" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-6977; CVE-2024-1486" ;
    icsa:cweNumber "CWE-286; CWE-693" ;
    icsa:hasCVE cve-res:CVE-2020-6977,
        cve-res:CVE-2024-1486 ;
    icsa:hasCWE cwe-res:CWE-286,
        cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ultrasound Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "not including LOGIQ 100 Pro: all versions Voluson; not including VScan product line: all versions Venue; not including EchoPAC: all versions LOGIQ; not including Venue 40 R1-3 and Venue 50 R4-5: all versions.; not including ImageVault: all versions Versana Essential: all versions Invenia ABUS Scan station; GE Healthcare reports that the following ultrasound products are affected: Vivid products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-049-02" ;
    icsa:vendor "GE Healthcare" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-079-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-079-01" ;
    dcterms:issued "2020-03-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Insulet Omnipod" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-10627" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2020-10627 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Omnipod Insulin Management System" ;
    icsa:productDistribution "United States, Canada, Europe" ;
    icsa:productsAffected "The following versions of the Omnipod Insulin Management System are affected: Product ID/Reorder number: 19191 and 40160 UDI/Model/NDC number: ZXP425 (10-Pack) and ZXR425 (10-Pack Canada)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-079-01" ;
    icsa:vendor "Insulet" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-091-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-091-01" ;
    dcterms:issued "2020-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-03-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-10598" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2020-10598 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pyxis MedStation and Pyxis Anesthesia (PAS) ES System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Pyxis MedStation and Anesthesia (PAS) ES Systems are affected: Pyxis MedStation ES System; v1.6.1 Pyxis Anesthesia (PAS) ES System; v1.6.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-091-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-163-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-163-01" ;
    dcterms:issued "2020-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips IntelliBridge Enterprise IBE" ;
    icsa:CVSSScore "2.0"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-12023" ;
    icsa:cweNumber "CWE-532" ;
    icsa:hasCVE cve-res:CVE-2020-12023 ;
    icsa:hasCWE cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliBridge Enterprise IBE" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of IntelliBridge Enterprise (IBE) - interface are affected: IntelliBridge Enterprise (IBE) Versions B.12 and prior The IntelliBridge Enterprise (IBE) provides HL7 interface interoperability between Philips products and a hospital's clinical information system or electronic medical records by providing a single integration point to the enterprise. The IBE software and connection licenses serve as the main messaging service that implements communications; mapping; message delivery; data transformation; and routing of data to and from the Philips products to external systems. IntelliBridge Enterprise has no clinical user interface; nor does it interpret; inspect; or provide additional analytical functionality for medical device data. Workflows affected: IntelliBridge Enterprise system integration with; SureSigns (VS4) EarlyVue (VS30) IntelliVue Guardian (IGS)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-163-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-170-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-170-01" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter ExactaMix (Update A)" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-12032; CVE-2020-12024; CVE-2020-12016; CVE-2020-12008; CVE-2020-12020; CVE-2020-12012; CVE-2017-0143" ;
    icsa:cweNumber "CWE-668; CWE-284; CWE-20; CWE-311; CWE-259; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2017-0143,
        cve-res:CVE-2020-12008,
        cve-res:CVE-2020-12012,
        cve-res:CVE-2020-12016,
        cve-res:CVE-2020-12020,
        cve-res:CVE-2020-12024,
        cve-res:CVE-2020-12032 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-259,
        cwe-res:CWE-284,
        cwe-res:CWE-311,
        cwe-res:CWE-319,
        cwe-res:CWE-668 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ExactaMix" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Baxter ExactaMix Systems are affected: ExactaMix EM2400 Versions 1.10; 1.11; 1.13; 1.14; ExactaMix EM1200 Versions 1.1; 1.2; 1.4; 1.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-170-01" ;
    icsa:vendor "Baxter" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-170-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-170-02" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter PrismaFlex and PrisMax (Update B)" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-12037; CVE-2020-12036; CVE-2020-12035" ;
    icsa:cweNumber "CWE-319; CWE-259; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2020-12035,
        cve-res:CVE-2020-12036,
        cve-res:CVE-2020-12037 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-287,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Baxter PrismaFlex and PrisMax" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following models and versions of Baxter medical systems are affected: PrismaFlex all versions PrisMax all versions prior to 3.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-170-02" ;
    icsa:vendor "Baxter" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-170-03 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-170-03" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter Phoenix Hemodialysis Delivery System (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-12048" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2020-12048 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Phoenix Hemodialysis Delivery System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Phoenix Hemodialysis Delivery System are affected: Phoenix Hemodialysis Delivery System SW 3.36 and 3.40." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-170-03" ;
    icsa:vendor "Baxter" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-170-04 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-170-04" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter Sigma Spectrum Infusion Pumps (Update B)" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-12047; CVE-2020-12041; CVE-2020-12043; CVE-2020-12040; CVE-2020-12039; CVE-2020-12045" ;
    icsa:cweNumber "CWE-732; CWE-259; CWE-319; CWE-672" ;
    icsa:hasCVE cve-res:CVE-2020-12039,
        cve-res:CVE-2020-12040,
        cve-res:CVE-2020-12041,
        cve-res:CVE-2020-12043,
        cve-res:CVE-2020-12045,
        cve-res:CVE-2020-12047 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-319,
        cwe-res:CWE-672,
        cwe-res:CWE-732 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sigma Spectrum Infusion Pumps" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "and v22D24 to v22D28 Baxter Spectrum LVP v8.x with Wireless Battery Modules v17; v16; are affected: Sigma Spectrum v6.x model 35700BAX Baxter Spectrum v8.x model 35700BAX2 --------- Begin Update B Part 1 of 6 --------- Baxter Spectrum v9.x model 35700BAX3 Sigma Spectrum LVP v6.x with Wireless Battery Modules v9; and v22D24 to v22D28 Baxter Spectrum LVP v9.x with Wireless Battery Module v22D19 to v22D28 --------- End Update B Part 1 of 6 --------- .; v17; v16D38; v14; v11; The following versions of Sigma Spectrum Infusion systems; v20D29 to v20D32; v17D19; v15; v13" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-170-04" ;
    icsa:vendor "Baxter" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-170-05 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-170-05" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "BIOTRONIK CardioMessenger II" ;
    icsa:CVSSScore "4.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-18256; CVE-2019-18252; CVE-2019-18246; CVE-2019-18254; CVE-2019-18248" ;
    icsa:cweNumber "CWE-257; CWE-319; CWE-311; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2019-18246,
        cve-res:CVE-2019-18248,
        cve-res:CVE-2019-18252,
        cve-res:CVE-2019-18254,
        cve-res:CVE-2019-18256 ;
    icsa:hasCWE cwe-res:CWE-257,
        cwe-res:CWE-287,
        cwe-res:CWE-311,
        cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CardioMessenger II" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the CardioMessenger II - a home monitoring unit are affected: CardioMessenger II-S T-Line T4APP 2.20 CardioMessenger II-S GSM T4APP 2.20." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-170-05" ;
    icsa:vendor "BIOTRONIK" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-170-06 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-170-06" ;
    dcterms:issued "2020-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Alaris PCU (Update A)" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-11479" ;
    icsa:cweNumber "CWE-400" ;
    icsa:hasCVE cve-res:CVE-2019-11479 ;
    icsa:hasCWE cwe-res:CWE-400 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alaris PCU" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the BD Alaris PCU that has implemented the Linux Kernel v4.4.97 within the Laird Wireless Module WB40N are affected: Alaris PC Unit: Versions 9.13; 9.19; 9.33; and 12.1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-170-06" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-177-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-177-01" ;
    dcterms:issued "2020-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Ultrasound Systems" ;
    icsa:CVSSScore "3.6"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-14477" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2020-14477 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Ultrasound Systems" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Philips Ultrasound Systems are affected: Ultrasound ClearVue Versions 3.2 and prior Ultrasound CX Versions 5.0.2 and prior Ultrasound EPIQ/Affiniti Versions VM5.0 and prior Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-177-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-184-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-184-01" ;
    dcterms:issued "2020-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "OpenClinic GA (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Open-source" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-14493; CVE-2016-1181; CVE-2020-14485; CVE-2020-14491; CVE-2020-14494; CVE-2020-14486; CVE-2016-1182; CVE-2020-14484; CVE-2020-14489; CVE-2020-14492; CVE-2014-0114; CVE-2020-14490; CVE-2020-14488; CVE-2020-14487" ;
    icsa:cweNumber "CWE-434; CWE-22; CWE-862; CWE-912; CWE-307; CWE-287; CWE-250; CWE-79; CWE-522; CWE-288; CWE-285; CWE-1104" ;
    icsa:hasCVE cve-res:CVE-2014-0114,
        cve-res:CVE-2016-1181,
        cve-res:CVE-2016-1182,
        cve-res:CVE-2020-14484,
        cve-res:CVE-2020-14485,
        cve-res:CVE-2020-14486,
        cve-res:CVE-2020-14487,
        cve-res:CVE-2020-14488,
        cve-res:CVE-2020-14489,
        cve-res:CVE-2020-14490,
        cve-res:CVE-2020-14491,
        cve-res:CVE-2020-14492,
        cve-res:CVE-2020-14493,
        cve-res:CVE-2020-14494 ;
    icsa:hasCWE cwe-res:CWE-1104,
        cwe-res:CWE-22,
        cwe-res:CWE-250,
        cwe-res:CWE-285,
        cwe-res:CWE-287,
        cwe-res:CWE-288,
        cwe-res:CWE-307,
        cwe-res:CWE-434,
        cwe-res:CWE-522,
        cwe-res:CWE-79,
        cwe-res:CWE-862,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OpenClinic GA" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OpenClinic GA; an open-source integrated hospital information management system; are affected: OpenClinic GA Version 5.09.02 OpenClinic GA Version 5.89.05b." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-184-01" ;
    icsa:vendor "OpenClinic GA" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-196-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-196-01" ;
    dcterms:issued "2020-07-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Capsule Technologies SmartLinx Neuron 2 (Update A)" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2019-5024" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2019-5024 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SmartLinx Neuron 2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Capsule Technologies SmartLinx Neuron 2 - a medical device platform are affected: Capsule Technologies SmartLinx Neuron 2: Firmware Versions 9.0.3 and older." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-196-01" ;
    icsa:vendor "Capsule Technologies Inc" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-212-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-212-01" ;
    dcterms:issued "2020-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-07-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips DreamMapper" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-14518" ;
    icsa:cweNumber "CWE-532" ;
    icsa:hasCVE cve-res:CVE-2020-14518 ;
    icsa:hasCWE cwe-res:CWE-532 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DreamMapper" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DreamMapper - a mobile app used to manage sleep apnea are affected: DreamMapper Version 2.24 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-212-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-233-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-233-01" ;
    dcterms:issued "2020-08-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-08-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips SureSigns VS4" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-16239; CVE-2020-16237; CVE-2020-16241" ;
    icsa:cweNumber "CWE-284; CWE-20; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2020-16237,
        cve-res:CVE-2020-16239,
        cve-res:CVE-2020-16241 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-284,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SureSigns VS4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of SureSigns VS4 - a vital signs patient monitor are affected: SureSigns VS4 A.07.107 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-233-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-254-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-254-01" ;
    dcterms:issued "2020-09-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-12-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Patient Monitoring Devices (Update C)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-16224; CVE-2020-16228; CVE-2020-16212; CVE-2020-16218; CVE-2020-16214; CVE-2020-16216; CVE-2020-16220; CVE-2020-16222" ;
    icsa:cweNumber "CWE-668; CWE-287; CWE-79; CWE-299; CWE-1286; CWE-1236; CWE-20; CWE-130" ;
    icsa:hasCVE cve-res:CVE-2020-16212,
        cve-res:CVE-2020-16214,
        cve-res:CVE-2020-16216,
        cve-res:CVE-2020-16218,
        cve-res:CVE-2020-16220,
        cve-res:CVE-2020-16222,
        cve-res:CVE-2020-16224,
        cve-res:CVE-2020-16228 ;
    icsa:hasCWE cwe-res:CWE-1236,
        cwe-res:CWE-1286,
        cwe-res:CWE-130,
        cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-299,
        cwe-res:CWE-668,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Patient Information Center iX (PICiX); PerformanceBridge Focal Point; IntelliVue Patient Monitors MX100, MX400-MX850, and MP2-MP90; and IntelliVue X2, and X3" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "C.02; The following versions of the patient monitoring devices are affected: Patient Information Center iX (PICiX): Versions B.02; C.03 PerformanceBridge Focal Point: Version A.01 IntelliVue patient monitors MX100; and MP2-MP90: Versions N and prior IntelliVue X3 and X2: Versions N and prior; MX400-MX850" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-254-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-261-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-261-01" ;
    dcterms:issued "2020-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-09-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Clinical Collaboration Platform" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-16198; CVE-2020-16200; CVE-2020-14506; CVE-2020-16247; CVE-2020-14525" ;
    icsa:cweNumber "CWE-352; CWE-757; CWE-16; CWE-693; CWE-83" ;
    icsa:hasCVE cve-res:CVE-2020-14506,
        cve-res:CVE-2020-14525,
        cve-res:CVE-2020-16198,
        cve-res:CVE-2020-16200,
        cve-res:CVE-2020-16247 ;
    icsa:hasCWE cwe-res:CWE-16,
        cwe-res:CWE-352,
        cwe-res:CWE-693,
        cwe-res:CWE-757,
        cwe-res:CWE-83 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Clinical Collaboration Platform" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Clinical Collaboration Platform - HMI data management platform are affected: Clinical Collaboration Platform Versions 12.2.1 and prior NOTE: The product is registered as Vue PACS but was re-branded to Philips Clinical Collaboration Platform when Philips acquired Carestream HCIS." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-261-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-296-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-296-01" ;
    dcterms:issued "2020-10-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-10-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "B. Braun OnlineSuite" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-25172; CVE-2020-25174; CVE-2020-25170" ;
    icsa:cweNumber "CWE-23; CWE-1236; CWE-427" ;
    icsa:hasCVE cve-res:CVE-2020-25170,
        cve-res:CVE-2020-25172,
        cve-res:CVE-2020-25174 ;
    icsa:hasCWE cwe-res:CWE-1236,
        cwe-res:CWE-23,
        cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OnlineSuite" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of OnlineSuite are affected: AP 3.0 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-296-01" ;
    icsa:vendor "B. Braun Melsungen AG" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-296-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-296-02" ;
    dcterms:issued "2020-10-22T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (Update A)" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-25158; CVE-2020-25152; CVE-2020-25160; CVE-2020-25166; CVE-2020-25156; CVE-2020-25168; CVE-2020-16238; CVE-2020-25164; CVE-2020-25162; CVE-2020-25150; CVE-2020-25154" ;
    icsa:cweNumber "CWE-759; CWE-643; CWE-79; CWE-284; CWE-23; CWE-798; CWE-269; CWE-384; CWE-489; CWE-601; CWE-347" ;
    icsa:hasCVE cve-res:CVE-2020-16238,
        cve-res:CVE-2020-25150,
        cve-res:CVE-2020-25152,
        cve-res:CVE-2020-25154,
        cve-res:CVE-2020-25156,
        cve-res:CVE-2020-25158,
        cve-res:CVE-2020-25160,
        cve-res:CVE-2020-25162,
        cve-res:CVE-2020-25164,
        cve-res:CVE-2020-25166,
        cve-res:CVE-2020-25168 ;
    icsa:hasCWE cwe-res:CWE-23,
        cwe-res:CWE-269,
        cwe-res:CWE-284,
        cwe-res:CWE-347,
        cwe-res:CWE-384,
        cwe-res:CWE-489,
        cwe-res:CWE-601,
        cwe-res:CWE-643,
        cwe-res:CWE-759,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "L81 and earlier (outside the United States) Battery pack with Wi-Fi; \"The following versions of B. Braun products are affected: SpaceCom; L81 and earlier (outside the United States) Data module compactplus; software Versions U61 and earlier (United States); software Versions A10 and A11 (not distributed in the United States).\"" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-296-02" ;
    icsa:vendor "B. Braun Melsungen AG" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-317-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-317-01" ;
    dcterms:issued "2020-11-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Alaris 8015 PC Unit and BD Alaris Systems Manager" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-25165" ;
    icsa:cweNumber "CWE-287" ;
    icsa:hasCVE cve-res:CVE-2020-25165 ;
    icsa:hasCWE cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alaris 8015 PC Unit and BD Alaris Systems Manager" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of BD Alaris infusion products are affected: BD Alaris PC Unit; Model 8015; Versions 9.33.1 and earlier BD Alaris Systems Manager; Versions 4.33 and earlier." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-317-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-343-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-343-01" ;
    dcterms:issued "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "GE Healthcare Imaging and Ultrasound Products" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-25175; CVE-2020-25179" ;
    icsa:cweNumber "CWE-523; CWE-497" ;
    icsa:hasCVE cve-res:CVE-2020-25175,
        cve-res:CVE-2020-25179 ;
    icsa:hasCWE cwe-res:CWE-497,
        cwe-res:CWE-523 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Imaging and Ultrasound Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of GE imaging and ultrasound products are affected: Modality Product MR 3.0T Signa HDxt / 3.0T Signa HDx; versions HD 16; HD23 1.5T Brivo MR355 / Optima MR360; versions SV20.1; SV23.0 1.5T Signa HDx / 1.5T Signa HDx; Signa HDi / Signa VIBRANT; versions HD16; HD23 Ultrasound; General Imaging LOGIQ 5 [BT03]; LOGIQ 7 (BT03; BT04; BT06]; LOGIQ 9 [BT02; BT03; BT04; BT06] Ultrasound; Cardiovascular Vivid I [BT06]; Vivid 7 {BT02-BT06]; EchoPAC (Turnkey) [BT06]; Image Vault (Turnkey) [4.3] Ultrasound; Women's Health Voluson 730 [BT05; BT08] Advanced Visualization AW 4.0 to AW 4.6; AWS2.0 to AW3.0 Affected versions of the following can be determined by visiting the GE Customer Portal Interventional Innova 2000; 3100; 4100; 2100-IQ; 3100-IQ; 4100-IQ; 212-IQ; 313-IQ Optima 320; CL320i; CL323i; CL320; 3100 Optima IGS 320; 330; Innova IGS 5x0; 6x0; 7x0 Advanced Visualization AW 4.0 to AW 4.6; AWS2.0 to AW3.0 X-Ray Brivo XR118; XR383; XR515; XR575; Definium 5000; 6000; 8000; AMX 700; Discovery XR650; XR656; XR656+; Optima XR640; XR646; XR220amx; XR200amx; Precision 500D; WDR1 Mammography Seno 200D; DS; Essential; Senographe Pristina Computed Tomography BrightSpeed Elite; Elite Select; Edge; Edge Select Brivo CT385 Discovery CT590RT; CT750HD LightSpeed VCT; Pro16; RT16 Optima Advance; CT520; CT540; CT660; CT580; CT580RT; CT580W; CT670; CT680 Quantum; Expert & Professional Revolution EVO; HD; ACT; ACTs; CT; Discovery CT; Frontier; Frontier ES Nuclear Medicine; PET/CT Brivo NM 615 Discovery NM 630; NM 750b; NM D530c; NM/CT D570c; NM/CT 670 Infinia Discovery NM830; NM/CT 860; NM/CT850; NM/CT 870; MI MI DR; IQ Optima NM/CT 640 Ventri Xeleris PET Discovery IQ; IQ upgrade PETrace 800." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-343-01" ;
    icsa:vendor "GE Healthcare" ;
    icsa:year 2020 .

icsa-res:ICSMA-20-345-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-20-345-01" ;
    dcterms:issued "2020-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2020-12-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic MyCareLink Smart" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-25183; CVE-2020-27252; CVE-2020-25187" ;
    icsa:cweNumber "CWE-122; CWE-367; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2020-25183,
        cve-res:CVE-2020-25187,
        cve-res:CVE-2020-27252 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-287,
        cwe-res:CWE-367 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MyCareLink Smart" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Medtronic MyCareLink Smart Patient Reader are affected: Smart Model 25000 Patient Reader; all versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-20-345-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2020 .

icsa-res:ICSMA-21-007-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-007-01" ;
    dcterms:issued "2021-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Innokas Yhtymä Oy Vital Signs Monitor" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Finland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-27260; CVE-2020-27262" ;
    icsa:cweNumber "CWE-79; CWE-74" ;
    icsa:hasCVE cve-res:CVE-2020-27260,
        cve-res:CVE-2020-27262 ;
    icsa:hasCWE cwe-res:CWE-74,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Innokas Yhtymä Oy Vital Signs Monitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Innokas Yhtymä Oy Vital Signs Monitors are affected: VC150 prior to Version 1.7.15." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-007-01" ;
    icsa:vendor "Innokas Yhtymä Oy" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-012-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-012-01" ;
    dcterms:issued "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "SOOIL Dana Diabecare RS Products" ;
    icsa:CVSSScore "7.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-27268; CVE-2020-27270; CVE-2020-27276; CVE-2020-27264; CVE-2020-27258; CVE-2020-27269; CVE-2020-27272; CVE-2020-27266; CVE-2020-27256" ;
    icsa:cweNumber "CWE-290; CWE-322; CWE-603; CWE-523; CWE-602; CWE-330; CWE-294; CWE-798; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2020-27256,
        cve-res:CVE-2020-27258,
        cve-res:CVE-2020-27264,
        cve-res:CVE-2020-27266,
        cve-res:CVE-2020-27268,
        cve-res:CVE-2020-27269,
        cve-res:CVE-2020-27270,
        cve-res:CVE-2020-27272,
        cve-res:CVE-2020-27276 ;
    icsa:hasCWE cwe-res:CWE-290,
        cwe-res:CWE-294,
        cwe-res:CWE-322,
        cwe-res:CWE-330,
        cwe-res:CWE-522,
        cwe-res:CWE-523,
        cwe-res:CWE-602,
        cwe-res:CWE-603,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "SOOIL Dana Diabecare RS Products" ;
    icsa:productDistribution "Europe, Asia" ;
    icsa:productsAffected "The following versions of Dana Diabecare Insulin Pumps and mobile applications are affected: Dana Diabecare RS: All versions prior to 3.0 AnyDana-i: All versions prior to 3.0 AnyDana-A: All versions prior to 3.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-012-01" ;
    icsa:vendor "SOOIL Development Co. Ltd." ;
    icsa:year 2021 .

icsa-res:ICSMA-21-019-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-019-01" ;
    dcterms:issued "2021-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-01-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Interventional Workstations" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-27298" ;
    icsa:cweNumber "CWE-78" ;
    icsa:hasCVE cve-res:CVE-2020-27298 ;
    icsa:hasCWE cwe-res:CWE-78 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Philips Interventional Workstations" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "This issue affects four Haswell workstations labeled with 12NC identification numbers (4598 009 39471; 4598 009 39481; 4598 009 70861; 4598 009 98531) when running the following versions of interventional software: Interventional Workspot (Release 1.3.2; 1.4.0; 1.4.1; 1.4.3; 1.4.5) Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0) ViewForum (Release 6.3V1L10)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-019-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-047-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-047-01" ;
    dcterms:issued "2021-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hamilton-T1" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2020-27278; CVE-2020-27290; CVE-2020-27282" ;
    icsa:cweNumber "CWE-798; CWE-200; CWE-112" ;
    icsa:hasCVE cve-res:CVE-2020-27278,
        cve-res:CVE-2020-27282,
        cve-res:CVE-2020-27290 ;
    icsa:hasCWE cwe-res:CWE-112,
        cwe-res:CWE-200,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hamilton-T1" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Hamilton-T1 Ventilator are affected: T1 Ventilator Versions 2.2.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-047-01" ;
    icsa:vendor "Hamilton Medical AG" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-084-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-084-01" ;
    dcterms:issued "2021-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-03-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Gemini PET/CT Family" ;
    icsa:CVSSScore "2.4"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-27456" ;
    icsa:cweNumber "CWE-921" ;
    icsa:hasCVE cve-res:CVE-2021-27456 ;
    icsa:hasCWE cwe-res:CWE-921 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Philips Gemini PET/CT Family" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Philips reports the vulnerability affects the following Gemini PET/CT products: 882300 Gemini 16 Slice 882160 Gemini Dual 882400 Gemini GXL 10 Slice 882390 Gemini GXL 6 Slice 882410 Gemini GXL 16 Slice 882412 GEMINI LXL 882473 Gemini TF Ready 882470 Gemini TF 16 w/ TOF Performance 882471 Gemini TF 64 w/ TOF Performance 882476 Gemini TF Big Bore 882438 TruFlight Select PET/CT." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-084-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-152-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-152-01" ;
    dcterms:issued "2021-06-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-11-22T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hillrom Medical Device Management (Update C)" ;
    icsa:CVSSScore "5.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-27410; CVE-2021-27408" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2021-27408,
        cve-res:CVE-2021-27410 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Welch Allyn medical device management tools" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Welch Allyn Service Tool: versions prior to v1.10 Welch Allyn Connex Device Integration Suite - Network Connectivity Engine (NCE): versions prior to v5.3 Welch Allyn Software Development Kit (SDK): versions prior to v3.2 Welch Allyn Connex Central Station (CS): versions prior to v1.8.4 Service Pack 01 Welch Allyn Service Monitor: versions prior to v1.7.0.0 Welch Allyn Connex Vital Signs Monitor (CVSM): versions prior to v2.43.02 Welch Allyn Connex Integrated Wall System (CIWS): versions prior to v2.43.02 Welch Allyn Connex Spot Monitor (CSM): versions prior to v1.52 Welch Allyn Spot Vital Signs 4400 Device (Spot 4400) / Welch Allyn Spot 4400 Vital Signs Extended Care Device: versions prior to v1.11.00.; The following Hillrom products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-152-01" ;
    icsa:vendor "Hillrom" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-161-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-161-01" ;
    dcterms:issued "2021-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "ZOLL Defibrillator Dashboard" ;
    icsa:CVSSScore "9.9"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-27481; CVE-2021-27479; CVE-2021-27483; CVE-2021-27489; CVE-2021-27487; CVE-2021-27485" ;
    icsa:cweNumber "CWE-434; CWE-79; CWE-321; CWE-257; CWE-312; CWE-269" ;
    icsa:hasCVE cve-res:CVE-2021-27479,
        cve-res:CVE-2021-27481,
        cve-res:CVE-2021-27483,
        cve-res:CVE-2021-27485,
        cve-res:CVE-2021-27487,
        cve-res:CVE-2021-27489 ;
    icsa:hasCWE cwe-res:CWE-257,
        cwe-res:CWE-269,
        cwe-res:CWE-312,
        cwe-res:CWE-321,
        cwe-res:CWE-434,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Defibrillator Dashboard" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Defibrillator Dashboard: All versions prior to 2.2.; a Defibrillator device management platform; The following versions of ZOLL Defibrillator Dashboard" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-161-01" ;
    icsa:vendor "ZOLL" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-175-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-175-01" ;
    dcterms:issued "2021-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-06-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Interoperability Solution XDS" ;
    icsa:CVSSScore "3.7"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-32966" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2021-32966 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Interoperability Solution XDS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of the Philips Interoperability Solution XDS document sharing system are affected: Versions 2.5 through 3.11 Versions 2018-1 through 2021-1." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-175-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-187-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-187-01" ;
    dcterms:issued "2021-07-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Vue PACS (Update C)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-27493; CVE-2015-9251; CVE-2012-1708; CVE-2021-33020; CVE-2018-11218; CVE-2021-27497; CVE-2021-39369; CVE-2019-9636; CVE-2018-12326; CVE-2021-33024; CVE-2018-10115; CVE-2020-4670; CVE-2021-33022; CVE-2018-8014; CVE-2020-1938; CVE-2021-33018; CVE-2021-27501" ;
    icsa:cweNumber "CWE-287; CWE-710; CWE-1214; CWE-79; CWE-665; CWE-324; CWE-1188; CWE-23; CWE-20; CWE-707; CWE-319; CWE-693; CWE-119; CWE-176; CWE-327; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2012-1708,
        cve-res:CVE-2015-9251,
        cve-res:CVE-2018-10115,
        cve-res:CVE-2018-11218,
        cve-res:CVE-2018-12326,
        cve-res:CVE-2018-8014,
        cve-res:CVE-2019-9636,
        cve-res:CVE-2020-1938,
        cve-res:CVE-2020-4670,
        cve-res:CVE-2021-27493,
        cve-res:CVE-2021-27497,
        cve-res:CVE-2021-27501,
        cve-res:CVE-2021-33018,
        cve-res:CVE-2021-33020,
        cve-res:CVE-2021-33022,
        cve-res:CVE-2021-33024,
        cve-res:CVE-2021-39369 ;
    icsa:hasCWE cwe-res:CWE-1188,
        cwe-res:CWE-119,
        cwe-res:CWE-1214,
        cwe-res:CWE-176,
        cwe-res:CWE-20,
        cwe-res:CWE-23,
        cwe-res:CWE-287,
        cwe-res:CWE-319,
        cwe-res:CWE-324,
        cwe-res:CWE-327,
        cwe-res:CWE-522,
        cwe-res:CWE-665,
        cwe-res:CWE-693,
        cwe-res:CWE-707,
        cwe-res:CWE-710,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vue PACS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Philips reports these vulnerabilities affect the following Vue PACS products: Vue PACS: Versions 12.2.x.x and prior Vue MyVue: Versions 12.2.x.x and prior Vue Speech: Versions 12.2.x.x and prior Vue Motion: Versions 12.2.1.5 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-187-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-196-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-196-01" ;
    dcterms:issued "2021-07-15T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-07-15T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ypsomed mylife" ;
    icsa:CVSSScore "6.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-27491; CVE-2021-27499; CVE-2021-27495; CVE-2021-27503" ;
    icsa:cweNumber "CWE-798; CWE-329; CWE-522" ;
    icsa:hasCVE cve-res:CVE-2021-27491,
        cve-res:CVE-2021-27495,
        cve-res:CVE-2021-27499,
        cve-res:CVE-2021-27503 ;
    icsa:hasCWE cwe-res:CWE-329,
        cwe-res:CWE-522,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "mylife Cloud, mylife Mobile Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Ypsomed mylife diabetes management platform; are affected: Ypsomed mylife Cloud: All versions prior to 1.7.2 Ypsomed mylife App: All versions prior to 1.7.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-196-01" ;
    icsa:vendor "Ypsomed" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-215-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-215-01" ;
    dcterms:issued "2021-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-08-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "Swisslog Healthcare Translogic PTS" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Healthcare" ;
    icsa:cveNumber "CVE-2021-37161; CVE-2021-37163; CVE-2021-37164; CVE-2021-37166; CVE-2021-37160; CVE-2021-37162; CVE-2021-37165; CVE-2021-37167" ;
    icsa:cweNumber "CWE-287; CWE-250; CWE-787; CWE-191; CWE-259; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2021-37160,
        cve-res:CVE-2021-37161,
        cve-res:CVE-2021-37162,
        cve-res:CVE-2021-37163,
        cve-res:CVE-2021-37164,
        cve-res:CVE-2021-37165,
        cve-res:CVE-2021-37166,
        cve-res:CVE-2021-37167 ;
    icsa:hasCWE cwe-res:CWE-191,
        cwe-res:CWE-250,
        cwe-res:CWE-259,
        cwe-res:CWE-287,
        cwe-res:CWE-494,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Translogic PTS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "versions prior to 7.2.5.7.; Swisslog Healthcare reports the vulnerabilities affect the following Translogic Pneumatic Tube Systems: Nexus Control Panel" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-215-01" ;
    icsa:vendor "Swisslog Healthcare" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-273-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-273-01" ;
    dcterms:issued "2021-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-09-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Boston Scientific Zoom Latitude" ;
    icsa:CVSSScore "6.9"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-38392; CVE-2021-38396; CVE-2021-38400; CVE-2021-38398; CVE-2021-38394" ;
    icsa:cweNumber "CWE-284; CWE-916; CWE-1278; CWE-353; CWE-1329" ;
    icsa:hasCVE cve-res:CVE-2021-38392,
        cve-res:CVE-2021-38394,
        cve-res:CVE-2021-38396,
        cve-res:CVE-2021-38398,
        cve-res:CVE-2021-38400 ;
    icsa:hasCWE cwe-res:CWE-1278,
        cwe-res:CWE-1329,
        cwe-res:CWE-284,
        cwe-res:CWE-353,
        cwe-res:CWE-916 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Zoom Latitude" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Boston Scientific reports these vulnerabilities affects the ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-273-01" ;
    icsa:vendor "Boston Scientific" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-294-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-294-01" ;
    dcterms:issued "2021-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "B. Braun Infusomat Space Large Volume Pump (Update A)" ;
    icsa:CVSSScore "9.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-33885; CVE-2021-33886; CVE-2021-33882; CVE-2021-33884; CVE-2021-33883" ;
    icsa:cweNumber "CWE-434; CWE-306; CWE-20; CWE-345; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2021-33882,
        cve-res:CVE-2021-33883,
        cve-res:CVE-2021-33884,
        cve-res:CVE-2021-33885,
        cve-res:CVE-2021-33886 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-306,
        cwe-res:CWE-319,
        cwe-res:CWE-345,
        cwe-res:CWE-434 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Infusomat Space Large Volume Pump" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "or Infusomat Space P pump SpaceStation with SpaceCom 2: All software Versions L81 and earlier Data module compactPlus: All software Versions A10 and A11 that have been installed in a Perfusor compactPlus; which have been installed in an Infusomat Space Infusion Pump or a Perfusor Space Infusion pump SpaceStation with SpaceCom 2: All software Versions 012U000061 and earlier Outside the United States and Canada: Battery Pack SP with Wi-Fi: All software Versions L81 and earlier that have been installed in a Perfusor Space; Infusomat Space; or Infusomat P compactPlus pump; Infusomat compactPlus; B. Braun reports these vulnerabilities affect the following products in the following areas: Within the United States and Canada: Battery pack SP with WiFi: All software Versions 028U000061 and earlier" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-294-01" ;
    icsa:vendor "B. Braun Melsungen AG" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-308-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-308-01" ;
    dcterms:issued "2021-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Tasy EMR" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-39376; CVE-2021-39375" ;
    icsa:cweNumber "CWE-89" ;
    icsa:hasCVE cve-res:CVE-2021-39375,
        cve-res:CVE-2021-39376 ;
    icsa:hasCWE cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Tasy EMR" ;
    icsa:productDistribution "Argentina, Brazil, Colombia, Dominican Republic, Mexico" ;
    icsa:productsAffected "Philips reports these vulnerabilities affect the following Philips Healthcare Tasy Electronic Medical Record (EMR) products: Tasy EMR HTML5 3.06.1803 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-308-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-313-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-313-01" ;
    dcterms:issued "2021-11-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips MRI 1.5T and 3T" ;
    icsa:CVSSScore "6.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-42744; CVE-2021-26248; CVE-2021-26262" ;
    icsa:cweNumber "CWE-284; CWE-200; CWE-708" ;
    icsa:hasCVE cve-res:CVE-2021-26248,
        cve-res:CVE-2021-26262,
        cve-res:CVE-2021-42744 ;
    icsa:hasCWE cwe-res:CWE-200,
        cwe-res:CWE-284,
        cwe-res:CWE-708 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MRI 1.5T and 3T" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Philips reports the vulnerabilities affect the following MRI products: MRI 1.5T: Version 5.x.x MRI 3T: Version 5.x.x." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-313-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-322-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-322-01" ;
    dcterms:issued "2021-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips IntelliBridge EC 40 and EC 80 Hub" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-32993; CVE-2021-33017" ;
    icsa:cweNumber "CWE-798; CWE-288" ;
    icsa:hasCVE cve-res:CVE-2021-32993,
        cve-res:CVE-2021-33017 ;
    icsa:hasCWE cwe-res:CWE-288,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "IntelliBridge EC 40 and EC 80 Hub" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "C.00.04 and prior IntelliBridge EC 80 Hub; The following versions of IntelliBridge are affected: IntelliBridge EC 40 Hub; C.00.04 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-322-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-322-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-322-02" ;
    dcterms:issued "2021-11-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-01-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Patient Information Center iX (PIC iX) and Efficia CM Series (Update A)" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-43548; CVE-2021-43552; CVE-2021-43550" ;
    icsa:cweNumber "CWE-20; CWE-327; CWE-321" ;
    icsa:hasCVE cve-res:CVE-2021-43548,
        cve-res:CVE-2021-43550,
        cve-res:CVE-2021-43552 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-321,
        cwe-res:CWE-327 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Patient Information Center iX (PIC iX) and Efficia CM Series" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "C.02; The following versions of Patient Information Center iX (PIC iX) and Efficia CM Series are affected: Patient Information Center iX (PIC iX): Versions B.02; C.03 Efficia CM Series: Revisions A.01 to C.0x and 4.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-322-02" ;
    icsa:vendor "Philips" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-343-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-343-01" ;
    dcterms:issued "2021-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2021-12-09T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hillrom Welch Allyn Cardio Products" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-43935" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2021-43935 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Welch Allyn Cardio Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Welch Allyn Q-Stress Cardiac Stress Testing System: Versions 6.0.0 through 6.3.1 Welch Allyn X-Scribe Cardiac Stress Testing System: Versions 5.01 through 6.3.1 Welch Allyn Diagnostic Cardiology Suite: Version 2.1.0 Welch Allyn Vision Express: Versions 6.1.0 through 6.4.0 Welch Allyn H-Scribe Holter Analysis System: Versions 5.01 through 6.4.0 Welch Allyn R-Scribe Resting ECG System: Versions 5.01 through 7.0.0 Welch Allyn Connex Cardio: Versions 1.0.0 through 1.1.1.; The following Hillrom cardiology products; when configured to use single sign-on (SSO)" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-343-01" ;
    icsa:vendor "Hillrom" ;
    icsa:year 2021 .

icsa-res:ICSMA-21-355-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-21-355-01" ;
    dcterms:issued "2021-12-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fresenius Kabi Agilia Connect Infusion System (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-23207; CVE-2021-23195; CVE-2021-33846; CVE-2021-43355; CVE-2021-23233; CVE-2021-33843; CVE-2020-35340; CVE-2021-23236; CVE-2021-23196; CVE-2021-41835; CVE-2021-31562; CVE-2021-33848; CVE-2021-44464" ;
    icsa:cweNumber "CWE-552; CWE-79; CWE-603; CWE-284; CWE-522; CWE-798; CWE-548; CWE-256; CWE-327; CWE-1104; CWE-400" ;
    icsa:hasCVE cve-res:CVE-2020-35340,
        cve-res:CVE-2021-23195,
        cve-res:CVE-2021-23196,
        cve-res:CVE-2021-23207,
        cve-res:CVE-2021-23233,
        cve-res:CVE-2021-23236,
        cve-res:CVE-2021-31562,
        cve-res:CVE-2021-33843,
        cve-res:CVE-2021-33846,
        cve-res:CVE-2021-33848,
        cve-res:CVE-2021-41835,
        cve-res:CVE-2021-43355,
        cve-res:CVE-2021-44464 ;
    icsa:hasCWE cwe-res:CWE-1104,
        cwe-res:CWE-256,
        cwe-res:CWE-284,
        cwe-res:CWE-327,
        cwe-res:CWE-400,
        cwe-res:CWE-522,
        cwe-res:CWE-548,
        cwe-res:CWE-552,
        cwe-res:CWE-603,
        cwe-res:CWE-79,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Agilia Connect Infusion System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following components of the Agilia Connect Infusion System; Vigilant MasterMed and Vigilant Insight Agilia Partner maintenance software v3.3.0 and prior.; are affected: Agilia Connect WiFi module of the pumps vD25 and prior Agilia Link+ v3.0 D15 and prior Vigilant Software Suite v1.0: Vigilant Centerium; The following accesories of the Agilia Connect Infusion System" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-21-355-01" ;
    icsa:vendor "Fresenius Kabi" ;
    icsa:year 2021 .

icsa-res:ICSMA-22-006-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-006-01" ;
    dcterms:issued "2022-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-01-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Engage Software" ;
    icsa:CVSSScore "2.6"^^xsd:float ;
    icsa:CVSSSeverity "Low" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2021-23173" ;
    icsa:cweNumber "CWE-284" ;
    icsa:hasCVE cve-res:CVE-2021-23173 ;
    icsa:hasCWE cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Engage Software" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Engage Software Versions 6.2.1 and prior.; a customer support software platform; The following versions of Engage" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-006-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-062-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-062-01" ;
    dcterms:issued "2022-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Pyxis" ;
    icsa:CVSSScore "7.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-22766" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-22766 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pyxis" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an automated medication dispensing system; EC; CP); BD Pyxis Track and Deliver; BD Rowa Pouch Packaging Systems.; The following BD Pyxis products; are affected: BD Pyxis Anesthesia Station ES; BD Pyxis Anesthesia Station 4000; BD Pyxis CATO; BD Pyxis CIISafe; BD Pyxis Inventory Connect; BD Pyxis IV Prep; BD Pyxis JITrBUD; BD Pyxis KanBan RF; BD Pyxis Logistics; BD Pyxis Med Link Family; BD Pyxis MedBank; BD Pyxis MedStation 4000; BD Pyxis MedStation ES; BD Pyxis MedStation ES Server; BD Pyxis ParAssist; BD Pyxis PharmoPack; BD Pyxis ProcedureStation (including EC); BD Pyxis Rapid Rx; BD Pyxis StockStation; BD Pyxis SupplyCenter; BD Pyxis SupplyRoller; BD Pyxis SupplyStation (including RF" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-062-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-062-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-062-02" ;
    dcterms:issued "2022-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-03T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Viper LT" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-22765" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-22765 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Viper LT" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an automated molecular testing system; The following versions of BD Viper LT; are affected: BD Viper LT system: All Versions 2.0 and later." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-062-02" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-088-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-088-01" ;
    dcterms:issued "2022-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-03-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips e-Alert" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-0922" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2022-0922 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "e-Alert" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an MRI system monitoring platform; The following versions of e-Alert; are affected: e-Alert Version 2.7 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-088-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-095-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-095-01" ;
    dcterms:issued "2022-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-04-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "LifePoint Informatics Patient Portal" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-1067" ;
    icsa:cweNumber "CWE-288" ;
    icsa:hasCVE cve-res:CVE-2022-1067 ;
    icsa:hasCWE cwe-res:CWE-288 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Patient Portal" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following version of LifePoint Informatics Patient Portal; a website containing patient health data; is affected:Patient Portal Version LPI 3.5.12.P30." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-095-01" ;
    icsa:vendor "LifePoint Informatics" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-151-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-151-01" ;
    dcterms:issued "2022-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Pyxis" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-22767" ;
    icsa:cweNumber "CWE-262" ;
    icsa:hasCVE cve-res:CVE-2022-22767 ;
    icsa:hasCWE cwe-res:CWE-262 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pyxis" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: BD Pyxis ES Anesthesia Station BD Pyxis CIISafe BD Pyxis Logistics BD Pyxis MedBank BD Pyxis MedStation 4000 BD Pyxis MedStation ES BD Pyxis MedStation ES Server BD Pyxis ParAssist BD Pyxis Rapid Rx BD Pyxis StockStation BD Pyxis SupplyCenter BD Pyxis SupplyRoller BD Pyxis SupplyStation BD Pyxis SupplyStation EC BD Pyxis SupplyStation RF auxiliary BD Rowa Pouch Packaging Systems.; an automated medication dispensing system; The following BD Pyxis products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-151-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-151-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-151-02" ;
    dcterms:issued "2022-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-05-31T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Synapsys" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-30277" ;
    icsa:cweNumber "CWE-613" ;
    icsa:hasCVE cve-res:CVE-2022-30277 ;
    icsa:hasCWE cwe-res:CWE-613 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Synapsys" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: BD Synapsys: Versions 4.20; The following versions of BD Synapsys; 4.20 SR1 and 4.30.; a microbiology informatics software platform" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-151-02" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-167-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-167-01" ;
    dcterms:issued "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-16T00:00:00"^^xsd:dateTime ;
    dcterms:title "Hillrom Medical Device Management" ;
    icsa:CVSSScore "7.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-26388; CVE-2022-26389" ;
    icsa:cweNumber "CWE-284; CWE-259" ;
    icsa:hasCVE cve-res:CVE-2022-26388,
        cve-res:CVE-2022-26389 ;
    icsa:hasCWE cwe-res:CWE-259,
        cwe-res:CWE-284 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Welch Allyn medical devices" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "are affected: Welch Allyn ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior Welch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior Welch Allyn ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior Welch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: Versions 2.2.0 and prior.; The following Hillrom products" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-167-01" ;
    icsa:vendor "Hillrom" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-174-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-174-01" ;
    dcterms:issued "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-06-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "OFFIS DCMTK" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-2120; CVE-2022-2119; CVE-2022-2121" ;
    icsa:cweNumber "CWE-23; CWE-22; CWE-476" ;
    icsa:hasCVE cve-res:CVE-2022-2119,
        cve-res:CVE-2022-2120,
        cve-res:CVE-2022-2121 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-23,
        cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DCMTK" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of DCMTK; are affected: DCMTK: All versions prior to 3.6.7.; libraries and software that process DICOM image files" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-174-01" ;
    icsa:vendor "OFFIS" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-244-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-244-01" ;
    dcterms:issued "2022-09-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Contec Health CMS8000 Patient Monitor (Update A)" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-38453; CVE-2022-38100; CVE-2022-38069; CVE-2022-36385; CVE-2022-3027" ;
    icsa:cweNumber "CWE-419; CWE-1263; CWE-770; CWE-798; CWE-489" ;
    icsa:hasCVE cve-res:CVE-2022-3027,
        cve-res:CVE-2022-36385,
        cve-res:CVE-2022-38069,
        cve-res:CVE-2022-38100,
        cve-res:CVE-2022-38453 ;
    icsa:hasCWE cwe-res:CWE-1263,
        cwe-res:CWE-419,
        cwe-res:CWE-489,
        cwe-res:CWE-770,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Contec Health products are affected: CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: Versions smart3250-2.6.27-wlan2.1.7.cramfs and prior CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: Versions CMS7.820.075.08/0.74(0.75) and prior CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: Versions CMS7.820.120.01/0.93(0.95) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-244-01" ;
    icsa:vendor "Contec Health" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-251-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-251-01" ;
    dcterms:issued "2022-09-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter Sigma Spectrum Infusion Pump (Update A)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-26390; CVE-2022-26394; CVE-2022-26393; CVE-2022-26392" ;
    icsa:cweNumber "CWE-134; CWE-306; CWE-311" ;
    icsa:hasCVE cve-res:CVE-2022-26390,
        cve-res:CVE-2022-26392,
        cve-res:CVE-2022-26393,
        cve-res:CVE-2022-26394 ;
    icsa:hasCWE cwe-res:CWE-134,
        cwe-res:CWE-306,
        cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sigma and Baxter Spectrum Infusion Pumps" ;
    icsa:productDistribution "United States, Canada, Puerto Rico, Caribbean" ;
    icsa:productsAffected "and v22D24 to v22D28 Sigma Spectrum LVP v8.x Wireless Battery Modules v17; and v22D24 to v22D28 Baxter Spectrum IQ LVP (v9.x) with Wireless Battery Modules v22D19 to v22D28.; v17; v16D38; v20D29 to v20D32; v17D19; The following versions of Sigma Spectrum Infusion systems are affected: Sigma Spectrum v6.x model 35700BAX Sigma Spectrum v8.x model 35700BAX2 Baxter Spectrum IQ (v9.x) model 35700BAX3 Sigma Spectrum LVP v6.x Wireless Battery Modules v16" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-251-01" ;
    icsa:vendor "Baxter" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-263-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-263-01" ;
    dcterms:issued "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-09-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic NGP 600 Series Insulin Pumps" ;
    icsa:CVSSScore "4.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-32537" ;
    icsa:cweNumber "CWE-693" ;
    icsa:hasCVE cve-res:CVE-2022-32537 ;
    icsa:hasCWE cwe-res:CWE-693 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MiniMed 600 Series Insulin Pumps, Guardian Link 3 Transmitter, Guardian 2 Link Transmitter, Carelink USB, Contour Next Link 2.4" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "MMT-1741; MMT-1742; MMT-1712; MMT-1755 MiniMed 640G: MMT-1711; MMT-1752 MiniMed 670G: MMT-1740; MMT-1780; MMT-1754; MMT-1751; MMT-1762; The following versions of the Medtronic NGP 600 Series Insulin Pumps and accessory components are affected: MiniMed 620G: MMT-1710 MiniMed 630G: MMT-1715; MMT-1760; MMT-1782.; MMT-1781" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-263-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-277-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-277-01" ;
    dcterms:issued "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Totalys MultiProcessor" ;
    icsa:CVSSScore "6.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-40263" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2022-40263 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Totalys MultiProcessor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following BD products and versions are affected: BD Totalys MultiProcessor: All versions 1.70 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-277-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-298-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-298-01" ;
    dcterms:issued "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-10-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "AliveCor KardiaMobile" ;
    icsa:CVSSScore "5.2"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-41627; CVE-2022-40703" ;
    icsa:cweNumber "CWE-311; CWE-302" ;
    icsa:hasCVE cve-res:CVE-2022-40703,
        cve-res:CVE-2022-41627 ;
    icsa:hasCWE cwe-res:CWE-302,
        cwe-res:CWE-311 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "KardiaMobile" ;
    icsa:productDistribution "North America, Europe" ;
    icsa:productsAffected "are affected: Kardia App Android application Version 5.17.1-754993421 and prior (affected only by CVE-[CWE-302]) KardiaMobile IoT device; all versions (affected only by CVE-[CWE-311]).; a smartphone-based personal electrocardiogram (EKG) device; The following versions of KardiaMobile" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-298-01" ;
    icsa:vendor "AliveCor" ;
    icsa:year 2022 .

icsa-res:ICSMA-22-335-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-22-335-01" ;
    dcterms:issued "2022-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2022-12-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD BodyGuard Pumps" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-43557" ;
    icsa:cweNumber "CWE-1299" ;
    icsa:hasCVE cve-res:CVE-2022-43557 ;
    icsa:hasCWE cwe-res:CWE-1299 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "BodyGuard Pumps" ;
    icsa:productDistribution "Deployed outside the United States" ;
    icsa:productsAffected "The following BD BodyGuard products are affected: BD BodyGuard CME BodyGuard 323 (2nd Edition) CME BodyGuard 323 Color Vision (2nd Edition) CME BodyGuard 323 Color Vision (3rd Edition) CME BodyGuard Twins (2nd Edition)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-22-335-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2022 .

icsa-res:ICSMA-23-047-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-047-01" ;
    dcterms:issued "2023-02-16T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-02-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Alaris Infusion Central (Update A)" ;
    icsa:CVSSScore "7.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2022-47376" ;
    icsa:cweNumber "CWE-257" ;
    icsa:hasCVE cve-res:CVE-2022-47376 ;
    icsa:hasCWE cwe-res:CWE-257 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alaris Infusion Central" ;
    icsa:productDistribution "Outside the United States" ;
    icsa:productsAffected "which are not sold in the U.S. Users who use BD Alaris PCU 8015 or BD Alaris Systems Manager are not impacted by this vulnerability.; The following BD software products are affected: Alaris Infusion Central software versions 1.1 to 1.3.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-047-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2023 .

icsa-res:ICSMA-23-061-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-061-01" ;
    dcterms:issued "2023-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-03-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic Micro Clinician and InterStim Apps" ;
    icsa:CVSSScore "6.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-25931" ;
    icsa:cweNumber "CWE-620" ;
    icsa:hasCVE cve-res:CVE-2023-25931 ;
    icsa:hasCWE cwe-res:CWE-620 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Micros Clinician (A51200) app and InterStim X Clinician (A51300) app" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Medtronic Clinician App are affected: Micro Clinician (A51200) InterStim X Clinician (A51300)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-061-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2023 .

icsa-res:ICSMA-23-103-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-103-01" ;
    dcterms:issued "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "B. Braun Battery Pack SP with Wi-Fi" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-0888" ;
    icsa:cweNumber "CWE-95" ;
    icsa:hasCVE cve-res:CVE-2023-0888 ;
    icsa:hasCWE cwe-res:CWE-95 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Battery Pack SP with Wi-Fi" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following B. Braun products are affected: Battery pack SP with Wi-Fi (SN 138853 and higher) with software 053L000091 (global) / 054U000091 (U.S.) and 053L000092 (global) / 054U000092 (U.S.)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-103-01" ;
    icsa:vendor "B. Braun Melsungen AG" ;
    icsa:year 2023 .

icsa-res:ICSMA-23-117-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-117-01" ;
    dcterms:issued "2023-04-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-04-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Illumina Universal Copy Service" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-1968; CVE-2023-1966" ;
    icsa:cweNumber "CWE-250; CWE-1327" ;
    icsa:hasCVE cve-res:CVE-2023-1966,
        cve-res:CVE-2023-1968 ;
    icsa:hasCWE cwe-res:CWE-1327,
        cwe-res:CWE-250 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Universal Copy Service (UCS)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following products using Illumina Universal Copy Service are affected: iScan Control Software: v4.0.0 iScan Control Software: v4.0.5 iSeq 100: All versions MiniSeq Control Software: v2.0 and newer MiSeq Control Software: v4.0 (RUO Mode) MiSeqDx Operating Software: v4.0.1 and newer NextSeq 500/550 Control Software: v4.0 NextSeq 550Dx Control Software: v4.0 (RUO Mode) NextSeq 550Dx Operating Software: v1.0.0 to 1.3.1 NextSeq 550Dx Operating Software: v1.3.3 and newer NextSeq 1000/2000 Control Software: v1.7 and prior NovaSeq 6000 Control Software: v1.7 and prior NovaSeq Control Software: v1.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-117-01" ;
    icsa:vendor "Illumina" ;
    icsa:year 2023 .

icsa-res:ICSMA-23-180-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-180-01" ;
    dcterms:issued "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-06-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic Paceart Optima System" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-31222" ;
    icsa:cweNumber "CWE-502" ;
    icsa:hasCVE cve-res:CVE-2023-31222 ;
    icsa:hasCWE cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Paceart Optima System" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Medtronic products are affected: Paceart Optima: Versions 1.11 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-180-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2023 .

icsa-res:ICSMA-23-194-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-194-01" ;
    dcterms:issued "2023-07-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Alaris System with Guardrails Suite MX (Update A)" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-30560; CVE-2023-30563; CVE-2023-30559; CVE-2023-30561; CVE-2023-30565; CVE-2023-30562; CVE-2023-30564; CVE-2018-1285" ;
    icsa:cweNumber "CWE-611; CWE-287; CWE-79; CWE-20; CWE-311; CWE-345; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2018-1285,
        cve-res:CVE-2023-30559,
        cve-res:CVE-2023-30560,
        cve-res:CVE-2023-30561,
        cve-res:CVE-2023-30562,
        cve-res:CVE-2023-30563,
        cve-res:CVE-2023-30564,
        cve-res:CVE-2023-30565 ;
    icsa:hasCWE cwe-res:CWE-20,
        cwe-res:CWE-287,
        cwe-res:CWE-311,
        cwe-res:CWE-319,
        cwe-res:CWE-345,
        cwe-res:CWE-611,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Alaris PCU, Guardrails Editor, Systems Manager, Calculation Services, CQI Reporter" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of BD Alaris system products are affected: BD Alaris Point-of-Care Unit (PCU) Model 8015: Versions 12.1.3 and prior BD Alaris Guardrails Editor: Versions 12.1.2 and prior BD Alaris Systems Manager: Versions 12.3 and prior CQI Reporter: v10.17 and prior Calculation Services: Versions 1.0 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-194-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2023 .

icsa-res:ICSMA-23-248-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-248-01" ;
    dcterms:issued "2023-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Softneta MedDream PACS Premium" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Lithuania" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-40150; CVE-2023-39227" ;
    icsa:cweNumber "CWE-749; CWE-256" ;
    icsa:hasCVE cve-res:CVE-2023-39227,
        cve-res:CVE-2023-40150 ;
    icsa:hasCWE cwe-res:CWE-256,
        cwe-res:CWE-749 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MedDream PACS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Softneta products are affected: MedDream PACS: v7.2.8.810 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-248-01" ;
    icsa:vendor "Softneta" ;
    icsa:year 2023 .

icsa-res:ICSMA-23-285-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-285-01" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Santesoft Sante DICOM Viewer Pro" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Cyprus" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-35986; CVE-2023-39431" ;
    icsa:cweNumber "CWE-787; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2023-35986,
        cve-res:CVE-2023-39431 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sante DICOM Viewer Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Santesoft products are affected: Sante DICOM Viewer Pro: v12.2.4 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-285-01" ;
    icsa:vendor "Santesoft" ;
    icsa:year 2023 .

icsa-res:ICSMA-23-285-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-285-02" ;
    dcterms:issued "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-10-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Santesoft Sante FFT Imaging" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Cyprus" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-5059" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2023-5059 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sante FFT Imaging" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Santesof products are affected: Sante FFT Imaging: Versions v1.4.0 and prior" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-285-02" ;
    icsa:vendor "Santesoft" ;
    icsa:year 2023 .

icsa-res:ICSMA-23-331-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-23-331-01" ;
    dcterms:issued "2023-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2023-11-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD FACSChorus" ;
    icsa:CVSSScore "5.4"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-29061; CVE-2023-29062; CVE-2023-29066; CVE-2023-29064; CVE-2023-29060; CVE-2023-29063; CVE-2023-29065" ;
    icsa:cweNumber "CWE-287; CWE-306; CWE-798; CWE-277; CWE-266; CWE-1299" ;
    icsa:hasCVE cve-res:CVE-2023-29060,
        cve-res:CVE-2023-29061,
        cve-res:CVE-2023-29062,
        cve-res:CVE-2023-29063,
        cve-res:CVE-2023-29064,
        cve-res:CVE-2023-29065,
        cve-res:CVE-2023-29066 ;
    icsa:hasCWE cwe-res:CWE-1299,
        cwe-res:CWE-266,
        cwe-res:CWE-277,
        cwe-res:CWE-287,
        cwe-res:CWE-306,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "FACSChorus" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "shipped with FACSMelody Cell Sorter): v3.0 and v3.1; The following BD products are affected: BD FACSChorus (HP Z2 G9 workstation; shipped with FACSDiscover S8 Cell Sorter): v5.0 and v5.1 BD FACSChorus (HP Z2 G5 workstation" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-23-331-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2023 .

icsa-res:ICSMA-24-023-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-023-01" ;
    dcterms:issued "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-01-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "Orthanc Osimis DICOM Web Viewer" ;
    icsa:CVSSScore "7.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Belgium" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-7238" ;
    icsa:cweNumber "CWE-79" ;
    icsa:hasCVE cve-res:CVE-2023-7238 ;
    icsa:hasCWE cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Osimis Web Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of Osimis Web Viewer are affected: Osimis WebViewer: Version 1.4.2.0-9d9eff4." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-023-01" ;
    icsa:vendor "Orthanc" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-058-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-058-01" ;
    dcterms:issued "2024-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Santesoft Sante DICOM Viewer Pro" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Cyprus" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-1453" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2024-1453 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sante DICOM Viewer Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Santesoft products and versions are affected: Sante DICOM Viewer Pro: Versions 14.0.3 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-058-01" ;
    icsa:vendor "Santesoft" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-060-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-060-01" ;
    dcterms:issued "2024-02-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-02-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "MicroDicom DICOM Viewer" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Bulgaria" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-22100; CVE-2024-25578" ;
    icsa:cweNumber "CWE-122; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-22100,
        cve-res:CVE-2024-25578 ;
    icsa:hasCWE cwe-res:CWE-122,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DICOM Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a medical image viewer; are affected: MicroDicom DICOM Viewer: Versions 2023.3 (Build 9342) and prior.; The following versions of MicroDicom DICOM Viewer" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-060-01" ;
    icsa:vendor "MicroDicom" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-065-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-065-01" ;
    dcterms:issued "2024-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-03-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Santesoft Sante FFT Imaging" ;
    icsa:CVSSScore "7.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Cyprus" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-1696" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-1696 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sante FFT Imaging" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Santesoft products are affected: Sante FFT Imaging: Versions 1.4.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-065-01" ;
    icsa:vendor "Santesoft" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-151-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-151-01" ;
    dcterms:issued "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter Welch Allyn Configuration Tool" ;
    icsa:CVSSScore "9.4"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-5176" ;
    icsa:cweNumber "CWE-522" ;
    icsa:hasCVE cve-res:CVE-2024-5176 ;
    icsa:hasCWE cwe-res:CWE-522 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Welch Allyn Configuration Tool" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Baxter (formerly Hillrom and Welch Allyn) products; are affected: Welch Allyn Product Configuration Tool: Versions 1.9.4.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-151-01" ;
    icsa:vendor "Baxter" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-151-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-151-02" ;
    dcterms:issued "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-05-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter Welch Allyn Connex Spot Monitor" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-1275" ;
    icsa:cweNumber "CWE-1394" ;
    icsa:hasCVE cve-res:CVE-2024-1275 ;
    icsa:hasCWE cwe-res:CWE-1394 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Welch Allyn Connex Spot Monitor (CSM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Baxter (formerly manufactured by Hillrom) medical devices are affected: Welch Allyn Connex Spot Monitor (CSM): Versions 1.52 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-151-02" ;
    icsa:vendor "Baxter" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-163-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-163-01" ;
    dcterms:issued "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-06-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "MicroDicom DICOM Viewer" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Bulgaria" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-28877; CVE-2024-33606" ;
    icsa:cweNumber "CWE-939; CWE-121" ;
    icsa:hasCVE cve-res:CVE-2024-28877,
        cve-res:CVE-2024-33606 ;
    icsa:hasCWE cwe-res:CWE-121,
        cwe-res:CWE-939 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DICOM Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a medical image viewer; are affected: DICOM Viewer: Versions prior to 2024.2.; The following versions of MicroDicom DICOM Viewer" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-163-01" ;
    icsa:vendor "MicroDicom" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-200-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-200-01" ;
    dcterms:issued "2024-07-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Vue PACS (Update A)" ;
    icsa:CVSSScore "6.0"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2023-40704; CVE-2021-28165" ;
    icsa:cweNumber "CWE-1392; CWE-770" ;
    icsa:hasCVE cve-res:CVE-2021-28165,
        cve-res:CVE-2023-40704 ;
    icsa:hasCWE cwe-res:CWE-1392,
        cwe-res:CWE-770 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Vue PACS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Philips products are affected: Vue PACS: Versions prior to 12.2.8.410." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-200-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-249-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-249-01" ;
    dcterms:issued "2024-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-05T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter Connex Health Portal" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-6795; CVE-2024-6796" ;
    icsa:cweNumber "CWE-284; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2024-6795,
        cve-res:CVE-2024-6796 ;
    icsa:hasCWE cwe-res:CWE-284,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Connex Health Portal" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Baxter (formerly Hillrom and Welch Allyn) products are affected: Baxter Connex Health Portal: all versions prior to 8/30/2024." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-249-01" ;
    icsa:vendor "Baxter" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-254-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-254-01" ;
    dcterms:issued "2024-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "BPL Medical Technologies PWS-01-BT and BPL Be Well Android Application" ;
    icsa:CVSSScore "5.1"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-34463" ;
    icsa:cweNumber "CWE-319" ;
    icsa:hasCVE cve-res:CVE-2024-34463 ;
    icsa:hasCWE cwe-res:CWE-319 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "PWS-01-BT, Be Well Android App" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following BPL Medical Technologies products are affected: Be Well Android Application: Versions 3.64 and prior PWS-01-BT: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-254-01" ;
    icsa:vendor "BPL Medical Technologies" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-319-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-319-01" ;
    dcterms:issued "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-11-14T00:00:00"^^xsd:dateTime ;
    dcterms:title "Baxter Life2000 Ventilation System" ;
    icsa:CVSSScore "10.0"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-48966; CVE-2024-48970; CVE-2024-48967; CVE-2024-48973; CVE-2024-48971; CVE-2024-48974; CVE-2020-8004; CVE-2024-9832; CVE-2024-9834" ;
    icsa:cweNumber "CWE-1191; CWE-1263; CWE-307; CWE-306; CWE-1318; CWE-778; CWE-798; CWE-319; CWE-494" ;
    icsa:hasCVE cve-res:CVE-2020-8004,
        cve-res:CVE-2024-48966,
        cve-res:CVE-2024-48967,
        cve-res:CVE-2024-48970,
        cve-res:CVE-2024-48971,
        cve-res:CVE-2024-48973,
        cve-res:CVE-2024-48974,
        cve-res:CVE-2024-9832,
        cve-res:CVE-2024-9834 ;
    icsa:hasCWE cwe-res:CWE-1191,
        cwe-res:CWE-1263,
        cwe-res:CWE-1318,
        cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-319,
        cwe-res:CWE-494,
        cwe-res:CWE-778,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Life2000 Ventilation System" ;
    icsa:productDistribution "United States" ;
    icsa:productsAffected "The following Baxter (formerly Hillrom) products are affected: Life2000 Ventilation System: Version 06.08.00.00 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-319-01" ;
    icsa:vendor "Baxter" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-352-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-352-01" ;
    dcterms:issued "2024-12-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-01-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "BD Diagnostic Solutions Products (Update A)" ;
    icsa:CVSSScore "8.0"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-10476" ;
    icsa:cweNumber "CWE-1392" ;
    icsa:hasCVE cve-res:CVE-2024-10476 ;
    icsa:hasCWE cwe-res:CWE-1392 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Diagnostic Solutions Products" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following BD Diagnostic Solutions products are affected: BD BACTEC Blood Culture System: All versions BD COR System: All versions BD EpiCenter Microbiology Data Management System: All versions BD MAX System: All versions BD Phoenix M50 Automated Microbiology System: All versions BD Synapsys Informatics Solution: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-352-01" ;
    icsa:vendor "Becton, Dickinson and Company (BD)" ;
    icsa:year 2024 .

icsa-res:ICSMA-24-354-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-24-354-01" ;
    dcterms:issued "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2024-12-19T00:00:00"^^xsd:dateTime ;
    dcterms:title "Ossur Mobile Logic Application" ;
    icsa:CVSSScore "5.6"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Iceland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-53683; CVE-2024-45832; CVE-2024-54681" ;
    icsa:cweNumber "CWE-798; CWE-77; CWE-497" ;
    icsa:hasCVE cve-res:CVE-2024-45832,
        cve-res:CVE-2024-53683,
        cve-res:CVE-2024-54681 ;
    icsa:hasCWE cwe-res:CWE-497,
        cwe-res:CWE-77,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mobile Logic Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Ossur products are affected: Logic Mobile Application: Versions prior to 1.5.5." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-24-354-01" ;
    icsa:vendor "Ossur" ;
    icsa:year 2024 .

icsa-res:ICSMA-25-030-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-030-01" ;
    dcterms:issued "2025-01-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "Contec Health CMS8000 Patient Monitor (Update A)" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "China" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-12248; CVE-2025-0626; CVE-2025-1204; CVE-2025-0683" ;
    icsa:cweNumber "CWE-359; CWE-912; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2024-12248,
        cve-res:CVE-2025-0626,
        cve-res:CVE-2025-0683,
        cve-res:CVE-2025-1204 ;
    icsa:hasCWE cwe-res:CWE-359,
        cwe-res:CWE-787,
        cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "CMS8000 Patient Monitor" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "CMS8000 Patient Monitor Firmware: Version CMS7.820.120.01/0.93(0.95); CMS8000 Patient Monitor: All versions (CVE-2025-0626; CMS8000 Patient Monitor Firmware: Version CMS7.820.075.08/0.74(0.75); CVE-2025-0683; The following Contec Health products are affected: CMS8000 Patient Monitor Firmware: Version smart3250-2.6.27-wlan2.1.7.cramfs; CVE-2025-1204)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-030-01" ;
    icsa:vendor "Contec Health" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-037-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-037-01" ;
    dcterms:issued "2025-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "MicroDicom DICOM Viewer" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Bulgaria" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-1002" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2025-1002 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DICOM Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following MicroDicom DICOM Viewer are affected: MicroDicom DICOM Viewer: Version 2024.03." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-037-01" ;
    icsa:vendor "MicroDicom" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-037-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-037-02" ;
    dcterms:issued "2025-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Orthanc Server" ;
    icsa:CVSSScore "9.2"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Belgium" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-0896" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-0896 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Orthanc Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Orthanc products are affected: Orthanc server: Versions prior to 1.5.8." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-037-02" ;
    icsa:vendor "Orthanc" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-044-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-044-01" ;
    dcterms:issued "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Qardio Heart Health IOS and Android Application and QardioARM A100" ;
    icsa:CVSSScore "7.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-24836; CVE-2025-20615; CVE-2025-23421" ;
    icsa:cweNumber "CWE-552; CWE-359; CWE-248" ;
    icsa:hasCVE cve-res:CVE-2025-20615,
        cve-res:CVE-2025-23421,
        cve-res:CVE-2025-24836 ;
    icsa:hasCWE cwe-res:CWE-248,
        cwe-res:CWE-359,
        cwe-res:CWE-552 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Heart Health IOS application, Heart Health Android Application, QardioARM A100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Qardio products are affected: Qardio Heart Health IOS Mobile Application: Version 2.7.4 Qardio Heart Health Android Mobile Application: Version 2.5.1 QardioARM A100: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-044-01" ;
    icsa:vendor "Qardio" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-051-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-051-01" ;
    dcterms:issued "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medixant RadiAnt DICOM Viewer" ;
    icsa:CVSSScore "5.7"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Poland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-1001" ;
    icsa:cweNumber "CWE-295" ;
    icsa:hasCVE cve-res:CVE-2025-1001 ;
    icsa:hasCWE cwe-res:CWE-295 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "RadiAnt DICOM Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Medixant products are affected: RadiAnt DICOM Viewer: Version 2024.02." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-051-01" ;
    icsa:vendor "Medixant" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-058-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-058-01" ;
    dcterms:issued "2025-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-02-27T00:00:00"^^xsd:dateTime ;
    dcterms:title "Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-20060; CVE-2025-23405; CVE-2025-24316; CVE-2025-20049; CVE-2025-24849; CVE-2025-24318; CVE-2025-24843" ;
    icsa:cweNumber "CWE-213; CWE-1004; CWE-79; CWE-359; CWE-921; CWE-319; CWE-117" ;
    icsa:hasCVE cve-res:CVE-2025-20049,
        cve-res:CVE-2025-20060,
        cve-res:CVE-2025-23405,
        cve-res:CVE-2025-24316,
        cve-res:CVE-2025-24318,
        cve-res:CVE-2025-24843,
        cve-res:CVE-2025-24849 ;
    icsa:hasCWE cwe-res:CWE-1004,
        cwe-res:CWE-117,
        cwe-res:CWE-213,
        cwe-res:CWE-319,
        cwe-res:CWE-359,
        cwe-res:CWE-79,
        cwe-res:CWE-921 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "USB-C Blood Glucose Monitoring System Starter Kit Android Application, Application Database and Internet-based Server Infrastructure" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Dario Health products are affected: USB-C Blood Glucose Monitoring System Starter Kit Android Applications: Versions 5.8.7.0.36 and prior Dario Application Database and Internet-based Server Infrastructure: All versions." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-058-01" ;
    icsa:vendor "Dario Health" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-072-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-072-01" ;
    dcterms:issued "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Philips Intellispace Cardiovascular (ISCV)" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Netherlands" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-2229; CVE-2025-2230" ;
    icsa:cweNumber "CWE-1391; CWE-287" ;
    icsa:hasCVE cve-res:CVE-2025-2229,
        cve-res:CVE-2025-2230 ;
    icsa:hasCWE cwe-res:CWE-1391,
        cwe-res:CWE-287 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Intellispace Cardiovascular (ISCV)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "an image and information management product; Philips reports the following versions of Intellispace Cardiovascular (ISCV); are affected: Intellispace Cardiovascular (ISCV): Version 4.1 and prior (CVE-2025-2229) Intellispace Cardiovascular (ISCV): Version 5.1 and prior (CVE-2025-2230)." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-072-01" ;
    icsa:vendor "Philips" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-079-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-079-01" ;
    dcterms:issued "2025-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-03-20T00:00:00"^^xsd:dateTime ;
    dcterms:title "Santesoft Sante DICOM Viewer Pro" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Cyprus" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-2480" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-2480 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sante DICOM Viewer Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Santesoft products are affected: Sante DICOM Viewer Pro: Versions 14.1.2 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-079-01" ;
    icsa:vendor "Santesoft" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-100-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-100-01" ;
    dcterms:issued "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-04-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "INFINITT Healthcare INFINITT PACS" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "South Korea" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-27714; CVE-2025-27721; CVE-2025-24489" ;
    icsa:cweNumber "CWE-434; CWE-497" ;
    icsa:hasCVE cve-res:CVE-2025-24489,
        cve-res:CVE-2025-27714,
        cve-res:CVE-2025-27721 ;
    icsa:hasCWE cwe-res:CWE-434,
        cwe-res:CWE-497 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "INFINITT PACS" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following INFINITT Healthcare products are affected: INFINITT PACS System Manager: Versions 3.0.11.5 BN9 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-100-01" ;
    icsa:vendor "INFINITT Healthcare" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-121-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-121-01" ;
    dcterms:issued "2025-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-01T00:00:00"^^xsd:dateTime ;
    dcterms:title "MicroDicom DICOM Viewer" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Bulgaria" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-36521; CVE-2025-35975" ;
    icsa:cweNumber "CWE-125; CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-35975,
        cve-res:CVE-2025-36521 ;
    icsa:hasCWE cwe-res:CWE-125,
        cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DICOM Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following MicroDicom products are affected: DICOM Viewer: Versions 2025.1 (Build 3321) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-121-01" ;
    icsa:vendor "MicroDicom" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-128-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-128-01" ;
    dcterms:issued "2025-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-08T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pixmeo OsiriX MD" ;
    icsa:CVSSScore "9.3"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Switzerland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-27720; CVE-2025-27578; CVE-2025-31946" ;
    icsa:cweNumber "CWE-416; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2025-27578,
        cve-res:CVE-2025-27720,
        cve-res:CVE-2025-31946 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-416 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OsiriX MD" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Pixmeo products are affected: OsiriX MD: Versions 14.0.1 (Build 2024-02-28) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-128-01" ;
    icsa:vendor "Pixmeo" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-148-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-148-01" ;
    dcterms:issued "2025-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-05-29T00:00:00"^^xsd:dateTime ;
    dcterms:title "Santesoft Sante DICOM Viewer Pro" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Cyprus" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-5307" ;
    icsa:cweNumber "CWE-125" ;
    icsa:hasCVE cve-res:CVE-2025-5307 ;
    icsa:hasCWE cwe-res:CWE-125 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sante DICOM Viewer Pro" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Santesoft products are affected: Sante DICOM Viewer Pro: Versions 14.2.1 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-148-01" ;
    icsa:vendor "Santesoft" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-160-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-160-01" ;
    dcterms:issued "2025-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-06-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "MicroDicom DICOM Viewer" ;
    icsa:CVSSScore "8.6"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Bulgaria" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-5943" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-5943 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DICOM Viewer" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following MicroDicom products are affected: DICOM Viewer: Versions 2025.2 (Build 8154) and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-160-01" ;
    icsa:vendor "MicroDicom" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-198-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-198-01" ;
    dcterms:issued "2025-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-07-17T00:00:00"^^xsd:dateTime ;
    dcterms:title "Panoramic Corporation Digital Imaging Software" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-22774" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2024-22774 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Digital Imaging Software" ;
    icsa:productDistribution "North America" ;
    icsa:productsAffected "The following Panoramic Corporation products are affected: Digital Imaging Software: Version 9.1.2.7600." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-198-01" ;
    icsa:vendor "Panoramic Corporation" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-205-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-205-01" ;
    dcterms:issued "2025-07-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-07T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medtronic MyCareLink Patient Monitor (Update A)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Ireland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-4386; CVE-2018-10622; CVE-2025-4393; CVE-2025-4395; CVE-2025-4397; CVE-2025-4394" ;
    icsa:cweNumber "CWE-258; CWE-1263; CWE-313; CWE-312; CWE-502" ;
    icsa:hasCVE cve-res:CVE-2018-10622,
        cve-res:CVE-2025-4386,
        cve-res:CVE-2025-4393,
        cve-res:CVE-2025-4394,
        cve-res:CVE-2025-4395,
        cve-res:CVE-2025-4397 ;
    icsa:hasCWE cwe-res:CWE-1263,
        cwe-res:CWE-258,
        cwe-res:CWE-312,
        cwe-res:CWE-313,
        cwe-res:CWE-502 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Medtronic MyCareLink Patient Monitor (Update A)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Medtronic MyCareLink Patient Monitor model 24952: vers:all/*; Medtronic MyCareLink Patient Monitor model 24950: vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-205-01" ;
    icsa:vendor "Medtronic" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-224-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-224-01" ;
    dcterms:issued "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-12T00:00:00"^^xsd:dateTime ;
    dcterms:title "Santesoft Sante PACS Server" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Cyprus" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-54759; CVE-2025-54862; CVE-2025-53948; CVE-2025-54156; CVE-2025-0572" ;
    icsa:cweNumber "CWE-22; CWE-319; CWE-415; CWE-79" ;
    icsa:hasCVE cve-res:CVE-2025-0572,
        cve-res:CVE-2025-53948,
        cve-res:CVE-2025-54156,
        cve-res:CVE-2025-54759,
        cve-res:CVE-2025-54862 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-319,
        cwe-res:CWE-415,
        cwe-res:CWE-79 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Sante PACS Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Santesoft products are affected: Sante PACS Server: Versions prior to 4.2.3." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-224-01" ;
    icsa:vendor "Santesoft" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-233-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-233-01" ;
    dcterms:issued "2025-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-08-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "FUJIFILM Healthcare Americas Synapse Mobility" ;
    icsa:CVSSScore "5.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-54551" ;
    icsa:cweNumber "CWE-472" ;
    icsa:hasCVE cve-res:CVE-2025-54551 ;
    icsa:hasCWE cwe-res:CWE-472 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Synapse Mobility" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following versions of FUJIFILM Healthcare Americas Synapse Mobility are affected: Synapse Mobility: Versions prior to 8.2." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-233-01" ;
    icsa:vendor "FUJIFILM Healthcare Americas Corporation" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-294-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-294-01" ;
    dcterms:issued "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-21T00:00:00"^^xsd:dateTime ;
    dcterms:title "Oxford Nanopore Technologies MinKNOW" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United Kingdom" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-35585; CVE-2025-10937; CVE-2025-54808" ;
    icsa:cweNumber "CWE-306; CWE-522; CWE-754" ;
    icsa:hasCVE cve-res:CVE-2024-35585,
        cve-res:CVE-2025-10937,
        cve-res:CVE-2025-54808 ;
    icsa:hasCWE cwe-res:CWE-306,
        cwe-res:CWE-522,
        cwe-res:CWE-754 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "MinKNOW" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "a DNA and RNA sequencing device; are affected: MinKNOW: Versions prior to 24.06 (CVE-2024-35585) MinKNOW: Versions prior to 24.11 (CVE-2025-54808; CVE-2025-10937).; The following versions of MinKNOW" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-294-01" ;
    icsa:vendor "Oxford Nanopore Technologies" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-296-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-296-01" ;
    dcterms:issued "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-23T00:00:00"^^xsd:dateTime ;
    dcterms:title "NIHON KOHDEN Central Monitor CNS-6201" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-59668" ;
    icsa:cweNumber "CWE-476" ;
    icsa:hasCVE cve-res:CVE-2025-59668 ;
    icsa:hasCWE cwe-res:CWE-476 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Central Monitor CNS-6201" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following NIHON KOHDEN products are affected: Central Monitor CNS-6201: Versions 01-03 Central Monitor CNS-6201: Versions 01-04 Central Monitor CNS-6201: Versions 01-05 Central Monitor CNS-6201: Versions 01-06 Central Monitor CNS-6201: Versions 02-10 Central Monitor CNS-6201: Versions 02-11 Central Monitor CNS-6201: Versions 02-40." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-296-01" ;
    icsa:vendor "NIHON KOHDEN" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-301-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-301-01" ;
    dcterms:issued "2025-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-10-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Vertikal Systems Hospital Manager Backend Services" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Romania" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-61959; CVE-2025-54459" ;
    icsa:cweNumber "CWE-209; CWE-497" ;
    icsa:hasCVE cve-res:CVE-2025-54459,
        cve-res:CVE-2025-61959 ;
    icsa:hasCWE cwe-res:CWE-209,
        cwe-res:CWE-497 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Hospital Manager Backend Services" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "2025 and prior.; The following Vertikal Systems service was affected: Hospital Manager Backend Services: September 19" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-301-01" ;
    icsa:vendor "Vertikal Systems" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-336-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-336-01" ;
    dcterms:issued "2025-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mirion Medical EC2 Software NMIS BioDose" ;
    icsa:CVSSScore "8.7"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-64642; CVE-2025-61940; CVE-2025-64298; CVE-2025-64778; CVE-2025-62575" ;
    icsa:cweNumber "CWE-798; CWE-732; CWE-603" ;
    icsa:hasCVE cve-res:CVE-2025-61940,
        cve-res:CVE-2025-62575,
        cve-res:CVE-2025-64298,
        cve-res:CVE-2025-64642,
        cve-res:CVE-2025-64778 ;
    icsa:hasCWE cwe-res:CWE-603,
        cwe-res:CWE-732,
        cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "EC2 Software NMIS BioDose" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following Mirion Medical products are affected: EC2 Software NMIS BioDose: Versions prior to 23.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-336-01" ;
    icsa:vendor "Mirion Medical" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-345-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-345-01" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Grassroots DICOM (GDCM)" ;
    icsa:CVSSScore "6.8"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-11266" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2025-11266 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "DICOM (GDCM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "The following open source products and specified components are affected: Grassroots DICOM (GDCM): Versions 3.0.24 and prior SimpleITK: Versions 2.5.2 and prior medInria: Versions 4.0 and prior." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-345-01" ;
    icsa:vendor "Grassroots" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-345-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-345-02" ;
    dcterms:issued "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2025-12-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Varex Imaging Panoramic Dental Imaging Software" ;
    icsa:CVSSScore "8.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2024-22774" ;
    icsa:cweNumber "CWE-427" ;
    icsa:hasCVE cve-res:CVE-2024-22774 ;
    icsa:hasCWE cwe-res:CWE-427 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Panoramic Dental Imaging Software" ;
    icsa:productDistribution "North America" ;
    icsa:productsAffected "The following AJAT dental imaging software (owned by Varex Imaging) containing vulnerable SDKs is affected: Panoramic Dental Imaging Software: Versions prior to 6.6.1.490." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-345-02" ;
    icsa:vendor "Varex Imaging" ;
    icsa:year 2025 .

icsa-res:ICSMA-25-364-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-25-364-01" ;
    dcterms:issued "2025-12-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-07-02T00:00:00"^^xsd:dateTime ;
    dcterms:title "WHILL Model C2 Electric Wheelchairs and Model F Power Chairs (Update B)" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Japan" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-14346" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2025-14346 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "WHILL Model C2 Electric Wheelchairs and Model F Power Chairs (Update B)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Model C2 Electric WheelChair | Model F Power Chair" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-25-364-01" ;
    icsa:vendor "WHILL Inc." ;
    icsa:year 2025 .

icsa-res:ICSMA-26-041-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-041-01" ;
    dcterms:issued "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-02-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "ZOLL ePCR IOS Mobile Application" ;
    icsa:CVSSScore "5.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2025-12699" ;
    icsa:cweNumber "CWE-538" ;
    icsa:hasCVE cve-res:CVE-2025-12699 ;
    icsa:hasCWE cwe-res:CWE-538 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "ZOLL ePCR IOS Mobile Application" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "ZOLL ePCR IOS Mobile Application: 2.6.7" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-041-01" ;
    icsa:vendor "ZOLL" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-083-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-083-01" ;
    dcterms:issued "2026-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-03-24T00:00:00"^^xsd:dateTime ;
    dcterms:title "Grassroots DICOM (GDCM)" ;
    icsa:CVSSScore "7.5"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-3650" ;
    icsa:cweNumber "CWE-401" ;
    icsa:hasCVE cve-res:CVE-2026-3650 ;
    icsa:hasCWE cwe-res:CWE-401 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Grassroots DICOM (GDCM)" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Grassroots Grassroots DICOM (GDCM): 3.2.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-083-01" ;
    icsa:vendor "Grassroots" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-146-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-146-01" ;
    dcterms:issued "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-26T00:00:00"^^xsd:dateTime ;
    dcterms:title "Eppendorf BioFlo 320" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-7251" ;
    icsa:cweNumber "CWE-259" ;
    icsa:hasCVE cve-res:CVE-2026-7251 ;
    icsa:hasCWE cwe-res:CWE-259 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Eppendorf BioFlo 320" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "BioFlo 320 Bioreactor vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-146-01" ;
    icsa:vendor "Eppendorf" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-148-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-148-01" ;
    dcterms:issued "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-05-28T00:00:00"^^xsd:dateTime ;
    dcterms:title "Fourth Frontier Frontier X Mobile Application, Frontier X2" ;
    icsa:CVSSScore "8.8"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-5768" ;
    icsa:cweNumber "CWE-306" ;
    icsa:hasCVE cve-res:CVE-2026-5768 ;
    icsa:hasCWE cwe-res:CWE-306 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Fourth Frontier Frontier X Mobile Application, Frontier X2" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Frontier X Android application vers<v15.0.0 | Frontier X IOS application vers<v25.0.0 | Frontier X2 vers:all/*" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-148-01" ;
    icsa:vendor "Fourth Frontier" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-169-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-169-01" ;
    dcterms:issued "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-18T00:00:00"^^xsd:dateTime ;
    dcterms:title "Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT" ;
    icsa:CVSSScore "6.5"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "India" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-50034; CVE-2026-52866" ;
    icsa:cweNumber "CWE-862; CWE-319" ;
    icsa:hasCVE cve-res:CVE-2026-50034,
        cve-res:CVE-2026-52866 ;
    icsa:hasCWE cwe-res:CWE-319,
        cwe-res:CWE-862 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT" ;
    icsa:productDistribution "India" ;
    icsa:productsAffected "Blood Glucose Monitoring System (Model No. APG-01 BT) 0x0110_v1.1.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-169-01" ;
    icsa:vendor "Apollo Pharmacy" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-176-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-176-01" ;
    dcterms:issued "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "pydicom pynetdicom Library" ;
    icsa:CVSSScore "9.1"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-56445" ;
    icsa:cweNumber "CWE-22" ;
    icsa:hasCVE cve-res:CVE-2026-56445 ;
    icsa:hasCWE cwe-res:CWE-22 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "pydicom pynetdicom Library" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "pynetdicom >=v1.0.0|<v3.0.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-176-01" ;
    icsa:vendor "pydicom" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-176-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-176-02" ;
    dcterms:issued "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-25T00:00:00"^^xsd:dateTime ;
    dcterms:title "OHIF Viewers DICOM" ;
    icsa:CVSSScore "8.2"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-12473" ;
    icsa:cweNumber "CWE-918" ;
    icsa:hasCVE cve-res:CVE-2026-12473 ;
    icsa:hasCWE cwe-res:CWE-918 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OHIF Viewers DICOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "OHIF DICOM Web Viewer Framework <=v3.12.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-176-02" ;
    icsa:vendor "Open Health Imaging Foundation (OHIF)" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-181-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-181-01" ;
    dcterms:issued "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-06-30T00:00:00"^^xsd:dateTime ;
    dcterms:title "OFFIS DCMTK Toolkit" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "Germany" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-35505; CVE-2026-52868; CVE-2026-50003; CVE-2026-44628; CVE-2026-50254" ;
    icsa:cweNumber "CWE-22; CWE-843; CWE-401" ;
    icsa:hasCVE cve-res:CVE-2026-35505,
        cve-res:CVE-2026-44628,
        cve-res:CVE-2026-50003,
        cve-res:CVE-2026-50254,
        cve-res:CVE-2026-52868 ;
    icsa:hasCWE cwe-res:CWE-22,
        cwe-res:CWE-401,
        cwe-res:CWE-843 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "OFFIS DCMTK Toolkit" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "DCMTK <=3.7.0" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-181-01" ;
    icsa:vendor "OFFIS" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-216-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-216-01" ;
    dcterms:issued "2026-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-04T00:00:00"^^xsd:dateTime ;
    dcterms:title "Thermo Fisher Applied Biosystems Genetic Analyzers" ;
    icsa:CVSSScore "8.4"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-17583" ;
    icsa:cweNumber "CWE-353" ;
    icsa:hasCVE cve-res:CVE-2026-17583 ;
    icsa:hasCWE cwe-res:CWE-353 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Thermo Fisher Applied Biosystems Genetic Analyzers" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Applied Biosystems 3500/3500xL Series Data Collection Software <=4.0.2 | Applied Biosystems 3730/3730xL Series Data Collection Software <=5.0.2 | Applied Biosystems SeqStudio Genetic Analyzer Data Collection Software <=1.2.5 | Applied Biosystems SeqStudio Flex Series Instrument Software <=1.2.0 | Applied Biosystems GeneMapper ID-X Software <=v1.7.3 | Applied Biosystems 3130 Series Data Collection Software <=4.1 | ABI PRISM 3100/3100-Avant Data Collection Software <=2.0 | ABI PRISM 310 Data Collection Software <=3.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-216-01" ;
    icsa:vendor "Thermo Fisher" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-218-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-218-01" ;
    dcterms:issued "2026-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-06T00:00:00"^^xsd:dateTime ;
    dcterms:title "Medixant RadiAnt DICOM" ;
    icsa:CVSSScore "4.3"^^xsd:float ;
    icsa:CVSSSeverity "Medium" ;
    icsa:companyHeadquarter "Poland" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-17264" ;
    icsa:cweNumber "CWE-787" ;
    icsa:hasCVE cve-res:CVE-2026-17264 ;
    icsa:hasCWE cwe-res:CWE-787 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Medixant RadiAnt DICOM" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "RadiAnt DICOM <=2025.2" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-218-01" ;
    icsa:vendor "Medixant" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-223-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-223-01" ;
    dcterms:issued "2026-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Mira Hormone Monitor, Mira Android App" ;
    icsa:CVSSScore "9.8"^^xsd:float ;
    icsa:CVSSSeverity "Critical" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-67558; CVE-2026-64934; CVE-2026-68067; CVE-2026-66340; CVE-2026-66875; CVE-2026-66832; CVE-2026-67568; CVE-2026-66098" ;
    icsa:cweNumber "CWE-307; CWE-290; CWE-306; CWE-1390; CWE-798; CWE-598; CWE-807" ;
    icsa:hasCVE cve-res:CVE-2026-64934,
        cve-res:CVE-2026-66098,
        cve-res:CVE-2026-66340,
        cve-res:CVE-2026-66832,
        cve-res:CVE-2026-66875,
        cve-res:CVE-2026-67558,
        cve-res:CVE-2026-67568,
        cve-res:CVE-2026-68067 ;
    icsa:hasCWE cwe-res:CWE-1390,
        cwe-res:CWE-290,
        cwe-res:CWE-306,
        cwe-res:CWE-307,
        cwe-res:CWE-598,
        cwe-res:CWE-798,
        cwe-res:CWE-807 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Mira Hormone Monitor, Mira Android App" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mira Monitor Firmware 1.7.1.47 | Mira Android App 4.5.15.4" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-223-01" ;
    icsa:vendor "Quanovate Tech Inc. (operating as Mira / Mira Care)" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-223-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-223-02" ;
    dcterms:issued "2026-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-11T00:00:00"^^xsd:dateTime ;
    dcterms:title "Pulsetto Vagus Nerve Stimulator" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Lithuania" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-18844" ;
    icsa:cweNumber "CWE-912" ;
    icsa:hasCVE cve-res:CVE-2026-18844 ;
    icsa:hasCWE cwe-res:CWE-912 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Pulsetto Vagus Nerve Stimulator" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Pulsetto Vagus Nerve Stimulator" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-223-02" ;
    icsa:vendor "Pulsetto" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-225-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-225-01" ;
    dcterms:issued "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-08-13T00:00:00"^^xsd:dateTime ;
    dcterms:title "Flow Neuroscience FL-100" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Sweden" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-18164" ;
    icsa:cweNumber "CWE-798" ;
    icsa:hasCVE cve-res:CVE-2026-18164 ;
    icsa:hasCWE cwe-res:CWE-798 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Flow Neuroscience FL-100" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Flow Neuroscience Halo Neuroscience FL-100: <July_2026; Flow Neuroscience Flow Neuroscience FL-100: <July_2026" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-225-01" ;
    icsa:vendor "Flow Neuroscience" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-253-01 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-253-01" ;
    dcterms:issued "2026-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "NextGen Healthcare Mirth Connect" ;
    icsa:CVSSScore "8.3"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "United States" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-78224; CVE-2026-82578; CVE-2026-82583" ;
    icsa:cweNumber "CWE-611; CWE-89" ;
    icsa:hasCVE cve-res:CVE-2026-78224,
        cve-res:CVE-2026-82578,
        cve-res:CVE-2026-82583 ;
    icsa:hasCWE cwe-res:CWE-611,
        cwe-res:CWE-89 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "NextGen Healthcare Mirth Connect" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Mirth Connect <=v4.7.1" ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-253-01" ;
    icsa:vendor "NextGen Healthcare" ;
    icsa:year 2026 .

icsa-res:ICSMA-26-253-02 a icsa:ICSA ;
    dcterms:identifier "ICSMA-26-253-02" ;
    dcterms:issued "2026-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:modified "2026-09-10T00:00:00"^^xsd:dateTime ;
    dcterms:title "Orthanc DICOM Server" ;
    icsa:CVSSScore "8.1"^^xsd:float ;
    icsa:CVSSSeverity "High" ;
    icsa:companyHeadquarter "Belgium" ;
    icsa:criticalInfrastructureSector "Healthcare and Public Health" ;
    icsa:cveNumber "CVE-2026-87020" ;
    icsa:cweNumber "CWE-190" ;
    icsa:hasCVE cve-res:CVE-2026-87020 ;
    icsa:hasCWE cwe-res:CWE-190 ;
    icsa:license "Open Database License (ODbL) v1.0 - 2026 ICS Advisory Project" ;
    icsa:product "Orthanc DICOM Server" ;
    icsa:productDistribution "Worldwide" ;
    icsa:productsAffected "Orthanc DICOM Server <1.13.0." ;
    icsa:reference "https://www.cisa.gov/news-events/ics-advisories/ICSMA-26-253-02" ;
    icsa:vendor "Orthanc" ;
    icsa:year 2026 .