CISA

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for ...
CISA

Communicating Under Pressure: Best Practices for Service Providers

This guidance helps service providers plan timely, accurate, audience-specific and ongoing communications during service outages to reduce speculation and panic while aligning with operational ...
cisa

Rockwell Automation ArmorStart LT

Successful exploitation of these vulnerabilities could result in a loss of webserver availability or allow an attacker to inject malicious scripts that will be executed when other users access the ...
cisa

Inductive Automation Ignition

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). Ignition ...
cisa

Rockwell Automation 1756-ENBT Module

A denial-of-service security issue exists in the Rockwell Automation 1756-ENBT module which is a ControlLogix EtherNet/IP bridge that enables communication between Logix 5000 controllers and Ethernet ...
cisa

Rockwell Automation Redundancy Module Configuration Tool

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories ...
cisa

IXON VPN Client

Successful exploitation of this vulnerability could allow an attacker to perform remote code execution on the computer running the client with elevated privileges. Improper Neutralization of CRLF ...
cisa

CISA, NSA and NIST Publish New Resource for Migrating to Post-Quantum Cryptography

The joint factsheet, “Quantum-Readiness: Migration to Post-Quantum Cryptography” provides necessary steps and guidance to help organizations establish their own quantum-readiness roadmap. The new ...
cisa

CISA Adds Six Known Exploited Vulnerabilities to Catalog

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing ...
cisa

Xiiaozet LK100W

v3 9.8 Xiiaozet Xiiaozet LK100W Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Missing Authentication for Critical Function, Authentication Bypass Using an ...
cisa

CISA Issues Emergency Directive to Address Critical Vulnerabilities in F5 Devices

Nation-State Cyber Threat Actor Poses Immediate Risk to Federal Networks ...