In this post, our team conducted an in-depth look at ICS vulnerabilities using MITRE ATT&CK for ICS and identified the most common vulnerabilities in ICS and constituent components. Interestingly the number of advisories has increased year-over-year since the dawn of the ICS-CERT advisory program, with particular spikes in 2017 and 2021.