Siemens SINAMICS Drives
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the…
Siemens SIMOTION Tools
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the…
Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Modicon M340, BMXNOE0100,…
Daikin Security Gateway
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.8 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Daikin Equipment: Security…
ABB Cylon Aspect BMS/BAS
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: ASPECT, NEXUS, MATRIX Vulnerabilities:…
Rockwell Automation FactoryTalk Optix
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.3 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: FactoryTalk Optix Vulnerability: Improper Input…
Rockwell Automation ControlLogix 5580
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.2 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Rockwell Automation Equipment: ControlLogix 5580 Vulnerability:…
Rockwell Automation ThinManager
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: ThinManager Vulnerability: Server-Side…
Rockwell Automation Stratix IOS
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Stratix IOS Vulnerability:…
Rockwell Automation CompactLogix® 5480
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.0 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: CompactLogix® 5480 Vulnerability: Missing…
⚠️Advisory
CISA Adds Two Known Exploited Vulnerabilities to CatalogWeintek cMT3092XJohnson Controls XAAP AndroidMZ Automation libIEC61850MZ Automation lib60870Panduit IntraVUEJohnson Controls C-CURE 9000 and Victor application serverRussian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration SuiteCISA Adds Two Known Exploited Vulnerabilities to CatalogRockwell Automation ThinManagerSiemens SIDIS Secured SmartPlugTycon Systems TPDIN-Monitor-WEB2Siemens Opcenter XRockwell Automation FactoryTalk Services PlatformCISA Adds Four Known Exploited Vulnerabilities to CatalogSiemens IAM ClientSiemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWRockwell Automation 1718-AENTR/1719-AENTRRockwell Automation 1734 POINT I/OSiemens CADRARockwell Automation Studio 5000 Logix DesignerCISA Adds Three Known Exploited Vulnerabilities to CatalogRockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogixSiemens SICAM 8SALTO ProAccess SpaceRockwell Automation FactoryTalk DataMosaixRockwell Automation ArenaNASA Core Flight System (cFS) Health & Safety (HS) ApplicationRockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBTAutomationDirect Productivity SuiteRockwell Automation Flex 5000 AdapterCISA Adds Two Known Exploited Vulnerabilities to CatalogEstablishing a Coordinated Vulnerability Disclosure Program to Work With Security ResearchersCISA Adds Four Known Exploited Vulnerabilities to CatalogCISA Urges SharePoint Hardening After New ExploitationsABB T-MAC PlusRockwell Automation 1715-AENTR EtherNet/IP AdapterABB Ability EdgeniusABB Advant Master Online BuilderImprove Router Hygiene to Protect Against Russian State-Sponsored TargetingImprove Router Hygiene to Protect Against Russian State-Sponsored TargetingCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds Two Known Exploited Vulnerabilities to CatalogSchneider Electric PowerChute Serial ShutdownOpenPLC v3Schneider Electric Easergy MiCOM Px40 SeriesCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds Three Known Exploited Vulnerabilities to CatalogLabcenter Proteus 9Hitachi Energy PROMOD VDigi International PortServer TS, Digi One SP IASiemens Mendix Studio ProSiemens SINEC OSHydro-Québec Le Circuit Electrique charging station backendHitachi Energy e-mesh EMSCubeSpace CW0057 Reaction WheelGardyn IoT HubST Engineering iDirect iQ-Series TerminalsCISA Adds One Known Exploited Vulnerability to CatalogSchneider Electric EasyLogic T150 and Saitel DP RTUOFFIS DCMTK ToolkitMitsubishi Electric MELSOFT Update Manager SW1DND-UDM-MSchneider Electric EcoStruxure IT Data Center ExpertStoneFly Storage ConcentratorXZ Utils vulnerability impacting B&R ProductsFrangoteam FUXA SCADA/HMIDelta Electronics DVP12SE PLCCISA Adds One Known Exploited Vulnerability to CatalogRussian Intelligence Services Continue to Target Commercial Messaging ApplicationsCISA Adds Two Known Exploited Vulnerabilities to CatalogDelta Electronics DTM SoftDaktronics Controller FirmwareEVoke Systems Charging Station Management SystemHorner Automation CscapeOHIF Viewers DICOMH.VIEW HV-500S6 IP Camerapydicom pynetdicom LibraryYokogawa FAST/TOOLS and CI ServerSchneider Electric PowerLogic P7Using SASE in a Modern TIC 3.0 SolutionCISA Adds Four Known Exploited Vulnerabilities to CatalogSiemens WinCC Certificate ManagerImpact of Linux Kernel vulnerabilities on B&R productsABB Freelance Security LockHubbell Aclara Metrum Cellular Web InterfaceSiemens SINEC INSSiemens Products using OpenSSLSiemens SIPROTEC 5 Using DIGSI5 ProtocolCISA Urges Hardening Fortinet Devices After Reports of Credential ExposureCISA Adds One Known Exploited Vulnerability to CatalogAVer PTC camerasMitsubishi Electric MELSEC iQ-F SeriesAzeoTech DAQFactorySchneider Electric EasyLogic T150 and Saitel DPRockwell Automation FactoryTalk Historian Site EditionMitsubishi Electric Co.’s MELSEC iQ-F Series FX5-ENET/IP Ethernet ModuleApollo Pharmacy Blood Glucose Monitoring System APG-01 BTSchneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel ProductsCISA Adds One Known Exploited Vulnerability to CatalogRockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIPRockwell Automation RSLinxRockwell Automation FLEX I/O EtherNet/IP AdaptersRockwell Automation FactoryTalk Analytics PavilionXRockwell Automation CompactLogixCISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds One Known Exploited Vulnerability to CatalogYarbo Android/iOS Mobile Application and Cloud InfrastructureBrickcom CamerasNaxclow IoT PlatformCISA Adds Three Known Exploited Vulnerabilities to CatalogSiemens KACO Blueplanet InvertersSchneider Electric EcoStruxure Panel ServerSchneider Electric Modicon Network Managed SwitchesCISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Adds One Known Exploited Vulnerability to CatalogNAVTOR NavBoxHitachi Energy MACH HiDrawHitachi Energy ITT600 ExplorerB&R PPT30 Operating SystemHitachi Energy RTU500CISA Adds One Known Exploited Vulnerability to CatalogCISA and Partners Urge Hardening Automatic Tank Gauge SystemsCISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds One Known Exploited Vulnerability to CatalogSupply Chain Compromises Impact Nx Console and GitHub RepositoriesSchnieider Electric EcoStruxure Machine Expert HVACABB EIBPORTMacGregor Voyage Data Recorder (VDR) G4eKMW CCTV Security CamerasJinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet ConverterABB Busch-Welcome 2 Wire Door Opener ActuatorFourth Frontier Frontier X Mobile Application, Frontier X2XCharge C6CP Plus 8 Ch. Network Video RecorderCISA Adds Three Known Exploited Vulnerabilities to CatalogCISA Adds One Known Exploited Vulnerability to CatalogABB Terra ACABB Ability Camera ConnectEppendorf BioFlo 320ABB AbilityTM Zenon Remote Transport VulnerabilityABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)ABB AC500 V2ABB LVS MConfigCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds Two Known Exploited Vulnerabilities to CatalogABB Terra AC WallboxHitachi Energy GMS600ABB B&R Automation StudioABB B&R Automation RuntimeABB B&R PCsCISA Adds Seven Known Exploited Vulnerabilities to CatalogKieback & Peter DDC Building ControllersSiemens RUGGEDCOM APE1808 DevicesABB CoreSense HM and CoreSense M10ScadaBRZKTeco CCTV CamerasCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds One Known Exploited Vulnerability to CatalogSiemens Siemens ROS#Siemens SIMATICSiemens SIPROTEC 5Siemens SIMATICSiemens Ruggedcom RoxSiemens Ruggedcom RoxUniversal Robots Polyscope 5Siemens Simcenter FemapSiemens TeamcenterSiemens Ruggedcom RoxSiemens SENTRON 7KT PAC1261 Data ManagerSiemens Solid EdgeSiemens Ruggedcom RoxSiemens Opcenter RDnLSiemens Industrial DevicesSiemens SIMATIC S7 PLC Web ServerSiemens gWAPABB AC500 V3 Stack Buffer Overflow in Cryptographic Message SyntaxSubnet Solutions PowerSYSTEM CenterABB WebPro SNMP Card PowerValue Multiple VulnerabilitiesABB AC500 V3 Multiple VulnerabilitiesFuji Electric TellusABB Automation Builder Gateway for WindowsSoftware Bill of Materials for AI – Minimum ElementsCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds One Known Exploited Vulnerability to CatalogMAXHUB Pivot Client ApplicationCISA Adds One Known Exploited Vulnerability to CatalogABB B&R Automation StudioHitachi Energy PCM600Johnson Controls CEM AC2000ABB B&R PVIABB B&R Automation RuntimeCISA Adds One Known Exploited Vulnerability to CatalogCareful Adoption of Agentic AI ServicesCISA Adds One Known Exploited Vulnerability to CatalogABB Ability Symphony Plus EngineeringABB AWIN GatewaysABB Edgenius Management PortalABB System 800xA, Symphony Plus IEC 61850ABB Ability OPTIMAXABB PCM600Adapting Zero Trust Principles to Operational TechnologyCISA Adds Two Known Exploited Vulnerabilities to CatalogNSA GRASSMARLINCISA Adds Four Known Exploited Vulnerabilities to CatalogCISA Adds One Known Exploited Vulnerability to CatalogCarlson Software VASCO-B GNSS ReceiverYadea T5 Electric BicycleIntrado 911 Emergency Gateway (EGW)Milesight CamerasSpiceJet Online Booking SystemHangzhou Xiongmai Technology Co., Ltd XM530 IP CameraFIRESTARTER BackdoorDefending Against China-Nexus Covert Networks of Compromised DevicesCISA Adds One Known Exploited Vulnerability to CatalogSiemens Industrial Edge ManagementSiemens RUGGEDCOM CROSSBOW Secure Access Manager PrimarySiemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)Silex Technology SD-330AC and AMC ManagerSiemens SINEC NMSZero Motorcycles FirmwareSiemens TPM 2.0SenseLive X3050Siemens Analytics ToolkitHardy Barth Salia EV Charge ControllerSiemens SCALANCESiemens SINEC NMSCISA Adds Eight Known Exploited Vulnerabilities to CatalogSupply Chain Compromise Impacts Axios Node Package ManagerCISA Adds One Known Exploited Vulnerability to CatalogHorner Automation Cscape and XL4, XL7 PLCAnviz Multiple ProductsDelta Electronics ASDA-SoftAVEVA Pipeline SimulationCISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Adds Seven Known Exploited Vulnerabilities to CatalogContemporary Controls BASC 20TGPL Odorizers GPL750CISA Adds One Known Exploited Vulnerability to CatalogMitsubishi Electric GENESIS64 and ICONICS Suite productsIranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical InfrastructureCISA Adds One Known Exploited Vulnerability to CatalogSiemens SICAM 8 ProductsYokogawa CENTUM VPCISA Adds One Known Exploited Vulnerability to CatalogHitachi Energy EllipseCISA Adds One Known Exploited Vulnerability to CatalogAnritsu Remote Spectrum MonitorPX4 AutopilotCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds One Known Exploited Vulnerability to CatalogWAGO GmbH & Co. KG Industrial Managed SwitchesPTC Windchill Product Lifecycle ManagementOpenCode Systems OC Messaging and USSD GatewayCISA Adds One Known Exploited Vulnerability to CatalogPharos Controls Mosaic Show ControllerSchneider Electric EcoStruxure Foxboro DCSSchneider Electric Plant iT/BrewmaxxGrassroots DICOM (GDCM)Russian Intelligence Services Target Commercial Messaging Application AccountsCISA Adds Five Known Exploited Vulnerabilities to CatalogSchneider Electric Modicon Controllers M241, M251, M258, and LMC058Schneider Electric Modicon M241, M251, and M262Automated Logic WebCTRL Premium ServerSchneider Electric EcoStruxure Automation ExpertMitsubishi Electric CNC SeriesCTEK ChargeportalIGL-Technologies eParking.fiCISA Adds One Known Exploited Vulnerability to CatalogSchneider Electric EcoStruxure PME and EPOCISA Urges Endpoint Management System Hardening After Cyberattack Against US OrganizationCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds One Known Exploited Vulnerability to CatalogSiemens SICAM SIAPP SDKSchneider Electric SCADAPack and RemoteConnectCODESYS in Festo Automation SuiteSchneider Electric EcoStruxure Data Center ExpertSchneider Electric EcoStruxure Data Center ExpertCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds Two Known Exploited Vulnerabilities to CatalogSiemens SIDIS PrimeSiemens RUGGEDCOM APE1808 DevicesSiemens SIMATICTrane Tracer SC, Tracer SC+, and Tracer ConciergeSiemens Heliox EV ChargersInductive Automation Ignition SoftwareCISA Adds One Known Exploited Vulnerability to CatalogHoneywell IQ4x BMS ControllerCeragon Siklu MultiHaul and EtherHaul SeriesApeman CamerasLantronix EDS3000PS and EDS5000CISA Adds Three Known Exploited Vulnerabilities to CatalogCISA Adds Five Known Exploited Vulnerabilities to CatalogDelta Electronics CNCSoft-G2CISA Adds Two Known Exploited Vulnerabilities to CatalogHitachi Energy Relion REB500 ProductHitachi Energy RTU500 ProductLabkotec LID-3300IPePower epower.iePortwell Engineering ToolkitsMobiliti e-mobi.huMitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet moduleEveron OCPP BackendsChargemap chargemap.comYokogawa CENTUM VP R6, R7Pelco, Inc. Sarix Pro 3 Series IP CamerasCopeland XWEB and XWEB ProEV Energy ev.energyCloudCharge cloudcharge.seMobility46 mobility46.seSWITCH EV swtchenergy.comEV2GO ev2go.ioJohnson Controls, Inc. Frick Controls Quantum HDCISA and Partners Release Guidance for Ongoing Global Exploitation of Cisco SD-WAN SystemsCISA Adds Two Known Exploited Vulnerabilities to CatalogInSAT MasterSCADA BUK-TSGardyn Home KitSchneider Electric EcoStruxure Building Operation WorkstationCISA Adds One Known Exploited Vulnerability to CatalogCISA Adds Two Known Exploited Vulnerabilities to CatalogWelker OdorEyes EcoSystem Pulse Bypass System with XL4 ControllerEnOcean SmartServer IoTJinan USR IOT Technology Limited (PUSR) USR-W610Valmet DNA Engineering Web ToolsCISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Adds Four Known Exploited Vulnerabilities to CatalogSiemens Simcenter Femap and NastranGE Vernova Enervista UR SetupDelta Electronics ASDA-SoftHoneywell HIB2PI and HDZ Series CCTV Cameras (Update A)CISA Adds One Known Exploited Vulnerability to CatalogSiemens SINEC OSSiemens Solid EdgeCISA Adds Two Known Exploited Vulnerabilities to CatalogMirion Medical EC2 Software NMIS BioDoseIndustrial Video & Control LongwatchCISA Releases Five Industrial Control Systems AdvisoriesIskra iHUB and iHUB LiteCISA Adds One Known Exploited Vulnerability to CatalogFesto Compact Vision System, Control Block, Controller, and Operator Unit productsOpto 22 groov ViewCISA Releases Seven Industrial Control Systems AdvisoriesAshlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt ShareSiRcom SMART Alert (SiSA)Rockwell Automation Arena SimulationZenitel TCIV-3+Spyware Allows Cyber Threat Actors to Target Users of Messaging ApplicationsCISA Adds One Known Exploited Vulnerability to CatalogOpto 22 GRV-EPIC and groov RIOICAM365 CCTV Camera Multiple ModelsEmerson Appleton UPSMON-PROCISA Releases Six Industrial Control Systems AdvisoriesFesto Didactic productsFesto MSE6-C2M/D2M/E2MAutomated Logic WebCTRL Premium ServerCISA Adds One Known Exploited Vulnerability to CatalogCISA Releases Guide to Mitigate Risks from Bulletproof Hosting ProvidersCISA Adds One Known Exploited Vulnerability to CatalogShelly Pro 3EMMETZ CONNECT EWIO2Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open StudioCISA Releases Six Industrial Control Systems AdvisoriesShelly Pro 4PMSchneider Electric PowerChute Serial ShutdownFortinet Releases Security Advisory for Relative Path Traversal Vulnerability Affecting FortiWeb ProductsCISA Adds One Known Exploited Vulnerability to CatalogRockwell Automation AADvance-Trusted SIS WorkstationRockwell Automation FactoryTalk Policy ManagerRockwell Automation Studio 5000 Simulation InterfaceRockwell Automation FactoryTalk DataMosaix Private CloudCISA Releases 18 Industrial Control Systems AdvisoriesSiemens SICAM P850 family and SICAM P855 familySiemens COMOSSiemens Software Center and Solid EdgeAVEVA EdgeSiemens Altair Grid EngineMitsubishi Electric MELSEC iQ-F SeriesGeneral Industrial Controls Lynx+ GatewayAVEVA Application Server IDESiemens Spectrum Power 4Siemens Solid EdgeRockwell Automation Verve Asset ManagerBrightpick Mission Control / Internal Logic ControlSiemens LOGO! 8 BM DevicesCISA and Partners Release Advisory Update on Akira RansomwareUpdate: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device VulnerabilitiesCISA Adds Three Known Exploited Vulnerabilities to CatalogCISA Adds One Known Exploited Vulnerability to CatalogCISA Releases Four Industrial Control Systems AdvisoriesABB FLXeon ControllersAdvantech DeviceOn/iEdgeUbia UboxFuji Electric Monitouch V-SFT-6Delta Electronics CNCSoft-G2Radiometrics VizAirCISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Releases Five Industrial Control Systems AdvisoriesIDIS ICM ViewerSurvision License Plate Recognition CameraCISA Adds Two Known Exploited Vulnerabilities to CatalogInternational Standards Organization ISO 15118-2CISA Releases Two Industrial Control Systems AdvisoriesHitachi Energy TropOSNew Guidance Released on Microsoft Exchange Server Security Best PracticesCISA Adds Two Known Exploited Vulnerabilities to CatalogVertikal Systems Hospital Manager Backend ServicesSchneider Electric EcoStruxureCISA Releases Three Industrial Control Systems AdvisoriesMicrosoft Releases Out-of-Band Security Update to Mitigate Windows Server Update Service Vulnerability, CVE-2025-59287CISA Adds Two Known Exploited Vulnerabilities to CatalogDelta Electronics ASDA-SoftCISA Releases Eight Industrial Control Systems AdvisoriesAutomationDirect Productivity SuiteASKI Energy ALS-Mini-S8 and ALS-Mini-S4Veeder-Root TLS4B Automatic Tank Gauge SystemNIHON KOHDEN Central Monitor CNS-6201CISA Adds One Known Exploited Vulnerability to CatalogSiemens SIMATIC S7-1200 CPU V1/V2 DevicesOxford Nanopore Technologies MinKNOWRockwell Automation Compact GuardLogix 5370Rockwell Automation 1783-NATRCISA Releases 10 Industrial Control Systems AdvisoriesCloudEdge Online Cameras and AppRaisecomm RAX701-GC SeriesSiemens RUGGEDCOM ROS DevicesCISA Adds Five Known Exploited Vulnerabilities to CatalogRockwell Automation FactoryTalk LinxSiemens SiPass IntegratedRockwell Automation ArmorStart AOPCISA Releases Thirteen Industrial Control Systems AdvisoriesSiemens SINEC NMSRockwell Automation FactoryTalk ViewPointSiemens SIMATIC ET 200SP Communication ProcessorsRockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7Hitachi Energy MACH GWSSiemens HyperLynx and Industrial Edge App PublisherSiemens Solid EdgeSiemens TeleControl Server BasicCISA Adds One Known Exploited Vulnerability to CatalogCISA Directs Federal Agencies to Mitigate Vulnerabilities in F5 DevicesCISA Adds Five Known Exploited Vulnerabilities to CatalogRockwell Automation 1715 EtherNet/IP Comms ModuleRockwell Automation 1715 EtherNet/IP Comms ModuleCISA Releases One Industrial Control Systems AdvisoryCISA Adds One Known Exploited Vulnerability to CatalogRockwell Automation Lifecycle Services with CiscoRockwell Automation StratixCISA Releases Four Industrial Control Systems AdvisoriesHitachi Energy Asset SuiteCISA Adds One Known Exploited Vulnerability to CatalogCISA Releases Two Industrial Control Systems AdvisoriesDelta Electronics DIAScreenCISA Adds Seven Known Exploited Vulnerabilities to CatalogCISA Releases Two Industrial Control Systems AdvisoriesHitachi Energy MSM ProductRaise3D Pro2 Series 3D PrintersCISA Adds Five Known Exploited Vulnerabilities to CatalogFesto SBRD-Q/SBOC-Q/SBOI-QOpenPLC_V3Festo Controller CECC-S,-LK,-D Family FirmwareMegaSys Enterprises Telenium Online Web ApplicationNational Instruments Circuit Design SuiteLG Innotek Camera Multiple ModelsCISA Releases Ten Industrial Control Systems AdvisoriesFesto CPX-CEC-C1 and CPX-CMXXCISA Strengthens Commitment to SLTT GovernmentsCISA Adds Five Known Exploited Vulnerabilities to CatalogCISA and UK NCSC Release Joint Guidance for Securing OT SystemsCISA Directs Federal Agencies to Identify and Mitigate Potential Compromise of Cisco DevicesCISA Releases One Industrial Control Systems AdvisoryDingtian DT-R002Widespread Supply Chain Compromise Impacting npm EcosystemCISA Adds One Known Exploited Vulnerability to CatalogCISA Releases Six Industrial Control Systems AdvisoriesMitsubishi Electric MELSEC-Q Series CPU ModuleAutomationDirect CLICK PLUSCISA Releases Advisory on Lessons Learned from an Incident Response EngagementViessmann Vitogate 300CISA Shares Lessons Learned from an Incident Response EngagementSchneider Electric SESUSonicWall Releases Advisory for Customers after Security IncidentWestermo Network Technologies WeOS 5Dover Fueling Solutions ProGauge MagLink LX4 DevicesCognex In-Sight Explorer and In-Sight Camera FirmwareHitachi Energy Service SuiteSchneider Electric Saitel DR & Saitel DP Remote Terminal UnitWestermo Network Technologies WeOS 5Hitachi Energy Asset SuiteCISA Releases Nine Industrial Control Systems AdvisoriesCISA Releases Malware Analysis Report on Malicious Listener Targeting Ivanti Endpoint Manager Mobile SystemsMalicious Listener for Ivanti Endpoint Mobile Management SystemsSchneider Electric Altivar Products, ATVdPAC Module, ILC992 InterLink ConverterCISA Releases Eight Industrial Control Systems AdvisoriesHitachi Energy RTU500 SeriesSiemens OpenSSL Vulnerability in Industrial ProductsSiemens Multiple Industrial ProductsDelta Electronics DIALinkSiemens SIMATIC NET CP, SINEMA, and SCALANCESiemens RUGGEDCOM, SINEC NMS, and SINEMACISA Adds One Known Exploited Vulnerability to CatalogSiemens Apogee PXC and Talon TC DevicesSiemens User Management Component (UMC)Siemens SINEC OSSiemens Industrial Edge Management OS (IEM-OS)Siemens SIMATIC Virtualization as a Service (SIVaaS)Schneider Electric EcoStruxureCISA Releases Eleven Industrial Control Systems AdvisoriesSiemens SINAMICS DrivesSiemens SIMOTION ToolsSchneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110Daikin Security GatewayABB Cylon Aspect BMS/BASRockwell Automation FactoryTalk OptixRockwell Automation ControlLogix 5580Rockwell Automation ThinManagerRockwell Automation Stratix IOSRockwell Automation CompactLogix® 5480Rockwell Automation 1783-NATRRockwell Automation FactoryTalk Activation ManagerCISA Releases Fourteen Industrial Control Systems AdvisoriesRockwell Automation Analytics LogixAICISA Adds Three Known Exploited Vulnerabilities to CatalogCISA Releases Five Industrial Control Systems AdvisoriesHoneywell OneWireless Wireless Device Manager (WDM)CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA, NSA, and Global Partners Release a Shared Vision of Software Bill of Materials (SBOM) GuidanceFuji Electric FRENIC-Loader 4CISA Adds Two Known Exploited Vulnerabilities to CatalogDelta Electronics EIP BuilderCISA Releases Four Industrial Control Systems AdvisoriesSunPower PVS6CISA Adds One Known Exploited Vulnerability to CatalogCISA Releases Nine Industrial Control Systems AdvisoriesGE Vernova CIMPLICITYDelta Electronics CNCSoft-G2Mitsubishi Electric MELSEC iQ-F Series CPU ModuleDelta Electronics COMMGRMitsubishi Electric MELSEC iQ-F Series CPU ModuleSchneider Electric Saitel DR & Saitel DP Remote Terminal UnitCISA and Partners Release Joint Advisory on Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage SystemsCountering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage SystemCISA Adds One Known Exploited Vulnerability to CatalogCISA Releases Three Industrial Control Systems AdvisoriesSchneider Electric Modicon M340 Controller and Communication ModulesINVT VT-Designer and HMIToolCISA Adds Three Known Exploited Vulnerabilities to CatalogCISA Requests Public Comment for Updated Guidance on Software Bill of MaterialsMitsubishi Electric Corporation MELSEC iQ-F Series CPU ModuleCISA Adds One Known Exploited Vulnerability to CatalogFUJIFILM Healthcare Americas Synapse MobilityCISA Releases Three Industrial Control Systems AdvisoriesLS Electric GMWin 4CISA Adds One Known Exploited Vulnerability to CatalogDover Fueling Solutions ProGauge MagLink LX ConsolesCISA Releases Five Industrial Control Systems AdvisoriesFuji Electric Smart EditorSiemens Mendix Studio ProCISA Adds Two Known Exploited Vulnerabilities to CatalogPTZOptics and Other Pan-Tilt-Zoom CamerasRansomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software ProviderSiemens Energy ServicesSiemens Tecnomatix Plant SimulationSiemens SCALANCE and RUGGEDCOMAVEVA PI Web APISiemens SCALANCE and RUGGEDCOMAVEVA PI Connector for CygNetCISA Releases Ten Industrial Control Systems AdvisoriesSiemens RUGGEDCOM APE1808Siemens SIMATIC S7-1500 CPU FamilyAVEVA PI Data ArchiveCISA Releases Cybersecurity Advisory on SimpleHelp RMM VulnerabilityMicroDicom DICOM ViewerHitachi Energy Relion 670, 650, SAM600-IO SeriesCISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Releases Four Industrial Control Systems AdvisoriesSinoTrack GPS ReceiverCISA Adds Two Known Exploited Vulnerabilities to CatalogHitachi Energy Relion 670, 650 Series and SAM600-IO ProductCISA Releases Seven Industrial Control Systems AdvisoriesCISA Adds One Known Exploited Vulnerability to CatalogCyberData 011209 SIP Emergency IntercomUpdated Guidance on Play RansomwareSchneider Electric Wiser Home AutomationSchneider Electric EcoStruxure Power Build RapsodyCISA Adds Three Known Exploited Vulnerabilities to CatalogMitsubishi Electric MELSEC iQ-F SeriesCISA Releases Three Industrial Control Systems AdvisoriesCISA Adds Five Known Exploited Vulnerabilities to CatalogSiemens SiPass IntegratedConsilium Safety CS5000 Fire PanelInstantel MicromateCISA Releases Five Industrial Control Systems AdvisoriesSantesoft Sante DICOM Viewer ProSiemens SiPassJohnson Controls iSTAR Configuration Utility (ICU) ToolCISA Releases One Industrial Control Systems AdvisoryNew Guidance for SIEM and SOAR ImplementationAdvisory Update on Cyber Threat Activity Targeting Commvault’s SaaS Cloud Application (Metallic)Lantronix Device InstallerCISA Releases Two Industrial Control Systems AdvisoriesRockwell Automation FactoryTalk Historian ThingWorxNew Best Practices Guide for Securing AI Data ReleasedCISA Adds One Known Exploited Vulnerability to CatalogRussian GRU Cyber Actors Targeting Western Logistics Entities and Tech CompaniesRussian GRU Targeting Western Logistics Entities and Technology CompaniesThreat Actors Target U.S. Critical Infrastructure with LummaC2 MalwareThreat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from OrganizationsMitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric ProductsAssured Telematics Inc (ATI) Fleet Management System with Geotab IntegrationSiemens Siveillance VideoABUP IoT Cloud PlatformTrimble Releases Security Updates to Address a Vulnerability in Cityworks SoftwareCISA Adds One Known Exploited Vulnerability to CatalogSchneider Electric EcoStruxure Power Monitoring Expert (PME)Trimble CityworksCISA Releases Six Industrial Control Systems AdvisoriesSchneider Electric EcoStruxureMicroDicom DICOM ViewerCISA Adds Five Known Exploited Vulnerabilities to CatalogABB Drive ComposerOrthanc Server
