CISA released nineteen Industrial Control Systems (ICS) advisories on November 14, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
[ul]
[li]ICSA-24-319-01 Siemens RUGGEDCOM CROSSBOW[/li][li]ICSA-24-319-02 Siemens SIPORT[/li][li]ICSA-24-319-03 Siemens OZW672 and OZW772 Web Server[/li][li]ICSA-24-319-04 Siemens SINEC NMS[/li][li]ICSA-24-319-05 Siemens Solid Edge[/li][li]ICSA-24-319-06 Siemens SCALANCE M-800 Family[/li][li]ICSA-24-319-07 Siemens Engineering Platforms[/li][li]ICSA-24-319-08 Siemens SINEC INS[/li][li]ICSA-24-319-09 Siemens Spectrum Power 7[/li][li]ICSA-24-319-10 Siemens TeleControl Server[/li][li]ICSA-24-319-11 Siemens SIMATIC CP[/li][li]ICSA-24-319-12 Siemens Mendix Runtime[/li][li]ICSA-24-319-13 Rockwell Automation Verve Asset Manager[/li][li]ICSA-24-319-14 Rockwell Automation FactoryTalk Updater[/li][li]ICSA-24-319-15 Rockwell Automation Arena Input Analyzer[/li][li]ICSA-24-319-16 Hitachi Energy MSM[/li][li]ICSA-24-319-17 2N Access Commander[/li][li]ICSA-24-291-01 Elvaco M-Bus Metering Gateway CMe3100 (Update A)[/li][li]ICSMA-24-319-01 Baxter Life2000 Ventilation System[/li][/ul]
CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.