CISA Activity - CISA Releases Twenty-Five Industrial Control Systems Advisories

CISA released twenty-five Industrial Control Systems (ICS) advisories on September 12, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

[ul]
[li]ICSA-24-256-01 Siemens SINEMA Remote Connect Server[/li][li]ICSA-24-256-02 Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D[/li][li]ICSA-24-256-03 Siemens User Management Component (UMC)[/li][li]ICSA-24-256-04 Siemens SINUMERIK Systems[/li][li]ICSA-24-256-05 Siemens Mendix Runtime[/li][li]ICSA-24-256-06 Siemens Automation License Manager[/li][li]ICSA-24-256-07 Siemens SIMATIC RFID Readers[/li][li]ICSA-24-256-08 Siemens Industrial Products[/li][li]ICSA-24-256-09 Siemens SIMATIC, SIPLUS, and TIM[/li][li]ICSA-24-256-10 Siemens SINEMA[/li][li]ICSA-24-256-11 Siemens Industrial Edge Management[/li][li]ICSA-24-256-12 Siemens Tecnomatix Plant Simulation[/li][li]ICSA-24-256-13 Siemens SCALANCE W700[/li][li]ICSA-24-256-14 Siemens SIMATIC SCADA and PCS 7 Systems[/li][li]ICSA-24-256-15 Siemens Industrial Products[/li][li]ICSA-24-256-16 Siemens Third Party Component in SICAM and SITIPE Products[/li][li]ICSA-24-256-17 AutomationDirect DirectLogic H2-DM1E[/li][li]ICSA-24-256-18 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380[/li][li]ICSA-24-256-19 Rockwell Automation OptixPanel[/li][li]ICSA-24-256-20 Rockwell Automation AADvance Trusted SIS Workstation[/li][li]ICSA-24-256-21 Rockwell Automation 5015-U8IHFT[/li][li]ICSA-24-256-22 Rockwell Automation FactoryTalk Batch View[/li][li]ICSA-24-256-23 Rockwell Automation FactoryTalk View Site[/li][li]ICSA-24-256-24 Rockwell Automation Pavilion8[/li][li]ICSA-24-256-25 Rockwell Automation ThinManager[/li][/ul]

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.

Continue reading…