CISA Activity - CISA Releases Seventeen Industrial Control Systems Advisories

[CISA]

CISA released seventeen Industrial Control Systems (ICS) advisories on December 14, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-23-348-01 Cambium ePMP 5GHz Force 300-25 Radio
• ICSA-23-348-02 Johnson Controls Kantech Gen1 ioSmart
• ICSA-23-348-03 Siemens User Management Component (UMC)
• ICSA-23-348-04 Siemens LOGO! and SIPLUS LOGO!
• ICSA-23-348-05 Siemens SIMATIC and SIPLUS Products
• ICSA-23-348-06 Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC
• ICSA-23-348-07 Siemens SIMATIC STEP 7 (TIA Portal)
• ICSA-23-348-08 Siemens Web Server of Industrial Products
• ICSA-23-348-09 Siemens Simantic S7-1500 CPU family
• ICSA-23-348-10 Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
• ICSA-23-348-11 Siemens SINUMERIK
• ICSA-23-348-12 Siemens SICAM Q100 Devices
• ICSA-23-348-13 Siemens SCALANCE and RUGGEDCOM M-800/S615 Family
• ICSA-23-348-14 Siemens RUGGEDCOM and SCALANCE M-800/S615 Family
• ICSA-23-348-15 Unitronics VisiLogic
• ICSA-23-348-16 Siemens SINEC INS
• ICSMA-20-254-01 Philips Patient Monitoring Devices (Update C)

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations.

Continue reading...