June 2025
05.06.2025
US CERT (ICS)
Hitachi Energy Relion 670, 650 Series and SAM600-IO Product
Title
Hitachi Energy Relion 670, 650 Series and SAM600-IO Product
Published
June 5, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-02
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Relion 670, Relion 650, SAM600-IO Vulnerabilities: Integer Overflow or Wraparound 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption on the products. 3. TECHNICAL DETAILS 3.1 ...
05.06.2025
US CERT (ICS)
CyberData 011209 SIP Emergency Intercom
Title
CyberData 011209 SIP Emergency Intercom
Published
June 5, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: CyberData Equipment: 011209 SIP Emergency Intercom Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Missing Authentication for Critical Function, SQL Injection, Insufficiently Protected Credentials, Path Traversal: '.../...//' 2. RISK EVALUATION Successful exploitation of these vulnerabilities ...
03.06.2025
US CERT (ICS)
Schneider Electric Wiser Home Automation
Title
Schneider Electric Wiser Home Automation
Published
June 3, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-153-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Wiser AvatarOn 6K Freelocate, Wiser Cuadro H 5P Socket Vulnerability: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to ...
May 2025
29.05.2025
US CERT (ICS)
Instantel Micromate
Title
Instantel Micromate
Published
May 29, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-148-04
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Instantel Equipment: Micromate Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to access the device's configuration port and execute commands. 3. TECHNICAL DETAILS 3.1 AFFECTED ...
29.05.2025
US CERT (ICS)
Consilium Safety CS5000 Fire Panel
Title
Consilium Safety CS5000 Fire Panel
Published
May 29, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-148-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Consilium Safety Equipment: CS5000 Fire Panel Vulnerabilities: Initialization of a Resource with an Insecure Default, Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to gain high-level access to ...
29.05.2025
US CERT (ICS)
Siemens SiPass
Title
Siemens SiPass
Published
May 29, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-148-01
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
27.05.2025
US CERT (ICS)
Johnson Controls iSTAR Configuration Utility (ICU) Tool
Title
Johnson Controls iSTAR Configuration Utility (ICU) Tool
Published
May 27, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-146-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.3 ATTENTION: Low attack complexity Vendor: Johnson Controls Inc. Equipment: iSTAR Configuration Utility (ICU) tool Vulnerability: Use of Uninitialized Variable 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to gain access to memory leaked from the ICU. 3. TECHNICAL ...
22.05.2025
US CERT (ICS)
Lantronix Device Installer
Title
Lantronix Device Installer
Published
May 22, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-142-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Low attack complexity Vendor: Lantronix Equipment: Device Installer Vulnerability: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain access to the host machine running the Device Installer software. 3. ...
22.05.2025
US CERT (ICS)
Rockwell Automation FactoryTalk Historian ThingWorx
Title
Rockwell Automation FactoryTalk Historian ThingWorx
Published
May 22, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-142-02
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: 95057C-FTHTWXCT11 Vulnerability: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to launch XXE-based attacks on applications that accept malicious log4net configuration files. ...
20.05.2025
US CERT (ICS)
Assured Telematics Inc (ATI) Fleet Management System with Geotab Integration
Title
Assured Telematics Inc (ATI) Fleet Management System with Geotab Integration
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-11
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Assured Telematics Inc. Equipment: Fleet Management System Vulnerabilities: Exposure of Sensitive System Information to an Unauthorized Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker collecting sensitive file system information ...
20.05.2025
US CERT (ICS)
Vertiv Liebert RDU101 and UNITY
Title
Vertiv Liebert RDU101 and UNITY
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-10
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Vertiv Equipment: Liebert RDU101 and Liebert UNITY Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition ...
20.05.2025
US CERT (ICS)
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products
Title
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-04
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.3 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Iconics Digital Solutions, Mitsubishi Electric Equipment: ICONICS Product Suite and Mitsubishi Electric MC Works64 Vulnerability: Execution with Unnecessary Privileges 2. RISK EVALUATION Successful exploitation of this vulnerability could result in information tampering on the target ...
20.05.2025
US CERT (ICS)
Siemens Siveillance Video
Title
Siemens Siveillance Video
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-05
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
20.05.2025
US CERT (ICS)
AutomationDirect MB-Gateway
Title
AutomationDirect MB-Gateway
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-09
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: AutomationDirect Equipment: MB-Gateway Vulnerability: Missing Authentication For Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to make configuration changes, disrupt operations, or achieve arbitrary code execution. 3. TECHNICAL DETAILS 3.1 ...
20.05.2025
US CERT (ICS)
Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL
Title
Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-07
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Galaxy VS, Galaxy VL, Galaxy VXL Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform unauthenticated remote code execution. 3. TECHNICAL DETAILS ...
20.05.2025
US CERT (ICS)
Assured Telematics Inc (ATI) Fleet Management System (Update A)
Title
Assured Telematics Inc (ATI) Fleet Management System (Update A)
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-11
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Assured Telematics Inc. Equipment: Fleet Management System Vulnerabilities: Exposure of Sensitive System Information to an Unauthorized Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker collecting sensitive file system information ...
20.05.2025
US CERT (ICS)
National Instruments Circuit Design Suite
Title
National Instruments Circuit Design Suite
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-02
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: National Instruments Equipment: Circuit Design Suite Vulnerabilities: Out-of-bounds Write, Out-of-bounds Read, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code. 3. TECHNICAL DETAILS 3.1 ...
20.05.2025
US CERT (ICS)
ABUP IoT Cloud Platform
Title
ABUP IoT Cloud Platform
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.9 ATTENTION: Exploitable remotely/Low attack complexity Vendor: ABUP Equipment: ABUP Internet of Things (IoT) Cloud Platform Vulnerability: Incorrect Privilege Assignment 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access device profiles for which they are not authorized. 3. ...
20.05.2025
US CERT (ICS)
Danfoss AK-SM 8xxA Series
Title
Danfoss AK-SM 8xxA Series
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.3 ATTENTION: Exploitable remotely Vendor: Danfoss Equipment: AK-SM 8xxA Series Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could enable a remote attacker to bypass authentication and execute arbitrary code remotely. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions ...
20.05.2025
US CERT (ICS)
Schneider Electric PrismaSeT Active - Wireless Panel Server
Title
Schneider Electric PrismaSeT Active - Wireless Panel Server
Published
May 20, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-06
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: PrismaSeT Active - Wireless Panel Server Vulnerability: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unauthorized code execution, which could result ...
15.05.2025
US CERT (ICS)
Siemens BACnet ATEC Devices
Title
Siemens BACnet ATEC Devices
Published
May 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-03
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
15.05.2025
US CERT (ICS)
Siemens Polarion
Title
Siemens Polarion
Published
May 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-11
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
15.05.2025
US CERT (ICS)
Siemens Desigo
Title
Siemens Desigo
Published
May 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-04
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
15.05.2025
US CERT (ICS)
Siemens OZW Web Servers
Title
Siemens OZW Web Servers
Published
May 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-10
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
15.05.2025
US CERT (ICS)
Siemens IPC RS-828A
Title
Siemens IPC RS-828A
Published
May 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-07
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

Last Updates

BOSCH PSIRT
10.06.2025
SIEMENS CERT
24.06.2025
US CERT
12.06.2025
US CERT (ICS)
03.07.2025

By Source

Archive

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds