The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
CISA Releases Four Industrial Control Systems Advisories
Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.
- Siemens SIMATIC PCS neo Administration Console
- Omron Engineering Software Zip-Slip
- Omron Engineering Software
- Omron CJ/CS/CP Series
Alerts, Updates, and Bulletins:
- September 19 CISA Adds One Known Exploited Vulnerability to Catalog
- September 18 CISA Adds Eight Known Exploited Vulnerabilities to Catalog
- Fortinet Releases Security Updates for Multiple Products
- CISA Releases Continuous Diagnostics and Mitigation Program: Identity, Credential, and Access Management (ICAM) Reference Architecture