The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
CISA Releases Nine Industrial Control Systems Advisories
Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.
- Rapid Software LLC Rapid SCADA – Used in Energy Sector
- Horner Automation Cscape
- Schneider Electric Easergy Studio – Used in Energy Sector
- Siemens Teamcenter Visualization and JT2Go
- Siemens Spectrum Power 7
- Siemens SICAM A8000
- Siemens SIMATIC CN 4100
- Siemens SIMATIC
- Siemens Solid Edge
Alerts, Updates, and Bulletins:
- Juniper Networks Releases Security Bulletin for Junos OS and Junos OS Evolved
- Cisco Releases Security Advisory for Cisco Unity Connection
- Ivanti Releases Security Update for Connect Secure and Policy Secure Gateways
- Jan 10 - CISA Adds Two Known Exploited Vulnerabilities to Catalog
- Jan 10 - CISA Adds One Known Exploited Vulnerability to Catalog
- Microsoft Releases Security Updates for Multiple Products
- Fortinet Releases Security Updates for FortiOS and FortiProxy