CISA Releases Seventeen Industrial Control Systems Advisories

CISA released seventeen Industrial Control Systems (ICS) advisories on December 14, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-23-348-01 Cambium ePMP 5GHz Force 300-25 Radio 
• ICSA-23-348-02 Johnson Controls Kantech Gen1 ioSmart
• ICSA-23-348-03 Siemens User Management Component (UMC)
• ICSA-23-348-04 Siemens LOGO! and SIPLUS LOGO!
• ICSA-23-348-05 Siemens SIMATIC and SIPLUS Products
• ICSA-23-348-06 Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC
• ICSA-23-348-07 Siemens SIMATIC STEP 7 (TIA Portal)
• ICSA-23-348-08 Siemens Web Server of Industrial Products
• ICSA-23-348-09 Siemens Simantic S7-1500 CPU family
• ICSA-23-348-10 Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
• ICSA-23-348-11 Siemens SINUMERIK
• ICSA-23-348-12 Siemens SICAM Q100 Devices
• ICSA-23-348-13 Siemens SCALANCE and RUGGEDCOM M-800/S615 Family
• ICSA-23-348-14 Siemens RUGGEDCOM and SCALANCE M-800/S615 Family
• ICSA-23-348-15 Unitronics VisiLogic
• ICSA-23-348-16 Siemens SINEC INS
• ICSMA-20-254-01 Philips Patient Monitoring Devices (Update C)

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations.