CISA Releases Twenty-one Industrial Control Systems Advisories

CISA released twenty-one Industrial Control Systems (ICS) advisories on July 11, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-24-193-01 Siemens Remote Connect Server
• ICSA-24-193-02 Siemens RUGGEDCOM APE 1808
• ICSA-24-193-03 Siemens Teamcenter Visualization and JT2Go
• ICSA-24-193-04 Siemens Simcenter Femap
• ICSA-24-193-05 Siemens SCALANCE, RUGGEDCOM, SIPLUS, and SINEC
• ICSA-24-193-06 Siemens RUGGEDCOM
• ICSA-24-193-07 Siemens SIMATIC and SIMIT
• ICSA-24-193-08 Siemens Mendix Encryption Module
• ICSA-24-193-09 Siemens SINEMA Remote Connect Server
• ICSA-24-193-10 Siemens JT Open and PLM XML SDK
• ICSA-24-193-11 Siemens RUGGEDCOM APE 1808
• ICSA-24-193-12 Siemens TIA Portal and SIMATIC STEP 7
• ICSA-24-193-13 Siemens TIA Portal, SIMATIC, and SIRIUS
• ICSA-24-193-14 Siemens SIPROTEC
• ICSA-24-193-15 Siemens SINEMA Remote Connect Server
• ICSA-24-193-16 Siemens SIMATIC WinCC
• ICSA-24-193-17 Siemens SIMATIC STEP 7 (TIA Portal)
• ICSA-24-193-18 Rockwell Automation ThinManager ThinServer
• ICSA-24-193-19 Rockwell Automation FactoryTalk System Services and Policy Manager
• ICSA-24-193-20 HMS Industrial Networks Anybus-CompactCom 30
• ICSA-22-356-03 Mitsubishi Electric MELSEC iQ-R, iQ-L Series and MELIPC Series (Update D)

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations.

• Siemens
• Rockwell Automation
• HMS Networks
• Mitsubishi Electric