CISA Releases Twenty-Five Industrial Control Systems Advisories

CISA released twenty-five Industrial Control Systems (ICS) advisories on September 12, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-24-256-01 Siemens SINEMA Remote Connect Server
• ICSA-24-256-02 Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
• ICSA-24-256-03 Siemens User Management Component (UMC)
• ICSA-24-256-04 Siemens SINUMERIK Systems
• ICSA-24-256-05 Siemens Mendix Runtime
• ICSA-24-256-06 Siemens Automation License Manager
• ICSA-24-256-07 Siemens SIMATIC RFID Readers
• ICSA-24-256-08 Siemens Industrial Products
• ICSA-24-256-09 Siemens SIMATIC, SIPLUS, and TIM
• ICSA-24-256-10 Siemens SINEMA
• ICSA-24-256-11 Siemens Industrial Edge Management
• ICSA-24-256-12 Siemens Tecnomatix Plant Simulation
• ICSA-24-256-13 Siemens SCALANCE W700
• ICSA-24-256-14 Siemens SIMATIC SCADA and PCS 7 Systems
• ICSA-24-256-15 Siemens Industrial Products
• ICSA-24-256-16 Siemens Third Party Component in SICAM and SITIPE Products
• ICSA-24-256-17 AutomationDirect DirectLogic H2-DM1E
• ICSA-24-256-18 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380
• ICSA-24-256-19 Rockwell Automation OptixPanel
• ICSA-24-256-20 Rockwell Automation AADvance Trusted SIS Workstation
• ICSA-24-256-21 Rockwell Automation 5015-U8IHFT
• ICSA-24-256-22 Rockwell Automation FactoryTalk Batch View
• ICSA-24-256-23 Rockwell Automation FactoryTalk View Site
• ICSA-24-256-24 Rockwell Automation Pavilion8
• ICSA-24-256-25 Rockwell Automation ThinManager

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.

• Siemens
• AutomationDirect
• Rockwell Automation