CISA released nineteen Industrial Control Systems (ICS) advisories on November 14, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
ICSA-24-319-01 Siemens RUGGEDCOM CROSSBOW
ICSA-24-319-02 Siemens SIPORT
ICSA-24-319-03 Siemens OZW672 and OZW772 Web Server
ICSA-24-319-04 Siemens SINEC NMS
ICSA-24-319-05 Siemens Solid Edge
ICSA-24-319-06 Siemens SCALANCE M-800 Family
ICSA-24-319-07 Siemens Engineering Platforms
ICSA-24-319-08 Siemens SINEC INS
ICSA-24-319-09 Siemens Spectrum Power 7
ICSA-24-319-10 Siemens TeleControl Server
ICSA-24-319-11 Siemens SIMATIC CP
ICSA-24-319-12 Siemens Mendix Runtime
ICSA-24-319-13 Rockwell Automation Verve Asset Manager
ICSA-24-319-14 Rockwell Automation FactoryTalk Updater
ICSA-24-319-15 Rockwell Automation Arena Input Analyzer
ICSA-24-319-16 Hitachi Energy MSM
ICSA-24-319-17 2N Access Commander
ICSA-24-291-01 Elvaco M-Bus Metering Gateway CMe3100 (Update A)
ICSMA-24-319-01 Baxter Life2000 Ventilation System
CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.