cisa ics advisory

Schneider Electric’s PowerLogic P7 protection and control platform, used in advanced electrical network environments worldwide, is affected by three disclosed vulnerabilities in firmware version 0.2.003.001.000 and earlier, with CISA republishing Schneider’s advisory on June 25, 2026, after the...

Schneider Electric’s EcoStruxure Machine Expert HVAC versions before 1.10.0 contain a medium-severity cleartext storage vulnerability, disclosed by Schneider on May 12, 2026 and republished by CISA on May 28, that can expose protected controller source code to an authorized local attacker. The...

CISA on May 21, 2026 republished ABB’s advisory for three medium-severity flaws in B&R Automation Runtime’s System Diagnostics Manager, affecting Automation Runtime versions before 6.4 and potentially enabling session takeover, browser-session script execution, or malicious formula injection...

Siemens and CISA disclosed on May 12 and May 14, 2026, that Siemens RUGGEDCOM ROX devices running versions before 2.17.1 contain dozens of third-party software vulnerabilities, including flaws rated as critical, and Siemens is telling operators worldwide to update affected industrial networking...

On May 5, 2026, CISA republished ABB’s advisory for CVE-2026-0936, a medium-severity information-disclosure flaw in ABB B&R PVI client software that can expose credentials through client-side log files when logging has been explicitly enabled. The bug is not a remote-code-execution fire alarm...

The latest CISA ICS advisory on the Hangzhou Xiongmai Technology Co., Ltd. XM530 IP Camera describes a severe authentication bypass that could let an unauthenticated attacker reach sensitive device information and live video streams. CISA says the affected firmware is...

CTEK Chargeportal has landed in the spotlight for all the wrong reasons: CISA says vulnerabilities in the platform could let attackers seize unauthorized administrative control of vulnerable charging stations or disrupt charging services outright. The advisory applies to all versions of...

Westermo’s WeOS 5 series has a newly disclosed high‑severity vulnerability that deserves immediate attention from industrial network operators and Windows network teams responsible for OT‑IT convergence, because it can be used to inject operating‑system commands when an attacker can reach an...

A recently republished U.S. federal advisory warns that Rockwell Automation’s FactoryTalk Activation Manager contains a cryptographic implementation flaw that can be exploited remotely to decrypt or tamper with activation and management traffic — an issue assigned CVE‑2025‑7970 and rated with a...

GE Vernova’s CIMPLICITY HMI/SCADA platform has been flagged in a recently circulated advisory as vulnerable to an Uncontrolled Search Path Element (CWE‑427) issue that, under the right local conditions, could allow a low‑privileged user to escalate privileges on affected hosts — the advisory...

Delta Electronics’ CNCSoft‑G2 has been the focus of a coordinated disclosure that exposes a file‑parsing out‑of‑bounds write (CWE‑787) in the DPAX project file handler — a flaw tracked as CVE‑2025‑47728 that can lead to arbitrary code execution when a user opens a specially crafted file, and...

Siemens has confirmed a widespread denial-of-service (DoS) vulnerability affecting multiple models in the SIPROTEC 4 and SIPROTEC 4 Compact line that can be triggered remotely by an unauthenticated attacker during interrupted file-transfer operations; the issue is tracked as CVE-2024-52504 and...

A high-severity privilege-escalation flaw has been disclosed in Rockwell Automation’s FactoryTalk ViewPoint that allows a local attacker to escalate to SYSTEM privileges by abusing Windows MSI repair behavior; the issue (CVE-2025-7973) carries a CVSS v4 base score of 8.5 and affects FactoryTalk...