Serial number: AV24-319
Date: June 10, 2024
Between June 3 and 9, 2024, CISA published ICS advisories to address vulnerabilities in the following products:
- Emerson PAC Machine Edition – all versions
- Emerson PACSystem RXi – all versions
- Emerson PACSystem RX3i – all versions
- Emerson PACSystem RSTi-EP – all versions
- Emerson PACSystem VersaMax – all versions
- Emerson Fanuc VersaMax – all versions
- Emerson Ovation – version 3.8.0 feature pack 1 and prior
- Johnson Controls Software House iStar Pro Door Controller – all versions
- Johnson Controls ICU - version 6.9.2.25888 and prior
- Mitsubishi NZ2MHG-TSNT8F2 – versions 05 and prior
- Mitsubishi NZ2MHG-TSNT4 – versions 05 and prior
- Uniview NVR301-04S2-P4 – versions prior to NVR-B3801.20.17.240507
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.