[Control systems] CISA ICS security advisories (AV24–587)

From: Canadian Centre for Cyber Security

Serial number: AV24-587
Date: October 15, 2024

Between October 7 and 13, 2024, CISA published ICS advisories to address vulnerabilities in the following products:

  • Delta Electronics CNCSoft-G2 - version 2.1.0.10
  • Rockwell Automation ControlLogix - multiple versions and products
  • Rockwell Automation DataMosaix Private Cloud - versions 7.07 and prior
  • Rockwell Automation Logix Controllers - multiple versions and products
  • Rockwell Automation PowerFlex 6000T - versions 8.001, 8.002 and 9.001
  • Rockwell Automation Verve Asset Manager - versions 1.38 and prior
  • Schneider Electric Zelio Soft 2 - versions prior to 5.4.2.2
  • Siemens SINEC Security Monitor - versions prior to V4.9.0

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

Date modified: