[Control systems] CISA ICS security advisories (AV25–029)

Serial number: AV25-029
Date: January 20, 2025

Between January 13 and 19, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

  • Belledonne Communications Linphone-Desktop – version 5.2.6
  • Fuji Electric Alpha5 SMART – version 4.5 and prior
  • Hitachi Energy FOX61x – versions prior to R16B, version R15A and prior, version R15B, version R16A and R16B Revision E
  • Hitachi Energy FOXCST – versions prior to 16.2.1
  • Hitachi Energy FOXMAN-UN – multiple models and versions
  • Schneider Electric Data Center Expert – versions 8.1.1.3 and prior
  • Schneider Electric EcoStruxure – multiple models and versions
  • Schneider Electric Vijeo Designer – versions prior to V6.3 SP1
  • Siemens Industrial Edge Management OS (IEM-OS) – all versions
  • Siemens Mendix LDAP – versions prior to 1.1.2
  • Siemens SIPROTEC 5 – multiple models and versions
  • Siemens Siveillance Video Device Pack – versions prior to V13.5

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

Date modified: