OT Advisories
Swann Communications Camera Mitigations
Swann Communications has an interim mitigation suggestion available to handle a missing authentication for critical function vulnerability in its SWIFI-SE2KIC firmware, according to a report with CISA.
Inductive Automation Fixes Ignition
Inductive Automation has an update available to handle an incorrect authorization vulnerability in its Ignition product, according to a report with CISA.
Grid Protection Alliance Updates openPDC, openHistorian
Grid Protection Alliance (GPA) updated its openPDC and openHistorian to handle multiple vulnerabilities, according to a report with CISA.
Hitachi Energy Updates RTU500
Hitachi Energy has an update available to handle multiple vulnerabilities in its RTU500 series CMU firmware, according to a report with CISA.
Hitachi Energy Updates Asset Suite
Hitachi Energy has an update available to handle missing authentication for critical function vulnerabilities in its Asset Suite, according to a report with CISA.
No Fix for Johnson Controls EasyIO FG
Johnson Controls will not have a fix for use of hard-coded credentials and improper privilege management vulnerabilities in its EasyIO FG firmware, according to a report with CISA.
CISA Fixes Malcolm Tool
Cybersecurity and Infrastructure Security Agency, has a fix available to handle multiple vulnerabilities in its CISA Malcolm, CISA officials said.
No Fix for Meari IoT Cloud Platform OpenAPI Service
Meari did not fix missing authorization vulnerabilities in its Meari IoT Cloud Platform OpenAPI Service, according to a report with CISA.
Johnson Controls Updates EasyIO Neo Series Controllers
Johnson Controls has an update available to handle a cleartext transmission of sensitive information vulnerability in its EasyIO Neo Series EC and CW Controllers, according to a report with CISA.
Johnson Controls Fixes Controllers
Johnson Controls has an update available to handle an exposure of sensitive information to an unauthorized actor vulnerability in its EasyIO Neo Series EC and CW Controllers, according to a report with CISA.
ABB Protection and Control IED Manager PCM600 Mitigations
ABB has mitigations available to handle incorrect permission assignment for critical resource and improper limitation of a pathname to a restricted directory (path traversal) vulnerabilities in its ABB Protection and Control IED Manager PCM600, according to a report with CISA.
Update to Monta monta.app
Monta said it updated its monta.app to handle multiple vulnerabilities, according to a report with CISA.
Armatura Fixes Armatura One
Armatura LLC has an update available to handle multiple vulnerabilities in its Armatura One, according to a report with CISA.
Mitsubishi Fixes GX Works3, Motion Control Settings
Mitsubishi Electric has an update available to handle an incorrect implementation of authentication algorithm vulnerability in its GX Works3 and Motion Control Settings, according to a report with CISA.
Hitachi Fixes FACTS Control Platform Issues
Hitachi Energy has an update available to handle multiple vulnerabilities in its FACTS Control Platform (FCP), according to a report with CISA.
Schneider Fixes Modicon M340 Controller, Communication Modules
Schneider Electric has an update available to handle an improper input validation vulnerability its Modicon M340 Controller and Communication Modules, according to a report with CISA.
ABB Fixes Ability Edgenius
ABB has an update available to handle an incorrect resource transfer between spheres vulnerability in its ABB Ability Edgenius, according to a report with CISA.
Schneider Updates PowerChute Serial Shutdown
Schneider Electric has an update available to handle an improper restriction of excessive authentication attempts in its PowerChute Serial Shutdown, according to a report with CISA.
Siemens Fixes Teamcenter
Siemens has an update available to handle an improper neutralization of input during web page generation (cross-site scripting) vulnerability in its Teamcenter, according to a report with CISA.
Update Available for Siemens Mendix SAML
Siemens has an update available to handle an improper verification of cryptographic signature vulnerability in its Mendix SAML, according to a report with CISA.