CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – March 16, 2023

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

• Siemens SCALANCE, RUGGEDCOM Third-Party
• Siemens RUGGEDCOM CROSSBOW V5.3
• Siemens RUGGEDCOM CROSSBOW V5.2
• Siemens SCALANCE W1750D Devices
• Siemens Mendix SAML Module
• Honeywell OneWireless Wireless Device Manager
• Rockwell Automation Modbus TCP AOI Server

Alerts, Updates, and Bulletins:

• WaterISAC Releases Advisory for Microsoft DCOM Patch
• Microsoft Releases March 2023 Security Updates
• CISA Adds Three Known Exploited Vulnerabilities to Catalog
• CISA Adds One Known Exploited Vulnerability to Catalog
• Beware of Bank-Related Scams
• FBI, CISA, and MS-ISAC Release #StopRansomware: LockBit 3.0
• Threat Actors Exploited Progress Telerik Vulnerability in U.S. Government IIS Server
• Adobe Releases Security Updates for Multiple Products
• Mozilla Releases Security Updates for Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9
• CISA Releases SCuBA Hybrid Identity Solutions Architecture Guidance Document for Public Comment