CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – September 19, 2024

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

• On September 19, 2024, CISA Releases Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
  • Rockwell Automation RSLogix 5 and RSLogix 500
  • IDEC PLCs – Used in Energy
  • IDEC CORPORATION WindLDR and WindO/I-NV4 – Used in Energy
  • MegaSys Computer Technologies Telenium Online Web Application
  • Kastle Systems Access Control System
  • Treck TCP/IP (Update I) – Used in Energy

Additional Alerts, Updates, and Bulletins:

• CISA Adds Five Known Exploited Vulnerabilities to Catalog
• VMware Releases Security Advisory for VMware Cloud Foundation and vCenter Server
• Apple Releases Security Updates for Multiple Products