CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – December 19, 2023

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Seven Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• Subnet Solutions Inc. PowerSYSTEM Center
• EFACEC BCU 500 – Used in the Energy Sector
• EFACEC UC 500E – Used in the Energy Sector
• Open Design Alliance Drawing SDK
• EuroTel ETL3100 Radio Transmitter
• Johnson Controls Metasys and Facility Explorer (Update A)
• Mitsubishi Electric MELSEC iQ-R, Q and L Series (Update D)

Alerts, Updates, and Bulletins:

• CISA Secure by Design Alert Urges Manufacturers to Eliminate Default Passwords
• CISA Releases Advisory on Cyber Resilience for the HPH Sector
• FBI, CISA, and ASD’s ACSC Release Advisory on Play Ransomware 
• CISA and FBI Release Advisory on ALPHV Blackcat Affiliates