CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – January 11, 2024

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Nine Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• Rapid Software LLC Rapid SCADA – Used in Energy Sector
• Horner Automation Cscape
• Schneider Electric Easergy Studio – Used in Energy Sector
• Siemens Teamcenter Visualization and JT2Go
• Siemens Spectrum Power 7
• Siemens SICAM A8000
• Siemens SIMATIC CN 4100
• Siemens SIMATIC
• Siemens Solid Edge

Alerts, Updates, and Bulletins:

• Juniper Networks Releases Security Bulletin for Junos OS and Junos OS Evolved
• Cisco Releases Security Advisory for Cisco Unity Connection
• Ivanti Releases Security Update for Connect Secure and Policy Secure Gateways
• Jan 10 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
• Jan 10 – CISA Adds One Known Exploited Vulnerability to Catalog
• Microsoft Releases Security Updates for Multiple Products
• Fortinet Releases Security Updates for FortiOS and FortiProxy