CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – January 12, 2023

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

• Sewio RTLS Studio
• RONDS Equipment Predictive Maintenance Solution
• InHand Networks InRouter – Product Used in the Energy Sector
• Panasonic Sanyo CCTV Network Camera
• SAUTER Controls Nova 200 – 220 Series (PLC 6) – Product Used in the Energy Sector
• Johnson Controls Metasys
• Hitachi Energy Lumada APM – Product Used in the Energy Sector
• Siemens S7-1500 CPU devices
• Siemens Mendix SAML Module
• Siemens Automation License Manager
• Siemens Solid Edge before V2023 MP1

Alerts, Updates, and Bulletins:

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
• Microsoft Releases January 2023 Security Updates
• Adobe Releases Security Updates for Multiple Products
• NCSC-UK Releases Guidance on Using MSP for Administering Cloud Services
• Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms