CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – May 12, 2022

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

• Delta Electronics CNCSoft
• Mitsubishi Electric MELSOFT iQ AppPortal
• Inkscape in Industrial Products
• Cambium Networks cnMaestro
• Siemens Industrial PCs and CNC devices
• Siemens SIMATIC WinCC
• Siemens SICAM P850 and SICAM P855
• Siemens Industrial Products with OPC UA
• Siemens JT2GO and Teamcenter Visualization
• Siemens Desigo PXC and DXR Devices
• Siemens SIMATIC CP 44x-1 RNA
• Siemens Industrial Products
• Siemens Industrial Devices using libcurl
• Siemens Simcenter Femap
• Siemens OpenV2G
• Siemens Teamcenter
• Siemens OpenSSL Vulnerabilities in Industrial Products (Update A)
• Mitsubishi Electric GT25-WLAN (Update A)
• Siemens SIMATIC WinCC and PCS (Update B)
• Siemens SIMATIC WinCC (Update D)
• Siemens Nucleus RTOS-based APOGEE and TALON Products (Update C)
• Siemens VxWorks-based Industrial Products (Update B)
• Siemens SIMATIC RFID (Update B)
• Siemens SIMOTICS, Desigo, APOGEE, and TALON (Update D) – Product Used in the Energy and Water and Wastewater Sectors
• Siemens SCALANCE and SIMATIC (Update H)
• Siemens TIA Portal (Update D) – Product Used in the Energy and Water and Wastewater Sectors
• Siemens Industrial Products (Update R) – Product Used in the Energy and Water and Wastewater Sectors

Alerts, Updates, and Bulletins:

• 2 Added to CISA’s Known Exploited Vulnerabilities Catalog
• CISA Joins Partners to Release Advisory on Protecting MSPs and their Customers
• Microsoft Releases May 2022 Security Updates
• Google Releases Security Updates for Chrome
• Adobe Releases Security Updates for Multiple Products