CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – November 30, 2023

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Four Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• Delta Electronics DOPSoft – Used in Energy Sector
• Yokogawa STARDOM
• PTC KEPServerEx
• Mitsubishi Electric FA Engineering Software Products

Alerts, Updates, and Bulletins:

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
• CISA Releases First Secure by Design Alert
• Exploitation of Unitronics PLCs used in Water and Wastewater Systems