CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – September 15, 2022

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

• Siemens Mobility CoreShield OWG Software
• Siemens Simcenter Femap and Parasolid
• Siemens RUGGEDCOM ROS
• Siemens Mendix SAML Module
• Siemens SINEC INS
• Siemens RUGGEDCOM ROS (Update A) – Product Used in the Energy Sector
• Simcenter Femap and Parasolid (Update B)
• Siemens Industrial Products Intel CPUs (Update F)
• Siemens OpenSSL Affected Industrial Products (Update C)
• Siemens OpenSSL Vulnerability in Industrial Products (Update E) – Product Used in the Water and Wastewater Sector and the Energy Sector
• Siemens SCALANCE (Update A)

Alerts, Updates, and Bulletins:

• 14 Added to CISA’s Known Exploited Vulnerabilities Catalog
• CISA and NSA Publish Open Radio Access Network Security Considerations
• Iranian Islamic Revolutionary Guard Corps Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations
• Microsoft Releases September 2022 Security Updates
• Adobe Releases Security Updates for Multiple Products