CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – April 11, 2024

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Nine Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• Siemens SIMATIC S7-1500
• Siemens SIMATIC WinCC
• Siemens RUGGEDCOM APE1808 before V11.0.1
• Siemens RUGGEDCOM APE1808
• Siemens Scalance W1750D
• Siemens Parasolid – Used in the Energy Sector
• Siemens SINEC NMS
• Siemens Telecontrol Server Basic – Used in the Water and Wastewater Sector and Energy Sector
• Rockwell Automation 5015-AENFTXT

Alerts, Updates, and Bulletins:

• CISA Announces Malware Next-Gen Analysis
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
• Compromise of Sisense Customer Data