CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – March 26, 2024

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Four Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• Automation-Direct C-MORE EA9 HMI – Used in Energy Sector and Water and Wastewater Systems Sector
• Rockwell Automation PowerFlex 527
• Rockwell Automation Arena Simulation
• Rockwell Automation FactoryTalk View ME

Alerts, Updates, and Bulletins:

• CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities
• CISA Adds One Known Exploited Vulnerability to Catalog
• March 25 - CISA Adds Three Known Exploited Vulnerabilities to Catalog