ICS-CERT has released an advisory on a PHOENIX CONTACT WLAN capable devices using the WPA2 Protocol vulnerability. Numerous versions of these devices are affected. Successful exploitation of this vulnerability could allow an attacker to operate as a “man-in-the-middle” between a device and a wireless access point.
ICS-CERT has released an advisory on a Siemens SICAM vulnerability. All versions of SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, DNPi00 are affected. Successful exploitation of these vulnerabilities could allow an unauthenticated remote attacker to execute arbitrary code. Siemens provides a series of steps to mitigate this vulnerability, which includes disabling the web server after commissioning. Additionally, ICS-CERT recommends a series of defensive measures to minimize the risk of exploitation of the vulnerability.
ICS-CERT has released an advisory on a Moxa Nport 5110, 5130, and 5150 vulnerability. Numerous versions of these products are affected. Successful exploitation of these vulnerabilities could allow for remote code execution on the device. Moxa has produced new firmware for the affected devices Additionally, ICS-CERT recommends a series of defensive measures to minimize the risk of exploitation of the vulnerability. ICS-CERT.
ICS-CERT has released an advisory on a Schneider Electric InduSoft Web Studio and InTouch Machine Edition vulnerability. For InduSoft Web Studio, v8.0 SP2 Patch 1 and prior versions are affected; for InTouch Machine Edition, v8.0 SP2 Patch 1 and prior versions are affected. Successful exploitation of this vulnerability could allow a remote un-authenticated attacker to remotely execute code with high privileges. For both products, Schneider Electric recommends users upgrade to v8.1 as soon as possible.
ICS-CERT has released an advisory on an Advantech WebAccess vulnerability. Versions of WebAccess prior to V8.2_20170817 are affected. Successful exploitation of these vulnerabilities may allow remote code execution. Advantech has released a new version of WebAccess to address the vulnerabilities. ICS-CERT.
ICS-CERT has released an advisory on an ABB FOX515T vulnerability. FOX515T release 1.0 is affected. Successful exploitation of this vulnerability could allow for a local attacker to craft a malicious script that would enable retrieval of any file on the server. ABB reports that the product has been phased out and has reached obsolete status. No further maintenance is planned for the product. ICS-CERT recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability.
ICS-CERT has released an advisory on a Trihedral Engineering Limited VTScada vulnerability. VTScada 11.3.03 and prior are affected. Successful exploitation of these vulnerabilities may allow execution of arbitrary code. Trihedral Engineering Limited recommends that users of an affected version update to the latest version, 11.3.05. ICS-CERT.
ICS-CERT has released an advisory on a Korenix JetNet vulnerability. Numerous versions of JetNet, an Ethernet switch, are affected. Successful exploitation of these vulnerabilities could allow a remote attacker to gain remote access to the device to run arbitrary code and perform man-in-the-middle attacks. Korenix has produced new firmware that removes the undocumented hard-coded credentials from supported systems. ICS-CERT.
ICS-CERT has released an advisory on a SpiderControl MicroBrowser vulnerability. MicroBrowser Windows XP; Vista 7, 8, and 10; and versions 1.6.30.144 and prior are affected. Exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system. SpiderControl has provided software update Version 1.6.30.148 for MicroBrowser, which fixes this vulnerability. ICS-CERT.
ICS-CERT has released an advisory on a Progea Movicon SCADA/HMI vulnerability. Movicon Version 11.5.1181 and prior are affected. Successful exploitation of these vulnerabilities could allow privilege escalation or arbitrary code execution. Progea has not provided an update to address these vulnerabilities, however, it has issued a knowledge base article about DLL Hijacking. NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities.
1620 I Street, NW, Suite 500
Washington, DC 20006
1-866-H2O-ISAC (1-866-426-4722)
© 2025 WaterISAC. All Rights Reserved.
