(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – February 6, 2025

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

• On February 6, 2025, CISA Released Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
  • Schneider Electric EcoStruxure Power Monitoring Expert (PME) – Used in Energy
  • Schneider Electric EcoStruxure – Used in Water and Wastewater Systems and Energy
  • ABB Drive Composer
  • Trimble Cityworks – Used in Water and Wastewater Systems
  • MicroDicom DICOM Viewer
  • Orthanc Server
• On February 4, 2025, CISA Released Nine Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
  • Western Telematic Inc NPS Series, DSM Series, CPM Series
  • Rockwell Automation 1756-L8zS3 and 1756-L3zS3
  • Elber Communications Equipment
  • Schneider Electric Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC – Used in Energy
  • Schneider Electric Web Designer for Modicon – Used in Water and Wastewater Systems and Energy
  • Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H – Used in Energy
  • Schneider Electric Pro-face GP-Pro EX and Remote HMI – Used in Energy
  • AutomationDirect C-more EA9 HMI
  • Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium (Update A)

Additional Alerts, Updates, and Bulletins

• CISA Adds One Known Exploited Vulnerability to Catalog
• CISA Adds Four Known Exploited Vulnerabilities to Catalog
• CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices