(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – July 24, 2025
Created: Thursday, July 24, 2025 - 13:38
Categories: Cybersecurity, Federal & State Resources, OT-ICS Security
ICS Advisories:
On July 24, 2025, CISA Released Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
- Mitsubishi Electric CNC Series
- Network Thermostat X-Series WiFi Thermostats
- Honeywell Experion PKS – Used in Water and Wastewater Systems and Energy
- LG Innotek Camera Model LNV5110R
- Medtronic MyCareLink Patient Monitor
- ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update A)
On July 22, 2025, CISA Released Nine Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:
- DuraComm DP-10iN-100-MU – Used in Energy
- Lantronix Provisioning Manager
- Schneider Electric EcoStruxure – Used in Energy
- Schneider Electric EcoStruxure Power Operation – Used in Energy
- Schneider Electric System Monitor Application – Used in Energy
- Schneider Electric EcoStruxture IT Data Center Expert
- Schneider Electric Modicon Controllers (Update A) – Used in Energy
- Schneider Electric EVLink WallBox (Update A)
- Schneider Electric Vijeo Designer (Update A) – Used in Energy
Additional Alerts, Updates, and Bulletins:
- July 22 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
- July 22 – CISA Adds Four Known Exploited Vulnerabilities to Catalog
- July 20 – CISA Adds One Known Exploited Vulnerability, CVE-2025-53770 “ToolShell,” to Catalog
- July 18 – CISA Adds One Known Exploited Vulnerability to Catalog
- Joint Advisory Issued on Protecting Against Interlock Ransomware
- UPDATE: Microsoft Releases Guidance on Exploitation of SharePoint Vulnerabilities