[Control systems] CISA ICS security advisories (AV25–029)

Serial number: AV25-029
Date: January 20, 2025

Between January 13 and 19, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

• Belledonne Communications Linphone-Desktop – version 5.2.6
• Fuji Electric Alpha5 SMART – version 4.5 and prior
• Hitachi Energy FOX61x – versions prior to R16B, version R15A and prior, version R15B, version R16A and R16B Revision E
• Hitachi Energy FOXCST – versions prior to 16.2.1
• Hitachi Energy FOXMAN-UN – multiple models and versions
• Schneider Electric Data Center Expert – versions 8.1.1.3 and prior
• Schneider Electric EcoStruxure – multiple models and versions
• Schneider Electric Vijeo Designer – versions prior to V6.3 SP1
• Siemens Industrial Edge Management OS (IEM-OS) – all versions
• Siemens Mendix LDAP – versions prior to 1.1.2
• Siemens SIPROTEC 5 – multiple models and versions
• Siemens Siveillance Video Device Pack – versions prior to V13.5

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.