Serial number: AV24-587
Date: October 15, 2024
Between October 7 and 13, 2024, CISA published ICS advisories to address vulnerabilities in the following products:
- Delta Electronics CNCSoft-G2 – version 2.1.0.10
- Rockwell Automation ControlLogix – multiple versions and products
- Rockwell Automation DataMosaix Private Cloud – versions 7.07 and prior
- Rockwell Automation Logix Controllers – multiple versions and products
- Rockwell Automation PowerFlex 6000T – versions 8.001, 8.002 and 9.001
- Rockwell Automation Verve Asset Manager – versions 1.38 and prior
- Schneider Electric Zelio Soft 2 – versions prior to 5.4.2.2
- Siemens SINEC Security Monitor – versions prior to V4.9.0
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.
This alert was originated From: Canadian Centre for Cyber Security
https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-ics-security-advisories-av24-587