CISA Releases Twenty-Two Industrial Control Systems Advisories
CISA released twenty-two Industrial Control Systems (ICS) advisories on May 15, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
ICSA-25-135-01 Siemens RUGGEDCOM APE1808 Devices
ICSA-25-135-02 Siemens INTRALOG WMS
ICSA-25-135-03 Siemens BACnet ATEC Devices
ICSA-25-135-04 Siemens Desigo
ICSA-25-135-05 Siemens SIPROTEC and SICAM
ICSA-25-135-06 Siemens Teamcenter Visualization
ICSA-25-135-07 Siemens IPC RS-828A
ICSA-25-135-08 Siemens VersiCharge AC Series EV Chargers
ICSA-25-135-09 Siemens User Management Component (UMC)
ICSA-25-135-10 Siemens OZW Web Servers
ICSA-25-135-11 Siemens Polarion
ICSA-25-135-12 Siemens SIMATIC PCS neo
ICSA-25-135-13 Siemens SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems
ICSA-25-135-14 Siemens APOGEE PXC and TALON TC Series
ICSA-25-135-15 Siemens Mendix OIDC SSOICSA-25-135-16 Siemens MS/TP Point Pickup Module
ICSA-25-135-16 Siemens MS/TP Point Pickup Module
ICSA-25-135-17 Siemens RUGGEDCOM ROX II
ICSA-25-135-18 Siemens SCALANCE LPE9403
ICSA-25-135-19 ECOVACS DEEBOT Vacuum and Base Station
ICSA-25-135-20 Schneider Electric EcoStruxure Power Build Rapsody
ICSA-24-135-04 Mitsubishi Electric Multiple FA Engineering Software Products (Update C)
ICSA-24-200-01 Mitsubishi Electric MELSOFT MaiLab and MELSOFT VIXIO (Update A)
CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-3502 TrueConf Client…