Title: CISA Releases Thirty-Two Industrial Control Systems Advisories

Published: Thu, 14 Aug 25 12:00:00 +0000

CISA released thirty-two Industrial Control Systems (ICS) advisories on August 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-25-226-01 Siemens SIMATIC RTLS Locating Manager
• ICSA-25-226-02 Siemens COMOS
• ICSA-25-226-03 Siemens Engineering Platforms
• ICSA-25-226-04 Siemens Simcenter Femap
• ICSA-25-226-05 Siemens Wibu CodeMeter Runtime
• ICSA-25-226-06 Siemens Opcenter Quality
• ICSA-25-226-07 Siemens Third-Party Components in SINEC OS
• ICSA-25-226-08 Siemens RUGGEDCOM CROSSBOW Station Access Controller
• ICSA-25-226-09 Siemens RUGGEDCOM APE1808
• ICSA-25-226-10 Siemens SIPROTEC 5
• ICSA-25-226-11 Siemens SIMATIC S7-PLCSIM
• ICSA-25-226-12 Siemens SIPROTEC 4 and SIPROTEC 4 Compact
• ICSA-25-226-13 Siemens SIMATIC RTLS Locating Manager
• ICSA-25-226-14 Siemens RUGGEDCOM ROX II
• ICSA-25-226-15 Siemens SINEC OS
• ICSA-25-226-16 Siemens SICAM Q100/Q200
• ICSA-25-226-17 Siemens SINEC Traffic Analyzer
• ICSA-25-226-18 Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER
• ICSA-25-226-19 Siemens SINUMERIK
• ICSA-25-226-20 Siemens RUGGEDCOM ROX II
• ICSA-25-226-21 Siemens BFCClient
• ICSA-25-226-22 Siemens Web Installer
• ICSA-25-226-23 Rockwell Automation FactoryTalk Viewpoint
• ICSA-25-226-24 Rockwell FactoryTalk Linx
• ICSA-25-226-25 Rockwell Automation Micro800
• ICSA-25-226-26 Rockwell Automation FLEX 5000 I/O
• ICSA-25-226-27 Rockwell Automation ArmorBlock 5000 I/O – Webserver
• ICSA-25-226-28 Rockwell Automation ControlLogix Ethernet Modules
• ICSA-25-226-29 Rockwell Automation Studio 5000 Logix Designer
• ICSA-25-226-30 Rockwell Automation FactoryTalk Action Manager
• ICSA-25-226-31 Rockwell Automation 1756-ENT2R, 1756-EN4TR, 1756-EN4T
• ICSA-25-212-01 Güralp Systems FMUS Series and MIN Series Devices (Update A)

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.

Source: US-CERT.CISA.GOV