On June 6, 2024, CISA released four new advisories for Industrial Control Systems (ICS), providing critical information about current security issues, vulnerabilities, and exploits. These advisories are essential for keeping ICS environments secure and ensuring administrators are aware of potential threats.
The first advisory, ICSA-24-158-01, focuses on vulnerabilities in Emerson PACSystem and Fanuc. These systems are crucial for industrial operations, and any security flaws could have significant implications. The advisory provides detailed information on the vulnerabilities and suggests appropriate mitigations.
The second and third advisories, ICSA-24-158-02 and ICSA-24-158-03, address issues in Emerson Ovation and Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch. Both advisories highlight the need for immediate action to protect these systems from potential exploits. Specific recommendations are given to help administrators secure their environments.
The final advisory, ICSA-24-158-04, concerns the Johnson Controls Software House iStar Pro Door Controller. CISA encourages users and administrators to review all the newly released ICS advisories thoroughly. By following the provided technical details and mitigations, they can enhance their system security and reduce the risk of attacks.
Reference: