Serial number: AV25-554
Date: September 2, 2025
Between August 25 and 31, 2025, CISA published ICS advisories to highlight vulnerabilities in the following products:
- Delta Electronics COMMGR - versions v2.9.0 and prior
- Delta Electronics CNCSoft-G2 - versions v2.1.0.20 and prior
- GE Vernova CIMPLICITY – versions 2024, 2023, 2022, 11.0
- INVT HMITool – version 7.1.011
- INVT VT-Designer – version 2.1.13
- Mitsubishi Electric MELSEC iQ-F Series CPU Module – multiple models and versions
- Schneider Electric Modicon M340 Controller and Communication Modules – multiple models and versions
- Schneider Electric Saitel DR Remote Terminal Unit – versions 11.06.29 and prior
- Schneider Electric Saitel DP Remote Terminal Unit – versions 11.06.34 and prior
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.