[Control systems] CISA ICS security advisories (AV25–627)

Serial number: AV25-627
Date: September 29, 2025

Between September 22 and 28, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

• AutomationDirect CLICK PLUS C0-0x, C0-1x, C2-x CPU firmware – versions prior to v3.71
• Dingtian DT-R002 – all versions
• Mitsubishi Electric MELSEC-Q Series CPU Modules – first five digits of serial number '24082' to '27081'
• Schneider Electric SESU – multiple models and versions prior to 3.0.12
• Viessmann Vitogate 300 – versions prior to 3.1.0.1

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories