[Control systems] CISA ICS security advisories (AV25–699)

Serial number: AV25–699
Date: October 27, 2025

Between October 20 and 26, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

  • ASKI Energy ALS-mini-s4 IP (serial number from 2000 to 5166) – all versions
  • ASKI Energy ALS-mini-s8 IP (serial number from 2000 to 5166) – all versions
  • AutomationDirect Productivity 3000/2000/1000 series CPU – version v4.4.1.19 and prior
  • AutomationDirect Productivity Suite – version v4.4.1.19 and prior
  • CloudEdge Online Cameras and App – version 4.4.2
  • Delta Electronics ASDA-Soft – version 7.0.2.0 and prior
  • RAX701-GC-WP-01 P200R002C52 – firmware version 5.5.27_20190111
  • RAX701-GC-WP-01 P200R002C53 – firmware version 5.5.13_20180720 and version 5.5.36_20190709
  • Rockwell Automation 1783-NATR – versions prior to 1.006
  • Rockwell Automation Compact GuardLogix 5370 – versions prior to 30.012
  • Siemens RUGGEDCOM ROS Devices – multiple versions and platforms
  • Siemens SIMATIC S7-1200 CPU V1/V2 Devices – versions prior to 2.0.3 (CVE-2011-20001) and 2.0.2 (CVE-2011-20002)
  • Veeder-Root TLS4B Automatic Tank Gauge System – versions prior to 11.A

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

Date modified: