Serial number: AV25-718
Date: November 3, 2025
Between October 27 and November 2, 2025, CISA published ICS advisories to address vulnerabilities in the following products:
- Hitachi Energy TropOS 4th Gen Firmware – versions 8.9.6.0 and prior
- Hitachi Energy TropOS 4th Gen Firmware – versions prior to 8.9.6.0
- ISO 15118 standard – Part 15118-2 Network and Application Protocol Requirements
- Schneider Electric EcoStruxure Modicon Communication Server – all versions
- Schneider Electric EcoStruxure OPC UA Server Expert – versions prior to SV2.01 SP3
- Vertikal Systems Hospital Manager Backend Services – September 19, 2025 and prior.
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.