diff --git a/docs/advisories/20241218001-CISA-Releases-Five-ICS-Advisories.md b/docs/advisories/20241218001-CISA-Releases-Five-ICS-Advisories.md index 55c57a55..c7c55cd4 100644 --- a/docs/advisories/20241218001-CISA-Releases-Five-ICS-Advisories.md +++ b/docs/advisories/20241218001-CISA-Releases-Five-ICS-Advisories.md @@ -6,13 +6,13 @@ CISA has released five Industrial Control Systems (ICS) advisories around curren ## What is vulnerable? -| **Product(s) Affected** | **Affected Version(s)** | **CVSS** | -|---|---|---| -| ThreatQuotient: ThreatQ Platform | ***Versions prior to 5.29.3*** | 8.7 | -| Hitachi Energy: TropOS devices series 1400/2400/6400 | ***All versions prior to 8.9.6*** | 5.3 | -| Rockwell Automation: PowerMonitor 1000 Remote | PM1k 1408-BC3A-485: ***Versions prior to 4.020***
PM1k 1408-BC3A-ENT: ***Versions prior to 4.020***
PM1k 1408-TS3A-485: ***Versions prior to 4.020***
PM1k 1408-TS3A-ENT: ***Versions prior to 4.020***
PM1k 1408-EM3A-485: ***Versions prior to 4.020***
PM1k 1408-EM3A-ENT: ***Versions prior to 4.020***
PM1k 1408-TR1A-485: ***Versions prior to 4.020***
PM1k 1408-TR2A-485: ***Versions prior to 4.020***
PM1k 1408-EM1A-485: ***Versions prior to 4.020***
PM1k 1408-EM2A-485: ***Versions prior to 4.020***
PM1k 1408-TR1A-ENT: ***Versions prior to 4.020***
PM1k 1408-TR2A-ENT: ***Versions prior to 4.020***
PM1k 1408-EM1A-ENT: ***Versions prior to 4.020***
PM1k 1408-EM2A-ENT: ***Versions prior to 4.020*** | 9.3 | -| Schneider Electric: Modicon Controllers | Modicon Controllers M241: ***All versions***
Modicon Controllers M251: ***All versions***
Modicon Controllers M258: ***All versions***
Modicon Controllers LMC058: ***All versions*** | 9.3 | -| BD Diagnostic Solutions: Multiple BD products | BD BACTEC Blood Culture System: ***All versions***
BD COR System: ***All versions***
BD EpiCenter Microbiology Data Management System: ***All versions***
BD MAX System: ***All versions***
BD Phoenix M50 Automated Microbiology System: ***All versions***
BD Synapsys Informatics Solution: ***All versions*** | 8.0 | +| **Product(s) Affected** | **Affected Version(s)** | **CVSS** | +| ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------- | +| ThreatQuotient: ThreatQ Platform | ***Versions prior to 5.29.3*** | 8.7 | +| Hitachi Energy: TropOS devices series 1400/2400/6400 | ***All versions prior to 8.9.6*** | 5.3 | +| Rockwell Automation: PowerMonitor 1000 Remote | PM1k 1408-BC3A-485: ***Versions prior to 4.020***
PM1k 1408-BC3A-ENT: ***Versions prior to 4.020***
PM1k 1408-TS3A-485: ***Versions prior to 4.020***
PM1k 1408-TS3A-ENT: ***Versions prior to 4.020***
PM1k 1408-EM3A-485: ***Versions prior to 4.020***
PM1k 1408-EM3A-ENT: ***Versions prior to 4.020***
PM1k 1408-TR1A-485: ***Versions prior to 4.020***
PM1k 1408-TR2A-485: ***Versions prior to 4.020***
PM1k 1408-EM1A-485: ***Versions prior to 4.020***
PM1k 1408-EM2A-485: ***Versions prior to 4.020***
PM1k 1408-TR1A-ENT: ***Versions prior to 4.020***
PM1k 1408-TR2A-ENT: ***Versions prior to 4.020***
PM1k 1408-EM1A-ENT: ***Versions prior to 4.020***
PM1k 1408-EM2A-ENT: ***Versions prior to 4.020*** | 9.3 | +| Schneider Electric: Modicon Controllers | Modicon Controllers M241: ***All versions***
Modicon Controllers M251: ***All versions***
Modicon Controllers M258: ***All versions***
Modicon Controllers LMC058: ***All versions*** | 9.3 | +| BD Diagnostic Solutions: Multiple BD products | BD BACTEC Blood Culture System: ***All versions***
BD COR System: ***All versions***
BD EpiCenter Microbiology Data Management System: ***All versions***
BD MAX System: ***All versions***
BD Phoenix M50 Automated Microbiology System: ***All versions***
BD Synapsys Informatics Solution: ***All versions*** | 8.0 | ## What has been observed? @@ -26,4 +26,4 @@ The WA SOC recommends administrators apply the solutions as per vendor instructi - ICSA-24-352-02 [Hitachi Energy TropOS Devices Series 1400/2400/6400](https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-02) - ICSA-24-352-03 [Rockwell Automation PowerMonitor 1000 Remote](https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-03) - ICSA-24-352-04 [Schneider Electric Modicon](https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-04) -- ICSMA-24-352-01 [BD Diagnostic Solutions Products](https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-352-01) \ No newline at end of file +- ICSMA-24-352-01 [BD Diagnostic Solutions Products](https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-352-01)