SpinfoSecurity

CISA · ICS / OT · updated weekly

SpinfoSecurity

ICS/OT Advisories

Current industrial control advisories in one place—so you can check whether today’s notice touches equipment you maintain.

Browse advisories Subscribe via RSS

Last built

Showing 120 recent

Attention 25 critical · 69 high

Source CISA CSAF OT

Recent advisories

Showing 120 advisories. Open any row for the official CISA write-up.

High 8.0
ICSA-26-225-14 Advisory

Johnson Controls Metasys

Johnson Controls Inc · Metasys 12, Metasys 13, Metasys 14, Metasys 15

Open
High 8.1
ICSMA-26-225-01 Medical

Flow Neuroscience FL-100

Flow Neuroscience · Flow Neuroscience FL-100, Halo Neuroscience FL-100

Open
High 7.8
ICSA-26-225-12 Advisory

Siemens Solid Edge

Siemens · Solid Edge SE2025, Solid Edge SE2026

Open
High 7.8
ICSA-26-225-10 Advisory

Siemens Parasolid

Siemens · Parasolid V38.0, Parasolid V38.1

Open
High 7.8
ICSA-26-225-10 Advisory

Siemens Parasolid

Siemens · Parasolid V38.0, Parasolid V38.1

Open
High 8.4
ICSMA-26-216-01 Medical

Thermo Fisher Applied Biosystems Genetic Analyzers

Thermo Fisher · Applied Biosystems 3500/3500xL Series Data Collection Software, Applied Biosystems 3730/3730xL Series Data Collection Software, Applied Biosystems SeqStudio Genetic Analyzer Data Collection Software, Applied Biosystems SeqStudio Flex Series Instrument Software, Applied Biosystems GeneMapper ID-X Software, Applied Biosystems 3130 Series Data Collection Software, ABI PRISM 3100/3100-Avant Data Collection Software, ABI PRISM 310 Data Collection Software

Open
High 7.8
ICSA-26-218-01 Advisory

ABB Ability Zenon

ABB · Ability Zenon, IIoT services with MongoDB

Open
High 7.1
ICSA-26-211-07 Advisory

Mitsubishi Electric CC-Link IE TSN Communication Protocol

Mitsubishi Electric · Mitsubishi Electric MELSEC MX Controller MX-R model MXR300-16, Mitsubishi Electric MELSEC MX Controller MX-R model MXR300-32, Mitsubishi Electric MELSEC MX Controller MX-R model MXR300-64, Mitsubishi Electric MELSEC MX Controller MX-R model MXR500-128, Mitsubishi Electric MELSEC MX Controller MX-R model MXR500-256, Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-8-N32, Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-8-P32, Mitsubishi Electric MELSEC MX Controller MX-F model MXF100-16-N32

Open
High 8.8
ICSA-26-204-03 Advisory

Weintek cMT3092X

Weintek · cMT3092X firmware, EasyWeb

Open
Medium 6.4
ICSA-26-209-07 Advisory

ABB KNX Update Tool

ABB · KNX Update Tool (ABB), KNX Update Tool (BJE)

Open
High 7.8
ICSA-26-211-04 Advisory

Schneider Electric IGSS

Schneider Electric · IGSS, IGSS Definition (Def.exe) module

Open
Critical 9.8
ICSA-26-209-04 Advisory

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

Siemens · SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0), SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0), SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0), SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0), SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)

Open
Critical 9.8
ICSA-26-209-01 Advisory

Siemens Desigo CC

Siemens · Desigo CC family V7, Desigo CC family V8, Desigo CC family V9

Open
Medium 6.7
ICSA-26-202-05 Advisory

Siemens IAM Client

Siemens · COMOS V10.4.5, COMOS V10.6, Designcenter NX, Simcenter 3D, Simcenter Femap V2506, Simcenter Femap V2512, Simcenter Nastran, Simcenter STAR-CCM+

Open
Critical 9.8
ICSA-26-202-06 Advisory

Siemens CADRA

Siemens · CADRA

Open
Critical 9.9
ICSA-26-190-01 Advisory

OpenPLC v3

OpenPLC · OpenPLC

Open
High 7.2
ICSA-26-197-05 Advisory

Siemens SICAM 8

Siemens · CPCI85 Central Processing/Communication, SICORE Base system

Open
Critical 10.0
ICSA-26-183-03 Advisory

Gardyn IoT Hub

Gardyn · Home Firmware, Studio Firmware, Cloud API

Open
Medium 5.4
ICSA-26-188-04 Advisory

Siemens Mendix Studio Pro

Siemens · Mendix Studio Pro 10.11, Mendix Studio Pro 10.12, Mendix Studio Pro 10.13, Mendix Studio Pro 10.14, Mendix Studio Pro 10.15, Mendix Studio Pro 10.16, Mendix Studio Pro 10.17, Mendix Studio Pro 10.18

Open
High 8.2
ICSMA-26-176-02 Medical

OHIF Viewers DICOM

Open Health Imaging Foundation (OHIF) · OHIF DICOM Web Viewer Framework

Open
High 7.8
ICSA-26-195-02 Advisory

ABB Ability Edgenius

ABB · Gateway - bE100, Gateway - E3100C, Server - vE1000

Open
Critical 9.8
ICSA-26-169-01 Advisory

AVer PTC cameras

AVer · PTC500S, PTC115, PTC500+, PTC115+

Open
High 7.7
ICSA-26-162-03 Advisory

Brickcom Cameras

Brickcom · Brickcom Cube, Brickcom Dome, Brickcom Bullet, Brickcom Box

Open
Critical 9.8
ICSA-26-162-02 Advisory

Naxclow IoT Platform

Naxclow · Smart Doorbell X3, X Smart Home, V720, ix cam

Open
High 7.5
ICSA-26-181-04 Advisory

Schneider Electric EasyLogic T150 and Saitel DP RTU

Schneider Electric · EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller, EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller Firmware, Saitel DP Remote Terminal Unit & Controller, Saitel DP Remote Terminal Unit & Controller Firmware

Open
Medium 6.1
ICSA-26-174-02 Advisory

Siemens SIPROTEC 5 Using DIGSI5 Protocol

Siemens · SIPROTEC 5 6MD84 (CP300), SIPROTEC 5 6MD85 (CP200), SIPROTEC 5 6MD85 (CP300), SIPROTEC 5 6MD86 (CP200), SIPROTEC 5 6MD86 (CP300), SIPROTEC 5 6MD89 (CP300), SIPROTEC 5 6MU85 (CP300), SIPROTEC 5 7KE85 (CP200)

Open
Critical 9.8
ICSA-26-174-03 Advisory

Siemens Products using OpenSSL

Siemens · AI Lightweight Inference Server, Connector for Azure, Databus, HiMed Cockpit, RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE LPE9403 (6GK5998-3GS00-2AC2), SCALANCE LPE9413 (6GK5998-3GS01-2AC2)

Open

How to use this

For plant engineers, OT defenders, and integrators who need a fast answer to “is this my gear?”

  1. Search your vendor or product family.
  2. Start with Critical and High.
  3. Open the CISA page for affected versions and vendor fixes.
  4. Subscribe to RSS if you want updates in a reader or ticket queue.

This page gathers public CISA CSAF documents. It does not replace vendor bulletins or your change-control process. Always verify products and versions on the official advisory before patching or isolating systems.

Where the data comes from

Plain sourcing so you know what you’re looking at.