Rockwell Automation · GuardLogix 5580
Safety task tampering via CIP.
Mitigation: Firmware v34.014.
Tampil
43
Critical
18
CVE unik
29
Emergency
4
43 / 43
Schneider Electric · Modicon M340
DoS via crafted Modbus packet.
Mitigation: Firmware v3.40; segmentasi.
Honeywell · Experion PKS
Privilege escalation service account.
Mitigation: Hotfix portal HPS.
Siemens · SINAMICS S210
RCE pada drive web interface.
Mitigation: Update fw 6.4; disable web interface.
Schneider Electric · Modicon M580
Cleartext credential channel diagnostik.
Mitigation: Firmware SV4.20 + segmentasi.
ABB · RTU500 series
Auth bypass HTTP REST API.
Mitigation: Update 13.4 LTS.
Siemens · SIMATIC S7-1500
Authentication bypass web management.
Mitigation: Update firmware 3.1.5+, disable web management.
Rockwell Automation · ControlLogix 5580
Stack overflow EtherNet/IP parser.
Mitigation: Firmware v34.013+.
Honeywell · Safety Manager
Improper auth pada engineering interface SIS.
Mitigation: Firmware R163; segmentasi SIS.
ABB · AC500 V3
Buffer overflow web server onboard.
Mitigation: Disable web interface, update firmware.
Emerson · Ovation
Path traversal historian.
Mitigation: Hotfix Emerson.
Mitsubishi Electric · GOT2000
Stored XSS HMI web access.
Mitigation: Firmware 01.78.000+.
Multi · Internet-exposed PLC water
Aktivitas aktif CyberAv3ngers terhadap PLC Unitronics & Vision.
Mitigation: Putus exposure, ganti default password, MFA remote.
Multi · OT vendor remote tool
Penyalahgunaan tool remote support vendor di pabrik Jepang.
Mitigation: Audit vendor remote access, jump host wajib.
Multi · Energy sector OT
Aktivitas Sandworm meningkat menjelang exercise NATO.
Mitigation: Threat hunt LotL, MFA, monitor IEC-104.
Multi · Energy SCADA
Kampanye Sandworm baru menargetkan ICCP/IEC-104.
Mitigation: Monitor IEC-104, threat hunt Volt Typhoon/Sandworm TTP.
Mitsubishi Electric · MELSEC iQ-R
Auth bypass via SLMP.
Mitigation: Patch + filter SLMP.
Multi · Internet-exposed OT
Aktivitas aktif aktor pro-state terhadap PLC water terbuka di internet.
Mitigation: Putus exposure publik, ganti default password, MFA pada akses remote.
Siemens · SIPROTEC 5
Pre-auth RCE pada engineering web service relay proteksi.
Mitigation: Update V9.60; blokir port 443 dari corporate; segregasi process bus.
Emerson · DeltaV DCS
Hardcoded credentials service account.
Mitigation: Rotate via tool Emerson.
Siemens · SCALANCE X
Command injection CLI management.
Mitigation: Firmware v6.0+.
Siemens · SINAMICS S210
RCE pada drive web interface.
Mitigation: Update fw 6.4; disable web; segmentasi drive bus.
Schneider · Modicon M580 Safety
Tampering safety task via Modbus/UMAS tanpa otentikasi.
Mitigation: Firmware SV4.30; aktifkan Modbus UMAS auth; whitelist IP engineering.
Rockwell · CompactLogix 5380
Heap overflow di parser EtherNet/IP memungkinkan crash/PRC.
Mitigation: Firmware v33.013+; CIP firewall di boundary.
Multi · Edge VPN/Firewall
Joint advisory: aktor PRC mengeksploitasi appliance edge untuk persistence pre-positioning.
Mitigation: Patch segera; audit konfigurasi; threat hunt LotL.
Rockwell · GuardLogix 5580
Safety task tampering via CIP.
Mitigation: Firmware v34.014; CIP firewall rule; segmentasi safety.
Schneider Electric · EcoStruxure Control Expert
Local privilege escalation via DLL hijack.
Mitigation: Update v17.x.
Rockwell Automation · FactoryTalk View SE
RCE via project file parsing.
Mitigation: Patch BF28055.
Phoenix Contact · mGuard rs4000
Auth bypass admin web interface industrial firewall.
Mitigation: Firmware 10.5; nonaktifkan admin web dari WAN.
Rockwell · FactoryTalk Linx
Buffer overflow di CIP message handler.
Mitigation: Patch BF31044; segmentasi engineering.
Honeywell · ControlEdge PLC
DoS via crafted EtherNet/IP.
Mitigation: Firmware R151+.
Yokogawa · ProSafe-RS
Auth bypass engineering protocol pada SIS.
Mitigation: Upgrade R4.06; SIS air-gap; key-switch enforcement.
Honeywell · Safety Manager
Improper auth pada engineering interface SIS.
Mitigation: Firmware R163; segmentasi SIS dari BPCS.
Siemens · SIMATIC S7-1500
Auth bypass di web mgmt PLC; eksploitasi aktif diobservasi.
Mitigation: Update 3.1.5+; nonaktifkan web mgmt; isolasi cell.
Multi · IEC-104 RTU
Volt/Voltzite recon terhadap IEC-104 RTU US utility.
Mitigation: Threat hunt LotL; egress filter; isolasi process bus.
Fortinet · FortiGate Rugged
SSL VPN heap overflow di firewall ruggedized.
Mitigation: FortiOS 7.4.5+; matikan SSL VPN bila tidak perlu.
Multi · Auto Supplier IT
Ransomware DragonForce/Akira meningkat menyerang Tier-1/2 auto supplier.
Mitigation: MFA VPN; ESXi patch; backup tested.
OPC Foundation · UA .NET Standard
Cert validation bypass pada chain custom.
Mitigation: Upgrade 1.5.376+; aktifkan strict cert pinning.
Unitronics · Vision PLC
Default password Unitronics terus dieksploitasi aktor Iran-linked di water utility.
Mitigation: Ganti default password; hapus exposure internet; lapor CISA.
Multi · Healthcare IT
Qilin & RansomHub aktif menyerang lab & rumah sakit global.
Mitigation: Identity hardening; backup tested; tabletop IR.
Rockwell · Stratix 5800
Command injection di IOS-XE web UI switch industrial.
Mitigation: Upgrade IOS-XE 17.12.3; nonaktifkan HTTP server.
Siemens · RUGGEDCOM ROX II
Remote root via SNMPv3 di router substation.
Mitigation: Firmware 2.16; SNMPv3 hanya internal.
Multi · Internet-exposed HMI
Spike eksploitasi HMI water utility yang exposed ke internet.
Mitigation: Audit shodan; lepas dari internet; MFA remote access.
Sumber resmi yang diagregasi
CISA↗Schneider PSIRT↗Siemens ProductCERT↗Honeywell PSIRT↗ABB Cyber Security↗Mitsubishi PSIRT↗Emerson↗Yokogawa↗Rockwell↗CISA/FBI/NSA↗CISA/EPA↗CISA Emergency Directive↗CISA Joint Advisory↗CERT-EU↗CERT@VDE↗JPCERT/CC↗BSI Germany↗Fortinet PSIRT↗OPC Foundation↗WaterISAC↗E-ISAC↗Auto-ISAC↗H-ISAC↗Schneider Electric↗