CISA Releases Eleven Industrial Control Systems Advisories

CISA released eleven Industrial Control Systems (ICS) advisories on September 11, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-25-254-01 Siemens SIMOTION Tools
• ICSA-25-254-02 Siemens SIMATIC Virtualization as a Service (SIVaaS)
• ICSA-25-254-03 Siemens SINAMICS Drives
• ICSA-25-254-04 Siemens SINEC OS
• ICSA-25-254-05 Siemens Apogee PXC and Talon TC Devices
• ICSA-25-254-06 Siemens Industrial Edge Management OS (IEM-OS)
• ICSA-25-254-07 Siemens User Management Component (UMC)
• ICSA-25-254-08 Schneider Electric EcoStruxure
• ICSA-25-254-09 Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110
• ICSA-25-254-10 Daikin Security Gateway
• ICSA-25-035-06 Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update A)

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.