CISA Releases Fourteen Industrial Control Systems Advisories

CISA released fourteen Industrial Control Systems (ICS) advisories on September 9, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

• ICSA-25-252-01 Rockwell Automation ThinManager
• ICSA-25-252-02 ABB Cylon Aspect BMS/BAS
• ICSA-25-252-03 Rockwell Automation Stratix IOS
• ICSA-25-252-04 Rockwell Automation FactoryTalk Optix
• ICSA-25-252-05 Rockwell Automation FactoryTalk Activation Manager
• ICSA-25-252-06 Rockwell Automation CompactLogix® 5480
• ICSA-25-252-07 Rockwell Automation ControlLogix 5580
• ICSA-25-252-08 Rockwell Automation Analytics LogixAI
• ICSA-25-252-09 Rockwell Automation 1783-NATR
• ICSA-24-296-01 Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update A)
• ICSA-25-058-01 Schneider Electric Communication Modules for Modicon M580 and Quantum controllers (Update B)
• ICSA-25-219-07 EG4 Electronics EG4 Inverters (Update B)
• ICSA-25-233-01 Mitsubishi Electric Corporation MELSEC iQ-F Series CPU Module (Update A)
• ICSA-25-226-31 Rockwell Automation 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT (Update A)

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.