Decision Insights Threat Desk

A vulnerability affecting Festo's MSE6-C2M/D2M/E2M product family has been identified, involving hidden functions in undocumented test mode exploitable remotely by authenticated, low-privilege attackers. Mitigation includes updated documentation and network defense measures, with no public exploitation reported.

A stack-based buffer overflow in Emerson's Appleton UPSMON-PRO allows remote code execution via UDP port 2601 in versions 2.6 and earlier.

Vulnerabilities in iCam365 P201 and QC021 cameras allow unauthorized access to video streams and settings due to missing authentication.

CISA issued six advisories detailing vulnerabilities in Industrial Control Systems products and urges review of mitigation details.

Automated Logic's WebCTRL Premium Server vulnerabilities allow redirection and script attacks; fixed in version 9.0 with mitigation advice.

CISA issued guidance for Emergency Directive 25-03 on Cisco ASA and Firepower vulnerabilities CVE-2025-20333 and CVE-2025-20362.