Decision Insights Threat Desk

Ashlar-Vellum advises updates for vulnerabilities in several products affecting versions 12.6.1204.207 and earlier.

CISA issued seven advisories on vulnerabilities in ICS products from Ashlar-Vellum, Rockwell Automation, Zenitel, Opto 22, Festo, SiRcom, and Mitsubishi Electric.

Opto 22's groov View software and firmware versions prior to R4.5e and 4.0.3 respectively have a vulnerability exposing sensitive metadata such as API keys. The company has released patches and CISA advises network isolation and VPN use to mitigate potential exploitation risks.

Festo's Compact Vision System and related products have vulnerabilities that allow unauthorized access and configuration modification.

CISA issued six advisories for Industrial Control Systems covering vulnerabilities in products from Schneider Electric, Shelly, and METZ CONNECT.

CISA issued seven advisories covering vulnerabilities in Ashlar-Vellum, Rockwell Automation, Zenitel, and other ICS products.