Vulnerabilitycritical
CISA Issues Advisories on Critical ICS Vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2019-9256+3 related CVEs | In libmediaextractor there: This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for… | 8.8 group max | <1% | ||
| CVE-2024-22774 | An issue in Panoramic Corporation Digital Imaging Software v.9.1.2.7600 allows a local attacker to escalate privileges via the ccsservice.exe component | 7.8 | <1% | ||
| CVE-2025-1484 | A vulnerability exists in the media upload component of the Asset Suite versions listed below | 6.3 | <1% | ||
| CVE-2025-2500 | A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below | 9.1 | <1% |
From the original article
2 min read at infosecurity-magazine.com
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a number of advisories related to vulnerabilities in products related to Industrial Control Systems (ICS). The ICS vulnerabilities span several vendors including Johnson Controls Inc, ABB, Hitachi Energy and Schneider Electric. The sectors affected include commercial facilities, energy, transportation systems and manufacturing.
By Beth Maundrill · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.