Review – 2 Advisories Published – 7-31-25

Today CISA’s NCCIC-ICS published two control system security advisories for products from Rockwell Automation, and Güralp. I also include a look at the availability of advisories from Rockwell.

Advisories

Rockwell Advisory - This advisory discusses four vulnerabilities in the Rockwell Lifecycle Services with VMware. These are third-party (VMware) vulnerabilities.

Güralp Advisory - This advisory describes a missing authentication for critical function vulnerability in the Güralp FMUS Series Seismic Monitoring Devices.

 

For more information on these advisories, including a down-the-rabbit-hole look at the availability of Rockwell advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-7-31-25 - subscription required.