Today CISA’s NCCIC-ICS published two control system security advisories for products from Eufy and Botslab. They also updated advisories for products from Wärtsilä and Siemens.
Advisories
Eufy Advisory - This advisory describes three vulnerabilities in the Eufy Omni C20 and Omni X10 Pro robot vacuums. The vulnerabilities were reported to CISA by Jared of Somerset Recon.
Botslab Advisory - This advisory describes 14 vulnerabilities in the Botslab G980H Dashcams. The vulnerabilities were reported to CISA by Julian of Software Secured. CISA notes that: “Botslab has not responded to requests to work with CISA to mitigate this vulnerability.”
Updates
Wärtsilä Update
This update provides additional information on the FOS-Onboard advisory that was originally published on September 15th, 2026. The new information includes fixed version information.
Siemens Update This update provides additional information on the Mendix Runtime advisory that was originally published on July 28th, 2026. The advisory is revoked.
NOTE: CISA does not typically publish updates for Siemens advisories.
For more information on these advisories, as well as a DTRH look at a disappearing vulnerability, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-2-update-published - subscription required.
Posts
