Review - Public ICS Disclosures – Week of 6-6-26 – Part 3

For Part 3 we have three additional vendor disclosures from Genetec (2) and VMware. There are bulk vendor updates from HP (5) and Siemens (10). There are four additional vendor updates from ABB, FortiGuard, Mitsubishi, and Moxa. We also have three researcher reports for vulnerabilities in products from Trane, Vertiv, and Splunk. Finally, we have four exploits for products from Palo Alto Networks (2), FortiGuard, and WatchGuard. 

Advisories  

Genetec Advisory #1 - Genetec published an advisory that describes an incorrect permission assignment for critical resource vulnerability in Genetec product installations deploying RabbitMQ. 

Genetec Advisory #2 - Genetec published an advisory that describes an insertion of sensitive information into a log file vulnerability in their Security Center main server installations. 

VMware Advisory - Broadcom published an advisory that describes three cross-site scripting vulnerabilities in the VMware Cloud Foundation Operations product. 

Bulk Vendor Updates  

HP (5) 

Siemens (10) 

Updates  

ABB Update - ABB published an update for their Freelance Security Lock advisory that was originally published on November 9th, 2025. 

FortiGuard Update - FortiGuard published an update for their Sensitive 2FA Information advisory that was originally published on October 14th, 2025. 

Mitsubishi Update - Mitsubishi published an update for their Realtek Chips advisory that was originally published on March 24th, 2026. 

Moxa Update - Moxa published an update for their Diffie-Hellman Key Exchange Protocol advisory that was originally published on June 2nd, 2025. 

Researcher Reports  

Trane Report - Claroty published a report that describes five vulnerabilities in the Trane Tracer SC+ HVAC controller. 

Vertiv Report - Claroty published a report that describes two vulnerabilities in the Vertiv’s Liebert IS-UNITY-DP network cards. 

Splunk Report - WatchTowr published a report that describes a missing authentication for critical function vulnerability in the PostgreSQL Sidecar Service Endpoint in Splunk Enterprise. 

Exploits  

Palo Alto Networks Exploit #1 - Indoushka published a Metasploit module for a reliance on cookies without validation and integrity checking vulnerability in the PAN GlobalProtect product. 

Palo Alto Networks Exploit #2 - Gray Xploit published an exploit for a reliance on cookies without validation and integrity checking vulnerability in the PAN GlobalProtect product. 

FortiGuard Exploit - Indoushka published a Metasploit module for an OS command injection vulnerability in the FortiGuard FortiSandbox product. 

WatchGuard Exploit - Cody Sixteen published an exploit for a logic error vulnerability in the WatchGuard Firebox product. 

For additional information on these disclosures, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-6-81a - subscription required. 

Review – 11 Advisories and 2 Updates Published – 5-20-25

Today CISA’s NCCIC-ICS published 11 control system security advisories for products from Assured Telematics, Vertiv, AutomationDirect, Schneider (3), Siemens, Mitsubishi, Danfoss, NI, ABUP. They also updated two advisories for products from Schneider.

Advisories

Assured Telematics Advisory - This advisory describes an exposure of sensitive information to an unauthorized control sphere vulnerability in the Assured Telematics Fleet Management System.

Vertiv Advisory - This advisory describes two vulnerabilities in the Vertiv Liebert RDU101 and Liebert UNITY communications cards.

Automation Direct Advisory - This advisory describes a missing authentication for critical function vulnerability in the AutomationDirect MB-Gateway.

Schneider Advisory #1 - This advisory describes an externally controlled reference to a resource in another sphere vulnerability in the Schneider Modicon Controllers M241/M251/M258/LMC058.

Schneider Advisory #2 - This advisory discusses a missing authentication for critical function vulnerability in the Schneider Galaxy VS, VL, and VXL products.

Schneider Advisory #3 - This advisory discusses a classic buffer overflow vulnerability in the Schneider PrismaSeT Active wireless panel server.

Siemens Advisory - This advisory discusses a missing encryption of sensitive data vulnerability in the Siemens Siveillance Video product.

Mitsubishi Advisory - This advisory describes an execution with unnecessary privileged vulnerability in the Mitsubishi MC Works64 AlarmWorX Multimedia and the Iconics GENESIS64 AlarmWorX Multimedia products.

Danfoss Advisory - This advisory describes an improper authentication vulnerability in the Danfoss K-SM 800A system manager.

NI Advisory - This advisory describes five vulnerabilities in the National Instruments Circuit Design Suite.

ABUB Advisory - This advisory describes an incorrect privilege assignment vulnerability in the ABUB IoT Cloud Platform.

UPDATES

Schneider Update #1 - This update provides additional information on the Schneider EcoStruxure Power Monitoring Expert advisory that was originally published on February 6^th, 2025, and most recently updated on March 27^th, 2025.

Schneider Update #2 - This update provides additional information on the Schneider EcoStruxure Power Build Rapsody advisory that was originally published on January 23, 2025.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/11-advisories-and-2-updates-published - subscription required.