Review – 7 Advisories and 3 Updates Published – 10-21-25

Today CISA’s NCCIC-ICS published six control system and one medical device security advisory for products from Raisecomm, CloudEdge, Siemens (2), Rockwell (2), and Oxford Nanopore Technologies. They also published three control systems security updates for products from Schneider.

Advisories

Raisecomm Advisory - This advisory describes an authentication bypass using alternate path or channel vulnerability in the Raisecomm RAX701-GC products.

CloudEdge Advisory - This advisory describes an improper neutralization of wildcards or matching symbols vulnerability in the CloudEdge App and CloudEdge Online Cameras.

Siemens Advisory #1 - This advisory describes four vulnerabilities in the Siemens Ruggedcom product line.

Siemens Advisory #2 - This advisory describes two vulnerabilities in the Siemens SIMATIC S7-1200 CPU V1 and SIMATIC S7-1200 CPU V2 families.

Rockwell Advisory #1 - This advisory describes an uncaught exception vulnerability in the Rockwell Compact GuardLogix 5370.

NOTE: I briefly discussed this vulnerability on Sunday.

Rockwell Advisory #2 - This advisory describes two vulnerabilities in the Rockwell 1783-NATR product.

Oxford Advisory - This advisory describes three vulnerabilities in the Oxford MinKNOW DNA and RNA sequencing device.

Updates 

Schneider Update #1 - This update provides additional information on the Modicon Controllers advisory that was originally published on May 20^th, 2025, and most recently updated on July 15^th, 2025.

NOTE: I briefly discussed this vulnerability on Sunday.

Schneider Update #2 - This update provides additional information on the Modicon Controllers advisory that was originally published on December 19^th, 2024.

NOTE: I briefly discussed this vulnerability on Sunday.

Schneider Update #3 - This update provides additional information on the Pro-face GP advisory that was originally published on February 4^th, 2025.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/7-advisories-and-3-updates-published-27b - subscription required.

Review - FERC Publishes Regulation Sunset Rules 10-21-25

Today the Federal Energy Regulatory Commission (FERC) published two rulemakings in the Federal Register, both relating to the sunset date requirements of EO 14270, Zero-Based Regulatory Budgeting to Unleash American Energy. The first rulemaking (90 FR 48397-48408) is a direct final rule (DFR); it would add a sunset date of December 5^th, 2026 to each of several sections of 18 CFR Parts 2, 5, 36, 131, 153, 156, 157, 203,  206, 287, 300, 366, 375, and 385. Absent any ‘significant adverse comment’ submitted in response to this DFR, this rule goes into effect on December 5^th, 2025.

The second rulemaking (90 FR 48419-48421) is a notice of proposed rulemaking (NPRM) on the same topic. Effectively, it only comes into play if there are any significant adverse comments filed on the DFR above. According to the NPRM preamble:

“This NOPR ensures that the Commission has a proceeding through which it can consider any significant adverse comments that might be filed in response to the direct final rule and determine whether to proceed with finalizing specific sunsetting regulations.”

Public Comments

FERC is soliciting comments on the DFR (which may transfer to the NPRM if FERC declares any of the comments to be significant adverse comments). Comments may be submitted via electronic comments via https://ferconline.ferc.gov/QuickComment.aspx. Comments should be submitted by November 20^th, 2025.

 

For more information on the provisions of these two rulemakings, including commentary on missed deregulatory credit, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/ferc-publishes-regulation-sunset - subscription required.

Short Takes – 10-20-25

Meet the man building a starter kit for civilization. TechnologyReview.com article. Pull quote: “The final goal of Open Source Ecology is a “zero marginal cost” society, where producing an additional unit of a good or service costs little to nothing. Jakubowski’s interpretation of the concept (popularized by the American economist and social theorist Jeremy Rifkin) assumes that by eradicating licensing fees, decentralizing manufacturing, and fostering collaboration through education, we can develop truly equitable technology that allows us to be self-sufficient. Open-source hardware isn’t just about helping farmers build their own tractors; in Jakubowski’s view, it’s a complete reorientation of our relationship to technology.”

Cybersecurity Awareness Month: Stop the Spread: Diagnosing and Defeating Tool Sprawl in Cybersecurity. GuidePointSecurity.com blog post. Pull quote: “If you are unable to get an organizational view of your true risk, you’re flying blind. Disconnected tools make it harder to measure effectiveness, detect threats quickly, or make informed security decisions.” A short, advertorial for their  whitepaper.

Something from “space” may have just struck a United Airlines flight over Utah. ArsTechnica.com article. Pull quote: “That [human space debris] was the initial conclusion of the pilot, but a meteor is more likely than space debris. Estimates vary, but a recent study in the journal Geology found that about 17,000 meteorites strike Earth in a given year. That is at least an order of magnitude greater than the amount of human-made space debris that survives reentry through Earth’s atmosphere.”

EO 14356 - Ensuring Continued Accountability in Federal Hiring – Federal Register

Review – Committee Hearings – Week of 10-19-25

This week, with the Senate in Washington and the House sitting quietly on the sidelines, there is a relatively lite hearing schedule. There is one markup hearing of note and a chemical safety hearing.

Markup Hearings

On Tuesday, the Senate Commerce, Science, and Technology Committee will hold a business meeting that will consider three nominations and eight pieces of legislation, with one of particular interest here: S 2975, the PIPELINE Safety Act of 2025.

Chemical Safety

On Thursday, the Subcommittee on EPW Chemical Safety, Waste Management, Environmental Justice, and Regulatory Oversight of the Senate Environment and Public Works Committee will hold a hearing on “Examining the Beneficial Use and Regulation of Chemicals”.

 

For more information on these hearings, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/committee-hearings-week-of-10-19 - subscription required.

Review – Public ICS Disclosures – Week of 10-11-25 – Part 2

For Part 2 we have 11 additional vendor disclosures from Phoenix Contact (2), Rockwell Automation (2), Schneider, Sick (2), Supermicro, and Westermo (3). We have 20 bulk updates from Schneider (5), and Siemens (15). We have three additional vendor updates from B&R Automation, CODESYS, and HP. Finally, we have four researcher reports describing vulnerabilities in products from Red Lion and Ilevia (3).

Advisories

Phoenix Contact Advisory #1 - Phoenix Contact published an advisory that describes four vulnerabilities in their QUINT4-UPS EIP uninterruptible power supplies.

Phoenix Contact Advisory #2 - Phoenix Contact published an advisory that describes a code injection vulnerability in their CHARX SEC-3xxx charging controllers.

Rockwell Advisory #1 - Rockwell published an advisory that describes an uncaught exception vulnerability in their Compact GuardLogix 5370 product. Rockwell

Rockwell Advisory #2 - Rockwell published an advisory that describes two vulnerabilities in their 1715 EtherNet/IP Comms Module.

Schneider Advisory - Schneider published an advisory that describes an allocation of resources without limits or throttling vulnerability in their EcoStruxure OPC UA Server Expert and EcoStruxure Modicon Communication Server products.

Sick Advisory #1 - Sick published an advisory that describes 18 vulnerabilities in their Enterprise Analytics and Logistic Analytics products.

Sick Advisory #2 - Sick published an advisory that discusses 28 vulnerabilities in their Endress+Hauser SSG-E210GC. These are third-party vulnerabilities.

Supermicro Advisory - Supermicro published an advisory that discusses an improper access control vulnerability.

Westermo Advisory #1 - Westermo published an advisory that describes a cleartext transmission of sensitive information vulnerability in their RADIUS Server Groups.

Westermo Advisory #2 - Westermo published an advisory that describes a cleartext transmission of sensitive information in their WeOS 5.

Westermo Advisory #3 - Westermo published an advisory that describes an improper restriction of communications channel to expected endpoints vulnerability in their WeOS 5.

Bulk Updates

Schneider

• Multiple Altivar Process Drives and Communication Modules,

• Modicon Controllers M241 / M251, M258 / LMC058 and M262,

• Modicon M241 / M251 / M258 / LMC058,

• FlexNet Publisher Vulnerability, and

• Modicon Controllers M241 / M251 / M258 / LMC058

Siemens

• Vulnerability in Nozomi Guardian/CMC on RUGGEDCOM APE1808 Devices,

• Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs,

• Multiple Vulnerabilities in User Management Component (UMC),

• Deserialization Vulnerability in Siemens Engineering Platforms,

• Denial of Service Vulnerabilities in User Management Component (UMC),

• Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices,

• Deserialization Vulnerability in Siemens Engineering Platforms,

• Buffer Overflow Vulnerability in RUGGEDCOM ROS Devices,

• Improper Integrity Check of Firmware Updates in SiPass integrated AC5102 / ACC-G2 and ACC-AP,

• DLL Hijacking Vulnerability in Siemens Web Installer used by the Online Software Delivery,

• Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1,

• XML External Entity (XXE) Injection Vulnerability in SIMOTION SCOUT,

• Multiple Vulnerabilities in RUGGEDCOM ROS Devices,

• Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs, and

• Heap-based Buffer Overflow Vulnerability in User Management Component (UMC).

Updates

B&R Update - B&R published an update for their System Diagnostic Manager advisory that was originally published on October 7^th, 2025.

CODESYS Update - CODESYS published an update for their Control V3 advisory that was originally published on August 4^th, 2025, and most recently updated on September 1^st, 2025.

HP Update - HP published an update for their Intel 2024.3 IPU advisory that was originally published on October 24^th, 2024, and most recently updated on March 31^st, 2025.

Researcher Reports

Red Lion Report - Claroty published a report describing two vulnerabilities in the Red Lion Sixnet RTU’s.

Ilevia Reports - Zero Science published four reports describing vulnerabilities in the Ilevia EVE X1 Server. The reports include links to exploits.

 

For more information on these disclosures, including links to 3^rd party advisories and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-10-568 - subscription required.

Review - Bills Introduced – 10-17-25

Yesterday with the House meeting in pro forma session and the Senate home for the weekend, there were 41 bills introduced. One of those bills will receive additional coverage in this blog:

HR 5770 To establish biotechnology workforce training programs for Department of Defense personnel, and for other purposes. Houlahan, Chrissy [Rep.-D-PA-6]

 

For more information on these bills, including legislative history for similar bills in the 118^th Congress, including a mention in passing of a resolution honoring the WHMU, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/bills-introduced-10-17-25 - subscription required.

Review – Public ICS Disclosures – Week of 10-11-25 – Part 1

This week is a relatively light disclosure week for cyber week. For Part 1 we have 35 bulk disclosures from Broadcom (8), Dassault Systems (5), FortiGuard (17), and HPE (5).  We have additional 10 vendor disclosures from Bosch (2), Delta Electronics, Eaton, HP (3), Moxa, Murrelektronik, and Philips.

Bulk Disclosures

Broadcom Advisories

• Brocade ASCG Vulnerability Disclosures,

• jwt-go allows excessive memory allocation during header parsing,

• Rocky Linux Updates in ASCG 3.3.0a (OVA),

• eventlet before 0.35.2 as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution,

• Libexpat: expat: improper restriction of xml entity expansion depth in libexpat,

• A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing,

• Certifi Vulnerable to Insufficient Verification of Data Authenticity via GlobalTrust Root Certificate, and

• Kernel OVA security updates in ASCG 3.3.0a

Dassault Advisories

• Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer,

• OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform,

• Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer,

• Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator, and

• Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager

FortiGuard Advisories

• Authenticated Heap Overflow in SSL-VPN bookmarks,

• Domain fronting protection bypass in explicit web proxy,

• FGFM protocol allows unauthenticated reset of the connection,

• Heap Overflow in fgfmsd,  

• Heap buffer overflow in websocket,  

• Improper autorization over static files,  

• Insertion of Sensitive 2FA Information in logs and debug command,

• Insertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon,  

• Insufficient Session Expiration in SSLVPN using SAML authentication,  

• Missing authentication check in OFTP service,  

• Multiple Unchecked Return Value leading to Null Pointer Dereference,  

• Open Redirect and XSS in Web Filter warning page,  

• Race condion in FortiCloud SSO SAML authentication,

• Restricted CLI command bypass,

• Stack-based buffer overflow on fortitoken import feature,

• Weak authentication in WAD/GUI, and

• ZTNA Server Improper Certificate Validation  

HPE Advisories

• HPESBNW04958 rev.1 - HPE Aruba Networking AOS-8 Instant AP and AOS-10 AP, Multiple Vulnerabilities,

• HPESBNW04957 rev.1 - HPE Aruba Networking AOS-10 and AOS-8 Mobility Conductor, Controllers, and Gateways, Multiple Vulnerabilities,

• HPESBHF04956 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-3020: SEV-SNP RMP Initialization Vulnerability, Local Unauthorized Access Vulnerability,

• HPESBHF04952 rev.1 - HPE ProLiant RL300 Gen11 Server, Out-of-Bound Reads Vulnerability, and

• HPESBHF04954 rev.1 - HPE Compute Scale-up Server 3200 Platform and Superdome Flex 280 servers, Security Bypass Vulnerability 

Advisories

Bosch Advisory #1 - Bosch published an advisory that describes three vulnerabilities in their ctrlX OS Setup application.

Bosch Advisory #2 - Bosch published an advisory that discusses an allocation of resources without limits or throttling vulnerability in their Rexroth Fieldbus Couplers.

Delta Advisory - Delta published an advisory that describes two stack-based buffer overflow vulnerabilities in their ASDA-Soft product.

Eaton Advisory - Eaton published an advisory that describes an uncontrolled search path vulnerability in their Intelligent Power Protector (IPP) software.

HP Advisory #1 - HP published an advisory that discusses three vulnerabilities in multiple HP product lines.

HP Advisory #2 - HP published an advisory that discusses two incorrect privilege assignment vulnerabilities in multiple product lines using Sound Research SECOMN64 driver.

HP Advisory #3 - HP published an advisory that discusses an improper access control for register interface vulnerability in multiple HP product lines.

Moxa Advisory - Moxa published an advisory that describes five vulnerabilities in their Network Security Appliances and Routers.

Murrelektronik Advisory - CERT-VDE published an advisory that describes a clear-text transmission of sensitive information vulnerability in the Murrelektronik IMPACT67 Pro products.

Philips Advisory - Philips published an advisory that discusses CISA Emergency Directive 26-01.

 

 

For more information on these disclosures, including links to 3^rd party advisories, researcher reports, and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-10-74f - subscription required.