CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – May 2, 2024

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Three Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

• CyberPower PowerPanel
• Delta Electronics DIAEnergie – Used in the Energy Sector
• Chirp Systems Chirp Access (Update C)

Alerts, Updates, and Bulletins:

• CISA and Partners Release Fact Sheet on Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity
• CISA Adds One Known Exploited Vulnerability to Catalog
• April 30 - CISA Adds One Known Exploited Vulnerability to Catalog  
• CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate Directory Traversal Vulnerabilities
• CERT/CC Reports R Programming Language Vulnerability