ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
CISA ICS Advisories for 1 - 5 December 2025
2
CISA ICS AdvisoryRelease DateCISA ICS Advisory TitleVendorProductCVECVSS ScoreCVSS SeverityCritical Infrastructure SectorLink
3
ICSA-25-338-0112/4/2025Mitsubishi Electric GX Works2Mitsubishi ElectricGX Works2CVE-2025-37846.8MediumCritical Manufacturinghttps://www.cisa.gov/news-events/ics-advisories/icsa-25-338-01
4
ICSA-25-338-0212/4/2025MAXHUB PivotMAXHUBMAXHUB PivotCVE-2025-537048.7HighInformation Technologyhttps://www.cisa.gov/news-events/ics-advisories/icsa-25-338-02
5
ICSA-25-338-0312/4/2025Johnson Controls OpenBlue Mobile Web Application for OpenBlue WorkplaceJohnson Controls Inc.OpenBlue Mobile Web Application for OpenBlue WorkplaceCVE-2025-263816.5MediumCommercial Facilities; Critical Manufacturing; Energy; Government Services and Facilities; Transportation Systemshttps://www.cisa.gov/news-events/ics-advisories/icsa-25-338-03
6
ICSA-25-338-0412/4/2025Johnson Controls iSTARJohnson Controls Inc.iSTAR eX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra, iSTAR Ultra SECVE-2025-617367.1HighCommercial Facilities; Critical Manufacturing; Energy; Government Facilities; Transportation Systemshttps://www.cisa.gov/news-events/ics-advisories/icsa-25-338-04
7
ICSA-25-338-0512/4/2025Sunbird DCIM dcTrack and Power IQSunbirdDCIM dcTrack, Power IQCVE-2025-66237, CVE-2025-662388.4HighInformation Technology; Critical Manufacturinghttps://www.cisa.gov/news-events/ics-advisories/icsa-25-338-05
8
ICSA-25-338-0612/4/2025SolisCloud Monitoring PlatformSolisCloudMonitoring Platform (Cloud API and Device Control API)CVE-2025-139328.3HighEnergyhttps://www.cisa.gov/news-events/ics-advisories/icsa-25-338-06
9
ICSA-25-338-0712/4/2025Advantech iViewAdvantechiViewCVE-2025-133738.7HighCritical Manufacturing; Information Technologyhttps://www.cisa.gov/news-events/ics-advisories/icsa-25-338-07
10
ICSA-25-336-0112/2/2025Industrial Video & Control LongwatchIndustrial Video and ControlLongwatchCVE-2025-136589.3CriticalEnergy; Water and Wastewater Systemshttps://www.cisa.gov/news-events/ics-advisories/icsa-25-336-01
11
ICSA-25-336-0212/2/2025Iskra iHUB and iHUB LiteIskraiHUB and iHUB LiteCVE-2025-135109.3CriticalEnergyhttps://www.cisa.gov/news-events/ics-advisories/icsa-25-336-02
12
ICSMA-25-336-0112/2/2025Mirion Medical EC2 Software NMIS BioDoseMirion MedicalEC2 Software NMIS BioDoseCVE-2025-61940, CVE-2025-62575, CVE-2025-64298, CVE-2025-64642, CVE-2025-647788.7HighHealthcare and Public Health
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-336-01
13
Updated CISA ICS AdvisoryRelease DateUpdated CISA ICS Advisory TitleVendorProductCVECVSS ScoreCVSS SeverityCritical Infrastructure SectorLink
14
ICSA-25-201-017/24/2025Mitsubishi Electric CNC Series (Update A)Mitsubishi ElectricCNC SeriesCVE-2016-25427HighCritical Manufacturinghttps://www.cisa.gov/news-events/ics-advisories/icsa-25-205-01
15
ICSA-25-219-028/7/2025Johnson Controls FX Server, FX80 and FX90 (Update A)Johnson Controls Inc.FX Server, FX80 and FX90CVE-2025-438678.4HighCritical Manufacturing; Commercial Facilities; Government Facilities; Transportation Systems; Energyhttps://www.cisa.gov/news-events/ics-advisories/icsa-25-219-02
16
ICSA-25-148-035/29/2025Consilium Safety CS5000 Fire Panel (Update A)Consilium SafetyCS5000 Fire PanelCVE-2025-41438, CVE-2025-463528.6HighCommercial Facilities; Energy; Government Facilities; Healthcare and Public Health; Transportation Systemshttps://www.cisa.gov/news-events/ics-advisories/icsa-25-148-03
17
ICSA-23-157-026/6/2023Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series (Update C)Mitsubishi ElectricMELSEC iQ-R Series/iQ-F Series EtherNet/IP Modules and EtherNet/IP Configuration toolCVE-2023-2060, CVE-2023-2061, CVE-2023-2062, CVE-2023-20638.7HighCritical Manufacturinghttps://www.cisa.gov/news-events/ics-advisories/icsa-23-157-02
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100