CISA Issues New ICS Advisories on Critical Vulnerabilities and Exploits

According to CISA, three Industrial Control Systems advisories were issued on 26 August 2025 detailing nine critical vulnerabilities in INVT VT-Designer and HMITool. The weaknesses could enable remote code execution or unauthorized access, with CVSS v4 scores up to 8.5 reported for several flaws.

The advisories also cover flaws in Schneider Electric Modicon M340 controllers and related modules, with CVSS v3.1 scores up to 8.6 and CVSS v4 up to 9.1, and in Danfoss AK-SM 8xxA Series drives, where CVSS scores reach 7.9. The INVT vulnerabilities comprise nine memory-corruption and type-confusion flaws across VT-Designer 2.1.13 and HMITool 7.1.011, potentially exploitable after user interaction for high-privilege code execution.

Mitigations urged include network segmentation, firewall isolation, VPN hardening, strict access controls, and applying vendor patches; firmware updates are also advised for affected devices, with specific update details noted. Vendors have released patches, and CISA emphasises isolating ICS networks and monitoring for exploit attempts as key preventive steps.