ICS Cyber Risks: Top Vendors At Risk – CISA Report

This weekly ICS Vulnerability Intelligence Report summarizes seven CISA advisories from Feb 19–25, 2025 that identify multiple critical vulnerabilities across industrial control system vendors—especially ABB (five critical flaws affecting FLXEON, ASPECT-Enterprise, NEXUS, and MATRIX Series). Vulnerabilities include hard-coded credentials, command injection, missing WebSocket origin validation and path traversal, with PoC exploits available; the report highlights impacts to Critical Manufacturing, Transport, Energy, and Healthcare sectors and recommends patching, risk-based vulnerability management, zero-trust, continuous monitoring, and network segmentation.