CISA Flags Critical Siemens SiPass ICS Flaws

CISA released five new ICS advisories describing high-severity vulnerabilities across critical infrastructure and medical devices—notably Siemens SiPass (CVE-2022-31807), SiPass Integrated (CVE-2022-31812), Consilium CS5000 fire panels, Instantel Micromate (CVE-2025-1907), and Sante DICOM Viewer Pro (CVE-2025-5307)—with multiple CVSS v4 scores in the high/critical range; the report summarizes impacts, affected versions, mitigation steps (patches, TLS, segmentation, access restrictions) and vendor responses, but does not report active exploitation.