Serial number:AV25-502
Date:August 12, 2025

Between August 12, 2025, Siemens published advisories to address vulnerabilities in multiple products.

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

• Siemens Security Advisories

Serial number:AV25-501
Date:August 12, 2025

Le 12 août 2025, Schneider Electric a publié des bulletins de sécurité visant à corriger des vulnérabilités liées aux produits suivants :

• BMXNGD0100: M580 Global Data module – all versions
• BMXNOC0401: Modicon M340 X80 Ethernet Communication modules – all versions
• BMXNOE0100: Modbus/TCP Ethernet Modicon M340 module – multiple versions and models
• BMXNOR0200H: Ethernet / Serial RTU Module – all versions
• EcoStruxure Building Operation Enterprise Server and Central – versions prior to 7.0.1
• EcoStruxure Enterprise Server – versions prior to 7.0.1
• EcoStruxure Power Monitoring Expert (PME) – versions 2022, 2023, 2024 and 2024 R2
• EcoStruxure Power Operation (EPO) Advanced Reporting and Dashboards Module – versions 2022 w/ Advanced Reporting Module and 2024 w/ Advanced Reporting Module
• EcoStruxure Workstation – versions prior to 7.0.1
• Modicon Controller – multiple versions and models
• Modicon M580 communication modules – multiple versions and models
• SESU – versions prior to v3.0.12
• Saitel DR RTU – version 11.06.29 and prior, version 11.06.34 and prior

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Schneider Electric Security Notifications

Serial number:AV25-500
Date:August 12, 2025

On August 12, 2025, SAP published security advisories to address vulnerabilities in multiple products. Included were updates for the following:

• SAP S/4HANA (Private Cloud or On-Premise) – versions S4CORE 102, 103, 104, 105, 106, 107 and 108
• SAP Landscape Transformation (Analysis Platform) – versions DMIS 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731 and 2011_1_752, 2020
• SAP Business One (SLD) – versions B1_ON_HANA 10.0 and SAP-M-BO 10.0
• SAP S/4HANA (Bank Communication Management) – versions SAP_APPL 606, SAP_FIN 617, 618, 720, 730, S4CORE 102, 103, 104, 105, 106, 107 and 108
• SAP NetWeaver Application Server for ABAP – multiple versions and platforms
• SAP NetWeaver ABAP Platform – versions S4CRM 100, 200, 204, 205, 206, S4CEXT 107, 108, 109, BBPCRM 713 and 714
• SAP NetWeaver Enterprise Portal (OBN component) – version EP-RUNTIME 7.50
• ABAP Platform – versions SAP_BASIS 758, SAP_BASIS 816 and SAP_BASIS 916
• SAP GUI for Windows – version BC-FES-GUI 8.00
• SAP S/4HANA (Supplier invoice) – versions S4CORE 102, 103, 104, 105, 106, 107, 108 and 109
• SAP NetWeaver – versions SAP_ABA 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H and 75I
• SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Manager) – versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 9.14, 9.15 and 9.16
• SAP Cloud Connector – version SAP_CLOUD_CONNECTOR 2.0
• SAP Fiori (Launchpad) – version SAP_UI 754

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

• SAP Security Patch Day – August 2025

Serial number:AV25-499
Date:August 11, 2025

On July 30, 2025, WinRAR published a security update to address a vulnerability in the following product:

• WinRAR – versions prior to 7.13

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• WinRAR 7.13 Final released

Serial number:AV25-498
Date:August 11, 2025

On August 11, 2025, ABB published a security advisory to address vulnerabilities in the following products:

• ASPECT-Enterprise – firmware versions prior to 3.08.04-s01
• NEXUS Series – firmware versions prior to 3.08.04-s01
• MATRIX Series – firmware versions prior to 3.08.04-s01

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• ELSB/BLBA ASPECT advisory several CVEs (CSAF)
• ABB Cyber security alerts and notifications

Serial number:AV25–497
Date:August 11, 2025

Between August 4 and 10, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

• Burk Technology ARC Solo – versions prior to v1.0.62
• Delta Electronics DIAView – versions 4.2.0.0
• Dreame Technology Dreamehome Android app – versions 2.1.8.8 and prior
• Dreame Technology Dreamehome iOS app – versions 2.3.4 and prior
• Dreame Technology MOVAhome iOS app – versions 1.2.3 and prior
• EG4 Electronics EG4 Inverters – multiple models and versions
• Johnson Controls FX80, FX90 – versions FX 14.10.10 and FX 14.14.1
• Mitsubishi Electric GENESIS – version 11.00
• Mitsubishi Electric GENESIS64 – all versions
• Mitsubishi Electric MC Works64 – all versions
• Packet Power EG and EMX – versions prior to 4.1.0
• Rockwell Automation Arena – version 16.20.09 and prior
• Tigo Energy Cloud Connect Advanced – version 4.0.1 and prior
• Yealink IP Phonesv – multiple versions and models
• Yealink RPS (Redirect and Provisioning Service) – all builds prior to 05-26-2025

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories