Serial number:AV25-595
Date:September 16, 2025

On September 16, 2025, HPE published a security advisory to address vulnerabilities in the following product:

• HPE Telco Service Activator – 9.1 versions prior to 9.1.32

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HPESBNW04948 rev.1 - HPE Telco Service Activator, Multiple Vulnerabilities
• HPE Security Bulletin Library

Serial number:AV25-594
Date:September 16, 2025

On September 16, 2025, Mozilla published security advisories to address vulnerabilities in the following products:

• Focus for iOS – versions prior to 143.0
• Firefox – versions prior to 143
• Firefox ESR – versions prior to 115.28
• Firefox ESR – versions prior to 140.3
• Thunderbird – versions prior to 143
• Thunderbird – versions prior to 140.3

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Mozilla Security Advisories

Serial number:AV25-593

Date:September 15, 2025

On September 15, 2025, Apple published security updates to address vulnerabilities in the following products:

• iOS and iPadOS – versions prior to 26
• iOS and iPadOS – versions prior to 18.7
• iOS and iPadOS – versions prior to 16.7.12
• iOS and iPadOS – versions prior to 15.8.5
• macOS Tahoe – versions prior to 26
• macOS Sequoia – versions prior to 15.7
• macOS Sonoma – versions prior to 14.8
• tvOS 26 – versions prior to 26
• watchOS – versions prior to 26
• visionOS – versions prior to 26

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Apple Security Updates

Serial number:AV25-592
Date:September 15, 2025

Between September 8 and 14, 2025, Red Hat published security advisories to address vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder – multiple versions and platforms
• Red Hat Enterprise Linux – multiple versions and platforms
• Red Hat Enterprise Linux Server – multiple versions and platforms
• Red Hat Enterprise Linux for Real Time – multiple versions and platforms

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Red Hat Security Advisories

Serial number:AV25-591
Date:September 15, 2025

Between September 8 and 14, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

• ABB ASPECT-Enterprise ASP-ENT-x – versions prior to 3.08.04-s01
• ABB MATRIX Series MAT-x – versions prior to 3.08.04-s01
• ABB NEXUS Series NEX-2x – versions prior to 3.08.04-s01
• ABB NEXUS Series NEXUS-3-x – versions prior to 3.08.04-s01
• Daikin Security Gateway – version App 100, Frm 214
• Rockwell Automation 1783-NATR – versions prior to 1.007
• Rockwell Automation Analytics LogixAI – versions 3.00 and 3.01
• Rockwell Automation CompactLogix 5480 – version 32-37.011 with Windows package (2.1.0) Win10 v1607
• Rockwell Automation ControlLogix 5580 – version 35.013
• Rockwell Automation FactoryTalk Activation Manager – version 5.00
• Rockwell Automation FactoryTalk Optix – versions 1.5.0 to 1.5.7
• Rockwell Automation Stratix IOS – versions 15.2(8)E5 and prior
• Rockwell Automation ThinManager – version 13.0 to 14.0
• Schneider Electric EcoStruxure Server/workstation – multiple versions and platforms
• Schneider Electric Modbus/TCP Ethernet Modicon M340 FactoryCast module – versions prior to SV6.80
• Schneider Electric Modbus/TCP Ethernet Modicon M340 module – all versions prior to SV3.60
• Schneider Electric Modicon M340 – all versions
• Siemens APOGEE PXC Series (BACnet), (P2 Ethernet) – all versions
• Siemens Industrial Edge Management OS (IEM-OS) – all versions
• Siemens RUGGEDCOM RST2428P (6GK6242-6PA00) – all versions
• Siemens SIMATIC PCS neo V4.1, neo V5.0 – all versions
• Siemens SIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0) – all versions
• Siemens SIMATIC Virtualization as a Service (SIVaaS) – all versions
• Siemens SIMOTION OA MIIF (6AU1820-3DA20-0AB0) – all versions
• Siemens SIMOTION OACAMGEN (6AU1820-3EA20-0AB0) – all versions
• Siemens SIMOTION OALECO (6AU1820-3HA20-0AB0) – all versions
• Siemens SIMOTION OAVIBX (6AU1820-3CA20-0AB0) – all versions
• Siemens SINAMICS G220 V6.4 – versions prior to V6.4 HF2
• Siemens SINAMICS S200 V6.4 – all versions
• Siemens SINAMICS S210 V6.4 – versions prior to V6.4 HF2
• Siemens TALON TC Series (BACnet) – all versions
• Siemens User Management Component (UMC) – versions prior to 2.15.1.3

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories

Serial number:AV25-590
Date:September 15, 2025

Between September 8 and 14, 2025, Dell published security advisories to address vulnerabilities in the following products:

• Dell Latitude 12 Rugged Extreme 7214 – versions prior to 1.52.0
• Dell Latitude 5420 Rugged – versions prior to 1.40.0
• Dell Latitude 5424 Rugged – versions prior to 1.40.0
• Dell Latitude 7212 Rugged Extreme Tablet – versions prior to 1.58.0
• Dell Latitude 7424 Rugged Extreme – versions prior to 1.40.0
• Dell PowerProtect Data Manager – versions prior to 19.21
• Dell PowerProtect Data Protection Hardware – versions prior to 2.7.9

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• DSA-2025-295: Security Update for Dell Client Platform for an AMI BIOS Vulnerability
• DSA-2025-326: Security Update for Dell PowerProtect Data Manager Multiple Security Vulnerabilities
• DSA-2025-300: Security Update for Dell PowerProtect DP Series Appliance (IDPA) Multiple Third-Party Component Vulnerabilities
• Dell Security advisories and notices