Map

Serial number:AV25-765
Date:November 17, 2025

On November 17, 2025, Siemens published advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Mendix RichText – versions prior to V4.6.1
• PS/IGES Parasolid Translator Component – versions prior to V29.0.258

The Cyber Centre encourages users and administrators to review the web links provided, perform the suggested mitigations and apply the necessary updates.

• SSA-190588: Cross-Site Scripting Vulnerability in Mendix Rich Text Widget
• SSA-241605: Out of Bounds Read in PS/IGES Parasolid Translator Component Before V29.0.258
• Siemens Security Advisories

Serial number:AV25-764
Date:November 17, 2025

Between November 10 and 16, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

• AVEVA Application Server IDE – version 2023 R2SP1 PO2 and prior
• AVEVA Edge – version 2023 R2 and prior
• Brightpick Mission Control / Internal Logic Control – All versions
• Festo Hardware Controller – multiple models and firmware versions
• General Industrial Controls Lynx+ Gateway – versions R08, V03, V05 and V18
• Mitsubishi MELSEC iQ-F Series – multiple models and versions
• Rockwell Automation AADvance-Trusted SIS Workstation – versions 2.00.00 to 2.00.04
• Rockwell Automation FactoryTalk DataMosaix Private Cloud – versions 7.11, 8.00 and
• 8.01
• Rockwell Automation FactoryTalk Policy Manager – version 6.51.00 and prior
• Rockwell Automation Studio 5000 Simulation Interface – version 2.02 and prior
• Rockwell Automation Verve Asset Manager – multiple versions
• Siemens Altair Grid Engine – versions prior to V2026.0.0
• Siemens COMOS with COMOS Web deployed – versions prior to 10.4.5
• Siemens COMOS using COMOS Snapshots component – versions prior to 10.4.5
• Siemens LOGO! 8 BM Devices – multiple models and all versions
• Siemens SICAM P850 family and SICAM P855 family – multiple models and versions
• prior to 3.11
• Siemens Software Center – versions prior to 3.5
• Siemens Solid Edge SE2025 – versions prior to V225.0 Update 11
• Siemens Spectrum Power 4 – versions prior to V4.70 SP12 Update 2
• Ubia Ubox – version v1.1.124

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories

Serial number:AV25-763
Date:November 17, 2025

Between November 10 and 16, 2025, Red Hat published security advisories to address vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder – multiple versions and platforms
• Red Hat Enterprise Linux – multiple versions and platforms
• Red Hat Enterprise Linux Server – multiple versions and platforms
• Red Hat Enterprise Linux for Real Time – multiple versions and platforms

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Red Hat Security Advisories

Serial number:AV25-762
Date:November 17, 2025

Between November 10 and 16, 2025, Ubuntu published security notices to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 16.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• USN-7865-1: Linux kernel (FIPS) vulnerabilities
• USN-7862-2: Linux kernel vulnerability
• USN-7861-3: Linux kernel vulnerabilities
• Ubuntu Security Notices

Serial number:AV25-761
Date:November 17, 2025

Between November 10 and 16, 2025, Dell published security advisories to address vulnerabilities in the following products:

• Dell AMD-based PowerEdge Server – multiple versions
• Dell Alienware X16 R2 – versions prior to 32.0.100.4239
• Dell Data Lakehouse – versions prior to 1.6.0.0
• Dell Inspiron 14 Plus 7440 – versions prior to 32.0.100.4239
• Dell Inspiron 16 7640 2-in-1 – versions prior to 32.0.100.4239
• Dell Inspiron 16 Plus 7640 – versions prior to 32.0.100.4239
• Dell Intel E810 Adapters and Intel E823 LOM – versions prior to 24.0.0
• Dell NetWorker – versions prior to 19.12.0.3
• Dell Networking OS10 – versions prior to 10.6.1.0
• Dell PowerFlex Appliance – versions prior to IC 48.378.00 and IC 48.383.00
• Dell PowerFlex Software – versions prior to 4.8.0
• Dell PowerFlex rack – versions prior to 3.7.7.0 and 3.8.2.0
• Dell PowerScale OneFS – multiple versions
• Dell Pro Max Slim FCS1250 – versions prior to 32.0.100.4239
• Dell Pro Slim Plus QBS1250/Dell Pro Slim QCS1250 – versions prior to 32.0.100.4239
• Dell Slim ECS1250 – versions prior to 32.0.100.4239

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Dell Security advisories and notices

Serial number:AV25-760
Date:November 17, 2025

Between November 10 and 16, 2025, IBM published security advisories to address vulnerabilities in multiple products.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• IBM Product Security Incident Response