# MA-917.032023: MyCERT Advisory - Industrial Control Systems Advisories

**Date:** 29 Mar 2023  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-917.032023  
**Advisory ID:** MA-917.032023

---

**1.0 Introduction**
Recently, CISA released six Industrial Control Systems (ICS) advisories on March 16, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
**2.0 Affected Products**
- [Siemens SCALANCE, RUGGEDCOM Third-Party](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-01)
- [Siemens RUGGEDCOM CROSSBOW V5.3](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-02)
- [Siemens RUGGEDCOM CROSSBOW V5.2](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-03)
- [Siemens SCALANCE W1750D Devices](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-04)
- [Siemens Mendix SMAL Module](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-05)
- [Honeywell OneWireless Wireless Device Manager](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-06)
- [Rockwell Automation Modbus TCP AOI Server](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-07)
- [AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere (Update A)](https://www.cisa.gov/news-events/ics-advisories/icsa-22-342-02)
**4.0 Recommendations**
MyCERT encourages users and administrators to review the newly released ICS advisories for technical details and mitigations:
- ICSA-23-075-01 [Siemens SCALANCE, RUGGEDCOM Third-Party](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-01) - <https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-01>
- ICSA-23-075-02 [Siemens RUGGEDCOM CROSSBOW V5.3](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-02) - <https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-02>
- ICSA-23-075-03 [Siemens RUGGEDCOM CROSSBOW V5.2](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-03) - <https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-03>
- ICSA-23-075-04 [Siemens SCALANCE W1750D Devices](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-04) - <https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-04>
- ICSA-23-075-05 [Siemens Mendix SMAL Module](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-05) - <https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-05>
- ICSA-23-075-06 [Honeywell OneWireless Wireless Device Manager](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-06) - <https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-06>
- ICSA-23-075-07 [Rockwell Automation Modbus TCP AOI Server](https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-07) - <https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-07>
- ICSA-22-342-02 [AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere (Update A)](https://www.cisa.gov/news-events/ics-advisories/icsa-22-342-02) - <https://www.cisa.gov/news-events/ics-advisories/icsa-22-342-02>
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- <https://www.cisa.gov/news-events/alerts/2023/03/16/cisa-releases-eight-industrial-control-systems-advisories>