CISA has published a number of low complexity, high impact advisories for Industrial Control Links ScadaFlex II SCADA Controllers, JTEKT Screen Creator Advance 2, JTEKT Kostac PLC, Korenix Jetwave, Hitachi Energy MicroSCADA System Data Manager SDM600, mySCADA myPRO, and Rockwell Automation FactoryTalk Diagnostics (Update A).
Patches are available, except for the Industrial Control Links vulnerabilities which are end-of-life as they are closing their business. Mitigations are required.
Splice shields vulnerable OT equipment inside an encrypted overlay network.