Public ICS Disclosures – Week of 10-18-25

This week we have bulk vendor disclosures from Moxa (6). There are eight additional vendor disclosures from ABB, Belden, HP (3), Pilz, Sauter, and Zyxel. We also have three vendor updates from ABB (2) and HP.

Bulk Advisories – Moxa

• CVE-2025-1679, CVE-2025-1680: Stored Cross-site Scripting (XSS) and Host Header Injection Vulnerabilities in Ethernet Switch,

• Security Enhancement: Modbus/TCP Discrete Input Access,

• Security Enhancement: Modbus/TCP Device Identification,

• Security Enhancement: SNMP Agent Default Community Name (public),

• Security Enhancement: SSH Weak MAC Algorithms Enabled, and

• Security Enhancement: SSH Weak Key Exchange Algorithms Enabled.

ABB Advisory

ABB published an advisory that describes a heap-based buffer overflow vulnerability in their Terra AC wallbox. The vulnerability was reported by Itai Shmueli from Saiflow. ABB has new versions that mitigate the vulnerability.

Belden Advisory

Belden published an advisory that discusses the Blast-RADIUS vulnerability. Belden reports that multiple Hirschmann products and their macmon-NAC are affected. Belden has a new version for one of the affected products and mitigation measures for the remaining products.

HP Advisories

HP published an advisory that discusses an out-of-bounds read vulnerability in multiple notebook and desktop PCs. This is a third-party (AMD) vulnerability. HP has SoftPaqs that mitigate the vulnerability.

HP published an advisory that discusses two vulnerabilities in multiple notebook and desktop PCs. This is a third-party (AMD) vulnerability. HP has SoftPaqs that mitigate the vulnerability.

The two reported vulnerabilities are:

• Incorrect default permissions - CVE-2023-31360, and

• Uncontrolled search path element - CVE-2023-31361

HP published an advisory that discusses an out-of-bounds write vulnerability in multiple notebook PCs. This is a third-party (Insyde) vulnerability. HP has SoftPaqs that mitigate the vulnerability.

Pilz Advisory

CERT-VDE published an advisory that discusses an integer overflow or wraparound vulnerability in the Pilz PASvisu Runtime product. This is a third-party (Mongoose) vulnerability with a publicly available exploit. Pilz has new firmware versions that mitigate the vulnerability.

Sauter Advisory

CERT-VDE published an advisory that describes six vulnerabilities in the Sauter modulo 6 devices. The vulnerabilities were reported by Damian Pfammatter, Daniel Hulliger Cyber-Defence Campus. Sauter has a new firmware version that mitigates the vulnerabilities.

The six reported vulnerabilities are:

• Path traversal - CVE-2025-41723,

• Improper validation of syntactic correctness of input - CVE-2025-41719,

• Failure to handle incomplete element - CVE-2025-41724,

• Use of hardcoded credentials - CVE-2025-41722,

• Reliance on file name or extension of externally-supplied file - CVE-2025-41720, and

• Command injection - CVE-2025-41721

Zyxel Advisory

Zyxel published an advisory that describes two vulnerabilities in their ZLD firewalls. The vulnerabilities were reported by Alessandro Sgreccia from HackerHood. Zyxel has new versions that mitigate the vulnerabilities.

The two reported vulnerabilities are:

• OS command injection - CVE-2025-8078, and

• Missing authorization - CVE-2025-9133

ABB Updates

ABB published an update that provides additional information on their ALS-mini-S4/S8 IP advisory that was originally published on October 20^th, 2025. The new information includes updating the CVSS 3.1 data.

ABB published an update that provides additional information on their CoreSense advisory that was originally published on April 16^th, 2025, and most recently updated on October 10^th, 2025. The new information includes correcting dates – final version.

HP Update

HP published an update that provides additional information on their AMD Transient Scheduler advisory that was originally published on July 10^th, 2025, and most recently updated on August 15^th, 2025. The new information includes updating products, version, and SoftPaq information for Consumer Notebooks and Consumer Desktops.