Public ICS Disclosures – Week of 4-19-25

Part 1

This week we have 18 vendor disclosures from Bosch, Broadcom, CODESYS, Hitachi (3), HPE (6), Milestone, Mitsubishi, Philips (2), and SEL (2).

Bosch Advisory

Bosch published an advisory that describes 15 vulnerabilities in their ctrlX OS product. The vulnerabilities were reported by Andrea Palanca from Nozomi Networks. Bosch has new versions that mitigate …