FREE DIAGNOSTIC

Serial number:AV25-349
Date:June 16, 2025

On May 21, 2025, Grafana published a security advisory to address vulnerabilities in the following product:

• Grafana – versions prior to 11.2, 11.3, 11.4, 11.5, 11.6 and 12.0

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Grafana Security Advisory

Serial number:AV25-348
Date:June 16, 2025

Between June 9 and 15, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

• AVEVA PI Connector for CygNet – version 1.6.14 and prior
• AVEVA PI Data Archive – multiple versions
• AVEVA PI Server – multiple versions
• AVEVA PI Web API – versions 2023 SP1 and prior
• Hitachi Energy Relion 670 – version 2.2.0
• Hitachi Relion 650 – multiple versions
• Hitachi Relion 670 – multiple versions
• Hitachi SAM600-IO – multiple versions
• multiCAM Systems Pan-Tilt-Zoom Cameras – all versions
• PTZOptics – multiple versions and models
• Siemens Energy Services – all versions
• Siemens RUGGEDCOM APE1808 – all versions (with Palo Alto Networks Virtual NGFW with an enabled GlobalProtect gateway or portal)
• Siemens RUGGEDCOM RST2428P (6GK6242-6PA00) – versions prior to V3.1
• Siemens SCALANCE – multiple versions and models
• Siemens SIMATIC – multiple versions and models
• Siemens Tecnomatix Plant Simulation V2404 – versions prior to V2404.0013
• SinoTrack IOT PC Platform – all versions
• SMTAV Pan-Tilt-Zoom Cameras – all versions
• ValueHD Pan-Tilt-Zoom Cameras – all version

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories

Serial number:AV25-347
Date:June 16, 2025

Between June 9 and 15, 2025, Dell published security advisories to address a vulnerability in the following product:

• Dell iDRAC Tools – versions prior to 11.3.0.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Dell Security Advisories – DSA-2025-169
• Dell Security advisories and notices

Serial number:AV25-346
Date:June 16, 2025

Between June 9 and 15, 2025, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following product:

• API Connect – version V10.0.5.0 to V10.0.5.9
• API Connect – version V10.0.8.0 to V10.0.8.2-iFix1
• IBM DataPower Gateway 10.6CD – versions 10.6.1.0 to 10.6.3.0
• IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data – multiple versions
• IBM MQ Operator – multiple versions
• IBM Robotic Process Automation – version 21.0.0 to 21.0.7.20 and version 23.0.0 to 23.0.20.1
• IBM Robotic Process Automation for Cloud Pak – version 21.0.0 to 21.0.7.20 and version 23.0.0 to 23.0.20.1
• IBM Security QRadar EDR – version 3.12
• IBM supplied MQ Advanced container images – multiple versions
• PowerVC – version 2.2.0, 2.2.1, 2.2.1.1, 2.2.1.2 and 2.3.0

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• IBM Product Security Incident Response

Serial number:AV25-345
Date:June 16, 2025

Between June 9 and 15, 2025, Ubuntu published security notices to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 16.04 LTS
• Ubuntu 18.04 LTS
• Ubuntu 22.04 LTS

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Ubuntu Security Notices

Serial number:AV25-344
Date:June 16, 2025

Between June 9 and 15, 2025, Red Hat published security advisories to address vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder – multiple versions and platforms
• Red Hat Enterprise Linux – multiple versions and platforms
• Red Hat Enterprise Linux for Real Time – multiple versions and platforms
• Red Hat Enterprise Linux Server – multiple versions and platforms
• Red Hat Enterprise Linux Server for Power LE – multiple versions

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Red Hat Security Advisories