New ICS Critical Vulnerabilities - 20251024002

Overview

CISA has released multiple critical advisories for Industrial Control Systems (ICS) related vendors.

What is vulnerable?

Critical Severity

Vendor	CVE #	CVSS	Severity
ASKI Energy	CVE-2025-9574	9.9	Critical
Veeder-Root	CVE-2025-58428	9.9	Critical

Recommendation

The WASOC recommends administrators review relevant advisories and apply the recommended actions to all affected devices.

• CISA: https://www.cisa.gov/news-events/alerts/2025/10/23/cisa-releases-eight-industrial-control-systems-advisories