CISA Malcolm

CISA ICS published a security advisory titled “CISA Malcolm”.

At a glance

Publisher

CISA ICS

CVEs

See advisory

What the advisory says

View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3 8.8 CISA CISA Malcolm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Server-Side Request Forgery (SSRF), Authentication Bypass by Spoofing, Missing Authorization, Missing Authentication for Critical Function, Incorrect Authorization, Use of Default Credentials, Improper Certificate Validation, URL Redirection to Untrusted Site ('Open Redirect'), Dependency on Vulnerable Third-Party Component, Use of Password Hash With Insufficient Computational Effort Background Critical Infrastructure Sectors: Energy, Information Technology, Water and Wastewater Countries/Areas

What should you do?

• Read the full vendor advisory linked below and confirm whether you run affected versions.
• Schedule the recommended update, prioritising internet-facing systems.
• Watch for exploitation reports; unpatched edge devices are frequent targets.

What to do and how to stay safe: CISA ICS

• Patch scores alone ignore context like network exposure and asset criticality.
• You must map vulnerabilities to specific business risks to prioritize correctly.
• Continuous exposure data replaces static scanning for accurate prioritization.

Prioritize vulnerabilities by actual exploitability and business impact, not by theoretical severity scores. Update your asset context and exposure data continuously to maintain accurate risk rankings.

Step-by-step guide: Risk Based Vulnerability Management: Prioritize Fixes by Actual Threat

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.