LiveThreat Vulnerability Brief — CISA KEV Catalog Additions (Apple, Rockwell, Hikvision)
What It Is — The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six high‑severity flaws affecting Apple, Rockwell Automation, and Hikvision to its Known Exploited Vulnerabilities (KEV) catalog, confirming that these weaknesses are being actively leveraged by threat actors. Exploitability — Four of the CVEs carry CVSS scores ≥ 8.8, with public exploit kits (e.g., the Coruna/CryptoWaters kit) targeting Apple iOS devices and documented credential‑bypass attacks against Rockwell controllers and Hikvision cameras.
Affected Products — Apple macOS Ventura 13.5, iOS 16.6, iPadOS 16.6, Safari 16.6 (WebKit use‑after‑free, CVE‑2023‑43000); Apple iOS 13‑17.2.1 (Coruna exploit chain, CVE‑2021‑30952, CVE‑2023‑41974); Rockwell Automation Studio 5000 Logix Designer & RSLogix 5000 (CVE‑2021‑22681); Hikvision IP‑camera firmware series (CVE‑2017‑7921).
TPRM Impact — Enterprises that source Apple endpoints, industrial control software, or Hikvision surveillance equipment face supply‑chain exposure: potential data exfiltration, unauthorized control of production lines, and regulatory fallout from compromised video feeds.
Recommended Actions —
- Verify that all Apple devices are patched to macOS 13.5, iOS 16.6/iPadOS 16.6 or later; enforce automatic updates.
- Inventory Rockwell Automation tools; apply the latest Studio 5000 patches and enforce network segmentation for PLC traffic.
- Audit Hikvision camera firmware versions; upgrade to the vendor‑released patches and disable default credentials.
- Review third‑party risk registers for any reliance on the affected products; flag for elevated monitoring and incident‑response readiness.
- Incorporate the KEV entries into vulnerability‑scanning policies and threat‑intel feeds.
Source: Security Affairs