IDIS ICM Viewer

Summary

Vulnerabilities 1

• High 8.8
  CVE-2025-12556

  IDIS ICM Viewer Argument Injection

  An argument injection vulnerability exists in the affected product that could allow an attacker to execute arbitrary code within the context of the host machine.

  IDIS ICM Viewer
  Nov 6, 2025

Revision history

1. 2025-11-04 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-308-05 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-05
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
• Recommended Practices
  https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b
• Recommended Practices
  https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
• Recommended Practices
  https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks