MicroServer CyberSecurity Firmware Update

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) Vulnerability Disclosure Program published an Industrial Control Systems (ICS) Advisory on January 6 documenting resolved vulnerabilities of the CWS MicroServer.

As part of our ongoing commitment to the reliability, accuracy, and security of our products, Columbia Weather Systems engaged a third-party cybersecurity audit in August 2025 to evaluate the security of the MicroServer. In October 2025, this review identified three vulnerabilities, which CWS disclosed to CISA.

Our development team acted quickly to address the findings. All identified issues were remediated and incorporated into MicroServer firmware version MS_4.1_14142. A follow-on assessment by the same third-party confirmed that the remediations were successful.

We recommend all customers with a MicroServer update to firmware version MS_4.1_14142. Please contact our support team.