CISA Releases Security Advisories Related to OT:ICEFALL (Insecure by Design) Report

ronjor · Jun 22, 2022 at 3:28 PM

Original release date: June 22, 2022

CISA is aware that Forescout researchers have released OT:ICEFALL, a report on 56 vulnerabilities caused by insecure-by-design practices in operational technology across multiple vendors. The vulnerabilities are divided into four main categories: insecure engineering protocols, weak cryptography or broken authentication schemes, insecure firmware updates and remote code execution via native functionality.
Click to expand...

CISA has released five corresponding Industrial Controls Systems Advisories (ICSAs) currently to provide notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks.
Click to expand...

CISA encourages users and administrators to review the OT:ICEFALL report as well as the following ICSAs for technical details and mitigations.
Click to expand...

ICSA-22-172-02 : JTEKT TOYOPUC
ICSA-22-172-03 : Phoenix Contact Classic Line Controllers
ICSA-22-172-04 : Phoenix Contact ProConOS and MULTIPROG
ICSA-22-172-05 : Phoenix Contact Classic Line Industrial Controllers
ICSA-22-172-06 : Siemens WinCC OA

Log in or Sign up

CISA Releases Security Advisories Related to OT:ICEFALL (Insecure by Design) Report

ronjor Global Moderator