Over 400 ICS Vulnerabilities Disclosed in 2019: Report

guest · Feb 20, 2020

Over 400 ICS Vulnerabilities Disclosed in 2019: Report
February 20, 2020
https://www.securityweek.com/over-400-ics-vulnerabilities-disclosed-2019-report

Dragos analyzed 438 ICS vulnerabilities covered in 212 security advisories, roughly the same as in the previous year. Of the 116 unique types of flaws, the most common were improper input validation, stack-based buffer overflow, cross-site scripting (XSS), the use of hardcoded credentials, and uncontrolled resource consumption (i.e. DoS) issues.

According to Dragos, 77% of the advisories published last year covered vulnerabilities in systems typically located deep within a control system network. This includes engineering workstations, HMIs, operator panels, industrial network equipment, and field devices.
Nearly three quarters of the advisories described vulnerabilities that could be exploited from the network, while the rest required local or physical access to the targeted machine.

The company has also looked for errors in advisories and found that 30% of them contained incorrect data, which is roughly the same as in 2018. However, in 2019, only 19% of individual vulnerability descriptions contained errors, compared to 32% in 2018.
Click to expand...

Dragos: 2019 ICS Year in Review

Log in or Sign up

Over 400 ICS Vulnerabilities Disclosed in 2019: Report

guest Guest

Log in or Sign up

Over 400 ICS Vulnerabilities Disclosed in 2019: Report

guest Guest

Useful Searches