The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

JRViejo · Jul 12, 2024

Rockwell Automation ThinManager ThinServer Release Date: July 11, 2024 Alert Code: ICSA-24-193-18

Vulnerabilities: Improper Input Validation
Click to expand...

JRViejo · Jul 12, 2024

Rockwell Automation FactoryTalk System Services and Policy Manager Release Date: July 11, 2024 Alert Code: ICSA-24-193-19

Vulnerabilities: Improper Privilege Management
Click to expand...

JRViejo · Jul 12, 2024

HMS Industrial Networks Anybus-CompactCom 30 Release Date: July 11, 2024 Alert Code: ICSA-24-193-20

Vulnerability: Cross-site Scripting
Click to expand...

JRViejo · Jul 16, 2024

Rockwell Automation Pavilion 8 Release Date: July 16, 2024 Alert Code: ICSA-24-198-01

Vulnerability: Incorrect Permission Assignment for Critical Resource
Click to expand...

JRViejo · Jul 18, 2024

Mitsubishi Electric MELSOFT MaiLab Release Date: July 18, 2024 Alert Code: ICSA-24-200-01

Vulnerability: Improper Verification of Cryptographic Signature
Click to expand...

JRViejo · Jul 18, 2024

Subnet Solutions PowerSYSTEM Center Release Date: July 18, 2024 Alert Code: ICSA-24-200-02

Vulnerability: Prototype Pollution
Click to expand...

JRViejo · Jul 23, 2024

National Instruments IO Trace Release Date: July 23, 2024 Alert Code: ICSA-24-205-01

Vulnerability: Stack-Based Buffer Overflow
Click to expand...

JRViejo · Jul 23, 2024

Hitachi Energy AFS/AFR Series Products Release Date: July 23, 2024 Alert Code: ICSA-24-205-02

Vulnerabilities: Type Confusion, Use After Free, Double Free, Observable Discrepancy
Click to expand...

JRViejo · Jul 23, 2024

National Instruments LabVIEW Release Date: July 23, 2024 Alert Code: ICSA-24-205-03

Vulnerabilities: Out-of-Bounds Read, Improper Restriction of Operations within the Bounds of a Memory Buffer
Click to expand...

JRViejo · Jul 25, 2024

Positron Broadcast Signal Processor Release Date: July 25, 2024 Alert Code: ICSA-24-207-02

Vulnerability: Authentication Bypass Using an Alternate Path or Channel
Click to expand...

JRViejo · Jul 25, 2024

Siemens SICAM Products Release Date: July 25, 2024 Alert Code: ICSA-24-207-01

Vulnerabilities: Unverified Password Change, Missing Authentication for Critical Function
Click to expand...

ronjor · Aug 1, 2024

CISA Releases Nine Industrial Control Systems Advisories 01 Aug 2024
Release Date August 01, 2024

CISA released nine Industrial Control Systems (ICS) advisories on August 1, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
Click to expand...

ICSA-24-214-01 Johnson Controls exacqVision Client and exacqVision Server
ICSA-24-214-02 Johnson Controls exacqVision Server Web Service
ICSA-24-214-03 Johnson Controls exacqVision Web Service
ICSA-24-214-04 Johnson Controls exacqVision Web Service
ICSA-24-214-05 Johnson Controls exacqVision Web Service
ICSA-24-214-06 Johnson Controls exacqVision Web Service
ICSA-24-214-07 AVTECH IP Camera
ICSA-24-214-08 Vonets WiFi Bridges
ICSA-24-214-09 Rockwell Automation Logix Controllers
Click to expand...

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations.
Click to expand...

ronjor · Aug 6, 2024

Delta Electronics DIAScreen 06 Aug 2024

Release Date August 06, 2024
Vulnerability: Stack-based Buffer Overflow
Click to expand...

ronjor · Aug 8, 2024

Dorsett Controls InfoScan 08 Aug 2024

Release Date August 08, 2024
Vulnerabilities: Exposure of Sensitive Information To An Unauthorized Actor, Path Traversal
Click to expand...

ronjor · Aug 13, 2024

CISA Releases Ten Industrial Control Systems Advisories 13 Aug 2024

Release Date August 13, 2024
ICSA-24-226-01 AVEVA SuiteLink Server
ICSA-24-226-02 Rockwell Automation AADvance Standalone OPC-DA Server
ICSA-24-226-03 Rockwell Automation GuardLogix/ControlLogix 5580 Controller
ICSA-24-226-04 Rockwell Automation Pavilion8
ICSA-24-226-05 Rockwell Automation DataMosaix Private Cloud
Click to expand...

ICSA-24-226-06 Rockwell Automation FactoryTalk View Site Edition
ICSA-24-226-07 Rockwell Automation Micro850/870
ICSA-24-226-08 Ocean Data Systems Dream Report
ICSA-24-226-09 Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, Compact GuardLogix 5380
ICSA-24-226-10 Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, and Compact GuardLogix 5380
Click to expand...

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations.
Click to expand...

ronjor · Aug 15, 2024

CISA Releases Eleven Industrial Control Systems Advisories 15 Aug 2024

Release Date August 15, 2024
CISA released eleven Industrial Control Systems (ICS) advisories on August 15, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
Click to expand...

ICSA-24-228-01 Siemens SCALANCE M-800, RUGGEDCOM RM1224
ICSA-24-228-02 Siemens INTRALOG WMS
ICSA-24-228-03 Siemens Teamcenter Visualization and JT2Go
ICSA-24-228-04 Siemens SINEC Traffic Analyzer
ICSA-24-228-05 Siemens LOGO! V8.3 BM Devices
ICSA-24-228-06 Siemens SINEC NMS
ICSA-24-228-07 Siemens Location Intelligence
ICSA-24-228-08 Siemens COMOS
ICSA-24-228-09 Siemens NX
ICSA-24-228-10 AVEVA Historian Web Server
ICSA-24-228-11 PTC Kepware ThingWorx Kepware Server
Click to expand...

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations.
Click to expand...

ronjor · Aug 22, 2024

CISA Releases Five Industrial Control Systems Advisories 22 Aug 2024

Release Date August 22, 2024
CISA released five Industrial Control Systems (ICS) advisories on August 22, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
Click to expand...

ICSA-24-235-01 Rockwell Automation Emulate3D
ICSA-24-235-02 Rockwell Automation 5015 – AENFTXT
ICSA-24-235-03 MOBOTIX P3 and Mx6 Cameras
ICSA-24-235-04 Avtec Outpost 0810
ICSA-20-282-02 Mitsubishi Electric MELSEC iQ-R Series (Update D)
Click to expand...

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations.
Click to expand...

ronjor · Aug 29, 2024

Rockwell Automation ThinManager ThinServer 29 Aug 2024

Release Date August 29, 2024
Vulnerabilities: Improper Privilege Management, Incorrect Permission Assignment for Critical Resource, Improper Input Validation
Click to expand...

ronjor · Aug 29, 2024

Delta Electronics DTN Soft 29 Aug 2024

Release Date August 29, 2024
Vulnerability: Deserialization of Untrusted Data
Click to expand...

ronjor · Aug 29, 2024

Rockwell Automation FactoryTalk View Site Edition (Update A) 29 Aug 2024

Last Revised August 29, 2024
Vulnerability: Incorrect Permission Assignment for Critical Resource
Click to expand...

ronjor · Sep 3, 2024

CISA Releases One Industrial Control Systems Advisory 03 Sep 2024

Release Date September 03, 2024
CISA released one Industrial Control Systems (ICS) advisory on September 3, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
Click to expand...

ICSA-24-247-01 LOYTEC Electronics LINX Series
Click to expand...

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.
Click to expand...

ronjor · Sep 5, 2024

ICS Medical Advisory 05 Sep 2024
Baxter Connex Health Portal

Release Date September 05, 2024
Vulnerabilities: SQL Injection, Improper Access Control
Click to expand...

ronjor · Sep 5, 2024

Hughes Network Systems WL3000 Fusion Software 05 Sep 2024

Release Date September 05, 2024
Vulnerabilities: Insufficiently Protected Credentials, Missing Encryption of Sensitive Data
Click to expand...

ronjor · Sep 5, 2024

Mitsubishi Electric MELSEC iQ-R, Q and L Series (Update E) 05 Sep 2024

Last Revised September 05, 2024
Vulnerability: Uncontrolled Resource Consumption
Click to expand...

ronjor · Sep 5, 2024

Mitsubishi Electric MELSEC iQ-R, iQ-L Series and MELIPC Series (Update E) 05 Sep 2024

Last Revised September 05, 2024
Vulnerability: Improper Resource Shutdown or Release
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

JRViejo Super Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches