The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Aug 23, 2022

Delta Industrial Automation DIALink 23 Aug 2022

This advisory contains mitigations for an Use of Hard-coded Cryptographic Key vulnerability in various versions of the DIALink Industrial Automation server.
Click to expand...

ronjor · Aug 23, 2022

myScada Pro 23 Aug 2022

This advisory contains mitigations for a Command Injection vulnerability in various versions of myPRO HMI and SCADA systems.
Click to expand...

ronjor · Aug 23, 2022

Measuresoft ScadaPro Server 23 Aug 2022

This advisory contains mitigations for an Out-of-bounds Write vulnerability in Measuresoft ScadaPro Server, a supervisory control and data acquisition (SCADA) system.
Click to expand...

ronjor · Aug 23, 2022

Measuresoft ScadaPro Server and Client 23 Aug 2022

This advisory contains mitigations for Untrusted Pointer Dereference, Stack-based Buffer Overflow, Use After Free, and Link Following vulnerabilities in Measuresoft ScadaPro Server and Client, a supervisory control and data acquisition (SCADA) system.
Click to expand...

ronjor · Aug 23, 2022

Hitachi Energy RTU500 23 Aug 2022

This advisory contains mitigations for a Stack-based Buffer Overflow vulnerability in versions of Hitatchi Energy RTU500 firmware.
Click to expand...

ronjor · Aug 23, 2022

Illumina Local Run Manager (Update A) 23 Aug 2022

This updated advisory is a follow-up to the original advisory titled ICSA-22-153-02 Illumina Local Run Manager that was published June 22, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Path Traversal, Unrestricted Upload of File with Dangerous Type, Improper Access Control, and Cleartext Transmission of Sensitive Information vulnerabilities in Illumina devices using Local Run Manager software.
Click to expand...

ronjor · Aug 25, 2022

FATEK Automation FvDesigner

This advisory contains mitigations for an Out-of-bounds Write vulnerability in various versions of the FvDesigner software tool.
Click to expand...

ronjor · Aug 25, 2022

CISA Adds Ten Known Exploited Vulnerabilities to Catalog

Original release date: August 25, 2022
CISA has added ten new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column, which will sort by descending dates.     
Click to expand...

ronjor · Aug 30, 2022

Hitachi Energy FACTS Control Platform (FCP) Product 30 Aug 2022

This advisory contains mitigations for Inconsistent Interpretation of HTTP Requests, Use After Free, Classic Buffer Overflow, Integer Underflow, Improper Certificate Validation, Observable Discrepancy vulnerabilities in Hitachi Energy FACTS Control Platform (FCP).
Click to expand...

ronjor · Aug 30, 2022

Hitachi Energy GWS 30 Aug 2022

This advisory contains mitigations for HTTP Requests, Use After Free, Classic Buffer Overflow, Integer Underflow, Improper Certificate Validation, Observable Discrepancy.
Vulnerabilities in various versions of Hitachi Energy Gateway Station (GWS).
Click to expand...

ronjor · Aug 30, 2022

Hitachi Energy MSM 30 Aug 2022

This advisory contains mitigations for a Reliance on Uncontrolled Component vulnerability in Hitachi Energy MSM Product.
Click to expand...

ronjor · Aug 30, 2022

Hitachi Energy RTU500 series 30 Aug 2022

This advisory contains mitigations for an Improper Input Validation vulnerability in the Hitachi Energy RTU500 series.
Click to expand...

ronjor · Aug 30, 2022

Fuji Electric D300win 30 Aug 2022

This advisory contains mitigations for Out-of-bounds Read and Write-what-where Condition vulnerabilities in various versions of Fuji Electric D300win
Click to expand...

ronjor · Aug 30, 2022

Honeywell ControlEdge 30 Aug 2022

This advisory contains mitigations for a Missing Authentication for Critical Function vulnerability in versions of Honeywell ControlEdge.
Click to expand...

ronjor · Aug 30, 2022

Honeywell Experion LX 30 Aug 2022

This advisory contains mitigations for a Missing Authentication for Critical Function vulnerability in versions of the Honeywell equipment, Experion LX, distributed control system (DCS).
Click to expand...

ronjor · Aug 30, 2022

Honeywell Trend Controls 30 Aug 2022

This advisory contains mitigations for a Cleartext Transmission of Sensitive Information vulnerability in versions of the Honeywell products, Trend Controls IQ Series IC, an industrial communication controller.
Click to expand...

ronjor · Aug 30, 2022

Omron CX-Programmer 30 Aug 2022

This advisory contains mitigations for a Use After Free vulnerability in versions of the Omron product, Omron CX-Programmer, part of a software automation suite.
Click to expand...

ronjor · Aug 30, 2022

PTC Kepware KEPServerEX 30 Aug 2022

This advisory contains mitigations for Heap-Based Buffer Overflow and Stack-Based Buffer Overflow vulnerabilities in versions of the PTC product, Kepware KEPServerEX, a connectivity platform.
Click to expand...

ronjor · Aug 30, 2022

Sensormatic Electronics iSTAR 30 Aug 2022

This advisory contains mitigations for a Command Injection vulnerability in versions of the Sensormatic Electronics product, Sensormatic iSTAR Ultra, a network-ready door controller.
Click to expand...

ronjor · Aug 30, 2022

Mitsubishi Electric Multiple Factory Automation Products (Update B) 30 Aug 2022

This updated advisory is a follow-up to the advisory update titled ICSA-22-221-01 Mitsubishi Electric Multiple Factory Automation Products (Update A) that was published August 18, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Infinite Loop and OS Command Injection vulnerabilities in Mitsubishi Electric GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, and MELSEC iQ-R Series OPC UA Server Module
Click to expand...

ronjor · Sep 1, 2022

Contec CMS8000 01 Sep 2022

This advisory contains mitigations for Improper Access Control, Uncontrolled Resource Consumption, Use of Hard-Coded Credentials, Active Debug Code vulnerabilities in Contec Health CMS8000, a ICU CCU Vital Signs Patient Monitor.
Click to expand...

ronjor · Sep 1, 2022

Delta Electronics DOPSoft 01 Sep 2022

This advisory contains mitigations for an Out-of-bounds Read vulnerability in versions of Delta Electronics DOPSoft, a software supporting the DOP-100 series HMI screens.
Click to expand...

ronjor · Sep 6, 2022

Triangle Microworks Libraries

Original release date: September 06, 2022
Vulnerability: Access of Uninitialized Pointer
Click to expand...

ronjor · Sep 6, 2022

AVEVA Edge 2020 R2 SP1 and all prior versions

Original release date: September 06, 2022
Vulnerabilities: Insufficient UI Warning of Dangerous Operations, Uncontrolled Search Path Element, Deserialization of Untrusted Data, Improper Restriction of XML External Entity Reference
Click to expand...

ronjor · Sep 6, 2022

Cognex 3D-A1000 Dimensioning System

Original release date: September 06, 2022
Vulnerabilities: Missing Authentication for Critical Function, Improper Output Neutralization for Logs, Client-side Enforcement of Server-side Security
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches