ICS-CERT Publishes New 7T Advisory

NOTE: This would have been posted at about 7:00 am EDT yesterday but for the problems that Google had with their Blogspot.com system yesterday.

The DHS Industrial Control System Cyber Emergency Response Team (ICS-CERT) published a new advisory for the 7-Technologies IGSS SCADA HMI. It seems as if the identification of 7T in the vulnerability disclosure made earlier this year by Luigi targeted security researchers on this program. A similar problem appears to face other companies identified by the Italian researcher. Is anyone looking at other SCADA systems?

The newly identified vulnerability in IGSSdataServer service could allow a remote denial-of-service attack by a moderately skilled attacker using a publicly available exploit. 7T has an update available.