Sunway Force Control Alert

This morning the DHS Industrial Control System Cyber Emergency Response Team (ICS-CERT) published an alert for multiple vulnerabilities in Sunway Force Control Version 6.1. They note that there is exploit code publicly available for these vulnerabilities. According to the alert the vulnerabilities include:

• Stack overflows;

• Directory traversal and arbitrary file reading; and

• Various denials of service vulnerabilities

ICS-CERT is coordinating with the Chinese based Sunway and will provide additional information when it becomes available.