Public ICS Disclosures – Week of 01-12-19

This week we have a vendor notification for products from Eaton and a broad research report on vulnerabilities in radio frequency (RF) controllers from TrendMicro.

Eaton Advisory

Eaton published an advisory describing a path traversal vulnerability in their Intelligent Power Manager (IPM) product. This vulnerability is apparently being self-reported. Eaton has new version of the firmware that mitigates the vulnerability.

RF Controller Vulnerabilities

TrendMicro has published a report on vulnerabilities in RF controller systems. Their work on this topic specifically on industrial cranes was highlighted in a Forbes.com article and a presentation at S4x19 this week in Miami.