One Update Published – 02-21-19

NCCIC-ICS published an update of a control system security advisory for products from Wind River. The advisory was originally published on April 1^st, 2013. The updated information includes:

• Adds GE D20MX as an affected product;

• Changes characterization of CVE-2013-0715 from ‘Command Injection’ to ‘Improper Input Validation’; and

• Provides GE mitigation measures for vulnerabilities.

There must be an interesting story here, just do not know what it is.