CISA (US CERT) Reports 3 CISCO ICS Advisories

Earlier this week the US-CERT (CISA NCCIC not NCCIC-ICS) web site published a notice about a series of security notices published by CISCO. The notice included three advisories for the CISCO Industrial Network Director. I had expected to see an NCCIC-ICS advisory (advisories) addressing the three vulnerabilities reported by CISCO published on Thursday, but it obviously did not happen.

The vulnerabilities are self-reported. CISCO has new versions that mitigate the vulnerabilities. The three reported vulnerabilities are:

• Remote code execution;

• Cross-site scripting; and

• Cross-site request forgery