1 Update Published – 5-20-21

Today CISA’s NCCIC-ICS published an update for a control system security advisory for products from multiple RTOS vendors.

 

Multiple RTOS Update

 

This update provides new information for an advisory that was originally published on April 29^th, 2021 and most recently updated on May 6^th, 2021. The new information includes:

• Removing Micrium uCOS II/uCOS III from the list of affected products,

• Adding Micrium uC/OS: uC/LIB to the list of affected products,

• Removed CVE-2021-27407 from the list of vulnerabilities (it has also apparently been removed from the National Vulnerability Database),

• Removing update information for Micrium uCOS II/uCOS III, and

• Adding update information for Micrium uC/LIB

NOTE: The advisory mistakenly refers back to the original version (4-29-21), not the last update.