Review – 2 Advisories Published – 3-24-22

Today, CISA’s NCCIC-ICS published two control system security advisories for products from mySCADA and Yokogawa.

mySCADA Advisory - This advisory describes a command injection vulnerability in the mySCADA myPRO HMI /SCADA products.

Yokogawa Advisory - This advisory describes ten vulnerabilities in the Yokogawa CENTUM and Exaopc products.

NOTE: This advisory is based upon an advisory that was originally published by Yokogawa on January 7^th, 2022 and subsequently updated on February 9^th, 2022.

 

For more details on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-3-24-22 - subscription required.