Review – 2 Advisories and 1 Update Published – 7-7-22

Today, NCCIC-ICS published two control system security advisories for products from Bently Nevada and Rockwell Automation. They also updated an advisory for products from Mitsubishi.

Bentley Advisory - This advisory discusses the OT:ICEFALL vulnerabilities in the Bentley 3701/4X series and 60M100 (3701/60) Condition Monitoring System.

Rockwell Advisory - This advisory describes an improper restriction of rendered UI layers or frames vulnerability in the Rockwell MicroLogix 1100/1400 controllers.

Mitsubishi Update - This update provides new information on the advisory that was originally published on October 7^th, 2021 and most recently updated on October 28^th, 2021.

 

For more details about these advisories and update, including a down the rabbit hole look at editorial changes, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-1-update-published-58a - subscription required.