Thursday, July 7, 2022

Review – 2 Advisories and 1 Update Published – 7-7-22

Today, NCCIC-ICS published two control system security advisories for products from Bently Nevada and Rockwell Automation. They also updated an advisory for products from Mitsubishi.

Bentley Advisory - This advisory discusses the OT:ICEFALL vulnerabilities in the Bentley 3701/4X series and 60M100 (3701/60) Condition Monitoring System.

Rockwell Advisory - This advisory describes an improper restriction of rendered UI layers or frames vulnerability in the Rockwell MicroLogix 1100/1400 controllers.

Mitsubishi Update - This update provides new information on the advisory that was originally published on October 7th, 2021 and most recently updated on October 28th, 2021.


For more details about these advisories and update, including a down the rabbit hole look at editorial changes, see my article at CFSN Detailed Analysis - - subscription required.

No comments:

/* Use this with templates/template-twocol.html */