Review - 1 Advisory Published – 4-20-23

Today, CISA’s NCCIC-ICS published a control system security advisory for products from INEA.

Advisories

INEA Advisory - This advisory describes an OS command injection vulnerability in the INEA ME RTU.

 

For more details about this advisory, including a down-the-rabbit-hole look at a possible connection to the Mitsubishi smartRTU, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/1-advisory-published-4-20-23 - subscription required.