Review – 3 Advisories Published – 5-16-23

Today, CISA’s NCCIC-ICS published three control system security advisories for products from Rockwell (2) and Snap One.

Advisories

Rockwell Advisory #1 - This advisory describes an insufficient verification of data authenticity vulnerability in the Rockwell FactoryTalk Vantagepoint product.

Rockwell Advisory #2 - This advisory describes nine cross-site scripting vulnerabilities in the Rockwell ArmorStart products.

Snap One Advisory - This advisory describes eight vulnerabilities in the Snap One OvrC cloud platform.

 

For more details about these advisories, including a discussion about publication of security advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-published-5-16-23 - subscription required.