Review – 1 Advisory Published – 7-12-23

Today in an unusual Wednesday notification, CISA’s NCCIC-ICS published a control system security advisory for products from Rockwell.

Advisory

Rockwell Advisory - This advisory describes two out-of-bounds write vulnerabilities in a variety of Rockwell 1756-ENxx network bridges.

By-The-Way: READ THE ROCKWELL ADVISORY. It includes potential indicators of compromise and SNORT rules for detection. No publicly identified exploits yet….

 

For more information on this advisory, including a discussion about why CISA did not explain why it issued a Wednesday instead of waiting until tomorrow, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/1-advisory-published-7-12-23 - subscription required.