Review – 4 Advisories Published – 9-19-23

Today CISA’s NCCIC-ICS published four control system security advisories for products from Omron (3) and Siemens.

Advisories

Omron Advisory #1  - This advisory describes an improper control of interaction frequency in the Omron CJ/CS/CP series programmable logic controllers.

Omron Advisory #2  - This advisory describes an improper authorization vulnerability in the Omron Sysmac Studio engineering software.

Omron Advisory #3  - This advisory discusses the Zip-Slip vulnerability in the Omron Sysmac Studio and NX-IO Configurator engineering software.

 

For more details about these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/4-advisories-published-9-19-23 - subscription required.