Review – 2 Advisories Published – 10-17-23

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Rockwell Automation and Schneider Electric.

Advisories

Rockwell Advisory - This advisory describes an improper input validation vulnerability in the Rockwell FactoryTalk Linx product.

Schneider Advisory - This advisory describes a deserialization of untrusted data vulnerability in the Schneider Electric EcoStruxure Power products.

 

For more details about these advisories see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-10-17-23 - subscription required.