Review – 1 Advisory and 1 Update Published – 12-5-23

Today, CISA’s NCCIC-ICS published a control system security advisory for products from Zebra. They also updated an advisory for products from Mitsubishi.

Advisories

Zebra Advisory - This advisory describes an authentication bypass using an alternate path or channel vulnerability in the Zebra ZTC industrial and desktop printers.

Updates

Mitsubishi Update - This update provides additional information on the CNC Series advisory that was originally published on July 27^th, 2023 and most recently updated on November 21^st, 2023.

 

For more information on these two advisories, including a down-the-rabbit-hole look at printer security, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/1-advisory-and-1-update-published-3ee - subscription required.