Review – 2 Advisories Published – 1-25-24

Today, CISA’s NCCIC-ICS published two control system security advisories for products from SystemK and MachineSense.

Advisories

SystemK Advisory - This advisory describes a command injection vulnerability in the SystemK network video recorders.

MachineSense Advisory - This advisory describes six vulnerabilities in the MachineSense FeverWarn products.

 

For more information on these advisories, including a link to exploit code and a discussion of possible expansion of the list of affected products, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-1-25-24 - subscription required.