Review – 1 Advisory Published – 3-21-24

Today, CISA’s NCCIC-ICS published a control system security advisory for products from Advantech.

Advisories

Advantech Advisory - This advisory describes an SQL injection vulnerability in the Advantech WebAccess/SCADA.

 

For more details about this advisory, including a down-the-rabbit-hole search for the researcher that discovered the vulnerability, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/1-advisory-published-3-21-24 - subscription required.