Review – Public ICS Disclosures – Week of 6-15-24

This week we have four vendor disclosures from HP and Moxa (3). There are 31 vendor updates from ABB, Broadcom, and HPE (29).

Advisories

HP Advisory - HP published an advisory that discusses three vulnerabilities in multiple notebook PCs.

Moxa Advisory #1 - Moxa published an advisory that discusses four vulnerabilities (three with known exploits) in their SDS-3008 Series products.

Moxa Advisory #2 - Moxa published an advisory that discusses the Terrapin-Attack vulnerability in their UC series IPC products.

Moxa Advisory #3 - Moxa published an advisory that describes four vulnerabilities in their OnCell G3470A-LTE Series products.

Updates

ABB Update - ABB published an update for their 800xA Base advisory that was originally published on June 5^th, 2024.

Broadcom Update - Broadcom published an update for their EDK II Reference advisory that was originally published on December 26^th, 2020.

HPE Update #1 - HPE continued to convert 27 Aruba updates to the HPE format.

HPE Update #2 - HPE published an update for their Compute Scale-up Server 3200 server advisory that was originally published on April 15^th, 2024.

HPE Update #3 - HPE published an update for their Superdome Flex advisory that was originally published on January 26^th, 2024 and most recently updated on April 19^th, 2024.

 

For more information on these disclosures, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-6-ac0 - subscription required.