Review – 2 Advisories Published – 7-25-24

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Positron and Siemens.

Advisories

Positron Advisory - This advisory describes an authentication bypass using an alternate path or channel vulnerability (with known exploit) in the Positron Broadcast Signal Processor TRA7005.

Siemens Advisory - This advisory describes two vulnerabilities in the Siemens SICAM products.

 

For more information on these advisories, including links to researcher reports and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-7-25-24 - subscription required.