Review – 2 Advisories and 1 Update Published

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Delta Electronics and Rockwell Automation. They also updated an advisory for products from Rockwell.

Advisories

Delta Advisory - This advisory describes a deserialization of untrusted data vulnerability in the Delta DTN Soft temperature controller.

Rockwell Advisor - This advisory describes three vulnerabilities in the Rockwell ThinManager ThinServer.

Updates

Rockwell Update - This update provides additional information on an advisory that was originally published on August 13^th, 2024.

 

For more information on these advisories, including a look at the change in the NIST.NVD reporting on their problem keeping up with the flow of vulnerability reporting, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-1-update-published-8aa - subscription required.