Review – 3 Advisories Published – 10-3-24

Today, CISA’s NCCIC-ICS published three control system security advisories for products from Delta Electronics, Subnet Solutions, and TEM.

Advisories

Delta Advisory - This advisory describes two SQL injection vulnerabilities in the Delta DIAEnergie industrial energy management system.

Subnet Advisory - This advisory discusses three vulnerabilities (all with publicly available exploits) in the Subnet PowerSYSTEM Center.

TEM Advisory - This advisory describes two vulnerabilities in the TEM Opera Plus FM Family Transmitter.

 

For more information on these advisories, including links to researcher reports and exploits, as well as a brief down-the-rabbit-hole look at vendor advisories, see my report at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-published-10-3-24 - subscription required.