Review – 3 Advisories Published – 11-7-24

Today, CISA’s NCCIC-ICS published three control system security advisories for products from Bosch, Delta Electronics, and Beckhoff Automation.

Advisories

Bosch Advisory - This advisory describes an uncontrolled resource consumption vulnerability in the Bosch Rexroth AG IndraDrive.

Delta Advisory - This advisory describes three stack-based buffer overflow vulnerabilities in the Delta DIAScreen.

Beckhoff Advisory - This advisory describes an OS command injection vulnerability in the Beckhoff TwinCAT Package Manager.

 

For more information on these advisories, including a look at additional Delta vulnerabilities – see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-published-11-7-24 - subscription required.