Review – 3 Advisories Published – 1-21-25

Today CISA’s NCCIC-ICS published three control system security advisories for products from ZF, Siemens, and Traffic Alert and Collision Avoidance Systems II (TCAS).

Advisories

ZF Advisory - This advisory describes an authentication bypass vulnerability in the ZF RSSplus Trailer ABS.

Siemens Advisory - This advisory describes a cross-site scripting vulnerability in the Siemens SIMATIC S7-1200 CPUs.

TCAS Advisory - This advisory describes two vulnerabilities in the TCAS aircraft Collision Avoidance System.

 

For more information on these vulnerabilities, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-published-1-21-25 - subscription required.