Thursday, February 27, 2025

Review – 2 Advisories Published – 2-27-25

Today CISA’s NCCIC-ICS published a control system security advisory for products from Schneider, as well as a medical device security advisory for products from Dario Health.

Advisories

Schneider Advisory - This advisory discusses an out-of-bounds write vulnerability in the Schneider communications modules for Modicon M580 and Quantum controllers.

Dario Health Advisory - This advisory describes seven vulnerabilities in the Dario USB-C Blood Glucose Monitoring System Starter Kit Android Application, Application Database and Internet-based Server Infrastructure.

 

For more information on these advisories, including links to 3rd party advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-2-27-25 - subscription required.

No comments:

 
/* Use this with templates/template-twocol.html */