Review – One Advisory and One Update Published – 2-25-25

Today CISA’s NCCIC-ICS published a control system security advisory for products from Rockwell Automation. They also updated a medical device security advisory for products from Contec.

Advisories

Rockwell Advisory - This advisory describes a cleartext transmission of sensitive information vulnerability in the Rockwell PowerFlex 755 drives.

Updates

Contec Update - This update provides additional information on the Contec Health CMS8000 Patient Monitor advisory that was originally published on January 30^th, 2025.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/one-advisory-and-one-update-published-053 - subscription required.