Review – 3 Advisories Published – 8-6-26

Today CISA’s NCCIC-ICS published two control system security advisories for products from Johnson Controls and ABB; and one medical device security advisory for products from Medixant. 

Advisories  

Johnson Controls Advisory - This advisory describes a use of broken or risky cryptographic algorithm in the Johnson Controls (Tyco/DSC) TL280 internet security alarm communicator.  

ABB Advisory - This advisory discusses 13 vulnerabilities in the ABB Ability Zenon operations data management tool. 

Medixant Advisory - This advisory describes an out-of-bounds write vulnerability in the Medixant RadiAnt DICOM viewer. 

For more information on these advisories, including DTRH looks at researcher reports and an ABB exploit, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-published-8-6-26 - subscription required.