Review – Public ICS Disclosures – Week of 2-21-26 - Part 1

We have a busy disclosure week. For Part 1 we have 17 vendor disclosures from ABB (2), Dell, Festo, Fujitsu, Hitachi (2), Hitachi Energy (3), HP (2), HPE (3), Sick, and Supermicro.

Advisories

ABB Advisory #1 - ABB published an advisory that discusses an insecure default initialization of resource vulnerability in their Automation Builder product.

ABB Advisory #2 - ABB published an advisory that discusses three vulnerabilities in their AC500 V3 products.

Dell Advisory - Dell published an advisory that describes four vulnerabilities in their Wyse Management Suite.

Festo Advisory - CERT-VDE published an advisory that 126 vulnerabilities in the Festo Automation Suite product. These are third-party (CODESYS) vulnerabilities.

Fujitsu Advisory - JP-CERT published an advisory that describes an out-of-bounds write vulnerability in the Fujitsu Fujitsu BIOS Driver.

Hitachi Advisory #1 - Hitachi published an advisory that describes an insertion of sensitive information into a log file vulnerability in their Configuration Manager and Ops Center API Configuration Manager products.

Hitachi Advisory #2 - Hitachi published an advisory that describes an insertion of sensitive information into a log file vulnerability in their Configuration Manager and Ops Center API Configuration Manager products.

Hitachi Energy Advisory #1 - Hitachi Energy published an advisory that describes four vulnerabilities (one with publicly available exploit) in their RTU500 series CMU Firmware.

Hitachi Energy Advisory #2 - Hitachi Energy published an advisory that describes two vulnerabilities in their Relion REB500 Product.

Hitachi Energy Advisory #3 - Hitachi Energy published an advisory that discusses a deserialization of untrusted data vulnerability in their Ellipse product.

HP Advisory #1 - HP published an advisory that discusses four vulnerabilities (two with publicly available exploits) in their LaserJet Enterprise and LaserJet Managed Printers.

HP Advisory #2 - HP published an advisory that describes three improper check for unusual or exceptional conditions vulnerabilities in multiple product lines utilizing the Intel NPU driver.

HPE Advisory #1 - HPE published an advisory that describes an authentication bypass vulnerability in their AutoPass License Server (APLS).

HPE Advisory #2 - HPE published an advisory that discusses an improper restriction of operations within the bounds of a memory buffer vulnerability in their ProLiant AMD DL/XL Servers.

HPE Advisory #3 - HPE published an advisory that discusses an improper restriction of operations within the bounds of a memory buffer vulnerability in their SimpliVity Servers.

Sick Advisory - Sick published an advisory that describes two use of risky or broken cryptographic algorithm vulnerabilities in their LMS1000 and MRS1000 products.

Supermicro Advisory - Supermicro published an advisory that discusses an improper restriction of operations within the bounds of a memory buffer vulnerability in multiple products.

 

For more information on these disclosures, including links to 3^rd party advisories, researcher reports, and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-2-805 - subscription required.

Review – 4 Advisories Published – 1-27-25

Today CISA’s NCCIC-ICS published four control system security advisories for products from Johnson Controls, Schneider Electric, Festo, and iba Systems.

Advisories

Johnson Controls Advisory - This advisory describes a command injection vulnerability in multiple Johnson Controls products.

Schneider Advisory - This advisory discusses five vulnerabilities in Schneider Zigbee products.

NOTE: I briefly described these vulnerabilities on January 17^th,2026.

Festo Advisory - This advisory discusses 140 vulnerabilities in the Festo Didactic SE MES PC. These are third-party vulnerabilities.

I briefly discussed these vulnerabilities on February 26^th, 2024.

Iba Advisory - This advisory describes an incorrect permissions assignment for critical resource vulnerability in the iba ibaPDA.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/4-advisories-published-1-27-25 - subscription required.

Review – 12 Advisories and 3 Updates Published – 1-15-26

Today CISA’s NCCIC-ICS published 15 control system security advisories for products from Siemens (9), Schneider Electric, Festo, and AVEVA. They also updated advisories for products from Mitsubishi Electric (2) and Axis Communications.

Advisories

SIMATIC Advisory #1 - This advisory describes five vulnerabilities in the Siemens SIMATIC CN 4100 communications node.

NOTE: I briefly mentioned these vulnerabilities on December 14^th, 2026.

SIMATIC Advisory #2 - This advisory describes an uncontrolled resource consumption vulnerability in the Siemens SIMATIC and SIPLUS product lines.

RUGGEDCOM Advisory #1 - This advisory describes six vulnerabilities in the Siemens RUGGEDCOM ROX II family.

NOTE: I briefly mentioned these vulnerabilities on December 14^th, 2026.

RUGGEDCOM Advisory #2 - This advisory discusses four vulnerabilities in the Siemens RUGGEDCOM APE1808 Devices.

RUGGEDCOM Advisory #3 - This advisory describes an improper input validation vulnerability in the Siemens RUGGEDCOM ROS products.

NOTE: I briefly mentioned these vulnerabilities on December 14^th, 2026.

Industrial Edge Advisory #1 - This advisory describes an authorization bypass through user controlled key vulnerability in the Siemens Industrial Edge Device Kit.

Industrial Edge Advisory #2 - This advisory describes an authorization bypass through user controlled key vulnerability in the Siemens Industrial Edge Devices.

SINEC Advisory - This advisory describes two vulnerabilities in the Siemens SINEC Security Monitor.

NOTE: I briefly mentioned these vulnerabilities on December 14^th, 2026.

TeleControl Advisory - This advisory describes execution with unnecessary privileges vulnerability in the Siemens TeleControl Server Basic.

Schneider Advisory - This advisory describes two vulnerabilities in the Schneider EcoStruxure Power Build Rapsody.

Festo Advisory - This advisory describes an insufficient technical documentation vulnerability in multiple Festo products.

I briefly discussed this vulnerability on December 3^rd, 2022.

AVEVA Advisory - This advisory describes seven vulnerabilities in the AVEVA Process Optimization product.

Updates

Mitsubishi Update #1 - This update provides additional information on the MC Works64 Products advisory that was originally published on July 26^th, 2022, and most recently updated on July 24^th, 2025.

NOTE: I briefly discussed this updated information on January 10^th, 2026.

Mitsubishi Update #2 - This update provides additional information on the FA Engineering Software Products advisory that as originally published on May 14^th, 2024, and most recently updated on August 28^th, 2025.

Axis Update - This update provides additional information on the Camera Station Pro advisory that was originally published on December 18^th, 2025.

 

For more information on these advisories, as well as an ongoing discussion about CISA format changes, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/12-advisories-and-3-updates-published - subscription required.

Review – 3 Advisories Published – 12-9-25

Today CISA’s NCCIC-ICS published three control system security advisories for products from India-Based CCTV vendors, Festo, and U-BOOT.

Advisories

D-Link Advisory - This advisory describes a missing authentication for critical function vulnerability in the D-Link (India-Limited) DCS-F5614-L1 CCTV (not sold in US).

Festo Advisory - This advisory discusses a cross-site scripting vulnerability (with publicly available exploit) in the Festo LX Appliance.

U-BOOT Advisory - This advisory describes an improper access control for volatile memory containing boot code vulnerability in the U-BOOT bootloader (the advisory lists affected Qualcomm chips).

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-published-12-9-25 - subscription required.

Review – 6 Advisories and 1 Update Published – 11-25-25

Today CISA’s NCCIC-ICS published five control system security advisories for products from SiRcom, Festo, Opto 22, Zenitel, Rockwell, and Ashlar-Vellum. They also updated an advisory for products from Mitsubishi.

Advisories

SiRcom Advisory - This advisory describes a missing authentication for critical function vulnerability in the SiRcom SMART Alert (SiSA) central control system.

Festo Advisory - This advisory discusses two vulnerabilities in the multiple Festo product lines.

NOTE: I briefly discussed these vulnerabilities on December 3^rd, 2022.

Opto 22 Advisory - This advisory describes an exposure of sensitive data through meta data vulnerability in the Opto 22 groov View product line.

Zenitel Advisory - This advisory describes five vulnerabilities in the Zenitel TCIV-3+ IP video intercom.

Rockwell Advisory - This advisory describes a stack-based buffer overflow vulnerability in the Rockwell Arena Simulation product.

NOTE: I briefly discussed this vulnerability on November 16^th, 2025.

Ashlar-Vellum Advisory - This advisory describes two vulnerabilities in multiple Ashlar-Vellum products.

Updates

Mitsubishi Update - This update provides additional information on the FA Engineering Software advisory that was originally published on December 5^th, 2022, and most recently updated on June 29^th, 2023.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/6-advisories-and-1-update-published-b5e - subscription required.

Review – 6 Advisories Published – 11-20-25

Today CISA’s NCCIC-ICS published six control system security advisories for products from Emerson, Festo (2), Opto 22, ICAM365 and Automated Logic.

Advisories

Emerson Advisory - This advisory discusses a stack-based buffer overflow vulnerability in the Emerson Appleton UPSMON-PRO.

Festo Advisory #1 - This advisory discusses an improper input validation vulnerability in the Festo Didactic products.

Festo Advisory #2 - This advisory describes a hidden functionality vulnerability in the Festo MSE6-C2M-5000 product line.

NOTE: I briefly discussed this vulnerability on September 9^th, 2023. CERT-VDE updated the Festo advisory (administrative and format changes) on October 1^st, 2025.

Opto 22 Advisory - This advisory describes an OS command injection vulnerability in the Opto 22 GRV Programmable Logic Controllers.

ICAM365 Advisory - This advisory describes two missing authentication for critical function vulnerabilities in the ICAM365 ROBOT PT Camera P201 and Night Vision Camera QC021.

Automated Logic Advisory - This advisory describes two vulnerabilities in multiple Automated Logic (and Carrier) products.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/6-advisories-published-11-20-25 - subscription required.

Review – 17 Advisories and 1 Update Published – 11-13-25

Today CISA’s NCCIC-ICS published 17 control system security advisories for products from Siemens (7), General Industrial Controls, Rockwell (5), Brightpick AI, AVEVA (2), and Mitsubishi. They also updated an advisory for products from Festo.

Advisories

Solid Edge Advisory #1 - This advisory describes an uncontrolled search path element vulnerability in the Siemens Software Center and Solid Edge products.

Solid Edge Advisory #2 - This advisory describes an improper certificate validation vulnerability in the Siemens Solid Edge SE2025.

Altair Grid Advisory - This advisory describes two vulnerabilities in the Siemens Altair Grid Engine.

COMOS Advisory - This advisory discusses two vulnerabilities in the Siemens COMOS products.

LOGO! 8 Advisory - This advisory describes three vulnerabilities in the LOGO! 8 BM Devices.

Spectrum Power Advisory - This advisory describes five vulnerabilities in the Siemens Spectrum Power 4 products.

SICAM Advisory - This advisory describes two vulnerabilities in the Siemens SICAM P850 family and SICAM P855 family.

General Industrial Advisory - This advisory describes four vulnerabilities in the General Industrial Controls Lynx+ Gateway.

AADvance-Trusted SIS Advisory - This advisory discusses a path traversal vulnerability in the Rockwell AADvance-Trusted SIS Workstation.

FactoryTalk Advisory #1 - This advisory discusses an improper resource shutdown release vulnerability in the Rockwell FactoryTalk Policy Manager.

FactoryTalk Advisory #2 - This advisory describes two vulnerabilities in the Rockwell FactoryTalk DataMosaix Private Cloud.

Studio 5000 Advisory - This advisory describes two vulnerabilities in the Rockwell Studio 5000 Simulation Interface.

Verve Asset Manager Advisory - This advisory describes an incorrect authorization vulnerability in the Rockwell Verve Asset Manager OT cybersecurity platform.

Brightpick Advisory - This advisory describes three vulnerabilities in the Brightpick AI warehouse automation platform.

Edge Advisory - This advisory describes the use of a broken or risky cryptographic algorithm vulnerability in the AVEVA Edge HMI/SCADA software.

Application Server Advisory - This advisory describes a basic cross-site scripting vulnerability in the AVEVA Application Server.

Mitsubishi Advisory - This advisory describes an improper validation of specified quantity in input vulnerability in the Mitsubishi MELSEC iQ-F Series products.

Note: I briefly discussed this vulnerability on November 9^th, 2025.

Updates

Festo Update - This update provides additional information on the Controller CECC-S,-LK,-D Family advisory that was originally published on September 30^th, 2025.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/17-advisories-and-1-update-published - subscription required.

Review – 7 Advisories and 3 Updates Published – 9-30-25

Today CISA’s NCCIC-ICS published seven control system security advisories for products from LG Innotek, National Instruments, OpenPLC, Festo (3) and MegaSys Enterprises. The also published updates for advisories for products from Rockwell Automation, HEIDENHHAIN, and Keysight.

Advisories

LG Advisory - This advisory describes an authentication bypass by alternate path or channel vulnerability in the LG Innotek LND7210 and LNV7210R cameras.

National Instruments Advisory - This advisory describes two vulnerabilities in the NI Circuit Design Suite.

OpenPLC Advisory - This advisory describe a reliance on undefined, unspecified, or implementation defined behavior vulnerability in the OpenPLC_V3 product.

Festo Advisory #1 - This advisory discusses 29 vulnerabilities in the Festo Controller CECC-S,-LK,-D Family Firmware.

Festo Advisory #2 - This advisory describes an improper privilege management vulnerability in the Festo CPX-CEC-C1 and CPX-CMXX hardware control blocks.

Festo Advisory #3 - This advisory discusses four vulnerabilities in the Festo SBRD-Q/SBOC-Q/SBOI-Q series products.

NOTE: I briefly discussed these vulnerabilities on October 2^nd, 2021.

MegaSys Advisory - This advisory describes an OS command injection vulnerability in the MegaSys Telenium Online Web Application.

Updates

Rockwell Update - This update provides additional information on the FLEX 5000 I/O advisory that was originally published on August 14^th, 2025.

NOTE: I described the problem with the incorrect CVE numbers on August 14^th, 2025.

HEIDENHAIN Update - This update provides additional information on the Controller TNC advisory that was originally published on October 25^th, 2022.

Keysight Update - This update provides additional information on the Ixia Vision advisory that was originally published on March 4^th, 2025.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/7-advisories-and-3-updates-published-e07 - subscription required.

Review – 7 Advisories Published – 7-1-25

Today CISA’s NCCIC-ICS published control system security advisories for products from Hitachi Energy (2), Voltronic, and FESTO (4).

Advisories

Hitachi Energy Advisory #1 - This advisory discusses a cross-site scripting vulnerability (with publicly available exploit) in the Hitachi Energy Modular Switchgear Monitoring (MSM) product.

Hitachi Energy Advisory #2 - This advisory describes an allocation of resources without limit or throttling vulnerability in the Hitachi Energy Relion 670/650 and SAM600-IO series intelligent electronic devices.

Voltronic Advisory - This advisory describes two vulnerabilities in UPS monitoring products from Voltronic and Powershield.

Festo Advisory #1 - This advisory describes four command injection vulnerabilities in the Festo Hardware Controller and Hardware Servo Press Kit products.

Festo Advisory #2 - This advisory discusses three vulnerabilities in the FESTO CODESYS Gateway Server.

Festo Advisory #3 - This advisory discusses an out-of-bounds write vulnerability in multiple Festo advisories.

Festo Advisory #4 - This advisory discusses an improper restriction of operations within the bounds of a memory buffer vulnerability in FESTO Didactic CP, MPS 200, and MPS 400 products.

 

For more information on these advisories, including links to 3^rd party advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/7-advisories-published-7-1-25 - subscription required

Review – Public ICS Disclosures – Week of Week of 11-30-24

This week we have fourteen vendor disclosures from Broadcom, Cisco, Dell, Festo, Hitachi, HPE, Moxa, Philips, QNAP (3), Rockwell, WAGO, and Zyxel. There are seven vendor updates from Broadcom, FortiGuard (4), Moxa, and Palo Alto Networks. We also have five researcher reports for products from ABB (4) and WAGO. Finally, we have four exploits for FortiGuard, Intelligent Security Systems, Siemens, and VMware.

Advisories

Broadcom Advisory - Broadcom published an advisory that discusses nine vulnerabilities in their Brocade SANnav product.

Cisco Advisory - Cisco published an advisory that describes an improper access control vulnerability in their NX-OS product.

Dell Advisory - Dell published an advisory that discusses 18 vulnerabilities in their Dell ThinOS.

Festo Advisory - CERT-VDE published an advisory that discusses three vulnerabilities in the Festo provided CODESYS Gateway Server.

Hitachi Advisory - Hitachi published an advisory that describes a use of default credentials vulnerability in their Ops Center OVA product.

HPE Advisory - HPE published an advisory that describes four vulnerabilities in their Aruba Networking ClearPass Policy Manager.

Moxa Advisory - Moxa published an advisory that describes an improper validation of specified type of input vulnerability in their VPort 07-3 Series IP cameras.

Philips Advisory - Philips published an advisory that discusses an improper handling of file names that identify virtual resources vulnerability in the Sailpoint IdentityIQ Identity and Access Management software.

QNAP Advisory #1 - QNAP published an advisory that describes a link following vulnerability in their Qsync Central product. The vulnerability was reported by c411e.

QNAP Advisory #2 - QNAP published an advisory that describes eight vulnerabilities in their QTS and QuTS hero products.

QNAP Advisory #3 - QNAP published an advisory that describes an OS command injection vulnerability in their License Center product.

Rockwell Advisory - Rockwell published an advisory that describes four vulnerabilities in their Arena product. The vulnerabilities were reported by the Zero Day Initiative.

WAGO Advisory - CERT-VDE published an advisory that discusses an improper check for unusual or exceptional conditions vulnerability in the WAGO Basic Controller products.

Zyxel Advisory - Zyxel published an advisory that describes three vulnerabilities in multiple Zyxel communications products.

Updates

Broadcom Update - Broadcom published an update for their Azul Zulu advisory that was originally published on July 26^th, 2024, and most recently updated on July 29^th, 2024.

FortiGuard Update #1 - FortiGuard published an update for their HTTP/2 CONTINUATION Frames advisory that was originally published on May 14^th, 2024, and most recently updated on November 21^st, 2024.

FortiGuard Update #2 - FortiGuard published an update for their regreSSHion advisory that was originally published on July 9^th, 2024, and most recently updated on November 22^nd, 2024.

FortiGuard Update #3 - FortiGuard published an update for their FortiOS advisory that was originally published on April 9^th, 2024, and most recently updated on May 15^th, 2024.

FortiGuard Update #4 - FortiGuard published an update for their Stack buffer overflow on Bluetooth advisory that was originally published on June 11^th, 2024.

Moxa Update - Moxa published an update for their Weak SSL/TLS Key Exchange advisory that was originally published on November 4^th, 2024, and most recently updated on November 22^nd, 2024.

Palo Alto Networks Update - Palo Alto Networks published an update for their GlobalProtect App advisory that was originally published on November 25^th, 2024.

Researcher Reports

ABB Reports - Zero Science published four reports about individual vulnerabilities in the ABB Cylon Aspect.

WAGO Report - Nozomi Networks published a report that describes eight vulnerabilities in the WAGO PLC device model 750-8216/025-001.

Exploits

FortiGuard Exploit - sfewer-r7 published a Metasploit module for a missing authentication for critical function vulnerability (listed in CISA’s Known Exploited Vulnerability catalog) in the FortiGuard FortiManager products.

Intelligent Security Systems Exploit - Milad Karimi published an exploit for an unquoted service path vulnerability in the Intelligent Security Systems SecureOS.

Siemens Exploit - Stefan Viehböck, and Constantin Schieber-Knöbl of SEC Consult published an exploit for an improper NULL termination vulnerability in the Siemens JTAG Interface.

VMware Exploit - Matei Mal Badanoiu published a Metasploit module for a ASP.NET misconfiguration: use of identity impersonation vulnerability in the VMware vCenter Server.

 

For more information on these disclosures, including links to 3rd party advisories and researcher reports, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-week - subscription required. 

Review – Public ICS Disclosures – Week of 9-7-24 – Part 1

This week we have 25vvendor disclosures from ABB, Eaton, Endress+Hauser, Festo, FortiGuard, HP (2), HPE (7), Insyde, Palo Alto Networks (7), and Phoenix Contact (3).

Advisories

ABB Advisory - ABB published an advisory that discusses two vulnerabilities in their Relion 630 Series Protection Relays.

Eaton Advisory - Eaton published an advisory that describes three vulnerabilities in their Foreseer software.

Endress+Hauser Advisory - CERT-VDE published an advisory that describes a code injection vulnerability in the Endress+Hauser Echo Curve Viewer used in multiple products.

Festo Advisory - CERT-VDE published an advisory that discusses an improper restriction of operations within the bounds of a memory buffer in the Festo Didactic product line.

FortiGuard Advisory #1 - FortiGuard published an advisory that describes an authorization bypass via user controlled keys vulnerability in their FortiAnalyzer and FortiManager products.

FortiGuard Advisory #2 - FortiGuard published an advisory that describes an exposure of sensitive information to an unauthorized actor in their FortiSandbox product.

HP Advisory #1 - HP published an advisory that discusses a use after free vulnerability in their LaserJet and LaserJet Managed Printers.

HP Advisory #2 - HP published an advisory that describes an improper privilege management vulnerability in their Samsung Universal Print Driver for Windows.

HPE Advisory #1 - HPE published an advisory that discusses an information disclosure vulnerability in their HPE StoreEasy Servers.

HPE Advisory #2 - HPE published an advisory that discusses a denial of service vulnerability in their StoreEasy Servers.

HPE Advisory #3 - HPE published an advisory that discusses an information disclosure vulnerability in their ProLiant DL/XL, Synergy, and Edgeline Servers.

HPE Advisory #4 - HPE published an advisory that discusses a denial of service vulnerability in their ProLiant DL/XL, Synergy, and Edgeline Servers.

HPE Advisory #5 - HPE published an advisory that discusses five vulnerabilities in their NonStop Virtual Tape Repository (VTR).

HPE Advisory #6 - HPE published an advisory that discusses a denial of service vulnerability in their HP-UX 11i v3 ONC and NFS Software.

HPE Advisory #7 - HPE published an advisory that discusses a denial of service vulnerability in their HP-UX NFS product.

Insyde Advisory - Insyde published an advisory that discusses a divide by zero vulnerability in their FirmwarePerformancePei module.

Palo Alto Networks Advisory #1 - Palo Alto Networks published an advisory that describes an incorrect authorization vulnerability in their GlobalProtect Portal.

Palo Alto Networks Advisory #2 - Palo Alto Networks published an advisory that describes an expected behavior violation vulnerability in their Cortex XDR Agent.

Palo Alto Networks Advisory #3 - Palo Alto Networks published an advisory that describes a cleartext transmission of sensitive information vulnerability in their ActiveMQ Content Pack.

Palo Alto Networks Advisory #4 - Palo Alto Networks published an advisory that describes an improper neutralization of wildcards and matching symbols vulnerability in their PAN-OS products.

Palo Alto Networks Advisory #5 - Palo Alto Networks published an advisory that describes an exposure of sensitive information to an unauthorized control sphere vulnerability in their PAN-OS products.

Palo Alto Networks Advisory #6 - Palo Alto Networks published an advisory that discusses 29 vulnerabilities (two with known exploits) in their Prisma Access Browser.

Palo Alto Networks Advisory #7 - Palo Alto Networks published an advisory that describes a command injection vulnerability in their PAN-OS products.

Phoenix Contact Advisory #1 - Phoenix Contact published an advisory that describes an allocation of resources without limits or throttling in their mGuard devices.

Phoenix Contact Advisory #2 - Phoenix Contact published an advisory that discusses the regreSSHion  vulnerability in their mGuard products.

Phoenix Contact Advisory #3 - Phoenix Contact published an advisory that describes twelve vulnerabilities in their mGuard products.

 

For more details on these disclosures, including 3^rd party advisories and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-9-c5a - subscription required.

Review – Public ICS Disclosures – Week of 2-26-24

This week we have 12 vendor disclosures from Aruba Networks, CODESYS, Dell, Festo, Hikvision, Hitachi Energy, HP, Moxa, Philips, SMA, Wiesemann & Theis, and VMware. There are four vendor updates from Hitachi Energy. There is a researcher report for a vulnerability in products from Qognify. Finally, we have three exploits for products from Automatic Systems (2), and Saflok.

Advisories

Aruba Advisory - Aruba published an advisory that describes ten vulnerabilities in their ClearPass Policy Manager product.

CODESYS Advisory - CODESYS published an advisory that describes an OS command injection vulnerability in their Control V3 on Linux and QNX operating systems product.

Dell Advisory - Dell published an advisory that discusses TPM Interposer BitLocker research.

Festo Advisory - CERT-VDE published an advisory that discusses 140 vulnerabilities in the Festo MES PCs.

Hikvision Advisory - Hikvision published an advisory that describes two improper server-side validation vulnerabilities in their HikCentral Professional product.

Hitachi Energy Advisory - Hitachi Energy published an advisory that discusses the Terrapin-Attack vulnerability.

HP Advisory - HP published an advisory that discusses 133 vulnerabilities in their ThinPro product. These are third-party vulnerabilities.

Moxa Advisory - Moxa published an advisory that describes a confused deputy vulnerability in their EDS-4000/G4000 Series products.

Philips Advisory - Philips published an advisory that discusses a use after free vulnerability in their EarlyVue VS30.

SMA Advisory - Incibe-CERT published an advisory that describes two vulnerabilities in the SMA Cluster Controller and Sunny Webbox products.

Wiesemann & Theis Advisory - CERT-VDE published an advisory that describes an unquoted search path vulnerability in multiple Wieseman & Theis products.

VMware Advisory - VMware published an advisory that describes an out-of-bounds read vulnerability in their Workstation Pro and Fusion products.

Updates

Hitachi Energy Update #1 - Hitachi Energy published an update for their RTU500 advisory that was originally published on December 19^th, 2023.

Hitachi Energy Update #2 - Hitachi Energy published an update for their RTU500 advisory that was originally published on November 28^th, 2023 and most recently updated on December 13^th, 2023.

Hitachi Energy Update #3 - Hitachi Energy published an update for their OpenSSL advisory that was originally published on April 25^th, 2023.

Hitachi Energy Update #4 - Hitachi Energy published an update for their IEC 61850 MMS-Server advisory that was originally published on February 14^th, 2023.

Researcher Reports

Qognify Report - SEC Consult published a report that describes an uncontrolled search path element in the Qognify VMS Client Viewer.

Exploits

Automatic Systems Exploit #1 - Marcin Kozlowski published an exploit for a path traversal vulnerability in the Automatic-Systems SOC FL9600 FastLine.

Automatic Systems Exploit #2 - Marcin Kozlowski published an exploit for a use of hard-coded credentials vulnerability in the Automatic-Systems SOC FL9600 FastLine product.

Saflok Exploit - A51199deefa2c2520cea24f746d899ce published an exploit for a key derivativation vulnerability in the Saflok System 6000.

 

For more information on these disclosures, including links to 3rd party advisories, researcher reports, and exploits, see my article CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-2-584 - subscription required.

Review – Public ICS Disclosures – Week of 1-27-24 – Part 1

This week we have 24 vendor disclosures from Festo, Hitachi (6), Hitachi Energy (3), Honeywell, Pilz, and QNAP (12).

Advisories

Festo Advisory - CERT-VDE published an advisory that discusses 16 vulnerabilities in the multiple Festo products.

Hitachi Advisory #1 - Hitachi published an advisory that discusses seven undescribed vulnerabilities in their Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java.

Hitachi Advisory #2 - Hitachi published an advisory that discusses 11 vulnerabilities in their Ops Center Analyzer.

Hitachi Advisory #3 - Hitachi published an advisory that discusses three vulnerabilities in their Ops Center Administrator product, one of which is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Hitachi Advisory #4 - Hitachi published an advisory that describes an incorrect default permissions vulnerability in their Hitachi Storage Plug-in for VMware vCenter.

Hitachi Advisory #5 - Hitachi published an advisory that discusses four vulnerabilities in their Command Suite products one of which is listed in CISA’s KEV catalog.

Hitachi Advisory #6 - Hitachi published an advisory that discusses 27 vulnerabilities in their Disk Array Systems products.

Hitachi Energy Advisory #1 - Hitachi Energy published an advisory that discusses an improper input validation vulnerability in their TropOS core routers.

Hitachi Energy Advisory #2 - Hitachi Energy published an advisory that discusses three vulnerabilities in their MSM Product.

Hitachi Energy Advisory #3 - Hitachi Energy published an advisory that discusses nine vulnerabilities in their AFF660/665 series products.

Honeywell Advisory - Honeywell published an advisory for two vulnerabilities in a number of their smartcard readers/cards.

Pilz Advisory - CERT-VDE published an advisory that describes two cross-site scripting vulnerabilities in the Pilz PASvisu and PMI v8xx products.

QNAP Advisory #1 - QNAP published an advisory that describes two vulnerabilities in their Photo Station product. The vulnerabilities were reported by lebr0nli.

QNAP Advisory #2 - QNAP published an advisory that describes an unchecked return value vulnerability in their QTS and QuTS hero products.

QNAP Advisory #3 - QNAP published an advisory that discusses an improper validation of integrity check value vulnerability in their QTS and QuTS hero products.

QNAP Advisory #4 - QNAP published an advisory that describes two vulnerabilities in their QTS, QuTS hero, and QuTScloud products.

QNAP Advisory #5 - QNAP published an advisory that describes an OS command injection vulnerability in their QTS, QuTS hero, and QuTScloud products.

QNAP Advisory #6 - QNAP published an advisory that describes three vulnerabilities in their QTS, QuTS hero, and QuTScloud products.

QNAP Advisory #7 - QNAP published an advisory that describes three OS command injection vulnerabilities in their QTS, QuTS hero and QuTScloud products.

QNAP Advisory #8 - QNAP published an advisory that describes an OS command injection vulnerability in their QTS, QuTS hero and QuTScloud products.

QNAP Advisory #9 - QNAP published an advisory that describes an OS command injection vulnerability in their TS, QuTS hero and QuTScloud products.

QNAP Advisory #10 - QNAP published an advisory that describes a classic buffer overflow vulnerability in their QTS, QuTS hero and QuTScloud products.

QNAP Advisory #11 - QNAP published an advisory that describes eight vulnerabilities in their QTS, QuTS hero and QuTScloud products.

QNAP Advisory #12 - QNAP published an advisory that describes an OS command injection vulnerability in their QTS, QuTS hero and QuTScloud.

 

For more information about these disclosures, including links to researcher reports, 3^rd party advisories and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-1-76f - subscription required.

Review – Public ICS Disclosures – Week of 11-25-23

This week we have 15 vendor disclosures from Festo, Hitachi Energy (3), HPE, Medtronic, Red Lion, Ruckus, SEL, Sierra Wireless, Synology (2), WatchGuard, and Zyxel (2). There are nine vendor updates from Hitachi Energy (7), HPE, and VMware. There is also a researcher report describing vulnerabilities in products from SEL. Finally, we have two exploits for products from Loytec.

Advisories

Festo Advisory - CERT-VDE published an advisory that discusses an out-of-bounds write vulnerability in multiple Festo products.

Hitachi Energy Advisory #1 - Hitachi Energy published an advisory that describes three vulnerabilities in their RTU500 series products.

Hitachi Energy Advisory #2 - Hitachi Energy published an advisory that discusses an off-by-one error vulnerability in their SDM600 series products.

Hitachi Energy Advisory #3 - Hitachi Energy published an advisory that describes an improper input validation vulnerability in their s Relion® 670/650/SAM600-IO series products.

HPE Advisory - HPE published an advisory that discusses two improper initialization vulnerabilities in their Cray Servers and ProLiant DL/XL Servers.

Medtronic Advisory - Medtronic published an advisory that discusses two vulnerabilities in their Mainspring Data Express, and Vital Sync Virtual Patient Monitoring Platform products.

Red Lion Advisory - Red Lion published an advisory that describes an improper neutralization of special elements vulnerability in their Crimson 3.2 software.

Ruckus Advisory - Ruckus published an advisory that describes a cross-site scripting vulnerability in multiple Ruckus products.

SEL Advisory - SEL published a cybersecurity notice for their Blueframe OS product.

Sierra Wireless Advisory - Sierra Wireless published an advisory that describes eight vulnerabilities in their ALEOS, the operating system used in certain Sierra Wireless AirLink Routers.

Synology Advisory #1 - Synology published an advisory that describes an arbitrary code execution vulnerability in their Synology Camera BC500 and Synology Camera TC500.

Synology Advisory #2 - Synology published an advisory that describes a man-in-the-middle vulnerability in their Router Manager.

WatchGuard Advisory - WatchGuard published an advisory that discusses the heap buffer overflow in libwebp WebP Codec vulnerability that is listed in the CISA Known Exploited Vulnerabilities catalog.

Zyxel Advisory #1 - Zyxel published an advisory that describes nine vulnerabilities in multiple Zyxel firewall and access point (AP) products.

Zyxel Advisory #2 - Zyxel published an advisory that describes the six vulnerabilities in their NAS326 and NAS542 products.

Updates

Hitachi Energy Updates - Hitachi Energy published seven updates for the purpose of rebranding the advisories from “Hitachi/ABB Power Grids” to “Hitachi Energy”.

HPE Update - HPE published an update for their OneView advisory that was originally published on October 25^th, 2023.

VMware Update - VMware published an update for their Cloud Director Appliance advisory that was originally published on November 14^th, 2023.

Researcher Reports

SEL Report - Nozomi Networks published a report describing five vulnerabilities in the SEL-451 substation bay control  device.

Exploits

Loytec Exploit #1 - Chizuru Toyama published an exploit for three vulnerabilities in the Loytec LINX Configurator.

Loytec Exploit #2 - Chizuru Toyama published an exploit for a four vulnerabilities in the Loytec LINX Configurator.

 

For more details about these disclosures, including links to researcher reports, 3^rd party advisories, and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-11-7e2 - subscription required.

Review – Public ICS Disclosures – Week of 10-21-23

This week we have eight vendor disclosures from Aruba Networks, Bosch, Festo, Genetec, HP, Omron, Sick, and VMware. There are eight vendor updates from BD (2), Cisco (3), HP, and HPE (2). There are two researcher reports for vulnerabilities in products from TEM. Finally, we have two exploits for products from Splunk and VMware.

Advisories

Aruba Advisory - Aruba published an advisory that describes five vulnerabilities in their ClearPass Policy Manager.

Bosch Advisory - Bosch published an advisory that discusses an authentication bypass by capture replay vulnerability in their Rexroth SLC-0-GPNT00300 product.

Festo Advisory - CERT-VDE published an advisory that discusses an improper input validation vulnerability in the Festo TP 260 and MES PC products.

Genetec Advisory - Genetec published an advisory that discusses a command injection vulnerability in their Genetec A1610 and A1210 network door controllers.

HPE Advisory - HPE published an advisory that describes a remote code execution vulnerability in their OneView product.

Omron Advisory - Omron published an advisory that describes a restriction of XML external entity reference vulnerability in their CX Designer product.

Sick Advisory - Sick published an advisory that describes an authentication bypass by capture-replay vulnerability in their Flexi Soft Gateways.

VMware Advisory #1 - VMware published an advisory that describes two vulnerabilities in their vCenter Server.

VMware Advisory #2 - VMware published an advisory that describes two vulnerabilities in their Tools product.

Updates

BD Update #1 - BD published an update for their Busy Box advisory.

BD Update #2 - BD published an update for their Linux Kernel Vulnerability within Wi-Fi Module in Alaris PCU advisory.

Cisco Update #1 - Cisco published an update for their IOS XE Software Web UI Command Injection advisory that was originally published on March 24^th, 2021.

Cisco Update #2 - Cisco published an update for their HTTP/2 Rapid Reset Attack advisory that was originally published on October 16^th, 2023.

Cisco Update #3 - Cisco published an update for their IOS XE Software Web UI Feature Attack advisory that was originally published on October 16^th, 2023.

HP Update - HP published an update for their NVIDIA GPU Display Driver that was originally published on September 11^th, 2023.

HPE Update #1 - HPE published an update for their Aruba AirWave Management Platform advisory that was originally published on October 17^th, 2023.

HPE Update #2 - HPE published an update for their NonStop advisory that was originally published on July 18^th, 2022 and most recently updated on March 30^th, 2023.

Researcher Reports

TEM Reports - Zero Science published two reports of individual vulnerabilities in the TEM Opera Plus FM Family Transmitter.

Exploits

Splunk Exploit - Heyder Andrade published a Metasploit module for a privilege escalation vulnerability in Splunk.

VMware Exploit - SinSinology published an exploit for a use of broken or risky cryptographic algorithm vulnerability in the VMware Aria Operations for Networks program.

 

For more details about these disclosures, including links to 3^rd party advisories and researcher reports as well as brief update summaries, see my article at CFSN Detailed analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-10-19b - subscription required. 

Review – Public ICS Disclosures – Week of 10-14-23 – Part 1

This week we have 18 vendor disclosures from Advantech, Aruba Networks, Bosch, Broadcom (3), Cisco (2), Eaton (2), Festo, GE Gas Power, Helmholz, HP (2), HPE, JTEKT, and mb Connect.

Advisories

Advantech Advisory - Advantech published an advisory that describes an exposure of sensitive information to an unauthorized actor vulnerability in their R-SeeNet v2 products

Aruba Advisory - Aruba published an advisory that describes an information disclosure vulnerability in their AirWave Management Platform’s web-based management interface.

Bosch Advisory - Bosch published an advisory that describes ‘several vulnerabilities’ in their ctrlX WR21 HMI.

Broadcom Advisory #1 - Broadcom published an advisory that discusses the SOCKS5 heap buffer overflow vulnerability.

Broadcom Advisory #2 - Broadcom published an advisory that discusses an insufficient control flow management vulnerability in their Brocade Extension Switches.

Broadcom Advisory #3 - Broadcom published an advisory that discusses the HTTP2 Rapid Reset vulnerability.

Cisco Advisory #1 - Cisco published an advisory that discusses the SOCKS5 heap buffer overflow vulnerability.

Cisco Advisory #2 - Cisco published an advisory that discusses the HTTP2 Rapid Reset vulnerability.

Eaton Advisory #1 - Eaton published an advisory that describes a weak encoding of passwords vulnerability in their easyE4 product.

Eaton Advisory #2 - Eaton published an advisory that describes a plaintext storage of password vulnerability in their easySoft software.

Festo Advisory - CERT-VDE published an advisory that discusses a path traversal vulnerability in their TP 260 and MES PC products.

GE Gas Power Advisory - GE Gas Power published an advisory that discusses eight vulnerabilities in their NetworkST4, Remote Operations Offering, and M&D Lockbox products.

Helmholz Advisory - CERT-VDE published an advisory that discusses an improper privilege management vulnerability in the Helmholz REX24 products.

HP Advisory #1 - HP published an advisory that describes a privilege escalation vulnerability in multiple products.

HP Advisory #2 - HP published an advisory that discusses 83 vulnerabilities in their HP Device Manager product.

HPE Advisory - HPE published an advisory that describes a denial of service vulnerability in their Integrated Lights-Out product.

JTEKT Advisory - JTEKT published an advisory that describes two vulnerabilities in their OnSinView2 product.

MB Connect Advisory - MB Connect published an advisory that describes an improper privilege management vulnerability in their mymbCONNECT24 and mbCONNECT24 software.

 

For more details about these disclosures, including links to researcher reports and 3^rd party advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-10-f0f - subscription required.

Review – Public ICS Disclosures – Week of 8-26-23

This week we have 53 vendor disclosures from Aruba Networks, Bosch, Broadcom (24), Festo, i-Pro, GE Gas Power, Hitachi, Hitachi Energy, HPE, Moxa, SEL (5), Splunk (11), Texas Instruments (2), and VMware (2). There are also three vendor updates from Broadcom (2) and Mitsubishi. Finally, we have four researcher reports for products from Unified Automation and Tinycontrol (3).

Advisories

Aruba Advisory - Aruba published an advisory that describes three vulnerabilities in their ArubaOS switch products.

Bosch Advisory - Bosch published an advisory that describes a code injection vulnerability in their RTS VLink Virtual Matrix Software.

Broadcom Advisories - Broadcom published 24 advisories for vulnerabilities in various Brocade products.

Festo Advisories - CERT-VDE published an advisory that discusses a cross-site scripting vulnerability in the Festo LX Appliance.

i-Pro Advisory - JP-CERT published an advisory that describes four vulnerabilities in the i-Pro VI Web Client.

GE Advisory - GE published an advisory that describes a default administrator vulnerability in their Nexus OTArmor product.

Hitachi Advisory - Hitachi published an advisory that describes an insufficient logging vulnerability in their HiRDB servers.

Hitachi Energy Advisory - Hitachi published an advisory that discusses four vulnerabilities in their Lumada APM Edge product.

HPE Advisory - HPE published an advisory that discusses 48 vulnerabilities in their SANnav Management Software.

Moxa Advisory - Moxa published an advisory that describes five vulnerabilities in their MXsecurity Series products.

SEL Advisories - SEL published five advisories. These advisories are only available to registered owners.

Splunk Advisories - Splunk published 11 advisories for various products.

TI Advisory #1 - TI published an advisory that discusses a Bluetooth reconnection vulnerability in multiple TI products.

TI Advisory #2 - TI published an advisory that discusses a failure to connect Bluetooth devices vulnerability in multiple TI products.

VMware Advisory #1 - VMware published an advisory that describes two vulnerabilities in their Aria Operations for Networks product.

VMware Advisory #2 - VMware published an advisory that discusses a SAML token signature bypass vulnerability in their Tools product.

Updates

Broadcom Update #1 - Broadcom published an update for their ASN1_STRING structure advisory that was originally published on September 13^th, 2022.

Broadcom Update #2 - Broadcom published an update for their Apache Commons Text advisory that was originally published on October 20^th, 2022.

Mitsubishi Update - Mitsubishi published an update for their BACnet® secure connect function of GENESIS64 advisory that was originally published on March 7^th, 2023.

Researcher Reports

Unified Automation Report - The Zero Day Initiative published a report describing an integer overflow vulnerability in the Unified Automation UaGateway.

Tinycontrol Reports - Zero Science Lab published three reports about individual vulnerabilities in the Tinycontrol LAN Controller.

 

For more details about these disclosures, including links to 3^rd party reports and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-8-c47 - subscription required.

Review – Public ICS Disclosures – Week of 7-8-23 – Part 1

This week we have 16 vendor disclosures from Aruba Networks, Eaton, Festo, FortiGuard (2), Insyde (3), Moxa (2), Palo Alto Networks, Setelsa, Sick, VMware, and Wireshark (2). We have one vendor update from Moxa. We also have six researcher reports for vulnerabilities in products from VMware (5) and Sante. Finally, we have an exploit for products from Tanzu.

Advisories

Aruba Advisory - Aruba published an advisory that describes nine vulnerabilities in their ArubaOS product.

Eaton Advisory - Eaton published an advisory that reports an undescribed vulnerability in their SMP Gateway automation platform.

Festo Advisory - CERT VDE published an advisory that discusses 200 vulnerabilities in the Festo FactoryViews products.

FortiGuard Advisory #1 - FortiGuard published an advisory that describes a stack-based buffer overflow in their FortiOS and FortiProxy products.

FortiGuard Advisory #2 - FortiGuard published an advisory that describes an insufficient session expiration vulnerability in their FortiOS REST API.

HPE Advisory - HPE published an advisory that describes a privilege escalation vulnerability in their Intelligent Provisioning (IP) for Gen9 product.

Insyde Advisory #1 - Insyde published an advisory that describes an SMI handler vulnerability in their FvbServicesRuntimeDxe.

Insyde Advisory #2 - Insyde published an advisory that reports an update of their Secure Boot dbx.

Insyde Advisory #3 - Insyde published an advisory that discusses a security bypass vulnerability (may be related to the above discussion).

Moxa Advisory #1 - Moxa published an advisory that discusses an uncontrolled recursion vulnerability in some of their switches.

Moxa Advisory #2 - Moxa published an advisory that discusses the PwnKit vulnerability.

Palo Alto Networks Advisory - Palo Alto Networks published an advisory that describes an externally controlled reference to a resource in another sphere vulnerability in their PAN-OS products.

Setelsa Advisory - Incibe CERT published an advisory that describes a relative path traversal vulnerability in the Setelsa ConacWin product.

Sick Advisory - Sick published an advisory that describes eight vulnerabilities in their ICR890-4 track and trace system.

VMware Advisory - VMware published an advisory that describes an authentication bypass vulnerability in their SD-WAN product.

Wireshark Advisory #1 - Wireshark published an advisory that describes a dissector crash vulnerability in their Kafka dissector.

Wireshark Advisory #2 - Wireshark published an advisory that describes a dissector crash vulnerability in their iSCSI dissector.

Updates

Moxa Update - Moxa published an update for their Arm-based computer advisory that was originally published on November 22^nd, 2022 and most recently updated on May 29^th, 2023.

Researcher Report

VMware Reports - Talos Intelligence published five reports for individual vulnerabilities in the VMware vCenter product.

Sante Report - The Zero Day Initiative published a report that describes a use after free vulnerability in the Sante DICOM view.

Exploits

Tanzu Exploit - GatoGamer1155 published an exploit for a code injection vulnerability in the Tanzu Spring Cloud product.

 

For more details about these disclosures, including links to researcher reports and third-party advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-7-1e8 - subscription required.

Review – Public ICS Disclosures – Week of 12-10-22 – Part 1

On this Saturday after Cyber Tuesday, for Part 1 we have nineteen vendor disclosures from Aruba Networks, Contec, Eaton, Festo, FortiGuard Labs, GE Gas Power, Hitachi Energy (4), HP (7), IFM Electronic, and Phoenix Contact.

Vendor Disclosures

Aruba Advisory - Aruba published an advisory that describes thirteen vulnerabilities in their EdgeConnect Enterprise Orchestrator.

CONTEC Advisory - JPCERT published an advisory that describes four vulnerabilities in the CONTEC SolarView Compact. CONTEC has new versions that mitigate the vulnerabilities.

Eaton Advisory - Eaton published an advisory that describes two vulnerabilities in their Intelligent Power Protector (IPP) software.

Festo Advisory - CERT-VDE published an advisory that discusses a link following vulnerability in multiple Festo products.

FortiGuard Advisory - FortiGuard published an advisory that describes a heap-based buffer overflow vulnerability in their FortiOS SSL-VPN.

GE Gas Power - GE published an advisory that discusses two vulnerabilities in FortiOS.

Hitachi Energy Advisory #1 - Hitachi published an advisory that describes five vulnerabilities in their UNEM Product.

Hitachi Energy Advisory #2 - Hitachi published an advisory that describes five vulnerabilities in their FOXMAN-UN Product.

Hitachi Energy Advisory #3 - Hitachi published an advisory that discusses three vulnerabilities in their Lumada Asset Performance Management (APM) Product.

Hitachi Energy Advisory #4 - Hitachi published an advisory that describes an access control vulnerability in their Lumada APM Product. Hitachi

HP Advisory #1 - HP published an advisory that describes five vulnerabilities (one third-party) in their Security Manager product.

HP Advisory #2 - HP published an advisory that discusses five vulnerabilities in their AMD Client UEFI Firmware.

HP Advisory #3 - HP published an advisory that describes a Time-of-Check to Time-of-Use (TOCTOU) vulnerability in their PC BIOS.

HP Advisory #4 - HP published an advisory that discusses an improper restriction of operations within  the bounds of a memory buffer vulnerability in a wide variety of their PCs.

HP Advisory #5 - HP published an advisory that discusses the Text4Shell vulnerability in their Teradici Cloud Access Connector.

HP Advisory #6 - HP published an advisory that describes a privilege escalation vulnerability in their HyperX NGENUITY software.

HP Advisory #7 - HP published an advisory that describes a Time-of-Check to Time-of-Use (TOCTOU) vulnerability in their AMI UEFI Firmware.

IFM Advisory - CERT-VDE published an advisory that describes a weak password recovery vulnerability in the IFM moneo appliance.

Phoenix Contact Advisory - Phoenix Contact published an advisory that discusses two vulnerabilities in their PROFINET SDK product.

 

For more information on these disclosures, including links to third-party advisories and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-12-9ea - subscription required.