Today CISA’s NCCIC-ICS published two control system security advisories for products from Swann and Inductive Automation.
Advisories
Swann Advisory - This advisory describes three missing authentication for critical function vulnerabilities in the Swann Communications SWIFI-SE2KIC WiFi camera. The vulnerabilities were reported to CISA by Elliott Phillips.
Inductive Automation Advisory - This advisory describes an incorrect authorization vulnerability in the Inductive Automation Ignition Software. The vulnerability was reported by Tim Hemingway.