Every week, we catalog the major industrial cybersecurity vulnerabilities and updates you should know about. Here are the notable threats from the week of October 2 - 8. Sign up to get these updates right to your inbox!
Cisco released security updates for their Enterprise NFV Infrastructure Software, Expressway Series and TelePresence Video Communication Server due to vulnerabilities found that could lead to an attacker gaining control of affected systems.
Sources: Cisco Advisory, CISA
Rockwell Automation FactoryTalk VantagePoint software contains improper access control and SQL injection vulnerabilities that could lead to remote code execution.
HIWIN Robot System Software (HRSS) contains an improper access control vulnerability that could lead to a denial-of-service condition.
Sources: HIWIN Technical Support, CISA
Hitachi Energy Modular Switchgear Monitoring (MSM) contains cross-site request forgery (CSRF) and HTTP response splitting vulnerabilities that could lead to malicious command injection and trick a valid user into downloading malicious software onto their computer.
Sources: Hitachi Energy Advisory, CISA
The FBI and CISA published a joint PSA on malicious cyber activity against election infrastructure that explains their findings.
Sources: Joint PSA, CISA
Johnson Controls Metasys ADX Server running MVE contains an improper authentication that could allow an active directory user to execute validated actions without providing a valid password.
Sources: Johnson Controls Security Advisory, CISA
Horner Automation Cscape contains out-of-bounds write and access of uninitialized pointer vulnerabilities that could lead to arbitrary code execution.
Sources: Horner Automation Update, CISA
OMRON CX-Programmer contains an out-of-bounds write vulnerability that could lead to arbitrary code execution or crash the device.
Sources: Omron release, CISA
BD Totalys MultiProcessor contains a use of hard-coded credentials vulnerability that could allow an attacker to access, modify or delete sensitive information.
Sources: BD Security Bulletin, CISA
Impacket and Exfiltration Tool was used to steal sensitive information from the Defense Industrial Base (DIB) Sector organization's enterprise network.
Sources: CISA
CISA issued Binding Operational Directive 23-01: Improving Asset Visibility and Vulnerability Detection on Federal Networks.
Sources: CISA Directive, CISA
