Decision Insights Threat Desk

CISA has released four advisories targeting specific vulnerabilities in Industrial Control Systems.

Advantech's DeviceOn/iEdge, an IoT management platform, is subject to multiple vulnerabilities, including XSS and path traversal.

Ubia's Ubox camera system has a vulnerability that allows unauthorized access to camera feeds due to insufficiently protected API credentials. CISA advises users on mitigation strategies, including minimizing network exposure and implementing firewall protections.

ABB's FLXeon Controllers are identified with multiple vulnerabilities, including hard-coded credentials and improper input validation, allowing potential remote exploitation. Users are advised to implement mitigation strategies and update firmware to enhance security.

CISA has issued four Advisories on Industrial Control Systems, detailing security issues and urging users to review for mitigations.

AVEVA disclosed a vulnerability in its Application Server IDE, affecting versions up to 2023 R2 SP1 P02. The issue involves improper HTML tag neutralization, allowing potential XSS code exploitation. Recommended mitigations include updating to a later version and restricting network access.