ICS Advisory: Rockwell Automation FactoryTalk Services Platform

  • Post author:
  • Post category:

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: FactoryTalk Services Platform Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could use a token to log into the system. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Rockwell Automation reports that the following products are affected: FactoryTalk Services

Continue ReadingICS Advisory: Rockwell Automation FactoryTalk Services Platform

ICS Advisory: Rockwell Automation FactoryTalk View Site Edition

  • Post author:
  • Post category:

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk View Site Edition Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could cause the product to become unavailable and require a restart to recover resulting in a denial-of-service condition. 3. TECHNICAL DETAILS 3.1

Continue ReadingICS Advisory: Rockwell Automation FactoryTalk View Site Edition

ICS Advisory: Rockwell Automation Arena

  • Post author:
  • Post category:

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: Arena Vulnerabilities: Out-of-Bounds Read, Access of Uninitialized Pointer 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code by using a memory buffer overflow or using an uninitialized pointer in the application. 3.

Continue ReadingICS Advisory: Rockwell Automation Arena

ICS Advisory: Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium

  • Post author:
  • Post category:

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Ashlar-Vellum Equipment: Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share Vulnerabilities: Out-of-Bounds Write, Heap-based Buffer Overflow, Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following

Continue ReadingICS Advisory: Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium

EPA penalizes Town of Coulee Dam over $70,000 for Clean Water Act violations

  • Post author:
  • Post category:

EPA penalizes Town of Coulee Dam over $70,000 for Clean Water Act violations Wastewater plant failed to meet basic requirements of pollutant discharge permit October 26, 2023 Contact Information R10 Public Affairs Office (R10_Press_Team@epa.gov) SEATTLE – The U.S. Environmental Protection Agency announced today that the Town of Coulee Dam, Washington will pay $70,881 for violations

Continue ReadingEPA penalizes Town of Coulee Dam over $70,000 for Clean Water Act violations