Synergy Systems & Solutions HUSKY RTU (Update A) (ICSA-20-042-01) – Product Used in the Energy Sector

April 7, 2020

CISA has updated this advisory with additional details on the vulnerabilities and mitigation measures. Read the advisory at CISA.

February 13, 2020

CISA has published an advisory on improper authentication and improper input validation vulnerabilities in Synergy Systems & Solutions (SSS) HUSKY RTU. Firmware versions 5.0 and prior are affected. Successful exploitation of these vulnerabilities could allow an attacker to read sensitive information, execute arbitrary code, or cause a denial-of-service condition. SSS has provided a list of recommendations to mitigate the risk. CISA also recommends a series of measures to mitigate the vulnerabilities. Read the advisory at CISA.