January 11, 2018
ICS-CERT has updated this advisory with additional details about the vulnerability. ICS-CERT.
January 4, 2018
ICS-CERT has released an advisory on a Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers vulnerability. Multiple versions of this product are affected. Successful exploitation of this vulnerability could cause the device that the attacker is accessing to become unresponsive to Modbus TCP communications and affect the availability of the device. Rockwell Automation encourages affected users to upgrade to the latest version of available firmware, FRN 21.003. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability.
ICS-CERT has released an advisory on a Delta Electronics Delta Industrial Automation Screen Editor vulnerability. Versions 2.00.23.00 and prior are affected. Successful exploitation of these vulnerabilities may allow an attacker to remotely execute arbitrary code. Delta Electronics recommends affected users update to the latest version of DOPSoft Version 2. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability. ICS-CERT.
ICS-CERT has released an advisory on a Schneider Electric Pelco VideoXpert Enterprise vulnerability. All versions prior to 2.1 are affected. Successful exploitation of these vulnerabilities may allow an authorized user to gain system privileges or an unauthorized user to view files. Schneider Electric has released firmware Version 2.1 for VideoXpert to address these vulnerabilities. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability.
ICS-CERT has released an advisory on a Moxa Nport W2150A and W2250A vulnerability. Versions prior to 1.11 in both products are affected. Successful exploitation of this vulnerability could allow unauthorized access. Moxa has produced new firmware Version 2.1 for the affected devices. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability. ICS-CERT.
ICS-CERT has released an alert on a Siemens LOGO! Soft Comfort vulnerability. All versions of LOGO! Soft Comfort prior to V8.2 are affected. Successful exploitation of this vulnerability could allow a remote attacker in a privileged network position to manipulate a software package during download. Siemens removed the Update Center from LOGO! Soft Comfort V8.2 and provides SHA-256 checksums for all LOGO! Soft Comfort software packages via a secured HTTPS channel.
ICS-CERT has released an alert on a PEPPERL+FUCHS/ecom instruments vulnerability. Numerous versions of these products are affected. Successful exploitation of these vulnerabilities could allow an attacker to operate as a “man-in-the-middle” between the device and the wireless access point. For some of the products, PEPPERL+FUCHS/ecom instruments is still working on fixes for the vulnerabilities. For devices running Windows, the company recommends users apply a security update provided by Microsoft.
ICS-CERT has released an alert on an ABB Ellipse vulnerability. The vulnerability affects Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (including Ellipse Select). Successful exploitation of this vulnerability could allow an attacker to discover authentication credentials by sniffing the network traffic. ABB has released several product updates to mitigate the vulnerability. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability.
ICS-CERT has released an alert on a WECON Technology Co., Ltd. LeviStudio HMI vulnerability. All versions of LeviStudio HMI are affected. Successful exploitation of this vulnerability could cause the device that the attacker is accessing to crash; a buffer overflow condition may allow remote code execution. WECON recommends that users update to the latest version. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability. ICS-CERT.
1620 I Street, NW, Suite 500
Washington, DC 20006
1-866-H2O-ISAC (1-866-426-4722)
© 2025 WaterISAC. All Rights Reserved.
