ics-cert

ICS-CERT has released an advisory on a Schneider Electric InduSoft Web Studio and InTouch Machine Edition vulnerability. For InduSoft Web Studio, v8.0 SP2 Patch 1 and prior versions are affected; for InTouch Machine Edition, v8.0 SP2 Patch 1 and prior versions are affected. Successful exploitation of this vulnerability could allow a remote un-authenticated attacker to remotely execute code with high privileges. For both products, Schneider Electric recommends users upgrade to v8.1 as soon as possible.

ICS-CERT has released an advisory on an ABB FOX515T vulnerability. FOX515T release 1.0 is affected. Successful exploitation of this vulnerability could allow for a local attacker to craft a malicious script that would enable retrieval of any file on the server. ABB reports that the product has been phased out and has reached obsolete status. No further maintenance is planned for the product. ICS-CERT recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability.

ICS-CERT has released an advisory on a Korenix JetNet vulnerability. Numerous versions of JetNet, an Ethernet switch, are affected. Successful exploitation of these vulnerabilities could allow a remote attacker to gain remote access to the device to run arbitrary code and perform man-in-the-middle attacks. Korenix has produced new firmware that removes the undocumented hard-coded credentials from supported systems. ICS-CERT.

ICS-CERT has released an advisory on a Progea Movicon SCADA/HMI vulnerability. Movicon Version 11.5.1181 and prior are affected. Successful exploitation of these vulnerabilities could allow privilege escalation or arbitrary code execution. Progea has not provided an update to address these vulnerabilities, however, it has issued a knowledge base article about DLL Hijacking. NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities.