The following vulnerabilities have been identified: default credentials, privilege escalation, unauthorized information interception, and unauthorized information access. These vulnerabilities also affect the legacy Richards-Zeta Mediator products. ICS-CERT has no information to indicate that these infections have specifically targeted United States Critical Infrastructure and Key Resources (CIKR), or any specific sector or organization.Ī cross-site scriptinga vulnerability exists in the system used by the ABB Electrical Distribution Management System (DMS) product netCADOPS to generate online Help.Ĭisco has identified multiple security vulnerabilitiesa in the Cisco Network Building Mediator (NBM) products. ICS-CERT has received reports and investigated infections of the Mariposaa botnet, which have affected the business networks of multiple control system owners in recent months. Rockwell Automation has identified a security vulnerability in the programming and configuration client software authentication mechanism employed by certain versions of the PLC-5 and SLC 5/0x family of programmable controllers. Rockwell PLC5/SLC5/0x/RSLogix Security Vulnerability This vulnerability is likely exploitable however, significant user interaction would be required. Rockwell Automation RSLinx Classic EDS Vulnerability (Update A)Ī buffer overflow vulnerability exists in the Rockwell Automation RSLinx Classic EDS Hardware Installation Tool (RSHWare.exe).

Kepserverex eds file