Every week, we catalog the major industrial cybersecurity vulnerabilities and updates you should know about. Here are the notable threats from the week of August 21 - 27. Sign up to get these updates right to your inbox!
Cisco released security updates for ACI Multi-Site Orchestrator, FXOS and NX-OS software due to vulnerabilities found that could lead to an attacker gaining control of affected systems.
Sources: Cisco Security Advisories, CISA
FATEK Automation FvDesigner contains an out-of-bounds write vulnerability that could lead to remote code execution.
Sources: FATEK Customer Support, CISA
Delta Industrial Automation DIALink contains a use of hard-coded cryptographic key vulnerability that could lead to the exposure of sensitive data.
Sources: Delta Electronics, CISA
Measuresoft ScadaPro Server contains an out-of-bounds write vulnerability that could lead to arbitrary code execution.
Sources: Measuresoft, CISA
Hitachi Energy RTU500 Series contains a stack-based buffer overflow vulnerability.
Sources: Hitachi Energy Advisory, CISA
Measuresoft ScadaPro Server and Client contain untrusted pointer dereference, stack-based buffer overflow, use after free and link following vulnerabilities.
Sources: CISA
VMware released a security update due to a vulnerability found in Tools.
Sources: VMware Security Advisory, CISA
Mozilla released security updates for Firefox, Firefox ESR and Thunderbird due to vulnerabilities found that could lead to an attacker gaining control of affected systems.
Sources: Firefox Advisory, Firefox ESR Advisory, Thunderbird Advisory, CISA
