CISA Warns of Flaws Affecting Industrial Control Systems from Major Manufacturers

The U.S. Cybersecurity and Infrastructure Security Agency CISA has released several Industrial Control Systems ICS advisories warning of critical security flaws affecting products from Sewio, InHand Networks, Sauter Controls, and Siemens. The most severe of the flaws relate to Sewio's RTLS Studio...

CVE-2023-22600

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control. They allow unauthenticated devices to subscribe to MQTT topics on the same network as the device manager. An...

CVE-2023-22600

Summary (CVE-2023-22600) InHand Networks InRouter 302 (pre-IR302 V3.5.56) and InRouter 615 (pre-InRouter6XX-S-V2.3.0.r5542) are affected by CWE-284: Improper Access Control. An unauthenticated device on the same network can subscribe to MQTT topics on the device manager network, and an attacker w...