Introducing security for unmanaged devices in the Enterprise network with Microsoft Defender for IoT

How many IoT devices are used at your company? If yours is like most organizations, there are probably printers, scanners, and fax machines scattered around the office. Perhaps smart TVs are mounted at reception or in the break room to guide visitors and keep employees up-to-date on company event...

Integer overflow

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

UBUNTU-CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

Malicious Package

Overview eslint-config-ot-node is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

HarfBuzz 输入验证错误漏洞

HarfBuzz is a text engine for OpenType fonts. HarfBuzz v4.3.0 is vulnerable to a denial of service vulnerability caused by an integer overflow in the hb-ot-shape-fallback.cc component, which can be exploited to cause a denial of service DoS via an unspecified vector...

JTEKT TOYOPUC Missing Authentication For Critical Function (CVE-2022-29951, CVE-2022-29958)

The device may be vulnerable to flaws related to OT:ICEFALL. These vulnerabilities identify the insecure-by-design nature of OT devices and may not have a clear remediation path. As such, Nessus is unable to test specifically for these vulnerabilities but has identified the device to be one that...

Discovery of 56 OT Device Flaws Blamed on Lackluster Security Culture

Researchers discovered 56 vulnerabilities affecting devices from 10 operational technology OT vendors, most of which they’ve attributed to inherent design flaws in equipment and a lax approach to security and risk management that have been plaguing the industry for decades, they said. The...

Honeywell Safety Manager Missing Authentication For Critical Function (CVE-2022-30313, CVE-2022-30314, CVE-2022-30315, CVE-2022-30316, CVE-2022-30317)

The device may be vulnerable to flaws related to OT:ICEFALL. These vulnerabilities identify the insecure-by-design nature of OT devices and may not have a clear remediation path. As such, Nessus is unable to test specifically for these vulnerabilities but has identified the device to be one that...

Honeywell Saia Burgess PG5 PCD Authentication Bypass Using an Alternate Path or Channel (CVE-2022-30319, CVE-2022-30320)

The device may be vulnerable to flaws related to OT:ICEFALL. These vulnerabilities identify the insecure-by-design nature of OT devices and may not have a clear remediation path. As such, Nessus is unable to test specifically for these vulnerabilities but has identified the device to be one that...

Researchers Disclose 56 Vulnerabilities Impacting OT Devices from 10 Vendors

Nearly five dozen security vulnerabilities have been disclosed in devices from 10 operational technology OT vendors due to what researchers call are "insecure-by-design practices." Collectively dubbed OT:ICEFALL by Forescout, the 56 issues span as many as 26 device models from Bently Nevada,...

Phoenix Contact Classic Line Industrial Controllers

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Phoenix Contact Equipment: ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC 191 ETH 2TX, ILC 191 ME/AN, and AXC 1050 Vulnerability: Missing Authentication for Critical...

Malicious code in ot-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab9194494d10b8be6fc355bb6a996bcd9ab0a2e767a5550e67398add519443e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5136 Malicious code in ot-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab9194494d10b8be6fc355bb6a996bcd9ab0a2e767a5550e67398add519443e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5143 Malicious code in ot-toy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2616bb98348c6be68c984816e4f9ae80390f91783d51fbb3fe5042fc8170b64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ot-toy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2616bb98348c6be68c984816e4f9ae80390f91783d51fbb3fe5042fc8170b64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ot-react-jed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0574cb4ea383b8052f1c219b948ad039f3f094701d5eaadbccf4f8c1c5ec31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5142 Malicious code in ot-react-jed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0574cb4ea383b8052f1c219b948ad039f3f094701d5eaadbccf4f8c1c5ec31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

State of OT Security in 2022: Big Survey Key Insights

Learn about the state of OT Security in 2022 by reading the key insights found through surveying more than 900 ICS business and security leaders in the US, Germany and Japan...

Rockwell Automation Logix Controllers Uncontrolled Resource Consumption (CVE-2022-1797)

The remote OT product is vulnerable as specified in advisory ICSA-22-144-01. - A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of- service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the targe...