1 Advisory and 1 Update Published – 11-2-21

Today CISA’s NCCIC-ICS published a control system security advisory for products from Johnson Controls. They also updated an advisory for products from WECON.

Johnson Controls Advisory

This advisory discussing a cross-site scripting vulnerability in the Johnson Controls (their American Dynamics brand) VideoEdge network video recorder. This is a third-part…