1 Advisory Published – 4-9-24

Today, CISA’s NCCIC-ICS published a control system security advisory for products from SUBNET. I also take a down-the-rabbit-hole look at the utility of reporting CWEs in advisories.

SUBNET Advisory

This advisory describes a reliance on insufficiently trustworthy component vulnerability in the Subnet PowerSYSTEM Server and Substation Server 2021. These (u…