2 Advisories Published – 2-1-24

Today, CISA’s NCCIC-ICS published two control system security advisories for products from AVEVA and Gessler. I also look at another ‘missing advisory’.

AVEVA Advisory

This advisory describes an uncontrolled search path element vulnerability in the AVEVA Edge products (formerly known as InduSoft Web Studio). The vulnerability was reported separately by Ti…