Public ICS Disclosures – Week of 4-23-22

Part 1

This is another busy week necessitating two-part coverage. In part 1 this week we have nineteen vendor disclosures from ABB, Bender, Bosch, Braun (2), DrayTek, Eaton (5), HPE, Meile, PEPPERL+FUCHS, Philips (2), and Pilz (3).

ABB Advisory

ABB published an advisory discussing six vulnerabilities in their AC 500 PLCs. These are third-party (CODESYS) vulnerab…