April 2020 Security Update

4/28/2020

Update Summary:

We did release C3414-500-S02K4_P3 firmware update in April 2020, which fixes an issue when using RADIUS after upgrading from a previous secure firmware version. Using the updated configuration converter included in this firmware resolves any potential issues.

There were no vulnerability (CVE) patches released in April 2020.

April_2020_Security_Update.pdf
File Size:	116 kb
File Type:	pdf

Download File

2 Comments

David Fletcher

5/8/2020 09:16:34 am

This post reads like it is a security update as compared to prior non-security updates. Reading the release notes, it does not appear that the update is security related. Can you elaborate on the security issues that are being addressed, if any?

Chris Kerr

5/8/2020 11:34:00 am

Hi David,

Thanks for your question. I'm happy to clarify as best I can.

I mentioned the RADIUS bug fix because it technically is a cybersecurity related change that is addressed in the latest release (K4_P3). If customers wish to use our RADIUS client for centralized authentication to enhance their NERC-CIP compliance, they will need to update to K4_P3. In certain situations (upgrading from previous secure firmware versions), customers could not enable RADIUS, but this fix does not address any flaws or vulnerabilities in the RADIUS client itself.

This as a bug fix to a new cybersecurity feature. If you are not using, or planning to use, RADIUS then this patch is not required.

I hope that clarifies the comment. Let us know if you have any follow up questions.

Updates and News

April 2020 Security Update

Leave a Reply.

Categories

Archives

Services

Company

Support