Category: Security Updates

April 2024 security update

4/30/2024

Summary of security related changes for April 2024.

Vulnerability Update:
No firmware release this month.

Operational Update:
No firmware release this month.

Cybersecurity Update:
No firmware release this month.

april_2024_security_update.pdf
File Size:	128 kb
File Type:	pdf

Download File

0 Comments

march 2024 security update

4/19/2024

0 Comments

Summary of security related changes for March 2024.

Vulnerability Update:
No firmware release this month.

Operational Update:
No firmware release this month.

Cybersecurity Update:
No firmware release this month.

march_2024_security_update.pdf
File Size:	128 kb
File Type:	pdf

Download File

0 Comments

February 2024 security update

2/29/2024

0 Comments

Summary of security related changes for February 2024.

Vulnerability Update:
No firmware release this month.

Operational Update:
No firmware release this month.

Cybersecurity Update:
No firmware release this month.

February_2024_security_update.pdf
File Size:	127 kb
File Type:	pdf

Download File

0 Comments

january 2024 security update

1/31/2024

0 Comments

Summary of security related changes for January 2024.

Vulnerability Update:
No firmware release this month.

Operational Update:
No firmware release this month.

Cybersecurity Update:
No firmware release this month.

january_2024_security_update.pdf
File Size:	664 kb
File Type:	pdf

Download File

0 Comments

november 2023 security update

11/30/2023

0 Comments

Summary of security related changes for November 2023.

Vulnerability Update:
No firmware release this month.

Operational Update:
No firmware release this month.

Cybersecurity Update:
No firmware release this month.

november_2023_security_update.pdf
File Size:	663 kb
File Type:	pdf

Download File

0 Comments

october 2023 security updates

10/31/2023

0 Comments

Summary of security related changes for October 2023.

Vulnerability Update:

None

Operational Update:

DNPM: Fixed test for correctly formed DNP3 application headers when received from outstation. Test caused incorrect reject of application header in data responses.
GUI: Improved error detection in malloc and calloc calls to prevent GUI task from crashing due to bad pointers.

Cybersecurity Update:

None

october_2023_security_update.pdf
File Size:	563 kb
File Type:	pdf

Download File

0 Comments

september 2023 security updates

10/2/2023

0 Comments

Summary of security related changes for September 2023.

Vulnerability Update:
No firmware release this month.

Operational Update:
No firmware release this month.

Cybersecurity Update:
No firmware release this month.

september_2023_security_update.pdf
File Size:	663 kb
File Type:	pdf

Download File

0 Comments

august 2023 security updates

8/31/2023

0 Comments

Summary of security related changes for August 2023.

Vulnerability Update:
No firmware release this month.

Operational Update:
No firmware release this month.

Cybersecurity Update:
No firmware release this month.

august_2023_security_update.pdf
File Size:	664 kb
File Type:	pdf

Download File

0 Comments

july 2023 SECURITY UPDATES

8/3/2023

0 Comments

Summary of security related changes for July 2023.

Vulnerability Update:
No firmware release this month.

Operational Update:
No firmware release this month.

Cybersecurity Update:
No firmware release this month.

july_2023_security_update.pdf
File Size:	663 kb
File Type:	pdf

Download File

0 Comments

june 2023 SECURITY UPDATES

7/3/2023

0 Comments

Summary of security related changes for June 2023.

Vulnerability Update:

VxWorks: OS updated to version 6.9.4.12 RCPL6. Improves the protection against SSH brute force password authentication attacks by making this authentication method optional. If password authentication is enabled, a progressive time delay between incorrect SSH logins is now applied. If the default threshold of consecutive failed password logins occurs, the attempting source IP address is then banned for a period of time. Also removes low security ciphers from OpenSSL and SSH libraries.

Operational Update:

OpenSSL: HTTPS protocol has been updated to use the OpenSSL 1.0.2.zf version.
Webserver: Improved server-side validation of data to reduce risk of configuration data corruption.
WEB GUI: SSH Server password authentication is now a user-defined option, disabled by default only SSH key authentication is allowed, greatly reducing risk of brute force attacks attempting to gain user access. User will enable SSH Password authentication if wanting to use this authentication method.
DNPR: Improved network packet handling of malformed DNP3 packets.
ModbusM: Changed size of sequential numeric break in register range that forces new data request messages to be size of 1 register, so if register 1 and register 3 are to be read, this will create 2 unique reads for register 1 and 3, instead of 1 read for 3 registers 1, 2, and 3.

Cybersecurity Update:

SSH shell password authentication is now optional, selected by customer. Now the default authentication method is Key Pair authentication. User must enable password authentication if this feature is desired. When password authentication is enabled, a limited number of incorrect entries is allowed, with an increasing time delay between prompts for user credentials. After specific number of failures, the source IP address is banned for a period of time from making further connections.

june_2023_security_update.pdf
File Size:	577 kb
File Type:	pdf

Download File

0 Comments

<<Previous

Updates and News

April 2024 security update

march 2024 security update

February 2024 security update

january 2024 security update

november 2023 security update

october 2023 security updates

september 2023 security updates

august 2023 security updates

july 2023 SECURITY UPDATES

june 2023 SECURITY UPDATES

Categories

Archives

Services

Company

Support