Rewterz

Rewterz Threat Advisory – Microsoft MSHTML Remote Code Execution Vulnerability

September 7, 2021
Rewterz

Rewterz Threat Advisory – CVE-2021-3766 – Node.js Security Vulnerability

September 8, 2021

Rewterz Threat Advisory – ICS : Hitachi ABB Power Grids System Data Manager

Severity

High

Analysis Summary

CVE-2021-35526

The application does not encrypt backup files. A local operating system user can modify backup files, which may allow an attacker to overwrite system configuration files and gain privileges.

Impact

  • Exposure of Sensitive Data

Affected Vendors

  • Hitachi ABB Power Grids

Affected Products

  • SDM600: All versions prior to 1.2 FP2 HF6

Remediation

Refer to Cert-Cisa Advisory for the patch, upgrade, or suggested workaround information.

https://us-cert.cisa.gov/ics/advisories/icsa-21-250-02

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.