ICSA-22-111-01
·
Published 2022-04-21
·
View on CISA ICS-CERT ↗
Delta Electronics ASDA-Soft
CVSS 7.8
HIGH
Risk Summary
Successful exploitation of these vulnerabilities may allow arbitrary code execution.
CVEs (2)
Remediations
- Delta Electronics has released an updated version of ASDA-Soft and recommends users install v5.5.0.0 and later on all affected systems.
- Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the Internet.
- Locate control system networks and remote devices behind firewalls and isolate them from the business network.
- When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing a VPN is only as secure as its connected devices.
Affected Vendors
Delta Electronics
Affected Products (1)
Delta Electronics
·
ASDA-Soft
<= 5.4.1.0
Affected Sectors
Critical Manufacturing
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more