[Control systems] HEIDENHAIN security advisory (AV22-603)

Number: AV22-603
Date: 26 October 2022

On 25 October 2022, ICS-CERT published an ICS Advisory to address a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following product:

• HEIDENHAIN Controller TNC 640 – version 340590 07 SP5 running HEROS 5.08.3 controlling HARTFORD 5A-65E CNC machine

Exploitation of this vulnerability could result in information disclosure, data modification or denial of service.

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

• ICS Advisory (ICSA-22-298-02)