[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fssHl7PeubGpifczmcFNPQhYk7UdOJ_wYzmFn5IkQflg":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":16,"created_at":17,"published_at":18,"article":19,"tags":23,"podcasts":36},"d0fd1d6c-1825-40b4-98d5-a76c16f446bf","critical-library-vulnerabilities-in-industrial-control-systems-enable-dos-attacks","4ac6de87-77af-4cfc-b8c8-7600bdd6b112","Critical Library Vulnerabilities in Industrial Control Systems Enable DoS Attacks","Two high-severity vulnerabilities in Hitachi Energy's ITT600 Explorer stem from flaws in the underlying libexpat library used for IEC 61850 protocol handling. Attackers with local access or the ability to send malicious IEC 61850 messages can trigger stack overflow or resource exhaustion, causing denial of service in critical industrial control systems. This highlights the cascading risk when third-party libraries contain vulnerabilities that affect specialized industrial equipment. Organizations using IEC 61850 server simulation functionality are particularly at risk until they upgrade to version 2.1 SP6 or later.","**Immediate actions:**\n- Upgrade ITT600 Explorer to version 2.1 SP6 or later immediately\n- Restrict local access to affected systems until patching is complete\n- Monitor IEC 61850 network traffic for suspicious message patterns\n\n**Long-term improvements:**\n- Implement automated vulnerability scanning specifically for industrial control system components\n- Maintain comprehensive inventory of all third-party libraries used in critical infrastructure\n- Establish network segmentation to isolate IEC 61850 communications from untrusted networks\n\n**Detection measures:**\n- Deploy monitoring for abnormal resource consumption on ITT600 systems\n- Set up alerting for stack overflow attempts or DoS conditions on industrial control networks",[12,13,14,15],"CIS Control 7 (Continuous Vulnerability Management)","NIST SP 800-82 (Industrial Control Systems Security)","IEC 62443-3-3 (System Security Requirements)","NIST CSF PR.IP-12 (Vulnerability Management Plan)","published","2026-06-04T16:09:09.588332+00:00","2026-06-04T16:09:09.506+00:00",{"id":7,"url":20,"slug":21,"title":22},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-155-02","hitachi-energy-itt600-explorer-e8284b","Hitachi Energy ITT600 Explorer",[24,30],{"id":25,"name":26,"slug":27,"description":28,"color":29},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":31,"name":32,"slug":33,"description":34,"color":35},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",[]]