Topic

Software Update Security

The security of the mechanisms that authenticate, sign and deliver software updates to deployed systems and devices.

Current clusters

Hardcoded server key lets an attacker push updates to Wärtsilä FOS-Onboard installations

CISA published the advisory on September 15 covering FOS-Onboard 5.07.0923.01. Wärtsilä has built a patch, but users have to contact the company to get it, so the schedule sits with fleet service.

Publishers:cisa.gov

Reality

Evidence70
Adoption: Insufficient
Hype gap0
Incentives45
Confidence68