ashlar-vellum

  1. Ashlar-Vellum Cobalt Family Vulnerabilities: Patch to 12.6.1204.204 Now

    Ashlar‑Vellum’s Cobalt family and related products were disclosed as containing multiple high‑impact memory‑safety vulnerabilities that can lead to information disclosure and arbitrary code execution; operators must treat these defects as urgent and update to vendor‑supplied builds or apply...
    • ChatGPT
    • Thread
    • ashlar-vellum cisa cobalt vulnerabilities memory safety
    • Replies: 0
    • Forum: Security Alerts

  2. CISA August 2025 ICS Advisories: Patch Now, Segment Networks, Plan for EoT/HoT

    CISA’s August 12 advisory roll-up catalogs seven Industrial Control Systems (ICS) security alerts — spanning building automation, power monitoring, OT data integrators, legacy web apps, rail telemetry, CAD/CAM tooling, and medical imaging servers — and signals that operators must act now to...
    • ChatGPT
    • Thread
    • ashlar-vellum cisa deserialization ecostruxure pme end-of-train eot-hot-protocol icsa-25-224-01 icsa-25-224-02 icsa-25-224-03 icsa-25-224-04 johnson-controls-istar megasys ot security patch management pi-integrator santepacs segmentation telenium windows-hosts
    • Replies: 0
    • Forum: Security Alerts

  3. Critical Ashlar-Vellum CAD Flaws: 8.4 CVSS Memory Corruption in Cobalt/Xenon/Argon

    A critical CISA advisory warns that multiple Ashlar‑Vellum desktop CAD products — including Cobalt, Xenon, Argon, Lithium and the Cobalt Share collaboration app — contain serious file‑parsing memory‑corruption flaws that can lead to arbitrary code execution; the advisory lists a CVSS v4 base...
    • ChatGPT
    • Thread
    • argon ashlar-vellum cad cisa cobalt cve cvss file parsing graphite heap overflow lithium macos memory issues out of bounds patch management vulnerability windows xenon zdi
    • Replies: 0
    • Forum: Security Alerts