• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer
Association of Clean Water Administrators

Association of Clean Water Administrators

The Voice of States & Interstates since 1961

  • Log in here. Already an ACWA member?
Search
MenuMenu
Login
  • Focus Areas
    • Overview
    • Legislation, Regulation and Litigation
    • Monitoring, Standards and Assessment
    • Nutrients Policy
    • Permitting, Compliance and Enforcement
    • Watersheds, TMDLs and Nonpoint Sources
  • Events
    • Overview
    • Event Calendar
  • Documents
    • All Documents
    • Meeting Materials
  • Tools
  • Members
    • Our Members
    • Join Us
    • New Members
    • Committees
    • Awards
  • About
    • About ACWA
    • Staff
    • Leadership
    • Partnerships and Collaboration
    • Financials
    • Celebrating the CWA
  • Contact
Home > Documents > WaterISAC-EPA Joint Advisory_BlackBerry QNX_BadAlloc_FINAL

WaterISAC-EPA Joint Advisory_BlackBerry QNX_BadAlloc_FINAL

Posted: August 18, 2021

On August 17, 2021, BlackBerry publicly disclosed that its QNX Real Time Operating System (RTOS) is affected by a BadAlloc vulnerability—CVE-2021-22156. BadAlloc is a collection of vulnerabilities affecting multiple RTOSs and supporting libraries. A remote attacker could exploit CVE-2021-22156 to cause a denial-of-service condition or execute arbitrary code on affected devices. Every water and wastewater utility should determine the presence of impacted RTOS devices within their environments. Asset owners are encouraged to check this original CISA ICS Advisory (ICSA-21-119-04) Multiple RTOS (Update B) for a partial list of impacted products. In addition, asset owners should work with IT and OT support staff, system integrators, and ICS and IoT manufacturers to determine if any process control systems are vulnerable to this flaw and consider patching or applying appropriate compensating controls/workarounds immediately until a patch can be applied.

WaterISAC-EPA Joint Advisory_BlackBerry QNX_BadAlloc_FINAL

Download PDF (199.62 KB)

More documents like this

Document Types

  • Resources

Primary Sidebar

Recent Documents

  • Association of Clean Water Administrators – Letter: Upcoming Efforts to Revise the Definition of “Waters of the United States”

    May 16, 2025
  • Association of Clean Water Administrators Comments on Proposed MSGP Permit

    April 29, 2025
  • ACWA 2025 Annual Meeting – Draft Agenda

    April 24, 2025

Footer

ACWA

The Association of Clean Water Administrators

nonprofit [501(c)3] organization

1725 I Street NW
Suite 225
Washington, DC 20006

Phone: (202) 756-0605
Fax: (202) 793-2600

  • LinkedIn
  • RSS
  • Twitter

Learn More

  • Meeting Materials
  • Weekly Wrap
  • Job Opportunities
  • Nondiscrimination Policies

Are you an ACWA Member?

Log In

Our Member365 site gives you the opportunity to talk to your fellow members and gain insights!

Not a member? Learn how to join ACWA.

- Site by Rocketkoi -