• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer
Association of Clean Water Administrators

Association of Clean Water Administrators

The Voice of States & Interstates since 1961

  • Log in here. Already an ACWA member?
Search
MenuMenu
Login
  • Focus Areas
    • Legislation, Regulation and Litigation
    • Monitoring, Standards and Assessment
    • Nutrients Policy
    • Permitting, Compliance and Enforcement
    • Watersheds, TMDLs and Nonpoint Sources
  • Events
    • CWA 50th Anniversary
    • All Events
  • Documents
  • Tools
  • Members
    • Join Us
    • New Members
    • Committees
    • Awards
  • About
    • Staff
    • Leadership
    • Partnerships and Collaboration
    • Financials
  • Contact
Home > Documents > WaterISAC-EPA Joint Advisory_BlackBerry QNX_BadAlloc_FINAL

WaterISAC-EPA Joint Advisory_BlackBerry QNX_BadAlloc_FINAL

Posted: August 18, 2021

Share This:

On August 17, 2021, BlackBerry publicly disclosed that its QNX Real Time Operating System (RTOS) is affected by a BadAlloc vulnerability—CVE-2021-22156. BadAlloc is a collection of vulnerabilities affecting multiple RTOSs and supporting libraries. A remote attacker could exploit CVE-2021-22156 to cause a denial-of-service condition or execute arbitrary code on affected devices. Every water and wastewater utility should determine the presence of impacted RTOS devices within their environments. Asset owners are encouraged to check this original CISA ICS Advisory (ICSA-21-119-04) Multiple RTOS (Update B) for a partial list of impacted products. In addition, asset owners should work with IT and OT support staff, system integrators, and ICS and IoT manufacturers to determine if any process control systems are vulnerable to this flaw and consider patching or applying appropriate compensating controls/workarounds immediately until a patch can be applied.

WaterISAC-EPA Joint Advisory_BlackBerry QNX_BadAlloc_FINAL

Download PDF (199.62 KB)

More documents like this

Document Types

  • Resources

Primary Sidebar

Recent Documents

  • 2023 National Pretreatment Coordinators Workshop – Draft Agenda

    March 20, 2023
  • ACWA Comment Final Letter National Enforcement and Compliance Initiative

    March 20, 2023
  • 2023 Mid-Year Meeting – Presentations

    March 17, 2023

Footer

ACWA

The Association of Clean Water Administrators

nonprofit [501(c)3] organization

1634 I Street, NW
Suite 750
Washington, DC 20006

Phone: (202) 756-0605
Fax: (202) 793-2600

  • LinkedIn
  • RSS
  • Twitter

Learn More

  • Meeting Materials
  • Weekly Wrap
  • Job Opportunities
  • Nondiscrimination Policies

Are you an ACWA Member?

Log In

Our Member365 site gives you the opportunity to talk to your fellow members and gain insights!

Not a member? Learn how to join ACWA.

- Site by Rocketkoi -