Saint Crit.IX, Who Shook the Control Rooms

Patron of industrial control systems, proprietary protocols, and plants that never stop.

Life

In July 2023 Tom Gol of Armis revealed Crit.IX, a set of flaws in Honeywell's Experion distributed control systems (among them CVE-2023-22435). Some allowed, with crafted messages, code execution on the servers and controllers that run industrial processes. In control rooms, where a reboot is no light decision, bugs like these weigh double.

Prayer

O Saint Crit.IX, who touches the levers of real processes, protect our plants with separated networks and verified protocols. Amen.

How to celebrate

Celebrated by applying Honeywell's patches, segmenting the OT networks and keeping the controllers away from everyone else's.

An exposed control room, a plant at risk.