Review - 3 Advisories and 1 Update Published – 8-24-21

Today CISA’s NCCIC-ICS published three control system security advisories for products from Delta Electronics and Hitachi ABB (2). They also updated an advisory for products from Advantech.

Delta Advisory - This advisory describes a heap-based buffer overflow vulnerability in the Delta TPEditor.

Hitachi ABB Advisory #1 - This advisory describes an insufficiently protected credential vulnerability in the Hitachi ABB Retail Operations and Counterparty Settlement Billing products.

Hitachi ABB Advisory #2 - This advisory discusses the FragAttacks WiFi vulnerabilities in the Hitachi ABB TropOS Product.

Advantech Update - This update provides additional information on an advisory that was originally reported on June 17^th, 2021.

 

For more details on the advisories, see my article on CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-and-1-update-published-e37 - subscription required.