Review - 2 Advisories Published – 9-7-21

Today CISA’s NCCIC-ICS published two control system security advisories for products from Hitachi ABB Power Grids and Mitsubishi Electric.

Hitachi ABB Advisory - This advisory describes a cleartext storage of sensitive information vulnerability in the Hitachi ABB System Data Manager product.

Mitsubishi Advisory - This advisory describes three vulnerabilities in the Mitsubishi MELSEC iQ-R Series CPU Module.

NOTE: I have previously discussed both sets of vulnerabilities.

 

For more details on the advisories, including a link to a researcher report, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-9-7-21 - subscription required.