Review – 5 Updates Published – 8-18-22

 Today, CISA’s NCCIC-ICS published five control system security updates for products from Siemens (3) and Mitsubishi (2).

 Siemens Update #1 - This update provides additional information on the Siemens Linux Products advisory that was originally published on May 11^th, 2021 and most recently updated on August 11^th, 2022.

NOTE: These products were added to the Siemens advisory last week, which was the same version upon which the last NCCIC-ICS update (Update H) was based.

Siemens Update #2 - This update provides additional information on the Siemens Industrial Products advisory that was originally published on July 11^th, 2021 and most recently updated on August 11^th, 2022.

NOTE: These products were added to the Siemens advisory last week, which was the same version upon which the last NCCIC-ICS update (Update C) was based.

Siemens Update #3 - This update provides additional information on the Siemens OpenSSL advisory that was originally published on June 16^th, 2022 and most recently updated on July 14^th, 2022.

NOTE: This is one of the NCCIC-ICS ‘not updated’ advisories that I discussed last Sunday.

Mitsubishi Update #1 - This update provides additional information on the Mitsubishi Multiple Factory Automation Products advisory that was originally published on August 9^th, 2022.

Mitsubishi Update #2 - This update provides additional information on the Mitsubishi MELSEC iQ-R, Q, L Series advisory that was originally published on June 21^st, 2022.

 

For more information about these updates, including a discussion of the management of change problems (not NCCIC-ICS problems) that led to two of the Siemens updates, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/5-updates-published-8-18-22 - subscription required.