Review – 9 Updates Published – 10-13-22

Yesterday, CISA’s NCCIC-ICS published nine control system security advisory updates for products from Mitsubishi (2) and Siemens (7). Mitsubishi updated one additional advisory yesterday and Siemens updated four more on Tuesday, I will cover those this weekend.

Mitsubishi Update #1 - This update provides additional information on an advisory that was originally published on September 7^th, 2021.

Mitsubishi Update #2 - This update provides additional information on an advisory that was originally published on October 14^th, 2021.

PROFINET Update - This update provides additional information on an advisory that was originally published on April 14^th, 2022 and most recently updated on August 11^th, 2022.

SINEC Update - This update provides additional information on an advisory that was originally published on March 13^th, 2022.

SCALANCE Update #1 - This update provides additional information on an advisory that was originally published on October 14^th, 2021.

SCALANCE Update #2 - This update provides additional information on an advisory that was originally published on November 11^th, 2021.

Apache Update - This update provides additional information on an advisory that was originally published on June 16th, 2022.

OpenSSL Update - This update provides additional information on an advisory that was originally published on June 16^th, 2022 and most recently updated on September 15^th, 2022.

Industrial Products Update - This update provides additional information on an advisory that was originally published on May 12^th, 2022 and most recently updated on August 16^th, 2022.

 

For more information on these updates, including a brief summary of the changes made, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/9-updates-published-10-13-22 - subscription required.