Review - 3 Advisories Published – 1-5-23

Today, CISA’s NCCIC-ICS published three control system security advisories for products from Hitachi Energy. I briefly discussed the three Hitachi Energy advisories that form the basis for these advisories back on December 17^th, 2022. Hitachi Energy published on other advisory that day that has not yet been addressed by NCCIC-ICS.

Lumada Advisory - This advisory discusses three vulnerabilities (one with known exploits) in the Hitachi Energy Lumada Asset Performance Management software.

FOXMAN-UN Advisory - This advisory describes five vulnerabilities in the Hitachi Energy FOXMAN-UN products.

UNEM Advisory - This advisory describes five vulnerabilities in the Hitachi Energy UNEM products.

 

For more details about these advisories, including links to third-party vulnerabilities and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-published-1-5-23 - subscription required.