Review – 2 Advisories and 1 Update Published – 2-28-23

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Hitachi. They also updated an advisory for products from Mitsubishi.

Advisories

Hitachi Advisory #1 - This advisory describes three vulnerabilities in the Hitachi Gateway Station (GWS).

NOTE: I briefly reported on these vulnerabilities on February 18^th, 2023.

Hitachi Advisory #2 - This advisory describes two vulnerabilities in the Hitachi Gateway Station (GWS).

NOTE: I briefly reported on these vulnerabilities on February 18^th, 2023.

Updates

Mitsubishi Update - This update provides additional details on an advisory that was originally published on May 19^th, 2022 and most recently updated on May 31^st, 2022.

NOTE: NCCIC-ICS published an ‘Update A’ for this advisory back on May 31^st, 2022, making most of the same corrections marked in today’s ‘Update A’.

 

For more details on these advisories, including discussions about other vendor advisories from the same vendors, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-1-update-published-879 - subscription required.