Review – 2 Advisories and 1 Update Published – 9-12-23

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Fujitsu Software and Hitachi Energy. They also updated an advisory for products from Mitsubishi.

Advisories

Fujitsu Advisory - This advisory describes a cleartext storage of sensitive information vulnerability in the Fujitsu Infrastructure Manager.

Hitachi Energy Advisory - This advisory discusses four vulnerabilities in the Hitachi Energy Lumada Asset Performance Management (APM) Edge.

NOTE: The link to the Hitachi Energy’s version of this advisory returns a ‘does not exist’ error message. Here is a good link.

Updates

Mitsubishi Update - This update provides additional information on an advisory that was originally published on May 23^rd, 2023 and most recently updated on July 6^th, 2023.

 

For more details about these advisories, including links to third-party advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-1-update-published-a0f - subscription required.