Review – 2 Advisories Published – 9-5-23

Today, CISA’s NCCIC-ICS published a control system security advisory for products from Fujitsu and a medical device security advisory for products from Softneta.

Advisories

Fujitsu Advisory - This advisory describes a use of hard-coded credentials vulnerability in the Fujitsu Real-time Video Transmission Gear "IP series".

Softneta Advisory - This advisory describes two vulnerabilities in the Softneta MedDream picture archiving and communication system (PACS).

 

For more details about these vulnerabilities, including a down-the-rabbit-hole look at Softneta vulnerability disclosure process, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-9-5-23 - subscription required.