Review – 3 Advisories Published – 10-5-23

Today, CISA’s NCCIC-ICS published three control system security advisories for products from Mitsubishi Electric, Qognify, and Hitachi Energy.

Advisories

Mitsubishi Advisor - This advisory discusses two vulnerabilities in the Mitsubishi CC-Link IE TSN Industrial Managed Switch.

Qognify Advisory - This advisory describes a use of hard-coded credentials vulnerability in the Qognify NiceVision IP-video surveillance system.

Hitachi Energy Advisory - This advisory discusses fourteen vulnerabilities in the Hitachi AFS65x, AFF66x, AFS67x, AFR67x series products.

For more details about these advisories, including links to researcher reports, 3^rd party advisories, and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-published-10-5-23 - subscription required.