Review – 2 Advisories and 2 Updates Published – 11-9-23

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Hitachi Energy and Johnson Controls. They also updated two control systems security advisories for products from Hitachi Energy and Mitsubishi Electric.

Advisories

Hitachi Energy Advisory - This advisory describes three vulnerabilities in the Hitachi Energy in their eSOMS product.

Johnson Controls Advisory - This advisory describes an active debug code vulnerability in the Johnson Controls Quantum HD Unity controllers.

Updates

Hitachi Energy Update - This update provides additional information on an advisory that was originally published on November 29^th, 2022.

Mitsubishi Update - This update provides additional information on an advisory that was originally published on November 30^th, 2021 and most recently updated on May 9^th, 2023.

 

For more details on these advisories, including corrected advisory links and change summaries, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-2-updates-published-60e - subscription required.