Review – 2 Advisories and 3 Updates Published – 11-21-23

Today, CISA’s NCCIC-ICS published two control system security updates for products from Fuji Electric and WAGO. They also updated advisories for products from Rockwell Automation, Keysight, and Mitsubishi Electric.

Advisories

Fuji Advisory - This advisory describes three vulnerabilities in the Fuji Tellus Lite V-Simulator.

WAGO Advisory - This advisory that describes an externally controlled reference to a resources in another sphere vulnerability in the WAGO PFC200 Series products.

WAGO Advisory - This advisory that describes an externally controlled reference to a resources in another sphere vulnerability in the WAGO PFC200 Series products.

Updates                                                                                      

Rockwell Update - This update provides additional information on the Stratix 5800 and Stratix 5200 advisory that was originally published on October 24^th, 2023.

Keysight Update - This update provides additional information on the N8844A Data Analytics advisory that was originally published on April 25^th, 2023.

Mitsubishi Update - This update provides additional information on the CNC Series advisory that was originally published on July 27^th, 2023 and most recently updated on October 31^st, 2023.

 

For more details about these advisories, including notes about the vendor advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-3-updates-published-132 - subscription required.