Review – 4 Advisories Published – 11-30-23

Today, CISA’s NCCIC-ICS published four control system security advisories for products from Mitsubishi Electric, PTC, Yokogawa, and Delta Electronics.

Advisories

Mitsubishi Advisory - This advisory describes an external control of file name or path vulnerability in multiple Mitsubishi FA Engineering Software products.

PTC Advisory - This advisory describes two vulnerabilities in multiple PTC Kepware products.

Yokogawa Advisory - This advisory describes an uncontrolled resource consumption vulnerability in the Yokogawa STARDOM FCN/FCJ controller.

Delta Advisory - This advisory describes a stack-based buffer overflow vulnerability int e Delta DOPSoft product.

 

For more details about these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/4-advisories-published-11-30-23 - subscription required.