Review – 2 Advisories Published – 2-27-24

Today, CISA’s NCCIC-ICS published a control system security advisories for products from Mitsubishi Electric and a medical device security advisory for products from Santesoft.

Advisories

Mitsubishi Advisory - This advisory describes an insufficient resources pool vulnerability in the Mitsubishi MELSEC iQ-F Series compact control platform.

Santesoft Advisory - This advisory describes an out-of-bounds read vulnerability in the Santesoft Sante DICOM viewer.

 

For more details about these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-2-27-24 - subscription required.