Review - 2 Advisories Published – 4-4-24

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Schweitzer Engineering Laboratories and Hitachi Energy. I also briefly discuss an update from NIST on their NVD problems.

Advisories

SEL Advisory - This advisory describes an inclusion of undocumented features vulnerability in the SEL 700 series relays.

Hitachi Energy Advisory - This advisory describes an improper authentication vulnerability in the Hitachi Energy Asset Suite 9.

NOTE: I briefly discussed this vulnerability on Saturday along with two other Hitachi Energy advisories.

 

For more information on these advisories, including a brief look at new NIST information on the NVD CVE analysis problems, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-4-4-24 - subscription required.