Review – 1 Advisory and 3 Updates Published – 6-4-24

Today, CISA’s NCCIC-ICS published a control system security advisory for products from Uniview. They also updated three advisories for products from Fuji Electric and Mitsubishi Electric.

Advisory

Uniview Advisory - This advisory describes a cross-site scripting vulnerability with known exploit in the Uniview NVR301-04S2-P4 network video recorder.

Update

Fuji Update - This update provides additional information on the Monitouch V-SFT advisory that was originally published on May 30^th, 2024.

Mitsubishi Update #1 - This update provides additional information on the MELSEC iQ-R, Q, L Series advisory that was originally published on June 14^th, 2022 and most recently updated on July 27^th, 2023.

Mitsubishi Update #2 - This update provides additional information on the CC-Link IE TSN advisory that was originally published on October 5^th, 2023.

 

For more information on these advisories, including link to an exploit and a brief down-the-rabbit-hole look at security information from Uniview, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/1-advisory-and-3-updates-published-b34 - subscription required.