Review – 3 Advisories and 1 Update – 7-23-24

Today, CISA’s NCCIC-ICS published control system security advisories for products from National Instruments (2) and Hitachi Energy. They also published an update for products from Mitsubishi.

Advisories

National Instruments Advisory #1 - This advisory describes three vulnerabilities in the NI LabVIEW product.

National Instruments Advisory #2 - This advisory describes a stack-based buffer overflow vulnerability in the NI I/O TRACE products.

Hitachi Energy Advisory - This advisory discusses four vulnerabilities in the Hitachi Energy AFS/AFR series managed switches.

Hitachi Energy Update - This update provides additional information on the IED Connectivity Packages advisory that was originally published on November 29^th, 2022.

 

For more information on these advisories, including links to 3^rd party advisories and researcher reports, see  my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-and-1-update-7-23-24 - subscription required.