Review – 2 Advisories Published – 10-1-24

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Mitsubishi Electric and Optigo Networks.

Advisories

Mitsubishi Advisory - This advisory discusses a NULL pointer dereference vulnerability in the Mitsubishi MELSEC iQ-F OPC UA Unit.

Optigo Advisory - This advisory describes two vulnerabilities in the Optigo ONS-S8 - Spectra Aggregation Switch.

 

For more information on these advisories, including links to researcher reports, and including a down-the-rabbit-hole look at generic fixes, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-10-1-24 - subscription required.