Review – 3 Advisories and 2 Updates Published – 11-12-24

Today, CISA’s NCCIC-ICS published three control system advisories for products from Rockwell Automation, Hitachi Energy, and Subnet Solutions. They also updated advisories for products from Snap One and Mitsubishi Electric.

Advisories

Rockwell Advisory - This advisory describes an improper input validation vulnerability in the Rockwell FactoryTalk View ME software.

Hitachi Energy Advisory - This advisory describes two vulnerabilities in the Hitachi Energy TRO600 series radios.

Subnet Advisory - This advisory discusses three vulnerabilities in the Subnet PowerSYSTEM Center PSC 2020.

Updates

Snap One Update - This update provides additional information on the OvrC Cloud advisory that was originally published on May 16^th, 2023.

Mitsubishi Update - This update provides additional information on the MELSEC Series advisory that was originally published on November 2^nd, 2023.

 

For more information on these advisories, including links to 3^rd party advisories and reports of related advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-and-2-updates-published-995 - subscription required.