Review – 2 Advisories and 1 Update Published – 3-6-25

Today CISA’s NCCIC-ICS published two control system security advisories for products from Hitachi Energy. They also updated an advisory for products from Schneider Electric.

Advisories

Hitachi Energy #1 - This advisory describes an improper handling of insufficient privilege vulnerability in the Hitachi Energy Relion 670/650/SAM600-IO products.

Hitachi Energy #2 - This advisory discusses eight vulnerabilities in the Hitachi Energy PCU400 and PCULogger products.

Schneider Update - This update provides additional information on the EcoStruxure advisory that was originally published on February 6^th, 2025.

Updates

Schneider Update - This update provides additional information on the EcoStruxure advisory that was originally published on February 6^th, 2025.

 

For more information on these advisories, including links to 3^rd party advisories and DTRH look at a duplicate Hitachi advisory, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-1-update-published-5d7 - subscription required.