Review – 3 Advisories and 1 Update Published – 10-6-25

Today CISA’s NCCIC-ICS published three control system security advisories for products from ABB, Ubia, and Advantech. They also updated an advisory for products from Hitachi Energy.

Advisories

ABB Advisory - This advisory describes four vulnerabilities (with publicly available exploits) in the ABB FLXeon Controllers.

Ubia Advisory - This advisory describes an insufficiently protected credentials vulnerability in the Ubia Ubox camera.

Advantech Advisory - This advisory describes four vulnerabilities in the Advantech DeviceOn/iEdge, an IoT management platform.

Updates

Hitachi Energy Update - This update provides additional information on the Asset Suite advisory that was originally published on October 9^th, 2025.

Note: I briefly discussed the updated Hitachi Energy advisory on November 1^st, 2025.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/4-advisories-and-1-update-published-2dc - subscription required.