Review – 5 Advisories Published – 11-4-25

Today CISA’s NCCIC-ICS published five control system security advisories for products from IDIS, Radiometrics, Delta Electronics, Survision, and Fuji Electric.

Advisories

IDIS Advisory - This advisory describes an argument injection vulnerability in the IDIS ICM Viewer (IDIS Cloud Manager Viewer).

NOTE: CISA reports that: “IDIS requires all users to upgrade to v1.7.1. Failure to do so will render the ICM Viewer unusable.”

Radiometrics Advisory - This advisory describes three vulnerabilities in the Radiometrics VizAir weather monitoring and forecasting system.

Delta Advisory - This advisory describes a stack-based buffer overflow vulnerability in the Delta CNCSoft-G2.

Note: I briefly discussed this vulnerability on September 27^th, 2025.

Survision Advisory - This advisory describes a missing authentication for critical function vulnerability in the Survision License Plate Recognition Camera.

Fuji Advisory - This advisory describes two vulnerabilities in the Fuji Monitouch V-SFT-6.

 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/5-advisories-published-11-4-25 - subscription required.