7 Advisories Published – 7-7-26

Today CISA’s NCCIC-ICS published seven control system security advisories for products from Digi International, Labcenter, Simens (2), Hitachi Energy (2), and Hydro-Quebec. 

Advisories  

Digi Advisory - This advisory describes two vulnerabilities in the Digi International PortServer TS, Digi One SP IA. 

Labcenter Advisory - This advisory describes three vulnerabilities in the Labcenter Electronics Proteus. 

Siemens Advisory #1 - This advisory discusses 77 vulnerabilities in Siemens RUGGEDCOM RST2428P. 

Siemens Advisory #2 – This advisory describes a code injection vulnerability in the Siemens Mendix Studio Pro. 

Hitachi Energy Advisory #1 - This advisory discusses the Nginx-Rift vulnerability. 

Hitachi Energy Advisory #2 – This advisory describes a reliance on HTTP instead of HTTPS vulnerability in the Hitachi Energy PROMOD V. 

Hydro-Quebec Advisory - This advisory describes three vulnerabilities in the Hydro-Québec Le Circuit Electrique charging station backend.