Review – 5 Advisories and 1 Update Published – 10-15-26

Today, CISA’s NCCIC-ICS published three control system security advisories for products from Guangzhou Juan IoT Technology, Eclipse Foundation, and CISA. They also published two medical device security advisories for products from J4Care and Thermo Fisher. They also updated a control security advisory for products from Red Lion. 

Advisories  

Guangzhou Advisory - This advisory describes three vulnerabilities in the Guangzhou Juan IoT Technology EseeCloud video surveillance software. The vulnerabilities were reported to CISA by Donghyeon Lee of Tokyo University of Science and GMO Flatt Security. CISA notes that: “Guangzhou Juan IoT Technology Co., Ltd. did not respond to CISA's coordination attempts.” 

Eclipse Advisory - This advisory describes five vulnerabilities in the Eclipse Milo OPC UA implementation. The vulnerabilities were reported to CISA by Abhinav Agarwal.  

CISA Advisory - This advisory discusses six vulnerabilities in the CISA Malcolm network traffic analysis tool suite. The vulnerabilities were reported to CISA by Seth Grover of Idaho National Laboratory. 

J4Care Advisory - This advisory describes six vulnerabilities in the J4Care dcm4che open-source toolkit for DICOM. The vulnerabilities were reported to CISA by Abhinav Agarwal. 

Thermo Fisher Advisory - This advisory describes a path traversal vulnerability in the Thermo Fisher Torrent Suite Software. The vulnerability was reported to CISA by Akanksha Raghvesh and Abhinav Agarwal. 

Red Lion Update - This update provides additional information on the N-Tron 700 Series advisory that was originally published on October 8th, 2026. The new information includes updating CVSS V4.0 scores, and broken links. 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/5-advisories-and-1-update-published-547 - subscription required. 

2 Advisories Published – 10-13-26

Today CISA’s NCCIC-ICS published two control system security advisories for products from Swann and Inductive Automation. 

Advisories  

Swann Advisory - This advisory describes three missing authentication for critical function vulnerabilities in the Swann Communications SWIFI-SE2KIC WiFi camera. The vulnerabilities were reported to CISA by Elliott Phillips. 

Inductive Automation Advisory - This advisory describes an incorrect authorization vulnerability in the Inductive Automation Ignition Software. The vulnerability was reported by Tim Hemingway. 

Review – 3 Advisories and 3 Updates Published – 10-8-26

Today CISA’s NCCIC-ICS published three control system security advisories for products from Satel, Grid Protection Alliance, and Red Lion. They also updated two control system advisories for products from Hitachi Energy and Lantronix, as well as a medical device advisory for products from Pulsetto. 

Advisories  

Satel Advisory - This advisory describes four vulnerabilities in the Satel Netco Design software tool. The vulnerability was reported to CISA by Alex Williams of Pellera Technologies. 

Grid Protection Advisory - This advisory describes six vulnerabilities in the Grid Protection Alliance openPDC and openHistorian products. The vulnerabilities were reported to CISA by Shubham Raj (Cipher) of Causal Security. 

Red Lion Advisory - This advisory describes seven vulnerabilities in the Red Lion Controls N-Tron 700 Series. The vulnerabilities were reported to CISA by Gabrianna (Ria) Milloway of Idaho National Laboratory. 

Updates  

Hitachi Energy Update - This update provides additional information on the RTU500 Series advisory that was originally published on September 16th, 2025. The new information included updating fixed version 12.7.8. 

Lantronix Update - This update provides additional information on the EDS3000PS advisory that was originally published on March 10th, 2026, and most recently updated on August 25th, 2026. The new information includes updating CVE information. 

Pulsetto Update - This update provides additional information on the Vagus Nerve Stimulator advisory that was originally published on August 11th, 2026. The new information includes updating Risk Evaluation, Affected Products and versions, and mitigation information. 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-and-3-updates-published-ee4 - subscription required. 

Review – 6 Advisories Published – 10-6-26

Today, CISA’s NCCIC-ICS published six control system security advisories for products from Hitachi Energy (4), Savannah, and Johnson Controls. 

NOTE: There has been a minor change in the format of the ‘Vulnerabilities’ section of the CISA advisories; more information is available by default on each CVE. 

Advisories  

Hitachi Energy Advisory #1 - This advisory describes six vulnerabilities in the Hitachi Energy RTU500. The vulnerabilities were reported to CISA by Dragos. 

Hitachi Energy Advisory #2 - This advisory discusses two vulnerabilities in the Hitachi Energy REB500. These are third-party vulnerabilities. 

Hitachi Energy Advisory #3 - This advisory discusses an improper input validation vulnerability in the Hitachi Energy SOI. This is a third-party (Apache) vulnerability that is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. 

Hitachi Energy Advisory #4 - This advisory describes two vulnerabilities in the Hitachi Energy Asset Suite. The vulnerabilities were reported to CISA by EDF. 

Savannah Advisory - This advisory describes a classic buffer overflow vulnerability in the Savannah lwIP SMTP client. The vulnerability was reported by Xchg Labs 

Johnson Control Advisory - This advisory describes two vulnerabilities in the Johnson Controls EasyIO FG. The vulnerabilities were reported by Gabriele Gardois, Zachary Bushell and Lorenzo De Carli of the University of Calgary. 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/6-advisories-published-10-6-26 - subscription required.