Today CISA’s NCCIC-ICS published three control system security advisories for products from Satel, Grid Protection Alliance, and Red Lion. They also updated two control system advisories for products from Hitachi Energy and Lantronix, as well as a medical device advisory for products from Pulsetto.
Advisories
Satel Advisory - This advisory describes four vulnerabilities in the Satel Netco Design software tool. The vulnerability was reported to CISA by Alex Williams of Pellera Technologies.
Grid Protection Advisory - This advisory describes six vulnerabilities in the Grid Protection Alliance openPDC and openHistorian products. The vulnerabilities were reported to CISA by Shubham Raj (Cipher) of Causal Security.
Red Lion Advisory - This advisory describes seven vulnerabilities in the Red Lion Controls N-Tron 700 Series. The vulnerabilities were reported to CISA by Gabrianna (Ria) Milloway of Idaho National Laboratory.
Updates
Hitachi Energy Update - This update provides additional information on the RTU500 Series advisory that was originally published on September 16th, 2025. The new information included updating fixed version 12.7.8.
Lantronix Update - This update provides additional information on the EDS3000PS advisory that was originally published on March 10th, 2026, and most recently updated on August 25th, 2026. The new information includes updating CVE information.
Pulsetto Update - This update provides additional information on the Vagus Nerve Stimulator advisory that was originally published on August 11th, 2026. The new information includes updating Risk Evaluation, Affected Products and versions, and mitigation information.
For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-and-3-updates-published-ee4 - subscription required.
Posts
