Review - Public ICS Disclosures – Week of 5-23-26 – Part 2

For Part 2 we have 12 additional vendor disclosures from Hitachi Energy (3), JUMO, MB connect (2), METTLER TOLEDO, Moxa, NI, Phoenix Contact, and QNAP (2). 

Advisories  

Hitachi Energy Advisory #1 - Hitachi Energy published an advisory that discusses two vulnerabilities (one with publicly available exploit) in their ITT600 Explorer product. 

Hitachi Energy Advisory #2 - Hitachi Energy published an advisory that describes a heap-based buffer overflow vulnerability in their MACH HiDraw product. 

Hitachi Energy Advisory #3 - Hitachi Energy published an advisory that describes four vulnerabilities in their RTU500 product. 

JUMO Advisory - CERT-VDE published an advisory that discusses an improper input validation vulnerability (with publicly available exploit) in multiple JUMO products. 

MB connect Advisory #1 - MB connect published an advisory that describes an SQL injection vulnerability in their mbCONNECT24 and mymbCONNECT24 products. 

MB connect Advisory #2 - MB connect published an advisory that describes two vulnerabilities in in their mbNET/mbNET.rokey and mbNET.mini products. 

METTLER TOLEDO Advisory - CERT-VDE published an advisory that discusses two vulnerabilities (one with publicly available exploit) in their EVA Karl Fischer titrator software. 

Moxa Advisory - Moxa published an advisory that discusses the Copy Fail and Dirty Frag vulnerabilities. 

NI Advisory - NI published an advisory that describes a missing authentication for critical function vulnerability in their SystemLink Enterprise product. 

Phoenix Contact Advisory - Phoenix Contact published an advisory that describes two vulnerabilities in their PLCnext firmware. 

QNAP Advisory #1 - QNAP published an advisory that discusses the Dirty Frag vulnerabilities. 

QNAP Advisory #2 - QNAP published an advisory that discusses the Copy Fail vulnerability. 

For more information on these disclosures, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-5-f0a - subscription required. 

Review – Public ICS Disclosures – Week of 5-2-26 – Part 1

This has been a somewhat busy disclosure week. For Part 1, we have nine vendor disclosures from ABB, Arista (2), Cisco, ifm, Johnson Controls, Palo Alto Networks, Philips, and QNAP. 

Advisories  

ABB Advisory - ABB published an advisory that explains that their System 800xA product comes bundled with Microsoft Edge, but that ABB has not updated the software to include Edge updates. 

Arista Advisory #1 - Arista published an advisory that discusses the Dirty Frag vulnerabilities. 

Arista Advisory #2 - Arista published an advisory that describes an incomplete comparison with missing factors vulnerability in their Arista EOS. 

Cisco Advisory - Cisco published an advisory that describes three vulnerabilities in their IoT Field Network Director. 

Ifm Advisory - CERT-VDE published an advisory that discusses three vulnerabilities in the ifm CR3171 ethernet LTE/GNSS radio modem. 

Johnson Controls Advisory - Johnson Controls published an advisory that discusses an improper access control vulnerability in their Airwall 75 gateway. 

Palo Alto Networks Advisory - PAN published an advisory that describes an out-of-bounds write vulnerability (that is listed in the CISA Known Exploited Vulnerabilities catalog) in their PAN-OS product. 

Philips Advisory - Philips published an advisory that discusses the CopyFail vulnerability. 

QNAP Advisory - QNAP published an advisory that discusses the CopyFail vulnerability. QNAP provides lists of affected and unaffected products. 

For more information on these disclosures, including links to 3rd party advisories, researcher reports, and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-5-c51 - subscription required.