CISA Warns of Critical Flaws Affecting Industrial Appliances from Advantech and Hitachi

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday launched two Industrial Management Programs (ICS) advisories pertaining to intense flaws in Advantech R-SeeNet and Hitachi Power APM Edge appliances.

This is made up of three weaknesses in the R-SeeNet checking answer, productive exploitation of which “could outcome in an unauthorized attacker remotely deleting files on the procedure or enabling remote code execution.”

The list of issues, which have an impact on R-SeeNet Variations 2.4.17 and prior, is as follows –

• CVE-2022-3385 and CVE-2022-3386 (CVSS scores: 9.8) – Two stack-dependent buffer overflow flaws that could direct to remote code execution
• CVE-2022-3387 (CVSS score: 6.5) – A path traversal flaw that could allow a distant attacker to delete arbitrary PDF files

Patches have been manufactured accessible in version R-SeeNet model 2.4.21 unveiled on September 30, 2022.

Also published by CISA is an update to a December 2021 advisory about several flaws in Hitachi Strength Transformer Asset Efficiency Management (APM) Edge products that could render them inaccessible.

The 29 vulnerabilities, collectively assigned a CVSS rating of 8.2, stem from security holes in open source computer software factors this kind of as OpenSSL, LibSSL, libxml2, and GRUB2 bootloader. End users are advised to update to APM Edge edition 4. to remediate the bugs.

The twin alerts come less than a 7 days right after CISA posted 25 ICS advisories on October 13, 2022, spanning quite a few vulnerabilities throughout products from Siemens, Hitachi Electricity, and Mitsubishi Electric.

According to OT cybersecurity and asset checking business SynSaber, 681 ICS merchandise vulnerabilities ended up reported through CISA in the initially fifty percent of 2022, out of which 152 are rated Critical, 289 are rated High, and 2015 are rated Medium in Severity.

What is more, 54 of the Critical/Higher-rated CVEs have no patch or any mitigation readily available from the suppliers, accounting for 13% of the whole reported flaws and remaining “permanently-working day vulnerabilities.”

“It’s crucial for asset proprietors and all those defending critical infrastructure to realize when remediations are available, and how those people remediations need to be implemented and prioritized,” SynSaber explained.

Found this article exciting? Observe THN on Facebook, Twitter  and LinkedIn to read additional exclusive content we write-up.

Some pieces of this posting are sourced from:
thehackernews.com