2 Advisories Published – 10-1-24

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Mitsubishi Electric and Optigo Networks. I also take a down-the-rabbit-hole look at generic fixes.

Mitsubishi Advisory

This advisory discusses a NULL pointer dereference vulnerability in the Mitsubishi MELSEC iQ-F OPC UA Unit. This is a third-party (OpenSSL) vulnera…