ICSA-19-311-01

icsaUScisa_csaf_ot

Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules

view advisory published 2019-11-07

Successful exploitation of this vulnerability may prevent the FTP client from connecting to the FTP server on MELSEC-Q Series and MELSEC-L Series CPU module.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-13555USmedium5.9—
In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/5…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationL02/06/26CPU L26CPU-BT

    Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.

  • MitigationL02/06/26CPU-CM L26CPU-BT-CM

    Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.

  • MitigationL02/06/26CPU-P L26CPU-PBT

    Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.

  • MitigationQ03/04/06/13/26UDVCPU

    Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.

  • MitigationQ03UDECPU Q04/06/10/13/20/26/50/100UDEHCPU

    Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.

  • MitigationQ04/06/13/26UDPVCPU

    Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan