ICSA-21-350-05

icsaUScisa_csaf_ot

Mitsubishi Electric FA Engineering Software (Update B)

view advisory published 2021-12-16

Successful exploitation of these vulnerabilities may cause a denial-of-service condition.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2021-20607USmedium5.5—
Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric E…
CVE-2021-20606USmedium5.5—
Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • MitigationEZSocket

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationEZSocket

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationGX Works2

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationGX Works2

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationMELSOFT Navigator

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationMELSOFT Navigator

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • FixedEZSocket

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • FixedEZSocket

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • FixedGX Works2

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • FixedGX Works2

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • FixedMELSOFT Navigator

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • FixedMELSOFT Navigator

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan