ICSA-22-055-02

icsaUScisa_csaf_ot

Mitsubishi Electric EcoWebServerIII

view advisory published 2022-02-24

Successful exploitation of these vulnerabilities could allow information to be disclosed, tampered with, or result in a denial-of-service condition.

01

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2016-10735US	medium6.1	4.04% (91st)	Exploit	2019-01-09
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
CVE-2018-14042US	medium6.1	4.01% (91st)	Exploit	2018-07-13
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14040US	medium6.1	4.13% (91st)	Exploit	2018-07-13
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

02

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-22-055-02 JSONself
ICS Advisory ICSA-22-055-02 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

03

remediations (24)

MitigationMES3-255C-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-EN
MES3-255C-CN: Update to v3.3.1 or later
FixedMES3-255C-CN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-CN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-CN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-DM-CN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-DM-CN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-DM-CN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-DM-EN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-DM-EN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-DM-EN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-EN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-EN
MES3-255C-EN: Update to v3.3.1 or later
FixedMES3-255C-EN
MES3-255C-EN: Update to v3.3.1 or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.