ICSA-22-102-02

icsaUScisa_csaf_ot

Mitsubishi Electric MELSEC-Q Series C Controller Module

view advisory published 2022-04-12

Successful exploitation of this vulnerability could cause a denial-of-service condition or allow remote code execution.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-29998UScritical9.8—
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • MitigationModule Q12DCCPU-V

    Disable the DHCP function in “Security Settings” of the C language controller settings/monitor tool if the product is in “Extended mode” and the DHCP client function is not required.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan