ICSA-22-130-06

icsaUScisa_csaf_ot

Mitsubishi Electric MELSOFT GT OPC UA

view advisory published 2022-05-10

Successful exploitation of these vulnerabilities could allow a remote attacker to send specially crafted messages, resulting in information disclosure or a denial-of-service condition.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2021-3712UShigh7.4Exploit
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This cont…
CVE-2021-23840UShigh7.5Exploit
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • MitigationGT SoftGOT2000

    Install antivirus software.

  • MitigationGT SoftGOT2000

    Install antivirus software.

  • MitigationMELSOFT GT OPC UA Client

    Install antivirus software.

  • MitigationMELSOFT GT OPC UA Client

    Install antivirus software.

  • FixedGT SoftGOT2000

    Update MELSOFT GT OPC UA Client: Update to 1.03D or later

  • FixedGT SoftGOT2000

    Update MELSOFT GT OPC UA Client: Update to 1.03D or later

  • FixedMELSOFT GT OPC UA Client

    Update MELSOFT GT OPC UA Client: Update to 1.03D or later

  • FixedMELSOFT GT OPC UA Client

    Update MELSOFT GT OPC UA Client: Update to 1.03D or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan