Fuji Electric D300win
view advisory published 2022-08-30
Successful exploitation of these vulnerabilities could result in loss of sensitive data and manipulation of information.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-1738US | high7.5 | — | ||
Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to an out-of-bounds read, which could allow an attacker to leak sensitive data from the process memory. | ||||
| CVE-2022-1523US | critical9.1 | — | ||
Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to manipulate the flow of i… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-242-05 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedD300win
Fuji Electric has fixed these vulnerabilities and recommends users upgrade to D300win v3.7.1.17 or later.
https://www.fujielectric.com/products/plc/product_information/prgrm-expert/ - FixedD300win
Fuji Electric has fixed these vulnerabilities and recommends users upgrade to D300win v3.7.1.17 or later.
https://www.fujielectric.com/products/plc/product_information/prgrm-expert/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan