Mitsubishi Electric Multiple Factory Automation Products (Update B)
Successful exploitation of these vulnerabilities could create a denial-of-service condition or enable arbitrary code execution.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-1292US | high7.3 | Exploit | ||
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is autom… | ||||
| CVE-2022-0778US | high7.5 | Exploit | ||
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsi… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-221-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationCC-Link IE TSN Industrial Managed Switch (NZ2MHG-TSNT8F2 NZ2MHG-TSNT4)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationCC-Link IE TSN Industrial Managed Switch (NZ2MHG-TSNT8F2 NZ2MHG-TSNT4)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationGOT2000 compatible HMI software (GT SoftGOT2000)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationGOT2000 compatible HMI software (GT SoftGOT2000)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationMELSEC iQ-R Series OPC UA Server Module (RD81OPC96)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationMELSEC iQ-R Series OPC UA Server Module (RD81OPC96)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan