Mitsubishi Electric MELSOFT iQ AppPortal
view advisory published 2023-02-27
Successful exploitation of these vulnerabilities could allow a malicious attacker to make unidentified impacts such as authentication bypass, information disclosure, denial-of-service, or bypass IP address authentication.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-31813US | —OT elevated | — | ||
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-2804. Reason: This record is a duplicate of CVE-2023-2804. Notes: All CVE users should reference CVE-2023-2804 ins… | ||||
| CVE-2023-26377US | — | — | ||
Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Disable mod_proxy and mod_proxy_ajp in the VisualSVN Server settings if possible.
- MitigationMELSOFT iQ AppPortal (SW1DND-IQAPL-M)
Disable mod_proxy and mod_proxy_ajp in the VisualSVN Server settings if possible.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan