ICONICS and Mitsubishi Electric Products
Successful exploitation of these vulnerabilities could result in information disclosure, denial-of-service, or remote code execution.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-4203US | medium4.9 | — | ||
A read buffer overrun can be triggered in X.509 certificate verification,
specifically in name constraint checking. Note that this occurs
after certificate chain signature verifica… | ||||
| CVE-2023-0401US | high7.5 | — | ||
A NULL pointer can be dereferenced when signatures are being
verified on PKCS7 signed or signedAndEnveloped data. In case the hash
algorithm used for the signature is known to the… | ||||
| CVE-2022-4450US | high7.5 | — | ||
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.
If the function succeeds th… | ||||
| CVE-2022-4304US | medium5.9 | Exploit | ||
A timing based side channel exists in the OpenSSL RSA Decryption implementation
which could be sufficient to recover a plaintext across a network in a
Bleichenbacher style attack.… | ||||
| CVE-2022-3786US | high7.5 | Exploit | ||
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification… | ||||
| CVE-2022-3602US | high7.5 | Exploit | ||
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-229-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-229-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan