Mitsubishi Electric Factory Automation Products
Successful exploitation of these vulnerabilities could disclose information in the product or could cause denial-of-service (DoS) condition.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0286US | high7.4 | — | ||
There is a type confusion vulnerability relating to X.400 address processing
inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but
the public structure def… | ||||
| CVE-2022-4450US | high7.5 | — | ||
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.
If the function succeeds th… | ||||
| CVE-2022-4304US | medium5.9 | Exploit | ||
A timing based side channel exists in the OpenSSL RSA Decryption implementation
which could be sufficient to recover a plaintext across a network in a
Bleichenbacher style attack.… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-004-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-004-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (18)
- MitigationFX5-OPC
FX5-OPC: Use within a LAN and block access from untrusted networks and hosts through firewalls. Restrict physical access to the product, as well as to computers and network devices located within the same network as the product. Use a firewall or virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required. Use the IP filter function to block access from untrusted hosts. For details on the IP filter function, please refer to the MELSEC iQ-F FX5 OPC UA Module User's Manual section 4.4 "IP Filter." Do not import untrusted certificates.
- MitigationFX5-OPC
Mitsbuishi Electric recommends that users update their products to the following versions:
- MitigationFX5-OPC
Mitsbuishi Electric recommends that users update their products to the following versions:
- MitigationGT SoftGOT2000
GT SoftGOT2000 and OPC UA Data Collector: Do not load untrusted certificate revocation lists (CRLs).
- MitigationGT SoftGOT2000
GT SoftGOT2000 and OPC UA Data Collector: Do not load untrusted certificate revocation lists (CRLs).
- MitigationGT SoftGOT2000
GT SoftGOT2000 and OPC UA Data Collector: Do not load untrusted certificate revocation lists (CRLs).
- MitigationMX OPC Server UA (Software packaged with MC Works64)
MX OPC Server UA: Use recommended mitigations/workarounds
- MitigationMX OPC Server UA (Software packaged with MC Works64)
MX OPC Server UA: Use recommended mitigations/workarounds
- MitigationMX OPC Server UA (Software packaged with MC Works64)
MX OPC Server UA: Use recommended mitigations/workarounds
- MitigationOPC UA Data Collector
GT SoftGOT2000 and OPC UA Data Collector: Do not load untrusted certificate revocation lists (CRLs).
- MitigationOPC UA Data Collector
GT SoftGOT2000 and OPC UA Data Collector: Do not load untrusted certificate revocation lists (CRLs).
- MitigationOPC UA Data Collector
GT SoftGOT2000 and OPC UA Data Collector: Do not load untrusted certificate revocation lists (CRLs).
- MitigationOPC UA Server Unit
Mitsbuishi Electric recommends that users update their products to the following versions:
- MitigationOPC UA Server Unit
Mitsbuishi Electric recommends that users update their products to the following versions:
- MitigationOPC UA Server Unit
Mitsbuishi Electric recommends that users update their products to the following versions:
- FixedFX5-OPC
FX5-OPC: Use within a LAN and block access from untrusted networks and hosts through firewalls. Restrict physical access to the product, as well as to computers and network devices located within the same network as the product. Use a firewall or virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required. Use the IP filter function to block access from untrusted hosts. For details on the IP filter function, please refer to the MELSEC iQ-F FX5 OPC UA Module User's Manual section 4.4 "IP Filter." Do not import untrusted certificates.
- FixedFX5-OPC
FX5-OPC: Use within a LAN and block access from untrusted networks and hosts through firewalls. Restrict physical access to the product, as well as to computers and network devices located within the same network as the product. Use a firewall or virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required. Use the IP filter function to block access from untrusted hosts. For details on the IP filter function, please refer to the MELSEC iQ-F FX5 OPC UA Module User's Manual section 4.4 "IP Filter." Do not import untrusted certificates.
- FixedOPC UA Server Unit
OPC UA Server Unit: Use within a LAN and block access from untrusted networks and hosts through firewalls. Restrict physical access to the product, as well as to computers and network devices located within the same network as the product. Use a firewall or virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required. Set a security policy other than 'None' in security setting function to prevent unauthorized access. For details on security setting function, please refer to the MELSEC iQ-R OPC UA Server Unit User's Manual (Application), section 1.1 "OPC UA Server Function".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan