Mitsubishi Electric MELSEC iQ-R Series Safety CPU and SIL2 Process CPU (Update A)
Successful exploitation of this vulnerability could allow a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than themselves.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-6815US | medium6.5 | — | ||
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CP… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-044-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-044-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationMELSEC iQ-R Series SIL2 Process CPU R08PSFCPU
Install antivirus software on your personal computer that can access the affected product.
- MitigationMELSEC iQ-R Series SIL2 Process CPU R120PSFCPU
Install antivirus software on your personal computer that can access the affected product.
- MitigationMELSEC iQ-R Series SIL2 Process CPU R16PSFCPU
Install antivirus software on your personal computer that can access the affected product.
- MitigationMELSEC iQ-R Series SIL2 Process CPU R32PSFCPU
Install antivirus software on your personal computer that can access the affected product.
- MitigationMELSEC iQ-R Series Safety CPU R08SFCPU
Install antivirus software on your personal computer that can access the affected product.
- MitigationMELSEC iQ-R Series Safety CPU R120SFCPU
Install antivirus software on your personal computer that can access the affected product.
- MitigationMELSEC iQ-R Series Safety CPU R16SFCPU
Install antivirus software on your personal computer that can access the affected product.
- MitigationMELSEC iQ-R Series Safety CPU R32SFCPU
Install antivirus software on your personal computer that can access the affected product.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan