Mitsubishi Electric MELSEC iQ-F FX5-OPC
view advisory published 2024-10-01
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of service condition on the product by getting a legitimate user to import a specially crafted PKCS#12 format certificate.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-0727US | medium5.5 | — | ||
Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL
to crash leading to a potential Denial of Service attack
Impact summary: Applications loading files… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-275-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-275-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- MitigationMELSEC iQ-F FX5-OPC
Do not import untrusted certificates.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan