Mitsubishi Electric MELSEC-Q Series PLCs
view advisory published 2019-01-29
Successful exploitation of this vulnerability could allow a remote attacker to send specially crafted packets to the device via Ethernet, causing Ethernet and USB communication to stop.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6535US | high7.5 | — | ||
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: seria… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-19-029-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-19-029-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (3)
- MitigationQ03/04/06/13/26UDVCPU
Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.
- MitigationQ03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU
Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.
- MitigationQ04/06/13/26UDPVCPU
Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan