ICSA-24-030-02

icsaUScisa_csaf_ot

Mitsubishi Electric FA Engineering Software Products (Update D)

view advisory published 2024-01-30

Successful exploitation of these vulnerabilities could allow an attacker to disclose, tamper with, destroy or delete information in the products, or cause a denial-of-service (DoS) condition on the products.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-6943UScritical9.8OT elevated—
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Vers…
CVE-2023-6942UShigh7.5OT elevated—
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prio…
02

references

External citations — patches, advisories, analysis.

03

remediations (30)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan