ICSA-20-161-02

icsaUScisa_csaf_ot

Mitsubishi Electric MELSEC iQ-R Series (Update C)

Advisory ansehen veröffentlicht 2020-06-09

Successful exploitation of this vulnerability could cause the Ethernet port to enter a denial-of-service condition.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-13238UShigh7.5—
Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denia…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

  • MitigationR00/01/02CPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationR04/08/16/32/120CPU R04/08/16/32/120ENCPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationR08/16/32/120PCPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationR08/16/32/120PSFCPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationR08/16/32/120SFCPU

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • MitigationRJ71EN71

    Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.

  • BehobenR00/01/02CPU

    R00/01/02CPU: Firmware Versions 8 or later

  • BehobenR04/08/16/32/120CPU R04/08/16/32/120ENCPU

    R00/01/02CPU: Firmware Versions 8 or later

  • BehobenR08/16/32/120PCPU

    R00/01/02CPU: Firmware Versions 8 or later

  • BehobenR08/16/32/120PSFCPU

    R00/01/02CPU: Firmware Versions 8 or later

  • BehobenR08/16/32/120SFCPU

    R00/01/02CPU: Firmware Versions 8 or later

  • BehobenRJ71EN71

    R00/01/02CPU: Firmware Versions 8 or later

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan