ICSA-21-350-05

icsaUScisa_csaf_ot

Mitsubishi Electric FA Engineering Software (Update B)

Advisory ansehen veröffentlicht 2021-12-16

Successful exploitation of these vulnerabilities may cause a denial-of-service condition.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-20607USmedium5.5—
Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric E…
CVE-2021-20606USmedium5.5—
Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

  • MitigationEZSocket

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationEZSocket

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationGX Works2

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationGX Works2

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationMELSOFT Navigator

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • MitigationMELSOFT Navigator

    Do not open the project files, such as those attached to e-mail sent from an untrusted sender.

  • BehobenEZSocket

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • BehobenEZSocket

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • BehobenGX Works2

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • BehobenGX Works2

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • BehobenMELSOFT Navigator

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

  • BehobenMELSOFT Navigator

    Please execute procedures below for GX Works2 project files read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. With GX Works2 1.610L or later, open the project file that is read from PLC via “Batch Read” function of MELSOFT Navigator or EZSocket. Enable the option [Enable the security check for the project] ([Options] -> [Project] -> [Common Setting]) and save the project.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan