Mitsubishi Electric MELSOFT GT OPC UA
Successful exploitation of these vulnerabilities could allow a remote attacker to send specially crafted messages, resulting in information disclosure or a denial-of-service condition.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-3712US | high7.4 | Exploit | ||
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This cont… | ||||
| CVE-2021-23840US | high7.5 | Exploit | ||
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- MitigationGT SoftGOT2000
Install antivirus software.
- MitigationGT SoftGOT2000
Install antivirus software.
- MitigationMELSOFT GT OPC UA Client
Install antivirus software.
- MitigationMELSOFT GT OPC UA Client
Install antivirus software.
- BehobenGT SoftGOT2000
Update MELSOFT GT OPC UA Client: Update to 1.03D or later
- BehobenGT SoftGOT2000
Update MELSOFT GT OPC UA Client: Update to 1.03D or later
- BehobenMELSOFT GT OPC UA Client
Update MELSOFT GT OPC UA Client: Update to 1.03D or later
- BehobenMELSOFT GT OPC UA Client
Update MELSOFT GT OPC UA Client: Update to 1.03D or later
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan