Fuji Electric D300win
Advisory ansehen veröffentlicht 2022-08-30
Successful exploitation of these vulnerabilities could result in loss of sensitive data and manipulation of information.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-1738US | high7.5 | — | ||
Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to an out-of-bounds read, which could allow an attacker to leak sensitive data from the process memory. | ||||
| CVE-2022-1523US | critical9.1 | — | ||
Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to manipulate the flow of i… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-242-05 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenD300win
Fuji Electric has fixed these vulnerabilities and recommends users upgrade to D300win v3.7.1.17 or later.
https://www.fujielectric.com/products/plc/product_information/prgrm-expert/ - BehobenD300win
Fuji Electric has fixed these vulnerabilities and recommends users upgrade to D300win v3.7.1.17 or later.
https://www.fujielectric.com/products/plc/product_information/prgrm-expert/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan