Mitsubishi Electric Multiple Factory Automation Products (Update B)
Successful exploitation of these vulnerabilities could create a denial-of-service condition or enable arbitrary code execution.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-1292US | high7.3 | Exploit | ||
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is autom… | ||||
| CVE-2022-0778US | high7.5 | Exploit | ||
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-221-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationCC-Link IE TSN Industrial Managed Switch (NZ2MHG-TSNT8F2 NZ2MHG-TSNT4)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationCC-Link IE TSN Industrial Managed Switch (NZ2MHG-TSNT8F2 NZ2MHG-TSNT4)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationGOT2000 compatible HMI software (GT SoftGOT2000)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationGOT2000 compatible HMI software (GT SoftGOT2000)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationMELSEC iQ-R Series OPC UA Server Module (RD81OPC96)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
- MitigationMELSEC iQ-R Series OPC UA Server Module (RD81OPC96)
CC-Link IE TSN Industrial Managed Switch: Mitsubishi Electric has released fixed firmware for these issues and recommends users update affected products to Version 04 or later. Users should contact Mitsubishi Electric to obtain the fixed firmware version. To update affected CC-Link IE TSN Industrial Managed Switch products log into the product with the web interface and go to [System] → [System Management] → [Firmware Upgrade] from the Function menu after obtaining the updated firmware file.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan