Mitsubishi Electric GT and GOT Series Products
Successful exploitation of this vulnerability could allow an attacker to obtain plaintext passwords by sniffing packets containing encrypted passwords and decrypting the encrypted passwords.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-0525US | high7.5 | — | ||
Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 mo… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-215-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-215-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationGOT SIMPLE (Models GS25, GS21)
Encrypt communication paths to the affected product with a VPN or other means.
- MitigationGOT2000 (Models GT21, GT23, GT25, GT27)
Encrypt communication paths to the affected product with a VPN or other means.
- MitigationGT Designer3 Version1 (GOT2000)
Encrypt communication paths to the affected product with a VPN or other means.
- MitigationGT SoftGOT2000
Encrypt communication paths to the affected product with a VPN or other means.
- BehobenGOT SIMPLE (Models GS25, GS21)
GOT SIMPLE (Models GS25, GS21): Update to v01.50.000 or later
- BehobenGOT2000 (Models GT21, GT23, GT25, GT27)
GOT2000 (Models GT21, GT23, GT25, GT27): Update to v01.50.000 or later
- BehobenGT Designer3 Version1 (GOT2000)
GT Designer3 Version1 (GOT2000): Update to v1.300N or later
- BehobenGT SoftGOT2000
GT SoftGOT2000: Update to v1.300N or later
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan