ICONICS and Mitsubishi Electric Products
Successful exploitation of these vulnerabilities could result in information disclosure, denial-of-service, or remote code execution.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-4203US | medium4.9 | — | ||
A read buffer overrun can be triggered in X.509 certificate verification,
specifically in name constraint checking. Note that this occurs
after certificate chain signature verifica… | ||||
| CVE-2023-0401US | high7.5 | — | ||
A NULL pointer can be dereferenced when signatures are being
verified on PKCS7 signed or signedAndEnveloped data. In case the hash
algorithm used for the signature is known to the… | ||||
| CVE-2022-4450US | high7.5 | — | ||
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.
If the function succeeds th… | ||||
| CVE-2022-4304US | medium5.9 | Exploit | ||
A timing based side channel exists in the OpenSSL RSA Decryption implementation
which could be sufficient to recover a plaintext across a network in a
Bleichenbacher style attack.… | ||||
| CVE-2022-3786US | high7.5 | Exploit | ||
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification… | ||||
| CVE-2022-3602US | high7.5 | Exploit | ||
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-229-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-229-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
- MitigationICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan