Mitsubishi Electric MELSEC iQ-R Series
Successful exploitation of this vulnerability could allow a remote attacker to be able to log in to the CPU module by obtaining credentials.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-20599US | high7.5OT erhöht | — | ||
Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-21-287-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-21-287-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationMELSEC iQ-R series SIL2 Process CPU R08PSFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series SIL2 Process CPU R120PSFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series SIL2 Process CPU R16PSFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series SIL2 Process CPU R32PSFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series Safety CPU R08SFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series Safety CPU R120SFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series Safety CPU R16SFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
- MitigationMELSEC iQ-R series Safety CPU R32SFCPU Firmware
Customers using the affected products and versions may take measures through mitigations and workarounds. Mitsubishi Electric has released the fixed version as shown above, but updating the product to the fixed version is not available. Mitsubishi Electric recommends users take the following mitigation measures to minimize risk associated with this vulnerability:
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan