ICSA-23-278-03

icsaUScisa_csaf_ot

Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch (Update A)

Advisory ansehen veröffentlicht 2023-10-05

Successful exploitation of these vulnerabilities could result in disclosure of information stored in the product by sending specially crafted packets or could cause a denial-of service (DoS) condition by getting a legitimate user to import a specially crafted certificate.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-4450UShigh—
CVE-2022-4304USmedium—
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

  • MitigationCC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT4

    Additionally, Mitsubishi Electric recommends that customers take the following mitigations to minimize the risk of exploitation of these vulnerabilities:

  • MitigationCC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT4

    Additionally, Mitsubishi Electric recommends that customers take the following mitigations to minimize the risk of exploitation of these vulnerabilities:

  • MitigationCC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT8F2

    Additionally, Mitsubishi Electric recommends that customers take the following mitigations to minimize the risk of exploitation of these vulnerabilities:

  • MitigationCC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT8F2

    Additionally, Mitsubishi Electric recommends that customers take the following mitigations to minimize the risk of exploitation of these vulnerabilities:

  • BehobenCC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT8F2

    Update CC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT8F2 and NZ2MHG-TSNT4 to firmware version 06 or later

  • BehobenCC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT8F2

    Update CC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT8F2 and NZ2MHG-TSNT4 to firmware version 06 or later

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan