ICSA-19-029-02

icsaUScisa_csaf_ot

Mitsubishi Electric MELSEC-Q Series PLCs

Advisory ansehen veröffentlicht 2019-01-29

Successful exploitation of this vulnerability could allow a remote attacker to send specially crafted packets to the device via Ethernet, causing Ethernet and USB communication to stop.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-6535UShigh7.5—
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: seria…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (3)

  • MitigationQ03/04/06/13/26UDVCPU

    Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.

  • MitigationQ03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU

    Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.

  • MitigationQ04/06/13/26UDPVCPU

    Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan