Mitsubishi Electric FA Engineering Software (Update C)
Successful exploitation of these vulnerabilities could allow unauthorized users to gain access to the MELSEC iQ-R/F/L series CPU modules and the MELSEC iQ-R series OPC UA server module or to view and execute programs or view project files without permissions.
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-29833US | medium6.5 | — | ||
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthenticated attacker to disclose sensi… | ||||
| CVE-2022-29832US | medium6.5OT erhöht | — | ||
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer v… | ||||
| CVE-2022-29831US | high7.5OT erhöht | — | ||
Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthenticated attacker to obtain information… | ||||
| CVE-2022-29830US | critical9.1OT erhöht | — | ||
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Setting(GX Works3 related software) versions f… | ||||
| CVE-2022-29829US | high7.5OT erhöht | — | ||
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, M… | ||||
| CVE-2022-29828US | high7.5OT erhöht | — | ||
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive inf… | ||||
| CVE-2022-29827US | high7.5OT erhöht | — | ||
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive inf… | ||||
| CVE-2022-29826US | high7.5OT erhöht | — | ||
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) vers… | ||||
| CVE-2022-29825US | high7.5OT erhöht | — | ||
Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Wor… | ||||
| CVE-2022-25164US | high7.5OT erhöht | — | ||
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R ver… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-333-05 JSONself
- ICSA Advisory ICSA-22-333-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (33)
- MitigationGT Designer3 Version1 (GOT2000)
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGT Designer3 Version1 (GOT2000)
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Developer
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works2
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationGX Works3
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMT Works2
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMT Works2
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMX OPC UA Module Configurator-R
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMotion Control Settings (GX Works3 related software)
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMotion Control Settings (GX Works3 related software)
Encrypt project files and security keys when sending or receiving over the Internet.
- MitigationMotion Control Settings (GX Works3 related software)
Encrypt project files and security keys when sending or receiving over the Internet.
- BehobenGX Works3
GX Works3:
- BehobenGX Works3
GX Works3:
- BehobenGX Works3
GX Works3:
- BehobenGX Works3
GX Works3:
- BehobenGX Works3
GX Works3:
- BehobenGX Works3
GX Works3:
- BehobenGX Works3
GX Works3:
- BehobenGX Works3
GX Works3:
- BehobenGX Works3
GX Works3:
- BehobenGX Works3
GX Works3:
- BehobenMT Works2
MT Works2:
- BehobenMT Works2
MT Works2:
- BehobenMX OPC UA Module Configurator-R
MX OPC UA Module Configurator-R:
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan