Summary
Successful exploitation of these vulnerabilities by malicious attackers may result in network functions entering a denial-of-service condition or allow malware execution.
Vulnerabilities 6
-
Unscored —
Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP …
-
Unscored —
Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP…
-
Unscored —
NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 Et…
-
Unscored —
Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 Ethe…
-
Unscored —
Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function inc…
-
Unscored —
Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 E…
Revision history
-
#1
ICSA-20-303-02 Mitsubishi Electric MELSEC iQ-R Series
References
-
ICS Advisory ICSA-20-303-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-303-02
-
Recommended Practices
https://www.us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B