Medium ICSA-21-350-05 2 CVEs

Mitsubishi Electric FA Engineering Software (Update B)

Published Dec 16, 2021 · Updated Dec 16, 2021

Vendor: Mitsubishi Electric Product: EZSocket Product: GX Works2 Product: MELSOFT Navigator

Summary

Successful exploitation of these vulnerabilities may cause a denial-of-service condition.

Vulnerabilities 2

Unscored —

CVE-2021-20606

Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOF…

Dec 17, 2021
Unscored —

CVE-2021-20607

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT…

Dec 17, 2021

Revision history

2021-12-16 #1
ICSA-21-350-05 Mitsubishi FA Engineering Software

References

ICS Advisory ICSA-21-350-05 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-350-05
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B