Skip to content
OpenAdvisories
High ICSA-22-130-06 2 CVEs

Mitsubishi Electric MELSOFT GT OPC UA

Published May 10, 2022 · Updated May 10, 2022

Vendor: Mitsubishi Electric Product: GT SoftGOT2000 Product: MELSOFT GT OPC UA Client

Summary

Successful exploitation of these vulnerabilities could allow a remote attacker to send specially crafted messages, resulting in information disclosure or a denial-of-service condition.

Vulnerabilities 2

  • High 7.5
    CVE-2021-23840 Public exploit EPSS 51%

    Integer overflow in CipherUpdate

    Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the …

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io
  • High 7.4
    CVE-2021-3712 Public exploit EPSS 48%

    Read buffer overruns processing ASN.1 strings

    ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string dat…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io

Revision history

  1. #1

    ICSA-22-130-06 Mitsubishi Electric MELSOFT GT OPC UA

References