Skip to content
OpenAdvisories
Critical ICSA-22-221-01 2 CVEs

Mitsubishi Electric Multiple Factory Automation Products (Update B)

Published Aug 30, 2022 · Updated Feb 2, 2023 · Revision 4

Vendor: Mitsubishi Electric Product: CC-Link IE TSN Industrial Managed Switch (NZ2MHG-TSNT8F2 NZ2MHG-TSNT4) Product: GOT2000 compatible HMI software (GT SoftGOT2000) Product: MELSEC iQ-R Series OPC UA Server Module (RD81OPC96)

Summary

Successful exploitation of these vulnerabilities could create a denial-of-service condition or enable arbitrary code execution.

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-1292 Public exploit EPSS 83%

    The c_rehash script allows command injection

    The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io

Revision history

  1. #4

    Mitsubishi Electric Multiple Factory Automation Products (Update C)

  2. #3

    Mitsubishi Electric Multiple Factory Automation Products (Update B)

  3. #2

    Mitsubishi Electric Multiple Factory Automation Products (Update A)

  4. #1

    Mitsubishi Electric Multiple Factory Automation Products (Update C)

References