Skip to content
OpenAdvisories
High ICSA-24-275-02 1 CVE

Mitsubishi Electric MELSEC iQ-F FX5-OPC

Published Oct 1, 2024 · Updated Oct 1, 2024

Vendor: Mitsubishi Electric Product: MELSEC iQ-F FX5-OPC

Summary

Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of service condition on the product by getting a legitimate user to import a specially crafted PKCS#12 format certificate.

Vulnerabilities 1

  • Medium 5.5
    CVE-2024-0727

    PKCS12 Decoding crashes

    Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Revision history

  1. #1

    Initial Publication

References