icsa-24-051-03
Vulnerability from csaf_cisa
Published
2024-02-20 07:00
Modified
2024-04-23 06:00
Summary
Mitsubishi Electric Electrical discharge machines
Notes
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of this vulnerability could allow an attacker to disclose, tamper with, destroy, or delete information in the products, or cause a denial-of-service condition on the products.
Critical infrastructure sectors
Critical Manufacturing
Countries/areas deployed
Worldwide
Company headquarters location
Japan
Recommended Practices
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
Recommended Practices
No known public exploitation specifically targeting this vulnerability) has been reported to CISA at this time.
{
"document": {
"acknowledgments": [
{
"organization": "Mitsubishi Electric",
"summary": "reporting this vulnerability to CISA"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of this vulnerability could allow an attacker to disclose, tamper with, destroy, or delete information in the products, or cause a denial-of-service condition on the products.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": "Critical Manufacturing",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Japan",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "No known public exploitation specifically targeting this vulnerability) has been reported to CISA at this time.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-24-051-03 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-051-03.json"
},
{
"category": "self",
"summary": "ICSA Advisory ICSA-24-051-03 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-051-03"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Mitsubishi Electric Electrical discharge machines",
"tracking": {
"current_release_date": "2024-04-23T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-24-051-03",
"initial_release_date": "2024-02-20T07:00:00.000000Z",
"revision_history": [
{
"date": "2024-02-20T07:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Initial Publication"
},
{
"date": "2024-04-23T06:00:00.000000Z",
"legacy_version": "Update A",
"number": "2",
"summary": "Added Special Modification Patch BRD-C62W003-A0"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV1200S D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV1200S D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV2400S D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV2400S D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV4800S D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0003"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV4800S D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV1200R D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0004"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV1200R D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV2400R D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV2400R D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV4800R D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0006"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV4800R D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV1200S D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0007"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV1200S D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV2400S D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0008"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV2400S D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV4800S D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0009"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV4800S D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV1200R D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0010"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV1200R D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV2400R D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0011"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV2400R D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MV Series MV4800R D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0012"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MV Series MV4800R D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MP Series MP1200 D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0013"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MP Series MP1200 D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MP Series MP2400 D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0014"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MP Series MP2400 D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MP Series MP4800 D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0015"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MP Series MP4800 D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MP Series MP1200 D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0016"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MP Series MP1200 D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MP Series MP2400 D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0017"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MP Series MP2400 D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MP Series MP4800 D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0018"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MP Series MP4800 D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MX Series MX900 D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0019"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MX Series MX900 D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MX Series MX2400 D-CUBES Series Standard system BRD-B60W000: \u003c=B13__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0020"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MX Series MX2400 D-CUBES Series Standard system BRD-B60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MX Series MX900 D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0021"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MX Series MX900 D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Wire-cut EDM MX Series MX2400 D-CUBES Series Special system BRD-B63W000 to W036: vers:all/*",
"product_id": "CSAFPID-0022"
}
}
],
"category": "product_name",
"name": "Wire-cut EDM MX Series MX2400 D-CUBES Series Special system BRD-B63W000 to W036"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SV-P Series SV8P D-CUBES Series Standard system BRD-M60W000: \u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0023"
}
}
],
"category": "product_name",
"name": "Sinker EDM SV-P Series SV8P D-CUBES Series Standard system BRD-M60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SV-P Series SV12P D-CUBES Series Standard system BRD-M60W000: \u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0024"
}
}
],
"category": "product_name",
"name": "Sinker EDM SV-P Series SV12P D-CUBES Series Standard system BRD-M60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SV-P Series SV8P D-CUBES Series Special system BRD-M63W000 to W022: vers:all/*",
"product_id": "CSAFPID-0025"
}
}
],
"category": "product_name",
"name": "Sinker EDM SV-P Series SV8P D-CUBES Series Special system BRD-M63W000 to W022"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SV-P Series SV12P D-CUBES Series Special system BRD-M63W000 to W022: vers:all/*",
"product_id": "CSAFPID-0026"
}
}
],
"category": "product_name",
"name": "Sinker EDM SV-P Series SV12P D-CUBES Series Special system BRD-M63W000 to W022"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SG Series SG8 D-CUBES Series Standard system BRD-M60W000: \u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0027"
}
}
],
"category": "product_name",
"name": "Sinker EDM SG Series SG8 D-CUBES Series Standard system BRD-M60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SG Series SG12 D-CUBES Series Standard system BRD-M60W000: \u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0028"
}
}
],
"category": "product_name",
"name": "Sinker EDM SG Series SG12 D-CUBES Series Standard system BRD-M60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SG Series SG28 D-CUBES Series Standard system BRD-M60W000: \u003c=A12__without_Special_Modification_Patch_BRD-C62W003-A0_installed",
"product_id": "CSAFPID-0029"
}
}
],
"category": "product_name",
"name": "Sinker EDM SG Series SG28 D-CUBES Series Standard system BRD-M60W000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SG Series SG8 D-CUBES Series Special system BRD-BRD-M63W000 to W022: vers:all/*",
"product_id": "CSAFPID-0030"
}
}
],
"category": "product_name",
"name": "Sinker EDM SG Series SG8 D-CUBES Series Special system BRD-BRD-M63W000 to W022"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SG Series SG12 D-CUBES Series Special system BRD-M63W000 to W022: vers:all/*",
"product_id": "CSAFPID-0031"
}
}
],
"category": "product_name",
"name": "Sinker EDM SG Series SG12 D-CUBES Series Special system BRD-M63W000 to W022"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "Mitsubishi Electric Corporation Sinker EDM SG Series SG28 D-CUBES Series Special system BRD-M63W000 to W022: vers:all/*",
"product_id": "CSAFPID-0032"
}
}
],
"category": "product_name",
"name": "Sinker EDM SG Series SG28 D-CUBES Series Special system BRD-M63W000 to W022"
}
],
"category": "vendor",
"name": "Mitsubishi Electric Corporation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-21554",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Remote code execution vulnerability due to Microsoft Message Queuing service on Microsoft Windows exists in electrical discharge machines.",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-21554"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Mitsubishi Electric recommends that users install the Special Modification Patch BRD-C62W003-A0 on their system. For information about how to install the update program, please contact your local service center.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032"
]
},
{
"category": "mitigation",
"details": "Mitsubishi Electric recommends taking the mitigations listed below to minimize the risk of exploitation of this vulnerability.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032"
]
},
{
"category": "mitigation",
"details": "Use a firewall, virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032"
]
},
{
"category": "mitigation",
"details": "Use within a LAN and block access from untrusted networks and hosts through firewalls.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032"
]
},
{
"category": "mitigation",
"details": "Restrict physical access to the affected products and to personal computers and network devices that can communicate with them.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032"
]
},
{
"category": "mitigation",
"details": "Install anti-virus software on personal computers that can communicate with the affected products.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032"
]
},
{
"category": "mitigation",
"details": "For specific update instructions and additional details refer to Mitsubishi Electric advisory 2023-022.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-022_en.pdf"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032"
]
}
]
}
]
}
Loading...