ICONICS GENESIS64 and Mitsubishi Electric MC Works64

Risk Summary

Successful exploitation of these vulnerabilities may result in remote code execution.

CVEs (2)

Remediations

• ICONICS and Mitsubishi Electric are releasing Critical Fix Rollups or patches for these products. GENESIS64 Version 10.97.1 and later will not be vulnerable to this exploit.
• Use a firewall. Place control system networks and devices behind firewalls and isolate them from the business network.
• Minimize network exposure for all control system devices. Control system devices should not directly face the Internet.
• Do not click web links or open unsolicited attachments in email messages.
• When importing any AutoCad DWG file, make sure it is known to come from a trusted source.
• Install the applicable Critical Fix Rollup, when available.
• ICONICS provides information and useful links related to its security updates at its company website.
• Mitsubishi Electric provides information and useful links related to this security update at its company website.

Affected Vendors

Affected Products (2)

Affected Sectors

Multiple including Critical Manufacturing