ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA

Risk Summary

Successful exploitation of this vulnerability could trigger a stack overflow.

CVEs (1)

Remediations

• ICONICS and Mitsubishi Electric are releasing Critical Fix Rollup packages or patches that will include the solution to this vulnerability. GENESIS64 Versions 10.97.1 and later will not be vulnerable to this exploit.
• Place control system networks and devices behind firewalls to isolate them from the business network.
• Minimize network exposure for all control system devices. Control system devices should not directly face the Internet.
• Do not click web links or open unsolicited attachments in e-mail messages.
• Leverage OPC UA security and certificates to ensure ICONICS products only connect to trusted OPC UA servers and clients.
• Install the applicable Critical Fixes Rollup, if available.
• ICONICS provides information and useful links related to its security updates at its company website.
• Mitsubishi Electric provides information and useful links related to its security updates its company website.

Affected Vendors

Affected Products (5)

Affected Sectors

Multiple Sectors