Mitsubishi Electric MELSOFT GT OPC UA

Risk Summary

Successful exploitation of these vulnerabilities could allow a remote attacker to send specially crafted messages, resulting in information disclosure or a denial-of-service condition.

CVEs (2)

Remediations

• Mitsubishi Electric recommends users update software
• Update MELSOFT GT OPC UA Client: Update to 1.03D or later
• Update GT SoftGOT2000: Update to 1.275M or later
• When connecting the products to the Internet, use a virtual private network (VPN, etc.) to prevent spoofing and sniffing.
• Use the products within the LAN and block access from untrusted networks and hosts.
• Update the OPC UA server to the latest version.
• Install antivirus software.
• Restrict physical access to computers and network equipment that use the affected products.

Affected Vendors

Affected Products (2)

Affected Sectors

Critical Manufacturing