← Back to home
ICSA-22-132-02  ·  Published 2022-05-12  ·  View on CISA ICS-CERT ↗

Mitsubishi Electric MELSOFT iQ AppPortal

CVSS 9.8 CRITICAL

Risk Summary

Successful exploitation of these vulnerabilities could result in a denial-of-service condition, malicious program execution, information disclosure, information tampering, or authentication bypass.

Remediations

  • Update to 1.29F or later. Unzip the downloaded file (zip format) and execute the file “setup.exe.”
  • Restrict network access to the computer running this product so it can be accessed only from trusted networks or hosts.
  • Minimize user privilege for product users.
  • Install an antivirus software in the personal computer that runs this product.
  • Please follow the safety precautions in the operating manual for the product.
  • For more information see Mitsubishi Electric's advisory 2022-003

Affected Vendors

Mitsubishi Electric

Affected Products (1)

Mitsubishi Electric · MELSOFT iQ AppPortal (SW1DND-IQAPL-M) >= 1.00A | <= 1.26C

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more