ICONICS and Mitsubishi Electric Products

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to write arbitrary files.

CVEs (1)

Remediations

• ICONICS and Mitsubishi Electric recommend updating the ICONICS Suite software with the latest security patches when available (login required). Security updates are released as critical fixes or rollup releases.
• Locate control system networks and devices behind firewalls and isolate them from untrusted networks and hosts.
• Minimize network exposure for all control system devices. Control system devices should not directly face the internet.
• Avoid clicking on web links in emails or opening email attachments from untrusted sources.
• Only unpack files received from trusted sources.
• Protect and encrypt Pack&Go packages with a password to prevent modifications by untrustworthy users.
• Avoid unpacking a Pack&Go package file using a relative path (Note: this would show in the Workbench UI).
• Users should refer to the ICONICS whitepaper on security vulnerabilities for information on security update availability.
• Refer to the Mitsubishi Electric advisory for further details and instructions for determining installed versions.

Affected Vendors

Affected Products (2)

Affected Sectors

Critical Manufacturing