ICONICS and Mitsubishi Electric Products

Risk Summary

Successful exploitation of these vulnerabilities could result in information disclosure, denial-of-service, or remote code execution.

CVEs (6)

Remediations

• Version 10.97.2 Critical Fixes Rollup 2 and later is not vulnerable to these exploits. ICONICS recommends that users of its products take the following mitigation steps:
• Ensure the 10.97.2 Critical Fixes Rollup release is applied to version 10.97.2 systems.
• For systems that do not contain the patch/fix:
• Do not use the BACnet/SC feature on a production system.
• ICONICS and Mitsubishi Electric recommend updating the ICONICS Suite with the latest security patches as they become available. ICONICS Suite security patches may be found here (login required).
• ICONICS and Mitsubishi Electric are releasing security updates as critical fixes/rollups release. For more information, refer to the ICONICS whitepaper on security vulnerabilities, the most recent version of which can be found here.
• Additional information about the security updates may also be found in Mitsubishi Electric's security advisories:
• Advisory 2022-014
• Advisory 2023-009

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing