Mitsubishi Electric FA Engineering Software Products (Update D)

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose, tamper with, destroy or delete information in the products, or cause a denial-of-service (DoS) condition on the products.

CVEs (2)

Remediations

• Mitsubishi Electric recommends users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
• EZSocket: Download version 5.A or later.
• GT Designer3 Version1(GOT1000): Download version 1.330U or later.
• GT Designer3 Version1(GOT2000): Download version 1.325P or later.
• GX Works2: Download version 1.630G or later.
• GX Works3: Download version 1.110Q or later.
• MELSOFT Navigator: Download version 2.106L or later.
• MT Works2: Download version 1.195D or later.
• MX Component: Download version 5.008J or later.
• When connecting your personal computer with the affected products to the internet, use a firewall, virtual private network (VPN), etc., to prevent unauthorized access and allow only trusted users to remote login.
• Use your personal computer with the affected products within a LAN and block access from untrusted networks and hosts.
• Restrict physical access to your computer using the affected products as well as to the personal computers and network devices that can communicate with it.
• Install antivirus software on your personal computer using the affected products and on the personal computers that can communicate with it.
• Don't open untrusted files or click untrusted links.
• For more information, see Mitsubishi Electric's security advisory.

Affected Vendors

Affected Products (9)

Affected Sectors

Critical Manufacturing