Mitsubishi Electric Multiple FA Engineering Software Products (Update E)

Risk Summary

Successful exploitation of these vulnerabilities may allow a local attacker to cause a Windows blue screen error that results in a denial-of-service condition. Additionally, an attacker may gain Windows system privileges and execute arbitrary commands.

CVEs (12)

Remediations

• Mitsubishi Electric recommends users download and install the update as follows:
• CPU Module Logging Configuration Tool : Update to"1.160S" or later.
• CSGL (GX Works2 connection configuration): Update to "2.6" or later - contact your place of purchase for assistance.
• CW Configurator: Update to "1.020W" or later.
• Data Transfer: Update to "3.59M" or later.
• Data Transfer Classic: Update to "1.01B" or later.
• EZSocket: Update to "5.A" or later - contact your place of purchase for assistance.
• FR Configurator2: Update to "1.33K" or later.
• GENESIS: Update to "11" or later. GENESIS is the successor product to GENESIS64 and the ICONICS Suite.
• GT Designer3 Version1 (GOT1000): Update to "1.315D" or later.
• GT Designer3 Version1 (GOT2000): Update to "1.320J" or later.
• GT SoftGOT1000 Version3: Update to "3.315D" or later.
• GT SoftGOT2000 Version1: Update to "1.320J" or later.
• GX LogViewer: Update to "1.160S" or later.
• GX Works2: Update to "1.625B" or later.
• GX Works3: Update to "1.110Q" or later.
• iQ Works (MELSOFT Navigator): Update to "2.106L" or later.
• Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): Update to "A9" or later
• MR Configurator2: Update to "1.155M" or later.
• Position Board Utility2(MRZJW3-MC2-UTL): Update to "3.50" or later.
• MX Component: Update to "5.008J" or later.
• PX Developer/Monitor Tool: Update to "1.59M" or later.
• RT ToolBox3: Update to "2.50C" or later.
• RT VisualBox: Update to "1.12N" or later.
• Setting/monitoring tools for the C Controller module (SW4PVC-CCPU): Update to "4.15R" or later.
• MELSECNET/H Interface Board software package (SW0DNC-MNETH-B): Update to "37P" or later.
• CC-Link System Master/Local Interface Board software package (SW1DNC-CCBD2-B): Update to "1.26C" or later.
• CC-Link IE Field Network Interface Board software package (SW1DNC-CCIEF-J/-B): Update to "1.19V" or later.
• CC-Link IE Controller Network Interface Board software package (SW1DNC-MNETG-B): Update to "1.32J" or later.
• C Controller Interface Module utility (SW1DNC-QSCCF-B): Update to "2.20" or later - contact your place of purchase for assistance.
• MELSOFT EM Software Development Kit (SW1DND-EMSDK-B): Update to "1.025B" or later.
• MT Works2: Update to "1.205P" or later.
• Mitsubishi Electric recommends users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
• Restrict physical access to the computer using the product.
• Install an antivirus software in your computer using the affected product.
• Don't open untrusted files or click untrusted links.
• For additional information see Mitsubishi Electric advisory 2024-001.

Affected Vendors

Affected Products (37)

Affected Sectors

Critical Manufacturing