Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-47gg-jmh3-w48g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

EPSS

Процентиль: 54%
0.00307
Низкий

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 7.5
nvd
около 5 лет назад

Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.

CVSS3: 7.5
fstec
почти 5 лет назад

Уязвимость программируемого логического контроллера MELSEC iQ-R, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 54%
0.00307
Низкий

Дефекты

CWE-400