ICS Advisory: Mitsubishi Electric MELSEC-F Series

Here is a summary of the provided document:

Summary:

A high-severity vulnerability, rated CVSS v3 9.1, has been discovered in Mitsubishi Electric Corporation's MELSEC-F Series programmable controllers. The vulnerability, identified as CVE-2023-4562, allows an attacker to access and manipulate sequence programs, data, and authentication without authorization, potentially leading to unauthorized access and data tampering. The affected products, which are used in critical manufacturing sectors worldwide, are listed in section 3.1 of the document. To mitigate the risk, Mitsubishi Electric recommends implementing firewalls, restricting physical access, and updating software. CISA recommends performing impact analysis, using defensive measures, and implementing recommended cybersecurity strategies.