ICS Advisory: Mitsubishi Electric MELSEC WS Series Ethernet Interface Module

Summary:

A vulnerability has been identified in Mitsubishi Electric's MELSEC WS Series Ethernet Interface Modules, which allows an unauthorized attacker to bypass authentication and login to the modules. This can potentially allow attackers to disclose or tamper with programs and parameters in the modules. The vulnerability has a CVSS v3 score of 5.9 and is exploitable remotely. Mitsubishi Electric recommends taking several mitigation measures to minimize the risk of exploiting this vulnerability, including using a virtual private network (VPN), firewall, and restricting physical access to affected products.