Serious weakness at Mitsubishi Electric

Serious weakness at Mitsubishi Electric

Tokyo, 14.6.2020

Mitsubishi Electric warned of a serious denial of service vulnerability affecting its automation controls that could allow an attacker to disrupt industrial production.

The Japanese company stated that an attacker could exploit the vulnerability to send a large number of specially crafted packets over a short period of time, disabling the Ethernet port and the corresponding production service.

Mitsubishi Electric has issued patches for some affected models, and other models will be repaired „soon“.

The vulnerability was discovered by the security research company SCADAfence.