Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks

guest · Aug 5, 2021

Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks
August 5, 2021
https://thehackernews.com/2021/08/unpatched-security-flaws-expose.html

Multiple unpatched security vulnerabilities have been disclosed in Mitsubishi safety programmable logic controllers (PLCs) that could be exploited by an adversary to acquire legitimate user names registered in the module via a brute-force attack, unauthorized login to the CPU module, and even cause a denial-of-service (DoS) condition.

The security weaknesses, disclosed by Nozomi Networks, concern the implementation of an authentication mechanism in the MELSEC communication protocol that's used to exchange data with the target devices that is used for communication with target devices by reading and writing data to the CPU module.
Click to expand...

A quick summary of the flaws is listed below

Username Brute-force (CVE-2021-20594, CVSS score: 5.9)

Anti-password Brute-force Functionality Leads to Overly Restrictive Account Lockout Mechanism (CVE-2021-20598, CVSS score: 3.7)

Leaks of Password Equivalent Secrets (CVE-2021-20597, CVSS score: 7.4)

Session Token Management - Cleartext transmission of session tokens, which are not bound to an IP address, thus enabling an adversary to reuse the same token from a different IP after it has been generated

The researchers refrained from sharing technical specifics of the vulnerabilities or the proof-of-concept (PoC) code that was developed to demonstrate the attacks due to the possibility that doing so could lead to further abuse.
Click to expand...

Log in or Sign up

Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks

guest Guest

Log in or Sign up

Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks

guest Guest

Useful Searches