Serial number: AV23-244
Date: May 2, 2023
On May 2, 2023, CISA published an ICS Advisory to address vulnerabilities in the following products:
- MI5122-VM (MELIPC Series) - all versions
- MI1002-W (MELIPC Series) - all versions
- MI2012-W (MELIPC Series) - all versions
- MI3321G-W (MELIPC Series) - all versions
- MI3315G-W (MELIPC Series) - all versions
- Q24DHCCPU-LS (MELSEC Q Series) - all versions
- Q24DHCCPU-V (MELSEC Q Series) - all versions
- Q24DHCCPU-VG (MELSEC Q Series) - all versions
- Q26DHCCPU-LS (MELSEC Q Series) - all versions
- R102WCPU-W (MELSEC iQ-R Series) - all versions
Exploitation of these vulnerabilities could result in privilege escalation and denial of service.
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.