[Control systems] Mitsubishi Electric security advisory (AV22-166)

Number: AV22-166
Date: 31 March 2022

On 31 March 2022 ICS-CERT published an ICS Advisory to highlight vulnerabilities in the following products:

• MELSEC iQ-F Series FX5U(C) CPU modules – all models, all versions
• MELSEC iQ-F Series FX5UJ CPU modules – all models, all versions

Exploitation of these vulnerabilities could lead to authentication bypass and information disclosure.

The Cyber Centre encourages users and administrators to review the provided web link and perform the suggested mitigations.

ICS Advisory (ICSA-22-090-04)