Mitsubishi Electric has an update available to handle an allocation of resources without limits or throttling vulnerability in its CC-Link IE TSN Industrial Managed Switch, according to a report with CISA.

Successful exploitation of this remotely exploitable vulnerability, which Mitsubishi Electric self-reported, could allow an attacker to cause a temporary denial-of service (DoS) condition in the web service on the product.

The following versions of CC-Link IE TSN Industrial Managed Switch suffer from the issue:
— NZ2MHG-TSNT8F2: Versions 05 and prior
— NZ2MHG-TSNT4: Versions 05 and prior

In the vulnerability, Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch has an OpenSSL vulnerability that allows an attacker to cause a temporary denial-of service (DoS) condition on the web service of the product by getting a legitimate administrator user to import specially crafted certificate that makes the product experience notable to very long delays.

CVE-2023-2650 is the case number for this vulnerability, which has a CVSS v3.1 base score of 2.7. There is also a CVSS v4 base score of 5.1.

Schneider Bold

The product sees use mainly in the critical manufacturing sector, and on a global basis.

No known exploit targets this vulnerability. However, an attacker could leverage this low complexity vulnerability.

Mitsubishi Electric recommends users to update to the fixed versions by following the steps below:

  • [Fixed versions]
  • CC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT8F2: Version “06” or later
  • CC-Link IE TSN Industrial Managed Switch NZ2MHG-TSNT4: Version “06” or later

[Update steps]

  • Contact your local Mitsubishi Electric representative to obtain the fixed firmware version file for CC-Link IE TSN Industrial Managed Switch.
  • After logging into NZ2MHG-TSNT8F2 or NZ2MHG-TSNT4 through the web interface, update the firmware to the fixed firmware version file mentioned in the above (1) by the function of [System] -> [System Management] -> [Firmware Upgrade] from Function menu. For the detailed procedures, please refer to “CC-Link IE TSN Industrial Managed Switch User’s Manual (SH-082449ENG)”.

Mitsubishi Electric recommends users take the following mitigations to minimize the risk of exploiting this vulnerability:

  1. When you need Internet access, use a virtual private network (VPN) or other means to prevent unauthorized access.
  2. Use the products within a LAN and block access from untrusted networks and hosts.
  3. Restrict physical access to the product and your computer and network equipment on the same network.
  4. After you log into NZ2MHG-TSNT8F2 or NZ2MHG-TSNT4 through the web interface, change user name and password from default setting at [Account Management] displayed on the function menu. Also, set the proper access permissions for the users.

For additional information click on Mitsubishi Electric advisory 2024-002.

ISSSource

Pin It on Pinterest

Share This