Plan ahead Medium Check your exposure
Mitsubishi Electric updates advisory on CNC denial-of-service flaw
Mitsubishi Electric PSIRTMitsubishi Electric · manufacturing
What happened. Mitsubishi Electric's security team (PSIRT) has updated its advisory on a denial-of-service flaw in its computer numerical control (CNC) series. The feed gives no score or affected models.
Who is affected. Users of Mitsubishi Electric CNC series machine controls, especially in manufacturing. The source does not list models or versions.
What to do. Check the Mitsubishi Electric advisory for affected CNC models and fixes, then compare them with your asset inventory.
When to act. Plan ahead: Manufacturers running these CNC controls should check the vendor advisory for affected models.
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L1
Why: CNC machine controls act as controllers on the shop floor, which places them at L1.
- Are you exposed?
Compare the CNC models listed in the Mitsubishi Electric advisory with the machine controls in your asset inventory.
- If you cannot fix it yet
- Restrict network access to CNC controllers to known engineering and operator hosts.
- Segment CNC controllers behind a firewall away from office IT.
- Watch for
- Unexpected network traffic to CNC controllers from hosts outside the engineering network.
- Controller faults or restarts with no operator cause.
- ATT&CK for ICS
- T0814Denial of Service
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: Mitsubishi Electric PSIRT (opens mitsubishielectric.com)
More on Mitsubishi Electric Manufacturing