SecurityWeek reports that numerous Mitsubishi Electric factory automation products were disclosed to have been affected by serious security vulnerabilities, including a critical remote code execution flaw, tracked as CVE-2023-6943, and a high-severity authentication bypass vulnerability, tracked as CVE-2023-6942. Attackers could leverage the flaws to facilitate data exposure, tampering, and deletion, as well as denial-of-service, according to Mitsubishi Electric, which has recommended the immediate strengthening of cybersecurity measures amid the pending release of patches.

Source: SC Magazine