Security News > 2020 > June > Mitsubishi Patches Vulnerabilities Disclosed at ICS Hacking Contest

Mitsubishi Patches Vulnerabilities Disclosed at ICS Hacking Contest
2020-06-22 19:02

Mitsubishi Electric and its subsidiary ICONICS have released patches for the vulnerabilities disclosed earlier this year at the Pwn2Own Miami hacking competition, which focused on industrial control systems.

White hat hackers earned a total of $280,000 for the exploits they demonstrated at the Zero Day Initiative's Pwn2Own contest in January, including $80,000 for vulnerabilities found in ICONICS's Genesis64 HMI/SCADA product.

They reported five critical and high-severity vulnerabilities to ICONICS, including ones that allow a remote attacker to execute arbitrary code and launch denial-of-service attacks by sending specially crafted packets to the targeted system.

Learn more about vulnerabilities in industrial systems at SecurityWeek's 2020 ICS Cyber Security Conference and SecurityWeek's Security Summits virtual event series.

ZDI told SecurityWeek that it will soon publish advisories for the ICONICS vulnerabilities disclosed at Pwn2Own Miami.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/TqMdlWVE1J0/mitsubishi-patches-vulnerabilities-disclosed-ics-hacking-contest

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Mitsubishi 92 0 0 8 1 9