Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contains multiple denial-of-service (DoS) vulnerabilities listed below. <ul><li>Denial-of-service (DoS) vulnerability in FTP service (CWE-400) - CVE-2023-41963</li><li>Denial-of-service (DoS) vulnerability in commplex-link service (CWE-400) - CVE-2023-49140</li><li>Denial-of-service (DoS) vulnerability in rfe service (CWE-400) - CVE-2023-49143</li><li>Denial-of-service (DoS) vulnerability in NetBIOS service (CWE-400) - CVE-2023-49713</li></ul> JTEKT ELECTRONICS CORPORATION reported these vulnerabilities to IPA to notify users of the solution through JVN. JPCERT/CC and JTEKT ELECTRONICS CORPORATION coordinated under the Information Security Early Warning Partnership.