Skip to content
OpenAdvisories
Medium ICSA-23-306-02 1 CVE

Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)

Published Nov 2, 2023 · Updated Feb 15, 2024 · Revision 2

Vendor: Mitsubishi Electric Product: FX5S-xMy/z* x=30,40,60,80, y=T,R, z=ES,ESS Product: FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 179**** and prior) Product: FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS (Serial number 17X**** and later) Product: FX5UC-32MT/DS-TS, FX5UC-32MT/DSS-TS, FX5UC-32MR/DS-TS Product: FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 179**** and prior) Product: FX5UC-xMy/z x=32,64,96, y=T, z=D,DSS (Serial number 17X**** and later) Product: FX5UJ-xMy/ES-A* x=24,40,60, y=T,R Product: FX5UJ-xMy/z x=24,40,60, y=T,R, z=ES,DS,ESS,DSS Product: R00/01/02CPU Product: R04/08/16/32/120(EN)CPU Product: R08/16/32/120/PCPU

Summary

Successful exploitation of this vulnerability could allow a remote attacker to prevent legitimate users from logging into the web server function for a certain period, resulting in a denial-of-service condition. The impact of this vulnerability will persist while the attacker continues to attempt the attack.

Vulnerabilities 1

Revision history

  1. #2

    Update A - Updated all iterations of MELSEC iQ-F to MELSEC iQ-F/iQ-R throughout the document, added iQ-R products and versions to Affected Products section, and additional mitigations in Mitigation Section.

  2. #1

    Initial Publication

References