Skip to content
OpenAdvisories
Medium ICSA-24-058-01 1 CVE

Mitsubishi Electric Multiple Factory Automation Products (Update A)

Published Feb 27, 2024 · Updated Jan 16, 2025 · Revision 2

Vendor: Mitsubishi Electric Product: CC-Link IE TSN - AnyWireASLINK Bridge Module NZ2AW1GNAL Product: CC-Link IE TSN - CC-Link IE Field Network Bridge Module NZ2GN-GFB Product: CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4 Product: CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4 Product: CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4 Product: CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4 Product: CC-Link IE TSN FPGA module NZ2GN2S-D41D01 Product: CC-Link IE TSN FPGA module NZ2GN2S-D41P01 Product: CC-Link IE TSN FPGA module NZ2GN2S-D41PD02 Product: CC-Link IE TSN Remote I/O module NZ2GN12A2-16T Product: CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE Product: CC-Link IE TSN Remote I/O module NZ2GN12A4-16D Product: CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE Product: CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT Product: CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE Product: CC-Link IE TSN Remote I/O module NZ2GN2B1-16D Product: CC-Link IE TSN Remote I/O module NZ2GN2B1-16T Product: CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE Product: CC-Link IE TSN Remote I/O module NZ2GN2B1-32D Product: CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT Product: CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE Product: CC-Link IE TSN Remote I/O module NZ2GN2B1-32T Product: CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE Product: CC-Link IE TSN Remote I/O module NZ2GN2S1-16D Product: CC-Link IE TSN Remote I/O module NZ2GN2S1-16T Product: CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE Product: CC-Link IE TSN Remote I/O module NZ2GN2S1-32D Product: CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT Product: CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE +120 more

Summary

Successful exploitation of this vulnerability could allow a remote attacker to cause a temporary denial-of-service (DoS) condition for a certain period of time in the product's Ethernet communication by performing a TCP SYN Flood attack.

Vulnerabilities 1

Revision history

  1. #2

    Update A - Added detail to affected product and mitigation sections.

  2. #1

    Initial Publication

References