Summary
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition, a timeout error, or a communication delay by sending a specially crafted UDP packet to the product.
Vulnerabilities 1
-
High 7.5
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remo…
Revision history
-
#10
CISA Republication update based on Mitsubishi Electric 2025-001 advisory
-
#9
R04ENCPU (Network Part), R08RNCPU (Network Part), R16ENCPU (Network Part), R32ENCPU (Network Part), and R12ENCPU (Network Part) have been added as affected products and fixed products, and the "remediations" was revised.
-
#8
CISA Republication - Update C - Added FX5-CCLGN-MS and FX5-ENET/IP that have been fixed to Countermeasures for Products. Affected products, Countermeasures for Customers, and Countermeasures for Products have been revised.
-
#7
Added FX5-CCLGN-MS and FX5-ENET/IP have been added as fixed products, and the "remediations" was revised.
-
#6
FX5-CCLGN-MS, AFX5-ENET, and AFX5-ENET/IP have been added as affected products and fixed products, and the "remediations" was revised.
-
#5
CISA Republication - Update B - Update to Summary, Affected products, and Remediations have been revised. The affected products FX5-CCLGN-MS, FX5-ENET, and FX5-ENET/IP have been added.
-
#4
CISA Republication - Update A - Update to Affected products, Impact, Countermeasures for Customers, Countermeasures for Products have been revised. The affected products RJ71GN11-T2, RJ71GN11-EIP, RJ71GN11-SX, RJ71EN71, NZ2GACP610-60 and NZ2KT-NPETNG51 have been added.
-
#3
RJ71GN11-T2, RJ71GN11-EIP, RJ71GN11-SX, RJ71EN71, NZ2GACP610-60, and NZ2KT-NPETNG51 have been added as affected products and fixed products, and the "remediations" was revised.
-
#1
CISA Republication - Initial Republication
-
#2
Initial Publication
References
-
Mitsubishi Electric Advisory 2025-001
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf
-
ICS Advisory ICSA-25-128-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b