Summary
Successful exploitation of these vulnerabilities could allow a remote attacker to cause a denial-of-service condition on the affected products by continuously sending UDP packets to the products.
Vulnerabilities 3
-
High 8.7
Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module and Ethernet module
Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module…
-
High 8.7
Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the products by cont…
-
High 8.7
Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet module
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuousl…
Revision history
-
#4
Update A - Revised Version of FX5-EIP. Added fixes for FX5-EIP.
-
#3
Version 2 - Revised Version of FX5-EIP in "Affected products." Revised the description on FX5-EIP in "Countermeasures for Customers." Added FX5-EIP that have been fixed to "Countermeasures for Products."
-
#2
CISA Republication - Initial CISA Republication of Mitsubishi Electric security advisory 2025-021
-
#1
Initial Publication
References
-
Mitsubishi Electric Advisory 2025-021
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-021_en.pdf
-
ICS Advisory ICSA-26-062-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b