Description
Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending a large number of packets in a short time while the module starting up. System reset is required for recovery.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V | Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior | — |
Advisories 1
- ICSA-21-280-04 Mitsubishi Electric MELSEC iQ-R Series C Controller Module (Update B) CISA ICS & IT advisories · Oct 28, 2021