Description
Improper Validation of Specified Type of Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET versions 1.100 to 1.200 and FX5-ENET/IP versions 1.100 to 1.104 allows a remote attacker to cause a Denial of Service condition in Ethernet communication of the products by sending specially crafted SLMP packets.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mitsubishi Electric | MELSEC iQ-F Series FX5-ENET | 1.100 to 1.200 | — |
| Mitsubishi Electric | MELSEC iQ-F Series FX5-ENET/IP | 1.100 to 1.104 | — |
Advisories 1
- ICSA-24-324-01 Mitsubishi Electric MELSEC iQ-F Series (Update A) CISA ICS & IT advisories · Mar 31, 2026
References
- https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-009_en.pdf vendor-advisory
- https://jvn.jp/vu/JVNVU97790713/ government-resource
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-324-01 government-resource