Mitsubishi Electric MELSEC iQ-R Series (Update C)

Risk Summary

Successful exploitation of this vulnerability could cause the Ethernet port to enter a denial-of-service condition.

CVEs (1)

Remediations

• R00/01/02CPU: Firmware Versions 8 or later
• R04/08/16/32/120CPU, R04/08/16/32/120ENCPU: Firmware Versions 40 or later
• R08/16/32/120SFCPU: Firmware Versions 21 or later
• R08/16/32/120PCPU: Firmware Versions 25 or later
• R08/16/32/120PSFCPU: Firmware Versions 06 or later
• RJ71EN71: Firmware Versions 50 or later
• Mitsubishi Electric recommends users of the affected devices take the following measures for cyber-attacks such as DoS attack or unauthorized access from untrusted networks or hosts.
• Connection to untrusted networks or hosts: Check whether the modules mounted in the equipment used are connected to untrusted networks or hosts.
• Firewalls: If the modules are connected to untrusted networks or hosts, check whether measures such as firewalls are properly configured.
• Please see the publication from Mitsubishi Electric for more information.

Affected Vendors

Affected Products (6)

Affected Sectors

Critical Manufacturing