Mitsubishi Electric Multiple Products (Update G)

Risk Summary

Successful exploitation of this vulnerability could be used to hijack TCP sessions and allow remote command execution.

CVEs (1)

Remediations

• Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:
• Use a firewall or VPN, etc., to prevent unauthorized access when Internet access is required.
• Use within a LAN and ensure that they are not accessible from untrusted networks and hosts.
• Restrict physical access to affected products and any network devices on the network to which the products are connected (e.g., storing in locked cabinets, attaching seals to unused Ethernet ports).
• Install an antivirus software in your computer to access the product.
• Mitsubishi Electric has also released the following fixed versions, some products cannot be updated to the fixed version. Please check the Mitsubishi Electric website for details.
• R12CCPU-V: Version 14 or later
• RD55UP06-V: Version 10 or later
• RD55UP12-V: Version 02 or later
• RJ71GN11-T2: Version 12 or later
• Q03UDECPU: the first 5 digits of serial number 22082 or later
• Q24DHCCPU-V: the first 5 digits of serial number 24032 or later
• Q24DHCCPU-VG: the first 5 digits of serial number 24032 or later
• Q04UDEHCPU: the first 5 digits of serial number 22082 or later
• Q06UDEHCPU: the first 5 digits of serial number 22082 or later
• Q10UDEHCPU: the first 5 digits of serial number 22082 or later
• Q13UDEHCPU: the first 5 digits of serial number 22082 or later
• Q20UDEHCPU: the first 5 digits of serial number 22082 or later
• Q26UDEHCPU: the first 5 digits of serial number 22082 or later
• Q50UDEHCPU: the first 5 digits of serial number 22082 or later
• Q100UDEHCPU: the first 5 digits of serial number 22082 or later
• Q03UDVCPU: the first 5 digits of serial number 22032 or later
• Q04UDVCPU: the first 5 digits of serial number 22032 or later
• Q06UDVCPU: the first 5 digits of serial number 22032 or later
• Q13UDVCPU: the first 5 digits of serial number 22032 or later
• Q26UDVCPU: the first 5 digits of serial number 22032 or later
• Q04UDPVCPU: the first 5 digits of serial number 22032 or later
• Q06UDPVCPU: the first 5 digits of serial number 22032 or later
• Q13UDPVCPU: the first 5 digits of serial number 22032 or later
• Q26UDPVCPU: the first 5 digits of serial number 22032 or later
• L02CPU(-P): the first 5 digits of serial number 22052 or later
• L06CPU(-P): the first 5 digits of serial number 22052 or later
• L26CPU(-P): the first 5 digits of serial number 22052 or later
• L26CPU-(P)BT: the first 5 digits of serial number 22052 or later
• R08SFCPU: Version 23 or later
• R16SFCPU: Version 23 or later
• R32SFCPU: Version 23 or later
• R120SFCPU: Version 23 or later
• R08PSFCPU: Version 06 or later
• R16PSFCPU: Version 06 or later
• R32PSFCPU: Version 06 or later
• R120PSFCPU: Version 06 or later
• R08PCPU: Version 25 or later
• R16PCPU: Version 25 or later
• R32PCPU: Version 25 or later
• R120PCPU: Version 25 or later
• R00CPU: Version 19 or later
• R01CPU: Version 19 or later
• R02CPU: Version 19 or later
• R04CPU: Version 51 or later
• R08CPU: Version 51 or later
• R16CPU: Version 51 or later
• R32CPU: Version 51 or later
• R120CPU: Version 51 or later
• R04ENCPU: Version 51 or later
• R08ENCPU: Version 51 or later
• R16ENCPU: Version 51 or later
• R32ENCPU: Version 51 or later
• R120ENCPU: Version 51 or later
• FX5U(C)-**M*/** Serial number 17X**** or later, Version 1.210 and prior: Update to Version 1.211 or later
• FX5U(C)-**M*/** Serial number 179**** and prior, Version 1.070 and prior: Update to Version 1.071 or later
• FX5UC-32M*/**-TS, Version 1.210 and prior: Update to Version 1.211 or later
• FX5UJ-**M*/**, Version 1.000: Update to Version 1.001 or later
• FX5-ENET: Version 1.003 or later
• FX5-ENET/IP: Version 1.003 or later
• FX3U-ENET-ADP: Version 1.24 or later
• FX3GE-**M*/**: the first 3 digits of serial number 20Y or later
• FX3U-ENET: Version 1.16 or later
• FX3U-ENET-L: Version 1.16 or later
• FX3U-ENET-P502: Version 1.16 or later
• FX5-CCLGN-MS: Version 1.001 or later
• FR-A800-E Series: production date January 2021 or later
• FR-F800-E Series: production date January 2021 or later
• FR-A8NCG: production date September 2020 or later
• FR-E800-EPA Series: production date August 2020 or later
• FR-E800-EPB Series: production date August 2020 or later
• RJ71EN71: Version 49 or later
• QJ71E71-100: the first 5 digits of serial number 22102 or later
• LJ71E71-100: the first 5 digits of serial number 22102 or later
• QJ71MT91: the first 5 digits of serial number 22102 or later
• NZ2GACP620-60: Version 1.04E or later
• NZ2GACP620-300: Version 1.04E or later
• LE7-40GU-L: screen package data, version 1.02 or later
• GOT2000 Series GT21 Model: Version 01.45.000 or later
• GS Series GS21 Model: Version 01.45.000 or later
• GT25-J71GN13-T2: Version 04 or later
• RD78G4: Version 16 or later
• RD78G8: Version 16 or later
• RD78G16: Version 16 or later
• RD78G32: Version 16 or later
• RD78G64: Version 16 or later
• RD78GHV: Version 16 or later
• RD78GHW: Version 16 or later
• Please contact a Mitsubishi Electric representative for more information.

Affected Vendors

Affected Products (104)

Affected Sectors

Critical Manufacturing