Mitsubishi Electric MELSEC iQ-R Series

Risk Summary

Successful exploitation of this vulnerability may prevent legitimate clients from connecting to an affected product.

CVEs (1)

Remediations

• Use a firewall, a virtual private network (VPN), etc., to prevent unauthorized access when Internet access is required.
• Use within a LAN and block access from untrusted networks and hosts through firewalls.
• Use the IP filter function to restrict the connectable IP addresses. See MELSEC iQ-R Ethernet User's Manual (Application) 1.13 Security “IP filter” for more information.
• Use the MELSOFT transmission port (UDP/IP).
• If Port 5007 of the MELSOFT transmission port (TCP/IP) is not used, set b2 to "1" in advance. See MELSEC iQ-R Ethernet User's Manual (Application) Appendix 3, Buffer Memory for more information.
• If this vulnerability is exploited, legitimate users can recover by first disabling the port with the forced connection invalidation function and then re-enabling the port. For an example see MELSEC iQ-R Ethernet User's Manual (Application) Appendix 3, Buffer Memory.
• Please refer to the Mitsubishi Electric advisory for further details.

Affected Vendors

Affected Products (5)

Affected Sectors

Critical Manufacturing