← Back to home
ICSA-22-013-01  ·  Published 2022-01-13  ·  View on CISA ICS-CERT ↗

Mitsubishi Electric MELSEC-F Series

CVSS 7.5 HIGH

Risk Summary

Successful exploitation of this vulnerability could lead to a denial-of-service condition in the communication function of the product or cause other unspecified effects.

CVEs (1)

Remediations

  • FX3U-ENET: Firmware Version 1.16 or later
  • FX3U-ENET-L: Firmware Version 1.16 or later
  • FX3U-ENET-P502: Firmware Version 1.16 or later
  • Use a firewall or virtual private network (VPN) to prevent unauthorized access when Internet access is required.
  • Use within a LAN and block access from untrusted networks and hosts through firewalls.
  • Please contact Mitsubishi Electric Support for assistance and review the Mitsubishi Electric security advisory for more information about this issue.

Affected Vendors

Mitsubishi Electric

Affected Products (3)

Mitsubishi Electric · FX3U-ENET Firmware <= 1.14
Mitsubishi Electric · FX3U-ENET-L Firmware <= 1.14
Mitsubishi Electric · FX3U-ENET-P502 Firmware <= 1.14

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more