Mitsubishi Electric FA Products

Risk Summary

Successful exploitation of these vulnerabilities may allow an attacker to log in to the affected products and/or alter and obtain sensitive information.

CVEs (6)

Remediations

• When communicating via untrusted networks or hosts, encrypt the communication path by setting up a VPN.
• Use firewalls or IP filter function to restrict connections to the products and prevent access from untrusted networks or hosts. For details on IP filter function, refer to the following product manual:,empty icsa-22-090-04.json,vendor_fix,“12.1 IP Filter Function” in the MELSEC iQ-F FX 5 User's Manual (Ethernet Communication),empty icsa-22-090-04.json,vendor_fix,"IP filter"" of ""1.13 Security"" in the MELSEC iQ-R Ethernet User's Manual (Application)"
• "IP Filter Function" of "6.2 Security Function" in the MELSEC iQ-R Motion Controller Programming Manual (Common)
• "IP filter" of "1.4 Security" in the MELSEC iQ-R CC-Link IE TSN User's Manual (Application)
• "IP filter" of "9.5 Security" in the MELSEC iQ-R CC-Link IE TSN Plus Master/Local Module User's Manual
• "14.3 IP Filter Function" in the Q Corresponding Ethernet Interface Module User's Manual (Basic)
• "14.3 IP Filter Function" in the MELSEC-L Ethernet Interface Module User's Manual (Basic)
• For more information see Mitsubishi Electric's advisory 2021-031

Affected Vendors

Affected Products (26)

Affected Sectors

Critical Manufacturing