Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)

Risk Summary

Successful exploitation of this vulnerability could allow a remote attacker to prevent legitimate users from logging into the web server function for a certain period, resulting in a denial-of-service condition. The impact of this vulnerability will persist while the attacker continues to attempt the attack.

CVEs (1)

Remediations

• Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk:
• Use a firewall or virtual private network (VPN), etc. to prevent unauthorized access when Internet access is required.
• Use within a LAN and block access from untrusted networks and hosts through firewalls.
• Use IP filter function to block access from untrusted hosts. For details on the IP filter function, following manual for each product; "12.1 IP Filter Function" in the MELSEC iQ-F FX5 User's Manual (Ethernet Communication), "1.13 Security" – "IP Filter" in the MELSEC iQ-R Ethernet User's Manual (Application).
• Restrict physical access to the affected products and the LAN that is connected by them.
• For additional information refer to Mitsubishi Electric's security bulletin 2023-014_en.

Affected Vendors

Affected Products (11)

Affected Sectors

Critical Manufacturing