Mitsubishi Electric CNC Series (Update D)

Risk Summary

Successful exploitation of this vulnerability could allow a remote attacker to cause a denial of service (DoS) condition in Mitsubishi Electric CNC Series by sending specially crafted packets to TCP port 683, causing an emergency stop.

CVEs (1)

Remediations

• Mitsubishi Electric is releasing fixed version B2 or later for Mitsubishi Electric CNC M800V/M80V Series M800VW (BND-2051W000-**), M800VS (BND-2052W000-**), M80V (BND-2053W000-**), and M80VW (BND-2054W000-**). Please apply the fixed version to the product. For instructions on how to apply it, please consult your nearest Mitsubishi Electric representative. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-007_en.pdf".
• Mitsubishi Electric is releasing fixed version FJ or later for Mitsubishi Electric CNC M800/M80/E80 Series M800W (BND-2005W000-**), M800S (BND-2006W000-**), M80 (BND-2007W000-**), M80W (BND-2008W000-**), and E80 (BND-2009W000-**). Please apply the fixed version to the product. For instructions on how to apply it, please consult your nearest Mitsubishi Electric representative. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-007_en.pdf".
• Mitsubishi Electric is releasing fixed version BK or later for Mitsubishi Electric CNC C80 Series C80 (BND-2036W000-**). Please apply the fixed version to the product. For instructions on how to apply it, please consult your nearest Mitsubishi Electric representative. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-007_en.pdf".
• Mitsubishi Electric is releasing fixed version LH or later for Mitsubishi Electric CNC M700V/M70V/E70 Series M750VW (BND-1015W002-**), M730VW (BND-1015W000-**), M720VW (BND-1015W000-**), M750VS (BND-1012W002-**), M730VS (BND-1012W000-**), M720VS (BND-1012W000-**), M70V (BND-1018W000-**), and E70 (BND-1022W000-**). Please apply the fixed version to the product. For instructions on how to apply it, please consult your nearest Mitsubishi Electric representative. For more information on the fixed version, refer to the Mitsubishi Electric security advisory at "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-007_en.pdf".
• For customers who cannot immediately update the product, Mitsubishi Electric recommends using a firewall, virtual private network (VPN), etc. to prevent unauthorized access when internet access is required, to minimize the risk of exploiting this vulnerability.
• For customers who cannot immediately update the product, Mitsubishi Electric recommends installing anti-virus software on your PC that can access the affected product, to minimize the risk of exploiting this vulnerability.
• For customers who cannot immediately update the product, Mitsubishi Electric recommends using within a LAN and blocking access from untrusted networks and hosts through firewalls, to minimize the risk of exploiting this vulnerability.
• For customers who cannot immediately update the product, Mitsubishi Electric recommends restricting physical access to the products and the LAN to which they are connected, to minimize the risk of exploiting this vulnerability.
• For customers who cannot immediately update the product, Mitsubishi Electric recommends using the IP filter function of the affected product to block access from untrusted hosts and minimize the risk of exploiting this vulnerability. The IP filter function is available for M800V/M80V series and M800/M80/E80 series. For details on the IP filter function, refer to "16. Appendix 3 IP Address Filter Setting Function" in the M800V/M80V Series Instruction Manual or "15. Appendix 2 IP Address Filter Setting Function" in the M800/M80/E80 Series Instruction Manual which can be downloaded from the link "https://www.mitsubishielectric.com/fa/download/index.html".

Affected Vendors

Affected Products (18)

Affected Sectors

Critical Manufacturing