Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Mitsubishi MELSEC iQ-F Series: Remote Ethernet Communication Disruption

CVE-2024-8403 · published 1 year ago
Summary

A vulnerability in certain versions of Mitsubishi's MELSEC iQ-F Series devices allows a remote attacker to disrupt Ethernet communication by sending a specific type of malicious data. This could cause the device to become unresponsive or stop working properly. Users should update their devices to the latest software version to prevent this issue.

Original advisory text
Improper Validation of Specified Type of Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET versions 1.100 to 1.200 and FX5-ENET/IP versions 1.100 to 1.104 allows a ...
Improper Validation of Specified Type of Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET versions 1.100 to 1.200 and FX5-ENET/IP versions 1.100 to 1.104 allows a remote attacker to cause a Denial of Service condition in Ethernet communication of the products by sending specially crafted SLMP packets.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-1287Improper Validation of Specified Type of Input
Timeline
Published19 Nov 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-8403 · NVD
Track software like this
Free during beta