Mitsubishi Electric MELSEC-Q Series Ethernet Module
view advisory published 2019-05-21
Successful exploitation of this vulnerability may render the device unresponsive, requiring a physical reset of the PLC (Programmable Logic Controller).
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10977US | high7.5 | — | ||
In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the ta… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationQJ71E71-100
Mitsubishi Electric strongly recommends that users should operate the affected device behind a firewall.
- FixedQJ71E71-100
Mitsubishi Electric has released new firmware Version 20122 for the QJ71E71-100 Ethernet module to mitigate the reported vulnerability.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan