QID 590635

Date Published: 2022-02-14

QID 590635: Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service (DoS) Vulnerability (ICSA-15-146-01)

AFFECTED PRODUCTS
The following MELSEC FX-series are affected:
MELSEC FX3G Series PLCs.

QID Detection Logic (Authenticated):
QID checks for the Vulnerable version of using passive scanning

A machine requires rebooting after this vulnerability has been exploited.

  • CVSS V3 rated as High - 7.3 severity.
  • CVSS V2 rated as High - 7.8 severity.
  • Solution

    Customers are advised to refer to CERT MITIGATIONS section ICSA-15-146-01 for affected packages and patching details.

    Vendor References

    CVEs related to QID 590635

    Software Advisories
    Advisory ID Software Component Link
    ICSA-15-146-01 URL Logo www.us-cert.gov/ics/advisories/ICSA-15-146-01