Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the MELSEC iQ-F Series FX5-ENET/IP Ethernet Module, all versions. This vulnerability allows a remote attacker to cause a DoS condition by continuously sending UDP packets to the module, leading to exhaustion of the receive buffer. As a result, the module becomes unresponsive and requires a system reset for recovery.

Impact

Exploitation of this vulnerability leads to uncontrolled consumption of the receive buffer, causing a denial-of-service condition where the module becomes unresponsive and requires a system reset to recover.

Remediation

Users of the MELSEC iQ-F Series FX5-ENET/IP Ethernet Module should update to version 1.107 or later. For update instructions, refer to the MELSEC iQ-F FX5 User’s Manual (Application).