What’s Vulnerable › Vulnerabilities

CVE-2024-8403: Denial-of-Service Vulnerability in Ethernet port on MELSEC iQ-F Ethernet Module and EtherNet/IP Module

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-19 · updated 2026-06-17
• Weakness: CWE-1287

Description

Improper Validation of Specified Type of Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET versions 1.100 to 1.200 and FX5-ENET/IP versions 1.100 to 1.104 allows a remote attacker to cause a Denial of Service condition in Ethernet communication of the products by sending specially crafted SLMP packets.

Affected products

• Mitsubishi Electric Melsec Iq-F Series Fx5-Enet: from 1.100
• Mitsubishi Electric Melsec Iq-F Series Fx5-Enet Ip: from 1.100 through 1.104

References

• https://jvn.jp/vu/JVNVU97790713/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-324-01
• https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-009_en.pdf

Get alerted when CVE-2024-8403 or the next vulnerability affects your stack