Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| mitsubishielectric | r00cpu_firmware | 20 | - |
| mitsubishielectric | r01cpu_firmware | 20 | - |
| mitsubishielectric | r02cpu_firmware |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
19
Affected Products
4
References
mitsubishielectric / r00cpu_firmware
| 20 |
| - |
| mitsubishielectric | r04cpu_firmware | 52 | - |
| mitsubishielectric | r08cpu_firmware | 52 | - |
| mitsubishielectric | r16cpu_firmware | 52 | - |
| mitsubishielectric | r32cpu_firmware | 52 | - |
| mitsubishielectric | r120cpu_firmware | 52 | - |
| mitsubishielectric | r08sfcpu_firmware | 22 | - |
| mitsubishielectric | r16sfcpu_firmware | 22 | - |
| mitsubishielectric | r32sfcpu_firmware | 22 | - |
| mitsubishielectric | r120sfcpu_firmware | 22 | - |
| mitsubishielectric | r08pcpu_firmware | - | - |
| mitsubishielectric | r16pcpu_firmware | - | - |
| mitsubishielectric | r32pcpu_firmware | - | - |
| mitsubishielectric | r120pcpu_firmware | - | - |
| mitsubishielectric | r16mtcpu_firmware | - | - |
| mitsubishielectric | r32mtcpu_firmware | - | - |
| mitsubishielectric | r64mtcpu_firmware | - | - |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability
Impact