Description

Improper Validation of Specified Type of Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET versions 1.100 and later and FX5-ENET/IP versions 1.100 to 1.104 allows a remote attacker to cause a Denial of Service condition in Ethernet communication of the products by sending specially crafted SLMP packets.

Classification

CVE ID: CVE-2024-8403

CVSS Base Severity: HIGH

CVSS Base Score: 7.5

Affected Products

Vendor: Mitsubishi Electric Corporation

Product: MELSEC iQ-F Series FX5-ENET

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 17.83% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-009_en.pdf
https://jvn.jp/vu/JVNVU97790713/
https://www.cisa.gov/news-events/ics-advisories/icsa-24-324-01

Timeline