Mitsubishi Electric Multiple FA Products (Update D)
A denial-of-service vulnerability exists in multiple Mitsubishi Electric FA products due to improper validation of input, allowing a remote attacker to cause a DoS condition by sending a specially crafted UDP packet. This affects a wide range of CC-Link IE TSN Remote I/O modules and related components, requiring a vendor fix to version 10 or later. The vulnerability can lead to a timeout error or communication delay, potentially disrupting critical manufacturing operations.
A denial-of-service (DoS) vulnerability due to Improper Validation of Specified Quantity in Input (CWE-1284) exists in the Ethernet function of multiple FA products. This vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted UDP packet if CC-Link IE TSN Remote I/O modules NZ2GN2S1-32D, NZ2GN2S1-32T, NZ2GN2S1-32TE, NZ2GN2S1-32DT, NZ2GN2S1-32DTE, NZ2GN2B1-32D, NZ2GN2B1-32T, NZ2GN2B1-32TE, NZ2GN2B1-32DT, NZ2GN2B1-32DTE, NZ2GNCF1-32D, NZ2GNCF1-32T, NZ2GNCE3-32D, NZ2GNCE3-32DT, NZ2GN12A4-16D, NZ2GN12A4-16DE, NZ2GN12A2-16T, NZ2GN12A2-16TE, NZ2GN12A42-16DT, NZ2GN12A42-16DTE, NZ2GN2S1-16D, NZ2GN2S1-16T, NZ2GN2S1-16TE, NZ2GN2B1-16D, NZ2GN2B1-16T, NZ2GN2B1-16TE, CC-Link IE TSN Analog-Digital Converter modules NZ2GN2S-60AD4, NZ2GN2B-60AD4, CC-Link IE TSN Digital-Analog Converter modules NZ2GN2S-60DA4 and NZ2GN2B-60DA4, CC-Link IE TSN FPGA modules NZ2GN2S-D41P01, NZ2GN2S-D41D01, NZ2GN2S-D41PD02, CC-Link IE TSN Remote Station Communication LSIs CP620 with GbE-PHY NZ2GACP620-300, and NZ2GACP620-60 does not receive a valid UDP packet within 3 seconds. This vulnerability could allow a remote attacker to cause a communication delay in Simple CPU communication on MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET and FX5-ENET/IP Ethernet Module FX5-ENET/IP, by sending a specially crafted UDP packet. Even if a timeout error occurs, communication will be restored once the affected product starts receiving valid UDP packets. A system reset of the product is required for recovery in all cases above. Known affected products include: Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32D: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32T: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32TE: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DT: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-32DTE: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32D: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32T: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32TE: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DT: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-32DTE: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32D: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCF1-32T: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCE3-32D: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GNCE3-32DT: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A4-16D: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A4-16DE: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A2-16T: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A2-16TE: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A42-16DT: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN12A42-16DTE: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16D: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16T: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16D: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16T: <=09, Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2B1-16TE: <=09, CC-Link IE TSN Analog-Digital Converter module NZ2GN2S-60AD4: <=07, Mitsubishi Electric CC-Link IE TSN Analog-Digital Converter module NZ2GN2B-60AD4: <=07, Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2S-60DA4: <=07, Mitsubishi Electric CC-Link IE TSN Digital-Analog Converter module NZ2GN2B-60DA4: <=07, Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41P01: 01, Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41D01: 01, Mitsubishi Electric CC-Link IE TSN FPGA module NZ2GN2S-D41PD02: 01, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-300: <=1.08J, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY NZ2GACP620-60: <=1.08J, Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-T2: <=26, Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-EIP: <=10, Mitsubishi Electric MELSEC iQ-R Series CC-Link IE TSN Master/Local Module RJ71GN11-SX: <=05, Mitsubishi Electric MELSEC iQ-R Series Ethernet Interface Module RJ71EN71: <=85, Mitsubishi Electric CC-Link IE TSN master/local Station Communication LSI CP610 NZ2GACP610-60: <=05, Mitsubishi Electric CC-Link IE TSN master/local Station Communication LSI CP610 NZ2KT-NPETNG51: <=05, Mitsubishi Electric MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module FX5-CCLGN-MS: <=1.020, Mitsubishi Electric MELSEC iQ-F Series FX5 Ethernet Module FX5-ENET: <=1.200, Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP: <=1.106, Mitsubishi Electric MELSEC iQ-R Series CPU module R04ENCPU (Network Part): <=85, Mitsubishi Electric MELSEC iQ-R Series CPU module R08ENCPU (Network Part): <=85, Mitsubishi Electric MELSEC iQ-R Series CPU module R16ENCPU (Network Part): <=85, Mitsubishi Electric MELSEC iQ-R Series CPU module R32ENCPU (Network Part): <=85, Mitsubishi Electric MELSEC iQ-R Series CPU module R120ENCPU (Network Part): <=85, Vendor fix is releasing fixed version 10 or later for CC-Link IE TSN Remote I/O modules.