vulnerability
Mitsubishi Electric CNC Series (Update A)
Critical
Summary
A vulnerability (CWE-1285) exists in Mitsubishi Electric CNC Series (Update A) products, allowing a remote attacker to cause a denial-of-service by sending crafted packets to TCP port 683. This affects a wide range of CNC machines used in critical infrastructure sectors, particularly manufacturing. Mitigation strategies include vendor patches, firewall usage, VPNs, IP filtering, and restricting physical access to the affected devices. The vulnerability is being reported and republished by CISA to increase visibility.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data