CVE-2019-10977 - In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition

Back Back to CVE browser

HIGH

In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition

Published May 23, 2019

7.5

HIGH

CVSS 3.1

EPSS 3.54%

Description

In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition.

Affected products

Vendor Mitsubishi Electric Product MELSEC-Q series Ethernet module Default
n/a
- Version
  QJ71E71-100 serial number 20121 and prior
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mitsubishi Electric

MELSEC-Q series Ethernet module

n/a

Version	Status	Constraints
QJ71E71-100 serial number 20121 and prior	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-755

References (2)

http://www.securityfocus.com/bid/108419
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-141-02
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/108419		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-141-02		x_refsource_MISCThird Party AdvisoryUS Government Resource