PT-2019-12117 · Mitsubishi · Melsec-Q Series Ethernet Module Qj71E71-100

Publicado 2019-05-23 · Atualizado 2020-10-02 · CVE-2019-10977

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 versions with serial number 20121 and prior

Description The issue allows an attacker to send crafted TCP packets against the "FTP service", forcing the target devices to enter an error mode and cause a denial-of-service condition.

Recommendations For versions with serial number 20121 and prior, consider disabling the FTP service as a temporary workaround until a patch is available. Restrict access to the Ethernet module to minimize the risk of exploitation.

Correção

Improper Handling of Exceptional Conditions

Resource Exhaustion

Enumeração de Fraquezas

CWE-755

CWE-400

Identificadores relacionados

CVE-2019-10977

Produtos afetados

Melsec-Q Series Ethernet Module Qj71E71-100

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-10977 · Aviso do Fabricante
• http://securityfocus.com/bid/108419 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10977 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-19-141-02 · Nota