CISA ICSA-24-324-01: Mitsubishi Electric MELSEC iQ-F Series CVE-2024-8403 DoS Vulnerability

Key Information 1. Release Date: November 19, 2024 2. Alert Code: ICSA-24-324-01 3. Relevant Topics: - Industrial Control System Vulnerabilities - Industrial Control Systems 4. Executive Summary: - CVSS v3.1 Score: 7.5 - Notes: Remote / Low Complexity Attack - Vendor: Mitsubishi Electric - Device: MELSEC iQ-F Series - Vulnerability: Improper Validation of Specified Type Input 5. Risk Assessment: - Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition in the module’s Ethernet communication. System reset of the module is required to recover. 6. Affected Products: - MELSEC iQ-F Series FX5-ENET: Version 1.100 and above - MELSEC iQ-F Series FX5-ENET/IP: Versions 1.100 to 1.104 7. Vulnerability Overview: - The MELSEC iQ-F Ethernet module and EtherNet/IP module contain a denial-of-service vulnerability due to improper validation of specified type input. - CVE-2024-8403 has been assigned to this vulnerability. 8. Background: - Critical Infrastructure Sector: Critical Manufacturing - Deployment Countries/Regions: Global - Company Headquarters Location: Japan 9. Researcher: - Mitsubishi Electric reported this vulnerability to CISA. 10. Mitigation Measures: - Mitsubishi Electric has resolved this issue. It is recommended to update to firmware version 1.106 or higher for the MELSEC iQ-F Series FX5-ENET/IP. - Recommended actions include: - Use within LAN and block access from untrusted networks and hosts via firewall. - Restrict physical access to the product, as well as to computers and network equipment. - Use firewalls or Virtual Private Networks (VPNs) to prevent unauthorized internet access. - Use IP filtering to block access from untrusted hosts. 11. Update History: - November 19, 2024: Initial release. 12. Vendor: - Mitsubishi Electric Related Links Mitsubishi Electric's download page MELSEC iQ-F FX5 User's Manual (Application) Additional Information CISA recommends implementing defensive measures to minimize the risk of exploitation. CISA provides security best practices for control systems. CISA encourages organizations to implement recommended industrial control system defensive strategies. Additional mitigation guidance and best practices are available on the ICS website. Organizations should report suspicious malicious activity and follow internal procedures for tracking and correlation.

Goal Reached Thanks to every supporter — we hit 100%!

CISA ICSA-24-324-01: Mitsubishi Electric MELSEC iQ-F Series CVE-2024-8403 DoS Vulnerability