Mitsubishi Electric MELSEC iQ-R Series (Update B) (ICSA-20-161-02)

November 5, 2020

CISA has updated this advisory with additional information on affected products and mitigation measures. Read the advisory at CISA.

June 16, 2020

CISA has updated this advisory with additional information on mitigation measures. Read the advisory at CISA.

June 10, 2020

CISA has published an advisory on a resource exhaustion vulnerability in Mitsubishi Electric MELSEC iQ-R series products. Numerous products and versions of these products are affected. Successful exploitation of this vulnerability could cause the Ethernet port to enter a denial-of-service condition. Mitsubishi Electric recommends users of the affected devices mitigate impact of this vulnerability by using firewalls to block access from unreliable networks and hosts. CISA also recommends a series of measures to mitigate the vulnerability. Read the advisory at CISA.