CVE-2026-1874

Опубликовано: 03 мар. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery.

Ссылки

https://jvn.jp/vu/JVNVU93286687/
Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-26-62-01
Third Party Advisory
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-021_en.pdf
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-eip_firmware:*:*:*:*:*:*:*:*

Версия до 1.000 (включая)

cpe:2.3:h:mitsubishielectric:melsec_iq-f_fx5-eip:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-enet\/ip_firmware:*:*:*:*:*:*:*:*

Версия до 1.106 (включая)

cpe:2.3:h:mitsubishielectric:melsec_iq-f_fx5-enet\/ip:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00421

Низкий

7.5 High

CVSS3

Дефекты

CWE-670

Связанные уязвимости

GHSA-2595-pf9f-6g58