CVE-2016-8368
HighSummary
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, QJ71E71-B5, and QJ71E71-B2, which may allow a remote attacker to connect to the PLC via Port 5002/TCP and cause a denial of service, requiring the PLC to be reset to resume operation.
Risk Assessment
An attacker could remotely disrupt the PLC's operation, potentially leading to downtime in industrial automation systems. This poses a risk of significant disruptions in production processes.
Recommendation
It is recommended to restrict access to port 5002/TCP and to monitor and secure Ethernet interfaces to prevent unauthorized connections.
Other vulnerabilities in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, QJ71E71-B5, QJ71E71-B2
Original NVD description (English source)
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to connect to the PLC via Port 5002/TCP and cause a denial of service, requiring the PLC to be reset to resume operation. This is caused by an Unrestricted Externally Accessible Lock.