CVE-2016-8370

High

Published: 13/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, QJ71E71-B5, and QJ71E71-B2, related to the transmission of weakly encrypted passwords to MELSEC-Q PLCs.

Risk Assessment

The transmission of weakly secured passwords may lead to unauthorized access to automation systems, posing a significant security threat to the organization.

Recommendation

It is recommended to update the modules to the latest versions and implement stronger password encryption methods to secure communication.

Other vulnerabilities in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules (QJ71E71-100, QJ71E71-B5, QJ71E71-B2)

CVE-2016-8368High
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, QJ71E71-B5, and QJ71E71-B2, which may allow a remote attacker to connect to the PLC via Port 5002/TCP and cause a denial of service, requiring the PLC to be reset to resume operation.

Original NVD description (English source)

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. Weakly encrypted passwords are transmitted to a MELSEC-Q PLC.