Skip to content
Sign in
8.7 High

CVE-2026-1874 Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series…

Description

Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery.

Affected products and versions

Product Affected versions Fixed in
MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP Versions not published
MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP Versions not published

Other CVEs of MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP

The 3 CVEs of MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP →
CVE-2026-1876 Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP… 8.7 High CVE-2025-3511 Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN… 7.5 High
Track this CVE