CVE-2016-8368: High severity Mitsubishielectric Qj71e71-100 Firmware vulnerability
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to connect to the PLC via Port 5002/TCP and cause a denial of service, requiring the PLC to be reset to resume operation. This is caused by an Unrestricted Externally Accessible Lock.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8368?
CVE-2016-8368 has been rated as a medium severity vulnerability.
How do I fix CVE-2016-8368?
To fix CVE-2016-8368, you should update the firmware on affected Mitsubishi Electric Automation MELSEC-Q Ethernet interface modules.
Which devices are affected by CVE-2016-8368?
CVE-2016-8368 affects the Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, QJ71E71-B5, and QJ71E71-B2.
Can CVE-2016-8368 be exploited remotely?
Yes, CVE-2016-8368 allows a remote attacker to connect and potentially exploit the affected Ethernet interface modules.
What are the consequences of exploiting CVE-2016-8368?
Exploiting CVE-2016-8368 could lead to unauthorized access to the MELSEC-Q PLC, jeopardizing the security and operation of the automation system.