CVE-2026-8805: Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP module
Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition in the affected product by rapidly establishing a large number of TCP connections to it, resulting in an inconsistency in the product's internal connection management process and triggering improper memory access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP module (FX5-EIP)to a version that resolves this vulnerability.Fixed in 1.000 and prior
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8805?
The severity of CVE-2026-8805 is rated high with a score of 8.7.
How does CVE-2026-8805 affect the MELSEC iQ-F Series EtherNet/IP module?
CVE-2026-8805 allows a remote attacker to trigger a denial-of-service condition in the MELSEC iQ-F Series EtherNet/IP module.
What type of vulnerability is CVE-2026-8805 classified as?
CVE-2026-8805 is classified as an Integer Overflow or Wraparound vulnerability.
Which versions of the MELSEC iQ-F Series EtherNet/IP module are affected by CVE-2026-8805?
CVE-2026-8805 affects FX5-EIP versions 1.000 and prior of the MELSEC iQ-F Series EtherNet/IP module.
What can be done to mitigate CVE-2026-8805?
To mitigate CVE-2026-8805, it is recommended to update the affected FX5-EIP module to a patched version provided by Mitsubishi Electric.