ICSA-20-245-01: Mitsubishi electric qj71mes96 vulnerability
Affected Software
104 affected components
: Mitsubishi Electric QJ71MES96: all versions
: Mitsubishi Electric QJ71WS96: all versions
: Mitsubishi Electric Q06CCPU-V: all versions
: Mitsubishi Electric Q24DHCCPU-V: the first 5 digits of serial number 24031 and prior
: Mitsubishi Electric Q24DHCCPU-VG: the first 5 digits of serial number 24031 and prior
: Mitsubishi Electric R12CCPU-V: Version 13 and prior
: Mitsubishi Electric RD55UP06-V: Version 09 and prior
: Mitsubishi Electric RD55UP12-V=01
: Mitsubishi Electric RJ71GN11-T2: Version 11 and prior
: Mitsubishi Electric RD78G4: Version 14 and prior
: Mitsubishi Electric RD78G8: Version 14 and prior
: Mitsubishi Electric RD78G16: Version 14 and prior
: Mitsubishi Electric RD78G32: Version 14 and prior
: Mitsubishi Electric RD78G64: Version 14 and prior
: Mitsubishi Electric RD78GHV: Version 14 and prior
: Mitsubishi Electric RD78GHW: Version 14 and prior
: Mitsubishi Electric NZ2FT-MT: all versions
: Mitsubishi Electric NZ2FT-EIP: all versions
: Mitsubishi Electric Q03UDECPU: the first 5 digits of serial number 22081 and prior
: Mitsubishi Electric Q04UDEHCPU: the first 5 digits of serial number 22081 and prior
: Mitsubishi Electric Q06UDEHCPU: the first 5 digits of serial number 22081 and prior
: Mitsubishi Electric Q10UDEHCPU: the first 5 digits of serial number 22081 and prior
: Mitsubishi Electric Q13UDEHCPU: the first 5 digits of serial number 22081 and prior
: Mitsubishi Electric Q20UDEHCPU: the first 5 digits of serial number 22081 and prior
: Mitsubishi Electric Q26UDEHCPU: the first 5 digits of serial number 22081 and prior
: Mitsubishi Electric Q50UDEHCPU: the first 5 digits of serial number 22081 and prior
: Mitsubishi Electric Q100UDEHCPU: the first 5 digits of serial number 22081 and prior
: Mitsubishi Electric Q03UDVCPU: the first 5 digits of serial number 22031 and prior
: Mitsubishi Electric Q04UDVCPU: the first 5 digits of serial number 22031 and prior
: Mitsubishi Electric Q06UDVCPU: the first 5 digits of serial number 22031 and prior
: Mitsubishi Electric Q13UDVCPU: the first 5 digits of serial number 22031 and prior
: Mitsubishi Electric Q26UDVCPU: the first 5 digits of serial number 22031 and prior
: Mitsubishi Electric Q04UDPVCPU: the first 5 digits of serial number 22031 and prior
: Mitsubishi Electric Q06UDPVCPU: the first 5 digits of serial number 22031 and prior
: Mitsubishi Electric Q13UDPVCPU: the first 5 digits of serial number 22031 and prior
: Mitsubishi Electric Q26UDPVCPU: the first 5 digits of serial number 22031 and prior
: Mitsubishi Electric L02CPU(-P): the first 5 digits of serial number 22051 and prior
: Mitsubishi Electric L06CPU(-P): the first 5 digits of serial number 22051 and prior
: Mitsubishi Electric L26CPU(-P): the first 5 digits of serial number 22051 and prior
: Mitsubishi Electric L26CPU-(P)BT: the first 5 digits of serial number 22051 and prior
: Mitsubishi Electric R00CPU: Version 18 and prior
: Mitsubishi Electric R01CPU: Version 18 and prior
: Mitsubishi Electric R02CPU: Version 18 and prior
: Mitsubishi Electric R04CPU: Version 50 and prior
: Mitsubishi Electric R08CPU: Version 50 and prior
: Mitsubishi Electric R16CPU: Version 50 and prior
: Mitsubishi Electric R32CPU: Version 50 and prior
: Mitsubishi Electric R120CPU: Version 50 and prior
: Mitsubishi Electric R04ENCPU: Version 50 and prior
: Mitsubishi Electric R08ENCPU: Version 50 and prior
: Mitsubishi Electric R16ENCPU: Version 50 and prior
: Mitsubishi Electric R32ENCPU: Version 50 and prior
: Mitsubishi Electric R120ENCPU: Version 50 and prior
: Mitsubishi Electric R08SFCPU: Version 22 and prior
: Mitsubishi Electric R16SFCPU: Version 22 and prior
: Mitsubishi Electric R32SFCPU: Version 22 and prior
: Mitsubishi Electric R120SFCPU: Version 22 and prior
: Mitsubishi Electric R08PCPU: Version 24 and prior
: Mitsubishi Electric R16PCPU: Version 24 and prior
: Mitsubishi Electric R32PCPU: Version 24 and prior
: Mitsubishi Electric R120PCPU: Version 24 and prior
: Mitsubishi Electric R08PSFCPU: Version 05 and prior
: Mitsubishi Electric R16PSFCPU: Version 05 and prior
: Mitsubishi Electric R32PSFCPU: Version 05 and prior
: Mitsubishi Electric R120PSFCPU: Version 05 and prior
: Mitsubishi Electric FX5U(C)-**M*/** Serial number 17X**** or later: Version 1.210 and prior
: Mitsubishi Electric FX5U(C)-**M*/** Serial number 179**** and prior: Version 1.070 and prior
: Mitsubishi Electric FX5UC-32M*/**-TS: Version 1.210 and prior
: Mitsubishi Electric FX5UJ-**M*/**=1.000
: Mitsubishi Electric FX5-ENET: Version 1.002 and prior
: Mitsubishi Electric FX5-ENET/IP: Version 1.002 and prior
: Mitsubishi Electric FX3U-ENET-ADP: Version 1.22 and prior
: Mitsubishi Electric FX3GE-**M*/**: the first 3 digits of serial number 20X and prior
: Mitsubishi Electric FX3U-ENET: Version 1.14 and prior
: Mitsubishi Electric FX3U-ENET-L: Version 1.14 and prior
: Mitsubishi Electric FX3U-ENET-P502: Version 1.14 and prior
: Mitsubishi Electric FX5-CCLGN-MS=1.000
: Mitsubishi Electric IU1-1M20-D: all versions
: Mitsubishi Electric LE7-40GU-L screen package data: version 1.01 and prior
: Mitsubishi Electric GOT2000 Series GT21 Model: Version 01.44.000 and prior
: Mitsubishi Electric GS Series GS21 Model: Version 01.44.000 and prior
: Mitsubishi Electric GOT1000 Series GT14 Model: all versions
: Mitsubishi Electric FR-A800-E Series: production date December 2020 and prior
: Mitsubishi Electric FR-F800-E Series: production date December 2020 and prior
: Mitsubishi Electric FR-A8NCG: Production date August 2020 and prior
: Mitsubishi Electric FR-E800-EPA Series: Production date July 2020 and prior
: Mitsubishi Electric FR-E800-EPB Series: Production date July 2020 and prior
: Mitsubishi Electric Conveyor Tracking Application APR-1TR3FH (Discontinued product): all versions
: Mitsubishi Electric Conveyor Tracking Application APR-1TR6FH (Discontinued product): all versions
: Mitsubishi Electric Conveyor Tracking Application APR-1TR12FH (Discontinued product): all versions
: Mitsubishi Electric Conveyor Tracking Application APR-1TR20FH (Discontinued product): all versions
: Mitsubishi Electric Conveyor Tracking Application APR-2TR3FH (Discontinued product): all versions
: Mitsubishi Electric Conveyor Tracking Application APR-2TR6FH (Discontinued product): all versions
: Mitsubishi Electric Conveyor Tracking Application APR-2TR12FH (Discontinued product): all versions
: Mitsubishi Electric Conveyor Tracking Application APR-2TR20FH (Discontinued product): all versions
: Mitsubishi Electric MR-JE-C: all versions
: Mitsubishi Electric MR-J4-TM: all versions
: Mitsubishi Electric RJ71EN71: Version 48 and prior
: Mitsubishi Electric QJ71E71-100: the first 5 digits of serial number 21092 and prior
: Mitsubishi Electric LJ71E71-100: the first 5 digits of serial number 21092 and prior
: Mitsubishi Electric QJ71MT91: the first 5 digits of serial number 20082 and prior
: Mitsubishi Electric NZ2GACP620-60: Version 1.03D and prior
: Mitsubishi Electric NZ2GACP620-300: Version 1.03D and prior
: Mitsubishi Electric GT25-J71GN13-T2: Version 03 and prior
Event History
Feb 23, 2025
Advisory Published
01:15 PM
Frequently Asked Questions
1
What is the severity of ICSA-20-245-01?
The severity of ICSA-20-245-01 is categorized as high.
2
What vulnerabilities does ICSA-20-245-01 address?
ICSA-20-245-01 addresses vulnerabilities in various Mitsubishi Electric PLCs related to insecure communication protocols.
3
How do I fix ICSA-20-245-01?
To fix ICSA-20-245-01, it is recommended to apply the latest firmware updates provided by Mitsubishi Electric.
4
What products are affected by ICSA-20-245-01?
Affected products include various models of Mitsubishi Electric PLCs such as QJ71MES96, QJ71WS96, and several other Q and RD series controllers.
5
Is there a workaround for ICSA-20-245-01?
To mitigate ICSA-20-245-01, implementing network segmentation and access controls can help limit exposure until a patch is applied.