ICSA-23-017-02: Mitsubishi electric melsec iq-f series vulnerability
Affected Software
10 affected components
Mitsubishi Electric MELSEC iQ-F Series with serial number 17X**** or later:
FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS: Versions 1.280 and prior
FX5UC-xMy/z x=32,64,96 y=T, z=D,DSS<=1.280
Mitsubishi Electric FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS<=1.280
Mitsubishi Electric FX5UC-xMy/z x=32,64,96 y=T, z=D,DSS<=1.280
Mitsubishi Electric MELSEC iQ-F Series with serial number 179**** and prior:
FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS: Versions 1.074 and prior
FX5UC-xMy/z x=32,64,96 y=T, z=D,DSS<=1.074
Mitsubishi Electric FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS<=1.074
Mitsubishi Electric FX5UC-xMy/z x=32,64,96 y=T, z=D,DSS<=1.074
Mitsubishi Electric MELSEC iQ-F Series FX5UC-32MT/DS-TS, FX5UC-32MT/DSS-TS, FX5UC-32MR/DS-TS<=1.280
Mitsubishi Electric FX5UJ-xMy/z x=24,40,60, y=T,R, z=ES,ESS<=1.042
Mitsubishi Electric FX5UJ-xMy/ES-A* x=24,40,60, y=T,R<=1.043
Mitsubishi Electric FX5S-xMy/z x=30,40,60,80, y=T,R, z=ES,ESS<=1.003
Event History
Feb 23, 2025
Advisory Published
01:15 PM
Frequently Asked Questions
1
What is the severity of ICSA-23-017-02?
The severity of ICSA-23-017-02 is rated as high due to potential unauthorized access to system configurations.
2
How do I fix ICSA-23-017-02?
To fix ICSA-23-017-02, update the affected Mitsubishi Electric products to the latest firmware version as recommended by the vendor.
3
Which products are affected by ICSA-23-017-02?
ICSA-23-017-02 affects various Mitsubishi Electric FX5U, FX5UC, MELSEC iQ-F Series controllers, and specific models noted in the advisory.
4
What are the implications of ICSA-23-017-02?
The implications of ICSA-23-017-02 include the potential for attackers to exploit vulnerabilities to gain unauthorized access or manipulate automation processes.
5
Is there a workaround for ICSA-23-017-02?
Currently, there are no effective workarounds for ICSA-23-017-02, and users are advised to apply the firmware updates as soon as possible.