ICSA-23-143-03: Mitsubishi electric melsec iq-f series fx5u vulnerability
Affected Software
43 affected components
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ESS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DSS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/ES, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MR/DS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ES, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/ESS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MT/DSS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/ES, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-64MR/DS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ES, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/ESS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MT/DSS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/ES, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-80MR/DS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/D, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/D, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-64MT/DSS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/D, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-96MT/DSS, Serial number 17X**** or later: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DS-TS: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MT/DSS-TS: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-32MR/DS-TS: version 1.220 up to and including 1.281
: Mitsubishi Electric Corporation MELSEC iQ-R Series R00CPU: versions 35 and prior
: Mitsubishi Electric Corporation MELSEC iQ-R Series R01CPU: versions 35 and prior
: Mitsubishi Electric Corporation MELSEC iQ-R Series R02CPU: versions 35 and prior
: Mitsubishi Electric Corporation MELSEC iQ-R Series R04(EN)CPU: version 12 up to and including 68
: Mitsubishi Electric Corporation MELSEC iQ-R Series R08(EN)CPU: version 12 up to and including 68
: Mitsubishi Electric Corporation MELSEC iQ-R Series R16(EN)CPU: version 12 up to and including 68
: Mitsubishi Electric Corporation MELSEC iQ-R Series R32(EN)CPU: version 12 up to and including 68
: Mitsubishi Electric Corporation MELSEC iQ-R Series R120(EN)CPU: version 12 up to and including 68
: Mitsubishi Electric Corporation MELSEC iQ-R Series R08SFCPU: version 26 up to and including 31
: Mitsubishi Electric Corporation MELSEC iQ-R Series R16SFCPU: version 26 up to and including 31
: Mitsubishi Electric Corporation MELSEC iQ-R Series R32SFCPU: version 26 up to and including 31
: Mitsubishi Electric Corporation MELSEC iQ-R Series R120SFCPU: version 26 up to and including 31
: Mitsubishi Electric Corporation MELSEC iQ-R Series R08PCPU: version 3 up to and including 37
: Mitsubishi Electric Corporation MELSEC iQ-R Series R16PCPU: version 3 up to and including 37
: Mitsubishi Electric Corporation MELSEC iQ-R Series R32PCPU: version 3 up to and including 37
: Mitsubishi Electric Corporation MELSEC iQ-R Series R120PCPU: version 3 up to and including 37
Event History
Feb 23, 2025
Advisory Published
01:15 PM
Frequently Asked Questions
1
What is the severity of ICSA-23-143-03?
The severity of ICSA-23-143-03 is classified as high, indicating potential significant risk.
2
How do I fix ICSA-23-143-03?
To mitigate ICSA-23-143-03, update the affected MELSEC iQ-F Series firmware to version 1.282 or later.
3
What products are affected by ICSA-23-143-03?
ICSA-23-143-03 affects multiple models in the MELSEC iQ-F Series with specific serial numbers and firmware versions.
4
What is the nature of the vulnerability in ICSA-23-143-03?
The vulnerability in ICSA-23-143-03 involves the exploitation of insufficient input validation and could allow remote code execution.
5
Is there a workaround for ICSA-23-143-03?
Currently, there are no known workarounds for ICSA-23-143-03; applying the firmware update is the recommended action.