Impact
The vulnerability allows a remote attacker to trigger a DoS by sending a large burst of packets to the FX5-ENET/IP Ethernet port, overwhelming the device’s processing resources. This saturation prevents the internal anomaly‑detection mechanisms from operating and ultimately halts all communication functions. The weakness is a failure to enforce proper resource limits during external traffic handling (CWE‑440).
Affected Systems
Mitsubishi Electric MELSEC iQ‑F Series FX5‑ENET/IP Ethernet Module, all released versions, used in industrial control systems.
Risk and Exploitability
The CVSS score of 8.7 indicates high severity, while the EPSS score is not available and the vulnerability is not listed in CISA KEV. The attack vector is remote network access; an attacker only needs to be able to reach the Ethernet interface. No public exploits are documented, but the DoS impact could disrupt critical processes if the device serves as a key controller or network gateway.
OpenCVE Enrichment