CVSS 3.1
8.6 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HCVE-2016-8368
High (8.6) in mitsubishielectric. EPSS 2.6% chance of exploitation in the next 30 days.
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to connect to the PLC via Port 5002/TCP and cause a denial of service, requiring the PLC to be reset to resume operation. This is caused by an Unrestricted Externally Accessible Lock.
Severity
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-662
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mitsubishielectric:qj71e71-100_firmware
- mitsubishielectric:qj71e71-b2_firmware
- mitsubishielectric:qj71e71-b5_firmware