Skip to main content

MELSEC iQ-F FX5-ENET/IP CVE-2026-8806

| EUVDEUVD-2026-37975 HIGH
Expected Behavior Violation (CWE-440)
2026-06-19 Mitsubishi GHSA-8vpf-2whm-fffj
Information Disclosure Mitsubishi Electric Melsec Iq F Series Fx5 Enet Ip Ethernet Module Fx5 Enet Ip
8.7
CVSS 4.0 · Vendor: Mitsubishi
Share

Severity by source

Vendor (Mitsubishi) PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.5 HIGH

Network-reachable Ethernet port, no auth or user interaction, trivial packet flood, impact limited to availability of the module - no confidentiality or integrity loss.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Mitsubishi).

CVSS VectorVendor: Mitsubishi

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

1
Analysis Generated
Jun 19, 2026 - 03:16 vuln.today

DescriptionCVE.org

Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition in the affected product by continuously sending a large number of communication packets to the Ethernet port of the product in a short period of time, increasing the processing load of the product, preventing the internal anomaly-detection processing from being performed, and causing the communication function to stop.

AnalysisAI

Denial-of-service in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Modules (all versions) allows unauthenticated remote attackers to halt the module's communication function by flooding its Ethernet port with packets. The high packet rate overwhelms internal anomaly-detection processing and stops communications - a critical impact for the industrial control environments these PLCs operate in. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Gain access to OT network segment
Delivery
Identify reachable FX5-ENET/IP module
Exploit
Launch sustained high-rate packet flood
Execution
Saturate packet processing path
Persist
Anomaly-detection routine starves
Impact
Communication function stops on module
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Attacker must have network-layer reachability to the Ethernet port of the FX5-ENET/IP module and the ability to sustain a high-rate packet flood toward it; no authentication, user interaction, or special configuration is required, and the flaw is present in all firmware versions of the module. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector AV:N/AC:L/AT:N/PR:N/UI:N/VA:H scores 8.7 because exploitation is trivial (unauthenticated network flood) and availability impact on the vulnerable PLC module is high. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with network reachability to the FX5-ENET/IP module's Ethernet port - for example, a compromised engineering workstation or an exposed jump host on a poorly segmented OT network - runs a packet-generation tool (hping3, custom EtherNet/IP traffic, or a generic SYN/UDP flood) against the module. Sustained traffic at a high rate exhausts the module's packet-processing budget, the anomaly-detection routine never runs, and the communication function stops, breaking PLC connectivity to SCADA, HMIs, and peer devices. …
Remediation No vendor-released patch version is cited in the available data; consult the Mitsubishi PSIRT advisory at https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-003_en.pdf and the CISA ICS advisory https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-06 for the current firmware fix and recovery procedure (the module typically requires a power cycle to restore communications after the DoS condition). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Inventory all systems running MELSEC iQ-F Series FX5-ENET/IP Ethernet Modules; implement network segmentation to isolate affected devices from untrusted network access. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-440 – Expected Behavior Violation

View all
CVE-2025-6211 MEDIUM POC
6.5
CVE-2025-3044 MEDIUM POC
5.3
CVE-2025-27401 MEDIUM POC
4.6
CVE-2026-42534 MEDIUM
6.9
CVE-2025-52953 MEDIUM
6.5
CVE-2026-42752 MEDIUM
6.5
CVE-2026-41136 MEDIUM
5.5
CVE-2025-13940 MEDIUM
5.5

Same technique Information Disclosure

View all
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2014-6324 HIGH POC
8.8
CVE-2017-0213 HIGH POC
7.3
CVE-2016-7255 HIGH POC
7.8
CVE-2010-0232 HIGH POC
7.8
CVE-2025-30066 HIGH POC
8.6
CVE-2025-54236 CRITICAL POC
9.1

Share

CVE-2026-8806 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy