Vulnerabilities > CVE-2019-10977 - Improper Handling of Exceptional Conditions vulnerability in Mitsubishielectric Qj71E71-100 Firmware 18072/20121

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
mitsubishielectric
CWE-755

Summary

In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition.