Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Analog converter module, CC-Link IE TSN compatible coupler, FPGA module, Tension meter, AC Servo MELSERVO-J5, AC Servo MELSERVO-JET, Liner Track System MTR-S series Linear track control module, Inverter FR-A800/F800/E800 Series, Industrial Robot CR800-D series controller Network Base Card, CC-Link IE TSN expansion unit, CC-Link IE TSN-CC-Link IE Field Network bridge module, CC-Link IE TSN-AnyWireASLINK bridge module, Energy Measuring Unit CC-Link IE TSN Communication Unit, GOT3000 Series, CC-Link IE TSN Communication Unit, Motion Control Software, CC-Link IE TSN Communication Software for Windows, Analysis Support Software MELSOFT VIMA, Master/Local module Designated communication LSI DeviceKit, Remote Station Communication LSI with GbE-PHY, CC-Link IE TSN Master/Local module Designated communication LSI SDK, and Remote station software development kit allows an attacker with access to a CC-Link IE TSN network to tamper with communication data (control input/output values) by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-16
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-64
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR500-128
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR500-256
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100-8-N32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100-8-P32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100-16-N32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100-16-P32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-N32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-P32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-8-N32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-8-P32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-16-N32
All versions
- Mitsubishi Electric Corporation MELSEC MX Controller MX-F model MXF100S-16-P32
All versions
- Mitsubishi Electric Corporation Master/local module RJ71GN11-T2
All versions
- Mitsubishi Electric Corporation Master/local module RJ71GN11-SX
All versions
- Mitsubishi Electric Corporation Master/local module RJ71GN11-EIP
All versions
- Mitsubishi Electric Corporation Master/local module FX5-CCLGN-MS
All versions
- Mitsubishi Electric Corporation CC-Link IE TSN interface board NZ81GN11-SX
All versions
- Mitsubishi Electric Corporation CC-Link IE TSN interface board NZ81GN11-T2
All versions
- Mitsubishi Electric Corporation Motion module RD78G4
All versions
- Mitsubishi Electric Corporation Motion module RD78G8
All versions
- Mitsubishi Electric Corporation Motion module RD78G16
All versions
- Mitsubishi Electric Corporation Motion module RD78G64
All versions
- Mitsubishi Electric Corporation Motion module RD78GHV
All versions
- Mitsubishi Electric Corporation Motion module RD78GHW
All versions
- Mitsubishi Electric Corporation Motion module FX5-40SSC-G
All versions
- Mitsubishi Electric Corporation Motion module FX5-80SSC-G
All versions
- Mitsubishi Electric Corporation MELSEC iQ-L Series Motion Module LD78G4
All versions
- Mitsubishi Electric Corporation MELSEC iQ-L Series Motion module LD78G16
All versions
- Mitsubishi Electric Corporation Motion Control Board MR-EM441G
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32D
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32T
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32TE
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32DT
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-32DTE
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32D
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32T
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32TE
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32DT
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-32DTE
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GNCF1-32D
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GNCF1-32T
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GNCE3-32D
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GNCE3-32DT
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN12A4-16D
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN12A4-16DE
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN12A2-16T
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN12A2-16TE
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN12A42-16DT
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN12A42-16DTE
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-16D
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-16T
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2S1-16TE
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-16D
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-16T
All versions
- Mitsubishi Electric Corporation Block-type remote module NZ2GN2B1-16TE
All versions
- Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-8D
All versions
- Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-8D-K
All versions
- Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-8TE
All versions
- Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-8TE-K
All versions
- Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-16DTE
All versions
- Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNSS2-16DTE-K
All versions
- Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNS12A2-14DT
All versions
- Mitsubishi Electric Corporation Block-type remote module with safety functions NZ2GNS12A2-16DTE
All versions
- Mitsubishi Electric Corporation Analog-Digital converter module NZ2GN2S-60AD4
All versions
- Mitsubishi Electric Corporation Analog-Digital converter module NZ2GN2B-60AD4
All versions
- Mitsubishi Electric Corporation Digital-Analog converter module NZ2GN2S-60DA4
All versions
- Mitsubishi Electric Corporation Digital-Analog converter module NZ2GN2B-60DA4
All versions
- Mitsubishi Electric Corporation CC-Link IE TSN compatible coupler NZ2FT-GN
All versions
- Mitsubishi Electric Corporation FPGA module NZ2GN2S-D41P01
All versions
- Mitsubishi Electric Corporation FPGA module NZ2GN2S-D41D01
All versions
- Mitsubishi Electric Corporation FPGA module NZ2GN2S-D41PD02
All versions
- Mitsubishi Electric Corporation Tension meter LM7-1LG
All versions
- Mitsubishi Electric Corporation Tension meter LM7-2LG
All versions
- Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G
All versions
- Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5W-G
All versions
- Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G-HS
All versions
- Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G-RJ
All versions
- Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5-G-LL
All versions
- Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-J5D-G4
All versions
- Mitsubishi Electric Corporation AC Servo MELSERVO-J5 MR-MD333G
All versions
- Mitsubishi Electric Corporation AC Servo MELSERVO-JET MR-JET-G
All versions
- Mitsubishi Electric Corporation AC Servo MELSERVO-JET MR-JET-G4-HS
All versions
- Mitsubishi Electric Corporation Liner Track System MTR-S series Linear track control module MTR-SCU00-4G
All versions
- Mitsubishi Electric Corporation Liner Track System MTR-S series Linear track control module MTR-SCU00-PG
All versions
- Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-A8NCG
All versions
- Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-A8NCG-S
All versions
- Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-A800-GN
All versions
- Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-E800-E
All versions
- Mitsubishi Electric Corporation Inverter FR-A800/F800/E800 Series FR-E800-SCE
All versions
- Mitsubishi Electric Corporation Industrial Robot CR800-D series controller Network Base Card 2F-DQ535-TSN
All versions
- Mitsubishi Electric Corporation CC-Link IE TSN expansion unit FCU8-EX569
All versions
- Mitsubishi Electric Corporation CC-Link IE TSN-CC-Link IE Field Network bridge module NZ2GN-GFB
All versions
- Mitsubishi Electric Corporation CC-Link IE TSN-AnyWireASLINK bridge module NZ2AW1GNAL
All versions
- Mitsubishi Electric Corporation Energy Measuring Unit CC-Link IE TSN Communication Unit EMU4-CM-TSN
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3715-FHCBD
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3712-WXCBD
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3715-XRBA
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3715-XRBD
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3712-XRBA
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3712-XRBD
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3710-XRBA
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3710-XRBD
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3708-XRBA
All versions
- Mitsubishi Electric Corporation GOT3000 Series GT3708-XRBD
All versions
- Mitsubishi Electric Corporation CC-Link IE TSN Communication Unit GT25-J71GN13-T2
All versions
- Mitsubishi Electric Corporation Motion Control Software SWM-G
All versions
- Mitsubishi Electric Corporation Motion Control Software SWM-G-N1
All versions
- Mitsubishi Electric Corporation CC-Link IE TSN Communication Software for Windows SW1DND-CCIETCT-M
All versions
- Mitsubishi Electric Corporation Analysis Support Software MELSOFT VIMA SW1DNN-VIMA-M
All versions
- Mitsubishi Electric Corporation Master/Local module Designated communication LSI DeviceKit NZ2KT-NPETNG51
All versions
- Mitsubishi Electric Corporation Remote Station Communication LSI with GbE-PHY NZ2GACP620-60
All versions
- Mitsubishi Electric Corporation Remote Station Communication LSI with GbE-PHY NZ2GACP620-300
All versions
- Mitsubishi Electric Corporation Remote Station Communication LSI with GbE-PHY NZ2GACP621-90
All versions
- Mitsubishi Electric Corporation Remote Station Communication LSI with GbE-PHY NZ2GACP621-720
All versions
- Mitsubishi Electric Corporation CC-Link IE TSN Master/Local module Designated communication LSI SDK SW1DNN-GN610SRC-M
All versions
- Mitsubishi Electric Corporation Remote station software development kit SW1DNC-GNSDK1S-M
All versions
- Mitsubishi Electric Corporation Remote station software development kit SW1DNC-GNSDK2S-M
All versions