CVE-2015-3938

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC FX3G PLC devices versions prior to April 2015

Description The issue allows remote attackers to cause a denial of service, resulting in a device outage, by sending a long parameter to the HTTP application.

Recommendations For versions prior to April 2015, consider restricting access to the HTTP application until a fix is available. As a temporary workaround, limit the length of parameters accepted by the application to prevent exploitation.