CVE-2016-8370

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-B5, all versions Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-B2, all versions

Description An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules where weakly encrypted passwords are transmitted to a MELSEC-Q PLC.

Recommendations For QJ71E71-100, all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For QJ71E71-B5, all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For QJ71E71-B2, all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability.