CVE-2019-10977

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 versions with serial number 20121 and prior

Description The issue allows an attacker to send crafted TCP packets against the "FTP service", forcing the target devices to enter an error mode and cause a denial-of-service condition.

Recommendations For versions with serial number 20121 and prior, consider disabling the FTP service as a temporary workaround until a patch is available. Restrict access to the Ethernet module to minimize the risk of exploitation.