CVE-2026-8806

Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition in the affected product by continuously sending a large number of communication packets to the Ethernet port of the product in a short period of time, increasing the processing load of the product, preventing the internal anomaly-detection processing from being performed, and causing the communication function to stop.

CVSS

No CVSS.

References

Link	Resource
https://jvn.jp/vu/JVNVU97140216/
https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-06
https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-003_en.pdf

Configurations

No configuration.

History

26 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de violación del comportamiento esperado en el módulo Ethernet FX5-ENET/IP de la serie MELSEC iQ-F de Mitsubishi Electric, FX5-ENET/IP, todas las versiones, permite a un atacante remoto causar una condición de denegación de servicio (DoS) en el producto afectado al enviar continuamente un gran número de paquetes de comunicación al puerto Ethernet del producto en un corto período de tiempo, aumentando la carga de procesamiento del producto, impidiendo que se realice el procesamiento interno de detección de anomalías y provocando la detención de la función de comunicación.

Information

Published : 2026-06-19 03:16

Updated : 2026-10-26 11:10

NVD link : CVE-2026-8806

Mitre link : CVE-2026-8806

CVE.ORG link : CVE-2026-8806

JSON object : View

Products Affected

No product.

CWE

CWE-440

Expected Behavior Violation

{"id": "CVE-2026-8806", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8806", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-22T14:46:34.128220Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "affectedData": [{"vendor": "Mitsubishi Electric Corporation", "product": "Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-19T03:16:15.010", "references": [{"url": "https://jvn.jp/vu/JVNVU97140216/", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-06", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}, {"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-003_en.pdf", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "description": [{"lang": "en", "value": "CWE-440"}]}], "descriptions": [{"lang": "en", "value": "Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition in the affected product by continuously sending a large number of communication packets to the Ethernet port of the product in a short period of time, increasing the processing load of the product, preventing the internal anomaly-detection processing from being performed, and causing the communication function to stop."}, {"lang": "es", "value": "Vulnerabilidad de violaci\u00f3n del comportamiento esperado en el m\u00f3dulo Ethernet FX5-ENET/IP de la serie MELSEC iQ-F de Mitsubishi Electric, FX5-ENET/IP, todas las versiones, permite a un atacante remoto causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en el producto afectado al enviar continuamente un gran n\u00famero de paquetes de comunicaci\u00f3n al puerto Ethernet del producto en un corto per\u00edodo de tiempo, aumentando la carga de procesamiento del producto, impidiendo que se realice el procesamiento interno de detecci\u00f3n de anomal\u00edas y provocando la detenci\u00f3n de la funci\u00f3n de comunicaci\u00f3n."}], "lastModified": "2026-10-26T11:10:00.157", "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"}