CVE-2019-10977

HIGH

Mitsubishielectric Qj71e71-100 Firmware - Improper Exception Handling

Title source: rule

Description

In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition.

Scores

CVSS v3 7.5
EPSS 0.0383
EPSS Percentile 88.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-755 CWE-400
Status published

Affected Products (1)

mitsubishielectric/qj71e71-100_firmware < 20121

Timeline

Published May 23, 2019
Tracked Since Feb 18, 2026