CVE-2015-3938

The HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows remote attackers to cause a denial of service (device outage) via a long parameter.

Score

CVSS 2.0 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-10-06

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Melsec Fx3g (Mitsubishi Electric)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-146-01