Mitsubishi Electric MELSEC iQ-F Series

A denial-of-service vulnerability exists in Mitsubishi Electric MELSEC iQ-F Series programmable logic controllers (PLCs) and CC-Link IE TSN communication modules. The PLC's authentication mechanism can be triggered to lock out all login attempts—including legitimate user attempts—when an attacker sends repeated failed login attempts with incorrect credentials. Once locked out, authorized personnel cannot access the PLC to manage control logic or process parameters until a timeout period expires or the device is manually reset. Mitsubishi Electric has stated there are no plans to release a fixed version for any affected model.