CVE-2019-10977: Mitsubishielectric QJ71E71-100 Firmware

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition.

Affected products

• Mitsubishielectric QJ71E71-100 Firmware: up to and including 20121

Published 2019-05-23. Last modified 2026-06-17.