Integer Overflow Vulnerability in Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP Module

CVE-2026-8805

What is CVE-2026-8805?

The vulnerability in Mitsubishi Electric's MELSEC iQ-F Series FX5-EIP EtherNet/IP module allows a remote attacker to exploit an integer overflow condition. By overwhelming the device with a rapid succession of TCP connection requests, the attacker can disrupt the internal connection management processes, potentially leading to a denial-of-service effect. This flaw impacts versions 1.000 and prior, where improper memory access can occur, significantly affecting the device's operational stability.

References