This vulnerability involves improper validation of input quantity in Mitsubishi Electric's CC-Link IE TSN series modules, including Remote I/O, Analog-Digital Converter, Digital-Analog Converter, FPGA, communication LSIs, and Ethernet interface modules. An unauthenticated remote attacker can exploit this flaw by sending specially crafted UDP packets to cause a Denial of Service, disrupting the availability of these industrial control system components. The affected versions are 09 and prior. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and an impact limited to availability.

The vulnerability allows remote unauthenticated attackers to cause a Denial of Service condition, impacting the availability of affected Mitsubishi Electric CC-Link IE TSN modules. There is no impact on confidentiality or integrity reported. This could disrupt industrial control system operations relying on these modules.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations should monitor Mitsubishi Electric's advisories for updates. Until a fix is available, consider network-level protections such as filtering or rate-limiting UDP traffic to these devices to reduce exposure to crafted packets.