This vulnerability (CWE-404) affects the MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and earlier. An attacker can remotely trigger improper resource shutdown or release by flooding the device with UDP packets, resulting in a denial-of-service condition. The device does not properly handle or release resources under this attack, leading to a state requiring a system reset to restore normal operation. The CVSS 4.0 base score is 8.7, reflecting network attack vector, no privileges or user interaction required, and high impact on availability.

Successful exploitation causes a denial-of-service condition on the affected Mitsubishi Electric FX5-EIP modules, disrupting their normal operation. The device becomes unresponsive and requires a system reset to recover, potentially impacting industrial control processes relying on these modules.

No patch or official fix is currently available for this vulnerability. Users should monitor the vendor's advisories for updates. Until a fix is released, consider implementing network-level protections such as filtering or rate-limiting UDP traffic to the affected devices to reduce exposure. Since this is a network-accessible vulnerability with no authentication required, restricting network access to trusted sources is advisable.