Mitsubishi Electric MELSEC Resource Management Errors (CVE-2015-3938)

The HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows remote attackers to cause a denial of service device outage via a long parameter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CVE-2015-3938

The CVE-2015-3938 vulnerability affects Mitsubishi Electric MELSEC FX3G PLCs, where the built‑in HTTP application cannot handle parameters longer than expected. This leads to a remote denial-of-service (device outage), potentially requiring a reboot. Public details consistently point to the FX3G ...