CVE-2019-10977

In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition.

• CWE-400
• CWE-755

• http://www.securityfocus.com/bid/108419Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-19-141-02Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/108419Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-19-141-02Third Party Advisory, US Government Resource

Published

May 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10971The application (Network Configurator for DeviceNet Safety 3…
• CVE-2019-10972Mitsubishi Electric FR Configurator2, Version 1.16S and prio…5.5
• CVE-2019-10973Quest KACE, all versions prior to version 8.0.x, 8.1.x, and …
• CVE-2019-10974NREL EnergyPlus, Versions 8.6.0 and possibly prior versions,…5.5
• CVE-2019-10975An out-of-bounds read vulnerability has been identified in F…
• CVE-2019-10976Mitsubishi Electric FR Configurator2, Version 1.16S and prio…
• CVE-2019-10978Red Lion Controls Crimson, version 3.0 and prior and version…7.8
• CVE-2019-10979SICK MSC800 all versions prior to Version 4.0, the affected …
• CVE-2019-1098An information disclosure vulnerability exists when the Wind…
• CVE-2019-10980A type confusion vulnerability may be exploited when LAquis …7.8
• CVE-2019-10981In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40…7.8
• CVE-2019-10982Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and…7.8