What Manufacturers Need to Know
Cybersecurity threats are no longer just a problem for office computers. More and more, attackers are targeting shop floor equipment like CNC machines. On February 20, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) released a warning about a serious security issue affecting Mitsubishi Electric’s CNC Series machines.
This issue, known as ICSA-24-291-03, could allow hackers to remotely shut down CNC machines, causing unexpected downtime and production delays. For manufacturers who rely on Mitsubishi CNC systems, this is an important risk to address.
Why This CNC Security Warning Matters
Imagine this: Your shop floor is running at full capacity, CNC machines cutting parts with precision. Then, without warning, one or more machines stop working. Operators try restarting them, but nothing helps.
The problem? A cyberattack.
This is not just a theoretical scenario. The latest CISA warning highlights a vulnerability in Mitsubishi Electric CNC machines that could let hackers cause denial-of-service (DoS) attacks. In simpler terms, this means attackers could remotely crash your CNC machines, stopping production entirely.
For manufacturers, unexpected downtime means:
- Missed deadlines
- Lost revenue
- Frustrated customers
That’s why understanding this CNC cybersecurity threat is so important.
Which CNC Machines Are Affected?
Not all Mitsubishi CNCs are at risk, but many common models are vulnerable. The affected machines include:
- M800VW, M800VS, M80V, M80VW – Versions B1 and prior
- M800W, M800S, M80, M80W, E80 – Versions FH and prior
- C80 – All versions
If your facility uses Mitsubishi Electric CNCs, it’s important to check the model and firmware version to see if your machines are at risk.
How Could a Cyberattack Affect Your CNC Machines?
The biggest risk of this vulnerability is that it allows an attacker to crash CNC machines remotely. But what does that actually mean for your business?
- Production Could Stop Without Warning
- A hacker doesn’t need physical access to your machines. If the system is connected to a network, they could trigger a shutdown from anywhere.
- Your CNC operators might see an error message and find that restarting the machine doesn’t work.
- Downtime Could Cost Thousands
- If machines stop working in the middle of production, it could take hours—or even days—to get back on track.
- Some manufacturers estimate that every hour of downtime costs them thousands of dollars in lost production.
- Your Supply Chain Could Be Disrupted
- If an attack happens at the wrong time, it could mean missed shipments or delays for key customers.
- For manufacturers working with automotive, aerospace, or medical industries, delays could even lead to lost contracts.
These risks highlight why securing CNC machines is just as important as protecting office computers.
How to Protect Your Mitsubishi CNC Machines
If your facility uses Mitsubishi CNCs, here are a few immediate steps you can take to reduce risk:
1. Update Your Firmware
Mitsubishi Electric is expected to release firmware updates to fix this vulnerability. Updating your CNC software regularly ensures that known security flaws are patched.
2. Secure Your Network
Many manufacturers connect CNC machines to their office network so they can send job files easily. Unfortunately, this also makes it easier for hackers to access machines remotely.
- Use network segmentation to keep CNC machines separate from office systems and the internet.
- Install firewalls and intrusion detection systems to monitor unusual activity.
3. Limit Access to CNC Systems
- Only authorized employees should have access to CNC machines.
- Set up strong passwords and two-factor authentication if available.
4. Train Employees on Cyber Risks
Many cyberattacks happen because an employee clicks on a bad link or opens a dangerous file. But cybersecurity isn’t just an office issue—production line operators also need to be part of the training.
- Teach all employees, including CNC operators and shop floor staff, how to recognize phishing emails and avoid unsafe websites.
- Make sure machine operators know who to report unusual errors to, especially if a machine is acting strangely or losing network access.
- Encourage a security-first mindset across the entire operation so that IT issues don’t go unnoticed.
5. Work With a Cybersecurity Partner
Many IT providers focus on office security but don’t understand shop floor systems like CNCs. If you’re not sure whether your machines are protected, it might be time to bring in a cybersecurity expert who specializes in manufacturing.
Stay Ahead of CNC Cybersecurity Risks
Manufacturers rely on CNC machines to keep production moving, and the last thing anyone wants is for a cybersecurity issue to bring things to a halt.
The good news is that a few simple steps can go a long way in keeping your machines secure. Updating firmware, securing networks, and training employees can help reduce risk without adding complexity to your operations.
If you haven’t looked at CNC security before, now is a great time to start. It’s always better to be proactive than to deal with unexpected downtime.
For more details, check out the full CISA advisory on Mitsubishi Electric CNC vulnerabilities here.
