Version letters carry the whole audit here. In each of the three fix tracks, the last affected build sits one letter below the fixed one: BB becomes BC, FM becomes FN, LJ becomes LK [15]. A controller reporting BB is in scope and a controller reporting BC is out, so a pass that recorded "up to date" without writing down the two-letter code produced nothing usable.
Then the part numbers. Eighteen model designations resolve to sixteen distinct BND numbers, because M730VW and M720VW both carry BND-1015W000, and M730VS and M720VS both carry BND-1012W000 [14]. An asset inventory keyed on part number shows one row where the advisory shows two names. The version cutoff for each pair is the same LJ either way [4], so the collapse is survivable as long as nobody reads a missing model name as a missing exposure.
C80 (BND-2036W000) is the outlier. It is listed as affected at all versions [9] and it appears in none of the three vendor fix instructions [19]. That leaves it in the category Mitsubishi wrote the fallback guidance for: firewall or VPN where internet access is required, otherwise LAN-only operation with untrusted networks and hosts blocked [10].
What the advisory does not do is say what changed. The text carries the model list, the three remediation groups and the mitigations, with no revision history and no dates [16]. Anyone who cleared the original advisory has no delta to work from, which makes this a full comparison of all 18 entries rather than a scan for new lines.
On exploitability: the stated impact is an out-of-bounds read producing a denial-of-service condition [2], and the description names no authentication or privilege precondition, only crafted packets sent to TCP port 683 [18]. The impact statement stops at availability [17]. The process being denied is a cutting program on a machine tool, and these are worldwide-deployed critical manufacturing assets [12].
Filtering TCP 683 at the cell boundary reaches all 18 models with one change, and per the advisory it is the only control available for the C80 [10]. The firmware letters can be collected at the pace machines come free.
