CVE-2020-16226

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
VendorProductVersion
mitsubishielectricqj71mes96_firmware
*
mitsubishielectricqj71ws96_firmware
*
mitsubishielectricq06ccpu-v_firmware
*
mitsubishielectricq24dhccpu-v_firmware
*
mitsubishielectricq24dhccpu-vg_firmware
*
mitsubishielectricr12ccpu-v_firmware
*
mitsubishielectricrd55up06-v_firmware
*
mitsubishielectricrd55up12-v_firmware
*
mitsubishielectricrj71gn11-t2_firmware
*
mitsubishielectricrj71en71_firmware
*
mitsubishielectricqj71e71-100_firmware
*
mitsubishielectriclj71e71-100_firmware
*
mitsubishielectricqj71mt91_firmware
*
mitsubishielectricrd78gn\(n\=4\,8\,16\,32\,64\)_firmware
*
mitsubishielectricrd78ghv_firmware
*
mitsubishielectricrd78ghw_firmware
*
mitsubishielectricnz2gacp620-60_firmware
*
mitsubishielectricnz2gacp620-300_firmware
*
mitsubishielectricnz2ft-mt_firmware
*
mitsubishielectricnz2ft-eip_firmware
*
mitsubishielectricq03udecpu_firmware
𝑥
≤ 22081
mitsubishielectricqnudehcpu\(n\=04\/06\/10\/13\/20\/26\/50\/100\)_firmware
𝑥
≤ 22081
mitsubishielectricqnudvcpu\(n\=03\/04\/06\/13\/26\)_firmware
𝑥
≤ 22031
mitsubishielectricqnudpvcpu\(n\=04\/06\/13\/2\)_firmware
𝑥
≤ 22031
mitsubishielectriclncpu\(-p\)\(n\=02\/06\/26\)_firmware
𝑥
≤ 22051
mitsubishielectricl26cpu-\(p\)bt_firmware
𝑥
≤ 22051
mitsubishielectricrncpu\(n\=00\/01\/02\)t_firmware
𝑥
≤ 18
mitsubishielectricrncpu\(n\=04\/08\/16\/32\/120\)_firmware
𝑥
≤ 50
mitsubishielectricrnencpu\(n\=04\/08\/16\/32\/120\)_firmware
𝑥
≤ 50
mitsubishielectricrnsfcpu_\(n\=08\/16\/32\/120\)_firmware
*
mitsubishielectricrnpcpu\(n\=08\/16\/32\/120\)_firmware
*
mitsubishielectricrnpsfcpu\(n\=08\/16\/32\/120\)_firmware
*
mitsubishielectricfx5uc-32mt\/d_firmware
1.210
mitsubishielectricfx5uc-32mt\/dss_firmware
1.210
mitsubishielectricfx5uc-32mt\/ds-ts_firmware
1.210
mitsubishielectricfx5uc-32mt\/dss-ts_firmware
1.210
mitsubishielectricfx5uj-24mr\/es_firmware
1.000
mitsubishielectricfx5uc-32mr\/ds-ts_firmware
1.210
mitsubishielectricfx5uj-24mt\/es_firmware
1.000
mitsubishielectricfx5uj-24mt\/ess_firmware
1.000
mitsubishielectricfx5uj-40mr\/es_firmware
1.000
mitsubishielectricfx5uj-40mt\/es_firmware
1.000
mitsubishielectricfx5uj-40mt\/ess_firmware
1.000
mitsubishielectricfx5uj-60mr\/es_firmware
1.000
mitsubishielectricfx5uj-60mt\/es_firmware
1.000
mitsubishielectricfx5uj-60mt\/ess_firmware
1.000
mitsubishielectricfx5-enet_firmware
*
mitsubishielectricfx5-enet\/ip_firmware
*
mitsubishielectricfx5-enet-adp_firmware
*
mitsubishielectricfx3g-14mr\/es_firmware
*
mitsubishielectricfx3g-14mt\/ess_firmware
*
mitsubishielectricfx3g-14mr\/ds_firmware
*
mitsubishielectricfx3g-14mt\/dss_firmware
*
mitsubishielectricfx3g-24mr\/es_firmware
*
mitsubishielectricfx3g-24mt\/ess_firmware
*
mitsubishielectricfx3g-24mr\/ds_firmware
*
mitsubishielectricfx3g-24mt\/dss_firmware
*
mitsubishielectricfx3g-40mr\/es_firmware
*
mitsubishielectricfx3g-40mt\/ess_firmware
*
mitsubishielectricfx3g-40mr\/ds_firmware
*
mitsubishielectricfx3g-40mt\/dss_firmware
*
mitsubishielectricfx3g-60mr\/es_firmware
*
mitsubishielectricfx3g-60mt\/ess_firmware
*
mitsubishielectricfx3g-60mr\/ds_firmware
*
mitsubishielectricfx3g-60mt\/dss_firmware
*
mitsubishielectricfx3g-24mr\/es_firmware
*
mitsubishielectricfx3g-24mt\/ess_firmware
*
mitsubishielectricfx3g-24mr\/ds_firmware
*
mitsubishielectricfx3g-24mt\/dss_firmware
*
mitsubishielectricfx3g-40mr\/es_firmware
*
mitsubishielectricfx3g-40mt\/ess_firmware
*
mitsubishielectricfx3g-40mr\/ds_firmware
*
mitsubishielectricfx3g-40mt\/dss_firmware
*
mitsubishielectricfx3g-32_mt\/dss_firmware
*
mitsubishielectricfx3u-enet_firmware
*
mitsubishielectricfx3u-enet-l_firmware
*
mitsubishielectricfx3u-enet-p502_firmware
*
mitsubishielectricfx5-cclgn-ms_firmware
*
mitsubishielectriciu1-1m20-d_firmware
*
mitsubishielectricle7-40gu-l_firmware
*
mitsubishielectricgot2000_series_gt21_firmware
*
mitsubishielectricgot_simple_series_gs21_firmware
*
mitsubishielectricgot1000_series_gt14_firmware
*
mitsubishielectricgt25-j71gn13-t2_firmware
*
mitsubishielectricfr-a820-e_firmware
*
mitsubishielectricfr-a840-e_firmware
*
mitsubishielectricfr-a860-e_firmware
*
mitsubishielectricfr-a842-e_firmware
*
mitsubishielectricfr-a862-e_firmware
*
mitsubishielectricfr-f820-e_firmware
*
mitsubishielectricfr-f840-e_firmware
*
mitsubishielectricfr-f860-e_firmware
*
mitsubishielectricfr-f842-e_firmware
*
mitsubishielectricfr-f862-e_firmware
*
mitsubishielectricfr-a8ncge_firmware
𝑥
≤ 2020-08
mitsubishielectricfr-e800-epa_firmware
𝑥
≤ 2020-07
mitsubishielectricfr-e800-epb_firmware
𝑥
≤ 2020-07
mitsubishielectricconveyor_tracking_application_apr-ntr12fh
-
mitsubishielectricconveyor_tracking_application_apr-ntr20fh\(n\=1\,2\)
-
mitsubishielectricconveyor_tracking_application_apr-ntr3fh
*
mitsubishielectricconveyor_tracking_application_apr-ntr6fh
-
mitsubishielectricmr-je-c_firmware
*
mitsubishielectricmr-j4-tm_firmware
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01
https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01