CVE-2020-5527

When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
VendorProductVersion
mitsubishielectriccr800-q_firmware
-
mitsubishielectricfx3g_firmware
-
mitsubishielectricfx3gc_firmware
-
mitsubishielectricfx3s_firmware
-
mitsubishielectricfx3u_firmware
-
mitsubishielectricfx3uc_firmware
-
mitsubishielectricfx5u_firmware
-
mitsubishielectricfx5uc_firmware
-
mitsubishielectricfx5uj_firmware
-
mitsubishielectricl02cpu_firmware
-
mitsubishielectricl02cpu-p_firmware
-
mitsubishielectricl02scpu_firmware
-
mitsubishielectricl02scpu-p_firmware
-
mitsubishielectricl06cpu_firmware
-
mitsubishielectricl06cpu-p_firmware
-
mitsubishielectricl26cpu_firmware
-
mitsubishielectricl26cpu-bt_firmware
-
mitsubishielectricl26cpu-p_firmware
-
mitsubishielectricl26cpu-pbt_firmware
-
mitsubishielectricq02phcpu_firmware
-
mitsubishielectricq06phcpu_firmware
-
mitsubishielectricq12dccpu-v_firmware
-
mitsubishielectricq12phcpu_firmware
-
mitsubishielectricq12prhcpu_firmware
-
mitsubishielectricq172dscpu_firmware
-
mitsubishielectricq173dscpu_firmware
-
mitsubishielectricq173nccpu_firmware
-
mitsubishielectricq24dhccpu-ls_firmware
-
mitsubishielectricq24dhccpu-v_firmware
-
mitsubishielectricq24dhccpu-vg2_firmware
-
mitsubishielectricq25phcpu_firmware
-
mitsubishielectricq25prhcpu_firmware
-
mitsubishielectricq26dhccpu-ls_firmware
-
mitsubishielectricr00cpu_firmware
-
mitsubishielectricr01cpu_firmware
-
mitsubishielectricr02cpu_firmware
-
mitsubishielectricr04cpu_firmware
-
mitsubishielectricr04encpu_firmware
-
mitsubishielectricr08cpu_firmware
-
mitsubishielectricr08encpu_firmware
-
mitsubishielectricr120cpu_firmware
-
mitsubishielectricr120encpu_firmware
-
mitsubishielectricr16cpu_firmware
-
mitsubishielectricr16encpu_firmware
-
mitsubishielectricr32cpu_firmware
-
mitsubishielectricr32encpu_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jvn.jp/en/vu/JVNVU91553662/index.html
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf
https://jvn.jp/en/vu/JVNVU91553662/index.html
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf