CVE-2020-5527
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.
Cuando el puerto de transmisión de MELSOFT (UDP/IP) de la serie Mitsubishi Electric MELSEC iQ-R (todas las versiones), la serie MELSEC iQ-F (todas las versiones), la serie MELSEC Q (todas las versiones), la serie MELSEC L (todas las versiones) y la serie MELSEC F (todas las versiones), recibe una cantidad masiva de datos por medio de vectores no especificados, un consumo de recursos se presenta y el puerto no procesa los datos apropiadamente. Como resultado, puede caer en una condición de denegación de servicio (DoS). El proveedor declara que esta vulnerabilidad solo afecta las funciones de comunicación Ethernet.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-01-06 CVE Reserved
- 2020-03-30 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/en/vu/JVNVU91553662/index.html | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf | 2020-04-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | Cr800-q Firmware Search vendor "Mitsubishielectric" for product "Cr800-q Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Cr800-q Search vendor "Mitsubishielectric" for product "Cr800-q" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3g Firmware Search vendor "Mitsubishielectric" for product "Fx3g Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3g Search vendor "Mitsubishielectric" for product "Fx3g" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3gc Firmware Search vendor "Mitsubishielectric" for product "Fx3gc Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3gc Search vendor "Mitsubishielectric" for product "Fx3gc" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3s Firmware Search vendor "Mitsubishielectric" for product "Fx3s Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3s Search vendor "Mitsubishielectric" for product "Fx3s" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3u Firmware Search vendor "Mitsubishielectric" for product "Fx3u Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3u Search vendor "Mitsubishielectric" for product "Fx3u" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3uc Firmware Search vendor "Mitsubishielectric" for product "Fx3uc Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx3uc Search vendor "Mitsubishielectric" for product "Fx3uc" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5u Firmware Search vendor "Mitsubishielectric" for product "Fx5u Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5u Search vendor "Mitsubishielectric" for product "Fx5u" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc Firmware Search vendor "Mitsubishielectric" for product "Fx5uc Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uc Search vendor "Mitsubishielectric" for product "Fx5uc" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj Firmware Search vendor "Mitsubishielectric" for product "Fx5uj Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Fx5uj Search vendor "Mitsubishielectric" for product "Fx5uj" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L02cpu Firmware Search vendor "Mitsubishielectric" for product "L02cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L02cpu Search vendor "Mitsubishielectric" for product "L02cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L02cpu-p Firmware Search vendor "Mitsubishielectric" for product "L02cpu-p Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L02cpu-p Search vendor "Mitsubishielectric" for product "L02cpu-p" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L02scpu Firmware Search vendor "Mitsubishielectric" for product "L02scpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L02scpu Search vendor "Mitsubishielectric" for product "L02scpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L02scpu-p Firmware Search vendor "Mitsubishielectric" for product "L02scpu-p Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L02scpu-p Search vendor "Mitsubishielectric" for product "L02scpu-p" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L06cpu Firmware Search vendor "Mitsubishielectric" for product "L06cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L06cpu Search vendor "Mitsubishielectric" for product "L06cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L06cpu-p Firmware Search vendor "Mitsubishielectric" for product "L06cpu-p Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L06cpu-p Search vendor "Mitsubishielectric" for product "L06cpu-p" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L26cpu Firmware Search vendor "Mitsubishielectric" for product "L26cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L26cpu Search vendor "Mitsubishielectric" for product "L26cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L26cpu-bt Firmware Search vendor "Mitsubishielectric" for product "L26cpu-bt Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L26cpu-bt Search vendor "Mitsubishielectric" for product "L26cpu-bt" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L26cpu-p Firmware Search vendor "Mitsubishielectric" for product "L26cpu-p Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L26cpu-p Search vendor "Mitsubishielectric" for product "L26cpu-p" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | L26cpu-pbt Firmware Search vendor "Mitsubishielectric" for product "L26cpu-pbt Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | L26cpu-pbt Search vendor "Mitsubishielectric" for product "L26cpu-pbt" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q02phcpu Firmware Search vendor "Mitsubishielectric" for product "Q02phcpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q02phcpu Search vendor "Mitsubishielectric" for product "Q02phcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q06phcpu Firmware Search vendor "Mitsubishielectric" for product "Q06phcpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q06phcpu Search vendor "Mitsubishielectric" for product "Q06phcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q12dccpu-v Firmware Search vendor "Mitsubishielectric" for product "Q12dccpu-v Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q12dccpu-v Search vendor "Mitsubishielectric" for product "Q12dccpu-v" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q12phcpu Firmware Search vendor "Mitsubishielectric" for product "Q12phcpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q12phcpu Search vendor "Mitsubishielectric" for product "Q12phcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q12prhcpu Firmware Search vendor "Mitsubishielectric" for product "Q12prhcpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q12prhcpu Search vendor "Mitsubishielectric" for product "Q12prhcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q172dscpu Firmware Search vendor "Mitsubishielectric" for product "Q172dscpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q172dscpu Search vendor "Mitsubishielectric" for product "Q172dscpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q173dscpu Firmware Search vendor "Mitsubishielectric" for product "Q173dscpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q173dscpu Search vendor "Mitsubishielectric" for product "Q173dscpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q173nccpu Firmware Search vendor "Mitsubishielectric" for product "Q173nccpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q173nccpu Search vendor "Mitsubishielectric" for product "Q173nccpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q24dhccpu-ls Firmware Search vendor "Mitsubishielectric" for product "Q24dhccpu-ls Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q24dhccpu-ls Search vendor "Mitsubishielectric" for product "Q24dhccpu-ls" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q24dhccpu-v Firmware Search vendor "Mitsubishielectric" for product "Q24dhccpu-v Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q24dhccpu-v Search vendor "Mitsubishielectric" for product "Q24dhccpu-v" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q24dhccpu-vg2 Firmware Search vendor "Mitsubishielectric" for product "Q24dhccpu-vg2 Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q24dhccpu-vg2 Search vendor "Mitsubishielectric" for product "Q24dhccpu-vg2" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q25phcpu Firmware Search vendor "Mitsubishielectric" for product "Q25phcpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q25phcpu Search vendor "Mitsubishielectric" for product "Q25phcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q25prhcpu Firmware Search vendor "Mitsubishielectric" for product "Q25prhcpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q25prhcpu Search vendor "Mitsubishielectric" for product "Q25prhcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Q26dhccpu-ls Firmware Search vendor "Mitsubishielectric" for product "Q26dhccpu-ls Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Q26dhccpu-ls Search vendor "Mitsubishielectric" for product "Q26dhccpu-ls" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R00cpu Firmware Search vendor "Mitsubishielectric" for product "R00cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R00cpu Search vendor "Mitsubishielectric" for product "R00cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R01cpu Firmware Search vendor "Mitsubishielectric" for product "R01cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R01cpu Search vendor "Mitsubishielectric" for product "R01cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R02cpu Firmware Search vendor "Mitsubishielectric" for product "R02cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R02cpu Search vendor "Mitsubishielectric" for product "R02cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R04cpu Firmware Search vendor "Mitsubishielectric" for product "R04cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R04cpu Search vendor "Mitsubishielectric" for product "R04cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R04encpu Firmware Search vendor "Mitsubishielectric" for product "R04encpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R04encpu Search vendor "Mitsubishielectric" for product "R04encpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R08cpu Firmware Search vendor "Mitsubishielectric" for product "R08cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R08cpu Search vendor "Mitsubishielectric" for product "R08cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R08encpu Firmware Search vendor "Mitsubishielectric" for product "R08encpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R08encpu Search vendor "Mitsubishielectric" for product "R08encpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R120cpu Firmware Search vendor "Mitsubishielectric" for product "R120cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R120cpu Search vendor "Mitsubishielectric" for product "R120cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R120encpu Firmware Search vendor "Mitsubishielectric" for product "R120encpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R120encpu Search vendor "Mitsubishielectric" for product "R120encpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R16cpu Firmware Search vendor "Mitsubishielectric" for product "R16cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R16cpu Search vendor "Mitsubishielectric" for product "R16cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R16encpu Firmware Search vendor "Mitsubishielectric" for product "R16encpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R16encpu Search vendor "Mitsubishielectric" for product "R16encpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R32cpu Firmware Search vendor "Mitsubishielectric" for product "R32cpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R32cpu Search vendor "Mitsubishielectric" for product "R32cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R32encpu Firmware Search vendor "Mitsubishielectric" for product "R32encpu Firmware" | - | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R32encpu Search vendor "Mitsubishielectric" for product "R32encpu" | - | - |
Safe
|