CVE-2020-5668
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series modules (R00/01/02CPU firmware version '19' and earlier, R04/08/16/32/120 (EN) CPU firmware version '51' and earlier, R08/16/32/120SFCPU firmware version '22' and earlier, R08/16/32/120PCPU firmware version '25' and earlier, R08/16/32/120PSFCPU firmware version '06' and earlier, RJ71EN71 firmware version '47' and earlier, RJ71GF11-T2 firmware version '47' and earlier, RJ72GF15-T2 firmware version '07' and earlier, RJ71GP21-SX firmware version '47' and earlier, RJ71GP21S-SX firmware version '47' and earlier, and RJ71GN11-T2 firmware version '11' and earlier) allows a remote unauthenticated attacker to cause an error in a CPU unit and cause a denial-of-service (DoS) condition in execution of the program and its communication, or to cause a denial-of-service (DoS) condition in communication via the unit by receiving a specially crafted SLMP packet
Vulnerabilidad de consumo incontrolado de recursos en los módulos de la serie iQ-R de MELSEC (R00/01/02CPU firmware versión '19' y anteriores, R04/08/16/32/120 (ES) CPU firmware versión '51' y anteriores, R08/16/32/120SFCPU firmware versión '22' y anteriores, R08/16/32/120PCPU firmware versión '25' y anterior, R08/16/32/120PSFCPU firmware versión '06' y anterior, RJ71EN71 firmware versión '47' y anterior, RJ71GF11-T2 firmware versión '47' y anterior, RJ72GF15-T2 firmware versión '07' y anterior, RJ71GP21-SX firmware versión '47' y anterior, RJ71GP21S-SX firmware versión '47' y anterior, y RJ71GN11-T2 firmware versión '11' y anteriores) permite a un atacante remoto no autentificado provocar un error en una CPU y causar una condición de denegación de servicio (DoS) en la ejecución del programa y su comunicación, o causar una condición de denegación de servicio (DoS) en la comunicación a través de la unidad mediante la recepción de un paquete SLMP especialmente diseñado
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-01-06 CVE Reserved
- 2020-11-20 CVE Published
- 2024-08-04 CVE Updated
- 2024-09-09 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/vu/JVNVU95980140/index.html | Third Party Advisory | |
| https://us-cert.cisa.gov/ics/advisories/icsa-20-324-05 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitsubishielectric Search vendor "Mitsubishielectric" | R00cpu Firmware Search vendor "Mitsubishielectric" for product "R00cpu Firmware" | <= 19 Search vendor "Mitsubishielectric" for product "R00cpu Firmware" and version " <= 19" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R00cpu Search vendor "Mitsubishielectric" for product "R00cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R01cpu Firmware Search vendor "Mitsubishielectric" for product "R01cpu Firmware" | <= 19 Search vendor "Mitsubishielectric" for product "R01cpu Firmware" and version " <= 19" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R01cpu Search vendor "Mitsubishielectric" for product "R01cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R02cpu Firmware Search vendor "Mitsubishielectric" for product "R02cpu Firmware" | <= 19 Search vendor "Mitsubishielectric" for product "R02cpu Firmware" and version " <= 19" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R02cpu Search vendor "Mitsubishielectric" for product "R02cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R04cpu Firmware Search vendor "Mitsubishielectric" for product "R04cpu Firmware" | <= 51 Search vendor "Mitsubishielectric" for product "R04cpu Firmware" and version " <= 51" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R04cpu Search vendor "Mitsubishielectric" for product "R04cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R08cpu Firmware Search vendor "Mitsubishielectric" for product "R08cpu Firmware" | <= 51 Search vendor "Mitsubishielectric" for product "R08cpu Firmware" and version " <= 51" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R08cpu Search vendor "Mitsubishielectric" for product "R08cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R16cpu Firmware Search vendor "Mitsubishielectric" for product "R16cpu Firmware" | <= 51 Search vendor "Mitsubishielectric" for product "R16cpu Firmware" and version " <= 51" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R16cpu Search vendor "Mitsubishielectric" for product "R16cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R32cpu Firmware Search vendor "Mitsubishielectric" for product "R32cpu Firmware" | <= 51 Search vendor "Mitsubishielectric" for product "R32cpu Firmware" and version " <= 51" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R32cpu Search vendor "Mitsubishielectric" for product "R32cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R120cpu Firmware Search vendor "Mitsubishielectric" for product "R120cpu Firmware" | <= 51 Search vendor "Mitsubishielectric" for product "R120cpu Firmware" and version " <= 51" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R120cpu Search vendor "Mitsubishielectric" for product "R120cpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R08sfcpu Firmware Search vendor "Mitsubishielectric" for product "R08sfcpu Firmware" | <= 22 Search vendor "Mitsubishielectric" for product "R08sfcpu Firmware" and version " <= 22" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R08sfcpu Search vendor "Mitsubishielectric" for product "R08sfcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R16sfcpu Firmware Search vendor "Mitsubishielectric" for product "R16sfcpu Firmware" | <= 22 Search vendor "Mitsubishielectric" for product "R16sfcpu Firmware" and version " <= 22" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R16sfcpu Search vendor "Mitsubishielectric" for product "R16sfcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R32sfcpu Firmware Search vendor "Mitsubishielectric" for product "R32sfcpu Firmware" | <= 22 Search vendor "Mitsubishielectric" for product "R32sfcpu Firmware" and version " <= 22" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R32sfcpu Search vendor "Mitsubishielectric" for product "R32sfcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R120sfcpu Firmware Search vendor "Mitsubishielectric" for product "R120sfcpu Firmware" | <= 22 Search vendor "Mitsubishielectric" for product "R120sfcpu Firmware" and version " <= 22" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R120sfcpu Search vendor "Mitsubishielectric" for product "R120sfcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R08pcpu Firmware Search vendor "Mitsubishielectric" for product "R08pcpu Firmware" | <= 25 Search vendor "Mitsubishielectric" for product "R08pcpu Firmware" and version " <= 25" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R08pcpu Search vendor "Mitsubishielectric" for product "R08pcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R16pcpu Firmware Search vendor "Mitsubishielectric" for product "R16pcpu Firmware" | <= 25 Search vendor "Mitsubishielectric" for product "R16pcpu Firmware" and version " <= 25" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R16pcpu Search vendor "Mitsubishielectric" for product "R16pcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R32pcpu Firmware Search vendor "Mitsubishielectric" for product "R32pcpu Firmware" | <= 25 Search vendor "Mitsubishielectric" for product "R32pcpu Firmware" and version " <= 25" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R32pcpu Search vendor "Mitsubishielectric" for product "R32pcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R120pcpu Firmware Search vendor "Mitsubishielectric" for product "R120pcpu Firmware" | <= 25 Search vendor "Mitsubishielectric" for product "R120pcpu Firmware" and version " <= 25" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R120pcpu Search vendor "Mitsubishielectric" for product "R120pcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R08psfcpu Firmware Search vendor "Mitsubishielectric" for product "R08psfcpu Firmware" | <= 06 Search vendor "Mitsubishielectric" for product "R08psfcpu Firmware" and version " <= 06" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R08psfcpu Search vendor "Mitsubishielectric" for product "R08psfcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R16psfcpu Firmware Search vendor "Mitsubishielectric" for product "R16psfcpu Firmware" | <= 06 Search vendor "Mitsubishielectric" for product "R16psfcpu Firmware" and version " <= 06" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R16psfcpu Search vendor "Mitsubishielectric" for product "R16psfcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R32psfcpu Firmware Search vendor "Mitsubishielectric" for product "R32psfcpu Firmware" | <= 06 Search vendor "Mitsubishielectric" for product "R32psfcpu Firmware" and version " <= 06" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R32psfcpu Search vendor "Mitsubishielectric" for product "R32psfcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | R120psfcpu Firmware Search vendor "Mitsubishielectric" for product "R120psfcpu Firmware" | <= 06 Search vendor "Mitsubishielectric" for product "R120psfcpu Firmware" and version " <= 06" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | R120psfcpu Search vendor "Mitsubishielectric" for product "R120psfcpu" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71en71 Firmware Search vendor "Mitsubishielectric" for product "Rj71en71 Firmware" | <= 47 Search vendor "Mitsubishielectric" for product "Rj71en71 Firmware" and version " <= 47" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71en71 Search vendor "Mitsubishielectric" for product "Rj71en71" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71gf11-t2 Firmware Search vendor "Mitsubishielectric" for product "Rj71gf11-t2 Firmware" | <= 47 Search vendor "Mitsubishielectric" for product "Rj71gf11-t2 Firmware" and version " <= 47" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71gf11-t2 Search vendor "Mitsubishielectric" for product "Rj71gf11-t2" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rj72gf15-t2 Firmware Search vendor "Mitsubishielectric" for product "Rj72gf15-t2 Firmware" | <= 07 Search vendor "Mitsubishielectric" for product "Rj72gf15-t2 Firmware" and version " <= 07" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Rj72gf15-t2 Search vendor "Mitsubishielectric" for product "Rj72gf15-t2" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71gp21-sx Firmware Search vendor "Mitsubishielectric" for product "Rj71gp21-sx Firmware" | <= 47 Search vendor "Mitsubishielectric" for product "Rj71gp21-sx Firmware" and version " <= 47" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71gp21-sx Search vendor "Mitsubishielectric" for product "Rj71gp21-sx" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71gp21s-sx Firmware Search vendor "Mitsubishielectric" for product "Rj71gp21s-sx Firmware" | <= 47 Search vendor "Mitsubishielectric" for product "Rj71gp21s-sx Firmware" and version " <= 47" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71gp21s-sx Search vendor "Mitsubishielectric" for product "Rj71gp21s-sx" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71c24-r2 Firmware Search vendor "Mitsubishielectric" for product "Rj71c24-r2 Firmware" | <= 47 Search vendor "Mitsubishielectric" for product "Rj71c24-r2 Firmware" and version " <= 47" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71c24-r2 Search vendor "Mitsubishielectric" for product "Rj71c24-r2" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71c24-r4 Firmware Search vendor "Mitsubishielectric" for product "Rj71c24-r4 Firmware" | <= 47 Search vendor "Mitsubishielectric" for product "Rj71c24-r4 Firmware" and version " <= 47" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71c24-r4 Search vendor "Mitsubishielectric" for product "Rj71c24-r4" | - | - |
Safe
|
| Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71gn11-t2 Firmware Search vendor "Mitsubishielectric" for product "Rj71gn11-t2 Firmware" | <= 11 Search vendor "Mitsubishielectric" for product "Rj71gn11-t2 Firmware" and version " <= 11" | - |
Affected
| in | Mitsubishielectric Search vendor "Mitsubishielectric" | Rj71gn11-t2 Search vendor "Mitsubishielectric" for product "Rj71gn11-t2" | - | - |
Safe
|